Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how phbida ("Company", "we", "us", "our"), operating the online gaming platform at phbida.onl, collects, uses, stores, discloses, and protects the personal information of players and visitors ("you", "your") in connection with the phbida platform and all associated services.

phbida takes data privacy seriously. Filipino players entrust phbida with sensitive personal and financial information when they register, verify their identity, and transact on the platform. This Policy reflects phbida's commitment to handling that information responsibly, transparently, and in full compliance with applicable Philippine law — principally Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR") as administered by the National Privacy Commission ("NPC").

This Policy applies to all phbida users including registered players, visitors to phbida.onl, and anyone who contacts phbida through our support channels. It applies regardless of whether you access phbida via a desktop browser in Makati, a mobile browser in Cebu, or any other device or location in the Philippines.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and its implementing rules, phbida is the personal information controller ("PIC") in respect of personal data processed through the phbida platform. As PIC, phbida determines the purposes and means by which your personal information is processed.

phbida has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and applicable data protection laws. Enquiries relating to data privacy may be directed to the phbida DPO using the contact details set out in Section 14 of this Policy.

3. Personal Data We Collect

phbida collects personal data in the following categories, depending on the nature of your interaction with the platform:

3.1 Registration Data. When you create a phbida Account, we collect your mobile phone number, chosen username, date of birth, and the password you create. This information is required to establish and maintain your Account.

3.2 Identity Verification (KYC) Data. To comply with PAGCOR regulatory requirements and the Philippine Anti-Money Laundering Act (AMLA), phbida collects copies of government-issued identification documents — such as your PhilSys National ID, UMID, SSS card, driver's licence, or Philippine passport — as well as proof of address and, in some cases, source of funds declarations. This data is collected once and retained for the duration of your Account and as required by law thereafter.

3.3 Financial Data. phbida collects transaction records including deposit amounts, withdrawal amounts, GCash or PayMaya account references, BPI / BDO / Metrobank account details where applicable, and the date and time of each financial transaction. phbida does not store full payment card numbers. Full financial account credentials are processed directly by your bank or e-wallet provider and are not retained by phbida.

3.4 Gaming Activity Data. We collect records of your gaming and betting activity on phbida, including games played, wagers placed, outcomes, bonus usage, and session duration. This data is used for account management, regulatory reporting, responsible gaming monitoring, and fraud detection.

3.5 Device and Technical Data. When you access phbida, we automatically collect technical information including your IP address, browser type and version, operating system, device identifiers, and general geolocation data (derived from IP address). This information is used for security monitoring, fraud prevention, and platform optimisation.

3.6 Communications Data. If you contact phbida via live chat, email, or any other channel, we retain records of those communications including the content of messages, timestamps, and any attachments or documents shared, for quality assurance, dispute resolution, and regulatory compliance purposes.

3.7 Preference and Marketing Data. Where you have provided consent, phbida may collect information about your communication preferences and how you engage with phbida's promotional communications, in order to personalise offers and improve your experience.

4. How We Use Your Personal Data

phbida processes your personal data for the following purposes:

• Account creation and management: To register your phbida Account, authenticate your identity on login, maintain your Account settings, and facilitate the phbida Login process.
• Service delivery: To provide access to phbida's gaming and betting services, process deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank, and manage your Wallet balance.
• Regulatory compliance: To comply with PAGCOR licensing requirements, AMLA obligations, KYC verification requirements, tax reporting obligations, and any other legal or regulatory duty applicable to phbida's Philippine operations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, identity fraud, bonus abuse, and other prohibited conduct on the platform.
• Responsible gaming: To monitor gaming behaviour for indicators of problem gambling, enforce self-exclusion requests, apply deposit and session limits set by Players, and fulfil phbida's duty of care obligations.
• Customer support: To respond to enquiries, resolve disputes, investigate complaints, and provide technical assistance to phbida Players.
• Platform improvement: To analyse usage patterns, conduct internal research, and improve the functionality, security, and user experience of the phbida platform.
• Marketing communications: Where you have provided consent or where phbida has a legitimate interest, to send you promotional offers, bonus notifications, and news about phbida products and services. You may withdraw consent or opt out at any time via your Account settings.

5. Legal Basis for Processing

phbida processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered phbida Player, including Account management, transaction processing, and service delivery.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR requirements, AMLA obligations, and NPC directives.
• Legitimate interests: Processing necessary for phbida's legitimate business interests in fraud prevention, security, responsible gaming compliance, and platform improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing and promotional communications, where your explicit consent has been obtained. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Sharing of Personal Data

phbida does not sell, rent, or trade your personal data to third parties for their own commercial purposes. phbida may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash (Mynt), PayMaya (Voyager Innovations), BPI, BDO, and Metrobank — to process deposits and withdrawals you initiate.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), the National Privacy Commission (NPC), and other Philippine government agencies where disclosure is required by law.
• Technology and service providers: Third-party vendors who provide cloud hosting, cybersecurity, game software, customer support technology, and analytics services to phbida, subject to contractual data processing agreements requiring them to protect your information.
• Game content providers: Licensed game software providers who supply the slot, live casino, and table game content available on phbida, to the extent required for game delivery and dispute resolution.
• Professional advisers: Legal counsel, auditors, and compliance consultants, under obligations of professional confidentiality.
• Law enforcement: Where phbida is legally compelled to disclose information in response to a court order, subpoena, or lawful request from a Philippine law enforcement or regulatory authority.

7. Cookies and Tracking Technologies

phbida uses cookies and similar tracking technologies to operate the platform, enhance your experience, and collect analytics data. The categories of cookies used include:

• Strictly necessary cookies: Required for the phbida platform to function, including session management, phbida Login authentication, and security. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options to personalise your phbida experience.
• Analytics cookies: Collect aggregated, anonymised data about how Players use the phbida platform to help us improve performance and content.
• Security cookies: Used for fraud detection and account protection, including identifying unusual login patterns that may indicate unauthorised Account access.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent the phbida platform from functioning correctly.

8. Data Retention

phbida retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention standards:

• Account registration data and KYC documents are retained for the duration of your Account plus a minimum of five (5) years following Account closure, as required by AMLA and PAGCOR record-keeping obligations.
• Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, in compliance with Philippine tax and AMLA requirements.
• Gaming activity logs are retained for a minimum of three (3) years from the date of the activity.
• Customer support communications are retained for a minimum of two (2) years from the date of the last communication in a support thread.

Upon expiry of the applicable retention period, phbida will securely delete or anonymise personal data in accordance with its data disposal procedures.

9. Your Data Rights

As a data subject under the Philippines' Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phbida:

• Right to be Informed: The right to be notified of how your personal data is collected and processed — as set out in this Policy.
• Right of Access: The right to request a copy of the personal data phbida holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data in your phbida Account.
• Right to Erasure / Blocking: The right to request deletion or blocking of your personal data where it is no longer necessary for the purpose for which it was collected, subject to phbida's legal retention obligations.
• Right to Object: The right to object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe phbida has violated your data privacy rights.

To exercise any of the above rights, contact phbida's Data Protection Officer using the details in Section 14. phbida will respond to verified data rights requests within 15 business days.

10. Data Security

phbida implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phbida platform.
• Encryption of sensitive data fields at rest, including identity document data and financial account references.
• Multi-factor authentication options for phbida Account login, including OTP verification for new device logins.
• Role-based access controls limiting phbida staff access to personal data to those with a business need.
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified cybersecurity professionals.
• Incident response procedures enabling phbida to detect, contain, and notify affected Players and the NPC of personal data breaches within the timeframes required by law.

11. Children's Privacy

phbida's services are strictly restricted to persons aged 21 years and above. phbida does not knowingly collect personal data from individuals under the age of 21. If phbida becomes aware that a minor has registered an Account or provided personal data, phbida will immediately suspend the Account, delete the data, and report the matter as required by applicable regulations. If you believe a minor has accessed phbida, please contact our support team immediately.

12. International Data Transfers

phbida's primary data processing occurs within the Philippines. In cases where personal data is transferred to service providers or technology partners located outside the Philippines — for example, cloud infrastructure providers — phbida ensures that such transfers are governed by appropriate contractual safeguards, including data processing agreements that require recipients to provide a level of data protection equivalent to that required under the Data Privacy Act of 2012. phbida will not transfer your personal data to jurisdictions that do not offer adequate data protection without first obtaining your explicit consent or establishing appropriate contractual protections.

13. Changes to This Privacy Policy

phbida may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or business operations. Material changes will be communicated to registered Players via a prominent notice on the phbida platform and/or via the contact details associated with your Account, at least 14 days before the changes take effect. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of phbida following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree to the changes, you should cease using phbida and may request closure of your Account.

14. Contact – Data Protection Officer

For questions, concerns, or requests relating to this Privacy Policy or phbida's data processing practices, please contact phbida's Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 via the phbida platform
• Response Time: phbida will acknowledge data privacy enquiries within 2 business days and respond substantively within 15 business days.

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe phbida has not adequately addressed your data privacy concern.