Privacy Policy

1. Introduction

hyph Casino ("hyph," "we," "us," or "our") is the operator of the online gaming platform accessible at hyph.lat. We take the privacy and security of your personal data seriously. This Privacy Policy describes the types of information we collect from you when you register, log in, deposit funds, play games, or otherwise interact with the hyph platform; how we use and protect that information; the circumstances under which we may share it; and the rights you hold as a data subject under Philippine law.

This policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. hyph is registered as a personal information controller with the NPC as required by law.

This Privacy Policy should be read together with hyph's Terms & Conditions and Responsible Gaming Policy, which together form the full suite of agreements governing your use of the hyph platform.

2. Data We Collect

hyph collects personal data through multiple channels — directly from you during registration and account use, automatically through your device and browsing activity, and from third parties where permitted by law. The categories of data we collect include:

hyph does not collect sensitive personal information (as defined by the DPA) beyond what is strictly necessary for identity verification and responsible gaming compliance. We do not collect racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond facial verification for KYC purposes where required by PAGCOR.

3. How We Use Your Data

hyph processes your personal data for the following purposes:

• Account registration and management: To create, verify, and administer your hyph account, including identity verification pursuant to PAGCOR KYC requirements;
• Service delivery: To process deposits and withdrawals, credit bonuses, operate games, and provide the full range of hyph platform features;
• Legal and regulatory compliance: To fulfill obligations under PAGCOR licensing conditions, the Data Privacy Act, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, money laundering, and other prohibited conduct;
• Responsible gaming: To monitor gaming behavior for signs of problem gambling, enforce self-exclusion and limit settings, and fulfill hyph's responsible gaming obligations;
• Customer support: To respond to your inquiries, resolve disputes, and improve our support services;
• Platform improvement: To analyze aggregated usage data to improve platform performance, game selection, and user experience;
• Marketing communications: To send promotional offers and platform updates to players who have opted in to receiving such communications. You may opt out at any time.

hyph does not use automated decision-making or profiling in ways that produce legal or similarly significant effects on players without human review, except where explicitly required by PAGCOR compliance or anti-fraud obligations.

4. Legal Basis for Processing

hyph processes your personal data on the following legal grounds as established under the Data Privacy Act of 2012 and its Implementing Rules:

• Contractual necessity: Processing required to perform the contract between you and hyph — i.e., to operate your account, process transactions, and deliver gaming services;
• Legal obligation: Processing necessary to comply with applicable Philippine laws, including PAGCOR regulations, AMLA obligations, tax reporting requirements, and NPC data privacy directives;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics where such interests do not override your fundamental rights;
• Consent: Processing for marketing communications and optional data uses, where we have obtained your explicit, informed, and freely given consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

hyph does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data in the following limited circumstances:

• Game providers and platform vendors: Third-party game suppliers (e.g., Pragmatic Play, Evolution Gaming) and platform technology providers who process data on our behalf under data processing agreements that impose obligations equivalent to those in this policy;
• Payment processors: GCash, Maya, BPI, BDO, Metrobank, and other payment service providers receive the minimum data necessary to process your transactions;
• PAGCOR and regulatory authorities: hyph is obligated to report certain player activity, suspicious transactions, and compliance matters to PAGCOR and other competent Philippine authorities as required by law;
• Anti-money laundering compliance: Transaction data may be reported to the Anti-Money Laundering Council (AMLC) where required under Republic Act No. 9160 (as amended);
• Law enforcement: Where legally required by court order, subpoena, or lawful demand by Philippine law enforcement agencies;
• Professional advisers: Legal, accounting, and auditing firms engaged by hyph, under strict confidentiality obligations;
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of hyph's assets, your data may be transferred to the successor entity subject to equivalent privacy protections and notice to you.

All third parties who receive or process hyph player data on our behalf are required to maintain the confidentiality and security of that data and to process it only for the specified purpose.

6. Cookies & Tracking Technologies

The hyph platform uses cookies and similar tracking technologies to operate the platform, enhance your experience, and analyze usage patterns. The types of cookies used include:

• Strictly necessary cookies: Required for the platform to function — session management, authentication tokens, security features. These cannot be disabled without impairing platform functionality;
• Performance cookies: Collect anonymous aggregate data about how players use the platform to help us improve performance and identify errors;
• Functional cookies: Remember your preferences (such as language and display settings) to provide a personalized experience;
• Analytics cookies: Used by hyph's internal analytics systems to understand traffic patterns and feature engagement. No third-party advertising cookies are used on the hyph platform.

You may control cookie settings through your browser preferences. Disabling strictly necessary cookies will impair your ability to use the platform. hyph does not use cookies to deliver third-party advertising or to track your activity across external websites.

7. Data Retention

hyph retains your personal data for as long as necessary to fulfill the purposes described in this policy, subject to the following minimum retention periods required by law:

• Account and identity data: Retained for a minimum of five (5) years from account closure, as required by PAGCOR and AMLA regulations;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• KYC and verification documents: Retained for a minimum of five (5) years from account closure or last transaction, whichever is later;
• Support communications: Retained for three (3) years from the date of the communication;
• Gaming activity logs: Retained for five (5) years for regulatory audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with an identified individual. Where data must be retained beyond these periods to comply with a legal order or ongoing investigation, it will be held securely in a restricted-access environment until the obligation expires.

8. Data Security

hyph implements industry-standard technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and hyph servers;
• Encryption at rest for all sensitive personal data stored in hyph databases;
• Access controls limiting internal access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing by independent cybersecurity professionals;
• Multi-factor authentication requirements for all hyph staff with access to production systems;
• Incident response procedures in place to detect, contain, and remediate data security incidents promptly.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, hyph will notify the National Privacy Commission within 72 hours of becoming aware of the breach and will notify affected players without undue delay, in accordance with NPC Circular No. 16-03.

While hyph employs robust security measures, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the security of your own account credentials and for notifying hyph immediately of any suspected unauthorized access.

9. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by hyph:

• Right to be Informed: The right to be notified of how your data is collected and used — as set out in this Privacy Policy;
• Right to Access: The right to request a copy of the personal data hyph holds about you and information about how it is processed;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held in your account;
• Right to Erasure (Right to be Forgotten): The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to hyph's legal retention obligations;
• Right to Object: The right to object to the processing of your personal data for marketing purposes or on grounds relating to your particular situation where processing is based on legitimate interests;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible;
• Right to Damages: The right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, or unlawfully obtained personal data.

To exercise any of these rights, please contact hyph's Data Protection Officer at [email protected]. We will respond to your request within 15 business days. Where a request cannot be fulfilled due to conflicting legal obligations, we will explain the basis for our decision.

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.

10. Children's Privacy

The hyph platform is strictly prohibited for persons under the age of 21. hyph does not knowingly collect personal data from individuals below the age of 21. Age verification is conducted at registration, and any account found to belong to an individual under 21 will be immediately closed and all associated data deleted, except where retention is required by law.

If you are a parent or guardian and believe that a minor has registered an account at hyph, please contact us immediately at [email protected] with relevant details so we can investigate and take appropriate action.

11. Third-Party Links

The hyph platform may contain references to third-party services such as payment providers (GCash, Maya, BPI) and game providers. These third parties operate under their own privacy policies, which are independent of hyph's Privacy Policy. hyph is not responsible for the privacy practices of third-party services and encourages you to review the privacy policies of any third-party service you interact with in connection with your hyph account.

hyph does not embed third-party advertising networks, social media tracking pixels, or external analytics services that track your activity beyond the hyph platform itself.

12. International Data Transfers

Some of hyph's third-party service providers — including game providers and platform infrastructure vendors — may be located outside the Philippines. Where personal data is transferred to recipients in other countries, hyph ensures that appropriate safeguards are in place, including contractual clauses that impose data protection obligations equivalent to those required under Philippine law.

hyph only transfers personal data internationally where necessary for service delivery and where the recipient country or the specific recipient entity provides adequate levels of data protection as assessed by hyph in consultation with applicable NPC guidance.

13. Changes to This Policy

hyph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. The "Last Updated" date at the top of this page will be revised accordingly whenever material changes are made.

For material changes that significantly affect your privacy rights or how your data is processed, hyph will provide advance notice via email to your registered address or via a prominent in-platform notification. Your continued use of the hyph platform after the effective date of any amended policy constitutes your acceptance of the changes.

We encourage you to review this Privacy Policy periodically. If you have questions about any changes, please contact our Data Protection Officer before continuing to use the platform.

14. Contact Us

For questions, concerns, or requests relating to this Privacy Policy or hyph's data processing practices, please contact our Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 via the in-platform support widget
• Response Time: Within 15 business days for formal data subject requests; typically under 5 minutes via live chat for general inquiries

You may also lodge a complaint directly with the National Privacy Commission of the Philippines if you believe hyph has breached your data privacy rights under the Data Privacy Act of 2012.