phbida Privacy Policy

1. Introduction & Scope

phbida operates phbida.cam as a PAGCOR-regulated online casino and sports betting platform serving players in the Philippines. This Privacy Policy applies to all personal data processed in connection with the phbida platform, including data collected during account registration, deposit and withdrawal transactions, gameplay, customer support interactions, promotional participation, and browsing activity on phbida.cam.

This Policy applies to all Members and visitors regardless of their location within the Philippines — whether you are accessing phbida from Metro Manila, Cebu City, Davao, Iloilo, or anywhere else across the archipelago. It does not apply to third-party websites or services linked to or from the phbida platform, which operate under their own privacy policies.

phbida processes personal data as both a Data Controller (for member account data and platform analytics) and, in certain service delivery arrangements, as a Data Processor acting on instructions from third-party game providers or payment processors.

2. Data Controller Information

The Data Controller responsible for personal data collected through the phbida platform is the entity operating phbida.cam under its PAGCOR license. For all data protection enquiries, including the exercise of data subject rights, Members may contact the phbida Data Protection Officer (DPO) using the contact details provided in Section 15 of this Policy.

phbida has appointed a Data Protection Officer in accordance with Section 21 of the Data Privacy Act of 2012 and Rule IV of its Implementing Rules and Regulations. The DPO is responsible for overseeing phbida's compliance with applicable data protection law and serves as the primary point of contact for the National Privacy Commission (NPC).

3. Personal Data We Collect

phbida collects the following categories of personal data, depending on your interaction with the platform:

Category	Data Types	Context
Identity Data	Full legal name, date of birth, government-issued ID (PhilSys, passport, driver's license), nationality	Registration, KYC verification
Contact Data	Email address, Philippine mobile number, residential address	Registration, account management, 2FA
Financial Data	GCash/PayMaya account reference, bank account details (BPI, BDO, Metrobank), transaction records, deposit and withdrawal history	Cashier, KYC, AMLA compliance
Gaming Data	Game session logs, wager amounts and outcomes, bonus usage history, responsible gaming settings	Platform operation, PAGCOR reporting
Technical Data	IP address, device type and OS, browser type and version, session timestamps, login history	Security, fraud detection, analytics
Communications Data	Customer support chat transcripts, email correspondence, complaint records	Support, dispute resolution
Marketing Data	Communication preferences, promotional opt-in/opt-out records, campaign response data	Direct marketing (with consent)

phbida does not process special categories of personal data (including health data, political opinions, religious beliefs, or biometric data for identification purposes) except where a Member voluntarily discloses health information in the context of a responsible gaming interaction (e.g., a self-exclusion request citing problem gambling). Such disclosures are handled with heightened care and accessed only by designated welfare personnel.

4. How We Collect Your Data

phbida collects personal data through the following means:

• Direct provision: Information you submit during account registration, identity verification, cashier transactions, responsible gaming tool activation, and customer support interactions.
• Automated collection: Technical data collected automatically when you access phbida.cam, including IP address, device fingerprint, browser characteristics, and session activity logs via cookies and similar technologies (see Section 7).
• Third-party sources: Identity and address verification data obtained from KYC service providers; fraud screening data from third-party risk assessment providers; payment authentication data from GCash, PayMaya, BPI, BDO, and Metrobank via their respective APIs.
• PAGCOR and regulatory authorities: In certain circumstances, phbida may receive information about a Member from PAGCOR or other regulatory bodies, including self-exclusion register entries.

5. Purposes of Processing & Legal Basis

phbida processes personal data only where a lawful basis exists under the Data Privacy Act of 2012. The following table sets out our primary processing purposes and their corresponding legal bases:

• Contract performance: Processing necessary to operate your phbida account, process deposits and withdrawals, deliver game services, and manage bonuses and promotions you have requested.
• Legal obligation: Processing required by PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), the Data Privacy Act, and other applicable Philippine regulations — including KYC verification, transaction monitoring, and statutory record retention.
• Legitimate interests: Fraud detection and prevention, platform security, responsible gaming monitoring, platform analytics and performance improvement, and direct marketing to existing Members where consistent with their preferences and applicable law.
• Consent: Direct marketing communications to prospective Members; placement of non-essential cookies; processing of voluntarily disclosed sensitive data in responsible gaming contexts. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Third-Party Disclosure

phbida does not sell, rent, or trade your personal data. We share personal data with third parties only in the following circumstances:

• Service providers: Identity verification (eKYC) providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), cloud infrastructure providers, fraud screening services, customer support platform providers, and email/SMS communication platforms. All service providers are contractually required to process data only on phbida's instructions and to maintain appropriate security standards.
• Game providers: Game providers (including JILI, Pragmatic Play, PG Soft, and Evolution Gaming) receive certain session and wager data necessary to deliver and certify game outcomes. Game providers operate under their own data processing agreements with phbida and are subject to independent regulatory certification.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies with lawful authority to require disclosure. phbida cooperates fully with all lawful regulatory data requests.
• Law enforcement: Philippine law enforcement authorities where disclosure is required by a valid court order, warrant, or other lawful mandate.
• Business transfers: In the event of a merger, acquisition, or sale of assets, personal data held by phbida may be transferred to the successor entity, subject to equivalent data protection obligations. Members will be notified in advance where practicable.

7. Cookies & Tracking Technologies

phbida uses cookies and similar technologies on phbida.cam to enable core platform functionality, maintain session security, measure platform performance, and (with your consent) deliver relevant marketing communications. The categories of cookies used are as follows:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, security cookies, and load-balancing identifiers. These cannot be disabled without impairing platform functionality.
• Functional cookies: Remember your preferences (language, responsible gaming settings, display options) across sessions.
• Analytics cookies: Collect anonymised or pseudonymised data about how Members navigate phbida.cam to help us identify and resolve usability issues. No personally identifiable information is shared with analytics providers.
• Marketing cookies: Used only with your explicit consent to track engagement with phbida promotional content. You may withdraw consent to marketing cookies at any time via the cookie preference centre accessible in the platform footer.

You may manage cookie settings through your browser's built-in controls. Note that disabling strictly necessary cookies will prevent access to core platform features including login and cashier functionality.

8. Data Retention

phbida retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account and identity data: Retained for the duration of your active membership plus a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AMLA obligations.
• Financial and transaction records: Retained for a minimum of five (5) years in compliance with AMLA and Bureau of Internal Revenue (BIR) requirements.
• Gaming session logs: Retained for the period required by PAGCOR and used to verify game outcomes, resolve disputes, and satisfy regulatory reporting obligations.
• Customer support communications: Retained for three (3) years from the date of the relevant interaction, or longer where a complaint remains unresolved or escalated to a regulatory authority.
• Marketing data: Retained until you withdraw consent or request deletion, whichever comes first, subject to overriding legal retention requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with NPC-compliant data disposal procedures.

9. Data Security

phbida implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, and destruction. Security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between Members and the platform;
• AES-256 encryption for personal data stored at rest on phbida infrastructure;
• Role-based access controls limiting employee access to personal data strictly to the functions required for their role;
• Multi-factor authentication for all phbida staff accessing production systems and Member data;
• Regular third-party penetration testing and vulnerability assessments;
• 24/7 security monitoring with automated anomaly detection and incident response protocols;
• Regular staff training on data protection obligations and secure data handling practices.

While phbida takes all reasonable and commercially practicable steps to protect your personal data, no internet transmission or digital storage system is completely immune from security risks. Members are encouraged to use strong, unique passwords and to enable two-factor authentication to protect their own account from unauthorised access.

10. International Data Transfers

Some of phbida's service providers — including certain game providers, cloud infrastructure platforms, and third-party analytics services — are located outside the Philippines. Where personal data is transferred internationally, phbida ensures that:

• The receiving country, organisation, or binding arrangement provides an adequate level of data protection as assessed against NPC standards;
• Appropriate contractual safeguards (including standard contractual clauses or equivalent data processing agreements) are in place prior to any transfer; and
• The volume and sensitivity of data transferred is proportionate to the service being delivered.

Members may request details of specific international transfer arrangements by contacting the phbida DPO using the contact information in Section 15.

11. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules, you have the following rights with respect to your personal data held by phbida:

• Right to be Informed: To be told what personal data phbida collects about you and how it is used — as provided in this Privacy Policy.
• Right of Access: To request a copy of the personal data phbida holds about you and information about how it is processed.
• Right to Rectification: To request correction of inaccurate or incomplete personal data. You may update most account details directly through your phbida account settings.
• Right to Erasure or Blocking: To request deletion or blocking of personal data that is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations (particularly PAGCOR and AMLA requirements).
• Right to Object: To object to the processing of your personal data where processing is based on legitimate interests or for direct marketing purposes. Objection to direct marketing will be actioned immediately; objections to other legitimate-interest processing will be considered against the specific grounds stated.
• Right to Data Portability: To receive your personal data in a structured, commonly used, machine-readable format where processing is based on consent and carried out by automated means.
• Right to Complain: To lodge a complaint with the National Privacy Commission (NPC) if you believe phbida has not handled your personal data in accordance with applicable law.

12. Children's Privacy and Age Restriction

The phbida platform is strictly restricted to individuals aged 21 years and older, in accordance with PAGCOR's minimum age requirements for online gambling in the Philippines. phbida does not knowingly collect personal data from any person under the age of 21.

Where phbida discovers — through KYC verification, age checks, or any other means — that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all real-money transactions will be voided, and the personal data of the underage individual will be securely deleted without undue delay. Deposits made by underage individuals will be returned via the original payment method.

13. Third-Party Websites and Services

The phbida platform may contain references to or integrations with third-party services, including payment providers such as GCash and PayMaya, and game providers such as JILI, Pragmatic Play, and PG Soft. When you interact with these third-party services, their own privacy policies and data practices apply. phbida is not responsible for the data practices of third-party services and encourages Members to review the privacy policies of any third-party service they engage with through the platform.

14. Updates to This Privacy Policy

phbida reviews and updates this Privacy Policy periodically to reflect changes in data processing practices, platform features, regulatory requirements, or applicable law. When material changes are made — particularly those that affect how we process your personal data or the rights available to you — we will notify you via email to your registered address and/or by a prominent notice on the phbida platform at least fourteen (14) days before the changes take effect.

Non-material changes (including typographical corrections and clarifications that do not affect the substance of data processing activities) may be made without prior notice. The effective date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically.

Your continued use of the phbida platform following notification of material changes constitutes your acceptance of the revised Privacy Policy. If you do not accept the changes, you should cease using the platform and contact phbida support to close your account and request deletion of your personal data to the extent permitted by applicable retention requirements.

15. Contact Information & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phbida, please contact our Data Protection Officer:

• Data Protection Officer, phbida
• Email: [email protected]
• Live Chat: Available 24/7 via your phbida account dashboard

For complaints that have not been resolved satisfactorily through phbida's internal process, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines. Details of the NPC complaints process are available through official NPC channels.