phbeth Privacy
Policy

This Privacy Policy ("Policy") is issued by phbeth, a PAGCOR-regulated online gaming and sports betting platform operating through the website at phbeth.app. This Policy describes how phbeth, as the personal information controller, collects, uses, stores, shares, and protects the personal data of all individuals who access or use the phbeth platform ("you," "your," or "Player").

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, its implementing rules and regulations (IRR), and applicable issuances of the National Privacy Commission (NPC). It should be read alongside the phbeth Terms and Conditions, which govern the contractual relationship between you and phbeth.

By accessing the phbeth platform, creating an account, or submitting any personal information to phbeth, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should immediately discontinue use of the phbeth platform and may request account closure by contacting our Data Protection Officer at the details provided in Section 15.

phbeth is the personal information controller ("PIC") as defined under the Data Privacy Act for all personal data collected through the phbeth platform. As the PIC, phbeth determines the purposes and means of personal data processing and bears primary responsibility for ensuring compliance with the Data Privacy Act and NPC regulations.

phbeth operates under a PAGCOR online gaming license and is subject to both the data protection obligations of the Data Privacy Act and the player data management requirements imposed by PAGCOR as a condition of its gaming license. In cases where phbeth engages third-party processors — such as payment gateway providers, KYC verification services, or game providers — phbeth ensures that appropriate data processing agreements are in place to govern the use of personal data by such processors.

phbeth collects personal data across several categories depending on the nature of your interaction with our platform. The following table summarizes the categories of personal data collected, their sources, and the context in which they are obtained:

phbeth does not intentionally collect special categories of sensitive personal information (such as health data, biometric data, or political opinions) unless specifically required for regulatory compliance. Where any such data is collected, explicit consent will be sought and additional protections applied.

phbeth processes personal data only for the specific purposes described in this Policy. The primary purposes for which we use your personal information are as follows:

• Account Creation and Management: Creating and maintaining your phbeth account, verifying your identity at registration, and managing account settings and preferences.
• Identity Verification (KYC): Conducting Know Your Customer verification as required by PAGCOR regulations and as part of our obligations under the Anti-Money Laundering Act (AMLA) of the Philippines.
• Payment Processing: Processing deposits and withdrawals through GCash, Maya, BPI, BDO, and other supported Philippine payment channels, and maintaining transaction records.
• Gaming Services Delivery: Providing access to casino games, sports betting, bingo, and other entertainment services on the phbeth platform, including maintaining game history and VIP program tracking.
• Regulatory Compliance: Fulfilling reporting obligations to PAGCOR, complying with AMLA transaction reporting requirements, and responding to lawful requests from Philippine government authorities.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, and security threats to the platform and to player accounts.
• Customer Support: Responding to player queries, complaints, and support requests submitted through any channel.
• Responsible Gaming Compliance: Monitoring gaming patterns to fulfill responsible gaming obligations, including PAGCOR's requirements for player protection and self-exclusion management.
• Communications: Sending service-related notifications, transaction confirmations, and — where you have provided consent — promotional communications about phbeth offers and promotions.
• Platform Improvement: Analyzing aggregated usage patterns to improve the phbeth platform, game selection, and user experience.

Under the Data Privacy Act, phbeth relies on the following legal bases for processing your personal data:

• Consent: For processing not strictly necessary for the provision of services — including marketing communications and certain optional account features — phbeth relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Performance of a Contract: The majority of phbeth's data processing is necessary for the performance of the account agreement between you and phbeth — including account management, game access, payment processing, and bonus administration.
• Compliance with a Legal Obligation: phbeth processes certain personal data because it is required to do so by Philippine law — including PAGCOR licensing conditions, AMLA reporting requirements, and NPC registration obligations.
• Legitimate Interests: For fraud prevention, platform security, and service improvement activities, phbeth relies on its legitimate interest as a PAGCOR-regulated operator to maintain a secure and fair gaming environment, subject always to your interests and fundamental rights.

phbeth shares personal data with third parties only where strictly necessary and subject to appropriate contractual safeguards. We do not sell, rent, or trade personal data to any third party for marketing or commercial purposes. The categories of third parties with whom phbeth may share personal data are:

• Payment Service Providers: GCash (G-Xchange Inc.), Maya (Voyager Innovations Inc.), BPI, BDO, Metrobank, GrabPay, and other payment processors — for the sole purpose of executing your deposit and withdrawal transactions.
• Game Providers: JILI Games, WM Gaming, PG Soft, Pragmatic Play, and other certified providers — limited to session tokens and gaming activity data required to deliver the games you access.
• KYC Verification Services: Third-party identity verification providers used to confirm government ID documents during the KYC process, subject to data processing agreements compliant with the Data Privacy Act.
• PAGCOR: phbeth is required by its gaming license to report certain player and transaction data to PAGCOR as part of regulatory oversight. Such data is shared solely for the purpose of regulatory compliance.
• AMLAC and Law Enforcement: Under the Anti-Money Laundering Act, phbeth may be required to submit covered transaction reports (CTRs) and suspicious transaction reports (STRs) to the Anti-Money Laundering Council (AMLAC). phbeth will also comply with lawfully issued court orders or subpoenas from competent Philippine authorities.
• Technology and Infrastructure Providers: Cloud hosting, cybersecurity, and platform technology partners who process data solely on phbeth's documented instructions and are bound by appropriate data processing agreements.

The phbeth platform uses cookies and similar tracking technologies to support platform functionality, security, and — where consent has been obtained — analytical and performance monitoring. The categories of cookies used are:

• Strictly Necessary Cookies: Required for the platform to function — including session management, login authentication, and security tokens. These cookies cannot be disabled without preventing the platform from operating correctly.
• Functional Cookies: Remember your preferences such as language settings, display options, and interface customizations across sessions.
• Analytics Cookies: Used — with your consent — to collect aggregated, anonymized information about how players navigate the phbeth platform, enabling us to identify and improve user experience issues.
• Security Cookies: Detect and prevent fraudulent activity, including bot detection and unusual login pattern identification.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect platform functionality and may prevent you from logging in or accessing games. phbeth does not use third-party advertising cookies or tracking pixels for behavioral advertising purposes.

phbeth retains personal data for the minimum period necessary to fulfill the purposes for which it was collected, subject to the following retention principles and legal requirements:

• Active Account Data: Retained for the duration of your phbeth account and for a period of five (5) years after account closure, in accordance with PAGCOR record-keeping requirements and AMLA obligations.
• Transaction Records: Financial transaction data including deposit and withdrawal records are retained for a minimum of five (5) years from the date of the transaction, as required under AMLA and PAGCOR regulations.
• KYC Documents: Identity verification documents submitted during the KYC process are retained for the duration of the account relationship and for five (5) years after account closure.
• Support and Communications Records: Customer support records are retained for three (3) years from the date of the last interaction, to support dispute resolution and regulatory inquiries.
• Technical and Log Data: Server logs and technical access data are retained for a maximum of twelve (12) months, unless a specific security or legal investigation requires retention for a longer period.
• Marketing Consent Records: Records of your marketing consent or withdrawal of consent are retained for five (5) years to demonstrate regulatory compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Data retained beyond standard periods solely due to a legal hold or regulatory investigation will be deleted promptly upon resolution of the relevant matter.

phbeth implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between player devices and phbeth servers
• Encryption at rest for all stored personal and financial data using industry-standard cryptographic protocols
• Multi-factor authentication for administrative access to player data systems
• Role-based access controls ensuring that personal data is accessible only to authorized personnel with a legitimate need
• Regular penetration testing and vulnerability assessments conducted by qualified independent security professionals
• Intrusion detection and prevention systems (IDS/IPS) monitoring platform infrastructure continuously
• Regular staff training on data privacy obligations, phishing awareness, and security protocols
• Formal data breach response procedures aligned with NPC notification requirements

While phbeth maintains robust security measures, no online platform can guarantee absolute security against all threats. Players are responsible for maintaining the confidentiality of their own login credentials and for notifying phbeth immediately if they suspect any unauthorized access to their account.

As a data subject under the Philippine Data Privacy Act, you are entitled to the following rights in relation to your personal data held by phbeth. To exercise any of these rights, contact our Data Protection Officer using the details in Section 15. phbeth will respond to all data subject rights requests within 30 calendar days of receipt.

The phbeth platform is strictly intended for persons who are 21 years of age or older, in compliance with PAGCOR's minimum age requirement for real-money online gaming in the Philippines. phbeth does not knowingly collect personal data from individuals under 21 years of age.

During the registration process, phbeth collects date of birth information and uses it to verify that applicants meet the minimum age requirement. phbeth may require documentary proof of age — including a government-issued ID — before permitting account activation or processing withdrawal requests.

If phbeth becomes aware that personal data has been collected from a person under 21 years of age — whether through account registration or by any other means — the relevant account will be immediately suspended, the data deleted to the extent permitted by regulatory obligations, and the matter reported to PAGCOR as required. Funds in such accounts will be handled in accordance with PAGCOR guidelines for underage registrations.

The primary personal data processing activities of phbeth occur within the Philippines. However, certain service providers engaged by phbeth — including international game studios and cloud infrastructure providers — may process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, phbeth ensures that such transfers are conducted in compliance with Section 21 of the Data Privacy Act and the NPC's rules on cross-border data transfers. This includes ensuring that recipient countries or organizations provide an adequate level of data protection, or that appropriate contractual safeguards (such as standard contractual clauses) are in place to protect the transferred data.

phbeth will not authorize cross-border transfers of personal data to jurisdictions that do not meet the adequacy requirements of the Data Privacy Act without first obtaining appropriate authorization from the NPC where required.

phbeth maintains a documented Data Breach Response Plan aligned with the notification requirements of the Data Privacy Act and NPC Circular No. 16-03 on Personal Data Breach Management. In the event of a personal data breach affecting phbeth's systems:

• phbeth will contain the breach and initiate a formal assessment within 24 hours of detection.
• Where the breach is likely to result in serious harm to affected data subjects, phbeth will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required by the Data Privacy Act.
• phbeth will notify affected data subjects — including phbeth players whose personal data may have been compromised — without undue delay, providing the nature of the breach, categories of data affected, likely consequences, and measures taken or proposed to address the breach.
• Notification to affected players will be made through the email address or mobile number registered to the affected account.

phbeth reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable Philippine law or NPC guidance, or changes to the phbeth platform. All amendments will be published on this page with a revised "Last Updated" date.

Where amendments are material — involving significant changes to the purposes for which personal data is processed, the categories of data collected, or your rights as a data subject — phbeth will provide advance notice of the changes through the contact information registered to your account, no less than fourteen (14) calendar days before the amended Policy takes effect.

Your continued use of the phbeth platform following the effective date of any amended Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the amended Policy, you should cease using the platform and contact our Data Protection Officer to discuss your options, including account closure.

phbeth has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Privacy Policy. The DPO is the primary contact point for all data subject rights requests, privacy queries, and data breach notifications.

To exercise any of your data subject rights under Section 10 of this Policy, to withdraw consent previously provided, or to raise a concern about phbeth's data processing practices, please contact the phbeth Data Protection Officer using the details below. All requests and inquiries will be acknowledged within five (5) business days and resolved within thirty (30) calendar days of receipt, or earlier where required by applicable law.

If you are not satisfied with phbeth's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines through their official complaint process, available at the NPC's official website.