hyph666 Privacy Policy

1. Introduction

1.1 This Privacy Policy applies to all users of the hyph666 website, mobile platform, and any related services (collectively, the "Platform"). It governs the collection, processing, storage, and disclosure of personal data by hyph666 ("we," "us," or "our") in connection with your use of the Platform.

1.2 hyph666 is committed to protecting the privacy and personal data of all players, particularly those based in the Philippines. Our data handling practices comply with the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

1.3 This Privacy Policy should be read together with our Terms & Conditions and Responsible Gaming Policy. By using the Platform, you consent to the data practices described herein. If you do not agree with this Privacy Policy, please discontinue use of the Platform.

2. Data Controller

2.1 hyph666 is the personal information controller ("PIC") responsible for determining the purposes and means of processing your personal data collected through the Platform.

2.2 For all privacy-related enquiries, requests to exercise data subject rights, or concerns about how hyph666 handles your personal information, you may contact our Data Protection Officer (DPO) using the contact information provided in Section 15 of this Policy.

3. Personal Data We Collect

hyph666 collects the following categories of personal data from you, depending on how you interact with the Platform:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued ID
• Date of birth (for age verification — 21+ requirement)
• Gender (optional, where provided during registration)
• Username and account credentials
• Government-issued ID type and number (for KYC verification)
• Selfie photograph submitted during identity verification

3.2 Contact Data

• Philippine mobile number (used for OTP authentication and account communications)
• Email address
• Residential address (city, province, region — e.g., Metro Manila, Cebu, Davao, Quezon City)

3.3 Financial Data

• GCash or Maya account number linked to your hyph666 account
• BPI, BDO, or Metrobank account details where provided for bank transfer withdrawals
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment methods
• Bonus redemption records

3.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session duration, pages visited, and features used
• Login timestamps and session activity logs
• Game history (games played, bets placed, outcomes, wagering records)

3.5 Communications Data

• Records of your communications with hyph666 customer support (chat logs, email threads, SMS records)
• Feedback, complaints, and dispute records
• Responses to optional surveys or promotional interactions

4. How We Collect Your Data

hyph666 collects personal data through the following means:

• Direct Registration: Information you provide when creating a hyph666 account, including your name, mobile number, email address, and date of birth.
• KYC Verification: Government-issued identification documents and selfie photographs submitted when verifying your identity prior to withdrawal processing.
• Payment Transactions: Financial data generated when you deposit funds via GCash, Maya, BPI, BDO, Metrobank, or other supported payment channels.
• Platform Usage: Technical data automatically collected as you browse and interact with the hyph666 website and mobile Platform, including cookies and server logs.
• Customer Support Interactions: Information shared during live chat sessions, email correspondence, or SMS exchanges with our support team.
• Third-Party Service Providers: Identity verification data from licensed KYC/AML compliance partners engaged by hyph666 to fulfil regulatory obligations.

5. Purpose & Legal Basis for Processing

hyph666 processes your personal data only where a lawful basis exists under the Data Privacy Act of 2012. The table below summarises the primary purposes for processing and the corresponding legal basis:

6. How We Use Your Personal Data

hyph666 uses your personal data for the following purposes:

6.1 Account Operations

To create and manage your hyph666 account, authenticate your identity at login (including OTP verification to your registered Philippine mobile number), maintain your account security, and process account closure requests.

6.2 Payment Processing

To process deposits via GCash, Maya, GrabPay, QR Ph, BPI, BDO, Metrobank, and 7-Eleven CLiQQ, and to process withdrawals to your verified payment accounts. Financial data is shared with licensed payment processors solely for transaction completion purposes.

6.3 Regulatory Compliance

To comply with hyph666's legal obligations under Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA, RA 9160 as amended), and the Data Privacy Act of 2012. This includes filing Suspicious Transaction Reports (STRs) with the Anti-Money Laundering Council (AMLC) where legally required.

6.4 Responsible Gaming

To monitor your gaming activity for indicators of problematic gambling, to administer self-exclusion requests and deposit limits, and to send responsible gaming reminders where appropriate. This processing is carried out in the interests of player welfare and regulatory compliance.

6.5 Fraud Prevention & Security

To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, account takeover attempts, and other prohibited conduct. This may include automated monitoring of account activity and transaction patterns.

6.6 Customer Support

To respond to your enquiries, resolve complaints, investigate disputes, and maintain records of your interactions with the hyph666 support team for quality assurance and audit purposes.

6.7 Marketing Communications (Opt-In Only)

Where you have provided explicit consent, hyph666 may send you promotional offers, bonus notifications, and platform updates via SMS, email, or push notification. You may withdraw your consent at any time by contacting customer support or updating your account notification preferences.

7. Sharing Your Personal Data

7.1 hyph666 does not sell, rent, or otherwise commercialise your personal data. We share personal data only in the following limited circumstances:

• Licensed Payment Processors: GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other payment partners receive transaction data strictly necessary to process your deposits and withdrawals.
• KYC & AML Compliance Providers: Licensed identity verification and anti-money laundering service providers engaged by hyph666 to fulfil regulatory obligations may process your identity documents and verification data.
• Game Technology Providers: Third-party game providers hosting games on the hyph666 Platform may receive anonymised or pseudonymised session data necessary to deliver game services. These providers are contractually prohibited from using this data for independent purposes.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies may receive your data where required by law or pursuant to a lawful order.
• Law Enforcement: Philippine law enforcement agencies may receive personal data where hyph666 is legally compelled to disclose, or where disclosure is necessary to prevent or investigate criminal activity.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to a successor entity, subject to the same privacy protections described in this Policy.

7.2 All third-party service providers engaged by hyph666 are contractually required to process personal data only in accordance with hyph666's instructions, to implement appropriate security measures, and to comply with applicable Philippine data protection law.

8. Cookies & Tracking Technologies

8.1 hyph666 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. Cookies are small text files placed on your device when you visit the Platform.

8.2 Types of Cookies Used

8.3 hyph666 does not use third-party advertising cookies or tracking pixels that build profiles for external marketing networks. Our analytics data is retained internally and is not shared with advertising platforms.

8.4 You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the Platform, including your ability to log in and play games.

9. Data Retention

9.1 hyph666 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law.

9.2 The following general retention periods apply:

• Account and identity data: Retained for the lifetime of your account and for a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years in accordance with AMLA and PAGCOR regulatory requirements.
• Customer support records: Retained for three (3) years from the date of the relevant interaction.
• Technical logs and session data: Retained for up to twelve (12) months for security monitoring and fraud detection purposes.
• Marketing consent records: Retained for the duration of your marketing opt-in and for three (3) years thereafter as evidence of consent.

9.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with hyph666's data disposal procedures.

10. Data Security

10.1 hyph666 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform
• Encrypted storage of sensitive personal data and financial records at rest
• Role-based access controls limiting data access to authorised personnel with a demonstrable business need
• Multi-factor authentication for internal administrative access to data systems
• Regular security audits, vulnerability assessments, and penetration testing
• OTP-based two-step authentication for player account login

10.2 In the event of a personal data breach that is likely to result in harm to affected data subjects, hyph666 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the DPA and NPC Circular No. 16-03.

11. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by hyph666. To exercise any of these rights, contact our Data Protection Officer using the details in Section 15.

11.1 hyph666 will respond to all verified data subject requests within thirty (30) days of receipt. Complex requests may require an extension, in which case you will be notified of the expected timeline.

11.2 hyph666 may need to verify your identity before processing a data subject request to prevent unauthorised disclosure of personal data to third parties.

11.3 If you are not satisfied with hyph666's response to a data subject request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

12. Children's Privacy

12.1 The hyph666 Platform is strictly intended for adults aged twenty-one (21) years and above. hyph666 does not knowingly collect personal data from persons under the age of 21. Registration by minors is prohibited.

12.2 If hyph666 becomes aware that personal data has been collected from a person under 21 years of age, the relevant account will be immediately suspended, all personal data associated with that account will be deleted in accordance with our data disposal procedures, and any winnings or balances associated with the account will be forfeited.

12.3 If you believe that a minor has registered an account on the hyph666 Platform, please contact our Data Protection Officer immediately using the details provided in Section 15.

13. Cross-Border Data Transfers

13.1 hyph666 primarily stores and processes personal data within the Philippines. In limited circumstances, personal data may be transferred to or accessed by service providers located outside the Philippines — for example, where hyph666 engages international game technology providers or cloud infrastructure services.

13.2 Any cross-border transfer of personal data by hyph666 is carried out only where the receiving country or organisation provides an adequate level of data protection, or where appropriate contractual safeguards are in place, in compliance with Section 21 of the Data Privacy Act of 2012 and NPC Advisory Opinion No. 2017-049.

13.3 hyph666 does not transfer your financial data, government-issued ID information, or sensitive personal information to entities outside the Philippines except where strictly necessary for regulatory compliance (e.g., FATF-related AML obligations) and where appropriate safeguards apply.

14. Updates to This Privacy Policy

14.1 hyph666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page will be revised accordingly.

14.2 Material changes to this Privacy Policy will be communicated to registered players via email or SMS notification, and/or by a prominent notice on the hyph666 Platform, at least seven (7) days prior to the changes taking effect where practicable.

14.3 Your continued use of the hyph666 Platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed.

15. Contact & Data Protection Officer

15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by hyph666, please contact our Data Protection Officer (DPO):

📧 Email: [email protected]

Please include "Privacy Request" or "Data Subject Request" in the subject line of your email, along with your registered hyph666 username, to help us process your request promptly.

15.2 hyph666's customer support team is available 24 hours a day, 7 days a week to assist with general enquiries. Data subject rights requests are handled by the DPO and will receive a substantive response within thirty (30) calendar days.

15.3 If you are not satisfied with the outcome of your data subject request or believe that hyph666 has violated your data privacy rights, you may file a complaint with the National Privacy Commission of the Philippines.