🔒 philbet Privacy Policy

philbet ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal information of all individuals who interact with the philbet platform at philbet.one. This Privacy Policy ("Policy") describes the personal data we collect, the purposes for which we process it, how we store and protect it, and the rights available to you as a data subject under Philippine law.

This Policy applies to all registered players, prospective registrants, and visitors to philbet.one, regardless of the device or method used to access the Platform. It forms part of the philbet Terms and Conditions and should be read alongside those terms.

philbet processes personal data in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations as issued and amended by the National Privacy Commission ("NPC"). We are committed to the principles of transparency, legitimate purpose, and proportionality in the collection and processing of personal data.

The following terms have the meanings given below when used in this Privacy Policy:

• "Personal Data" or "Personal Information" — any information, whether recorded in material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained, or when put together with other information would directly and certainly identify an individual. This definition is consistent with Section 3(g) of the Data Privacy Act of 2012.
• "Sensitive Personal Information" — personal information that by its nature is highly sensitive or may give rise to significant harm, including government-issued identification numbers, financial information, and information relating to health. Defined in Section 3(l) of the DPA.
• "Data Subject" — the individual whose personal data is collected, held, or processed. This refers to you as a philbet player or visitor.
• "Data Controller" — the entity that controls the collection, holding, processing, or use of personal data. This is philbet, the operator of philbet.one.
• "Data Processor" — any natural or juridical person to whom a Data Controller may outsource or instruct the processing of personal data.
• "Processing" — any operation performed on personal data, including but not limited to collection, recording, organization, storage, updating, retrieval, use, consolidation, blocking, erasure, and destruction.
• "NPC" — the National Privacy Commission of the Philippines, the government authority responsible for administering and implementing the Data Privacy Act.
• "KYC" — Know Your Customer identity verification process required by applicable anti-money laundering regulations prior to processing withdrawals.

The Data Controller responsible for the personal data processed in connection with philbet.one is the operator of the philbet platform. The Data Controller is responsible for ensuring that all personal data collected through the Platform is processed in accordance with the Data Privacy Act of 2012 and this Privacy Policy.

For any privacy-related inquiries, data subject access requests, or complaints, you may contact the philbet Data Privacy Officer through the contact details specified in Section 16 of this Policy.

philbet collects the following categories of personal data from registered players and platform visitors. We collect only the data that is necessary for the purposes described in Section 6 of this Policy.

4.1 Registration and Account Data

When you create a philbet Account, we collect:

• Full legal name as it appears on your government-issued identification document;
• Date of birth (for age verification — minimum age 21 years);
• Registered mobile number (Philippine format +63XXXXXXXXXX);
• Email address;
• Username selected at registration;
• Password (stored in encrypted, hashed form — we cannot retrieve your plain-text password).

4.2 Identity Verification (KYC) Data

Upon submission of a withdrawal request or when triggered by compliance requirements, we collect:

• Copies of government-issued Philippine photo identification documents (e.g., Philippine Passport, Driver's License, UMID, PhilSys National ID, Voter's ID, PhilHealth ID);
• Proof of ownership of payment accounts used on the Platform (e.g., screenshot of registered GCash or Maya account showing account holder name);
• Source of funds declarations or other supporting AML documentation where required by the philbet compliance team for high-value transactions.

4.3 Financial Transaction Data

• Deposit transaction records including amount, date, time, and payment method used;
• Withdrawal request records including amount, destination payment account reference (not full account credentials), processing status, and timestamps;
• Account balance history and transaction logs;
• Bonus credit and wagering records associated with promotional activities.

4.4 Gaming Activity Data

• Records of all games played, wagers placed, and outcomes received;
• Bet history, game session timestamps, and session duration records;
• Responsible gaming tool settings applied to your Account (deposit limits, loss limits, session alerts, self-exclusion status).

4.5 Technical and Device Data

• IP address at time of Account registration and each subsequent login;
• Device type, operating system, and browser type;
• Geolocation data at the country and region level derived from IP address (not precise GPS coordinates);
• Session logs including login timestamps, session duration, and logout events.

4.6 Communications Data

• Records of customer support interactions via live chat, including chat transcripts where retained for quality assurance;
• Records of communications sent to your registered email address including promotional communications (where opted into);
• Feedback, complaints, and dispute correspondence.

philbet collects personal data through the following means:

philbet does not purchase personal data from third-party data brokers. Data received from third-party payment providers is limited to transaction confirmation references and is not used for any purpose other than reconciling the relevant financial transaction.

philbet processes personal data for the following specific, legitimate purposes:

1. Account Creation and Management: To register your Account, maintain your account settings, authenticate your identity at login, and manage your Account throughout its lifecycle on the Platform.
2. Age Verification and KYC Compliance: To verify that you meet the minimum age requirement of 21 years and to fulfill Know Your Customer obligations under applicable Philippine anti-money laundering regulations.
3. Payment Processing: To process deposits and withdrawals, reconcile transactions with payment providers including GCash, Maya, BPI, BDO, Metrobank, and GrabPay, and maintain accurate financial records of your Account balance and transaction history.
4. Provision of Gaming Services: To provide access to the games, sports betting markets, and other services available on the Platform, and to maintain accurate records of your gaming activity.
5. Responsible Gaming: To administer and enforce the deposit limits, loss limits, session reminders, and self-exclusion tools on your Account, and to identify and respond to potential problem gambling indicators.
6. Anti-Money Laundering (AML) Compliance: To fulfil obligations under the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended) and PAGCOR AML requirements, including transaction monitoring and suspicious transaction reporting.
7. Customer Support: To respond to your queries, resolve disputes, and provide assistance through the philbet live chat and email support channels.
8. Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, abuse of the Platform, unauthorized Account access, and prohibited conduct as defined in the philbet Terms and Conditions.
9. Platform Improvement: To analyze Platform usage patterns, game performance, and player experience in aggregate to improve the Platform's features, performance, and user experience for Filipino players.
10. Marketing Communications: Where you have opted in to marketing communications, to send you information about philbet promotions, bonuses, and new game releases. You may opt out of marketing communications at any time through your Account settings or by contacting support.
11. Legal and Regulatory Compliance: To comply with applicable Philippine laws, court orders, PAGCOR directives, NPC requirements, and other lawful regulatory obligations as they apply to philbet's operations.

philbet processes personal data only where a lawful basis exists under the Data Privacy Act of 2012. The applicable legal bases for philbet's data processing activities are:

• Consent: Where you have provided express consent to the processing of your personal data for specific purposes, such as marketing communications. Consent may be withdrawn at any time, though withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
• Performance of Contract: Processing necessary for the performance of the contract between you and philbet as set out in the Terms and Conditions — including Account management, payment processing, and provision of gaming services.
• Legal Obligation: Processing necessary for compliance with a legal obligation to which philbet is subject, including KYC verification, AML transaction monitoring, PAGCOR compliance, and NPC requirements.
• Legitimate Interests: Processing necessary for the legitimate interests of philbet that are not overridden by your interests or fundamental rights — including fraud prevention, platform security, abuse detection, and aggregate analytics for platform improvement.

philbet does not sell your personal data to third parties. We may share personal data with the following categories of recipients only where necessary and in accordance with this Policy and applicable law:

8.1 Payment Service Providers

Transaction data is shared with the relevant payment service providers — GCash, Maya, BPI, BDO, Metrobank, GrabPay — solely for the purpose of processing and confirming the specific deposit or withdrawal transaction. philbet does not retain your GCash MPIN, bank login credentials, or card numbers.

8.2 Game Content Providers

To facilitate gameplay, necessary session data (including player identifier and wagering activity within a session) is shared with licensed game providers including JILI, Pragmatic Play, PG Soft, Evolution Gaming, Pragmatic Live, and Asia Gaming. These providers process data only for game provision purposes and are bound by data processing agreements with philbet.

8.3 Regulatory and Law Enforcement Authorities

philbet may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, the Bureau of Internal Revenue (BIR), or other competent Philippine authorities where required by law, court order, or regulatory directive. Such disclosure is made only to the extent required by the applicable legal obligation.

8.4 Professional Advisers

philbet may share personal data on a need-to-know basis with legal counsel, auditors, and other professional advisers retained by philbet in connection with legal proceedings, regulatory inquiries, or corporate compliance obligations. All professional advisers are bound by confidentiality obligations.

8.5 Service Providers and Data Processors

philbet engages third-party service providers for platform hosting, cybersecurity, customer support infrastructure, and analytics. These service providers process personal data only on philbet's instructions and under data processing agreements that impose appropriate data protection obligations consistent with the DPA.

philbet uses cookies and similar tracking technologies on philbet.one for the following purposes:

Essential cookies are required for the Platform to function and cannot be disabled without disrupting your ability to log in and use philbet. You may configure your browser to reject non-essential cookies; however, doing so may affect certain Platform features. philbet does not use cookies for behavioural advertising or cross-site tracking across unrelated websites.

philbet retains personal data only for as long as necessary for the purposes described in this Policy and as required by applicable law. The following retention periods apply:

• Account and Registration Data: Retained for the duration of an active Account, plus five (5) years after Account closure, to comply with AML record-keeping requirements under the Anti-Money Laundering Act of the Philippines.
• KYC Documentation: Retained for a minimum of five (5) years from the date of verification or from the date of Account closure, whichever is later, in compliance with AML legislation.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, consistent with BIR and AML record-keeping requirements.
• Gaming Activity Records: Retained for three (3) years for standard gaming activity records; longer where associated with an active dispute, investigation, or regulatory review.
• Customer Support Records: Retained for two (2) years from the date of the relevant interaction, or longer where associated with an unresolved dispute or legal matter.
• Marketing Consent Records: Retained for as long as you remain opted in, plus one (1) year after opt-out to evidence that consent was validly withdrawn.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with philbet's data disposal procedures. Where anonymization rather than deletion is applied, the resulting data no longer constitutes personal data and is not subject to this Policy.

philbet implements appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, destruction, disclosure, or alteration. These measures include:

• Encryption in Transit: All data transmitted between your device and philbet.one is protected by 256-bit SSL/TLS encryption, consistent with the encryption standard used by major Philippine banks and financial institutions.
• Encryption at Rest: Sensitive data stored in philbet's systems — including KYC document images and identity data — is encrypted at rest using industry-standard encryption.
• Password Security: Account passwords are stored using secure one-way hashing algorithms. philbet staff cannot retrieve your plain-text password at any time.
• Access Controls: Access to personal data within philbet's systems is restricted on a need-to-know basis. Staff who do not require access to personal data for their specific role are not granted access. Access privileges are reviewed periodically.
• Two-Factor Authentication: Players may enable SMS-based two-factor authentication on their Account to provide an additional layer of protection against unauthorized Account access.
• Security Monitoring: philbet operates continuous security monitoring of the Platform to detect and respond to unauthorized access attempts, suspicious activity patterns, and potential data security incidents.
• Incident Response: philbet maintains an incident response plan for data security events. In the event of a personal data breach that poses a real risk to data subjects, philbet will notify the NPC and affected data subjects within the timeframe required by the Data Privacy Act and NPC regulations.

Under the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, you have the following rights with respect to your personal data held by philbet. To exercise any of these rights, please contact the philbet Data Privacy Officer using the details in Section 16:

philbet will respond to data subject requests within thirty (30) days of receipt. For complex or high-volume requests, an extension of up to an additional thirty (30) days may be necessary, in which case we will notify you within the initial 30-day period. Exercise of these rights is free of charge, subject to the right of philbet to charge a reasonable administrative fee for manifestly unfounded or excessive requests.

The philbet platform is strictly restricted to individuals who are 21 years of age or older, in compliance with PAGCOR regulations and Philippine gaming law. philbet does not knowingly collect or process personal data of individuals under the age of 21.

During registration, date of birth is collected specifically for the purpose of age verification. KYC documentation submitted by players must evidence that the Account holder meets the 21+ age requirement before withdrawal access is granted.

If philbet becomes aware that personal data has been collected from or relating to an individual under the age of 21, the associated Account will be immediately suspended, the matter will be escalated to the philbet compliance team, and the data will be handled in accordance with applicable law and PAGCOR requirements. If you believe a minor may have registered or accessed a philbet Account, please contact philbet support immediately.

The philbet platform may contain references to or integrations with third-party services — including payment processing interfaces (GCash, Maya, BPI, BDO, Metrobank), game content providers (JILI, Pragmatic Play, PG Soft, Evolution Gaming), and customer support infrastructure. These third-party services operate under their own privacy policies and terms, and their data practices are independent of this Policy.

When you interact with a third-party service through or alongside the philbet platform — for example, when authenticating a GCash payment or engaging in a live dealer game session — the relevant third party may collect data about that interaction directly. philbet is not responsible for the privacy practices of third-party services and encourages you to review the privacy policies of any third-party service you interact with.

philbet does not control, and is not responsible for, the content or privacy practices of websites or services accessible via links from philbet.one. Any navigation away from philbet.one to a third-party domain is at your own risk.

philbet reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, NPC guidance, the Platform's data processing activities, or our business operations. Where amendments are material — that is, where they substantively affect how we process your personal data or your rights as a data subject — we will provide advance notice of the changes via notification to your registered email address and/or a prominent notice on philbet.one.

The effective date of the current version of this Policy is displayed at the top of this page. We recommend reviewing this Policy periodically to stay informed of any updates. Continued use of the philbet platform after the effective date of an amended Policy constitutes acceptance of the revised Policy.

The current version of this Policy is always accessible at philbet.one/privacy-policy. Prior versions may be made available upon request to the philbet Data Privacy Officer.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by philbet, please contact the philbet Data Privacy Officer through the following channels:

• Live Chat: 24/7 live chat support is accessible directly from the philbet platform via the chat widget. For privacy-specific matters, indicate in your opening message that your query is a data privacy concern so it can be directed to the DPO.
• Email: [email protected] (plain text — not a clickable link). Please include "Data Privacy" in your subject line for DPO-specific correspondence.

For data subject access requests, erasure requests, or portability requests, please provide your full registered name, registered mobile number or email address, and a clear description of the specific right you wish to exercise. philbet may require identity verification before processing data subject requests to protect against unauthorized disclosure of personal data.

If you are not satisfied with philbet's response to a privacy concern or data subject request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC is the competent supervisory authority for data protection matters in the Philippines.