hyph Privacy Policy

1. Introduction

hyph ("hyph", "we", "us", "our") operates the online gaming platform accessible at hyph.asia and any associated interfaces (the "Platform"). In providing the Platform and its associated gaming, payment, and support services to users in the Philippines and elsewhere, hyph processes personal data about registered players and visitors.

This Privacy Policy ("Policy") sets out the basis on which personal data collected from you, or provided by you, will be processed by hyph. This Policy is incorporated by reference into the hyph Terms & Conditions, available at /terms-conditions. Terms not defined here carry the meaning given to them in the Terms & Conditions.

hyph is committed to safeguarding the privacy of its users. We process personal data in accordance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, and its implementing rules and regulations, as enforced by the National Privacy Commission (NPC).

2. Data We Collect

2.1 Information You Provide Directly

When you register a hyph account, make transactions, contact support, or otherwise interact with the Platform, you provide us with information including:

• Full legal name, date of birth, and nationality;
• Contact details: email address, mobile number, and residential address;
• Login credentials (your password is stored in hashed form and is never accessible to hyph staff in plain text);
• Government-issued identification documents submitted during KYC verification (e.g., Philippine passport, SSS ID, PhilSys ID, driver's licence);
• Payment information: GCash mobile number, PayMaya account details, bank account details for BPI, BDO, or Metrobank transactions. hyph does not store full card numbers or full bank account numbers;
• Communications you send to hyph support via live chat or email.

2.2 Information Collected Automatically

When you access the hyph Platform, we automatically collect certain technical data:

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser type and version;
• Session data: pages visited, game sessions started, duration of activity, and click-path data;
• Transaction logs: all deposits, withdrawals, bets placed, and game outcomes associated with your hyph account;
• Cookie identifiers and similar tracking technologies (see Section 6).

2.3 Information from Third Parties

Where you use social login (Google, Facebook) to access your hyph account, we receive limited profile data from that provider — typically your name and email address — in accordance with that provider's own privacy settings and permissions you have granted.

hyph may also receive identity verification signals from third-party KYC service providers used to confirm the accuracy of the information you have submitted.

3. How We Use Your Data

hyph uses the personal data we collect for the following purposes:

• Account management: Creating and maintaining your hyph account, verifying your identity, and processing your login sessions;
• Transaction processing: Facilitating GCash, PayMaya, BPI, BDO, and Metrobank deposits and withdrawals in Philippine Peso;
• Game delivery: Providing access to slots, live casino, bingo, Teen Patti 20-20, Mines, and all other hyph game categories;
• Regulatory compliance: Fulfilling KYC, AML (anti-money laundering), and PAGCOR-aligned reporting obligations;
• Customer support: Responding to enquiries submitted via live chat and email, and resolving disputes;
• Responsible gaming: Monitoring account activity to identify patterns that may indicate problem gambling and administering player-requested tools such as deposit limits and self-exclusion;
• Fraud prevention and security: Detecting and investigating suspicious activity, protecting the integrity of the Platform, and enforcing the hyph Terms & Conditions;
• Communications: Sending account notifications, bonus and promotion information, and platform updates. You may opt out of marketing communications at any time from your account settings;
• Platform improvement: Analysing aggregate usage data to improve the hyph platform, game offering, and user experience.

4. Legal Basis for Processing

hyph processes your personal data on one or more of the following lawful bases as recognised under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfil our obligations under the hyph Terms & Conditions, including account management and transaction processing;
• Legal obligation: Processing necessary to comply with applicable Philippine laws, including KYC and AML requirements and PAGCOR-aligned obligations;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interests are not overridden by your rights;
• Consent: Where you have given specific, informed consent — for example, for marketing communications. Consent may be withdrawn at any time.

5. Data Sharing & Disclosure

hyph does not sell your personal data to third parties. We may share your personal data with the following categories of recipients where necessary and lawful:

• Payment processors: GCash (GXI), PayMaya, BPI, BDO, and Metrobank, solely to the extent required to process your transactions;
• KYC and identity verification providers: Third-party services engaged to verify the identity documents you submit during account verification;
• Game software providers: Providers of the RNG and live dealer game engines used on the hyph Platform may process limited session data for game-integrity purposes;
• Regulatory and law enforcement authorities: Where required by applicable Philippine law, court order, or PAGCOR-aligned reporting obligations;
• Professional advisers: Legal, accounting, and auditing firms, subject to professional confidentiality obligations;
• Business transfers: In the event of a merger, acquisition, or sale of hyph's business assets, personal data may be transferred as part of that transaction, subject to the acquirer assuming equivalent privacy obligations.

All third-party service providers who process personal data on behalf of hyph are required to do so only for the specified purpose, under a data processing agreement that imposes obligations at least equivalent to those in this Policy.

6. Cookies & Tracking Technologies

hyph uses cookies and similar technologies (including local storage and session tokens) to operate the Platform, remember your preferences, authenticate your session, and analyse Platform usage. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens and security cookies. These cannot be disabled without breaking core Platform functionality;
• Functional cookies: Remember your preferences such as language settings and display options;
• Analytics cookies: Collect aggregate, anonymised data about how users navigate the Platform, which helps hyph improve the user experience;
• Marketing cookies: Where you have consented, used to deliver relevant hyph promotions. You may withdraw this consent at any time.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent your ability to use the hyph platform.

7. Data Retention

hyph retains your personal data for as long as your account remains active and for a period of at least five (5) years after account closure, or for such longer period as may be required by applicable law — in particular, the anti-money laundering record-keeping requirements applicable to online gaming operators in the Philippines.

Transaction records, bet histories, and KYC documents are retained for the minimum period required by PAGCOR-aligned compliance obligations. After the applicable retention period, data is securely deleted or anonymised.

8. Data Security

hyph implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• TLS/HTTPS encryption for all data transmitted between your device and the hyph Platform;
• Encryption at rest for sensitive data including identification documents and payment details;
• Password hashing using modern one-way algorithms — plain-text passwords are never stored;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing of the hyph infrastructure;
• Two-factor authentication available to all players for additional account security.

Despite these measures, no internet-based system is completely secure. hyph cannot guarantee absolute security and is not liable for breaches resulting from events outside its reasonable control. In the event of a data breach that poses a risk to your rights, hyph will notify the National Privacy Commission and affected users as required by Philippine law.

9. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by hyph:

• Right to be informed: To know what personal data hyph holds about you and how it is processed;
• Right of access: To request a copy of the personal data hyph holds about you;
• Right to rectification: To request correction of inaccurate or incomplete personal data;
• Right to erasure: To request deletion of your personal data, subject to hyph's legal retention obligations;
• Right to object: To object to processing based on legitimate interests, including direct marketing;
• Right to data portability: To receive your personal data in a structured, commonly used format where technically feasible;
• Right to withdraw consent: To withdraw consent for consent-based processing at any time, without affecting prior processing.

To exercise any of these rights, contact the hyph Data Protection Officer at [email protected]. hyph will respond within thirty (30) calendar days. Identity verification may be required before processing your request.

10. Children & Minors

11. Changes to This Privacy Policy

hyph reserves the right to update this Privacy Policy at any time to reflect changes in legal requirements, Platform features, or our data practices. When material changes are made, hyph will notify registered users by email or in-platform notification at least seven (7) days before the updated Policy takes effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Platform after the effective date of any revision constitutes acceptance of the updated Policy.

12. Contact & Data Protection Officer

For questions, concerns, or requests relating to this Privacy Policy or your personal data, contact hyph's Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 through the hyph Platform
• Response time: Within 1 business day for privacy-related enquiries

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe hyph has not handled your personal data in accordance with the Data Privacy Act of 2012.