hybet Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how hybet ("hybet," "we," "us," "our") collects, uses, stores, shares, and protects personal data in connection with your use of the hybet online casino and sports betting platform accessible at hybet.bio ("Platform").

hybet is committed to responsible data stewardship and to full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations ("IRR"), as enforced by the National Privacy Commission (NPC) of the Philippines. This Policy explains your rights as a data subject and how you may exercise them.

By registering an account, logging in to hybet, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, please do not use the hybet Platform.

This Policy should be read together with the hybet Terms & Conditions and the Responsible Gaming Policy, all of which form part of the agreement between you and hybet.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, hybet is the personal information controller in respect of personal data collected through the Platform. hybet determines the purposes and means of processing your personal data.

hybet has appointed a Data Protection Officer (DPO) responsible for overseeing data protection compliance within the organization. Contact details for the DPO are provided in Section 14 of this Policy.

3. Personal Data We Collect

hybet collects personal data in the following categories depending on how you interact with the Platform:

hybet does not intentionally collect sensitive personal information as defined under RA 10173 (e.g., race, political affiliation, health data, religious beliefs) unless specifically required for a regulatory purpose and with your explicit consent.

4. How We Use Your Personal Data

hybet uses the personal data it collects for the following purposes:

• Account management: To create, maintain, verify, and manage your hybet account, including authentication and security;
• Identity verification (KYC): To verify your identity and age (21+) as required by PAGCOR and AMLC regulations before processing withdrawals;
• Transaction processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, and other supported payment methods;
• Regulatory compliance: To comply with obligations under RA 9160 (Anti-Money Laundering Act), PAGCOR regulations, NPC regulations, and other applicable Philippine law;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized access, and other security threats;
• Customer support: To respond to your inquiries, complaints, and support requests in English and Tagalog;
• Platform improvement: To analyze usage patterns, diagnose technical issues, and improve the hybet platform experience;
• Responsible gaming: To monitor account activity for indicators of problem gambling and to administer self-exclusion requests;
• Marketing communications: To send you promotional offers and news about hybet — only where you have provided consent, and subject to your right to withdraw consent at any time.

5. Legal Bases for Processing

hybet processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Consent: Where you have given clear, informed consent to processing for a specific purpose, such as receiving marketing communications;
• Contractual necessity: Where processing is necessary for the performance of the contract between you and hybet (i.e., providing the Platform services);
• Legal obligation: Where processing is required to comply with a legal obligation applicable to hybet, including PAGCOR regulations, AMLC reporting requirements, and NPC guidelines;
• Legitimate interests: Where processing is necessary for the legitimate interests of hybet, such as fraud prevention and platform security, provided those interests are not overridden by your rights and freedoms.

6. Data Sharing & Disclosure

hybet does not sell, rent, or trade your personal data. hybet may share your data with the following categories of recipients only to the extent necessary:

• Payment processors: GCash (G-Xchange, Inc.), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, and other payment service providers — to process deposits and withdrawals;
• Identity verification providers: Third-party KYC and document verification services contracted by hybet — to verify identity documents and perform AML screening;
• Game technology providers: Licensed game content providers including JILI Gaming and live casino operators — limited to the data necessary for game delivery and fairness auditing;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies — where legally required;
• Cloud and infrastructure providers: Hosting and cloud services providers engaged by hybet — subject to appropriate data processing agreements and security requirements;
• Legal advisers: External legal counsel — where necessary for the defence or exercise of legal claims.

All third-party service providers processing personal data on behalf of hybet are required to enter into data sharing or data processing agreements that impose obligations consistent with RA 10173 and the hybet data protection standards.

7. Data Retention

hybet retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law.

• Active account data: Retained for the duration of your account and for a period of five (5) years following account closure, as required for AML compliance under RA 9160;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction in accordance with AMLC record-keeping requirements;
• KYC documents: Retained for five (5) years after the end of the business relationship or the date of the occasional transaction;
• Customer support records: Retained for three (3) years from the date of the last interaction;
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period thereafter for compliance documentation.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymized in accordance with NPC guidelines.

8. Cookies & Similar Tracking Technologies

hybet uses cookies and similar technologies (such as local storage and session tokens) on the Platform for the following purposes:

• Strictly necessary cookies: Required for Platform functionality, including login session management, security tokens, and load balancing. These cannot be disabled without affecting Platform performance;
• Performance cookies: Used to collect aggregated, anonymized data about how visitors use the Platform, enabling hybet to identify and fix technical issues and optimize user experience;
• Functional cookies: Used to remember your preferences such as language settings and game lobby configurations;
• Analytics cookies: Used to understand user behavior on the Platform in aggregate. hybet does not use third-party advertising cookies or cross-site tracking cookies.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the hybet Platform, including the ability to maintain a logged-in session.

9. Data Security

hybet implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and hybet servers;
• Encryption of sensitive data at rest within hybet's database systems;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Multi-factor authentication for administrative access to systems containing personal data;
• Regular security assessments, penetration testing, and vulnerability scanning;
• Incident response procedures for the detection, investigation, and notification of personal data breaches in accordance with NPC breach notification requirements.

While hybet takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying hybet immediately if you suspect unauthorized use of your account.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012, as a data subject you have the following rights with respect to your personal data held by hybet:

• Right to be Informed: The right to be notified of the collection and processing of your personal data, including the purposes and legal basis for processing;
• Right of Access: The right to obtain confirmation of whether hybet holds personal data about you and to receive a copy of that data;
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected without undue delay;
• Right to Erasure / Right to be Forgotten: The right to request deletion of your personal data where processing is no longer necessary, where consent is withdrawn, or where processing is unlawful — subject to legal retention obligations;
• Right to Object: The right to object to processing based on legitimate interests or for direct marketing purposes;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact the hybet Data Protection Officer using the contact details provided in Section 14. hybet will respond to all verified data subject requests within fifteen (15) business days of receipt.

11. Children & Minors

The hybet Platform is strictly intended for persons aged 21 years and above. hybet does not knowingly collect personal data from persons below the age of 21. Age is verified through the KYC process as a mandatory step in account verification.

If hybet becomes aware that personal data has been collected from a person under 21 years of age, the account will be immediately suspended and the data will be securely deleted in accordance with applicable law. If you believe that a minor has registered on the hybet Platform, please notify us immediately through the contact details in Section 14.

12. Cross-Border Data Transfers

Where hybet transfers personal data outside of the Republic of the Philippines — for example, to cloud service providers or game technology partners with infrastructure in other jurisdictions — hybet ensures that such transfers are carried out in accordance with Section 21 of the Data Privacy Act of 2012 and applicable NPC guidelines on cross-border data transfers.

Such transfers are made only where the recipient country provides an adequate level of data protection, or where appropriate safeguards are in place (such as contractual data processing agreements), or where the transfer is necessary for the performance of the contract with you (e.g., delivery of live casino content from a licensed provider's infrastructure).

13. Updates to This Privacy Policy

hybet reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, Platform features, or data processing practices. Where changes are material, hybet will notify registered users by email or by a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is always displayed at the top of this page. Continued use of the hybet Platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree with the revised Policy, you must cease using the Platform and may request account closure.

14. Contact & Data Protection Officer

For all data privacy enquiries, data subject rights requests, or complaints, please contact the hybet Data Protection Officer through the following channels:

• Email (DPO): [email protected] — subject line: "Data Privacy Request"
• Live Chat: Available 24/7 on the hybet Platform
• Messenger & Viber: Available — details provided upon account registration

Support is available in both English and Tagalog. hybet's customer support team is available 24 hours a day, 7 days a week. The DPO will respond to all formal data subject requests within fifteen (15) business days.

This Policy was last reviewed and updated in June 2026. All rights reserved by hybet.