helslot Privacy
Policy

helslot ("helslot," "we," "us," "our") is the data controller responsible for the personal information collected through the helslot Platform at helslot.vip. helslot is a PAGCOR-licensed online gaming operator serving Filipino players across the Philippines — from Metro Manila, Cebu, and Davao to every island province in the archipelago.

As the data controller, helslot determines the purposes and means by which your personal information is processed. helslot has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. Contact details for the DPO are provided in Section 15.

This Privacy Policy applies to all personal data collected by helslot through the helslot.vip website, mobile browser interface, customer support communications, and all other services provided under the helslot brand. By creating a helslot account or continuing to use the Platform after this Policy takes effect, you acknowledge that you have read and understood this Privacy Policy.

helslot collects the following categories of personal data from players and visitors to the Platform:

2.1 Registration Data. When you create a helslot account, we collect: full legal name, date of birth, Philippine mobile number, email address, and the password you choose (stored in hashed, non-reversible form — we never see your actual password).

2.2 Identity Verification (KYC) Data. As required by PAGCOR and Philippine AML regulations, we collect identity documents for account verification. Accepted documents include: Philippine Passport, Driver's License, SSS ID, UMID, PhilHealth ID, Postal ID, and PhilSys (National ID). We also collect proof of address documents where required.

2.3 Financial Data. To process deposits and withdrawals, helslot collects: GCash wallet numbers, Maya account numbers, bank account details (account name, number, and bank name for BPI, BDO, Metrobank, UnionBank transfers), and transaction records. We do not store full card numbers or CVV codes.

2.4 Gameplay and Transaction Data. helslot maintains records of all bets placed, games played, win/loss outcomes, session durations, deposit and withdrawal transactions, and bonus usage. These records are required by PAGCOR and for AML monitoring purposes.

2.5 Device and Technical Data. When you access helslot, we automatically collect: IP address, device type and model, operating system and version, browser type and version, screen resolution, time zone, and session timestamps.

2.6 Communication Data. Records of all communications between you and helslot's customer support team — including live chat transcripts, email correspondence, and support ticket records — are stored for service quality and dispute resolution purposes.

2.7 Marketing Preferences. If you opt in to helslot's promotional communications, we record your consent, the date of consent, and your channel preferences (SMS, email, in-platform notification).

helslot collects personal data through the following mechanisms:

• Direct Collection: Information you actively provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or responding to surveys and promotions.
• Automated Collection: Technical data collected automatically when you visit helslot.vip — including IP addresses, session identifiers, device fingerprints, and cookie data (see Section 8 for full cookie details).
• Payment Processor Data: When you deposit via GCash, Maya, or bank transfer, the payment processor may share transaction confirmation data with helslot to enable credit of your wallet. helslot does not receive your full GCash PIN or bank login credentials through this process.
• Third-Party Game Providers: Game providers whose titles appear on helslot (such as JILI, PG Soft, and Pragmatic Play) may share gameplay statistics and session data with helslot to enable game history records and jackpot verification.
• Publicly Available Sources: For AML screening purposes, helslot may reference publicly available sources — such as government sanctions lists and PAGCOR exclusion databases — to verify player eligibility.

helslot uses your personal data only for the specific purposes listed below. We do not repurpose data for uses inconsistent with the original purpose of collection without your prior consent:

Under the Philippine Data Privacy Act (RA 10173), helslot processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the helslot service contract with you — including account management, game provision, and payment processing — is based on the contractual relationship established when you register and agree to the helslot Terms and Conditions.
• Legal Obligation: Processing required for helslot to comply with Philippine law — including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and PAGCOR responsible gaming requirements — is based on legal obligation.
• Legitimate Interests: Processing for platform security, fraud prevention, and service improvement is based on helslot's legitimate interest in operating a secure, fair, and high-quality gaming platform. helslot has assessed that these interests are not overridden by your data subject rights in each case.
• Consent: Processing for marketing communications (SMS, email, in-platform notifications about promotions) is based on your explicit, freely given consent. You may withdraw this consent at any time by updating your communication preferences in your account settings.

helslot does not sell your personal data. We share personal data only with the following categories of third parties, and only to the extent necessary for the purpose stated:

• Payment Processors: GCash (Mynt — Globe Fintech Innovations), Maya (Voyager Innovations), BancNet, InstaPay, and other payment service providers receive financial and registration data necessary to process your transactions. These providers operate under their own privacy policies and are themselves regulated by the Bangko Sentral ng Pilipinas (BSP).
• Game Providers: JILI Technology, PG Soft, Pragmatic Play, Habanero, CQ9, Fa Chai, and other game studios integrated into helslot receive session identifiers and wager data necessary to deliver game services. These providers receive no more personal data than is required to operate the game.
• PAGCOR and Regulatory Authorities: helslot is required by law to provide transaction records, player identity data, and other information to PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities upon their lawful request. helslot cannot refuse these disclosures.
• Technology and Infrastructure Providers: Cloud hosting providers, cybersecurity firms, and technical support vendors who process data on helslot's behalf under binding data processing agreements that include confidentiality and data protection obligations.
• Professional Advisors: Legal counsel, auditors, and compliance consultants may access personal data where strictly necessary for their professional services to helslot.

helslot retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by Philippine law. The following retention guidelines apply:

Upon expiry of applicable retention periods, personal data is securely deleted or anonymized using methods that prevent reconstruction of individual identities. helslot conducts annual data retention audits to ensure compliance with these guidelines.

helslot uses cookies and similar tracking technologies on the helslot.vip platform. This section explains what cookies we use, why, and how you can manage them.

8.1 What Are Cookies? Cookies are small text files stored on your device by your browser when you visit a website. They allow the website to recognize your device on subsequent visits, remember your preferences, and improve your experience.

8.2 Cookies Used by helslot:

• Strictly Necessary Cookies: These cookies are essential for the helslot platform to function. They maintain your login session, store your wallet state, enable secure transactions, and prevent cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your preferences — such as preferred language, game lobby layout, and notification settings. Disabling these cookies will not prevent you from using helslot but may reduce your experience quality.
• Analytics Cookies: helslot uses internal analytics tools to understand how players navigate the platform — which game categories are most visited, where players encounter difficulty, and how sessions flow. This data is processed in aggregated, anonymized form and is used solely to improve the platform.
• Security Cookies: Device fingerprinting and fraud-detection cookies that help helslot identify unusual login patterns, detect account takeover attempts, and prevent bonus abuse.

8.3 Managing Cookies. You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent you from logging in and using the helslot platform. helslot does not use third-party advertising cookies or social media tracking pixels.

Under the Philippine Data Privacy Act (RA 10173), you have the following rights regarding your personal data held by helslot. To exercise any of these rights, contact the helslot Data Protection Officer using the details in Section 15. helslot will acknowledge all rights requests within 72 hours and respond substantively within 30 calendar days.

helslot is an online gaming platform strictly restricted to persons aged 21 years and above, in compliance with PAGCOR's responsible gaming requirements for online casino operators in the Philippines. helslot does not knowingly collect personal data from individuals under the age of 21.

All registration submissions are subject to date-of-birth verification and KYC identity checks. Any account found to have been created by an individual under 21 will be immediately suspended, all balances will be forfeited, and the data associated with that account will be processed only to the extent required to comply with legal obligations and then deleted.

helslot implements a layered security framework to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Key security measures include:

• Encryption in Transit: All data transmitted between your browser and helslot servers is encrypted using TLS 1.3 — the current industry standard. The helslot.vip domain enforces HTTPS exclusively; HTTP connections are automatically redirected.
• Encryption at Rest: Personal data stored in helslot's databases is encrypted using AES-256 at rest. KYC documents are stored in isolated secure vaults with role-based access controls.
• Password Security: helslot never stores your password in readable form. Passwords are processed through bcrypt hashing with per-account salts, making them computationally infeasible to reverse-engineer.
• Access Controls: helslot operates a strict least-privilege access model. Staff can only access the personal data categories required for their specific role. All internal access to sensitive player data is logged and audited.
• Two-Factor Authentication: helslot offers SMS-based two-factor authentication for player logins, providing an additional layer of protection beyond username and password.
• Intrusion Detection: Automated intrusion detection and prevention systems monitor helslot's infrastructure 24/7 for anomalous access patterns, potential data exfiltration, and brute-force login attempts.

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, helslot will comply with the breach notification requirements under the Philippine Data Privacy Act and NPC Circular No. 16-03 (Security of Personal Data).

12.1 NPC Notification. helslot will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of a personal data breach that is reasonably likely to result in serious harm to affected data subjects. The notification will include: a description of the breach, the categories and approximate number of data subjects affected, the likely consequences, and the measures taken or proposed to address the breach.

12.2 Player Notification. Where a data breach is likely to result in a high risk to the rights and freedoms of individual players — for example, where financial account data, KYC documents, or login credentials may have been exposed — helslot will notify affected players directly via the contact details on record. Notifications will describe what happened, what data was involved, what helslot is doing, and what steps players can take to protect themselves.

12.3 Breach Response. helslot maintains an incident response plan that is tested and updated annually. Upon detecting a potential breach, helslot immediately engages its security team to contain the incident, assess the scope, and implement remediation measures.

Some of helslot's technology partners — including game providers such as JILI Technology, PG Soft, and Pragmatic Play, as well as cloud infrastructure providers — may operate servers or process data outside the Philippines. Where personal data is transferred outside the Philippines, helslot ensures that appropriate safeguards are in place as required by the Philippine Data Privacy Act, including:

• Data processing agreements with all third-party processors that impose data protection obligations equivalent to those required under Philippine law;
• Transfer only to countries or jurisdictions with adequate data protection frameworks, or under contractual clauses approved by the National Privacy Commission; and
• Minimum data transfer principle — only the data strictly necessary for the service is transferred cross-border.

Players may request information about the specific safeguards in place for any cross-border transfer by contacting the helslot Data Protection Officer.

helslot may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable Philippine law, PAGCOR regulatory requirements, NPC guidance, or the introduction of new platform features that involve new data collection.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data, or affect your rights as a data subject — helslot will notify active players via email or in-platform notification at least seven (7) days before the updated Policy takes effect.

For non-material changes — such as typographical corrections, clarifications, or minor formatting updates — changes may take effect without prior notice. The "Effective Date" at the top of this document reflects the date of the most recent revision.

Your continued use of the helslot Platform after any update to this Privacy Policy constitutes your acknowledgment of the updated terms. If you disagree with material changes to this Policy, you may request account closure before the effective date of the changes.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by helslot — including data subject rights requests, consent withdrawal, or data breach notifications — please contact the helslot Data Protection Officer:

The National Privacy Commission (NPC) of the Philippines is the independent body responsible for overseeing compliance with the Data Privacy Act. Players have the right to lodge a complaint directly with the NPC if they believe helslot has not handled their personal data in compliance with RA 10173, without prejudice to pursuing other legal remedies.