happyplay Privacy Policy

happyplay ("we," "us," or "our") operates the online gaming platform accessible at happyplay.lat, offering bingo, slot games, live casino, sports betting, MT Live, and Andar Bahar services to players in the Philippines. As a platform that processes the personal data of its registered users, happyplay acts as a personal information controller under Philippine law.

This Privacy Policy applies to all personal data collected, stored, and processed by happyplay in connection with your use of our platform, regardless of how you access it — through a web browser on mobile, tablet, or desktop. It covers data collected during account registration, identity verification, gaming activity, payment transactions, customer support interactions, and your general use of our website and services.

We take your privacy seriously. This document is written to be clear and readable rather than deliberately obscure. If you have questions after reading it, our Data Protection Officer is reachable at the contact details provided at the end of this policy.

This Privacy Policy applies to:

• All registered happyplay account holders;
• Visitors who browse happyplay.lat without creating an account;
• Individuals who contact happyplay's customer support team;
• Players who participate in happyplay promotions, surveys, or events.

This policy does not apply to third-party websites, payment processors, or gaming providers whose services are accessible through the happyplay platform. Those third parties maintain their own privacy policies, and happyplay is not responsible for their data handling practices. happyplay encourages users to review the privacy policies of any third-party services they interact with.

happyplay collects the following categories of personal data from players and platform users:

happyplay does not knowingly collect sensitive personal information as defined under the Data Privacy Act (such as health data, political affiliations, or religious beliefs) unless explicitly required for regulatory compliance purposes and with your explicit consent.

happyplay collects personal data through the following channels and mechanisms:

• Direct collection: Information you provide when creating an account, completing the KYC process, making deposits or withdrawals, contacting customer support, or responding to promotions.
• Automated collection: Technical and behavioural data collected automatically when you access the platform, via server logs, cookies, and similar tracking technologies described in Section 8.
• Payment processors: Transaction confirmation data received from GCash, Maya, BPI, BDO, UnionBank, and other payment partners when you initiate a financial transaction on the platform.
• Identity verification partners: Results and confirmation data from KYC and identity verification service providers used to validate the authenticity of your government-issued ID documents.
• Regulatory authorities: In exceptional circumstances, happyplay may receive data from PAGCOR or other Philippine regulatory bodies in connection with compliance investigations or self-exclusion registries.

happyplay processes your personal data for the following specific purposes:

• Account creation and management: Processing your registration, verifying your identity and age (21+), maintaining your account profile, and enabling secure login to the happyplay platform.
• Service delivery: Operating the gaming platform, processing deposits and withdrawals via GCash, Maya, and other payment channels, administering bonuses and promotions, and providing customer support.
• Legal and regulatory compliance: Satisfying Anti-Money Laundering Act (AMLA) obligations, responding to requests from PAGCOR or other Philippine regulatory authorities, and maintaining gaming records as required by applicable law.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, bonus abuse, and other violations of happyplay's Terms and Conditions.
• Responsible gaming: Monitoring gaming patterns to identify players who may be displaying signs of problem gambling, enforcing deposit limits and self-exclusion requests, and fulfilling our responsible gaming obligations.
• Platform improvement: Analysing aggregated usage patterns, game performance data, and technical metrics to improve the platform's features, stability, and user experience for Filipino players.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time through your account settings.

happyplay does not use your personal data for automated decision-making or profiling in ways that produce legal or similarly significant effects on you, except where required by applicable law or fraud prevention obligations.

Under the Data Privacy Act of 2012, happyplay processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to create your account, deliver gaming services, and process financial transactions — i.e., the core services you signed up for.
• Legal obligation: Processing required to comply with the Anti-Money Laundering Act, PAGCOR regulations, National Privacy Commission requirements, and other applicable Philippine laws.
• Legitimate interests: Processing conducted for fraud prevention, platform security, responsible gaming monitoring, and internal business analytics — provided these interests do not override your fundamental rights.
• Consent: Processing for marketing communications and non-essential cookies, which you may withdraw at any time without affecting your ability to use the core happyplay platform services.

happyplay does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. We share your data only in the following circumstances and only to the extent necessary:

• Payment processing partners: GCash (G-Xchange Inc.), Maya (Voyager Innovations / PayMaya Philippines), BPI, BDO, UnionBank, 7-Eleven Cliqq, Coins.ph, and cryptocurrency network processors receive transaction-specific data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party identity verification services receive copies of your ID documents and related data solely for the purpose of age and identity verification as required before withdrawal processing.
• Gaming platform and content providers: Game software providers (e.g., live dealer studio operators, RNG slot providers) may receive anonymised or pseudonymised session identifiers to enable game functionality.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government agencies may receive data in response to lawful requests, investigations, or as required by applicable gaming and financial regulations.
• Professional advisers: Legal counsel, auditors, and compliance advisers bound by confidentiality obligations who assist happyplay in meeting its legal obligations.
• Business successors: In the event of a corporate restructuring, merger, acquisition, or transfer of business assets, your personal data may be transferred to a successor entity, provided that successor entity assumes the obligations of this Privacy Policy with respect to your data.

happyplay uses cookies and similar browser-based tracking technologies to support platform functionality, improve user experience, and — where you have given consent — to deliver relevant marketing communications. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session management cookies that keep you logged in during your gaming session, security tokens, and load-balancing cookies. You cannot opt out of these without losing access to core platform features.
• Functional cookies: Remember your preferences such as language settings, game display options, and responsible gaming settings. These improve your experience but are not essential to the platform's core operation.
• Analytics cookies: Collect anonymised data about how users navigate the platform — which pages are visited most, where users drop off, game performance metrics — enabling us to improve the platform for Filipino players. Data collected is aggregated and not attributed to individual users.
• Marketing cookies: Used only with your explicit consent to track your activity and deliver personalised promotional offers. You may withdraw consent at any time by adjusting your browser settings or the cookie preferences panel within your account.

You may control cookie settings through your browser's built-in privacy controls. Note that disabling strictly necessary cookies will affect platform functionality. Most Philippine users access happyplay via Chrome on Android — Chrome's cookie settings are accessible via Settings → Privacy and Security → Cookies and Other Site Data.

happyplay retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, subject to the following minimum retention periods driven by legal obligations:

• Account data and transaction records: Retained for a minimum of five (5) years following account closure or the last financial transaction, as required under Philippine anti-money laundering regulations.
• KYC documents: Retained for a minimum of five (5) years following the completion of the KYC process or account closure, whichever is later.
• Gaming activity logs: Retained for a minimum of three (3) years following each session, for purposes of dispute resolution and regulatory compliance.
• Customer support communications: Retained for up to three (3) years from the date of the most recent interaction.
• Marketing preferences and consent records: Retained for as long as you have an active account plus one (1) year, or until consent is withdrawn, whichever is earlier.

When data is no longer required and no legal retention obligation applies, happyplay securely deletes or anonymises it so that it can no longer be attributed to you as an individual.

happyplay implements a layered approach to data security designed to protect your personal information against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Encryption in transit: All data transmitted between your device and the happyplay platform is encrypted using TLS 1.3, the current industry standard for secure web communications.
• Encryption at rest: Sensitive data stored in our databases — including identity documents and financial transaction records — is encrypted using AES-256 encryption.
• Password security: Account passwords are stored as bcrypt-hashed values. happyplay staff cannot see your password in plain text.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular security training.
• Two-factor authentication: happyplay supports SMS OTP-based two-factor authentication for account logins, providing an additional layer of account access security for Filipino players.
• Security monitoring: The platform is monitored for suspicious activity, unauthorized access attempts, and anomalous transaction patterns on a continuous basis.

Under the Data Privacy Act of 2012 and its Implementing Rules, you have the following rights with respect to your personal data held by happyplay. To exercise any of these rights, contact our Data Protection Officer at the address provided in Section 16.

happyplay will respond to data subject rights requests within fifteen (15) business days of receipt. In complex cases, this period may be extended by an additional fifteen (15) business days with notification provided to you. Submitting a request is free of charge.

happyplay's age verification process is designed to prevent minors from accessing the platform. If happyplay becomes aware that personal data has been collected from a person under 21, we will immediately close the relevant account, delete the collected data to the extent not required for legal or regulatory compliance, and report the matter as required under applicable regulations.

If you believe that a minor has created a happyplay account, please contact our Data Protection Officer immediately using the contact details in Section 16.

In connection with the delivery of our gaming services, some of your personal data may be transferred to and processed in countries outside the Philippines. This may occur when we use internationally-based gaming content providers, KYC verification partners, or cloud infrastructure services.

Where such transfers occur, happyplay ensures that appropriate safeguards are in place to protect your data, including contractual data processing agreements that impose data protection standards equivalent to or exceeding those required under the Data Privacy Act of 2012. happyplay does not transfer personal data to jurisdictions without adequate data protection frameworks without implementing appropriate contractual safeguards.

By using the happyplay platform and accepting this Privacy Policy, you consent to such cross-border transfers as described, subject to the safeguards outlined above.

The happyplay platform may contain references to or integrations with third-party services, including payment providers such as GCash and Maya, and game content sourced from independent gaming studios. When you interact with these third-party services, you are subject to the privacy policies of those parties, not this Privacy Policy.

happyplay is not responsible for the privacy practices, data collection methods, or security standards of third-party services accessed through or in connection with the happyplay platform. We encourage you to review the privacy policy of any third-party service you interact with, including GCash (operated by G-Xchange Inc.) and Maya (operated by Voyager Innovations Inc./PayMaya Philippines Inc.).

happyplay may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform features. When material changes are made, we will update the "Last Updated" date at the top of this document and, where the changes are significant, notify registered players via email or an in-platform notification prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically. Your continued use of the happyplay platform following publication of an updated Privacy Policy constitutes your acknowledgment of the changes and, where applicable, your consent to the revised processing activities described therein.

If you do not agree to a material change in this Privacy Policy, you should cease using the platform and request account closure by contacting our support team before the revised policy takes effect.

happyplay has designated a Data Protection Officer (DPO) responsible for overseeing compliance with data protection obligations under Philippine law. If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or need to report a privacy concern, please contact us as follows:

If you are unsatisfied with happyplay's response to a privacy-related complaint, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority for data protection in the Philippines. Information about lodging a complaint with the NPC is publicly available through the Commission's official channels.