ph2bet Privacy Policy

ph2bet ("ph2bet," "we," "us," "our") is committed to protecting the privacy and personal data of every player who registers and uses the ph2bet platform at ph2bet.club ("Platform"). This Privacy Policy ("Policy") sets out how ph2bet processes personal data in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC).

This Policy applies to all personal data ph2bet collects in connection with:

• Account registration, login, and ongoing account management;
• Deposits, withdrawals, and all financial transactions conducted on the Platform;
• Identity and age verification (Know Your Customer / KYC processes);
• Customer support interactions via live chat, email, or other channels;
• Gameplay activity, session data, and responsible gaming monitoring;
• Marketing and promotional communications where you have provided consent.

By creating an account on ph2bet or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. Where processing is based on consent, you may withdraw that consent at any time — but withdrawal will not affect the lawfulness of processing carried out prior to the withdrawal.

The data controller responsible for personal data collected through the ph2bet Platform is ph2bet, the operator of ph2bet.club. ph2bet has appointed a designated Data Protection Officer (DPO) in compliance with the Data Privacy Act of 2012. The DPO is responsible for overseeing ph2bet's data protection strategy and ensuring compliance with applicable privacy laws.

All formal data subject requests, privacy complaints, and inquiries regarding this Policy should be directed to the DPO using the contact details above.

ph2bet collects the following categories of personal data. The collection of each category is tied to a specific and documented purpose — we do not collect data beyond what is reasonably necessary for the identified purposes.

ph2bet collects personal data through the following methods:

Data you provide directly when you: register an Account; complete KYC identity verification; make a deposit or withdrawal; contact customer support; participate in promotions or surveys; or update your Account settings.

Data collected automatically when you access and use the Platform, including through server logs, cookies and similar tracking technologies, and device fingerprinting mechanisms used for fraud detection and security purposes.

Data received from third parties in limited circumstances, including:

• Payment processors (GCash, Maya, BPI, BDO, Metrobank) — transaction confirmation data and payer identity confirmation for AML compliance;
• Identity verification service providers — document authenticity verification results;
• Anti-fraud and AML screening services — watchlist and sanctions screening results;
• PAGCOR and regulatory bodies — where disclosure is required by applicable law or regulatory direction.

ph2bet processes personal data only for specific, legitimate, and documented purposes. The following table maps each processing purpose to the data categories used:

ph2bet does not use personal data for automated individual decision-making that produces significant legal or similarly significant effects without human review, except where required for real-time fraud prevention, in which case Players may request a human review of any decision that materially affects them.

Under the Data Privacy Act of 2012 and its IRR, ph2bet processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract with you — including account management, payment processing, and providing gaming services — is necessary to fulfil ph2bet's obligations to you as a registered Player.
• Legal obligation: Processing necessary for ph2bet to comply with applicable Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and age verification mandates.
• Legitimate interests: Processing for fraud prevention, Platform security, responsible gaming monitoring, and service improvement, where these interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications and non-essential analytics, where you have given clear, specific, and freely withdrawable consent. You may withdraw marketing consent at any time via Account Settings.

ph2bet may share your personal data with the following categories of third parties:

Third-party service providers who process data on ph2bet's behalf under binding data processing agreements, including: payment gateway providers (GCash/GXI, Maya, banking partners); identity verification and KYC service providers; IT infrastructure and cloud hosting providers; fraud detection and cybersecurity vendors; customer support software platforms.

All service providers are required to implement appropriate security measures and may only process data for the specific purposes instructed by ph2bet.

ph2bet is legally required to disclose data to: PAGCOR — for regulatory reporting, licensing compliance, and investigation of gaming irregularities; the Anti-Money Laundering Council (AMLC) — for suspicious transaction reporting under AMLA; the National Privacy Commission (NPC) — for data breach notifications and compliance inquiries; law enforcement agencies — when required by valid court order, subpoena, or legal process.

Limited technical identifiers (session tokens, wallet balances) are shared with ph2bet's licensed game providers (such as JILI, Pragmatic Play, PG Soft, Evolution Gaming) solely to enable game functionality. These providers do not receive your full identity data.

In the event of a merger, acquisition, or sale of all or substantially all of ph2bet's assets, personal data held by ph2bet may be transferred to the acquiring entity. Affected Players will be notified prior to data transfer and will have the option to request account deletion before the transfer takes effect.

ph2bet retains personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal retention obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with ph2bet's data destruction protocols.

ph2bet implements technical and organisational security measures proportionate to the sensitivity of the personal data processed. These measures include:

• Encryption: All data transmitted between your browser and ph2bet's servers is protected by TLS 1.2 or higher (SSL 256-bit). Sensitive personal information (ID documents, financial data) is encrypted at rest using AES-256 encryption.
• Access Controls: Personal data is accessible only to ph2bet personnel and contractors with a documented need to access it for their role. Access is governed by role-based access control (RBAC) policies and is logged for audit purposes.
• Network Security: ph2bet's infrastructure is protected by firewalls, intrusion detection systems, and regular penetration testing by qualified security professionals.
• Password Security: User passwords are stored as salted cryptographic hashes. ph2bet never stores plaintext passwords.
• Incident Response: ph2bet maintains a documented data breach response plan. In the event of a personal data breach, ph2bet will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected data subjects without undue delay where the breach is likely to result in high risk to those individuals.

ph2bet uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that enable various Platform functions. ph2bet uses the following categories of cookies:

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary or functional cookies may impair Platform functionality, including the ability to log in or maintain your session. ph2bet does not use third-party advertising network cookies.

Under the Data Privacy Act of 2012 and its IRR, you have the following rights with respect to your personal data held by ph2bet:

To exercise any of these rights, submit a written request to our Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." ph2bet will acknowledge your request within 3 business days and respond substantively within 15 business days. ph2bet may require identity verification before processing a data subject request to protect against fraudulent requests.

If you believe ph2bet has violated your data privacy rights, you may file a complaint with the National Privacy Commission (NPC) of the Philippines.

ph2bet strictly prohibits use of the Platform by individuals under the age of 21 years. ph2bet does not knowingly collect personal data from individuals under 21. If ph2bet becomes aware that personal data has been collected from a person under the minimum age, that Account will be suspended immediately, the personal data will be deleted (subject to any legal hold obligations), and any funds held will be managed in accordance with ph2bet's Terms & Conditions.

ph2bet reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes — meaning changes that substantially affect how we process personal data or affect your rights — will be communicated to registered Players via email or in-platform notification at least seven (7) days before the changes take effect.

Non-material changes (such as clarifications, formatting corrections, or minor rewording that does not affect the substance of how data is processed) may be made without advance notice. The "Effective Date" at the top of this Policy will reflect the date of the most recent revision.

Continued use of the Platform following the effective date of an updated Policy constitutes acceptance of the revised terms. If you do not accept a material change to this Policy, you must discontinue use of the Platform and may request account closure and data deletion.

For all privacy-related inquiries, data subject rights requests, concerns about this Policy, or to report a suspected data breach involving your ph2bet Account, please contact ph2bet's Data Protection Officer:

If you are not satisfied with ph2bet's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the independent supervisory authority for data protection in the country.