yyyy ph Privacy Policy: How We Handle Your Data

1. Introduction

yyyy ph is an online gaming platform serving players in the Philippines. This Privacy Policy describes how yyyy ph — referred to throughout this document as "we," "us," or "the platform" — collects, processes, stores, and protects personal information submitted by registered members and visitors to yyyyph.app.

We take data privacy seriously because Filipino players have the right to know what happens to their information. This policy is written in straightforward language so that anyone can understand it, not just legal teams. We have aligned our practices with the requirements of the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations.

By registering an account on yyyy ph, making a deposit, or simply browsing the platform, you agree to the practices described here. If anything in this policy changes in a meaningful way, we will notify you before those changes take effect.

2. Data We Collect

The information yyyy ph collects falls into three broad categories: information you give us directly, information generated by your use of the platform, and information we receive from payment providers and other service partners.

Information you provide at registration

• Full legal name as it appears on your government-issued ID
• Date of birth (to confirm you are at least 21 years old)
• Residential address in the Philippines
• Email address and mobile number
• Username and password (the password is stored in encrypted form — yyyy ph staff cannot read it)

Identity verification documents

Before your first withdrawal, yyyy ph requires you to complete a Know Your Customer (KYC) process. Acceptable documents include PhilSys / National ID, UMID, passport, driver's license, SSS/GSIS ID, or voter's ID. A selfie may also be requested. These documents are used solely for identity verification and fraud prevention purposes.

Automatically collected data

• IP address and approximate geographic region
• Device type, operating system, and browser version
• Pages visited on yyyy ph, time spent, and navigation patterns
• Session start and end times
• Game activity, wager history, and account transaction records

3. How We Use Your Data

yyyy ph uses personal data for the following purposes, and only for these purposes:

• Account management: Creating, maintaining, verifying, and securing your yyyy ph account.
• Processing transactions: Handling deposits and withdrawals via GCash, Maya, GrabPay, Coins.ph, bank transfers, and card payments in Philippine pesos.
• Regulatory compliance: Meeting anti-money laundering (AML) obligations, responsible gaming requirements, and other legal duties under Philippine law.
• Customer support: Responding to account inquiries, disputes, and technical issues promptly and accurately.
• Platform improvements: Analysing anonymised usage patterns to fix bugs, improve navigation, and understand which game categories Filipinos use most.
• Security monitoring: Detecting unusual account activity, unauthorised access attempts, and potential fraud.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gaming behaviour and reach out when appropriate.

yyyy ph does not use your personal data to build general consumer profiles, does not engage in behavioural advertising targeting, and does not share personal information with third parties for marketing purposes.

4. Legal Basis for Processing

yyyy ph processes personal data on the following legal bases under the Philippine Data Privacy Act and applicable regulations:

• Contractual necessity: Processing your name, contact details, and payment information is necessary to deliver the service you signed up for.
• Legal obligation: Identity verification, AML checks, and responsible gaming monitoring are required by Philippine gaming regulations.
• Legitimate interests: Security monitoring, fraud prevention, and platform analytics serve the legitimate interests of both yyyy ph and its players, without overriding individual privacy rights.
• Consent: Where yyyy ph sends optional communications such as promotional updates, this is done only with your consent, which you can withdraw at any time from your account settings.

5. Payment Information

When you deposit or withdraw on yyyy ph, payment transactions are processed through certified payment service providers — GCash, Maya, GrabPay, Coins.ph, participating banks through InstaPay and PESONet, and card processors for Visa and Mastercard. yyyy ph does not store full card numbers or e-wallet PINs on its own servers.

Payment providers that process your transactions have their own privacy and security policies. By using those services on yyyy ph, you are also subject to those providers' terms. What yyyy ph does receive and store is the transaction reference number, amount in Philippine pesos, method used, and timestamp — all of which form part of your account transaction history.

6. Cookies and Tracking Technologies

yyyy ph uses cookies and similar session-based technologies to keep you logged in, remember display preferences, and monitor how pages perform. Here is a breakdown of what is in use:

Essential cookies

These are required for the platform to function. They manage your login session and keep your account secure during a visit. You cannot opt out of essential cookies while using the platform.

Analytics cookies

yyyy ph uses anonymised analytics to understand how players navigate the site — which pages are popular, where drop-offs happen, and how long different sections take to load on mobile. This data is aggregated and does not identify individual players.

Functional cookies

These remember your language preference, display settings, and the last game category you visited, so you do not have to reset these on every visit.

You can manage cookie preferences through your browser settings. Disabling analytics or functional cookies will not affect your ability to play, but may affect some convenience features.

7. Data Sharing

yyyy ph does not sell, rent, or trade your personal information. We share data only in the following limited and necessary circumstances:

Payment processors

Your name and transaction details are shared with the payment provider you select (GCash, Maya, etc.) to complete deposits and withdrawals. These providers are bound by their own privacy obligations under Philippine financial regulations.

Regulatory and legal bodies

yyyy ph is required to share certain player data with Philippine gaming regulatory authorities and law enforcement agencies when lawfully requested. This includes identity records, transaction history, and gameplay data relevant to AML investigations or licensing audits.

Technology and service providers

yyyy ph works with carefully selected third-party vendors for services such as cloud hosting, identity verification, fraud detection, and customer support software. These vendors access data only to perform their contracted services and are prohibited from using it for any other purpose. All vendors are required to maintain data security standards consistent with Philippine law.

Business transfers

If yyyy ph undergoes a merger, acquisition, or restructuring, player data may be transferred as part of that process. Affected players will be notified in advance and given the opportunity to close their accounts if they do not consent to the new arrangement.

8. Data Retention

yyyy ph retains personal data for as long as your account is active and for a defined period after closure to meet legal and regulatory obligations. In practice, this means:

• Account information and identity documents: retained for a minimum of five (5) years after account closure, as required under Philippine AML regulations.
• Transaction records: retained for five (5) years from the date of each transaction.
• Support correspondence: retained for two (2) years after a ticket is resolved.
• Anonymised analytics data: retained indefinitely in aggregated form that does not identify individual players.

Once retention periods expire, yyyy ph securely deletes or anonymises the relevant records so they can no longer be linked to an individual.

9. Data Security

Protecting your data is an operational priority at yyyy ph, not just a compliance checkbox. The platform uses 256-bit SSL/TLS encryption for all data transmitted between your device and our servers. Account passwords are stored as salted hashes, which means even internal systems cannot read your actual password.

Additional security measures include:

• Two-factor authentication (2FA) available to all players
• Automated fraud detection that flags unusual login locations and transaction patterns
• Role-based access controls that limit which yyyy ph staff can view which categories of player data
• Regular security assessments and infrastructure reviews
• Incident response protocols that include mandatory notification to affected players if a data breach occurs

While yyyy ph takes every reasonable precaution, no digital platform can guarantee absolute security. Players are strongly encouraged to use a strong, unique password for their yyyy ph account and to enable 2FA.

10. Your Rights as a Player

Under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by yyyy ph:

• Right to be informed: The right to know what data yyyy ph holds about you and how it is used — which is exactly what this policy provides.
• Right of access: You can request a copy of the personal data yyyy ph holds about you. We will respond within fifteen (15) business days of a verified request.
• Right to rectification: If any data we hold is inaccurate or incomplete, you have the right to request a correction. Most basic account details can be updated directly through your account settings.
• Right to erasure: In certain circumstances, you can request that yyyy ph delete your personal data. Note that legal retention obligations may prevent full erasure of some records such as transaction history.
• Right to object: You can object to processing activities that are based on legitimate interests, including analytics. Opting out of non-essential data processing will not affect your ability to play on yyyy ph.
• Right to data portability: You can request your personal data in a structured, machine-readable format where technically feasible.
• Right to lodge a complaint: If you believe yyyy ph has mishandled your personal data, you have the right to file a complaint with the National Privacy Commission of the Philippines (NPC).

11. Children and Underage Players

yyyy ph is strictly for adults aged 21 and above. We do not knowingly collect personal data from anyone under 21 years of age. If yyyy ph discovers that an account has been opened by someone under the legal minimum age, the account will be immediately closed and any funds held will be handled in accordance with our Terms and Conditions.

If you believe a minor has created an account on yyyy ph using false information, please notify us at support@yyyyph.app so we can act immediately.

12. Third-Party Links

The yyyy ph platform may occasionally reference or display content relating to sports events or entertainment contexts. This policy does not extend to any third-party websites or services that yyyy ph does not directly operate. If you navigate to an external site — for instance, through a payment provider's portal — the privacy practices of that site apply, not ours.

yyyy ph recommends reviewing the privacy policies of any external services you use in connection with your gaming activity.

13. Updates to This Policy

yyyy ph reviews and updates this Privacy Policy periodically — particularly when new payment methods are added, when regulatory requirements change, or when the platform introduces features that affect how data is processed. The date at the top of this page reflects when the current version was published.

When updates involve material changes — such as a new category of data being collected or a change in how data is shared — yyyy ph will notify registered players by email and by a prominent notice on the platform before the changes take effect. Continued use of yyyy ph after the effective date of a revised policy constitutes acceptance of the new terms.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data yyyy ph holds about you, please get in touch:

• Email: support@yyyyph.app
• Subject line for data requests: "Data Privacy Request"
• FAQ: Visit the yyyy ph FAQ page for quick answers to common questions about accounts and privacy.

yyyy ph aims to respond to all data privacy inquiries within five (5) business days. For formal requests requiring identity verification and document review, the full response may take up to fifteen (15) business days.