gyperya Privacy Policy

1. Introduction

This Privacy Policy describes how gyperya ("gyperya", "we", "us", or "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you" or "your") who access or use the gyperya platform at gyperya.net, including all associated pages, mobile-optimised versions, and services offered therein.

gyperya operates in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all relevant issuances of the National Privacy Commission (NPC) of the Philippines. Where gyperya processes data of individuals in other jurisdictions, we also endeavour to meet the applicable data protection standards of those jurisdictions to the extent practicable.

By registering a gyperya Account, depositing funds, placing bets, or otherwise using our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this Privacy Policy, you must not use the gyperya platform.

---

2. Data Controller

For the purposes of applicable data privacy legislation, gyperya is the data controller in respect of the personal information it collects and processes through the gyperya platform. As data controller, gyperya determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable law.

---

3. Personal Data We Collect

gyperya collects the following categories of personal data, depending on how you interact with the platform:

3.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify the 21+ age requirement under Philippine gaming regulations)
• Residential address, including barangay, city or municipality, province, and postal code
• Email address and mobile phone number
• Nationality and government-issued ID details (e.g., PhilSys ID number, passport number, driver's licence number, SSS or GSIS number)

3.2 Financial and Transaction Data

• GCash mobile wallet number or Maya account reference
• Online banking account identifiers for BPI, BDO, or Metrobank (account name only — gyperya does not store full account numbers)
• Deposit and withdrawal transaction history, including amounts in Philippine Peso (₱), timestamps, and payment method used
• Wagering history, game results, and account balance records

3.3 Technical and Usage Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, browser type, and version
• Session logs, including login timestamps, pages visited, and features accessed
• Referring URLs and search terms used to reach the gyperya platform
• Game preferences and betting patterns (used for responsible gaming monitoring)

3.4 Communications Data

• Records of communications between you and gyperya's support team, including live chat transcripts and email correspondence
• Survey responses and feedback submitted through the platform
• Promotional opt-in preferences and marketing communication records

---

4. How We Collect Your Data

gyperya collects personal data through the following means:

Collection Method	Examples
Direct submission	Account registration form, KYC document upload, deposit/withdrawal requests, support contact form, survey responses
Automated collection	Cookies, web beacons, session tracking scripts, server logs generated when you browse or use the gyperya platform
Payment processors	Transaction confirmation data received from GCash, Maya, BPI, BDO, Metrobank, GrabPay, QR Ph, and 7-Eleven CLiQQ integrations
Identity verification	Data returned by third-party KYC service providers engaged to verify your identity and age
Fraud prevention	Device fingerprinting data and fraud scoring signals from security service providers
Regulatory bodies	Information received from PAGCOR or other relevant Philippine regulatory authorities in connection with licensing compliance

---

5. How We Use Your Personal Data

gyperya uses the personal data it collects for the following purposes:

• Account management: Creating, verifying, maintaining, and closing your gyperya Account, including processing your login credentials and enforcing the single-account policy.
• Identity and age verification: Confirming that you meet the 21+ age requirement and that your identity matches the details provided during registration, as required by applicable gaming regulations.
• Payment processing: Facilitating deposits and withdrawals in Philippine Peso (₱) through your chosen payment method, reconciling transactions, and investigating payment disputes.
• Service delivery: Enabling you to access and enjoy gyperya's games, including slots, sabong, roulette, bingo, live casino, and sports betting features.
• Customer support: Responding to your enquiries, resolving account issues, and processing complaints via gyperya's support channels.
• Regulatory compliance: Meeting gyperya's obligations under Philippine gaming regulations, anti-money laundering (AML) laws, and data privacy legislation, including record-keeping and reporting requirements.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, collusion, money laundering, and other prohibited conduct on the gyperya platform.
• Responsible gaming: Monitoring wagering behaviour for signs of problem gambling, applying self-imposed limits set by players, and enforcing self-exclusion requests.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, features, and user experience of the gyperya platform.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may withdraw this consent at any time.

---

6. Legal Basis for Processing

gyperya processes your personal data on one or more of the following legal bases, as applicable to each specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and gyperya, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with gyperya's obligations under Philippine law, including AML regulations, gaming licensing conditions, and the Data Privacy Act of 2012.
• Legitimate interests: Processing carried out in pursuit of gyperya's legitimate business interests, such as fraud prevention, platform security, and service improvement, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent, such as sending you direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

---

7. Data Sharing and Disclosure

gyperya does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes. gyperya may share your personal data with the following categories of recipients, strictly for the purposes described in this Privacy Policy:

• Payment service providers: GCash, Maya, GrabPay, BPI, BDO, Metrobank, QR Ph, and 7-Eleven CLiQQ, for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers engaged to verify player identity and age in compliance with regulatory requirements.
• Fraud prevention and security services: Providers of anti-fraud, device fingerprinting, and cybersecurity services engaged to protect the integrity of the gyperya platform.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law or regulation or in response to a lawful order.
• Professional advisers: Legal counsel, auditors, and accountants engaged by gyperya, subject to binding confidentiality obligations.
• Technology and hosting providers: Cloud infrastructure and IT service providers who process data on gyperya's behalf under data processing agreements that impose obligations consistent with this Privacy Policy.

Where gyperya engages third-party service providers to process personal data on its behalf, it does so by means of written data processing agreements that require those providers to implement appropriate technical and organisational security measures and to process personal data only on gyperya's documented instructions.

---

8. Cookies & Tracking Technologies

gyperya uses cookies and similar tracking technologies on its platform to enhance your user experience, keep you logged in across sessions, analyse platform usage, and support fraud prevention measures. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the gyperya platform to function. These include session authentication cookies and security tokens. They cannot be disabled without rendering the platform inoperable.
• Functional cookies: Used to remember your preferences, such as language settings, preferred payment method, and display options. These are not required for the platform to work but improve your experience.
• Analytics cookies: Used to collect anonymised data about how players use the gyperya platform, which pages are visited most frequently, and where errors occur. This data helps gyperya improve the platform.
• Security and fraud-detection cookies: Used to detect and prevent fraudulent or abusive activity, including multi-account detection and bot identification.

You may control the use of non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the gyperya platform. gyperya does not use cookies to serve third-party advertising or to track your activity across unrelated websites.

---

9. Data Retention

gyperya retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the duration of your Account relationship with gyperya and for such additional periods as may be required by applicable law or regulation. The following general retention guidelines apply:

Data Category	Retention Period	Basis
Account and identity data	Duration of account + 5 years after closure	AML regulations, gaming licensing
Transaction and wagering records	5 years from date of transaction	AMLC reporting obligations
KYC documents	5 years from account closure	RA 10173, AML compliance
Support communications	3 years from last interaction	Legitimate interests, dispute resolution
Marketing preferences	Until consent is withdrawn	Consent
Technical / session logs	13 months from collection	Security and fraud prevention

Upon expiry of the applicable retention period, gyperya will securely delete or anonymise the relevant personal data in a manner that prevents its reconstruction or re-identification.

---

10. Data Security

gyperya implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the gyperya platform
• Encryption at rest for all databases containing personal or financial data
• Role-based access controls ensuring that only authorised gyperya personnel with a legitimate need can access personal data
• Multi-factor authentication for all gyperya internal systems that handle personal data
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security specialists
• Continuous monitoring of platform systems for anomalous behaviour and security incidents
• Staff training on data privacy and information security obligations

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, gyperya will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected individuals without undue delay, in accordance with the requirements of RA 10173 and its Implementing Rules.

---

11. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to the personal data that gyperya holds about you:

To exercise any of the above rights, please contact gyperya's Data Protection Officer using the contact details provided in Section 15 of this Privacy Policy. gyperya will respond to all verified data subject requests within thirty (30) days of receipt. gyperya may request additional information to verify your identity before processing your request.

If you are not satisfied with gyperya's response to a privacy-related request or complaint, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

---

12. Minors

gyperya's platform and services are strictly intended for individuals aged 21 years and above. gyperya does not knowingly collect, process, or store the personal data of individuals under 21 years of age. The 21+ age requirement is enforced through the KYC verification process, which requires submission of a valid government-issued Philippine identification document confirming date of birth.

If gyperya becomes aware that an Account has been registered by, or personal data has been submitted on behalf of, an individual under the age of 21, gyperya will immediately suspend the Account, void any associated transactions, and securely delete the personal data in question in accordance with applicable law. Parents or guardians who believe that a minor has submitted personal data to gyperya are encouraged to contact us promptly at [email protected].

---

13. Cross-Border Data Transfers

Some of the third-party service providers engaged by gyperya — including cloud infrastructure providers, KYC verification services, and fraud prevention platforms — may process personal data outside of the Philippines. Where such cross-border transfers occur, gyperya ensures that adequate safeguards are in place to protect your personal data, including:

• Transfers only to countries or organisations that provide an adequate level of data protection as recognised under Philippine law or NPC guidelines
• Contractual clauses that bind recipients to data protection standards equivalent to those required under RA 10173
• Transfers only to recipients that have certified compliance with recognised international data security standards

gyperya will not transfer your personal data internationally beyond what is strictly necessary for the operational and compliance purposes described in this Privacy Policy.

---

14. Changes to This Privacy Policy

gyperya reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, gyperya will provide notice to registered players via the email address associated with their Account and by posting a prominent notice on the gyperya platform, no less than fourteen (14) days before the revised policy takes effect.

The "Last Updated" date at the top of this Privacy Policy reflects when the most recent revision was made. Your continued use of the gyperya platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated Privacy Policy, you must discontinue use of the platform and may request Account closure.

---

15. Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or gyperya's handling of your personal data, you may contact gyperya's Data Protection Officer (DPO) directly. The DPO is responsible for overseeing gyperya's compliance with the Data Privacy Act of 2012 and serves as the primary point of contact for all data privacy matters.

For complaints that remain unresolved after contacting gyperya, you may also file a complaint directly with the National Privacy Commission of the Philippines. The NPC handles complaints from data subjects regarding alleged violations of RA 10173.

For responsible gaming support, self-exclusion requests, and player protection tools, please visit the Responsible Gaming page on the gyperya platform.