phbit Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how phbit ("we," "us," "our," "the Platform") collects, uses, processes, stores, and protects personal information provided by users ("you," "your," "User," "Player") of the phbit online casino and sports betting platform accessible at phbit.cam. This Policy applies to all users who access or use phbit services from the Philippines, including account registration, gameplay, deposits, withdrawals, customer support interactions, and all other platform features.

By creating a phbit account or using any of our services, you acknowledge that you have read, understood, and agree to the data collection and processing practices described in this Privacy Policy. If you do not agree with any provision of this Policy, you must immediately cease using phbit services and refrain from providing any personal information to us.

This Privacy Policy should be read in conjunction with our Terms and Conditions, Responsible Gaming Policy, and any other supplementary privacy notices that may apply to specific services or features. phbit is committed to transparency in data handling and operates in accordance with Philippine data protection laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a phbit account, participate in gaming activities, or interact with customer support, we collect personal information that you voluntarily provide to us, including but not limited to:

• Account Registration Data: Full legal name (first name, middle name, last name), date of birth, gender, residential address in the Philippines (street, barangay, city/municipality, province, postal code), valid Philippine mobile phone number, and email address.
• Identity Verification Documents: Government-issued identification such as Philippine driver's license, passport, postal ID, national ID (PhilSys ID), voter's ID, or other acceptable identification documents required for age verification, identity confirmation, and anti-fraud measures.
• Financial Information: Payment method details including GCash mobile number, PayMaya account information, bank account numbers (for deposits and withdrawals), transaction history, deposit amounts, withdrawal requests, and payment processor identifiers.
• Communication Records: Content of emails, live chat conversations, customer support tickets, feedback forms, and any other communications you initiate with phbit staff or automated systems.
• Marketing Preferences: Your choices regarding promotional emails, SMS notifications, push notifications, and other marketing communications.

2.2 Information Collected Automatically

When you access and use the phbit platform, we automatically collect certain technical and behavioral information through cookies, log files, and similar tracking technologies:

• Device Information: Device type (smartphone, tablet, desktop computer), operating system (Windows, macOS, iOS, Android), browser type and version, screen resolution, device identifiers (IMEI, advertising ID).
• Connection Data: IP address, internet service provider, geographic location (country, region, city), time zone, network connection type (WiFi, cellular data).
• Usage Data: Pages visited, features accessed, time spent on each page, click patterns, navigation paths, referral sources, search queries within the platform, game selections, betting patterns, session durations, login/logout times.
• Gaming Activity: Games played, bets placed, bet amounts, winnings, losses, bonus activations, wagering requirements progress, game outcomes, and comprehensive gameplay history.
• Performance Metrics: Page load times, error messages, technical issues encountered, app crashes, and other diagnostic data to improve platform performance and user experience.

2.3 Information from Third-Party Sources

In certain circumstances, we may collect information about you from external sources to verify your identity, prevent fraud, or comply with legal obligations:

• Payment Processors: GCash, PayMaya, banks, and other financial institutions may provide transaction verification data, payment status updates, and fraud risk assessments.
• Identity Verification Services: Third-party identity verification providers may confirm your identity, validate government-issued IDs, and perform age verification checks.
• Credit Reference Agencies: In cases of payment disputes or suspected fraudulent activity, we may access credit records or fraud databases to protect phbit and other users.
• Public Databases: Publicly available information from government registries, sanctions lists, or other legal databases to ensure compliance with anti-money laundering (AML) and know-your-customer (KYC) regulations.

3. How We Use Your Personal Data

phbit processes your personal information for the following specific purposes, each grounded in a lawful basis under Philippine data protection law:

3.1 Account Management and Service Delivery

We use your personal data to create and maintain your phbit account, authenticate your identity when you log in, provide access to casino games and sports betting features, process deposits and withdrawals, track your gaming activity and transaction history, manage your account balance, apply bonuses and promotional offers, and deliver personalized gaming experiences based on your preferences and gameplay patterns.

3.2 Legal and Regulatory Compliance

As a gaming operator subject to Philippine gambling regulations and PAGCOR-aligned standards, we must process your personal data to verify that you are at least 21 years of age, confirm your identity and residential address, prevent underage gambling, comply with anti-money laundering (AML) laws, detect and prevent fraud and other illegal activities, respond to legal requests from government authorities, maintain mandatory gaming records, and fulfill reporting obligations to regulatory bodies.

3.3 Payment Processing and Financial Transactions

We process your financial information to facilitate secure deposits via GCash, PayMaya, and bank transfers, execute withdrawal requests to your registered payment methods, verify ownership of payment accounts, detect suspicious transaction patterns that may indicate fraud or money laundering, maintain accurate financial records for tax and audit purposes, and resolve payment disputes or chargebacks.

3.4 Customer Support and Communication

Your contact information and communication records enable us to respond to your inquiries via email, live chat, or phone, troubleshoot technical issues you encounter, provide assistance with account verification, deposits, and withdrawals, investigate and resolve complaints, send important service announcements such as security alerts or policy changes, and deliver marketing communications (with your consent) about promotions, bonuses, and new games.

3.5 Security and Fraud Prevention

We analyze behavioral data, device information, and transaction patterns to detect fraudulent activity including multiple accounts, identity theft, bonus abuse, and collusion, protect against unauthorized access to your account, prevent money laundering and terrorist financing, identify suspicious betting patterns or gameplay that violates our terms, safeguard phbit's systems from cyberattacks and security breaches, and protect the integrity of our games and ensure fair play for all users.

3.6 Platform Improvement and Analytics

Aggregated and anonymized usage data helps us understand how users interact with the platform, identify popular games and features, optimize website and app performance, fix bugs and technical errors, develop new features and services, improve user interface and navigation, and conduct market research to better serve Filipino players.

3.7 Responsible Gaming and Player Protection

We use your gaming activity data to monitor for signs of problem gambling behavior, implement deposit limits, loss limits, and session time limits you set, facilitate self-exclusion requests and cooling-off periods, provide resources and support for responsible gaming, and comply with player protection obligations under Philippine gambling regulations.

4. Data Sharing and Disclosure

4.1 When We Share Your Data

phbit does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your data with trusted partners and service providers in the following limited circumstances:

• Payment Processors: GCash, PayMaya, banks, and payment gateways require access to your financial information to process deposits, withdrawals, and transaction verifications.
• Identity Verification Providers: Third-party KYC (Know Your Customer) services verify your identity, age, and residential address using government-issued documents you provide.
• Game Providers: Casino game developers and sports betting data providers may process gameplay data to deliver gaming services, calculate outcomes, and maintain game integrity.
• Cloud Service Providers: Secure data storage, hosting, and backup services require access to encrypted copies of your data to maintain platform availability and disaster recovery capabilities.
• Customer Support Tools: Help desk software and live chat platforms enable our support team to access your account information, communication history, and transaction records to assist you effectively.
• Analytics and Marketing Platforms: With your consent, we may share anonymized or pseudonymized data with analytics tools (Google Analytics, Facebook Pixel) to measure campaign effectiveness and improve our services.
• Legal and Regulatory Authorities: When required by law, court order, subpoena, or regulatory request, we disclose personal data to Philippine government agencies, law enforcement, PAGCOR, or other authorities.

4.2 Data Processor Agreements

All third-party service providers with access to your personal data are bound by strict data processing agreements that require them to implement appropriate security measures, process data only for specified purposes, comply with Philippine data protection laws, and refrain from using your data for their own purposes or disclosing it to others without authorization.

5. Cookies and Tracking Technologies

5.1 What Are Cookies

Cookies are small text files placed on your device by websites you visit. They enable websites to recognize your device, remember your preferences, and improve your browsing experience. phbit uses cookies and similar technologies such as web beacons, pixel tags, and local storage to operate the platform, personalize content, and analyze usage patterns.

5.2 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality including login authentication, account security, session management, and secure transaction processing. These cookies cannot be disabled without severely impairing your ability to use phbit services.
• Performance Cookies: Collect anonymous data about how users navigate the platform, which pages are visited most frequently, error messages encountered, and page load times. This helps us optimize performance and fix issues.
• Functionality Cookies: Remember your preferences such as language selection, favorite games, display settings, and login credentials (if you choose "remember me") to provide a more personalized experience.
• Advertising and Analytics Cookies: Track your activity across sessions to deliver targeted promotions, measure marketing campaign effectiveness, and understand user demographics. These cookies may be set by third-party advertising networks and require your consent.

5.3 Managing Cookie Preferences

You can control cookie settings through your browser preferences. Most browsers allow you to block all cookies, accept only first-party cookies, or delete cookies after each session. However, disabling essential cookies will prevent you from accessing certain phbit features and may require repeated logins. To opt out of third-party advertising cookies, visit your device settings or use industry opt-out tools.

6. Data Security Measures

6.1 Technical Safeguards

phbit employs industry-standard security measures to protect your personal and financial data from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and phbit servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data at rest (stored on servers) is encrypted using AES-256 encryption standards.
• Access Controls: Only authorized phbit personnel with legitimate business needs can access your personal data. Access is granted on a role-based basis with multi-factor authentication requirements.
• Secure Infrastructure: Our servers are hosted in secure data centers with physical security controls, redundant power supplies, fire suppression systems, and 24/7 monitoring.
• Intrusion Detection: Automated systems continuously monitor for suspicious activity, unauthorized access attempts, DDoS attacks, and other security threats.
• Regular Security Audits: Third-party security experts conduct penetration testing, vulnerability assessments, and compliance audits to identify and remediate potential weaknesses.

6.2 Organizational Safeguards

phbit employees, contractors, and service providers undergo background checks and sign confidentiality agreements. All staff receive regular training on data protection principles, security best practices, and incident response procedures. We maintain a formal information security policy and appoint a Data Protection Officer responsible for overseeing compliance with this Privacy Policy and applicable laws.

6.3 Data Breach Notification

In the unlikely event of a data breach that compromises your personal information, phbit will notify affected users via email within 72 hours of discovering the breach, as required by Philippine law. The notification will describe the nature of the breach, the types of data affected, steps we are taking to mitigate harm, and recommended actions you should take to protect yourself.

7. Data Retention and Deletion

7.1 How Long We Keep Your Data

phbit retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Specific retention periods vary depending on the type of data and applicable legal requirements:

• Active Account Data: Retained for the duration of your account's active status plus 5 years after account closure to comply with anti-money laundering regulations and resolve potential disputes.
• Transaction Records: Financial transaction history, deposits, withdrawals, and gaming activity logs are retained for at least 7 years to meet tax, audit, and regulatory record-keeping requirements.
• Identity Verification Documents: Government-issued IDs and KYC documents are retained for 5 years after account closure or as required by Philippine law.
• Communication Records: Customer support conversations, emails, and live chat transcripts are retained for 3 years to improve service quality and resolve complaints.
• Marketing Data: If you opt out of marketing communications, your email address or phone number is retained only to honor your opt-out preference and prevent future marketing contacts.

7.2 Data Deletion and Anonymization

When retention periods expire and there is no legal obligation to retain specific data, phbit securely deletes or anonymizes your personal information. Deletion involves permanent removal of data from our active systems and backups using industry-standard data erasure methods. Anonymization transforms data so that it can no longer identify you as an individual, allowing us to retain statistical insights without compromising your privacy.

8. Your Privacy Rights

Under Philippine data protection law, you have the following rights regarding your personal information. To exercise any of these rights, please contact our Data Protection Officer at [email protected]:

• Right to Access: You may request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, machine-readable format within 15 days of your request.
• Right to Rectification: If your personal information is inaccurate, incomplete, or outdated, you have the right to request corrections. You can update most information directly through your account settings.
• Right to Erasure: You may request deletion of your personal data if it is no longer necessary for the purposes for which it was collected, you withdraw consent, or you object to processing. Note that legal obligations may require us to retain certain data even after you request deletion.
• Right to Restrict Processing: You can ask us to limit how we use your data if you contest its accuracy, object to processing, or need us to preserve data for legal claims.
• Right to Data Portability: You may request a copy of your data in a portable format to transfer to another service provider where technically feasible.
• Right to Object: You can object to processing of your personal data for direct marketing purposes at any time by opting out of promotional communications or contacting customer support.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
• Right to Lodge a Complaint: If you believe phbit has violated your privacy rights, you may file a complaint with the Philippine National Privacy Commission (NPC) at www.privacy.gov.ph or contact their hotline.

9. Children's Privacy

phbit services are strictly intended for individuals aged 21 years and older. We do not knowingly collect personal information from minors under 21. Our age verification processes are designed to prevent underage registration. If we discover that a user under 21 has created an account, we will immediately terminate the account, void all transactions, and delete associated personal data in accordance with legal requirements.

Parents or guardians who believe their child has provided personal information to phbit should contact us immediately at [email protected]. We take underage gambling prevention seriously and cooperate fully with authorities investigating violations of age restrictions.

10. International Data Transfers

phbit primarily operates within the Philippines and stores user data on servers located in the Philippines or in secure cloud infrastructure in the Asia-Pacific region. However, some third-party service providers (payment processors, cloud hosting, customer support tools) may be located outside the Philippines.

When we transfer your personal data internationally, we ensure that adequate safeguards are in place through data processing agreements that require recipients to provide equivalent levels of data protection, compliance with EU Standard Contractual Clauses where applicable, or other mechanisms recognized under Philippine law. Your data will never be transferred to jurisdictions with inadequate data protection standards without your explicit consent or a legal basis.

11. Changes to This Privacy Policy

phbit reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When material changes are made, we will update the "Last Updated" date at the top of this Policy and notify registered users via email or through a prominent notice on the platform.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of phbit services after changes become effective constitutes acceptance of the updated Policy. If you do not agree with any modifications, you must cease using the platform and may request account deletion.

12. Contact Information and Data Protection Officer

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact phbit's Data Protection Officer:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Subject Rights Request"
• Response Time: We aim to respond to all privacy inquiries within 5 business days
• Live Chat: Available 24/7 through the phbit website for urgent privacy concerns

When submitting a data subject rights request, please provide sufficient information to verify your identity (account username, registered email address, last transaction date) and clearly describe the nature of your request. We may request additional verification documents to prevent unauthorized access to your personal information.