philbos Privacy Policy

1. Introduction

philbos ("we", "us", "our", or "the Company") operates the online casino and sports betting platform accessible at philbos.app (the "Platform"). We are committed to protecting the privacy and personal data of all Members, users, and visitors — with particular regard for Filipino players whose data is processed in connection with their use of the Platform.

This Privacy Policy describes the types of personal information we collect, the purposes for which we use it, the parties with whom we may share it, and the choices and rights available to you under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and other applicable laws.

By registering an Account, using the Platform, or otherwise interacting with philbos, you acknowledge that you have read and understood this Privacy Policy. This Policy is incorporated by reference into the philbos Terms & Conditions.

2. Personal Data We Collect

philbos collects different categories of personal data depending on how you interact with the Platform:

We do not collect or store full payment card numbers. Payment transactions are processed through certified third-party payment processors (GCash, Maya, BPI, BDO, Metrobank) who maintain their own security and privacy standards.

3. How We Collect Your Data

philbos collects personal data through the following channels:

• Direct submission: Information you provide when registering an Account, completing KYC, making deposits or withdrawals, contacting support, or updating your Account Settings.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar tracking technologies.
• Third-party sources: Identity verification services, payment processors (including GCash and Maya verification responses), fraud prevention databases, and publicly available sources where permitted by law.
• Gaming activity: Data generated automatically through your gameplay, including bets placed, games launched, session lengths, and bonus activations.

4. How We Use Your Personal Data

philbos uses the personal data we collect for the following purposes:

• Account management: Creating and maintaining your philbos Account, verifying your identity and age (21+), and processing login and security credentials.
• Service delivery: Providing access to games, processing deposits and withdrawals in PHP via GCash, Maya, and Philippine bank transfer, and delivering customer support.
• Legal compliance: Meeting our obligations under Philippine law, including anti-money-laundering (AML) requirements, PAGCOR reporting requirements, and the Data Privacy Act of 2012.
• Fraud and security: Detecting, investigating, and preventing fraudulent activity, account takeovers, money laundering, and other illegal conduct on the Platform.
• Responsible gaming: Monitoring gaming activity to identify potentially problematic patterns, enforcing self-exclusion and deposit limit settings, and providing responsible gaming notifications.
• Marketing and promotions: Sending promotional communications about philbos bonuses, new games, and special offers — only where you have provided consent. You may withdraw consent at any time.
• Platform improvement: Analyzing usage patterns and technical data to improve Platform performance, game selection, and user experience for Filipino players.
• Dispute resolution: Maintaining records sufficient to investigate and resolve disputes about game outcomes, transactions, or account activity.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, philbos processes your personal data on one or more of the following legal bases:

• Contract performance: Processing necessary to provide the services described in the philbos Terms & Conditions, including account management, payments, and gameplay.
• Legal obligation: Processing required to comply with applicable Philippine law, including AML regulations and PAGCOR licensing requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing purposes, where you have provided explicit opt-in consent. Consent may be withdrawn at any time without affecting prior processing.

6. Sharing Your Personal Data

philbos does not sell, rent, or trade your personal information. We may share your data with the following categories of third parties, strictly as necessary:

• Payment processors: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other payment service providers, to process deposits and withdrawals.
• KYC and identity verification providers: Third-party services that verify identity documents, age, and sanctions status as required for compliance.
• Game software providers: Licensed providers such as JILI Games, Pragmatic Play, PG Soft, and Evolution Gaming, who may receive technical session data to deliver their games.
• IT and security service providers: Cloud hosting, cybersecurity, and fraud detection vendors who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the National Privacy Commission (NPC), law enforcement agencies, and financial intelligence authorities where disclosure is required by law or court order.
• Professional advisors: Legal counsel, auditors, and accountants, subject to professional confidentiality obligations.

All third-party processors engaged by philbos are required to implement appropriate technical and organizational security measures and are prohibited from using your data for any purpose beyond the services they provide to philbos.

7. Cookies & Tracking Technologies

The philbos Platform uses cookies and similar tracking technologies to operate correctly, analyze performance, and deliver a personalized experience. The main categories of cookies used are:

• Strictly necessary cookies: Required for the Platform to function — session management, login authentication, and security tokens. These cannot be disabled.
• Performance cookies: Collect anonymous data about how visitors use the Platform to help us improve page speed and navigation. No personally identifiable information is collected by these cookies.
• Functional cookies: Remember your preferences such as language settings and game lobby filters.
• Analytics cookies: Used to understand aggregate usage patterns. We do not share analytics data with third-party advertisers.

You may control cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality. philbos does not use third-party advertising or cross-site tracking cookies.

8. Data Security

philbos implements a layered approach to data security, including:

• TLS/SSL encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data at rest, including KYC documents and payment records.
• One-way hashing of account passwords — your password is never stored in readable form.
• Multi-factor authentication options for Member accounts.
• Regular penetration testing and security audits by independent third parties.
• Strict role-based access controls limiting staff access to personal data on a need-to-know basis.

Despite these measures, no system is entirely immune to security incidents. In the event of a personal data breach that is likely to result in high risk to your rights, philbos will notify affected Members and the National Privacy Commission in accordance with DPA obligations.

9. Data Retention

philbos retains personal data for as long as your Account is active and for a period thereafter as required by law or legitimate business need. Specific retention periods include:

• Account and KYC records: Retained for a minimum of five (5) years following Account closure, as required by anti-money-laundering regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming history: Retained for a minimum of three (3) years to support dispute resolution and regulatory reporting.
• Support communications: Retained for two (2) years from the date of the interaction.
• Marketing consent records: Retained for as long as required to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with an identified individual.

10. Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by philbos:

• Right to be Informed: The right to know what personal data philbos holds about you and how it is used — as set out in this Privacy Policy.
• Right to Access: The right to obtain a copy of your personal data held by philbos.
• Right to Correction: The right to have inaccurate or incomplete personal data corrected.
• Right to Erasure: The right to request deletion of your personal data, subject to overriding legal retention obligations.
• Right to Object: The right to object to processing of your personal data on the basis of legitimate interests or direct marketing.
• Right to Data Portability: The right to receive your personal data in a structured, machine-readable format where technically feasible.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your rights have been violated.

To exercise any of these rights, contact the philbos Data Protection Officer via live chat or email. We will respond to verified requests within fifteen (15) business days in accordance with DPA timelines.

11. Children's Privacy

The philbos Platform is strictly for individuals who are 21 years of age or older under Philippine law. philbos does not knowingly collect personal data from individuals under 21. If we discover that personal data has been collected from an underage individual, we will immediately delete that data and close the associated Account.

If you believe a minor has created a philbos Account or is attempting to use the Platform, please notify our support team immediately.

12. Cross-Border Data Transfers

Some of philbos's service providers — including cloud hosting providers and game software vendors — may process data outside the Philippines. Where personal data is transferred internationally, philbos ensures that appropriate safeguards are in place, which may include:

• Contractual clauses requiring the recipient to apply data protection standards at least equivalent to those required by the Philippine DPA.
• Transfers only to countries or organizations recognized as providing an adequate level of data protection.
• Your explicit consent to the transfer where required by law.

Details of international transfer safeguards are available upon request from our Data Protection Officer.

13. Third-Party Links

The philbos Platform does not contain links to third-party websites. In the event that any game or feature incorporates content from a licensed third-party provider, that provider's privacy practices are governed by their own policies, which are separate from this Privacy Policy. philbos is not responsible for the privacy practices of third-party game providers.

14. Changes to This Privacy Policy

philbos may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. Material changes will be communicated to registered Members via the email address on their Account and/or by a prominent notice on the Platform at least seven (7) days before the changes take effect.

Continued use of the philbos Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. The date of the most recent revision is displayed at the top of this page.

15. Contact & Data Protection Officer

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by philbos, please contact our Data Protection Officer:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Data Privacy Request – [Your Registered Email]"
• Live Chat: Available 24/7 via the support widget on the Platform
• Response time: Within fifteen (15) business days for formal data subject requests; within two (2) business days for general privacy inquiries

For complaints that have not been resolved satisfactorily through our internal process, you may file a complaint with the National Privacy Commission of the Philippines (NPC). Details on how to file a complaint are available on the NPC's official website.