yyyyph Privacy Policy

This Privacy Policy ("Policy") is issued by yyyyph ("yyyyph," "we," "us," "our"), the operator of the online gaming platform accessible at yyyyph.org. This Policy explains how we collect, use, store, share, and protect personal data that we receive from players, visitors, and prospective users ("you," "your") in connection with your use of the yyyyph platform, including its casino games, sportsbook, bingo, sabong, live dealer tables, and all related services.

yyyyph is a PAGCOR-licensed online gaming operator serving Filipino players across the Philippines, including Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond. As a licensed operator, yyyyph is subject to the data protection obligations imposed by Philippine law and PAGCOR's regulatory framework.

This Privacy Policy should be read alongside yyyyph's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. If you do not agree to the terms of this Policy, you must discontinue use of the yyyyph platform and close your account if one has already been opened.

yyyyph collects different categories of personal data depending on the nature of your interaction with the platform. The categories below describe the full scope of information that may be collected from or about you.

yyyyph does not intentionally collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance. We do not collect data relating to political opinions, religious beliefs, or health information unless voluntarily provided in the context of a responsible gaming request.

yyyyph collects personal data through the following channels:

3.1 Directly From You

• When you create an account on yyyyph, including the registration form and mobile OTP verification.
• When you submit KYC documents for identity verification.
• When you make a deposit or request a withdrawal via GCash, PayMaya, BPI, BDO, Metrobank, or card.
• When you contact our customer support team via live chat or email.
• When you update your account settings, change payment methods, or submit responsible gaming requests.
• When you participate in promotions, surveys, or feedback forms.

3.2 Automatically Through Platform Use

• Device identifiers, IP addresses, and geolocation data collected automatically when you visit yyyyph.org or use the platform.
• Gaming activity logs generated as you play slots, live dealer games, bingo, sabong, Tower, Insect Master, and other games.
• Cookies, pixel tags, and local storage objects placed on your browser or device — see Section 07 for full details.
• Session replay and analytics tools used to understand how players navigate and interact with the platform.

3.3 From Third Parties

• Identity verification data returned by our KYC service provider following document authentication.
• Payment confirmation data from GCash, PayMaya, and partnered Philippine banks upon completion of transactions.
• Fraud prevention and anti-money laundering data from licensed screening services, as required under Philippine AML regulations.
• Data shared by PAGCOR or other regulatory bodies in connection with licensing compliance checks.

yyyyph uses personal data only for specified, legitimate purposes. The table below summarizes the primary purposes for which your data is processed and the corresponding legal basis under RA 10173.

yyyyph does not use automated decision-making — including profiling — in ways that produce legal or similarly significant effects on you without providing appropriate human oversight and the opportunity to contest the outcome.

Under the Philippine Data Privacy Act of 2012 (RA 10173), yyyyph processes your personal data on one or more of the following lawful bases:

• Consent: You have given clear, informed consent to the processing of your personal data for one or more specific purposes — for example, receiving marketing communications or agreeing to this Privacy Policy during account registration.
• Contractual Necessity: Processing is necessary for the performance of the contract between you and yyyyph, including operating your account, processing transactions, and delivering gaming services.
• Legal Obligation: Processing is required to comply with applicable Philippine law, including the Anti-Money Laundering Act (RA 9160 as amended), PAGCOR licensing requirements, and the Data Privacy Act itself.
• Legitimate Interests: Processing is necessary for yyyyph's legitimate interests — such as fraud prevention, platform security, and responsible gaming monitoring — provided those interests are not overridden by your rights and freedoms.
• Vital Interests: In limited circumstances, processing may be necessary to protect your vital interests, such as where a responsible gaming concern requires urgent intervention.

yyyyph does not sell, rent, or trade your personal data to third-party advertisers or data brokers. We share personal data only in the following limited and controlled circumstances:

6.1 Service Providers

yyyyph engages trusted third-party service providers who process personal data on our behalf and under our instructions, including:

• KYC and identity verification providers to authenticate documents and confirm eligibility.
• Payment processors and financial institutions (GCash, PayMaya, BPI, BDO, Metrobank, and card schemes) to facilitate deposits and withdrawals.
• Cloud hosting and data storage providers operating infrastructure used by the yyyyph platform.
• Fraud detection and AML screening services that monitor transaction patterns for suspicious activity.
• Customer support platform providers that host our live chat and ticketing systems.

All third-party service providers are bound by data processing agreements that prohibit them from using your personal data for any purpose beyond the specific service they provide to yyyyph.

6.2 Regulatory & Legal Disclosure

yyyyph may disclose your personal data to government authorities, regulatory bodies, or law enforcement agencies where required by law or in response to a valid legal order. This includes disclosures to:

• The Philippine Amusement and Gaming Corporation (PAGCOR) in connection with licensing audits and compliance checks.
• The Anti-Money Laundering Council (AMLC) as required under Philippine AML law.
• The National Privacy Commission (NPC) in connection with data breach notifications or investigation requests.
• Philippine courts or law enforcement agencies pursuant to a lawful order, warrant, or subpoena.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of yyyyph's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the applicable privacy terms governing your data going forward.

yyyyph uses cookies, web beacons, pixel tags, and similar technologies to recognize your device, maintain your session, and analyze how the platform is used. Below is a summary of the cookie types deployed on yyyyph.org:

Strictly necessary cookies cannot be disabled as they are essential to platform operation. Functional, analytics, and marketing cookies can be managed through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or receive a notification before a cookie is placed. Note that disabling certain cookies may affect the performance of specific platform features.

yyyyph retains personal data only for as long as necessary to fulfill the purposes described in this Policy, comply with applicable legal obligations, and resolve disputes. The following retention periods apply:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years after account closure, as required by PAGCOR licensing conditions and Philippine AML regulations.
• KYC documentation: Retained for a minimum of five (5) years from the date of submission, in compliance with the Anti-Money Laundering Act and PAGCOR requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming history: Retained for a minimum of three (3) years from the date of each gaming session.
• Customer support communications: Retained for two (2) years from the date of the last communication in a support thread.
• Marketing preference records: Retained for the duration of your account or until you withdraw consent, whichever comes first.
• Analytics and technical data: Retained in aggregated, anonymized form indefinitely after the individual-level data is purged at the end of the applicable retention period.

When personal data is no longer required for any legitimate purpose, yyyyph will securely delete or anonymize it in accordance with industry-standard data destruction procedures.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by yyyyph:

• Right to Be Informed: You have the right to know whether yyyyph holds personal data about you, what data is held, and how it is being used — as described in this Policy.
• Right to Access: You may request a copy of the personal data yyyyph holds about you, including your account information, gaming history, and KYC records.
• Right to Rectification: If any personal data held by yyyyph is inaccurate, incomplete, or outdated, you have the right to request correction. For account details, you may update many fields directly through your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer needed for the purposes for which it was collected, subject to yyyyph's legal retention obligations under PAGCOR licensing and AML regulations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests.
• Right to Data Portability: Where technically feasible, you may request that yyyyph provide your personal data in a structured, commonly used, and machine-readable format.
• Right to File a Complaint: If you believe yyyyph has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

yyyyph implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

• Encryption: All data transmitted between your device and yyyyph.org is encrypted using TLS 1.3. Personal data and KYC documents stored on our servers are encrypted at rest using AES-256.
• Access Controls: Access to personal data within yyyyph is restricted on a strict need-to-know basis. Employee access to player data is logged, monitored, and regularly audited.
• Two-Factor Authentication: SMS OTP-based 2FA is available and encouraged for all player accounts to prevent unauthorized access.
• Penetration Testing: yyyyph's platform undergoes regular penetration testing and vulnerability assessments by independent security firms.
• Fraud Monitoring: Automated systems continuously monitor account activity and transactions for patterns indicative of fraud, account takeover, or money laundering.
• Data Breach Response: yyyyph maintains an incident response plan aligned with the NPC's mandatory breach notification requirements. In the event of a data breach affecting your rights and freedoms, you will be notified within the timeframe prescribed by Philippine law.

While yyyyph takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying yyyyph immediately if you suspect any unauthorized access to your account.

The yyyyph platform is strictly intended for adults aged 21 years and older, in accordance with PAGCOR regulations governing online casino and gaming services in the Philippines. yyyyph does not knowingly collect personal data from individuals under 21 years of age.

All accounts are subject to mandatory KYC age verification before real-money gaming access is granted. Where yyyyph discovers that an account has been created by or on behalf of a person under 21 years of age, the account will be immediately suspended, any balance forfeited in accordance with PAGCOR guidelines, and all personal data associated with the account deleted to the extent permitted by law.

yyyyph may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or the evolution of our platform and services. When material changes are made — particularly those that affect your rights or the way sensitive data is processed — yyyyph will notify you via your registered email address or through a prominent notice displayed on the platform prior to the change taking effect.

The "Last Updated" date at the top of this page always reflects the most recent revision. We encourage you to review this Policy periodically, particularly before making new deposits or participating in new platform features. Your continued use of the yyyyph platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

Where a change significantly alters how yyyyph processes personal data for existing purposes — and where consent is the legal basis for that processing — we will seek your fresh consent before the change takes effect.

yyyyph has designated a Data Protection Officer (DPO) as required under the Philippine Data Privacy Act. The DPO is responsible for overseeing yyyyph's compliance with RA 10173 and its Implementing Rules and Regulations, and serves as the primary point of contact for all data privacy matters.

• Data Controller: yyyyph (yyyyph.org)
• DPO Contact: [email protected] — please use the subject line "Data Privacy Request" for all DPO inquiries.
• Support Availability: 24/7 in English and Filipino via live chat (inside your account dashboard) and email.
• Response Time: Data rights requests will be acknowledged within 3 business days and fully resolved within 15 working days as required by Philippine law.
• NPC Complaints: If you are unsatisfied with yyyyph's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines via the official NPC channels.

For general platform support, account queries, or responsible gaming assistance, our full customer support team is available 24/7. Live chat is accessible after yyyyph Login through your account dashboard.