Yes PH Privacy Policy — How We Handle Your Personal Data

Yes PH operates the online gaming platform accessible at yesph.click and acts as the data controller for all personal information collected through the platform. As data controller, Yes PH determines the purposes and means by which your personal data is processed.

Our Data Protection Officer (DPO) is responsible for overseeing compliance with the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations. The DPO can be contacted at the email address provided in Section 13 of this policy. Yes PH is registered with the National Privacy Commission (NPC) as required by applicable Philippine data privacy regulations.

Yes PH collects only the personal data that is necessary to provide the platform services, comply with legal obligations, and protect the security of our players. The categories of data we collect include:

Yes PH does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required for responsible gaming compliance purposes and where you have provided explicit consent.

Yes PH collects personal data through the following channels and methods:

• Direct registration: When you create an account, you provide your name, contact details, and other registration information directly through the sign-up form.
• KYC verification: When you submit your government ID and selfie for identity verification before your first withdrawal, we collect and process that document data.
• Financial transactions: When you deposit or withdraw using GCash, Maya, BDO, BPI, or other supported payment methods, transaction data is collected as part of the payment process.
• Platform activity: Your gameplay activity, betting history, and feature interactions are recorded automatically as part of the normal operation of the platform.
• Cookies and tracking technologies: The Yes PH website uses cookies and similar technologies to collect technical and usage data. See Section 7 for full details.
• Communications: When you contact our support team via email or chat, the content of those communications is collected and stored.
• Third-party partners: We may receive limited data from payment processors and fraud prevention services to verify transaction legitimacy and protect account security.

Yes PH processes your personal data only for legitimate, specified purposes. We do not use your data in ways you wouldn't reasonably expect. The primary reasons we use your data are:

• Account management: To create, maintain, and secure your Yes PH account, including processing logins, password resets, and account updates.
• Service delivery: To make the platform's features available to you — including casino games, sports betting markets, live dealer tables, Color Game, and deposit and withdrawal services.
• Identity and age verification: To confirm that you are who you say you are, that you are 18 or older, and that you are located in the Philippines — all required by Philippine gaming regulations.
• Financial processing: To process deposits and withdrawals securely through your chosen payment method and to maintain an accurate record of all transactions on your account.
• Fraud prevention and security: To detect and prevent unauthorised access, multi-accounting, bonus abuse, money laundering, and other prohibited conduct that could harm you or other players on Yes PH.
• Legal and regulatory compliance: To fulfil our obligations under Philippine anti-money laundering law (RA 9160 as amended), the Data Privacy Act (RA 10173), and requirements from the AMLC and NPC.
• Responsible gaming: To monitor betting patterns that may indicate problem gambling behaviour and to provide you with the self-exclusion, deposit limit, and session control tools available on the platform.
• Customer support: To respond to your queries, resolve complaints, and provide assistance related to your Yes PH account.
• Platform improvement: To analyse aggregated usage data and identify areas where the Yes PH experience can be made faster, more reliable, or more enjoyable for Filipino players.
• Marketing communications: To send you information about promotions, bonuses, and platform updates — only where you have opted in and in accordance with your current communication preferences.

Under the Philippine Data Privacy Act of 2012, Yes PH processes personal data based on one or more of the following legal grounds depending on the type of data and the purpose of processing:

• Consent: Where you have given us clear, informed consent for a specific purpose — such as receiving marketing communications or, in specific cases, processing sensitive personal information. You can withdraw consent at any time through your account settings.
• Contractual necessity: Where processing is necessary to deliver the services you have signed up for — including account management, game access, and financial transactions.
• Legal obligation: Where processing is required for Yes PH to comply with Philippine law, including anti-money laundering legislation, gaming regulations, and data privacy requirements from the NPC.
• Legitimate interests: Where processing is necessary for the legitimate interests of Yes PH or third parties — such as fraud prevention, security monitoring, and platform improvement — provided those interests do not override your rights and freedoms as a data subject.

Yes PH does not share your personal data with third parties except in the following circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: Your financial data is shared with BSP-regulated payment providers such as GCash (G-Xchange), Maya (Voyager Innovations), and relevant banking partners solely to process your deposit and withdrawal transactions.
• Identity verification providers: KYC document data may be processed by a certified third-party verification service to confirm the authenticity of your submitted ID. These providers operate under strict data processing agreements.
• Fraud prevention services: Technical and behavioural data is shared with fraud detection partners to identify suspicious activity and protect your account and the platform.
• Game providers: Certified game studios such as Pragmatic Play, Evolution Gaming, and PG Soft receive anonymised session data necessary to deliver game content and resolve technical disputes.
• Regulatory authorities: Yes PH is legally required to disclose certain information to the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies when mandated by law or a valid legal process.
• Professional advisors: Legal and compliance advisors who are bound by professional and contractual confidentiality obligations may have limited access to account data for the purpose of obtaining advice.

All third parties who handle personal data on behalf of Yes PH are subject to data processing agreements that impose privacy and security obligations consistent with the Data Privacy Act. Yes PH does not authorise its third-party partners to use your personal data for their own marketing or commercial purposes.

The Yes PH platform uses cookies and similar tracking technologies to provide a working, secure, and personalised experience. Here is what each category of cookie does:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in and security tokens that protect against CSRF attacks. These cannot be disabled without breaking the platform.
• Performance cookies: Collect anonymised data about how pages are used and how fast they load. This helps us identify pages that are slow or causing errors and fix them for all Filipino players.
• Functionality cookies: Remember your preferences — such as your preferred language, display settings, and last-used payment method — so you don't have to re-enter them on each visit.
• Analytics cookies: Track aggregate usage patterns to help us understand which games and features are most popular and where the platform experience can be improved.

Yes PH does not use third-party advertising or tracking cookies. We do not share cookie data with ad networks or allow behavioural profiling for advertising purposes. You can manage cookie preferences through your browser settings; note that disabling strictly necessary cookies will affect platform functionality.

Yes PH retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by Philippine law. Our retention periods are as follows:

• Active account data: Retained for the full duration of your account relationship with Yes PH and for a period of five years following account closure, as required by Philippine AML regulations.
• KYC and identity documents: Retained for five years from the date of verification, in line with AMLC record-keeping requirements. Documents are deleted promptly once the retention period expires.
• Transaction records: All deposit and withdrawal records are retained for a minimum of five years following the transaction, as required by RA 9160 and related BSP circulars.
• Gameplay history: Retained for three years from the date of each session for dispute resolution and responsible gaming monitoring purposes.
• Support communications: Retained for two years from the date of the last interaction, unless the communication relates to an ongoing dispute.
• Marketing preference records: Retained for the duration of your account relationship. Opt-out records are retained permanently to ensure we honour your preference.

When data is no longer required and the retention period has expired, Yes PH securely deletes or anonymises it. Backups are purged on a regular schedule to ensure deleted data does not persist in backup systems beyond a reasonable technical window.

Yes PH takes the security of your personal data seriously and implements technical and organisational measures appropriate to the risk level of the data we hold. Our security infrastructure includes:

• 256-bit TLS/SSL encryption on all data in transit between your device and the Yes PH platform — the same encryption standard used by major Philippine banks.
• AES-256 encryption at rest for stored personal data, financial records, and KYC documents on our servers.
• Access controls: Personal data is accessible only to Yes PH employees who require it to perform their specific job functions. Access is logged, reviewed, and revoked promptly when an employee's role changes.
• Two-factor authentication (2FA) available to all players to add an extra layer of protection to their account beyond the login password.
• Automated fraud monitoring that flags unusual account activity — such as logins from unrecognised devices or atypical transaction patterns — for immediate review.
• Regular security assessments and penetration testing by qualified cybersecurity professionals to identify and address vulnerabilities before they can be exploited.
• PCI-DSS compliant payment processing for all credit and debit card transactions, ensuring cardholder data is handled to the highest industry standard.

Despite these measures, no system connected to the internet is 100% immune to every possible security threat. In the event of a personal data breach that poses a risk to your rights and freedoms, Yes PH will notify affected players and the NPC within 72 hours of becoming aware of the breach, in accordance with Section 20 of the Data Privacy Act.

As a Filipino data subject, you have the following rights under the Data Privacy Act of 2012. Yes PH respects and supports the exercise of all these rights:

To exercise any of these rights, contact the Yes PH Data Protection Officer at privacy@yesph.click. We will acknowledge your request within 72 hours and provide a substantive response within 15 business days. In exceptional cases involving complex or large-volume requests, we may extend this by a further 15 days with prior notice.

Yes PH does not knowingly collect personal data from anyone under the age of 18. The platform is strictly for adult use. If during identity verification or any other process we determine that an account holder is under 18, the account will be closed immediately, any balance will be reviewed in accordance with our Terms and Conditions, and personal data collected will be deleted except where retention is required by law.

If a parent or guardian believes their minor child has registered on Yes PH, they should contact us immediately at privacy@yesph.click. We will investigate and take appropriate action as quickly as possible.

Yes PH may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable Philippine law, or guidance from the NPC. When material changes are made, we will notify registered players via email to their registered address and display a notice on the platform for at least 14 days before the changes take effect.

If the changes relate to a new processing purpose that requires your consent, we will seek that consent separately and will not rely on your previous consent. Continued use of the Yes PH platform after the stated effective date of any revised policy constitutes acceptance of the updated version.

The "Last Updated" date at the top of this page indicates when this policy was most recently revised. We encourage you to review the policy periodically, particularly before making significant transactions or using new platform features.

If you have questions about this Privacy Policy, want to exercise your data subject rights, or need to report a privacy concern, please contact the Yes PH Data Protection Officer using the details below:

• Data Privacy Queries: privacy@yesph.click
• General Support: support@yesph.click
• Response time: Acknowledgement within 72 hours, substantive response within 15 business days
• Operating hours: 24/7 for urgent security or data breach concerns; standard business hours (Philippine Standard Time) for general queries

For escalations, complaints may also be submitted to the National Privacy Commission of the Philippines, which has jurisdiction over personal data processing activities of companies operating in the Philippines.