yesph Privacy Policy

Introduction

Welcome to the yesph Privacy Policy. yesph ("we", "us", "our") is committed to protecting the personal information of every Filipino player who uses our platform. This Privacy Policy has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC).

This document describes in detail what personal information yesph collects, why we collect it, how we use it, who we may share it with, how long we keep it, and what rights you have over your own data. We have written this policy in plain, accessible English so that Filipino players from Manila to Cebu to Davao can clearly understand how their information is handled.

yesph operates under the PAGCOR regulatory framework, which imposes specific obligations on us with respect to player data, anti-money laundering (AML) record-keeping, and Know Your Customer (KYC) verification. Some data collection and retention practices described in this policy are mandatory requirements of our regulatory obligations — they are not optional, and we cannot waive them even at a player's request.

Information We Collect

yesph collects personal information from you in several ways — directly when you register or interact with the platform, automatically as you browse and play, and from third parties where required for verification purposes. The categories of information we collect are as follows:

2.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, Philippine residential address, email address, and mobile number.
• Identity verification documents: Government-issued photo ID (e.g., Philippine passport, SSS ID, driver's licence, PhilSys National ID), proof of address, and selfie verification where required.
• Payment information: GCash number, PayMaya account, bank account details (BPI, BDO, Metrobank), or card details (Visa, Mastercard) used for deposits and withdrawals. Full card numbers are never stored by yesph — only tokenised references provided by our payment processors.
• Communications: Messages sent to yesph support via email, live chat, or any feedback form on the platform.
• Responsible gaming preferences: Self-exclusion requests, deposit limits, session reminders, and any other responsible gaming tool settings you configure.

2.2 Information Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, games played, session duration, wagering history, login timestamps, and clickstream data.
• Location data: General geographic location inferred from your IP address. yesph does not collect precise GPS location data.
• Cookie data: Identifiers set by cookies and similar tracking technologies, as described in Section 6 of this policy.

2.3 Information From Third Parties

• Identity verification providers: Where yesph uses third-party KYC verification services, those providers may return verification results and risk scores to us.
• Payment processors: Transaction status, payment method confirmation, and fraud screening results from GCash, PayMaya, and our banking partners.
• Regulatory databases: PAGCOR and other regulatory bodies may provide information relevant to player eligibility, self-exclusion status, or compliance screening.

How We Use Your Data

yesph uses personal data only for legitimate, clearly defined purposes. We do not use your data for purposes incompatible with those listed below:

• Account creation and management: To set up and maintain your yesph Player Account, verify your identity, and ensure your account operates correctly.
• Transaction processing: To process PHP deposits and withdrawals through GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard, and to maintain accurate financial records.
• Regulatory compliance: To meet our obligations under Philippine anti-money laundering law, PAGCOR licensing requirements, and the Data Privacy Act of 2012. This includes KYC verification and suspicious transaction reporting.
• Customer support: To respond to your queries, resolve disputes, and provide technical assistance.
• Platform security and fraud prevention: To detect and prevent fraudulent transactions, account takeovers, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, and to apply deposit limits, self-exclusion, and other responsible gaming tools you have requested.
• Platform improvement: To analyse usage trends, troubleshoot technical issues, and improve the overall experience for Filipino players across the yesph platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. You may withdraw your marketing consent at any time.

Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, yesph must have a lawful basis for processing your personal information. The legal bases we rely on are:

• Contractual necessity: Processing your registration data, payment details, and gameplay records is necessary to provide you with our gaming services under your Player Account agreement.
• Legal obligation: Processing required for KYC verification, AML record-keeping, and regulatory reporting to PAGCOR is mandated by Philippine law and cannot be waived.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring is carried out on the basis of yesph's legitimate interest in operating a safe and compliant gaming environment.
• Consent: Processing for marketing communications and non-essential cookies is carried out only where you have given your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing & Disclosure

yesph does not sell your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• PAGCOR and Philippine regulatory authorities: As required by our operating licence and applicable Philippine gaming and AML regulations.
• Philippine law enforcement agencies: Where required by a valid court order, subpoena, or lawful request from the National Bureau of Investigation (NBI), Philippine National Police (PNP), or other competent authority.
• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard — for the purpose of processing your transactions. These providers are subject to their own privacy policies and applicable financial regulations.
• KYC and identity verification providers: Third-party providers engaged by yesph to conduct identity verification checks as required for regulatory compliance.
• IT and platform service providers: Cloud hosting, database, and cybersecurity service providers who process data on yesph's behalf under strict data processing agreements.
• Game software providers: Where technically necessary, limited gameplay data may be shared with the providers of the games available on yesph (e.g., RNG game studios, live dealer platform operators).

Cookies & Tracking Technologies

yesph uses cookies and similar tracking technologies on the yesph.bet platform. Cookies are small text files stored on your device that help us operate the platform effectively and improve your experience.

The types of cookies we use are:

• Strictly necessary cookies: Required for the platform to function. These include session management cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations.
• Analytics cookies: Help yesph understand how players navigate the platform, which games are most popular, and where technical issues may arise. This data is aggregated and anonymised where possible.
• Marketing cookies: Used only where you have opted in, to deliver relevant promotional content about yesph games, bonuses, and offers. These are not used to track you across third-party websites.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the yesph platform. Strictly necessary cookies cannot be disabled as they are essential for platform operation.

Data Retention

yesph retains your personal data for as long as is necessary for the purposes for which it was collected, and in compliance with applicable Philippine legal and regulatory requirements. The following retention periods apply:

When data is no longer required, yesph securely deletes or anonymises it in accordance with our internal data disposal procedures.

Data Security

yesph implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• Encryption: All data transmitted between your device and yesph servers is encrypted using TLS (Transport Layer Security). Sensitive data at rest is encrypted using industry-standard encryption algorithms.
• Access controls: Access to player personal data within yesph is restricted to authorised personnel on a strict need-to-know basis. All staff with data access undergo background checks and regular privacy training.
• Secure payment processing: yesph does not store full card numbers. Payment data is handled by PCI DSS-compliant payment processors. GCash and PayMaya transactions are processed through the providers' own secure environments.
• Intrusion detection: yesph operates continuous monitoring systems to detect and respond to potential security incidents in real time.
• Incident response: In the event of a personal data breach that is likely to cause serious harm to affected individuals, yesph will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required by Philippine law, and will notify affected players promptly.

Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by yesph:

• Right to be informed: You have the right to know whether yesph holds personal data about you, and to receive clear information about how it is used — which is the purpose of this Privacy Policy.
• Right to access: You may request a copy of the personal data yesph holds about you, along with information about how it is used and who it has been shared with.
• Right to rectification: If any personal data yesph holds about you is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to erasure: You may request that yesph delete your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and there is no other lawful basis for continued processing. Note that data required to be retained under Philippine regulatory law cannot be deleted early.
• Right to object: You may object to yesph processing your data on the basis of legitimate interests, including for direct marketing purposes.
• Right to data portability: You may request a structured, machine-readable copy of personal data you have provided to yesph, where technically feasible.
• Right to lodge a complaint: If you believe yesph has not handled your personal data in accordance with the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of your data rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Privacy Request". We will respond to all valid requests within thirty (30) calendar days. In complex cases, we may extend this period by a further thirty (30) days with prior notice to you.

Children's Privacy

The yesph platform is strictly intended for individuals who are 21 years of age or older, in compliance with Philippine gaming regulations. yesph does not knowingly collect, process, or store personal data from any person under the age of 21.

If yesph discovers or is notified that a registered Player is under 21 years of age, we will immediately:

1. Suspend the Player Account and block further access to the platform.
2. Void all wagers and winnings associated with the underage account.
3. Return any eligible deposit balance to the depositing payment method.
4. Delete or anonymise all personal data associated with the account to the extent not required to be retained for regulatory or legal purposes.
5. Report the incident to PAGCOR in accordance with our regulatory obligations.

If you are a parent or guardian and believe a minor has accessed or registered on the yesph platform, please contact us immediately at [email protected] so that we can take prompt action.

Third-Party Links

The yesph platform may from time to time contain references to game providers, payment services, or other third-party services. While yesph takes reasonable steps to only engage reputable third-party partners, we do not control their privacy practices and cannot be responsible for the content of their privacy policies.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your yesph experience, including the privacy policies of GCash, PayMaya, BPI, BDO, and Metrobank when making payments through those channels.

Changes to This Privacy Policy

yesph reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, Philippine privacy law, or PAGCOR regulatory requirements. When we make material changes, we will notify active Players via the platform or by email to the registered address on file, at least seven (7) days before the changes take effect.

The date at the top of this Privacy Policy indicates when it was last updated. We encourage you to review this policy periodically to stay informed about how yesph protects your personal data. Your continued use of the yesph platform after an updated policy has taken effect constitutes your acknowledgement of the revised terms.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or yesph's handling of your personal data, please reach out to our Data Protection Officer:

• Email: [email protected] (subject line: "Data Privacy Request")
• Response time: Within 30 calendar days for all data rights requests
• Support hours: 24/7 for general queries; data rights requests processed during business hours (8:00 AM – 6:00 PM PHT, Monday to Friday)

If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for the enforcement of the Data Privacy Act of 2012.