hiyabet Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how hiyabet ("hiyabet", "We", "Us", "Our") collects, uses, stores, discloses, and protects personal data provided by or collected about individuals ("Data Subjects", "You") who access or use the hiyabet online casino and sports betting platform at hiyabet.club (the "Platform").

This Policy applies to all personal data processed in connection with your use of hiyabet, including data collected during account registration, identity verification, financial transactions, customer support interactions, and general use of the Platform. It applies regardless of the device or channel through which you access hiyabet.

hiyabet is committed to processing personal data in a lawful, fair, and transparent manner consistent with the Philippine Data Privacy Act of 2012 (Republic Act 10173), its Implementing Rules and Regulations, the National Privacy Commission's issuances, and all other applicable Philippine laws governing the processing of personal information.

By registering a hiyabet account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must cease using the Platform immediately.

2. Data Controller Information

hiyabet acts as the Personal Information Controller (as defined under RA 10173) with respect to all personal data processed in connection with the Platform. hiyabet has appointed a Data Privacy Officer ("DPO") who is responsible for ensuring ongoing compliance with applicable privacy laws and for handling Data Subject requests.

To contact hiyabet's Data Privacy Officer: [email protected] (this is a plain text address — not a clickable hyperlink). All data subject access requests, correction requests, erasure requests, and privacy complaints directed to this address will be logged and responded to within fifteen (15) business days of receipt, consistent with NPC guidelines.

3. Personal Data We Collect

hiyabet collects the following categories of personal data from and about its account holders and Platform users:

Registration and Identity Data:

• Full legal name as it appears on your government-issued identification
• Date of birth (for age verification — hiyabet is strictly 21+)
• Philippine residential address
• Email address
• Philippine mobile number
• Username and encrypted password

KYC Verification Data:

• Government-issued photo identification (driver's licence, passport, PhilSys ID, SSS/UMID card, or equivalent)
• Proof of address documentation
• Source of funds documentation (where required by AML procedures)
• Selfie or live photo for biometric identity matching (where applicable)

Financial and Transaction Data:

• GCash account reference, PayMaya account reference, bank account details (where used for transactions)
• Deposit history, withdrawal history, and current PHP wallet balance
• Bonus and promotion history
• Transaction timestamps, amounts, and reference numbers

Gaming Activity Data:

• Games played, wagers placed, wins and losses
• Session duration and frequency data
• Responsible gaming tool usage and settings

Technical and Device Data:

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Cookies and session identifiers (see Section 8)
• Login timestamps and authentication logs

Communications Data:

• Customer support interaction records (live chat transcripts, email correspondence)
• Feedback, complaints, and dispute records

4. How We Collect Your Data

hiyabet collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, contact support, or use Platform features.
• Automatically — through cookies, log files, and analytics tools when you access or use the Platform (see Section 8).
• From third-party identity verification services — hiyabet may use accredited third-party KYC providers to verify the authenticity of identity documents and cross-reference government databases where legally permitted.
• From payment processors — transaction confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, and other approved payment channels.
• From PAGCOR and regulatory authorities — information shared by PAGCOR or other competent Philippine authorities in the exercise of regulatory oversight.

5. Legal Basis for Processing

hiyabet processes personal data on the following legal bases as recognised under the Philippine Data Privacy Act:

Processing Purpose	Legal Basis
Account registration and management	Performance of contract (Terms & Conditions)
KYC identity verification	Legal obligation (PAGCOR licence, AMLA)
Processing deposits and withdrawals	Performance of contract
Fraud prevention and security monitoring	Legitimate interest / Legal obligation
Regulatory reporting to PAGCOR	Legal obligation
Responsible gaming monitoring	Legal obligation / Legitimate interest
Marketing communications	Consent (opt-in; withdrawable at any time)
Analytics and Platform improvement	Legitimate interest

6. How We Use Your Personal Data

hiyabet uses the personal data it collects for the following purposes:

• To create, verify, and manage your hiyabet Player Account.
• To process financial transactions including deposits, withdrawals, and bonus credits in PHP.
• To verify your identity and age (21+ requirement) as required by PAGCOR and the Anti-Money Laundering Act.
• To detect, investigate, and prevent fraud, money laundering, and other unlawful activity.
• To comply with our legal and regulatory obligations, including mandatory reporting to PAGCOR and the Anti-Money Laundering Council (AMLC).
• To provide customer support and resolve disputes.
• To administer and enforce our responsible gaming tools and policies, including deposit limits, self-exclusion, and cooling-off periods.
• To send you account-related communications (transaction receipts, security alerts, policy updates) — these communications are operational and cannot be opted out of while your account is active.
• To send you marketing communications about promotions, new games, and offers — only where you have provided explicit consent, and subject to your right to withdraw that consent at any time.
• To improve the Platform's performance, usability, and content through aggregated and anonymised analytics data.

7. Disclosure of Personal Data

hiyabet does not sell or commercially exploit your personal data. We may disclose your personal data to the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements where required:

• PAGCOR and Philippine regulatory authorities — as required by our operating licence and applicable gaming regulations.
• Anti-Money Laundering Council (AMLC) — for mandatory suspicious transaction reporting under the AMLA and its implementing rules.
• Payment processors — GCash, PayMaya, and banking partners, solely for the purpose of processing your financial transactions.
• KYC and identity verification service providers — accredited third-party providers engaged to verify your identity documents.
• Game providers — where necessary to resolve game disputes or provide technical support; limited to gaming activity data relevant to the specific dispute.
• IT and security service providers — cloud hosting, fraud detection, and cybersecurity vendors engaged by hiyabet under binding data processing agreements.
• Professional advisers — legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.
• Law enforcement and courts — where disclosure is required by a valid court order, subpoena, or other lawful demand from a competent Philippine authority.

hiyabet will not disclose your personal data to any third party for their own marketing or commercial purposes without your explicit prior consent.

8. Cookies and Tracking Technologies

hiyabet uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function, including session management, authentication, and security. These cannot be disabled without preventing access to the Platform.
• Performance and analytics cookies: Collect anonymised data on how users interact with the Platform to help hiyabet identify technical issues and improve user experience. Data is aggregated and not linked to individual accounts.
• Functional cookies: Remember your preferences (e.g., preferred language, game settings) to personalise your experience.
• Marketing cookies: Used only with your consent to measure the effectiveness of promotional campaigns and serve relevant content within the Platform.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may impair the functionality of the hiyabet Platform. Marketing cookies require your explicit consent and can be withdrawn at any time through your account preferences.

9. Data Retention

hiyabet retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following mandatory minimum retention periods:

• KYC and identity verification records: Minimum of five (5) years from account closure, as required by PAGCOR and AMLA regulations.
• Financial transaction records: Minimum of five (5) years from the date of each transaction, consistent with AMLA retention requirements.
• Gaming activity logs: Minimum of two (2) years from the date of the activity, subject to any ongoing regulatory investigation.
• Customer support records: Three (3) years from the close of the relevant support interaction.
• Marketing consent records: Retained until withdrawal of consent plus three (3) years for evidentiary purposes.

Upon expiry of the applicable retention period and in the absence of any legal hold, hiyabet will securely delete or anonymise personal data in accordance with the NPC's recommended data disposal guidelines.

10. Data Security

hiyabet implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• 256-bit AES encryption for all personal data stored at rest.
• TLS 1.3 encryption for all data transmitted between your device and hiyabet's servers.
• Role-based access controls — personal data is accessible only to hiyabet personnel with a documented operational need.
• Multi-factor authentication for all hiyabet administrative system access.
• Regular third-party penetration testing and security audits.
• Comprehensive security incident response plan, including mandatory NPC breach notification procedures where a notifiable breach occurs.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a personal data breach that poses a real risk of serious harm, hiyabet will notify the NPC within seventy-two (72) hours of becoming aware of the breach, and will notify affected Data Subjects without undue delay as required under the Data Privacy Act.

11. Children and Minors

hiyabet is strictly intended for use by persons aged 21 years and above, consistent with PAGCOR's requirements for online gambling platforms in the Philippines. hiyabet does not knowingly collect personal data from any person under 21 years of age.

If hiyabet becomes aware that personal data has been collected from a person under 21, we will immediately close the associated account, delete the collected data (subject to any legal hold obligations), and refund any deposits made, net of any applicable statutory reporting requirements.

If you believe a minor has registered on or is accessing the hiyabet Platform, please notify us immediately at [email protected] (plain text — not a link).

12. Your Data Subject Rights

As a Data Subject under the Philippine Data Privacy Act, you have the rights described in this section. To exercise any of these rights, submit a written request to hiyabet's Data Privacy Officer at [email protected]. Your request will be acknowledged within five (5) business days and resolved within fifteen (15) business days, or such extended period as permitted by applicable NPC guidelines.

• Right to be informed — to know what data hiyabet holds and how it is used.
• Right of access — to obtain a copy of your personal data in a readable format.
• Right to rectification — to request correction of inaccurate or incomplete data.
• Right to erasure or blocking — to request deletion or suppression of data no longer necessary for its collection purpose, subject to legal retention obligations.
• Right to object — to object to processing for direct marketing at any time, unconditionally.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to lodge a complaint — to file a complaint with the Philippine National Privacy Commission (NPC) at privacy.gov.ph if you believe your privacy rights have been violated.

13. Cross-Border Data Transfers

hiyabet's primary data processing infrastructure is located within the Philippines. In certain circumstances, personal data may be transferred to or accessed from servers or processors located outside the Philippines — for example, where hiyabet uses internationally based cloud infrastructure providers or game technology partners.

Any cross-border transfer of personal data is conducted only where the recipient country provides an adequate level of data protection, or where appropriate contractual safeguards (including NPC-recognised data transfer agreements) are in place. hiyabet does not transfer personal data internationally without ensuring equivalent protection to that provided under Philippine law.

14. Changes to This Privacy Policy

hiyabet reserves the right to update this Privacy Policy at any time. The date of the most recent revision is indicated at the top of this page. For material changes, hiyabet will provide at least fourteen (14) days' advance notice to registered account holders via their registered email address, except where an immediate update is required to address a security vulnerability or comply with an urgent legal obligation.

Your continued use of the hiyabet Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with a revised Policy, you must cease using the Platform and request Account closure.

15. Contact and Complaints

For all privacy-related enquiries, data subject access requests, or complaints regarding hiyabet's handling of your personal data, contact our Data Privacy Officer:

• Email: [email protected] — plain text address, not a clickable link. Do not send sensitive documents via unencrypted email; contact us first to arrange a secure transfer method.
• Live Chat: Available 24/7 through the hiyabet Platform for general privacy enquiries.
• Response Time: Within 5 business days for acknowledgement; 15 business days for full resolution.

If you are dissatisfied with hiyabet's response to your privacy complaint, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines. Information on the NPC complaints process is available at the NPC's official website (privacy.gov.ph — note: as per site policy, we do not include external hyperlinks on this page).