phbey Privacy Policy

phbey ("we," "us," or "our") is committed to protecting the privacy and personal data of all individuals who access or use the phbey online gaming platform at phbey.net (the "Platform"). This Privacy Policy describes how phbey collects, uses, stores, shares, and protects your personal data, and explains the rights available to you as a data subject under the Data Privacy Act of 2012 (Republic Act 10173) of the Philippines.

This Privacy Policy applies to all personal data collected through the phbey Platform, including data collected during account registration, gameplay, financial transactions, customer support interactions, and your general browsing of the phbey website. It applies to all players, visitors, and any other individuals whose personal data phbey processes in connection with the Platform.

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, phbey is the Personal Information Controller in respect of the personal data collected through the Platform. phbey determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data protection law.

phbey has designated a Data Protection Officer (DPO) who is responsible for overseeing data protection strategy and implementation, and for ensuring compliance with the Data Privacy Act of 2012. You may contact the phbey DPO at any time regarding data privacy matters using the contact details provided in Section 14 of this Privacy Policy.

phbey collects the following categories of personal data in connection with your use of the Platform:

phbey does not intentionally collect sensitive personal information as defined under the Data Privacy Act of 2012 (such as health data, religious beliefs, or political affiliations) unless specifically required by law or with your explicit consent. Where such data is collected incidentally — for example, in the context of a responsible gaming self-exclusion request — it is processed with the highest level of protection and strictly limited to the purpose for which it was provided.

phbey collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Data collected automatically when you access the Platform, including cookies, web beacons, pixel tags, and server logs that record technical and usage data.
• Third-party sources: Data received from identity verification service providers, payment processors (such as GCash, Maya, and partner banks), fraud prevention services, and PAGCOR or other regulatory bodies where required by law.
• Publicly available sources: In limited circumstances, phbey may supplement your data with information from publicly available Philippine government databases for identity verification or AML compliance purposes.

phbey uses your personal data for the following purposes:

• Account management: To create, maintain, verify, and administer your phbey account, including processing your registration and verifying your identity and age (21+ requirement).
• Service delivery: To provide access to phbey games, process financial transactions, and deliver the features and functionality of the Platform.
• Regulatory compliance: To comply with PAGCOR licensing requirements, the Anti-Money Laundering Act of 2001 (RA 9160, as amended), the Data Privacy Act of 2012, and other applicable Philippine laws and regulations.
• Responsible gaming: To monitor gaming activity for signs of problem gambling, enforce self-exclusion requests, apply deposit and loss limits, and fulfill phbey's responsible gaming obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, cheating, and other prohibited conduct.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided consent or where phbey has a legitimate interest, and always with an easy opt-out mechanism.
• Platform improvement: To analyze usage patterns, conduct research, and improve the performance, features, and user experience of the phbey Platform.

Under the Data Privacy Act of 2012, phbey processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and phbey — including account registration, game delivery, and financial transactions.
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, AML obligations, and tax reporting requirements.
• Legitimate interests: Processing necessary for phbey's legitimate business interests, such as fraud prevention, platform security, and service improvement — provided these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

phbey does not sell your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank, and other authorized Philippine payment service providers, for the purpose of processing deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification service providers engaged by phbey to verify player identity and age in compliance with PAGCOR requirements.
• Fraud prevention and security services: Providers of fraud detection, risk assessment, and cybersecurity services that help phbey protect the integrity of the Platform.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where disclosure is required by law, court order, or regulatory directive.
• Professional advisers: Lawyers, auditors, and accountants engaged by phbey in connection with legal, compliance, or financial matters, subject to professional confidentiality obligations.
• IT and platform service providers: Cloud hosting, data analytics, and software service providers engaged to support the operation of the phbey Platform, under binding data processing agreements.

All third parties with whom phbey shares personal data are required to process that data only for the specified purpose, in accordance with phbey's instructions, and subject to appropriate technical and organizational security measures.

phbey uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and support security and fraud prevention. The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings and game display options, to provide a more personalized experience.
• Analytics cookies: Collect anonymized data about how players use the Platform — such as which pages are visited most frequently — to help phbey improve the service.
• Security and fraud prevention cookies: Help phbey detect and prevent fraudulent activity, unauthorized access, and other security threats.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phbey Platform. For more information on managing cookies in your browser, refer to your browser's help documentation.

phbey retains your personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AML obligations.
• Financial transaction data: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act of 2001 and PAGCOR regulations.
• Gaming history: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Customer support communications: Retained for two (2) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of lawful processing.

Upon expiry of the applicable retention period, phbey will securely delete or anonymize your personal data in a manner that prevents reconstruction or identification.

phbey implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and phbey servers.
• Encryption of sensitive data at rest, including financial data and government ID information.
• Role-based access controls ensuring that phbey staff can only access personal data necessary for their specific job function.
• Regular security audits, vulnerability assessments, and penetration testing of the phbey Platform.
• Multi-factor authentication requirements for phbey staff accessing systems that process personal data.
• Incident response procedures aligned with NPC Circular 16-03 for personal data breach management and notification.

While phbey takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your phbey account credentials and for notifying phbey immediately if you suspect unauthorized access to your account.

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by phbey:

To exercise any of these rights, please contact the phbey Data Protection Officer using the details in Section 14. phbey will respond to all data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. Some requests may be subject to identity verification before phbey can process them.

The phbey Platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations governing online gaming in the Philippines. phbey does not knowingly collect personal data from individuals under the age of 21.

If phbey becomes aware that personal data has been collected from an individual under the age of 21, phbey will immediately suspend the relevant account, delete the personal data in question, and report the matter to PAGCOR as required. If you believe that a minor has registered on the phbey Platform, please contact phbey support immediately.

phbey reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, or PAGCOR regulatory requirements. Where changes are material, phbey will notify registered players by email or through a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent changes were made. Your continued use of the phbey Platform after the effective date of any update constitutes your acknowledgment of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how phbey protects your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or phbey's data processing practices, please contact the phbey Data Protection Officer:

• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 within your phbey account dashboard.

If you are not satisfied with phbey's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012.

For responsible gaming concerns, including self-exclusion requests, please visit the phbey Responsible Gaming page or contact phbey support directly.