wy2 Privacy Policy

wy2 is committed to protecting the privacy and personal data of every player who uses our platform. We understand that Filipino players entrust us with sensitive personal and financial information, and we take that responsibility seriously. This Policy has been drafted in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations, as well as applicable international data protection standards.

This Policy applies to all personal data collected through the wy2 website at wy2.club, our mobile-optimised platform, customer support channels, and any other services operated by wy2. It does not apply to third-party websites or services that may be linked from our platform — those are governed by their own privacy policies.

We encourage you to read this Policy carefully and in full. If you have questions about how wy2 handles your personal data, please contact our Data Protection Officer using the details provided in Section 15.

For the purposes of the Data Privacy Act of 2012 and applicable data protection legislation, wy2 acts as the data controller in respect of the personal data collected through the wy2 platform. As data controller, wy2 determines the purposes and means by which your personal data is processed.

wy2 has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact the DPO at any time using the contact details set out in Section 15 of this Policy.

wy2 collects the following categories of personal data from players and platform users:

3.1 Identity & Contact Data

• Full legal name
• Date of birth (for age verification — players must be 21 years or older)
• Government-issued identification number (e.g., Philippine National ID, passport, driver's licence)
• Email address
• Mobile phone number
• Residential address (including city, province, and postal code)

3.2 Financial Data

• GCash or PayMaya account details (mobile number associated with the account)
• Bank account details for BDO, BPI, or Metrobank withdrawals
• Transaction history, including deposits, withdrawals, and bonus credits
• Source of funds declarations where required for AML compliance

3.3 Gaming & Behavioural Data

• Game play history, including games played, stakes, wins, and losses
• Session duration and frequency of play
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

3.4 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Unique device identifiers
• Login timestamps and session logs
• Referring URL and pages visited within the wy2 platform

3.5 Communications Data

• Records of correspondence with wy2 customer support, including live chat transcripts and email exchanges
• Feedback, complaints, and dispute records
• Marketing preferences and communication opt-in or opt-out status

wy2 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Data collected automatically when you access the wy2 platform, including cookies, web beacons, pixel tags, and server logs. See Section 8 for more detail on cookies.
• Third-party sources: Data received from identity verification providers, payment processors (such as GCash and PayMaya), fraud prevention services, and credit reference agencies where permitted by law.
• Regulatory sources: Data received from PAGCOR or other competent Philippine authorities in connection with our regulatory obligations.

wy2 uses the personal data we collect for the following purposes:

wy2 processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable regulations:

• Contractual necessity: Processing required to perform our contract with you, including account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML/CTF obligations, KYC requirements, PAGCOR reporting, and age verification mandates.
• Legitimate interests: Processing necessary for wy2's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

wy2 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BDO, BPI, and Metrobank, for the purpose of processing deposits and withdrawals in Philippine Peso.
• Identity verification providers: Third-party KYC and AML screening services used to verify your identity and comply with regulatory requirements.
• Game software providers: Licensed game developers and live dealer studios whose games are hosted on the wy2 platform, to the extent necessary for game delivery and fairness auditing.
• Regulatory authorities: PAGCOR and other competent Philippine government agencies, where disclosure is required by law or regulatory mandate.
• Law enforcement: Philippine law enforcement agencies or courts, where disclosure is required by a valid legal order, warrant, or subpoena.
• IT and security service providers: Cloud hosting, cybersecurity, and platform maintenance providers who process data on our behalf under strict data processing agreements.

wy2 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and gather analytics data that helps us improve our services. A cookie is a small text file placed on your device when you visit the wy2 website.

8.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the operation of the wy2 platform, including session management, login authentication, and security functions. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations.
• Analytics cookies: Collect anonymised data about how players use the wy2 platform, helping us identify areas for improvement. No personally identifiable information is shared with analytics providers.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats.

8.2 Managing Cookies

You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the wy2 platform. Strictly necessary cookies cannot be disabled as they are required for the platform to operate securely.

wy2 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML/CTF regulatory requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine financial regulations.
• Gaming history: Retained for a minimum of three (3) years from the date of the gaming session, for dispute resolution and regulatory audit purposes.
• Customer support records: Retained for three (3) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, after which it will be deleted or anonymised within thirty (30) days.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with any individual.

wy2 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the wy2 platform
• Encryption of sensitive data at rest, including financial information and government ID data
• Multi-factor authentication options for player accounts
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Regular security audits, penetration testing, and vulnerability assessments
• Intrusion detection and prevention systems monitoring the wy2 platform in real time
• Secure data centres with physical access controls

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights in relation to your personal data held by wy2:

• Right to be informed: You have the right to be informed about how your personal data is collected and processed, as set out in this Policy.
• Right of access: You have the right to request a copy of the personal data wy2 holds about you, along with information about how it is being used.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15. wy2 will respond to all valid requests within thirty (30) days of receipt.

The wy2 platform is strictly intended for adults aged 21 years and older. wy2 does not knowingly collect personal data from any person under the age of 21. In the Philippines, the minimum legal age for participation in casino-style gambling is 21 years, and wy2 enforces this requirement through mandatory age verification during the registration process.

wy2 primarily processes and stores personal data within the Philippines. In some cases, personal data may be transferred to and processed in countries outside the Philippines — for example, where wy2 uses cloud infrastructure or third-party service providers located in other jurisdictions.

Where personal data is transferred outside the Philippines, wy2 ensures that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012. These safeguards may include standard contractual clauses, adequacy decisions, or other legally recognised transfer mechanisms approved by the National Privacy Commission of the Philippines.

wy2 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will update the "Last Updated" date at the top of this page.

For significant changes that materially affect how we process your personal data, wy2 may provide additional notice via email or an in-platform notification. Your continued use of the wy2 platform following the posting of any changes constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how wy2 protects your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way wy2 handles your personal data, please contact our Data Protection Officer. You may also use these contact details to exercise any of the data subject rights described in Section 11.

wy2 aims to respond to all data protection enquiries within thirty (30) days of receipt. For urgent matters, our live chat support team is available around the clock. You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you are not satisfied with our response.