yyphp Privacy Policy
At yyphp, your personal data is treated with the same care and discretion we apply to your winnings. This Privacy Policy explains exactly what information we collect, why we collect it, how we use it, and the rights you hold as a Filipino player under the Data Privacy Act of 2012.
Our Privacy Commitments
Six principles that shape how yyphp handles your personal information. These are not aspirational statements — they are operational standards we are held to under Philippine law and PAGCOR regulation.
Data Minimisation
yyphp collects only the personal information strictly necessary to operate your account, verify your identity under PAGCOR KYC requirements, process payments, and comply with the Philippine Anti-Money Laundering Act. We do not collect data for its own sake.
No Data Selling
yyphp does not sell, rent, or trade your personal information to third-party marketers, data brokers, or advertising networks. Your data is shared only with essential service providers — payment processors, KYC partners, and game providers — under strict data processing agreements.
256-bit SSL Encryption
All data transmitted between your device and the yyphp platform is protected using industry-standard TLS/SSL encryption. Sensitive data at rest — including payment details and identity documents — is stored using AES-256 encryption with access controls restricted to authorised personnel only.
Your Rights Under the DPA
As a Philippine resident, you are entitled to full rights under the Data Privacy Act of 2012 (Republic Act No. 10173), including the right to access, correct, object to processing, and request erasure of your personal data. yyphp honours all such requests within the timeframes mandated by the National Privacy Commission.
Defined Retention Periods
yyphp retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. PAGCOR and AMLA obligations require us to retain certain transaction and identity records for a minimum of five years from account closure.
Breach Notification
In the unlikely event of a personal data breach that poses a real risk to your rights and freedoms, yyphp will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will communicate directly with affected players without undue delay.
1 About This Privacy Policy
This Privacy Policy ("Policy") describes how yyphp ("yyphp", "we", "us", or "our") collects, processes, stores, shares, and protects personal information relating to registered players, visitors, and other individuals who interact with the yyphp online casino platform at yyphp.net and any associated mobile applications (collectively, the "Platform").
yyphp operates as a Personal Information Controller under the Data Privacy Act of 2012. This means we determine the purposes and means by which your personal data is processed, and we are accountable to you and to the National Privacy Commission for that processing.
By registering an account, accessing the Platform, or otherwise providing your personal information to yyphp, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal information as described herein. Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
This Policy should be read together with the yyphp Terms & Conditions, which govern your use of the Platform generally. In the event of any conflict between this Policy and the Terms & Conditions regarding data privacy matters, this Policy shall prevail.
2 Personal Data We Collect
yyphp collects personal data through several channels: directly from you during registration and gameplay, automatically through your use of the Platform, and from third parties such as payment processors and KYC verification providers. The categories of personal data we collect include:
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government-issued ID type and number | Provided by you; verified by KYC partner |
| Contact Data | Email address, mobile number, home address (city/province) | Provided by you at registration |
| Financial Data | GCash/PayMaya mobile number, bank account name, deposit and withdrawal history | Provided by you; received from payment processors |
| Transaction Data | Deposit amounts, withdrawal requests, wager history, game results, bonus usage | Generated automatically through Platform use |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Collected automatically via Platform servers and cookies |
| Verification Documents | Scanned or photographed government ID, selfie with ID, proof of payment method | Uploaded by you during KYC verification |
| Communications Data | Live chat transcripts, support emails, complaint records | Generated through your communications with yyphp |
3 How We Use Your Personal Data
yyphp uses your personal data only for the purposes set out in this Policy. The primary purposes for which we process your information are:
- Account management: Creating, maintaining, and securing your yyphp player account.
- Identity verification (KYC): Fulfilling PAGCOR-mandated Know Your Customer obligations and confirming you meet the 21+ age requirement for lawful gambling in the Philippines.
- Payment processing: Processing deposits via GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, 7-Eleven, and Cebuana, and handling withdrawal requests to your verified payment method.
- AML compliance: Monitoring transactions for suspicious activity and fulfilling reporting obligations under the Anti-Money Laundering Act (AMLA) and PAGCOR's AML framework.
- Platform personalisation: Tailoring game recommendations, promotional offers, and platform interface settings based on your preferences and gameplay history.
- Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and applying responsible gaming interventions in accordance with PAGCOR guidelines.
- Customer support: Responding to your inquiries, resolving disputes, and investigating complaints.
- Security and fraud prevention: Detecting and preventing unauthorised access, duplicate accounts, bonus abuse, and fraudulent transactions.
- Legal compliance: Meeting obligations imposed by Philippine law, PAGCOR, the NPC, and other competent regulatory authorities.
- Direct marketing: Sending you promotional communications about yyphp bonuses, new games, and events — only where you have consented, and subject to your right to unsubscribe at any time.
4 Legal Basis for Processing
Under the Data Privacy Act of 2012, yyphp must have a lawful basis for each category of processing. The bases we rely on are:
- Contractual necessity: Processing required to enter into or perform our contract with you — i.e., to operate your player account, process deposits and withdrawals, and deliver gaming services.
- Legal obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act, the Cybercrime Prevention Act, and orders from competent Philippine authorities.
- Legitimate interests: Processing necessary for fraud prevention, platform security, and internal analytics, where such interests are not overridden by your privacy rights.
- Consent: Processing for direct marketing communications and any processing of sensitive personal information. You may withdraw consent at any time by contacting our Data Protection Officer or adjusting your account communication preferences.
5 Sharing Your Personal Data
yyphp does not sell or rent your personal information. We share your data only with the following categories of recipients, and only to the extent necessary for the stated purpose:
- Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other payment partners require your account and transaction data to process deposits and withdrawals.
- KYC and identity verification providers: Third-party providers who perform document verification, facial recognition, and AML screening on our behalf under data processing agreements.
- Game content providers: Game studios and live dealer platform providers may receive pseudonymised player identifiers and wager data necessary to deliver their games on the yyphp platform.
- PAGCOR and regulatory authorities: yyphp is required by law to report certain player data, transaction records, and suspicious activity reports to PAGCOR, the AMLC (Anti-Money Laundering Council), and other competent Philippine authorities.
- Legal and professional advisers: Lawyers, auditors, and compliance consultants who are bound by professional confidentiality obligations.
- Law enforcement: Where required by court order, lawful request, or applicable Philippine law.
All third-party service providers who process personal data on yyphp's behalf are subject to written data processing agreements requiring them to process data only on yyphp's instructions, to maintain appropriate security measures, and to comply with the Data Privacy Act of 2012.
6 Cookies & Tracking Technologies
The yyphp Platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised gaming experience. Cookies are small data files placed on your device by the Platform. We use the following categories of cookies:
- Strictly necessary cookies: Essential for the Platform to function, including maintaining your login session, securing your account, and preventing cross-site request forgery. These cannot be disabled.
- Functional cookies: Remember your preferences such as language settings, lobby layout, and responsible gaming limits you have set.
- Analytical cookies: Collect anonymised data on how players use the Platform, enabling us to identify performance issues and improve user experience. No personally identifiable information is captured in analytical cookies.
- Responsible gaming cookies: Track session duration on your device to support session time reminders and cooling-off period enforcement.
yyphp does not use third-party advertising or retargeting cookies. You can manage cookie preferences through your browser settings. Disabling functional or analytical cookies may affect your Platform experience but will not prevent you from accessing core gaming services.
7 Data Security Measures
yyphp implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:
- Transport Layer Security (TLS 1.3): All data transmitted between your device and yyphp servers is encrypted in transit.
- AES-256 encryption at rest: Sensitive data including identity documents and payment information is encrypted in our databases.
- Access controls: Personal data is accessible only to yyphp employees and contractors who require it to perform their role. Access is granted on a least-privilege basis and subject to regular review.
- Two-factor authentication: Available for all player accounts and mandatory for administrative system access.
- Penetration testing: Regular third-party security assessments of the Platform's infrastructure and application layers.
- Incident response plan: A documented procedure for identifying, containing, and reporting personal data breaches in accordance with NPC requirements.
8 Data Retention
yyphp retains personal data for no longer than is necessary for the purpose it was collected, subject to minimum retention periods imposed by Philippine law:
- Active account data: Retained for the duration of your account and for a period of five (5) years following account closure, as required by PAGCOR and AMLA regulations.
- Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by AMLA and PAGCOR reporting obligations.
- KYC and identity documents: Retained for five (5) years from account closure or the completion of the last transaction, whichever is later.
- Support and communications records: Retained for three (3) years from the date of the last communication, unless a longer period is required for an unresolved dispute.
- Marketing consent records: Retained for the duration of your active consent and for one (1) year thereafter as proof of consent.
- Technical and log data: Retained for thirteen (13) months to support security monitoring and fraud investigation.
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.
9 Your Rights Under the Data Privacy Act of 2012
As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by yyphp. You may exercise any of these rights by contacting our Data Protection Officer at the address provided in Section 13.
Right to be Informed
You have the right to know what personal data yyphp holds about you, why it is being processed, and with whom it is shared.
Right of Access
You may request a copy of the personal data yyphp holds about you, including transaction and account records.
Right to Rectification
You may request correction of any inaccurate or incomplete personal data held about you, subject to identity verification.
Right to Erasure
You may request deletion of your personal data where there is no longer a lawful basis for processing, subject to legal retention obligations.
Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes. yyphp will cease such processing unless we can demonstrate compelling legitimate grounds.
Right to Data Portability
Where technically feasible, you may request your personal data in a structured, commonly used, machine-readable format for transfer to another service.
yyphp will respond to all data subject requests within thirty (30) days of receipt. Where a request is complex or numerous, we may extend this period by a further two months, in which case we will notify you within the initial thirty-day period. We will not charge a fee for processing reasonable requests, but may charge a reasonable administrative fee for manifestly unfounded or excessive requests.
If you are not satisfied with how yyphp has handled your request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
10 Children & Minors
The yyphp Platform is strictly intended for use by individuals aged 21 years and above, in accordance with PAGCOR regulations governing online gambling in the Philippines. yyphp does not knowingly collect personal data from individuals under the age of 21.
If yyphp becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the collected personal data as far as is legally permissible, and report the matter to PAGCOR as required. Any funds deposited to an underage account will be returned to the payment source after deducting any applicable processing fees imposed by the payment provider.
If you are a parent or guardian and believe that a minor in your care has registered an account with yyphp, please contact our Data Protection Officer immediately at the contact details provided in Section 13.
11 Cross-Border Data Transfers
yyphp's primary data processing infrastructure is located within the Philippines. However, certain service providers — including game content providers and KYC verification partners — may be located in other countries, which may result in your personal data being transferred to and processed in jurisdictions outside the Philippines.
Where cross-border data transfers occur, yyphp ensures that an adequate level of data protection is maintained through one or more of the following safeguards:
- Entering into data transfer agreements incorporating standard contractual clauses approved by the National Privacy Commission.
- Transferring data only to jurisdictions that the NPC has determined provide an adequate level of data protection.
- Obtaining your explicit consent to the transfer where required and where no other lawful transfer mechanism applies.
You may request further information about the safeguards applied to cross-border transfers by contacting our Data Protection Officer.
12 Updates to This Privacy Policy
yyphp reviews this Privacy Policy at least annually and whenever there is a material change to our data processing activities, a change in applicable law, or a regulatory update from the National Privacy Commission or PAGCOR. The most current version of this Policy is always available at yyphp.net/privacy-policy.
Where we make material changes to this Policy, we will notify registered players by email and display a prominent notice on the Platform for a period of at least thirty (30) days prior to the changes taking effect. For minor, non-material updates (such as corrections to typographical errors or clarifications that do not alter the substance of our processing), we will update the "Last Updated" date at the top of this page without separate notification.
Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you should cease using the Platform and may request account closure by contacting our support team.
13 Contact Us & Data Protection Officer
yyphp has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Policy, please contact us:
Email: [email protected]
Available Monday to Sunday, 9:00 AM – 9:00 PM (Philippine Standard Time)
When submitting a data subject request, please include your registered email address, a description of your request, and a copy of a valid government-issued ID to enable us to verify your identity before processing your request. Identity verification is required to protect against unauthorised disclosure of your personal data to third parties.
If you are not satisfied with yyphp's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. This Policy was last reviewed and updated in January 2026.
Your Data Is Safe. Now Enjoy the Game.
With your privacy protected under Philippine law and PAGCOR regulation, you can focus on what matters — great games, fast payouts, and a premier Filipino casino experience at yyphp.
Your data is never sold. Regulated by PAGCOR. 21+ only. Please gamble responsibly.