hey33 Privacy Policy: How We Handle Your Data

1Who This Policy Applies To

This Privacy Policy applies to anyone who visits the hey33 website, registers an account, deposits Philippine Peso, places a wager, uses gaming features, contacts the support email, or otherwise provides personal information in connection with hey33 services.

By using hey33 or registering an account, you acknowledge that you have read this policy and understand how your personal information may be processed. If you do not agree, do not provide information or use the platform. This policy should be read alongside the hey33 Terms and Conditions and Responsible Gaming information.

2Information We Collect

hey33 may collect the following categories of personal information depending on how you interact with the platform:

We do not collect sensitive personal information such as racial or ethnic origin, religious beliefs, or health data unless this is necessary for a specific responsible gaming or legal purpose and you have been informed accordingly. Payment card data beyond the last four digits and verification code are handled directly by payment providers rather than retained in full by hey33.

3How We Use Your Information

hey33 uses the information collected for the following purposes:

• Account creation and management: Register your hey33 account, maintain account records, update your preferences, and communicate account-related information.
• Identity verification: Confirm that a registered member meets age, identity, and eligibility requirements and that payment methods belong to the account holder.
• Payment processing: Receive PHP deposits, settle winning wagers, process eligible withdrawal requests, and maintain accurate transaction records.
• Service delivery: Display games, settle bets, calculate balances, apply promotions, and maintain normal platform functions.
• Security and fraud prevention: Detect and investigate suspicious activity, prevent unauthorised access, identify duplicate accounts, and protect account holders and platform integrity.
• Responsible gaming: Monitor account activity for patterns that may indicate problematic gambling behaviour and apply any limits, breaks, or account controls requested by a member or required under applicable rules.
• Legal and compliance obligations: Fulfil applicable record-keeping, reporting, audit, anti-money-laundering, know-your-customer, and other legal or regulatory requirements.
• Customer support: Handle questions, process complaints, investigate disputes, and respond to account enquiries.
• Platform improvement: Analyse aggregated, anonymised data to understand how the platform is used and make operational improvements.
• Marketing (where permitted): Send promotional communications to members who have not opted out, subject to applicable rules and available preferences.

4Legal Bases for Processing

Where data protection law requires a legal basis for processing personal information, hey33 relies on one or more of the following depending on the activity:

• Contract performance: Processing is necessary to fulfil the account agreement — for example, registering an account, processing PHP transactions, or settling a wager.
• Legal obligation: Processing is required to comply with applicable law, including identity verification, anti-money-laundering obligations, and record-keeping requirements.
• Legitimate interests: Processing serves a legitimate interest of hey33 or its members, such as security monitoring, fraud detection, responsible gaming controls, and service improvement, provided this is balanced against data subject interests.
• Consent: Where consent is required by applicable rules, for example in relation to certain marketing communications, hey33 will seek it clearly and separately. Consent may be withdrawn, though withdrawal may affect access to optional features dependent on that consent.

5Sharing Your Personal Information

hey33 may share personal information with the following categories of recipients where necessary for the stated purpose:

• Payment processors and e-wallet providers: GCash, Maya, GrabPay, Coins.ph, InstaPay, PESONet, BDO, BPI, UnionBank, and eligible card networks may receive transaction-related information necessary to process PHP deposits or withdrawals.
• Identity verification services: Providers that help hey33 confirm the identity, age, location, or document authenticity of account holders.
• Game content providers: Software studios that supply casino, card game, live dealer, and sports content may receive necessary session identifiers to authenticate authorised players.
• Fraud and security services: Specialised providers that help detect suspicious patterns, prevent unauthorised account access, or identify policy violations.
• Legal and regulatory authorities: Courts, law enforcement agencies, licensing bodies, financial intelligence units, or other authorities where required by applicable law, a legal order, or a regulatory request.
• Professional advisers: Legal, audit, financial, and risk advisers engaged in connection with the platform's operations, subject to confidentiality obligations.

hey33 does not sell personal information to third parties for their own commercial purposes. Service providers receive only the information necessary for the specific function and are required to handle it appropriately.

6Cookies and Similar Technologies

hey33 may use cookies and similar browser technologies when you visit the website. A cookie is a small file stored on your device by your browser. Cookies help the platform recognise your session, maintain login state, store preferences, measure traffic patterns, and detect unusual activity.

Types of cookies that may be active on hey33 include:

• Essential cookies: Necessary for the platform to work, including maintaining your logged-in session and protecting forms against certain attacks.
• Functional cookies: Remember preferences such as language settings to improve your experience on return visits.
• Analytics cookies: Collect anonymised or pseudonymised data about how visitors move through the site to help identify improvements.
• Security cookies: Help detect and prevent fraud, unauthorised login attempts, and suspicious session patterns.

You can control or delete cookies through your browser settings. Disabling certain cookies may affect the availability or function of some platform features. Essential security and session cookies are required for the platform to work correctly and cannot be switched off while you are using the service.

7Data Storage and Security

Personal information collected by hey33 is stored using technical and organisational measures designed to reduce the risk of unauthorised access, accidental loss, disclosure, alteration, or destruction. This may include access controls, authentication requirements, encryption in transit, and physical security for supporting infrastructure.

No system connected to the internet can guarantee complete security. You also play a role in protecting your account: use a unique password not shared with other services, keep authentication codes private, log out on shared devices, and contact the support email promptly if you notice unusual activity in your hey33 account.

Where personal data is processed by third-party service providers outside of the Philippines, hey33 takes reasonable steps to ensure an appropriate level of protection applies, consistent with applicable requirements. Payment card data beyond the last four digits is processed directly by payment providers rather than stored on hey33 systems.

8How Long We Keep Your Information

hey33 retains personal information for as long as your account is active and for a further period after account closure as required by law, audit requirements, dispute resolution, security investigations, responsible gaming obligations, or other applicable purposes. The exact duration depends on the type of information and the applicable requirement.

Transaction, identity verification, anti-money-laundering, and compliance records are typically kept for several years after the relevant activity, consistent with applicable legal requirements in the Philippines and those imposed by the services hey33 uses.

Information collected solely through anonymous or aggregated analytics may be retained for longer periods as it cannot reasonably be linked back to an individual. When personal information is no longer needed, hey33 will delete or anonymise it.

9Your Data Rights

Depending on applicable law and the specific circumstances, you may have rights in relation to the personal information hey33 holds about you:

To exercise these rights, contact hey33 using the email address shown in the footer. Include your registered account email, the nature of your request, and, if needed, documentation to help confirm identity. hey33 will respond within a reasonable period. Some requests may be declined or limited where applicable legal obligations, ongoing investigations, security needs, or conflict with the rights of others apply.

10Children and Minors

hey33 services are intended exclusively for eligible adults who meet the minimum age requirement under applicable law. hey33 does not knowingly collect personal information from minors. If you believe a minor has registered, please contact the support email immediately so the account can be reviewed and closed. hey33 takes registration by underage individuals seriously and may retain evidence related to an attempt for fraud-prevention purposes.

11Marketing Communications

hey33 may send eligible registered members communications about promotions, new features, events, and game updates relevant to their account. These may be sent by email or through other available account channels. Where consent is required before sending marketing, hey33 will seek it clearly at registration or through account settings.

You may opt out of marketing communications at any time using available account controls or by contacting the support email. Opting out of marketing does not affect important transactional or account-related messages, which are sent regardless of marketing preferences because they are necessary to operate the account.

12Third-Party Services and Links

The hey33 platform may involve third-party game providers, payment platforms, security tools, and analytics services. These third parties operate under their own privacy practices. hey33 is not responsible for the privacy handling of third-party services, though we select service providers with regard to their data protection practices where possible.

hey33 pages do not intentionally contain links to unrelated external websites. If a member navigates away from hey33 to a third-party website independently, the privacy practices of that site apply and hey33 has no control over how that information is handled.

13Changes to This Privacy Policy

hey33 may update this Privacy Policy when the platform changes, applicable law changes, or we improve our practices. The effective date at the top of this page will be updated when a new version is published. For significant changes, hey33 may also communicate the update to registered members through available account channels.

Continued use of hey33 after a revised Privacy Policy becomes effective constitutes acceptance of the updated version. If you disagree with a material change, you may request account closure in line with the process described in the Terms and Conditions. We encourage you to review this page periodically.

14How to Contact hey33 About Privacy

If you have a question about this Privacy Policy, wish to exercise a data right, want to report a concern about how your personal information has been handled, or believe personal information about you is inaccurate or incomplete, contact hey33 using the support email shown in the page footer.

Include your registered account email, the nature of your query or request, and sufficient detail for us to locate the relevant records. Where confirming your identity is necessary before processing the request, hey33 may ask for reasonable verification. We aim to acknowledge receipt promptly and provide a substantive response within a reasonable period. Complex requests may take longer, and we will keep you informed of expected timelines where a standard period is not sufficient.