phbida Privacy Policy

1. Introduction

1.1 phbida is committed to protecting the privacy and personal data of all players and visitors to the phbida platform. We understand that trust is the foundation of any good relationship — and that's especially true when it comes to your personal information.

1.2 This Policy applies to all personal data collected through the phbida website at phbida.one, the phbida mobile application (where available), and any other phbida-branded digital touchpoints. It covers data collected from registered players, prospective players, and general visitors.

1.3 phbida has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data privacy laws. Contact details for the DPO are provided in Section 13 of this Policy.

1.4 This Policy should be read together with our Terms and Conditions and Responsible Gaming Policy, which together govern your use of the phbida platform.

2. Personal Data We Collect

2.1 phbida collects the following categories of personal data, depending on your interaction with the platform:

2.2 phbida does not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where sensitive data is collected (e.g., government ID numbers), it is handled with heightened security measures.

3. How We Collect Your Data

3.1 Directly from You. phbida collects personal data directly from you when you: register a phbida account; complete KYC verification; make a deposit or withdrawal; contact our support team; participate in promotions or surveys; or use any feature of the phbida platform.

3.2 Automatically. When you access the phbida platform, we automatically collect certain technical and usage data through cookies, web beacons, log files, and similar tracking technologies. This data is collected to ensure platform security and improve user experience.

3.3 From Third Parties. phbida may receive personal data about you from third parties in the following circumstances:

• Identity verification service providers used for KYC compliance;
• Payment processors (e.g., GCash, Maya, Philippine banks) for transaction verification;
• Fraud prevention and anti-money laundering screening services;
• PAGCOR and other regulatory bodies, where required by law.

4. How We Use Your Personal Data

4.1 phbida uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your phbida account, including verifying your identity and age (21+ requirement);
• Platform Operation: To provide access to games, process bets, calculate winnings, and operate all features of the phbida platform;
• Payment Processing: To process deposits and withdrawals via GCash, Maya, bank transfer, and other accepted Philippine payment methods;
• Regulatory Compliance: To comply with PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws;
• Responsible Gaming: To monitor gaming patterns, enforce responsible gaming limits, and identify players who may need support;
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorized access, and other security threats;
• Customer Support: To respond to your inquiries, resolve disputes, and provide assistance;
• Communications: To send you account-related notifications, security alerts, and (where you have opted in) promotional communications;
• Platform Improvement: To analyze usage patterns and improve the phbida platform's features, performance, and user experience.

4.2 phbida will not use your personal data for purposes incompatible with those listed above without obtaining your prior consent, except where required by law.

5. Legal Basis for Processing

5.1 phbida processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform our contract with you (the phbida Terms and Conditions), including operating your account and processing transactions;
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR regulations, AMLA, and the Data Privacy Act;
• Legitimate Interests: Processing is necessary for phbida's legitimate interests, including fraud prevention, platform security, and business analytics, where these interests are not overridden by your rights;
• Consent: Where required by law, phbida will obtain your explicit consent before processing your data, particularly for marketing communications and non-essential cookies.

6. Data Sharing & Disclosure

6.1 phbida does not sell, rent, or trade your personal data to third parties for their own commercial purposes.

6.2 phbida may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Processors: GCash, PayMaya/Maya, and Philippine banks, for the purpose of processing your deposits and withdrawals;
• KYC & Identity Verification Providers: Third-party services used to verify your identity and age in compliance with PAGCOR requirements;
• IT & Cloud Service Providers: Hosting, database, and infrastructure providers who process data on phbida's behalf under strict data processing agreements;
• Fraud Prevention & AML Services: Screening services used to detect and prevent money laundering, fraud, and other financial crimes as required under Philippine law;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where disclosure is required by law or regulatory directive;
• Law Enforcement: Philippine law enforcement agencies, where disclosure is required by valid legal process, court order, or to protect the safety of any person.

6.3 In the event of a merger, acquisition, or sale of all or substantially all of phbida's assets, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer via your registered email address.

6.4 Where phbida engages third-party processors, we require them to implement appropriate technical and organizational security measures and to process your data only on phbida's documented instructions.

7. Data Retention

7.1 phbida retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law.

7.2 The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLA requirements;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act;
• Gaming History: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes;
• Support Communications: Retained for two (2) years from the date of the last communication;
• Technical & Usage Data: Retained for up to twelve (12) months, after which it is anonymized or deleted.

7.3 Upon expiry of the applicable retention period, phbida will securely delete or anonymize your personal data in accordance with industry best practices.

8. Cookies & Tracking Technologies

8.1 phbida uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that help us recognize you and remember your preferences.

8.2 phbida uses the following types of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that keep you logged in to your phbida account. These cannot be disabled without affecting platform functionality;
• Functional Cookies: Remember your preferences such as language settings and responsible gaming limits you have set;
• Analytics Cookies: Help us understand how players use the phbida platform so we can improve it. Data collected is aggregated and anonymized where possible;
• Security Cookies: Used to detect and prevent fraudulent activity and unauthorized access to your phbida account.

8.3 phbida does not use third-party advertising or behavioral tracking cookies. We do not share cookie data with advertising networks.

8.4 You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the phbida platform. Refer to your browser's help documentation for instructions on managing cookies.

9. Data Security

9.1 phbida implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and phbida servers;
• Encryption of sensitive data at rest, including financial information and government ID data;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing;
• Multi-factor authentication for administrative access to phbida systems;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

9.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phbida will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012.

9.3 While phbida takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the security of your phbida Login credentials and for notifying us immediately of any suspected unauthorized access to your account.

10. Your Data Privacy Rights

10.1 Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phbida:

• Right to be Informed: The right to be informed of how your personal data is being collected and processed — which this Policy fulfills;
• Right to Access: The right to request a copy of the personal data phbida holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure: The right to request deletion of your personal data, subject to phbida's legal retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing or where processing is based on legitimate interests;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

10.2 To exercise any of the above rights, please contact phbida's Data Protection Officer using the contact details in Section 13. phbida will respond to all verified data subject requests within thirty (30) days of receipt.

10.3 phbida may need to verify your identity before processing a data subject request to ensure that personal data is not disclosed to unauthorized parties.

11. Children's Privacy

11.1 The phbida platform is strictly intended for individuals aged 21 years and above. phbida does not knowingly collect personal data from individuals under the age of 21.

11.2 If phbida becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. Any winnings accrued by an underage player will be forfeited in accordance with our Terms and Conditions.

11.3 If you are a parent or guardian and believe that your child under 21 has provided personal data to phbida, please contact us immediately at the details provided in Section 13.

12. Changes to This Privacy Policy

12.1 phbida reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. The date of the most recent revision is indicated at the top of this page.

12.2 Where changes are material, phbida will notify you via your registered email address or through a prominent notice on the phbida platform at least fourteen (14) days before the changes take effect.

12.3 Your continued use of the phbida platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree to the revised Policy, you must cease using the platform and may request account closure in accordance with our Terms and Conditions.

12.4 The current version of this Privacy Policy is always available at phbida.one/privacy-policy.

13. Contact & Data Protection Officer

13.1 phbida has appointed a Data Protection Officer (DPO) to oversee compliance with this Privacy Policy and the Philippine Data Privacy Act. If you have any questions, concerns, or requests regarding your personal data or this Policy, please contact our DPO:

• Data Protection Officer: phbida Privacy Team
• Email: [email protected]
• General Support: [email protected]
• Response Time: Within 30 days for data subject requests; within 24 hours for general inquiries

13.2 If you are not satisfied with phbida's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.

13.3 For responsible gaming concerns, please visit our Responsible Gaming page. For general platform terms, please refer to our Terms and Conditions.