wy2 Privacy Policy

1Who We Are

wy2 operates wy2.bet, a PAGCOR-licensed online gaming platform serving Filipino players across the Philippines. As the operator of this Platform, wy2 acts as the Personal Information Controller (PIC) under the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations.

wy2 is committed to protecting the privacy and security of every player's personal information. This Policy sets out, in plain and transparent language, exactly what data we collect about you, why we collect it, how we use it, who we may share it with, and what rights you have over your own data.

If you have any questions about this Policy or about how wy2 handles your personal data, please contact our Data Protection Officer (DPO) using the details in Section 14 of this Policy.

2Personal Data We Collect

wy2 collects only the personal data that is necessary to provide you with a safe, compliant, and high-quality gaming experience. The categories of data we may collect include:

Identity Data:

• Full legal name (first name, middle name, last name)
• Date of birth (for mandatory 21+ age verification)
• Gender
• Government-issued Philippine ID (e.g., PhilSys National ID, passport, driver's license, SSS/GSIS ID) — for KYC verification
• Photograph or selfie submitted during identity verification

Contact Data:

• Philippine mobile number (09XX format)
• Email address
• Residential address (barangay, city/municipality, province)

Financial Data:

• GCash account number or PayMaya account linked to your deposits
• Bank account details where bank transfer is used (BPI, BDO, Metrobank, etc.)
• Transaction history: deposit amounts, withdrawal amounts, dates, and reference numbers

Gaming Activity Data:

• Game sessions, bet history, win/loss records, and game preferences
• Bonus claims, wagering activity, and promotional participation
• Responsible gaming settings you have applied to your account

Technical Data:

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session logs, login timestamps, and access records

3How We Collect Your Data

wy2 collects your personal data through the following means:

• Direct submission: Information you provide when registering your wy2 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, browser data, session logs, and cookie-based analytics.
• Third-party providers: Identity verification data from PAGCOR-approved KYC service providers; payment data from GCash, PayMaya, and Philippine bank processing partners; fraud detection signals from our security vendors.
• PAGCOR regulatory systems: Where required by PAGCOR regulations, wy2 may receive or submit player data to PAGCOR's gaming monitoring systems.

4How We Use Your Personal Data

wy2 uses your personal data for the following specific purposes:

• Account management: Creating, maintaining, and operating your wy2 player account; authenticating your identity when you log in.
• Age and identity verification: Confirming you meet the mandatory 21+ age requirement and verifying your identity for KYC compliance — a legal obligation under PAGCOR's licensing conditions.
• Payment processing: Processing deposits via GCash and PayMaya; processing withdrawal requests to your registered Philippine bank or e-wallet account.
• Legal and regulatory compliance: Fulfilling wy2's obligations under PAGCOR regulations, the Philippine Anti-Money Laundering Act (AMLA), and RA 10173 (Data Privacy Act), including transaction monitoring and suspicious activity reporting to the AMLC.
• Fraud prevention and security: Detecting and preventing fraud, unauthorized access, account takeover, money laundering, and other prohibited activities on the Platform.
• Responsible gaming: Monitoring gaming patterns to identify at-risk players; implementing deposit limits, self-exclusion, and cool-off periods you have requested.
• Customer support: Responding to your inquiries, resolving disputes, and providing account assistance in Tagalog and English.
• Platform improvement: Analyzing aggregated usage data to improve game performance, mobile optimization for Philippine networks, and overall user experience.
• Promotions and communications: Sending bonus offers and platform news to players who have consented to marketing communications. You may opt out at any time.

wy2 does not use your personal data for any purpose not described in this Policy without first obtaining your explicit consent.

5Legal Basis for Processing

Under RA 10173, wy2 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the player agreement (Terms & Conditions) — including account management, payment processing, and game operation.
• Legal obligation: Processing required to comply with PAGCOR regulations, AMLA obligations, National Privacy Commission (NPC) requirements, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring — where wy2's legitimate interests do not override your fundamental rights.
• Consent: Processing for marketing communications and non-essential analytics — where you have given specific, freely given, and informed consent. You may withdraw consent at any time.

6Sharing Your Personal Data

wy2 does not sell your personal data to any third party. We share your personal data only in the following limited circumstances:

• Payment processors: GCash (GXI), PayMaya (Maya Bank), BPI, BDO, Metrobank, and other Philippine banking partners — solely to process your deposits and withdrawals.
• KYC and identity verification providers: PAGCOR-approved third-party identity verification services — solely for age and identity verification required by our regulatory license.
• PAGCOR: We are required to share certain player data with PAGCOR as part of our ongoing regulatory reporting and licensing obligations.
• AMLC (Anti-Money Laundering Council): We are legally required under the Philippine AMLA to report suspicious transactions to the AMLC, which may involve disclosure of relevant player data.
• Law enforcement and courts: Where required by a valid legal order, warrant, or directive issued by a Philippine court or authorized government agency.
• Technology service providers: Cloud hosting, cybersecurity, fraud detection, and analytics vendors who process data on wy2's behalf under binding data processing agreements that prohibit unauthorized use.

7International Data Transfers

Some of wy2's technology service providers — including cloud infrastructure and certain game providers — may be located outside the Philippines. Where your personal data is transferred to servers or processors located in other countries, wy2 ensures that such transfers are governed by appropriate safeguards, including:

• Data processing agreements that impose equivalent data protection standards to those required under RA 10173.
• Transfer to countries recognized by the National Privacy Commission (NPC) as providing adequate data protection.
• Contractual clauses approved by the NPC where no adequacy decision exists.

Your core account data, financial records, and KYC documents are stored on servers located within the Philippines or in jurisdictions with equivalent protection standards recognized by the NPC.

8Data Retention

wy2 retains your personal data only for as long as necessary to fulfil the purposes described in this Policy or as required by applicable Philippine law. The following retention periods apply:

• Account and identity data: Retained for the duration of your active wy2 account plus five (5) years following account closure, as required by PAGCOR regulations and AMLA record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the AMLA and PAGCOR.
• KYC documents: Retained for the period required by PAGCOR and AMLA compliance — typically five (5) years after the end of the business relationship.
• Technical and session logs: Retained for up to two (2) years for security and fraud prevention purposes, then anonymized or deleted.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter for compliance documentation.

Following the expiry of applicable retention periods, your personal data will be securely deleted or irreversibly anonymized in accordance with NPC-approved data disposal procedures.

9Security Measures

wy2 implements technical and organizational security measures appropriate to the risk level of the personal data we process. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the wy2 Platform.
• Encryption at rest for sensitive personal data and financial records stored in our systems.
• Multi-factor authentication for administrative access to systems that store player personal data.
• Role-based access controls limiting employee access to personal data to those with a documented business need.
• Regular security audits and penetration testing conducted by independent cybersecurity professionals.
• Real-time fraud and intrusion detection systems monitoring for unauthorized access attempts.
• Staff training on data privacy obligations under RA 10173 and wy2's internal data handling policies.

10Cookies & Tracking Technologies

wy2 uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies used include:

• Essential cookies: Required for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: Remember your preferences such as language settings and responsible gaming limits you have set.
• Analytics cookies: Collect aggregated, anonymized data about how players navigate and use the Platform — used to improve performance and user experience. Enabled only with your consent.
• Fraud prevention cookies: Help wy2's security systems identify suspicious device behavior and prevent account takeover attempts.

You may manage non-essential cookies through your browser settings. Disabling essential cookies may prevent you from accessing certain parts of the Platform.

11Your Data Rights Under RA 10173

As a data subject under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by wy2:

To exercise any of the above rights, contact our Data Protection Officer using the details in Section 14. wy2 will respond to all verified data rights requests within thirty (30) days.

12Children's Privacy

If you are a parent or guardian and believe that a person under 21 has registered on the wy2 Platform, please contact us immediately at the address in Section 14 so that we can take appropriate action.

13Amendments to This Policy

wy2 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. When material changes are made, wy2 will:

• Post the revised Policy on wy2.bet with an updated effective date.
• Notify registered players via their registered email address no less than seven (7) days before the changes take effect.

Your continued use of the wy2 Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically.

14Contact & Complaints

For any questions, requests, or complaints regarding this Privacy Policy or wy2's data processing practices, please contact our Data Protection Officer:

• Email (plain text): [email protected]
• Subject line: "Data Privacy Request – [Your Registered Mobile Number]"
• Response time: Within 30 days of receipt of a verified request
• Live Support: 24/7 live chat available on wy2.bet in English and Tagalog