This Privacy Policy explains how hotph collects, uses, stores, shares, and protects the personal information of players and visitors in accordance with the Data Privacy Act of 2012 (Republic Act 10173) and all applicable PAGCOR regulatory requirements.
Last Updated: 1 June 2026 · Version 3.1A plain-English summary of our key privacy commitments. The full legal text follows below.
All data transmitted between your device and hotph's servers — including login credentials, payment details, and personal information — is protected by industry-standard 256-bit SSL/TLS encryption. Your data is never sent in plain text.
hotph stores personal data on secured servers with access restricted to authorized personnel only. We apply strict access controls, audit logging, and regular security reviews to prevent unauthorized access to player data.
Under RA 10173, you have the right to access, correct, delete, and object to the processing of your personal data held by hotph. You can exercise these rights by contacting our Data Protection Officer at any time.
hotph does not sell your personal data to third parties. Data is shared only with carefully vetted service providers (payment processors, KYC verification providers, game suppliers) strictly as needed to deliver platform services.
hotph retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by Philippine law, PAGCOR regulations, and AML compliance obligations. Data is securely deleted at end-of-retention.
hotph is registered with the National Privacy Commission (NPC) of the Philippines as required under the Data Privacy Act. Our Data Protection Officer (DPO) oversees all privacy compliance activities and handles data subject requests.
Important: By registering for and using a hotph account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please do not register for or continue to use the hotph platform.
hotph ("the Company," "we," "us," or "our") operates the online gambling and sports betting platform accessible at hotph.org (the "Platform"). hotph is committed to protecting the privacy and personal data of all Filipino players, registered account holders, and visitors to the Platform.
This Privacy Policy ("Policy") describes in detail what personal data hotph collects, the purposes for which it is processed, with whom it is shared, how long it is retained, and the rights you have as a data subject under the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its implementing rules and regulations promulgated by the National Privacy Commission (NPC) of the Philippines.
This Policy applies to all personal data collected through the hotph Platform — including through account registration, login and gameplay activity, financial transactions, customer support communications, and automated data collection technologies such as cookies and session logging. It applies to all players in the Philippines, including those accessing the Platform from Metro Manila, Cebu, Davao, Quezon City, Makati, and all other Philippine locations.
The personal data controller responsible for your data is hotph, operating the Platform at hotph.org. hotph has designated a Data Protection Officer (DPO) in accordance with Section 21 of the Data Privacy Act.
You may contact hotph's Data Protection Officer directly for any data privacy matters, including requests to exercise your data subject rights, by emailing: [email protected] with the subject line "Data Privacy Request – [Your Name]." All data privacy inquiries will receive a response within ten (10) business days.
hotph is registered as a personal information controller with the National Privacy Commission of the Philippines as required under RA 10173.
hotph collects the following categories of personal data from players and platform visitors:
| Category | Specific Data Points |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (SSS, PhilSys, Passport, Driver's License), photograph from ID documents |
| Contact Data | Email address, mobile phone number, residential address (including city and barangay) |
| Account Data | Username, encrypted password, account preferences, notification settings, loyalty tier status |
| Financial Data | GCash or PayMaya registered mobile number (last 4 digits only), bank account name and number (masked), deposit and withdrawal transaction records, balance history |
| Gaming Activity Data | Game sessions played, bet amounts, game outcomes, session duration, sports betting selections, bingo room participation |
| Technical Data | IP address, device type and model, operating system, browser type, screen resolution, session timestamps, geolocation data (approximate) |
| Communications Data | Live chat transcripts, email correspondence with hotph support, complaint records, responsible gaming tool activations |
| KYC/AML Data | Source of funds declarations, enhanced due diligence documentation, politically exposed person (PEP) screening results |
Sensitive Personal Information: hotph may collect sensitive personal information as defined under RA 10173, including financial account details and government-issued ID information, strictly for KYC verification and AML compliance purposes. This data is subject to enhanced security measures and stricter access controls.
hotph collects personal data through the following means:
Information you provide directly when you register for a hotph account, complete the KYC verification process, make a deposit or withdrawal, contact customer support, or respond to promotions. This includes all information entered into forms, chat interfaces, or uploaded document verification tools on the Platform.
Technical and behavioral data collected automatically as you use the Platform, including through cookies, session tracking technologies, server logs, and analytics systems. This data helps hotph understand how the Platform is used, detect fraudulent activity, and maintain platform security. See Section 11 for details on cookie use.
hotph may receive personal data from third parties including:
hotph processes your personal data for the following specific purposes:
hotph processes your personal data on the following legal bases as provided under the Data Privacy Act of 2012:
hotph does not sell, rent, or trade your personal data. hotph shares personal data only as described below:
hotph shares personal data with carefully selected third-party service providers who assist in delivering Platform services. These include identity verification providers, payment processors (including GCash and PayMaya), game content suppliers, data hosting providers, and customer support technology providers. All service providers are bound by data processing agreements that restrict them to processing data only as instructed by hotph and in compliance with RA 10173.
hotph will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine regulatory and law enforcement authorities where required by law, court order, or regulatory direction. hotph complies fully with all lawful requests for player data from competent Philippine authorities.
In the event of a merger, acquisition, or sale of all or part of hotph's business, personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and any changes to this Privacy Policy that result from it.
hotph will not share your personal data with third parties for their own marketing purposes without your explicit, specific, and separately obtained consent.
Some of hotph's service providers (particularly game content suppliers and technology infrastructure providers) may be located outside the Philippines. Where personal data is transferred to recipients in other jurisdictions, hotph ensures that such transfers are conducted in compliance with Section 21 of the Data Privacy Act — specifically, that the receiving country provides an adequate level of protection for personal data comparable to Philippine standards, or that appropriate contractual safeguards (such as standard contractual clauses approved by the NPC) are in place.
hotph will not transfer your data to jurisdictions that do not provide adequate data protection without first obtaining your explicit consent, unless required to do so by law or regulatory obligation.
hotph retains personal data for the minimum period necessary to fulfill the purposes described in this Policy, subject to applicable legal and regulatory retention requirements:
| Data Category | Retention Period |
|---|---|
| Account and identity data (active accounts) | Duration of account + 5 years after closure |
| Financial transaction records | 10 years (AMLC requirement) |
| KYC documentation | 5 years after account closure or last transaction |
| Gaming activity logs | 5 years from session date |
| Customer support communications | 3 years from last interaction |
| Technical and device logs | 12 months on a rolling basis |
| Marketing preferences and consent records | Until consent is withdrawn + 1 year |
| Self-exclusion records | Permanent (cannot be deleted) |
At the end of the applicable retention period, personal data is securely deleted or anonymized such that it can no longer be linked to an identifiable individual. Backup copies are deleted within 90 days of the primary deletion.
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by hotph:
To exercise any of these rights, contact hotph's Data Protection Officer by emailing [email protected] with the subject line "Data Subject Rights Request." hotph will respond within ten (10) business days and fulfill verified requests within thirty (30) days, consistent with NPC guidelines.
The hotph Platform uses cookies and similar tracking technologies to enable essential Platform functionality, maintain session security, and analyze Platform usage. The main types of cookies used by hotph are:
hotph does not use third-party advertising cookies or behavioral tracking cookies for the purpose of displaying third-party advertisements. You may manage cookie preferences through your browser settings; however, disabling essential cookies may impair your ability to use the Platform.
hotph implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:
Data Breach Notification: In the event of a personal data breach that is likely to result in serious harm to you, hotph will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected individuals within a reasonable period thereafter, consistent with the requirements of RA 10173 and NPC Circular 16-03.
The hotph Platform is strictly intended for individuals who are at least twenty-one (21) years of age, as required by PAGCOR regulations governing online gambling in the Philippines. hotph does not knowingly collect personal data from any person under 21 years of age.
If hotph discovers that personal data has been collected from a person under 21 years of age, the relevant account will be immediately closed, all data collected will be deleted, and any funds deposited by the underage individual will be returned to the source payment method following an identity verification process. Parents or guardians who believe their minor child may have registered for a hotph account should contact our support team immediately.
hotph reserves the right to update this Privacy Policy at any time. When material changes are made, hotph will notify registered account holders by email to their registered address and display a prominent notice on the Platform at least seven (7) days before the updated Policy takes effect.
The "Last Updated" date at the top of this Policy indicates when it was most recently revised. We encourage you to review this Policy periodically. For non-material clarifications or editorial updates, the revised Policy will be published without prior notice, and the updated date will be revised accordingly.
Continued use of the hotph Platform after the effective date of any updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree to the updated Policy, you should discontinue use of the Platform and may close your account by contacting hotph support.
For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact hotph through the following channels:
hotph aims to resolve all data privacy inquiries promptly, professionally, and in full compliance with the Data Privacy Act of 2012 and NPC regulations. Our DPO will acknowledge all formal requests within two (2) business days and provide a substantive response within ten (10) business days.
Your personal data is protected by Philippine law, PAGCOR regulation, and hotph's own rigorous security standards.
RA 10173 compliant · 256-bit SSL · PAGCOR-regulated · For players 21 years and above only