phbingi Privacy Policy

§1 Introduction

phbingi ("phbingi", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the phbingi online gaming platform at https://phbingi.net (the "Platform"). This Privacy Policy ("Policy") describes in clear, plain language what personal data phbingi collects from you, why we collect it, how we use and protect it, with whom we share it, and what rights you have regarding your own data.

phbingi operates in the Philippines and serves Filipino players across Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond. We take our obligations under Philippine data privacy law extremely seriously. This Policy is drafted in compliance with Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations, and the relevant issuances of the National Privacy Commission (NPC) of the Philippines.

By registering a phbingi account, making a deposit, playing any game on the Platform, or otherwise using any phbingi service, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this Policy, please do not use the phbingi Platform.

§2 Scope of This Policy

This Privacy Policy applies to all personal data collected by phbingi through the following touchpoints:

• The phbingi website at https://phbingi.net and all its pages and subpages
• The phbingi player account registration and login processes
• Deposit, withdrawal, and payment transactions conducted via GCash, PayMaya, BPI, BDO, Metrobank, and other approved Philippine payment channels
• Customer support interactions conducted via email, live chat, or any other communication channel provided by phbingi
• Participation in games, promotions, tournaments, or loyalty programs offered on the Platform
• KYC (Know Your Customer) identity verification processes
• Any voluntary information submitted by players through surveys, feedback forms, or competitions

This Policy does not apply to third-party websites, applications, or services that may be linked from the phbingi Platform. phbingi is not responsible for the privacy practices of any third-party operator, and we encourage you to review the privacy policies of any external sites you visit.

§3 Information We Collect

phbingi collects only the personal data that is necessary and proportionate to the purposes described in this Policy. The categories of personal data we collect include:

3.1 Identity & Registration Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (for age verification — you must be 21 or older to use phbingi)
• Residential address (including barangay, city/municipality, province)
• Email address and mobile number
• Username and encrypted password
• Nationality and country of residence

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo IDs (Philippine passport, PhilSys National ID, SSS/UMID card, driver's license)
• Proof of address documents (utility bills, barangay certificates, bank statements)
• Selfie or liveness verification images where required for identity confirmation
• Source of funds declarations where required by AML compliance obligations

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts, dates, and payment method references
• GCash or PayMaya account reference numbers (not full credentials)
• Bank account name and reference details for BPI, BDO, or Metrobank transactions
• Bonus and promotional transaction records
• Wagering history and game participation records

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser information
• Session duration, pages visited, and navigation patterns on the Platform
• Cookie identifiers and similar tracking technologies (see Section 10)
• Login timestamps and access logs for security and fraud prevention

3.5 Communications Data

• Content of support ticket exchanges, live chat conversations, and email correspondence with phbingi
• Survey responses, feedback, and complaints submitted to phbingi
• Records of promotional opt-ins and marketing communication preferences

§4 How We Collect Information

phbingi collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, participate in promotions, or respond to surveys
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies as you navigate the Platform (see Section 10 for details)
• From third-party service providers — including identity verification (KYC) partners, payment processors, and fraud detection services that we engage to operate the Platform
• From regulatory and law enforcement bodies — where phbingi is required by PAGCOR, the Anti-Money Laundering Council (AMLC), or other competent Philippine authorities to receive or verify information about a player

phbingi does not collect personal data from social media platforms, third-party data brokers, or any source not described in this Policy without your explicit consent.

§5 How We Use Your Information

phbingi processes your personal data only for specified, explicit, and legitimate purposes. The primary purposes for which we use your data are:

• Account Management: Creating, maintaining, and managing your phbingi player account, including authentication, security, and account preferences
• Age & Identity Verification: Confirming that you meet the minimum age requirement of 21 years and that your identity is authentic, as required by PAGCOR and Philippine law
• Payment Processing: Facilitating deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other approved Philippine payment methods
• Regulatory Compliance: Meeting phbingi's legal obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine legislation
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, collusion, and other prohibited activities on the Platform
• Customer Support: Responding to your queries, complaints, and support requests in a timely and effective manner
• Responsible Gaming: Monitoring play patterns to identify indicators of problem gambling and administering responsible gaming tools such as self-exclusion and deposit limits
• Platform Improvement: Analysing usage data and player behaviour (in aggregated, anonymised form where possible) to improve the Platform's features, performance, and user experience
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates — only where you have opted in to receive such communications and subject to your right to unsubscribe at any time

§6 Legal Basis for Processing

Under the Data Privacy Act of 2012 (RA 10173) and its implementing rules, phbingi processes personal data on the following lawful bases:

• Contractual Necessity: Processing required to perform the contract between phbingi and you as a registered player — including account management, payment processing, and game access
• Legal Obligation: Processing required to comply with phbingi's obligations under PAGCOR regulations, the AMLA, the Data Privacy Act, tax laws, and other applicable Philippine statutes
• Legitimate Interests: Processing necessary for phbingi's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your rights and freedoms
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and certain non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

§7 Sharing Your Information

phbingi does not sell, rent, or otherwise commercially disclose your personal data to third parties. We share personal data only in the following strictly limited circumstances:

7.1 Service Providers & Data Processors

phbingi engages carefully selected third-party service providers who process data on our behalf under strict data processing agreements. These include KYC and identity verification providers, payment processors for GCash, PayMaya, and Philippine bank transfers, fraud detection and cybersecurity service providers, cloud hosting and infrastructure providers, and customer support platform operators. All such providers are contractually bound to process data only as instructed by phbingi and to implement appropriate security measures.

7.2 Regulatory & Legal Disclosure

phbingi may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), law enforcement agencies, and courts of competent jurisdiction in the Philippines where required or permitted by law, or where disclosure is necessary to protect the rights, property, or safety of phbingi, its players, or the public.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of phbingi's business or assets, personal data held by phbingi may be transferred to the acquiring entity as part of that transaction. phbingi will provide advance notice of any such transfer and ensure that the receiving entity is bound by privacy obligations at least as protective as those in this Policy.

§8 Data Retention

phbingi retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active Account Data: Retained for the lifetime of your phbingi account and for a period of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and Philippine AML regulations
• KYC & Identity Verification Documents: Retained for a minimum of five (5) years from the date of verification, as required by the Anti-Money Laundering Act and PAGCOR compliance directives
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, for AML and tax compliance purposes
• Customer Support Records: Retained for three (3) years from the date of the last interaction, for quality assurance and dispute resolution purposes
• Marketing Consent Records: Retained until you withdraw consent, plus one (1) year to demonstrate compliance
• Technical & Log Data: Typically retained for twelve (12) months, unless a longer retention period is necessary for security investigation or legal proceedings

Upon expiry of the applicable retention period, phbingi will securely delete or anonymise your personal data in accordance with the NPC's guidelines on data disposal.

§9 Data Security

phbingi implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security framework includes:

• Transport Encryption: All data transmitted between your device and the phbingi Platform is protected by 256-bit SSL/TLS encryption
• Data-at-Rest Encryption: Sensitive personal data stored in phbingi's databases is encrypted at rest using industry-standard algorithms
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. phbingi staff are subject to confidentiality obligations and receive regular data privacy training
• Two-Factor Authentication: phbingi supports and encourages the use of two-factor authentication (2FA) for player accounts to reduce the risk of unauthorised access
• Regular Security Audits: The Platform undergoes periodic security assessments, penetration testing, and vulnerability scans by qualified cybersecurity professionals
• Incident Response: phbingi maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights, we will notify you and the National Privacy Commission within the timeframes prescribed by the Data Privacy Act

While phbingi takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are encouraged to use a strong, unique password for your phbingi account and to enable 2FA where available.

§10 Cookies & Tracking Technologies

phbingi uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and analyse usage patterns. The types of cookies we use include:

• Strictly Necessary Cookies: Required for the Platform to function. These include session management cookies, authentication cookies, and security tokens. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences such as language, currency display, and game settings to personalise your experience on phbingi.
• Analytics Cookies: Collect anonymised data about how players use the Platform — such as which pages are visited most frequently — to help phbingi improve its services. Data collected through analytics cookies does not identify you personally.
• Marketing Cookies: Used only where you have explicitly consented, to deliver relevant promotional content about phbingi games and offers. You can withdraw consent for marketing cookies at any time.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phbingi Platform. phbingi does not use cookies to track your activity on third-party websites unrelated to the Platform.

§11 Your Data Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by phbingi:

• Right to be Informed: The right to know what personal data phbingi collects about you and how it is processed — as set out in this Policy
• Right of Access: The right to request a copy of the personal data phbingi holds about you and information about how it is used
• Right to Rectification: The right to request correction of inaccurate, incomplete, or outdated personal data
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to phbingi's legal retention obligations under PAGCOR and AML regulations
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format, where technically feasible
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or processing based on legitimate interests
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission of the Philippines if you believe phbingi has violated your data privacy rights

To exercise any of these rights, please submit a written request to [email protected]. phbingi will respond to data subject requests within fifteen (15) calendar days, as prescribed by the NPC's implementing rules. Identity verification may be required before your request is processed.

§12 Minors & Age Policy

The phbingi Platform is strictly intended for adults aged 21 years and above, in accordance with the minimum legal gambling age prescribed by PAGCOR and applicable Philippine law. phbingi does not knowingly collect personal data from individuals under the age of 21.

If phbingi discovers or is informed that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the personal data in question, void any associated transactions, and report the matter to the relevant regulatory authority where required by law.

§13 Cross-Border Data Transfers

phbingi primarily processes personal data within the Republic of the Philippines. However, certain third-party service providers engaged by phbingi — such as cloud hosting infrastructure providers or international KYC verification platforms — may process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, phbingi ensures that adequate safeguards are in place to protect the data, including:

• Entering into data transfer agreements with receiving entities that meet the standards prescribed by the National Privacy Commission
• Transferring data only to countries or organisations that provide an adequate level of data protection as determined by the NPC
• Applying contractual clauses that bind receiving parties to data protection obligations equivalent to those under Philippine law

phbingi will not transfer your personal data to a foreign jurisdiction where such transfer would violate the Data Privacy Act of 2012 or where the receiving country does not provide adequate protection for personal data.

§14 Changes to This Policy

phbingi reserves the right to update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. When we make material changes to this Policy, we will notify registered players by email and/or by posting a prominent notice on the phbingi Platform at least seven (7) days before the changes take effect.

The date at the top of this Policy indicates when it was last updated. We encourage you to review this Policy periodically to stay informed about how phbingi protects your personal data. Your continued use of the phbingi Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

§15 Contact & Data Protection Officer

phbingi has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to this Policy or your personal data, please contact the phbingi DPO using the details below:

• Data Protection Officer: phbingi Data Protection Office
• Email: [email protected] — subject line: "Data Privacy Request"
• Response Time: phbingi will acknowledge your request within five (5) business days and provide a substantive response within fifteen (15) calendar days
• Related Policies: Terms & Conditions | Responsible Gaming