phbetph Privacy Policy

phbetph is a Philippine-facing online casino and sports betting platform operating at phbetph.bet. We provide a broad range of gaming services to Filipino players, including live dealer casino games, online slots, bingo, sports betting, Royal Fishing, Nine, and other titles tailored to the Philippine market.

phbetph operates in compliance with the regulatory framework established by the Philippine Amusement and Gaming Corporation (PAGCOR). As a data controller, phbetph is responsible for the personal data of all registered players and website visitors, and we take this responsibility seriously.

This Privacy Policy is issued in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations. If you have questions about how your data is handled, you may contact our Data Protection Officer (DPO) at the contact details provided in Section 13.

phbetph collects only the personal data necessary to provide our services, comply with regulatory obligations, and ensure the security and integrity of our platform. The categories of data we collect include:

2.1 Registration & Identity Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older, as required by PAGCOR)
• Residential address in the Philippines (e.g., barangay, city, province)
• Email address and mobile number
• Username and encrypted password

2.2 KYC Verification Documents

• Scanned copy or photograph of a valid Philippine government-issued photo ID (e.g., PhilSys National ID, UMID, SSS ID, Driver's License, or Passport)
• Proof of address (utility bill, bank statement, or barangay certificate dated within 3 months)
• Payment method ownership evidence where required (e.g., GCash or PayMaya account screenshot)

2.3 Financial Data

• Deposit and withdrawal transaction records
• Payment method details (GCash number, PayMaya number, or bank account details — stored only in tokenised or partial form)
• Account balance history and bonus activity

2.4 Gaming Activity Data

• Game sessions, wager history, and win/loss records
• Sports betting selections and settlement history
• Responsible gaming tool usage (deposit limits, session reminders, self-exclusion requests)

2.5 Technical & Device Data

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session timestamps and login history
• Cookie identifiers and similar tracking technologies (see Section 7)

2.6 Communications Data

• Support ticket content and live chat transcripts
• Email correspondence with phbetph
• Survey responses and feedback submissions (where you choose to participate)

phbetph collects personal data through the following channels:

• Direct Submission: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion.
• Automated Collection: Through cookies, web beacons, and server logs as you browse and interact with the phbetph platform. This includes technical and device data described in Section 2.5.
• Third-Party Verification Partners: Where you provide consent, phbetph may receive supplementary identity data from licensed KYC and anti-fraud service providers to assist in verifying your identity in compliance with PAGCOR and AMLC requirements.
• Payment Processors: Transaction confirmation data is shared with phbetph by GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other payment partners when you make deposits or withdrawals.

phbetph uses the personal data we collect for the following purposes:

phbetph will not use your personal data for any purpose other than those listed above without first obtaining your explicit consent.

Under the Data Privacy Act of 2012 (RA 10173), phbetph processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to create and manage your phbetph account, process transactions, and provide the gaming services you have requested.
• Legal Obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws — including mandatory KYC verification, transaction monitoring, and regulatory reporting.
• Legitimate Interests: Processing carried out in phbetph's legitimate interest in maintaining platform security, preventing fraud, and improving our services — where this does not override your fundamental privacy rights.
• Consent: Processing for non-essential purposes — such as sending promotional emails and using non-essential cookies — which requires and relies on your prior, freely given, and specific consent. You may withdraw this consent at any time.

phbetph does not sell your personal data. We share your data only in the following circumstances, and only to the minimum extent necessary:

6.1 Payment Processors

Transaction data is shared with phbetph's licensed payment partners — including GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank — to facilitate deposits and withdrawals. These providers process your payment data under their own privacy policies and are independently regulated.

6.2 KYC & Identity Verification Providers

phbetph engages licensed third-party identity verification providers to assist with KYC document review and fraud screening. These providers are contractually bound to process your data only for the specific purpose of KYC verification on phbetph's behalf and may not use it for any other purpose.

6.3 Regulatory Authorities

phbetph is legally required to share certain player data — including identity records and transaction histories — with PAGCOR and the Anti-Money Laundering Council (AMLC) upon request, or where mandatory reporting thresholds are triggered under Philippine law. This sharing occurs without further notice to you where legally required.

6.4 Technology Service Providers

phbetph uses technology partners (such as cloud hosting providers, customer support platform providers, and analytics providers) who may process limited technical or behavioural data on our behalf. All such providers are bound by data processing agreements that restrict them from using your data for their own purposes.

6.5 Legal Proceedings

phbetph may disclose your personal data where required by a valid court order, legal process, or government authority — including in connection with fraud investigations, money laundering investigations, or enforcement actions under Philippine law.

phbetph uses cookies and similar tracking technologies on its platform. A cookie is a small text file placed on your device when you visit a website. phbetph uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cannot be disabled without affecting platform functionality.
• Functional Cookies: Remember your preferences (such as language settings and responsible gaming tool configurations) to personalise your experience on phbetph.
• Analytics Cookies: Help phbetph understand how players use the platform — such as which pages are most visited and where players encounter issues. This data is aggregated and anonymised. Analytics cookies require your consent.
• Marketing Cookies: Used to deliver relevant promotional content to you on phbetph and, where you have opted in, to measure the effectiveness of phbetph marketing campaigns. Marketing cookies require your explicit consent.

You can manage your cookie preferences through your browser settings or through the phbetph cookie preference centre. Note that disabling strictly necessary cookies will affect your ability to use core platform features, including logging in and placing wagers.

phbetph retains your personal data only for as long as is necessary for the purposes described in this policy, or as required by applicable Philippine law. The following retention periods apply:

• Active Account Data: Retained for the duration of your active phbetph account relationship.
• KYC Documents & Transaction Records: Retained for a minimum of five (5) years following the closure of your account, in compliance with AMLC record-keeping requirements under the Anti-Money Laundering Act.
• Responsible Gaming Records: Self-exclusion and responsible gaming tool usage records are retained for the duration of any exclusion period plus five (5) years, to prevent re-registration during an active exclusion.
• Marketing Consent Records: Retained for three (3) years from the date of consent, or until you withdraw consent — whichever is earlier.
• Support & Communications Records: Retained for three (3) years from the date of the last interaction.
• Technical & Device Logs: Retained for twelve (12) months for security and fraud detection purposes.

Following the applicable retention period, phbetph will securely delete or anonymise your personal data in accordance with our internal data disposal procedures.

phbetph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and phbetph is encrypted using industry-standard TLS 1.2 or higher.
• Encryption at Rest: Sensitive personal data — including KYC documents and financial records — is encrypted when stored on phbetph's servers.
• Access Controls: Access to personal data is restricted to authorised phbetph staff and service providers on a strictly need-to-know basis. All access is logged and regularly audited.
• Two-Factor Authentication (2FA): phbetph supports 2FA on player accounts as an additional layer of security against unauthorised access.
• Penetration Testing & Security Audits: phbetph undergoes regular third-party security testing to identify and remediate vulnerabilities in our systems.
• Segregated Player Funds: Your account balance is held in segregated accounts, separate from phbetph's operational funds, ensuring your money is protected at all times.

As a data subject under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by phbetph:

• Right to be Informed: You have the right to know what personal data phbetph holds about you, how it is being used, and with whom it is shared — as set out in this Privacy Policy.
• Right of Access: You may request a copy of the personal data phbetph holds about you at any time. phbetph will respond to verified access requests within thirty (30) days.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data be corrected. You may update most account details directly through your phbetph account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes it was collected, or where you withdraw consent and there is no other legal basis for processing. This right is subject to phbetph's legal obligation to retain certain records (see Section 8).
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to phbetph's overriding legal obligations.
• Right to Withdraw Consent: Where phbetph processes your data on the basis of consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to Lodge a Complaint: If you believe phbetph has not handled your personal data in accordance with RA 10173, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact phbetph's Data Protection Officer using the contact details in Section 13. We may ask you to verify your identity before processing your request.

phbetph is an online gaming platform strictly intended for adults. In accordance with PAGCOR regulations and Philippine law, players must be at least 21 years of age to register and use the phbetph platform.

phbetph does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not register, access, or use phbetph under any circumstances.

phbetph enforces strict age verification as part of its KYC process. Any account found to be registered by a person under 21 years of age will be immediately closed, and any funds deposited by an underage player will be returned to the originating payment method. Associated winnings will be forfeited.

If you believe a person under 21 has registered a phbetph account, please contact our support team immediately. We take underage gambling extremely seriously and will act on all credible reports without delay.

phbetph reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable Philippine law. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

Where changes are material — for example, a significant change in how we use your data or a new category of data sharing — phbetph will provide advance notice via a notification on the platform or by email to your registered address, giving you a reasonable opportunity to review the changes before they take effect.

Your continued use of the phbetph platform after any update to this Privacy Policy constitutes your acknowledgment of the revised version. If you do not agree to the revised policy, you must stop using the platform and contact our support team to close your account.

We encourage you to review this Privacy Policy periodically to stay informed about how phbetph protects your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or phbetph's handling of your personal data, please contact us through the following channels:

• Email (DPO): [email protected] — please include "Privacy Request" or "DPO" in the subject line
• Live Chat: Available 24/7 via the phbetph platform — our team averages a 3–5 minute response time
• Postal Address: phbetph Data Protection Officer, Metro Manila, Philippines

phbetph targets a response time of thirty (30) calendar days for all privacy-related requests. For complex or high-volume requests, we may extend this period by an additional thirty (30) days, in which case we will notify you of the extension.

If you are not satisfied with phbetph's response to your privacy request, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines, the regulatory body responsible for enforcing the Data Privacy Act of 2012 (RA 10173).