Privacy Policy

1. Data Controller and Contact Information

phbwt, operating under license from the Philippine Amusement and Gaming Corporation (PAGCOR), acts as the Data Controller for all personal information collected through our platform. We are responsible for determining the purposes and means of processing your personal data in accordance with the Philippine Data Privacy Act of 2012 and its implementing rules and regulations.

For inquiries, requests, or complaints regarding the processing of your personal data, you may contact our Data Protection Officer through the following channels:

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated. The National Privacy Commission can be reached at:

• Address: 5th Floor, Philippine International Convention Center, Vicente Sotto St., Pasay City, Metro Manila
• Website: www.privacy.gov.ph
• Email: [email protected]
• Hotline: (02) 8234-2228

2. Personal Data We Collect

2.1 Information You Provide Directly

When you register for a phbwt account, we collect personal information necessary to verify your identity, comply with regulatory requirements, and provide our services. The information collected during account registration includes:

• Identification Information: Full legal name as it appears on government-issued identification documents, date of birth, nationality, and gender;
• Contact Information: Residential address in the Philippines (street address, barangay, city/municipality, province, postal code), valid email address, and mobile phone number with Philippine country code (+63);
• Account Credentials: Username, password (stored in encrypted form using industry-standard hashing algorithms), and security questions/answers for account recovery;
• Financial Information: Payment method details including GCash mobile number, PayMaya account information, bank account numbers, bank names, and cryptocurrency wallet addresses (when applicable);
• Identity Verification Documents: Copies of government-issued identification documents such as Philippine passport, driver's license, UMID (Unified Multi-Purpose ID), SSS ID, or postal ID, as well as selfie photographs for facial verification purposes.

2.2 Information Collected Automatically

When you access and use the phbwt platform, we automatically collect technical and usage information through cookies, web beacons, and similar tracking technologies. This information includes:

• Device Information: Device type (smartphone, tablet, desktop computer), operating system (iOS, Android, Windows, macOS), browser type and version, screen resolution, device identifier (UDID or Android ID), and mobile network information;
• Connection Information: IP address, internet service provider, approximate geolocation data derived from IP address, connection type (WiFi, mobile data), and timestamp of access;
• Usage Data: Pages viewed, games played, betting history, deposit and withdrawal transactions, session duration, click-through rates, navigation paths through the platform, and interaction with promotional materials;
• Communication Records: Records of communications with customer support, including live chat transcripts, email correspondence, Viber messages, and phone call recordings (with your consent) for quality assurance and training purposes.

2.3 Information from Third-Party Sources

To verify your identity, prevent fraud, and comply with anti-money laundering regulations, we may collect information about you from third-party sources including:

• Credit reference agencies and fraud prevention services operating in the Philippines;
• Payment service providers (GCash, PayMaya, Philippine banks) to verify payment method ownership and transaction legitimacy;
• Identity verification services that cross-reference your information against public records and databases;
• PAGCOR's self-exclusion registry and other responsible gaming databases;
• Marketing partners and affiliate networks (only with your prior consent and only for marketing purposes).

3. How We Use Your Personal Data

phbwt processes your personal information for the following legitimate purposes, in accordance with the Philippine Data Privacy Act and PAGCOR regulations:

3.1 Account Management and Service Provision

We use your registration data and contact information to create and manage your phbwt account, authenticate your identity when you log in, process your deposits and withdrawals, maintain your gaming history and account balance, and provide customer support services. This processing is necessary for the performance of our contract with you and to deliver the services you have requested.

3.2 Regulatory Compliance and Legal Obligations

As a PAGCOR-licensed operator, phbwt is required by law to collect and retain certain personal data to comply with gaming regulations, anti-money laundering (AML) laws, counter-terrorist financing (CTF) requirements, and tax reporting obligations. We use your identification documents and transaction history to verify your identity (Know Your Customer - KYC procedures), monitor transactions for suspicious activity, report large cash transactions to the Anti-Money Laundering Council (AMLC) as required, and maintain records for regulatory audits and inspections.

3.3 Fraud Prevention and Security

We process your device information, IP address, and usage patterns to detect and prevent fraudulent activities, identify multiple accounts created by the same individual (which violates our Terms and Conditions), protect against unauthorized access to accounts, and maintain the security and integrity of our platform. We employ advanced fraud detection algorithms and manual review processes to identify suspicious betting patterns, payment fraud, and account takeover attempts.

3.4 Responsible Gaming and Player Protection

phbwt takes responsible gaming seriously and uses your gaming activity data to monitor for signs of problem gambling behavior, enforce deposit limits, loss limits, and self-exclusion requests you have set, prevent underage gambling by verifying age at registration and periodically thereafter, and provide responsible gaming tools and resources. If we detect potentially harmful gambling patterns, we may contact you to offer support resources or implement protective measures on your account.

3.5 Platform Improvement and Personalization

With your consent or based on our legitimate interest in improving our services, we analyze usage data and gaming preferences to enhance user experience and platform functionality, develop new games and features based on player preferences, personalize game recommendations and promotional offers, and optimize website performance and navigation. You can opt out of certain personalization features through your account settings.

3.6 Marketing and Promotional Communications

If you have consented to receive marketing communications, we will use your contact information and gaming preferences to send you promotional emails about bonuses, new games, and special offers, push notifications through our mobile app about exclusive promotions and events, SMS messages regarding time-sensitive bonuses (subject to your consent under the Philippine Spam Law), and personalized offers based on your gaming activity and preferences. You can withdraw your consent and unsubscribe from marketing communications at any time by clicking the unsubscribe link in emails, adjusting notification settings in your account, or contacting customer support.

4. Disclosure of Personal Data to Third Parties

phbwt does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients when necessary for legitimate business purposes or legal compliance:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to support our operations, including:

• Payment Processors: GCash, PayMaya, Philippine banks, and cryptocurrency payment gateways to process deposits and withdrawals;
• Identity Verification Providers: Third-party KYC services that verify identity documents and conduct background checks;
• Cloud Hosting and IT Infrastructure: Secure data centers and cloud service providers that host our platform and store data (all located within ASEAN data centers with ISO 27001 certification);
• Game Providers: Software developers who supply casino games, live dealer platforms, and sports betting systems (they may process gaming activity data but do not have access to your full personal information);
• Customer Support Platforms: Live chat software, helpdesk ticketing systems, and communication tools used to provide customer service;
• Marketing and Analytics Services: Email marketing platforms, SMS gateways, and analytics tools to send promotional communications and measure campaign effectiveness (only with your consent).

All service providers are bound by strict data processing agreements that require them to protect your information, use it only for specified purposes, and comply with Philippine data privacy laws. We conduct due diligence on all third-party processors to ensure they maintain appropriate security measures.

4.2 Regulatory Authorities and Law Enforcement

We may disclose your personal information to regulatory bodies and law enforcement agencies when legally required or when necessary to protect rights and safety:

• PAGCOR: Gaming transaction records, responsible gaming data, and compliance reports as required by our license conditions;
• Anti-Money Laundering Council (AMLC): Suspicious transaction reports, large cash transaction reports, and related documentation as mandated by the Anti-Money Laundering Act;
• Bureau of Internal Revenue (BIR): Winnings information for tax reporting purposes when required by law;
• National Privacy Commission: In response to complaints or investigations regarding data privacy practices;
• Law Enforcement Agencies: When we receive valid legal process (court orders, subpoenas, search warrants) or when necessary to investigate fraud, protect our rights, or prevent illegal activity.

4.3 Business Transfers

In the event that phbwt undergoes a business transition such as merger, acquisition, sale of assets, or bankruptcy proceedings, your personal data may be transferred to the successor entity. We will notify affected users via email and prominent notice on our website at least 30 days before any such transfer, providing you the opportunity to close your account if you do not consent to the transfer.

5. International Data Transfers

phbwt primarily stores and processes your personal data within the Philippines and ASEAN countries. However, some of our service providers and game partners may be located in other jurisdictions, which may involve transferring your data outside the Philippines.

When we transfer personal data internationally, we ensure appropriate safeguards are in place:

• Transfers to countries recognized by the National Privacy Commission as providing adequate data protection;
• Standard contractual clauses approved by the National Privacy Commission or other international data protection authorities;
• Binding corporate rules for transfers within multinational corporate groups;
• Data processing agreements that require recipients to maintain security standards equivalent to Philippine law.

You have the right to request information about the specific safeguards in place for international transfers of your data by contacting our Data Protection Officer at [email protected].

6. Data Security Measures

phbwt implements comprehensive technical, organizational, and physical security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

6.1 Technical Security Measures

• Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3 (Transport Layer Security) protocol. Sensitive data stored in our databases, including passwords, payment information, and identity documents, is encrypted using AES-256 encryption;
• Access Controls: Multi-factor authentication for employee access to systems containing personal data, role-based access controls limiting data access to authorized personnel only, and regular access reviews and audit logs to monitor system access;
• Network Security: Firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) to protect against cyberattacks, regular vulnerability assessments and penetration testing by independent security firms, and DDoS (Distributed Denial of Service) protection to ensure platform availability;
• Secure Development Practices: Regular security audits of application code, secure coding standards to prevent vulnerabilities like SQL injection and cross-site scripting (XSS), and bug bounty program to incentivize responsible disclosure of security vulnerabilities.

6.2 Organizational Security Measures

• Employee training on data privacy, security best practices, and phishing awareness;
• Confidentiality agreements signed by all employees and contractors with access to personal data;
• Clear data handling policies and procedures documented in our Information Security Management System;
• Incident response plan for data breaches, including notification procedures to affected individuals and regulatory authorities within 72 hours as required by law.

6.3 Physical Security Measures

Our data centers and office facilities employ physical security controls including 24/7 video surveillance, biometric access controls and visitor management systems, secure disposal procedures for hardware containing personal data, and environmental controls (fire suppression, climate control, backup power) to protect data integrity.

While we implement industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to continuously improving our security posture and responding promptly to any security incidents.

7. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal information:

7.1 Right to Access (Right to Know)

You have the right to obtain confirmation whether phbwt is processing your personal data and, if so, to access that data and information about how it is being processed. You can request a copy of your personal data in a commonly used electronic format. Most of your account information is accessible directly through your account dashboard. For additional information or a comprehensive data export, contact [email protected].

7.2 Right to Rectification (Right to Correct)

You have the right to have inaccurate or incomplete personal data corrected. You can update most of your information (email address, phone number, address) directly in your account settings. For changes to your legal name or date of birth, you must contact customer support and provide supporting documentation.

7.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data when: the data is no longer necessary for the purposes it was collected; you withdraw consent (for processing based on consent) and there is no other legal ground for processing; you object to processing based on legitimate interest and there are no overriding legitimate grounds; or the data has been unlawfully processed. Note that we may be required to retain certain data for legal compliance purposes (e.g., anti-money laundering records must be kept for 7 years). We will inform you if we cannot fully comply with a deletion request due to legal obligations.

7.4 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as JSON or CSV) and to transmit that data to another service provider where technically feasible. This right applies to data you provided to us and which we process based on your consent or for contract performance.

7.5 Right to Object

You have the right to object to processing of your personal data based on our legitimate interests, including processing for marketing purposes. When you object, we will stop processing unless we can demonstrate compelling legitimate grounds that override your rights. You can opt out of marketing communications at any time through your account settings or by clicking "unsubscribe" in promotional emails.

7.6 Right to Restrict Processing

You have the right to request restriction of processing in certain circumstances, such as when you contest the accuracy of data (we will restrict processing while verifying accuracy), when processing is unlawful but you prefer restriction over deletion, or when we no longer need the data but you need it for legal claims.

7.7 Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal. You can withdraw consent for marketing communications, optional data collection, and cookies through your account settings.

7.8 Exercising Your Rights

To exercise any of these rights, please submit a request to [email protected] with the subject line "Data Subject Rights Request - [Type of Request]." Include your full name and username to help us locate your account. We will respond to your request within 15 calendar days and may request additional information to verify your identity before processing requests. There is no fee for exercising your rights unless requests are manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable fee or refuse to process the request.

8. Cookies and Tracking Technologies

phbwt uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device by your web browser.

8.1 Types of Cookies We Use

• Essential Cookies: Necessary for the operation of our website and services. These cookies enable basic functions like page navigation, account authentication, and security features. You cannot opt out of essential cookies without affecting platform functionality;
• Performance Cookies: Collect information about how you use our website, such as which pages you visit most often and error messages you receive. This helps us improve website performance and user experience;
• Functionality Cookies: Remember your preferences and settings (language, region, display preferences) to provide a more personalized experience;
• Advertising Cookies: Track your browsing activity to deliver relevant advertisements and measure advertising campaign effectiveness. We only use advertising cookies with your consent.

8.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. Note that disabling certain cookies may affect the functionality of the phbwt platform. Our cookie consent banner allows you to accept or reject non-essential cookies when you first visit our website. You can change your cookie preferences at any time through the cookie settings link in the footer.

9. Changes to This Privacy Policy

phbwt may update this Privacy Policy periodically to reflect changes in our data processing practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Sending an email to your registered email address at least 30 days before the changes take effect;
• Displaying a prominent notice on the phbwt website and mobile app;
• Requiring you to acknowledge the updated policy before continuing to use our services (for significant changes affecting your rights).

We encourage you to review this Privacy Policy periodically. The "Last Updated" date at the top of this policy indicates when it was most recently revised. Your continued use of phbwt services after changes take effect constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you may close your account by contacting customer support.

10. Children's Privacy

phbwt services are not intended for individuals under twenty-one (21) years of age, and we do not knowingly collect personal information from minors. Our registration process includes age verification procedures to prevent underage access. If we become aware that we have collected personal data from an individual under the age of 21, we will immediately delete that account and all associated data, and we will not refund any deposits made.

Parents or guardians who believe their child has created an account on phbwt should contact us immediately at [email protected] so we can take appropriate action. We may also report instances of underage gambling to relevant authorities as required by law.