Privacy Policy — yyyph

1. Introduction

Welcome to the yyyph Privacy Policy. yyyph ("yyyph", "we", "us", "our") is the operator of the online casino and sports betting platform accessible at https://yyyph.ws, serving Filipino players across the Philippines — from Metro Manila and Cebu to Davao, Quezon City, Makati, and beyond.

We are committed to protecting the privacy and personal data of every player, visitor, and user ("you", "your") who interacts with the yyyph platform. This Privacy Policy explains in clear and transparent terms what personal data we collect, the purposes for which we use it, how we store and protect it, who we may share it with, and what rights you have over your own information.

This Privacy Policy forms part of yyyph's overall Terms & Conditions. It applies to all data collected through the yyyph website, any associated mobile-optimised interfaces, live chat support, and other communication channels operated by yyyph.

2. Data Controller

yyyph acts as the data controller in respect of all personal data collected through the yyyph platform. As the data controller, yyyph determines the purposes for which and the manner in which any personal data is processed.

yyyph operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR) and in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

yyyph is registered with the National Privacy Commission (NPC) of the Philippines as required under RA 10173. All data processing activities are conducted in accordance with the NPC's guidelines and circulars applicable to personal information controllers operating in the online gaming and entertainment sector.

3. Personal Data We Collect

yyyph collects only the personal data that is necessary for the lawful operation of our platform and to deliver a high-quality, secure experience to Filipino players. The categories of personal data we may collect include:

We do not intentionally collect sensitive personal information such as health data, religious beliefs, or political views unless this is required by a specific legal obligation. Where such data is provided voluntarily (for example, in a responsible gaming context relating to mental health), it will be handled with heightened protection.

4. How We Collect Your Data

yyyph collects personal data through the following means:

• Direct Registration: When you create a yyyph account, you provide your name, email address, date of birth, and contact details directly through the registration form.
• KYC Verification: When you submit identity documents to verify your account before your first withdrawal or when requested by our compliance team.
• Deposits & Withdrawals: When you conduct financial transactions through GCash, PayMaya, BPI, BDO, or Metrobank, relevant payment data is collected to process those transactions.
• Platform Usage: Automatically collected as you browse and use the yyyph website, including through cookies, web beacons, and similar tracking technologies (see Section 7).
• Customer Support: When you contact us via live chat or email, data contained in those communications is collected and retained for support and quality purposes.
• Third-Party Providers: In some cases, data may be received from identity verification services, payment processors, or fraud detection partners engaged by yyyph to support platform operations.

5. Purpose & Legal Basis for Processing

yyyph processes your personal data only where a valid legal basis exists under the Philippine Data Privacy Act of 2012. The primary legal bases on which yyyph relies are:

• Contract Performance: Processing necessary to fulfil our obligations under the Terms & Conditions you have agreed to — including operating your account, processing deposits and withdrawals, and providing access to games.
• Legal Compliance: Processing required to comply with PAGCOR regulations, anti-money laundering (AML) laws, the Data Privacy Act, and other applicable Philippine laws and regulatory directives.
• Legitimate Interests: Processing conducted for yyyph's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services — where these interests are not overridden by your rights.
• Consent: Where required by law or where no other legal basis applies, yyyph will seek your explicit consent before processing your personal data, particularly for direct marketing communications.

6. Data Sharing & Disclosure

yyyph does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. However, we may share your personal data with the following categories of recipients where strictly necessary:

• PAGCOR and Regulatory Authorities: yyyph is obligated to share player data with PAGCOR and other competent Philippine regulatory bodies upon request or as required by applicable law, including for audit and compliance purposes.
• Law Enforcement Agencies: Where required by court order, subpoena, or applicable Philippine law, yyyph will disclose personal data to law enforcement agencies. This includes disclosures required under the Anti-Money Laundering Act (AMLA) and the Terrorism Financing Prevention and Suppression Act.
• Payment Processors: Financial data is shared with licensed payment service providers — including GCash, PayMaya, BPI, BDO, and Metrobank — strictly to the extent necessary to process your deposits and withdrawals.
• Identity Verification Providers: KYC documents and identity data may be shared with licensed third-party identity verification services engaged by yyyph to conduct due diligence checks in compliance with PAGCOR's KYC requirements.
• Game Technology Providers: Usage data may be shared with the game studios and technology providers who supply games to the yyyph platform, for the purpose of game operation and fairness certification.
• IT and Security Service Providers: Technical and usage data may be accessible to carefully vetted IT infrastructure, cloud hosting, and cybersecurity service providers that support the operation of the yyyph platform under strict data processing agreements.

All third parties with whom yyyph shares personal data are required to handle that data in accordance with applicable Philippine data privacy laws and are prohibited from using it for any purpose beyond what is specified in their engagement with yyyph.

7. Cookies & Tracking Technologies

yyyph uses cookies and similar tracking technologies to enhance your experience on the platform, maintain your session security, and gather analytical insights that help us improve our services.

The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the operation of the yyyph website. These include session management cookies that keep you logged in and security cookies that protect against fraudulent activity. These cannot be disabled without impairing your ability to use the platform.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how players use the yyyph platform — such as pages visited, time spent, and error messages encountered. This data helps us improve platform performance and user experience.
• Functional Cookies: Allow yyyph to remember your preferences (such as preferred language or lobby layout) to deliver a more personalised experience.
• Marketing Cookies: Used, with your consent, to deliver relevant promotional content. These are only set if you have opted in to marketing communications from yyyph.

8. Data Retention

yyyph retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal, regulatory, and operational requirements. Key retention periods include:

• Active Account Data: Retained for the duration of your account's existence on the yyyph platform plus a minimum of five (5) years following account closure, as required by PAGCOR regulations and Philippine AML laws.
• Financial Transaction Records: Retained for a minimum of ten (10) years in compliance with the Anti-Money Laundering Act of the Philippines and PAGCOR's record-keeping requirements for licensed online gaming operators.
• KYC Verification Documents: Retained for the duration of your account plus five (5) years post-closure, or longer where required by specific regulatory directions.
• Customer Support Records: Retained for three (3) years from the date of your last interaction with yyyph's support team, for dispute resolution and quality assurance purposes.
• Marketing Data: Retained until you withdraw your marketing consent, at which point marketing-related data will be promptly deleted or anonymised.

When personal data is no longer required for any lawful purpose, yyyph will securely delete, destroy, or anonymise it in accordance with industry best practices and NPC guidelines on data disposal.

9. Data Security

yyyph takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures designed to protect your information against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the yyyph platform.
• Encrypted storage of sensitive data including passwords (hashed and salted), financial records, and KYC documents.
• Strict role-based access controls ensuring that only authorised yyyph personnel with a legitimate need can access player data.
• Regular security audits, penetration testing, and vulnerability assessments of the yyyph platform and supporting infrastructure.
• 24/7 monitoring of platform systems for suspicious activity, intrusion attempts, and anomalous behaviour patterns.
• Secure, access-controlled data centres with physical security measures in place.

In the event of a personal data breach, yyyph will act swiftly in accordance with the Data Privacy Act's breach notification requirements, notifying the NPC within 72 hours of becoming aware of a qualifying breach, and informing affected players without undue delay where the breach poses a high risk to their rights and freedoms.

10. Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by yyyph:

• Right to be Informed: The right to be notified of the nature and extent of personal data being processed, the purpose of processing, and the identity of the data controller — which this Privacy Policy fulfils.
• Right to Access: The right to request a copy of the personal data that yyyph holds about you, as well as information about how it is being processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held by yyyph.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to yyyph's legal obligations to retain certain records.
• Right to Object: The right to object to the processing of your personal data on grounds relating to your particular situation, particularly where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Damages: The right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe yyyph has violated your data privacy rights.

To exercise any of these rights, please contact the yyyph Data Protection Officer through the support channels listed in Section 14. We will respond to all legitimate requests within thirty (30) days of receipt, in accordance with NPC guidelines. Requests may be subject to identity verification before processing.

11. Minors & Age Restriction

yyyph is an online gaming platform intended exclusively for adults aged 21 years and above, as required under PAGCOR regulations governing online gambling in the Philippines. yyyph does not knowingly collect, process, or retain personal data from any person under the age of 21.

Parents and guardians are strongly encouraged to use parental control software and internet filtering tools to prevent minors from accessing gambling websites, including yyyph. If you believe a minor may have registered on the yyyph platform, please contact our support team immediately.

12. International Data Transfers

yyyph primarily processes and stores your personal data within the Philippines. In some cases, it may be necessary to transfer personal data to third-party service providers or technology partners whose systems are located outside the Philippines — for example, cloud infrastructure providers or internationally operated game studios supplying content to the yyyph platform.

Where such international transfers occur, yyyph ensures that appropriate safeguards are in place in accordance with the Data Privacy Act and the NPC's guidelines on cross-border data flows. These safeguards may include:

• Contractual clauses that impose data protection obligations on the recipient party equivalent to those applicable in the Philippines.
• Transfers only to jurisdictions with an adequate level of data protection as recognised by the NPC.
• Use of binding corporate rules where applicable within yyyph's corporate group.

By using the yyyph platform and consenting to this Privacy Policy, you acknowledge that your personal data may be transferred internationally where necessary for platform operations, subject always to the safeguards described above.

13. Changes to This Privacy Policy

yyyph reserves the right to update, amend, or revise this Privacy Policy at any time to reflect changes in applicable law, PAGCOR directives, NPC guidelines, our data practices, or the services we offer. All updates will be posted on this page with a revised "last updated" date.

Where changes are material — for example, changes to the types of data we collect, the purposes for which we use it, or your rights — yyyph will notify you through one or more of the following methods: a prominent notice on the yyyph platform, an email to your registered email address, or a notification upon your next login.

Your continued use of the yyyph platform following the publication of any updated Privacy Policy constitutes your acceptance of those updates. We encourage all players to review this Privacy Policy periodically to stay informed of how yyyph is protecting and managing your personal data.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by yyyph, please reach out to us through the following channels:

• Data Protection Officer — Email: [email protected] — please include "Data Privacy Request" in the subject line of your email so we can route your enquiry to the DPO promptly.
• Live Chat: Available 24 hours a day, 7 days a week, directly on the yyyph platform. Select "Privacy & Data" from the support menu for fastest routing.

yyyph is committed to resolving all data privacy enquiries fairly, transparently, and within the timelines prescribed by the Data Privacy Act and NPC regulations. We value your trust and take every privacy concern seriously.