01 Introduction
hyp77 is an online casino and sports betting platform serving the Philippine market. We are committed to protecting the privacy and personal data of every player who registers and participates on our platform. This Privacy Policy describes how hyp77 ("we", "us", "our", "the Company") collects, uses, stores, shares, and safeguards your personal information when you access or use the hyp77 website at hyp77.net, including all associated pages, game content, and the mobile-optimised browser experience.
This Privacy Policy is governed by the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, together with its Implementing Rules and Regulations and the issuances of the National Privacy Commission (NPC). Where our operations intersect with requirements under the PAGCOR regulatory framework, we also comply with applicable PAGCOR data handling obligations.
This Privacy Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference into the overall agreement between you and hyp77.
02 Personal Data We Collect
hyp77 collects personal data in the following categories, depending on how you interact with our platform:
2.1 Registration Data
When you create a hyp77 account, we collect the information you provide during the registration process, including:
- Full legal name (as it appears on your government-issued ID)
- Date of birth (used for 21+ age verification as required by Philippine law)
- Residential address (including city — Metro Manila, Cebu, Davao, Quezon City, or elsewhere in the Philippines)
- Email address and mobile phone number
- Username and encrypted password
- Preferred language and currency (Philippine Peso, ₱)
2.2 Identity Verification (KYC) Data
To comply with our PAGCOR regulatory obligations and anti-money laundering (AML) requirements under Republic Act No. 9160, we are required to verify your identity before processing withdrawals and at certain deposit thresholds. KYC data we collect may include:
- Copies of government-issued photo identification (Philippine passport, SSS ID, UMID, driver's licence, PhilSys national ID)
- Proof of residential address (utility bills, bank statements dated within three months)
- Proof of ownership of payment methods used on the platform (GCash, PayMaya, BPI, BDO, Metrobank accounts)
- Source of funds documentation where AML monitoring thresholds are triggered
- Selfie or live photo for liveness verification purposes
2.3 Financial Transaction Data
We collect records of all financial transactions conducted through the hyp77 cashier, including deposits, withdrawals, bonus credits, wagering activity, and balance adjustments. This data includes transaction timestamps, amounts in Philippine Peso (₱), payment method references, and transaction status records.
2.4 Technical and Device Data
When you access the hyp77 platform, our systems automatically collect certain technical information, including:
- IP address and approximate geolocation data
- Device type, operating system, and browser version
- Session timestamps and session duration records
- Pages visited within the platform and navigation patterns
- Game play logs including game titles accessed, wager amounts, and session outcomes
2.5 Communications Data
If you contact the hyp77 support team via email or live chat, we retain records of those communications, including the content of your messages, timestamps, and the support agent's responses. This data is used for quality assurance, dispute resolution, and staff training purposes.
2.6 Responsible Gaming Data
Where you use our responsible gaming tools — such as deposit limits, cooling-off periods, or self-exclusion — we record the settings you apply, the dates they were activated, and any modifications you request. This data is used to enforce the restrictions you have set and to meet our player protection obligations under PAGCOR guidelines.
03 How We Collect Your Data
hyp77 collects personal data through the following means:
- Directly from you — when you complete the registration form, submit KYC documents, make deposits or withdrawals, contact support, or interact with any feature of the platform that requires you to submit information.
- Automatically through the platform — via server logs, session tracking, and browser-based technologies (see Section 7 on Cookies & Tracking) when you access and navigate the hyp77 website.
- From third-party service providers — including identity verification and KYC providers who validate the authenticity of documents you submit, and payment processors who confirm the status of financial transactions.
- From regulatory and law enforcement authorities — where we receive lawful requests for information or are required to share and receive data as part of AML compliance procedures under applicable Philippine law.
04 How We Use Your Personal Data
hyp77 uses the personal data we collect for the following purposes:
| Purpose | Data Used |
|---|---|
| Account creation and management | Registration data, device data |
| Identity and age verification (21+ requirement) | KYC documents, registration data |
| Payment processing and fraud prevention | Financial transaction data, KYC data |
| AML compliance and PAGCOR regulatory reporting | Financial data, KYC data, source of funds |
| Customer support and dispute resolution | Communications data, account data |
| Platform security and abuse prevention | Technical data, device data, IP address |
| Responsible gaming tool enforcement | Responsible gaming data, wagering logs |
| Platform analytics and performance improvement | Technical data, navigation patterns (anonymised) |
| Marketing communications (where consent given) | Email address, preference data |
05 Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012, hyp77 processes your personal data on the following legal grounds:
- Consent: Where you have freely given, specific, informed, and unambiguous consent to the processing of your personal data — for example, consent to receive marketing communications or consent to optional profiling features.
- Contractual Necessity: Where processing is necessary for the performance of the contract between you and hyp77, including the operation of your account, processing deposits and withdrawals, and delivering game access.
- Legal Obligation: Where processing is required to comply with applicable Philippine laws, including the Data Privacy Act, the Anti-Money Laundering Act (RA 9160), and PAGCOR regulatory requirements including KYC and AML obligations.
- Legitimate Interests: Where processing is necessary for the legitimate interests of hyp77 — such as fraud prevention, platform security, abuse detection, and internal analytics — provided that these interests are not overridden by your fundamental rights and freedoms as a data subject.
06 Data Sharing & Third Parties
hyp77 does not sell or rent your personal data to third parties. We share your personal data only in the circumstances described below, and only to the extent necessary for the specified purpose:
6.1 Service Providers
We engage third-party service providers who process personal data on our behalf to deliver components of the hyp77 platform. These include identity verification and KYC solution providers, payment gateway processors for GCash, PayMaya, BPI, BDO, and Metrobank transactions, cloud infrastructure and hosting providers, and customer support platform providers. All such providers are subject to contractual data processing agreements that require them to handle your data securely and in accordance with applicable Philippine law.
6.2 Game Content Providers
Certain technical game play data (such as game session identifiers, wager amounts, and round outcomes) is shared with third-party game content providers including JILI Technology, PG Soft, and Pragmatic Play, solely for the purpose of delivering and settling game rounds. These providers operate under their own data security standards and are engaged under agreements that restrict their use of data to the game delivery purpose only.
6.3 Regulatory Authorities
hyp77 may be required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other competent Philippine government authorities where required by law, court order, or legitimate regulatory request. In such cases, hyp77 will disclose only the minimum data required to satisfy the legal obligation.
6.4 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of assets involving hyp77 or its parent entity, personal data held by hyp77 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer that materially affects how your personal data is used, and where required by law, your consent will be sought before the transfer takes place.
07 Cookies & Tracking Technologies
The hyp77 platform uses cookies and similar tracking technologies to operate and improve the platform experience. A cookie is a small text file stored on your browser or device when you visit a website. hyp77 uses the following types of cookies:
- Strictly Necessary Cookies: Required for core platform functionality, including maintaining your logged-in session, remembering your account preferences, and enabling the cashier to function correctly. These cookies cannot be disabled without breaking core platform features.
- Analytical / Performance Cookies: Used to collect anonymised data about how players navigate the hyp77 platform — such as which game categories are most visited, session duration patterns, and page load performance metrics. This data helps us improve the platform for Filipino players.
- Functional Cookies: Used to remember your optional preferences, such as your selected language settings and responsible gaming display preferences.
- Security Cookies: Used for fraud detection and abuse prevention purposes, including detection of multiple account registrations and unusual login activity patterns.
You may manage or restrict non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the hyp77 platform. hyp77 does not use third-party advertising or behavioural targeting cookies for external ad networks.
08 Data Retention
hyp77 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to the following specific retention periods:
- Account Data: Retained for the duration of your active account relationship with hyp77, plus a minimum of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements and applicable Philippine AML regulations.
- KYC & Identity Documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later, as required under the Anti-Money Laundering Act of the Philippines.
- Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, consistent with AMLC and PAGCOR regulatory requirements.
- Customer Support Communications: Retained for three (3) years from the date of the interaction for dispute resolution and quality assurance purposes.
- Technical and Device Logs: Retained for twelve (12) months from collection for security and fraud prevention purposes, after which they are deleted or anonymised.
- Marketing Consent Records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, to demonstrate compliance with consent requirements.
Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction procedures.
09 Data Security
hyp77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
- Encryption: All data transmitted between your browser and the hyp77 platform is encrypted using TLS (Transport Layer Security). Sensitive data at rest, including KYC documents and financial records, is stored using AES-256 encryption.
- Access Controls: Access to personal data is restricted on a strict need-to-know basis. All hyp77 personnel with access to personal data are subject to confidentiality obligations and receive regular data protection training.
- Two-Factor Authentication: Players are encouraged to enable 2FA on their hyp77 accounts. Internal administrative access to player data systems requires multi-factor authentication for all personnel.
- Regular Security Audits: Our platform undergoes periodic penetration testing and security vulnerability assessments conducted by independent security professionals.
- Incident Response: hyp77 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and interests, we will notify the National Privacy Commission within 72 hours of discovery, and affected players will be informed without undue delay.
10 Your Rights as a Data Subject
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to the personal data held about you by hyp77: