Privacy Policy — hawkplay888 Data Commitment

This Privacy Policy ("Policy") describes how hawkplay888 ("we," "us," "our," or "the Company") collects, uses, stores, shares, and protects the personal information of users ("you," "your," or "the Player") who access or use the hawkplay888 website, mobile platform, and all associated services (collectively, the "Platform").

hawkplay888 is committed to protecting the privacy and security of your personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as all other applicable data protection laws and regulations in the Philippines.

By registering an account, accessing the Platform, or using any of our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.

hawkplay888 collects personal data through various means, including information you provide directly, data generated through your use of the Platform, and information obtained from third-party sources where permitted by law. The categories of personal data we collect include:

Information You Provide Directly:

• Identity Data: Full legal name, date of birth, gender, and nationality as provided during registration or KYC verification.
• Contact Data: Philippine mobile number, email address, and residential address (including city, province, and postal code).
• Identity Verification Documents: Copies of government-issued IDs such as PhilSys National ID, passport, driver's license, UMID, SSS ID, or Voter's ID submitted for KYC purposes.
• Financial Data: GCash account details, PayMaya account details, bank account information (BPI, BDO, Metrobank, or other approved banks), and transaction history.
• Account Credentials: Username and encrypted password (we never store passwords in plain text).
• Communications: Records of your interactions with our customer support team, including live chat transcripts, emails, and support tickets.

Data Generated Through Platform Use:

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, games played, session duration, click patterns, and navigation paths within the Platform.
• Transaction Data: Deposit and withdrawal amounts, dates, payment methods, game wagers, wins, losses, and bonus usage history.
• Location Data: General geographic location derived from your IP address for compliance and fraud prevention purposes.

Data From Third-Party Sources:

• Identity verification data from accredited KYC service providers.
• Fraud prevention and anti-money laundering screening data from compliance partners.
• Payment verification data from GCash, PayMaya, and banking partners.

hawkplay888 uses your personal data only for legitimate, specified purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your data are:

hawkplay888 will never use your personal data for purposes beyond those listed above without first obtaining your explicit consent or as otherwise required by applicable law.

Under the Philippine Data Privacy Act of 2012, hawkplay888 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your account, process transactions, and deliver our gaming services.
• Legal Obligation: Processing is required to comply with applicable laws, including anti-money laundering regulations, KYC requirements, and gaming regulatory obligations.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, and improving our services, provided these interests are not overridden by your data protection rights.
• Consent: For certain processing activities — such as sending marketing communications or using non-essential cookies — we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

hawkplay888 does not sell, rent, or trade your personal information to third parties for their own commercial purposes. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, and other approved payment processors, solely for the purpose of processing your deposits and withdrawals.
• KYC & Identity Verification Partners: Accredited third-party identity verification services used to confirm your identity and age in compliance with regulatory requirements.
• Fraud Prevention & AML Compliance Partners: Specialist compliance service providers used to screen transactions and accounts for fraud, money laundering, and other prohibited activities.
• Technology & Infrastructure Providers: Cloud hosting, data storage, and platform infrastructure providers who process data on our behalf under strict data processing agreements.
• Regulatory Authorities: Government agencies, law enforcement bodies, and gaming regulators in the Philippines, where disclosure is required by law or court order.
• Professional Advisors: Legal counsel, auditors, and other professional advisors, subject to confidentiality obligations.

All third parties with whom hawkplay888 shares personal data are required to implement appropriate technical and organizational security measures and to process data only in accordance with our instructions and applicable law.

hawkplay888 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and support security functions. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies and security tokens. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences, such as language settings and game display options, to provide a more personalized experience.
• Analytics Cookies: Collect anonymized data about how players use the Platform, helping us identify areas for improvement. This data does not identify you personally.
• Marketing Cookies: Used to deliver relevant promotional content based on your interests and Platform activity. These are only activated with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For strictly necessary cookies, no consent is required as they are essential to service delivery.

hawkplay888 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine financial regulations.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Customer Support Records: Retained for three (3) years from the date of the last interaction.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications.
• Technical & Usage Data: Retained for up to two (2) years for analytics and security purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures.

hawkplay888 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal and financial data is encrypted at rest using AES-256 encryption.
• Access Controls: Strict role-based access controls ensure that only authorized personnel can access personal data, and only to the extent required for their specific job functions.
• Two-Factor Authentication (2FA): Available for player accounts to provide an additional layer of security beyond username and password.
• Regular Security Audits: Our systems undergo regular penetration testing and security audits by independent third-party security specialists.
• Incident Response: We maintain a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify you and the National Privacy Commission (NPC) within the timeframes required by law.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by hawkplay888:

• Right to Be Informed: The right to be informed about how your personal data is collected, used, and processed — which this Policy fulfills.
• Right of Access: The right to request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request.

The hawkplay888 Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. hawkplay888 does not knowingly collect, process, or store personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under the age of 21 without appropriate verification, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on our Platform, please contact us immediately at [email protected].

hawkplay888 primarily stores and processes your personal data within the Philippines. In certain circumstances, your data may be transferred to, stored in, or processed by systems located outside the Philippines — for example, when using cloud infrastructure providers or international compliance screening services.

Where such transfers occur, hawkplay888 ensures that appropriate safeguards are in place to protect your personal data, including:

• Entering into data processing agreements with all international service providers that include standard contractual clauses approved by the National Privacy Commission.
• Transferring data only to countries or organizations that provide an adequate level of data protection as recognized under Philippine law.
• Implementing additional technical safeguards, such as encryption, for all cross-border data transfers.

The hawkplay888 Platform may contain references to third-party services, such as payment providers. hawkplay888 is not responsible for the privacy practices or content of any third-party services. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the Platform.

This Policy applies solely to personal data collected and processed by hawkplay888 through the Platform. It does not apply to data collected by third parties through their own platforms or services.

hawkplay888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When material changes are made, we will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how we protect your personal data. Your continued use of the Platform following the posting of any changes constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way hawkplay888 handles your personal data, please contact our Data Protection Officer:

• Data Protection Officer Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 through the hawkplay888 Platform.

We aim to respond to all privacy-related inquiries within thirty (30) days. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC), the regulatory body responsible for enforcing the Data Privacy Act of 2012.