Your Privacy Matters at phbeti

1. Introduction

phbeti ("phbeti," "we," "us," or "our") is committed to protecting the privacy and personal data of all users who access or register on the phbeti platform at phbeti.app (the "Platform"). This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of your personal information in accordance with applicable Philippine data privacy laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

By accessing the phbeti Platform, registering an account, or otherwise interacting with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately.

This Policy applies to all personal data collected through the phbeti website, mobile-optimized interface, customer support channels, and any other touchpoints through which you interact with phbeti.

2. Information We Collect

phbeti collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of information we collect include:

2.1 Information You Provide Directly

• Registration data: Full name, date of birth, gender, nationality, residential address (including city – e.g., Manila, Cebu, Davao, Quezon City, Makati), email address, and mobile number.
• Identity verification (KYC) documents: Government-issued ID (e.g., PhilSys ID, passport, driver's license), proof of address, and payment method ownership documents.
• Financial information: Payment method details (GCash number, PayMaya account, BPI/BDO/Metrobank account details) used for deposits and withdrawals. Full card or account numbers are not stored on phbeti servers.
• Communications: Messages sent to phbeti via live chat, email, or support tickets.
• Responsible gaming preferences: Self-exclusion requests, deposit limits, and session time settings you configure on the Platform.

2.2 Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone.
• Usage data: Pages visited, games played, session duration, betting history, click patterns, and navigation paths within the Platform.
• Cookies and similar technologies: Session cookies, persistent cookies, and analytics identifiers. See Section 7 for full details.
• Geolocation data: Approximate location derived from your IP address, used to verify eligibility and comply with jurisdictional restrictions.

2.3 Information from Third Parties

• Identity verification results from KYC service providers.
• Payment confirmation data from GCash, PayMaya, and banking partners.
• Fraud detection signals from third-party risk management services.
• Publicly available information used to verify your identity or detect prohibited conduct.

3. How We Use Your Information

phbeti uses the personal data we collect for the following purposes:

phbeti does not sell your personal data to third parties for their own marketing purposes.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, phbeti processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to upon registration.
• Legal obligation: Processing required to comply with applicable Philippine laws, including AML regulations and PAGCOR licensing requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Sharing Your Information

phbeti does not sell, rent, or trade your personal data. We may share your information with the following categories of recipients only to the extent necessary:

• Payment processors: GCash, PayMaya, BPI, BDO, and Metrobank, solely to process your financial transactions.
• KYC and identity verification providers: Third-party services that assist phbeti in verifying your identity and age in compliance with regulatory requirements.
• Game software providers: Licensed third-party game studios whose games are hosted on the phbeti Platform. These providers may receive anonymized session data for game performance purposes.
• Fraud and risk management services: Providers that help phbeti detect and prevent fraudulent activity and money laundering.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where disclosure is required by law or court order.
• Professional advisors: Legal counsel, auditors, and accountants, subject to confidentiality obligations.

All third-party service providers engaged by phbeti are contractually required to process your data only for the specified purpose and to maintain appropriate security standards.

6. Data Retention

phbeti retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law. Specific retention periods include:

• Account and transaction records: Retained for a minimum of five (5) years following account closure, in compliance with AML regulations.
• KYC documents: Retained for five (5) years from the date of submission or account closure, whichever is later.
• Customer support communications: Retained for two (2) years from the date of the last interaction.
• Marketing preferences and consent records: Retained until you withdraw consent or close your account, plus one (1) year for audit purposes.
• Cookies and analytics data: Retained in accordance with the cookie lifespans described in Section 7.

Upon expiry of the applicable retention period, phbeti will securely delete or anonymize your personal data in accordance with its data disposal procedures.

7. Cookies and Tracking Technologies

phbeti uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyze usage patterns. The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function, including session management and security tokens. These cannot be disabled.
• Functional cookies: Remember your language preferences, login state, and display settings to improve your experience.
• Analytics cookies: Collect anonymized data about how users interact with the Platform, helping phbeti improve performance and content. These are only set with your consent.
• Marketing cookies: Used to deliver relevant promotional content to phbeti users. These are only set with your explicit consent.

You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the phbeti Platform. Consent for non-essential cookies can be withdrawn at any time through the cookie preference center accessible on the Platform.

8. Data Security

phbeti implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and phbeti servers.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing.
• Multi-factor authentication requirements for administrative access to phbeti systems.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that poses a risk to your rights and freedoms, phbeti will notify the National Privacy Commission (NPC) and affected users within the timeframes prescribed by the Data Privacy Act of 2012 and its Implementing Rules.

While phbeti takes all reasonable precautions, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your phbeti login credentials.

9. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phbeti:

• Right to be informed: The right to know what personal data phbeti collects and how it is used – as described in this Policy.
• Right of access: The right to request a copy of the personal data phbeti holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another controller where technically feasible.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe phbeti has violated your data privacy rights.

To exercise any of these rights, please contact phbeti's Data Protection Officer using the contact details in Section 13. phbeti will respond to verified data subject requests within thirty (30) days of receipt. We may request proof of identity before processing your request.

10. Children and Minors

The phbeti Platform is strictly intended for individuals who are twenty-one (21) years of age or older, in accordance with Philippine gaming regulations. phbeti does not knowingly collect personal data from individuals under the age of 21.

If phbeti becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data, and report the incident as required by applicable law. If you believe a minor has registered on the phbeti Platform, please contact our support team immediately.

phbeti employs age verification procedures during registration and KYC review to enforce this restriction. Providing false information about your age during registration is a serious breach of our Terms & Conditions and may result in forfeiture of any account balance.

11. Third-Party Services

The phbeti Platform integrates with third-party game providers, payment processors, and analytics services to deliver a complete gaming experience. While phbeti carefully selects its service partners and requires them to maintain appropriate data protection standards, phbeti is not responsible for the privacy practices of third-party providers operating their own independent platforms.

This Privacy Policy applies solely to data processed by phbeti. Any data you provide directly to a third-party service – for example, when completing a GCash or PayMaya transaction on their own interface – is governed by that provider's privacy policy. phbeti encourages you to review the privacy policies of any third-party services you interact with in connection with your use of the Platform.

12. Changes to This Policy

phbeti reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. Material changes will be communicated to registered users via the email address on file or through a prominent notice on the Platform at least fourteen (14) days before the changes take effect.

Your continued use of the phbeti Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. The date of the most recent revision is always displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how phbeti protects your data.

13. Contact and Data Requests

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or need to report a privacy concern, please reach out to the phbeti Data Protection Officer through the following channels:

• Email: support@phbeti.app (plain text – not a clickable link)
• Live Chat: Available 24/7 directly on the phbeti Platform

When submitting a data subject request, please include your full name, registered email address, and a clear description of your request. phbeti may require proof of identity before processing any request to protect against unauthorized access to your personal data.

For complaints that remain unresolved after contacting phbeti, you may escalate your concern to the National Privacy Commission of the Philippines (NPC) through their official channels.