phbett Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how phbett ("phbett," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "User," or "Data Subject") who access or use the phbett online gaming platform available at phbett.cam, including all associated subdomains, mobile applications, and related services (collectively, the "Platform").

This Policy applies to all personal data processed by phbett in connection with your use of the Platform, regardless of whether you are a registered player, a visitor browsing without an account, or a former player whose account has been closed. It covers data collected online via the Platform and data you provide directly to phbett through customer support interactions.

By registering for a phbett account, accessing the Platform, or engaging with our services in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not use the phbett Platform.

This Policy should be read together with phbett's Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and phbett.

2. Data Controller

For the purposes of Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, phbett is the personal information controller ("PIC") in respect of personal data collected through the Platform.

phbett has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and applicable data privacy laws. The DPO may be contacted directly for privacy-related inquiries at [email protected] with the subject line "Data Privacy — DPO Inquiry."

3. Personal Data We Collect

phbett collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued ID;
• Date of birth (for age verification — 21+ requirement);
• Philippine mobile number;
• Email address;
• Residential address (required for KYC verification);
• Government ID type and ID number (e.g., Philippine passport, UMID, Driver's License, PhilHealth ID, Voter's ID).

3.2 Financial Data

• GCash or Maya mobile wallet number linked to your account;
• Bank account details (bank name, account number) used for deposits or withdrawals;
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment methods;
• Cryptocurrency wallet addresses (for USDT TRC20 transactions).

3.3 Gaming & Behavioral Data

• Wagering history including bet amounts, game titles, outcomes, and timestamps;
• Session logs including login times, session durations, and game activity;
• Responsible gaming settings you have activated (deposit limits, session limits, self-exclusion status);
• Bonus and promotional activity;
• Customer support interaction records.

3.4 Technical & Device Data

• IP address and approximate geographic location derived from IP;
• Device type, operating system, browser type and version;
• Unique device identifiers;
• Platform access logs and error reports.

4. How We Collect Your Data

phbett collects personal data through the following channels:

4.1 Directly From You

Information you provide when you register a phbett account; complete KYC identity verification; make deposits or request withdrawals; contact phbett customer support; participate in promotions, surveys, or feedback requests; or update your account profile settings.

4.2 Automatically Through Platform Use

Technical and behavioral data is collected automatically when you access and use the Platform, including IP address, session duration, pages visited, games played, bet amounts, and device information. This data is collected through server logs, first-party cookies, and similar tracking technologies described in Section 8.

4.3 From Third-Party Service Providers

phbett may receive personal data from third-party partners in limited circumstances, including:

• Payment processors: GCash, Maya, and banking partners confirm transaction status and payment method ownership;
• Identity verification services: Third-party KYC providers may assist in verifying government ID documents;
• Fraud prevention services: Anti-fraud and AML screening services may provide risk scores associated with account activity.

5. How We Use Your Personal Data

phbett uses your personal data for the following purposes:

• Account creation and management: To register your phbett account, maintain your player profile, and provide access to Platform features;
• Identity verification (KYC): To verify your identity, age (21+ requirement), and payment method ownership, as required by applicable gaming regulations and anti-money laundering laws;
• Payment processing: To process deposits, withdrawals, and bonus credits via GCash, Maya, bank transfer, and cryptocurrency;
• Game provision: To deliver gaming services, record wagering activity, and calculate game outcomes;
• Regulatory compliance: To comply with PAGCOR regulatory requirements, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, and other security threats;
• Responsible gaming: To monitor gaming patterns, enforce deposit and loss limits, process self-exclusion requests, and identify players who may need support;
• Customer support: To respond to inquiries, resolve disputes, and provide assistance in English and Filipino;
• Platform improvement: To analyze usage patterns, diagnose technical issues, and develop new features;
• Marketing communications: To send promotional offers and updates by email or SMS, where you have given consent and not subsequently opted out.

6. Legal Bases for Processing

Under the Data Privacy Act of 2012, phbett processes your personal data on the following legal bases:

• Contract performance: Processing is necessary to provide gaming services under the phbett Terms & Conditions that you have accepted, including account management, payment processing, and game delivery;
• Legal obligation: Processing is required to comply with applicable Philippine laws and regulations, including the Anti-Money Laundering Act (RA 9160, as amended), PAGCOR regulations, and the Data Privacy Act of 2012;
• Legitimate interests: Processing is necessary for phbett's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your fundamental rights;
• Consent: Processing for direct marketing communications is based on your specific, informed, and freely given consent. You may withdraw marketing consent at any time by contacting support or using the unsubscribe mechanism in communications.

7. Data Sharing & Disclosure

phbett does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

7.1 Service Providers (Personal Information Processors)

phbett engages third-party service providers who process personal data on our behalf under written data processing agreements that require them to maintain data security and process data only for the purposes instructed by phbett. These include payment processors (GCash, Maya, banking partners), KYC and identity verification providers, IT infrastructure and cloud hosting providers, fraud prevention and AML screening services, and customer support platform operators.

7.2 Regulatory & Legal Authorities

phbett will disclose personal data to government authorities, law enforcement agencies, or regulatory bodies (including PAGCOR, the Anti-Money Laundering Council, the National Privacy Commission, and courts of competent jurisdiction) where required by law, court order, or regulatory directive, or where phbett has reasonable grounds to believe disclosure is necessary to prevent fraud, money laundering, or other criminal activity.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of phbett's business, personal data held by phbett may be transferred to the successor entity, subject to the same or equivalent privacy protections as described in this Policy. Affected users will be notified prior to any such transfer.

7.4 With Your Consent

phbett may share your personal data with other third parties with your explicit prior consent for specific purposes not covered above.

8. Cookies & Tracking Technologies

phbett uses first-party cookies and similar tracking technologies to operate and improve the Platform. We do not use third-party advertising cookies or cross-site tracking technologies.

8.1 Types of Cookies Used

• Strictly necessary cookies: Required for core Platform functions including session management, login state, and security token validation. These cannot be disabled without affecting Platform functionality;
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming configurations;
• Performance/analytics cookies: Collect anonymized data about how users navigate the Platform to help phbett identify and fix technical issues and improve user experience. No personally identifiable information is transmitted to analytics systems;
• Security cookies: Support fraud prevention and anti-bot measures to protect your account.

8.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to log in or use core Platform features. For detailed cookie management instructions, refer to the help section of your browser (Chrome, Safari, Firefox, Edge) or contact phbett support.

9. Data Retention

phbett retains personal data only for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, phbett will securely delete or anonymize your personal data such that it can no longer be associated with you as an identifiable individual.

10. Data Security

phbett implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, destruction, or accidental loss. These measures include:

• Encryption in transit: All data transmitted between your device and phbett servers is protected by TLS 1.3 / 256-bit SSL encryption;
• Encryption at rest: Sensitive personal data fields are encrypted in phbett databases using AES-256 encryption;
• Access controls: phbett employee access to personal data is strictly role-based and limited to personnel with a legitimate operational need. Access is logged and audited;
• Password security: User passwords are stored as salted cryptographic hashes using bcrypt — phbett employees cannot view your password;
• Two-factor authentication (2FA): Available for all player accounts to add an additional layer of login security;
• Infrastructure security: phbett servers are hosted in data centers with physical access controls, redundant power, and network intrusion detection systems;
• Penetration testing: Regular third-party security assessments and penetration tests are conducted to identify and remediate vulnerabilities;
• Staff training: All phbett employees handling personal data receive regular data privacy and security training.

11. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phbett:

To exercise any of these rights, contact phbett's Data Protection Officer at [email protected] with the subject line "Data Privacy Rights Request." phbett will respond within 15 business days. Identity verification may be required before processing a rights request.

If you believe phbett has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.

12. Children's Privacy

The phbett Platform is strictly intended for adults aged 21 years and older, consistent with Philippine gaming law. phbett does not knowingly collect personal data from individuals under the age of 21.

If phbett discovers or has reasonable grounds to believe that a user is under 21 years of age, the account will be immediately suspended and all personal data associated with the account will be reviewed. Accounts confirmed to belong to underage users will be closed and personal data deleted to the extent not required for regulatory compliance.

If you are a parent or guardian and believe your child has registered a phbett account without your knowledge, please contact us immediately at [email protected]. We will investigate and take appropriate action promptly.

13. Cross-Border Data Transfers

phbett's primary data processing infrastructure is located within the Philippines. However, some third-party service providers engaged by phbett (including cloud infrastructure providers and certain game software vendors) may process personal data in servers located outside the Philippines.

Where cross-border data transfers occur, phbett ensures that appropriate safeguards are in place consistent with NPC Circular No. 17-01 and Section 21 of the Data Privacy Act of 2012. These safeguards include contractual data transfer agreements that require recipient entities to maintain privacy and security standards equivalent to those required under Philippine law.

phbett does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate contractual protections.

14. Updates to This Privacy Policy

phbett may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page will always reflect the most recent revision.

Material changes — those that significantly affect your rights or how your data is used — will be communicated to registered phbett users via email or prominent platform notification at least 7 days before taking effect. Non-material clarifications may take effect upon publication.

If you continue to use the phbett Platform after the effective date of an updated Privacy Policy, you are deemed to have accepted the revised terms. If you do not agree with any revision, you should stop using the Platform and may request account closure.

15. Contact Us & Data Protection Officer

For all privacy-related inquiries, data rights requests, or concerns about how phbett handles your personal data, please contact phbett's Data Protection Officer:

For complaints that have not been resolved satisfactorily through phbett's internal process, you may escalate your concern to the National Privacy Commission of the Philippines: