helspot Privacy Policy

1. Who We Are

helspot ("helspot," "we," "us," or "our") operates the online gaming platform accessible at https://helspot.net, offering casino games, sports betting, live dealer experiences, and related entertainment services to players in the Philippines.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, helspot acts as the Personal Information Controller in respect of the personal data it collects and processes in connection with the helspot Platform. helspot has a registered Data Protection Officer (DPO) whose contact details are set out in Section 14 of this Policy.

This Privacy Policy applies to all personal data collected by helspot in connection with your use of the Platform — whether you are a registered player, a visitor browsing the site, or someone who contacts helspot through our support channels.

2. Data We Collect

2.1 Registration and Account Data

When you register a helspot account, we collect:

• Full legal name as it appears on a government-issued Philippine ID;
• Date of birth (to verify you are at least 21 years of age);
• Residential address in the Philippines (barangay, city/municipality, province);
• Email address;
• Mobile number (Philippine format);
• Username and encrypted password .

2.2 Identity Verification (KYC) Data

To comply with Philippine anti-money laundering regulations and PAGCOR-context requirements, helspot may collect:

• Copies of government-issued photo identification (passport, PhilSys National ID, SSS/UMID card, driver's licence, or PRC ID);
• Proof of residential address (utility bill, bank statement, or barangay certificate dated within three months);
• Selfie or live photo for facial verification purposes;
• Source of funds documentation where required by our compliance team;
• Proof of ownership of your registered payment method (GCash, Maya, BPI, BDO, or other accepted channels).

2.3 Financial and Transaction Data

In connection with deposits, withdrawals, and bonus transactions on helspot, we collect:

• Payment method details (GCash mobile number, Maya account reference, bank account number — we do not store full card numbers);
• Transaction amounts, dates, times, and reference numbers;
• Deposit and withdrawal history;
• Bonus and promotional activity records.

2.4 Gaming Activity Data

helspot collects records of your activity on the Platform, including:

• Games played, bet amounts, and game outcomes;
• Session start and end times, session duration;
• Sports betting selections, odds accepted, and settlement results;
• Responsible gaming tool usage (deposit limits, self-exclusion requests, cooling-off periods).

2.5 Technical and Device Data

When you access helspot, our servers automatically collect certain technical information:

• IP address and approximate geolocation (country and city level);
• Device type, operating system, and browser version;
• Screen resolution and language settings;
• Referring URL and pages visited within the helspot Platform;
• Cookie identifiers and session tokens (see Section 7).

2.6 Communications Data

If you contact helspot through live chat, email, or any other support channel, we retain records of those communications, including the content of your messages and any attachments you send, for quality assurance and dispute resolution purposes.

3. How We Collect Your Data

helspot collects your personal data through the following means:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion;
• Automatically: through cookies, web beacons, server logs, and similar tracking technologies when you access the helspot Platform (see Section 7);
• From third-party service providers: identity verification providers, payment processors (GCash, Maya, BPI, BDO), and fraud prevention services may share data with helspot as necessary for account verification and transaction processing;
• From publicly available sources: helspot may supplement your profile with data from publicly available Philippine government databases for identity verification purposes where permitted by law.

4. How We Use Your Data

helspot uses your personal data for the following purposes:

• Account management: creating and maintaining your helspot account, verifying your identity and age (21+ requirement), and authenticating your login sessions;
• Service delivery: processing deposits and withdrawals, crediting bonuses, settling bets, and providing customer support;
• Legal and regulatory compliance: complying with the Philippine Anti-Money Laundering Act (RA 9160, as amended), PAGCOR-context requirements, NPC data privacy obligations, and other applicable Philippine laws;
• Fraud prevention and security: detecting, investigating, and preventing fraudulent transactions, account takeover attempts, money laundering, and other prohibited activities;
• Responsible gaming: monitoring for signs of problem gambling behaviour, enforcing player-set limits and self-exclusion requests, and complying with age-restriction requirements;
• Platform improvement: analysing aggregate, anonymised usage data to improve the design, functionality, and game selection of the helspot Platform;
• Marketing communications: sending you promotional offers, bonus notifications, and game announcements — but only where you have consented to receive such communications and subject to your ability to opt out at any time;
• Dispute resolution: maintaining records necessary to investigate and resolve any dispute between you and helspot fairly and accurately.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act (RA 10173), helspot processes your personal data on the following legal bases:

• Contractual necessity: processing required to perform our contract with you — i.e., to operate your helspot account, process transactions, and deliver gaming services;
• Legal obligation: processing required to comply with Philippine laws including the Anti-Money Laundering Act, PAGCOR-context regulations, and NPC data privacy requirements;
• Legitimate interests: processing for fraud prevention, platform security, and responsible gaming monitoring, where helspot's legitimate business interests do not override your privacy rights;
• Consent: processing for direct marketing communications, where your explicit consent has been obtained and where you retain the right to withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Data

helspot does not sell or rent your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to binding data processing agreements:

6.1 Payment Service Providers

GCash (Mynt – Globe Fintech Innovations Inc.), Maya (Voyager Innovations Inc.), BPI, BDO, Metrobank, UnionBank, and other accepted payment channels receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and Philippine Bangko Sentral ng Pilipinas (BSP) data protection requirements.

6.2 Game Content Providers

Third-party game studios and live casino operators that supply content to the helspot Platform may receive your Player ID and session token to authenticate your participation in their games. They do not receive your full identity or financial data.

6.3 Identity Verification Services

helspot uses accredited KYC and identity verification providers to assist with document verification and facial matching. These providers process your identity documents solely for verification purposes under strict confidentiality obligations.

6.4 Regulatory and Law Enforcement Authorities

helspot may disclose your personal data to Philippine government authorities — including the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), PAGCOR, or law enforcement agencies — where required by law, court order, or regulatory directive. helspot will notify affected players of such disclosures where legally permitted to do so.

6.5 Professional Advisers

helspot's legal counsel, auditors, and compliance consultants may access personal data on a strictly confidential basis as necessary for the provision of professional services to helspot.

7. Cookies and Tracking Technologies

The helspot Platform uses cookies and similar tracking technologies to operate correctly, improve performance, and deliver a personalised experience. A cookie is a small text file placed on your device when you visit a website. helspot uses the following categories of cookies:

• Strictly necessary cookies: essential for the Platform to function — these include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality;
• Functional cookies: remember your preferences such as language settings, chosen games, and responsible gaming limits you have set;
• Analytics cookies: collect anonymised, aggregate data about how players use the helspot Platform — which pages are visited most, how long sessions last, and where players encounter errors — so we can improve the Platform over time;
• Marketing cookies: used only where you have consented, to deliver relevant promotional messages and track the effectiveness of helspot's marketing campaigns.

You can manage your cookie preferences through your browser settings. Note that disabling cookies beyond the strictly necessary category may affect the functionality and personalisation of your helspot experience. Most modern browsers allow you to block third-party cookies while permitting first-party cookies from helspot.

8. Data Retention

helspot retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, and in compliance with applicable Philippine legal retention requirements:

• Account and KYC data: retained for a minimum of five (5) years from the date of account closure, in accordance with Philippine Anti-Money Laundering Act record-keeping requirements;
• Transaction records: retained for a minimum of five (5) years from the date of each transaction;
• Gaming activity logs: retained for three (3) years from the date of each gaming session, or longer where required by a regulatory investigation or legal proceedings;
• Support communications: retained for two (2) years from the date of the last communication, unless the communication relates to an ongoing dispute;
• Marketing consent records: retained for the duration of your account and for two (2) years after account closure, as evidence of your consent status.

After the applicable retention period has expired, helspot will securely delete or anonymise your personal data so that it can no longer be associated with you.

9. Data Security

helspot implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• Encryption in transit: all data transmitted between your device and helspot servers is encrypted using TLS 1.2 or higher (256-bit SSL);
• Encryption at rest: sensitive personal data, including identity documents and financial records, is stored in encrypted form using AES-256 encryption;
• Access controls: internal access to personal data is restricted on a role-based, need-to-know basis, enforced through multi-factor authentication and regular access reviews;
• Penetration testing: helspot undergoes regular independent security assessments and penetration tests to identify and remediate vulnerabilities;
• Incident response: helspot maintains a documented data breach response procedure. In the event of a personal data breach, helspot will notify the National Privacy Commission and affected data subjects within the timeframes prescribed by RA 10173 and NPC regulations.

While helspot takes all reasonable and legally required steps to protect your data, no online platform can guarantee absolute security. You play an important role in protecting your helspot account by using a strong, unique password and enabling two-factor authentication where available.

10. Your Rights as a Data Subject

Under the Philippine Data Privacy Act (RA 10173), you have the following rights in respect of your personal data held by helspot. To exercise any of these rights, contact our Data Protection Officer at the details provided in Section 14. helspot will respond to verified data subject requests within fifteen (15) business days.

11. Children's Privacy

The helspot Platform is strictly restricted to individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. helspot does not knowingly collect personal data from persons under the age of 21. If helspot becomes aware that a user under the age of 21 has created an account or provided personal data, that account will be immediately suspended, all associated data will be securely deleted (subject to any mandatory legal retention obligations), and any funds deposited will be returned to the originating payment method.

If you are a parent or guardian and believe your child has accessed helspot, please contact our support team immediately via live chat so we can take prompt action.

12. Cross-Border Data Transfers

helspot primarily stores and processes your personal data within servers located in Asia-Pacific regions with data protection frameworks comparable to the Philippines. Where personal data is transferred to a country or territory outside the Philippines — for example, to a game content provider or technology partner based in another jurisdiction — helspot ensures that appropriate safeguards are in place, including:

• Data processing agreements incorporating standard contractual clauses approved by the NPC;
• Adequacy assessments confirming that the recipient country's data protection framework provides a level of protection substantially equivalent to RA 10173;
• Binding corporate rules where data is transferred within a corporate group.

helspot will not transfer your personal data to jurisdictions that the NPC has identified as providing inadequate data protection, unless additional safeguards are applied and you have been informed of the transfer.

13. Changes to This Privacy Policy

helspot may update this Privacy Policy from time to time to reflect changes in our data practices, Philippine legal requirements, or NPC guidance. Material changes — those that significantly affect your rights or how helspot uses your data — will be communicated to registered players via email to your registered address and/or through a prominent notice on the helspot Platform, at least fourteen (14) days before the changes take effect.

The updated version number and effective date displayed at the top of this page will always reflect the current version. We encourage you to review this Privacy Policy periodically. Your continued use of the helspot Platform after a revised Privacy Policy takes effect constitutes your acknowledgement of the changes.

14. Contact and DPO Information

If you have any questions, concerns, or requests regarding this Privacy Policy or helspot's data practices, you may contact our Data Protection Officer through the following channels:

• Support Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on the helspot Platform — average first response under 5 minutes
• Subject Line: Please use "Data Privacy Request – [Your Account Username]" for all privacy-related correspondence to ensure prompt routing to our DPO

If you are not satisfied with helspot's response to your privacy concern, you have the right to lodge a complaint directly with the Philippine National Privacy Commission (NPC). The NPC's mandate includes receiving complaints from data subjects regarding violations of RA 10173.