hepslot Privacy Policy

hepslot ("hepslot", "we", "us", "our") is the operator of the online casino and sports betting platform accessible at hepslot.net (the "Platform"). hepslot is licensed and regulated by the Philippine Amusement and Gaming Corporation (PAGCOR) to offer online gaming services to Filipino players aged 21 years and above.

For the purposes of Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations as enforced by the National Privacy Commission (NPC) of the Philippines, hepslot acts as the Personal Information Controller (PIC) in respect of personal data collected from players and visitors on the Platform.

This Privacy Policy applies to all personal data collected and processed in connection with your use of hepslot's Platform, including account registration, deposits, withdrawals, gameplay, customer support interactions, and any promotional activities.

hepslot collects personal data that falls into the following categories:

2.1 Registration & Identity Data

• Full legal name as it appears on a Philippine government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Philippine residential address
• Valid email address
• Philippine mobile number
• Chosen username and encrypted password

2.2 Know Your Customer (KYC) Documents

• Government-issued photo identification (e.g., UMID, PhilHealth ID, SSS ID, driver's licence, passport, or Voter's ID)
• Proof of Philippine residential address (e.g., utility bill, bank statement, or barangay certificate)
• Selfie or live photo for facial verification where required by our KYC provider
• Proof of payment method ownership (e.g., GCash or Maya account screenshot)

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers
• GCash, Maya, GrabPay, or bank account reference numbers associated with transactions
• Bonus and promotional activity records
• Account balance history

2.4 Gaming & Behavioural Data

• Game session logs, including game type, wager amounts, wins and losses, session duration, and timestamps
• Sports betting slip history, selected markets, and odds accepted
• Responsible gaming tool usage (deposit limits, self-exclusion requests, reality check settings)

2.5 Technical & Device Data

• IP address and approximate geolocation (used to verify Philippine residency and prevent access from prohibited jurisdictions)
• Device type, operating system, and browser version
• Session identifiers and authentication tokens
• Cookies and similar tracking technologies (see Section 9)

2.6 Communications Data

• Live chat transcripts and email correspondence with hepslot's customer support team
• Records of any complaints, dispute submissions, or feedback provided
• Opt-in and opt-out records for promotional communications

hepslot collects personal data through the following means:

• Directly from you when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automatically through cookies, web beacons, server logs, and similar technologies when you browse or interact with the Platform. See Section 9 for full details.
• From third-party service providers we engage for KYC identity verification, payment processing, fraud detection, and anti-money laundering screening. These providers may supply us with identity match scores, risk flags, and transaction data.
• From regulatory and law enforcement bodies such as PAGCOR or the AMLC, where disclosures are required or permitted by Philippine law.

hepslot does not purchase personal data from data brokers or any third-party marketing lists.

hepslot uses your personal data for the following specific and legitimate purposes:

• Account Management: Creating and maintaining your hepslot player account, verifying your identity, and processing your login credentials securely.
• Age Verification: Confirming that you meet the minimum 21-year age requirement mandated by PAGCOR and Philippine law before permitting access to gaming features.
• Payment Processing: Facilitating your deposits and withdrawals through GCash, Maya, GrabPay, QR Ph, BPI, BDO, Metrobank, and other supported channels; reconciling transactions; and detecting payment fraud.
• KYC & AML Compliance: Verifying your identity and residential address; screening your transactions against sanctions lists; and complying with Republic Act No. 9160 (Anti-Money Laundering Act) and PAGCOR regulatory requirements.
• Platform Operations: Delivering games, processing sports betting markets, managing bonuses and promotions, and providing customer support.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour; applying player-requested limits and self-exclusion; and complying with PAGCOR's responsible gaming standards.
• Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent accounts, bonus abuse, multi-accounting, collusion, and unauthorised access to accounts.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform news — but only where you have given your explicit consent or where we have a legitimate interest. You may opt out at any time.
• Legal & Regulatory Compliance: Responding to lawful requests from PAGCOR, the AMLC, the NPC, or other competent Philippine government authorities; maintaining records required by law; and defending legal claims.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve game offerings, user experience, and platform performance.

Under the Data Privacy Act of 2012, hepslot relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing is necessary to perform our obligations under the account agreement with you — including registration, KYC, payment processing, and game delivery.
• Legal Obligation: Processing is required to comply with PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine laws.
• Consent: For marketing communications and optional data processing activities where consent is required, we will obtain your explicit, freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Legitimate Interests: For fraud detection, security monitoring, and platform improvement purposes — where our legitimate interests are not overridden by your rights and freedoms as a data subject.

hepslot does not sell, rent, or trade your personal data. We share personal data only in the following circumstances:

6.1 Licensed Service Providers (Personal Information Processors)

We engage third-party processors who handle personal data on our behalf under strict contractual obligations consistent with the DPA. These include:

• KYC and identity verification providers
• Payment gateway operators (GCash, Maya, GrabPay, InstaPay, PesoNet, BPI, BDO, Metrobank integrations)
• Fraud detection and AML screening services
• Cloud infrastructure and data hosting providers operating under NPC-compliant data processing agreements
• Customer support platform providers

6.2 Regulatory & Law Enforcement Authorities

hepslot is required by Philippine law to disclose personal data and transaction records to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent authorities when lawfully requested or when required to report suspicious transactions under Republic Act No. 9160.

6.3 Corporate Transactions

In the event of a merger, acquisition, or restructuring of hepslot's business, personal data may be transferred to the acquiring entity, subject to that entity assuming equivalent data protection obligations and notifying affected players in accordance with the DPA.

hepslot implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in Transit: All data transmitted between your browser or app and hepslot's servers is protected using TLS 1.2 or higher.
• Encryption at Rest: Sensitive personal data and KYC documents stored in our systems are encrypted using AES-256.
• Access Controls: Access to personal data is restricted to authorised hepslot personnel on a strict need-to-know basis. All access is logged and audited.
• Password Security: Passwords are never stored in plain text. We use industry-standard bcrypt hashing with salting.
• Vulnerability Management: hepslot conducts regular penetration testing and vulnerability assessments of our Platform infrastructure.
• Staff Training: All hepslot staff with access to personal data receive mandatory data privacy training in line with NPC requirements.

While hepslot takes all reasonable steps to secure your data, no system is completely immune to threats. You are responsible for maintaining the security of your own account credentials. Do not share your hepslot password with anyone.

hepslot retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by Philippine law and PAGCOR regulations:

• Account & KYC Data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR and AML regulations under Republic Act No. 9160.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by AML law.
• Gaming Session Logs: Retained for a minimum of one (1) year from the date of each session, for dispute resolution and regulatory audit purposes.
• Customer Support Communications: Retained for two (2) years following resolution of the relevant matter.
• Marketing Consent Records: Retained for the duration of our relationship with you and for one (1) year thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes.

hepslot uses cookies and similar tracking technologies to operate the Platform, authenticate your session, detect fraud, and improve your experience. The cookies we use fall into the following categories:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. You cannot opt out of these without losing access to the Platform.
• Functional Cookies: Remember your preferences such as language settings, responsible gaming limits, and game interface preferences to personalise your experience.
• Analytical Cookies: Used to collect aggregated, anonymised data about how players interact with the Platform — including pages visited, session duration, and game preferences — to improve Platform performance.
• Security & Fraud Detection Cookies: Help identify suspicious behaviour, detect bots, and protect against account takeover and bonus abuse.

hepslot does not use third-party advertising cookies or behavioural tracking cookies that share your data with external advertisers.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your account. For a detailed list of cookies used and their specific purposes, please contact our Data Protection Officer.

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by hepslot. To exercise any of these rights, contact our Data Protection Officer at the details in Section 13.

hepslot will respond to all data subject requests within fifteen (15) business days of receipt of a complete and verified request. Where requests are complex or numerous, we may extend this period by a further fifteen (15) business days, with prior notification to you.

The hepslot Platform is strictly intended for adults aged 21 years and above, in compliance with PAGCOR regulations and Philippine law. hepslot does not knowingly collect, process, or retain personal data from individuals under the age of 21.

Where hepslot discovers or has reasonable grounds to believe that personal data of a person under 21 years of age has been collected, we will immediately:

• Suspend the relevant account pending investigation
• Permanently close the account upon confirmation of the age violation
• Delete all personal data associated with the account, subject to any mandatory reporting obligations under PAGCOR regulations
• Forfeit any account balance, as required by our Terms & Conditions

Parents and guardians who become aware that a minor has registered an account on hepslot are urged to contact us immediately at [email protected] so that we may take prompt action.

hepslot reserves the right to update or amend this Privacy Policy at any time to reflect changes in Philippine law, NPC guidance, PAGCOR requirements, or our Platform's data processing practices. The effective date at the top of this page will be updated accordingly.

Where changes are material — meaning they significantly affect how your personal data is processed or your rights as a data subject — hepslot will notify you by email to your registered address and/or by a prominent notice on the Platform at least fourteen (14) days before the changes take effect.

Your continued use of the hepslot Platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with the revised policy, you should cease using the Platform and may request account closure by contacting our support team.

In compliance with the Data Privacy Act of 2012, hepslot has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and the DPA. If you have any questions, concerns, or requests relating to your personal data, you may contact our DPO through the following channels:

If you are not satisfied with hepslot's response to your privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines, which is the independent supervisory authority responsible for enforcing the Data Privacy Act of 2012.

Please allow up to fifteen (15) business days for a response to written inquiries. For urgent matters related to a suspected data breach or account security incident, our 24/7 live chat support team can escalate your concern immediately.