hypbet Privacy Policy

1 Information We Collect

1.1 hypbet collects the following categories of personal information from players during account registration, KYC verification, and normal platform use:

Account Registration Data

• Full legal name (as appears on government-issued identification)
• Date of birth
• Residential address (street, barangay, city/municipality, province, postal code)
• Mobile phone number
• Email address
• Username and password (passwords are stored in hashed and salted format)
• Preferred language and currency

Know Your Customer (KYC) Verification Data

• Government-issued identification documents (Philippine passport, driver's licence, UMID, PhilSys National ID, PRC ID, voter's ID, SSS ID)
• Proof of address documents (utility bills, bank statements, barangay certificates issued within the past three months)
• Photographs or selfies for identity verification purposes
• Proof of ownership of payment methods used to fund the account (bank account statements, e-wallet screenshots)

Financial Transaction Data

• Deposit amounts, dates, times, and payment methods used (GCash, Maya, bank transfers, cryptocurrency wallet addresses)
• Withdrawal requests, amounts, dates, processing times, and destination accounts
• Transaction identifiers, reference numbers, and payment processor metadata
• Account balance history and currency conversion records where applicable

Gaming Activity and Usage Data

• Games played, bets placed, wager amounts, game outcomes, and winnings
• Session durations, login times, logout times, and IP addresses used to access the platform
• Device information (device type, operating system, browser type and version, screen resolution)
• Referrer URLs and navigation paths within the hypbet platform
• Bonus claims, wagering progress, and promotion participation history
• Customer support interactions (live chat transcripts, email correspondence, support tickets)

1.2 hypbet does not intentionally collect sensitive personal information such as government-issued numbers (SSS, GSIS, PhilHealth, TIN) except where strictly required by PAGCOR regulations or the Anti-Money Laundering Act (AMLA). When such information is collected, it is handled with heightened security protocols.

2 How We Use Your Data

2.1 hypbet uses the personal information collected from players for the following specific purposes:

Account Management and Service Delivery

To create, maintain, and administer your hypbet player account; to process deposits and withdrawals; to provide access to games and platform features; to maintain accurate records of account balances and transaction history; and to facilitate customer support interactions.

Identity Verification and Fraud Prevention

To verify that you are at least 21 years of age and legally eligible to participate in online gaming in the Philippines; to confirm your identity during KYC procedures before processing withdrawals; to prevent underage gambling, identity theft, account takeover, money laundering, and other fraudulent activities; and to detect and prevent creation of duplicate or multiple accounts in violation of hypbet Terms & Conditions.

Legal and Regulatory Compliance

To comply with PAGCOR licensing requirements and ongoing reporting obligations; to fulfill obligations under the Anti-Money Laundering Act (Republic Act No. 9160, as amended) and its implementing regulations issued by the Anti-Money Laundering Council (AMLC); to respond to lawful requests from Philippine law enforcement, courts, and regulatory authorities; and to maintain records required by applicable gaming, taxation, and financial regulations.

Responsible Gaming and Player Protection

To monitor gaming behavior for patterns indicative of problem gambling; to enforce deposit limits, loss limits, session time limits, and self-exclusion settings configured by players; to provide reality checks and responsible gaming reminders during extended sessions; and to prevent access to the platform by self-excluded individuals.

Platform Security and Technical Operations

To secure the hypbet platform against unauthorized access, hacking attempts, distributed denial-of-service (DDoS) attacks, and other cyber threats; to monitor for cheating, bonus abuse, collusion, and use of automated software or bots; to maintain system stability, troubleshoot technical issues, and optimize platform performance; and to generate anonymized and aggregated usage statistics for internal analytics purposes.

Communications and Customer Service

To respond to customer support inquiries, complaints, and requests for assistance; to send transactional communications including deposit confirmations, withdrawal notifications, account security alerts, and changes to Terms & Conditions or this Privacy Policy; and to provide promotional communications (with consent) regarding bonuses, special offers, and platform updates.

3 Legal Basis for Processing

3.1 Under the Data Privacy Act of 2012, personal data may only be processed when there exists a valid legal basis. hypbet processes your personal information on the following legal grounds:

3.2 Where hypbet processes personal data based on consent, you have the right to withdraw that consent at any time by contacting hypbet customer support. Withdrawal o f consent does not affect the lawfulness of processing carried out before withdrawal. Withdrawal of consent for processing necessary to perform the contract (such as KYC verification) may result in restrictions on account functionality or closure of your account.

4 Data Sharing and Disclosure

4.1 hypbet does not sell, rent, or trade your personal information to third parties. hypbet may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

Service Providers and Data Processors

hypbet engages third-party service providers who process personal data on hypbet's behalf under binding data processing agreements that require them to protect your data in accordance with the Data Privacy Act of 2012. These include:

• Payment processors and e-wallet providers (GCash, Maya, BPI, BDO, UnionBank, Metrobank, Coins.ph) to facilitate deposits and withdrawals;
• Identity verification and KYC service providers that assist in document authentication and age verification;
• Game software providers (JILI, Pragmatic Play, PG Soft, Evolution Gaming, and others) to the minimum extent required to deliver game content and maintain gaming integrity;
• Cloud infrastructure and hosting providers that store platform data on secure servers;
• Customer support software providers that facilitate live chat and ticketing systems;
• Cybersecurity and fraud detection service providers that monitor for suspicious account activity.

Regulatory and Law Enforcement Authorities

hypbet is required by Philippine law to disclose personal data to the following authorities in specific circumstances:

• The Philippine Amusement and Gaming Corporation (PAGCOR) — as required by hypbet's gaming licence and PAGCOR's regulatory oversight powers;
• The Anti-Money Laundering Council (AMLC) — when required to file covered or suspicious transaction reports under the Anti-Money Laundering Act;
• The Bureau of Internal Revenue (BIR) — for tax reporting and withholding tax compliance on player winnings where applicable;
• The National Privacy Commission (NPC) — in the event of a personal data breach requiring mandatory notification;
• Philippine courts, the National Bureau of Investigation (NBI), the Philippine National Police (PNP), or other law enforcement bodies — when served with a valid subpoena, warrant, or court order.

Business Transfers

In the event that hypbet undergoes a merger, acquisition, reorganization, or sale of all or substantially all of its assets, your personal information may be transferred to the acquiring entity as part of that transaction. hypbet will notify players of any such transfer and ensure that the successor entity is bound to honor this Privacy Policy or provides players with reasonable notice and the opportunity to opt out before their data is subject to different privacy practices.

5 Data Security Measures

5.1 hypbet implements a multi-layered security framework to protect player personal data against unauthorized access, loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption in transit: All data transmitted between players and hypbet servers is protected by 256-bit TLS/SSL encryption. Unencrypted HTTP connections are automatically redirected to HTTPS.
• Encryption at rest: Sensitive personal data stored on hypbet servers — including KYC documents, payment details, and account credentials — is encrypted at rest using AES-256 encryption.
• Password security: Player passwords are never stored in plain text. All passwords are hashed using bcrypt with individual salts before storage. hypbet staff cannot view your password at any time.
• Access controls: Access to player personal data within hypbet is restricted to authorized personnel on a strict need-to-know basis. All internal data access is logged, monitored, and subject to regular audit.
• Two-factor authentication: hypbet offers two-factor authentication (2FA) for player accounts and mandates it for all internal staff accounts with access to personal data systems.
• Penetration testing: hypbet engages independent cybersecurity firms to conduct regular penetration testing and vulnerability assessments of the platform's security infrastructure.
• Incident response: hypbet maintains a documented data breach response plan. In the event of a breach affecting your personal data, hypbet will notify the National Privacy Commission and affected players within 72 hours of discovery, in compliance with NPC Circular 16-03.

6 Cookies and Tracking Technologies

6.1 hypbet uses cookies and similar tracking technologies to improve platform functionality, remember player preferences, analyze usage patterns, and support security measures. The following categories of cookies are used on the hypbet platform:

6.2 You may control non-essential cookies through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or receive alerts before cookies are placed. Note that disabling certain cookies may impair the functionality of the hypbet platform, including the ability to stay logged in across sessions or retain responsible gaming settings.

6.3 hypbet does not use third-party advertising cookies or behavioral advertising tracking technologies. The analytics cookies used by hypbet are operated internally and do not share raw player data with external advertising networks.

7 Data Retention Periods

7.1 hypbet retains personal data for the minimum period necessary to fulfill the purpose for which it was collected and to comply with applicable legal requirements. The following retention periods apply:

7.2 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized such that it can no longer be associated with any identifiable individual. Anonymized and aggregated data may be retained indefinitely for statistical and analytical purposes.

8 Your Privacy Rights

8.1 Under the Data Privacy Act of 2012, as a data subject, you have the following rights with respect to your personal information held by hypbet:

• Right to be Informed: You have the right to be informed of how hypbet collects, uses, stores, and discloses your personal data — which is the purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data that hypbet holds about you, along with information about the purposes for which it is processed. Requests will be fulfilled within 15 business days.
• Right to Rectification: You have the right to request correction of inaccurate, incomplete, or outdated personal data in your hypbet account. Many details can be updated directly through your account settings; others may require customer support assistance and documentary verification.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and no legal obligation requires its retention. Note that hypbet may be required by PAGCOR regulations and AMLA to retain certain records even after account closure.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data based on legitimate interest, including profiling for direct marketing purposes. Objecting to processing necessary for contract performance may affect your ability to use hypbet services.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that your data privacy rights have been violated. Information about the NPC's complaint process is available through the National Privacy Commission.

8.2 To exercise any of the above rights, please contact the hypbet Data Privacy Officer via live chat support or by email at [email protected]. hypbet will respond to all data rights requests within fifteen (15) business days of receipt, and will complete all verifiable requests within thirty (30) business days.

9 International Data Transfers

9.1 hypbet primarily stores and processes player personal data on servers located within the Philippines. In limited circumstances, data may be transferred to or accessed from servers located outside the Philippines — for example, where a third-party service provider's infrastructure is hosted abroad.

9.2 Any transfer of personal data outside the Philippines is conducted only where hypbet has established appropriate safeguards in accordance with the Data Privacy Act of 2012 and NPC guidelines. These safeguards include:

• Transfers to countries or jurisdictions recognized by the National Privacy Commission as providing adequate levels of data protection;
• Standard contractual clauses incorporated into data processing agreements with international service providers, requiring them to process data in compliance with Philippine data protection standards;
• Binding corporate rules where applicable to multi-national service provider groups.

9.3 hypbet does not transfer player financial transaction records, KYC documents, or full gaming activity logs to servers located outside the Philippines except where specifically required by applicable legal obligations or PAGCOR requirements.

10 Minors and Age Verification

10.1 The hypbet platform is strictly prohibited for individuals under the age of twenty-one (21) years. hypbet does not knowingly collect personal data from individuals under 21 years of age.

10.2 hypbet employs a mandatory age and identity verification process for all accounts. Accounts cannot access real-money gaming features or process withdrawals until KYC verification — including age verification — has been satisfactorily completed.

10.3 If hypbet discovers that personal data has been collected from an individual who is under 21 years of age, the following actions will be taken immediately:

• The account will be permanently closed;
• All personal data collected in relation to the account will be securely deleted to the extent permitted by applicable law;
• Any real-money deposits made to the account will be returned to the source payment method;
• The incident will be documented and reported to PAGCOR as required by hypbet's licensing obligations.

11 Marketing Communications

11.1 hypbet may send you promotional communications about bonuses, special offers, new game releases, and platform updates where you have provided express consent to receive such communications during registration or subsequently through your account settings.

11.2 You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email from hypbet;
• Updating your communication preferences in your hypbet account settings;
• Contacting hypbet customer support via live chat and requesting removal from marketing lists.

11.3 Opting out of marketing communications does not affect transactional communications required for account operation, including deposit confirmations, withdrawal notifications, security alerts, and important policy updates.

11.4 hypbet does not engage in SMS marketing to Philippine mobile numbers without prior express consent obtained in accordance with the requirements of the Cybercrime Prevention Act of 2012 (RA 10175) and NTC guidelines on electronic commercial communications.

12 Changes to This Privacy Policy

12.1 hypbet may update this Privacy Policy from time to time to reflect changes in data processing practices, applicable law, PAGCOR regulatory requirements, or platform features. The effective date at the top of this page reflects when the current version came into force.

12.2 For material changes to this Privacy Policy — that is, changes that significantly affect how hypbet processes your personal data or that reduce your privacy rights — hypbet will provide notice via:

• A prominent notice on the hypbet platform visible upon login;
• An email notification to your registered account email address (where we hold a valid email address for you);
• An SMS notification to your registered mobile number where required by applicable law.

12.3 Your continued use of the hypbet platform following the effective date of an updated Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with changes to this Policy, you have the right to close your hypbet account by contacting customer support.

13 Contact Us and Data Privacy Officer

13.1 hypbet has appointed a Data Privacy Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to this Privacy Policy or hypbet's data processing practices, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the hypbet platform — the fastest way to reach support for urgent privacy concerns.
• Email: [email protected] — for formal data rights requests, include "Privacy Request" in your subject line so your message is routed directly to the Data Privacy Officer.

13.2 hypbet will acknowledge all privacy-related inquiries within 48 hours and will endeavor to provide a substantive response within fifteen (15) business days. Complex requests involving data access or erasure may require additional time; hypbet will keep you informed of progress.

13.3 If you are not satisfied with hypbet's response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC accepts complaints through its official website and designated complaint channels. hypbet encourages players to attempt resolution directly with hypbet before escalating to the NPC, as most privacy concerns can be resolved efficiently through direct communication.