About this Policy: This Privacy Policy describes how hey22 ("hey22", "we", "us", "our"), the operator of the online betting and gaming platform at hey22.best, collects, processes, stores, and protects the personal data of players and visitors ("you", "your"). This policy is governed by the Philippine Data Privacy Act of 2012 (Republic Act 10173) and applies to all personal data collected through the hey22 website, mobile browser interface, and any related services. By using hey22, you acknowledge that you have read and understood this Privacy Policy.
Who We Are — The hey22 Data Controller
hey22 operates the online betting and gaming platform available at hey22.best and is the data controller responsible for your personal data collected through this platform. As data controller, hey22 determines the purposes and means of processing your personal information.
hey22 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and with the Philippine Data Privacy Act. You can contact the hey22 DPO directly at privacy@hey22.best for any queries related to the handling of your personal data.
hey22 is committed to being transparent about how we handle personal data. This policy is written in plain English and updated regularly to reflect changes in our practices or in applicable law.
Personal Data We Collect
hey22 collects personal data only to the extent necessary to provide a safe, legal, and functional betting and gaming service. The categories of personal data we collect include:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, government-issued ID details | Registration & KYC verification |
| Contact Data | Mobile number, email address | Registration |
| Financial Data | GCash number, Maya number, bank account details, transaction records | Deposits & withdrawals |
| Technical Data | IP address, device type, browser, OS, session logs | Automatic — platform access |
| Usage Data | Games played, bet history, session duration, feature usage | Automatic — while using hey22 |
| Communications Data | Support chat logs, email correspondence | When you contact hey22 support |
| Location Data | Country/region (derived from IP address) | Automatic — platform access |
hey22 does not collect sensitive personal information such as racial or ethnic origin, religious beliefs, health records, or political affiliations, except where specifically required by law for regulatory compliance purposes.
We do not collect personal data from individuals under 21 years of age. If we discover that data has been collected from a minor, we will delete it immediately and close the associated account.
How hey22 Uses Your Personal Data
hey22 uses the personal data we collect for the following specific purposes:
- Account management: Creating and maintaining your hey22 account, processing login credentials, and keeping your profile up to date
- Identity and age verification: Confirming that you meet the 21+ eligibility requirement and that you are who you say you are, as required under Philippine gaming regulations
- Transaction processing: Handling deposits, bet settlements, withdrawals, and bonus credits to and from your hey22 wallet
- Regulatory compliance: Meeting Anti-Money Laundering (AML) obligations, Know Your Customer (KYC) requirements, and reporting obligations under Philippine gaming and financial law
- Platform improvement: Analysing usage patterns to improve game performance, fix bugs, and develop features that Filipino players actually want
- Personalisation: Tailoring promotional offers and notifications to your activity on hey22, where you have consented to receive them
- Responsible gaming: Monitoring patterns that may indicate problem gambling behaviour and triggering safeguards or outreach in accordance with our Responsible Gaming policy
- Fraud prevention and security: Detecting and preventing fraudulent activity, unauthorised access, and manipulation of hey22 systems
- Customer support: Resolving queries, disputes, and technical issues reported through the hey22 support team
hey22 does not use your personal data for automated decision-making that produces legal or similarly significant effects without providing you with the opportunity to request human review.
Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012, hey22 processes your personal data on the following legal bases:
- Contractual necessity: Processing required to provide the hey22 betting and gaming services you have signed up for — including account management, bet processing, and withdrawals
- Legal obligation: Processing required for hey22 to comply with Philippine laws including the Data Privacy Act, Anti-Money Laundering Act, gaming regulations, and applicable tax laws
- Legitimate interests: Processing for fraud prevention, platform security, and improving hey22's services, where such interests do not override your fundamental privacy rights
- Consent: Processing for optional activities such as marketing communications and promotional offers, where you have given clear and informed consent. You may withdraw consent at any time by contacting hey22 support or adjusting your account notification settings
Third-Party Sharing
hey22 shares your personal data only with third parties who have a legitimate and necessary role in delivering the hey22 service. We do not sell your data to anyone. The categories of third parties who may receive your data include:
- Payment processors: GCash, Maya, GrabPay, BDO, BPI, UnionBank, and other Philippine payment providers, solely to process your financial transactions on hey22
- Identity verification providers: Third-party KYC services used to verify your identity and age in compliance with regulatory requirements. These providers are contractually prohibited from using your data for any other purpose
- Technology and hosting providers: Cloud infrastructure and security services that host and protect the hey22 platform. All providers are contractually bound to data protection obligations consistent with Philippine law
- Regulatory and law enforcement authorities: The Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), and law enforcement agencies, where disclosure is required by law or valid legal order
- Responsible gaming support services: Where you have requested support or where we are obligated to refer cases under our responsible gaming obligations
All third parties with whom hey22 shares personal data are required under contract to implement appropriate data protection safeguards consistent with the Philippine Data Privacy Act. hey22 does not permit third-party service providers to use your data for their own marketing or commercial purposes.
Data Retention
hey22 retains your personal data only for as long as is necessary for the purposes described in this Privacy Policy, and for as long as required by applicable Philippine law. The following retention guidelines apply:
- Active account data: Retained for the duration of your account on hey22 and for a minimum of five years after account closure, in compliance with AML and gaming regulatory requirements
- Financial transaction records: Retained for at least five years from the date of each transaction, as required under the Philippine Anti-Money Laundering Act
- Identity verification documents: Retained for the duration required by PAGCOR and AML regulations, typically five years after account closure
- Support communications: Retained for two years after the closure of each support case, for quality assurance and dispute resolution purposes
- Technical and usage data: Retained in aggregated or anonymised form for up to two years for platform analytics purposes
- Marketing consent records: Retained until you withdraw consent and for one year thereafter as a record of compliance
When personal data is no longer required and its retention period has expired, hey22 deletes or anonymises it in accordance with our data destruction procedures.
How We Protect Your Data
hey22 implements a layered approach to data security. No system is completely immune to risk, but hey22 maintains the following measures to protect your personal information:
- TLS encryption: All data transmitted between your browser and hey22 servers is encrypted using TLS (Transport Layer Security), preventing interception in transit
- Data encryption at rest: Sensitive stored data including payment details and identity documents is encrypted using AES-256 at the storage level
- Access control: Access to personal data within hey22 is restricted to authorised personnel only, on a strict need-to-know basis. All staff access is logged and audited
- Password security: hey22 does not store player passwords in recoverable form — they are hashed using a secure cryptographic algorithm
- Regular security assessments: hey22 conducts regular internal and third-party security reviews, including penetration testing, to identify and address vulnerabilities before they affect players
- Incident response: hey22 maintains a documented data breach response plan. In the event of a breach affecting your data, we will notify you and the National Privacy Commission within 72 hours of discovery, as required by RA 10173
You also play a role in protecting your data on hey22. Keep your login credentials confidential, use a strong and unique password, and contact hey22 support immediately if you suspect unauthorised access to your account.
Cookies and Tracking Technologies
hey22 uses cookies and similar technologies to make the platform work correctly and to understand how players use it. Here's what's running on hey22 and why:
You can manage cookie preferences through your browser settings at any time. Disabling certain cookies may affect the functionality of hey22. Note that cookie preferences reset when you clear your browser data.
Your Data Rights Under Philippine Law
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by hey22. To exercise any of these rights, contact the hey22 Data Protection Officer at privacy@hey22.best or through Live Chat on the platform.
Right to Access
Request a copy of the personal data hey22 holds about you, including what it is, where it came from, and how it is being used.
Right to Correction
Request that hey22 correct any personal data we hold about you that is inaccurate, incomplete, or outdated.
Right to Erasure
Request deletion of your personal data from hey22 systems, subject to overriding legal or regulatory retention obligations.
Right to Object
Object to the processing of your personal data by hey22 for specific purposes, including direct marketing communications.
Right to Data Portability
Request your personal data in a structured, machine-readable format so you can transfer it to another service provider.
Right to Complain
Lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe hey22 has mishandled your personal data.
hey22 will respond to all data rights requests within 15 business days of receipt, in line with the Philippine Data Privacy Act's requirements. Where a request cannot be fulfilled (for example, due to a legal obligation to retain data), hey22 will explain the reason clearly.
Children and Minors
hey22 is strictly for players aged 21 and above. The platform does not knowingly collect, process, or retain personal data from individuals under the age of 21.
During registration, hey22 requires age verification. If hey22 identifies that an account has been created by a person under 21 — whether through verification, parental notification, or any other means — we will immediately close the account, delete the associated personal data, and return any deposited funds to the originating payment method where technically possible.
If you are a parent or guardian and believe that someone under 21 has registered on hey22 without authorisation, please contact our support team immediately at support@hey22.best. We will act on all such reports within 24 hours.
Cross-Border Data Transfers
hey22's primary data processing infrastructure is located in the Philippines. Where data is processed or stored by third-party service providers whose infrastructure is located outside the Philippines — for example, cloud hosting or security services — hey22 ensures that appropriate safeguards are in place.
These safeguards include contractual clauses that require overseas recipients to apply data protection standards equivalent to those required under the Philippine Data Privacy Act. hey22 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing compensating controls.
If you have questions about where your personal data is processed, contact the hey22 Data Protection Officer at privacy@hey22.best.
Updates to This Privacy Policy
hey22 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in the services we offer, or changes in applicable Philippine law. When we make material changes — changes that significantly affect how we collect, use, or share your personal data — hey22 will notify registered players via the email address or mobile number associated with their account, prior to the changes taking effect.
Non-material updates, such as clarifications or corrections, will be reflected by updating the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically, particularly before making a deposit or placing a significant bet on hey22.
Your continued use of hey22 following notification of material changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you may close your account and withdraw your available balance by contacting hey22 support.
Contact Us and Data Protection Officer
For any questions about this Privacy Policy, how hey22 handles your personal data, or to exercise any of your data rights, please contact the hey22 Data Protection Officer:
- DPO Email: privacy@hey22.best
- General Support Email: support@hey22.best
- Live Chat: Available 24/7 on hey22.best
- FAQ: Visit our FAQ page for common questions about accounts and privacy
The hey22 Data Protection Officer will respond to all privacy-related queries within five business days. For formal data rights requests, the 15-business-day response window under RA 10173 applies.
If you are unsatisfied with the response from hey22's DPO, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines at the NPC's official channels.
Summary: hey22 collects only the personal data we need, uses it only for stated purposes, never sells it, protects it with industry-standard security measures, and gives you full control over it under Philippine law. This Privacy Policy was last updated on July 1, 2025. Questions? Reach our Data Protection Officer at privacy@hey22.best.