Privacy Policy
phbit is committed to protecting the personal data of every Filipino player on our platform. This Privacy Policy explains what we collect, why we collect it, how we use it, and what rights you have over your information.
Our Privacy Principles
These six principles define how phbit approaches data privacy for every registered player. Full legal detail follows in the sections below.
Data Minimisation
phbit only collects personal data that is strictly necessary for account management, identity verification, payment processing, and regulatory compliance. We do not collect data "just in case" — every data point we hold has a defined, documented purpose tied to your phbit account and the services we provide.
Security by Default
All personal data stored by phbit is protected with SSL/TLS encryption in transit and AES-256 encryption at rest. Access to your data within phbit's systems is restricted to authorised personnel on a strict need-to-know basis, with all access logged and audited. We conduct regular security reviews of our data infrastructure.
No Data Selling
phbit does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. The only third parties who receive your data are those directly involved in delivering phbit services — such as licensed game providers, payment processors like GCash and BDO, and regulators — and only to the extent required.
Your Rights First
As a phbit account holder, you have the right to access, correct, restrict, and request deletion of your personal data, subject to legal retention obligations. phbit provides a dedicated support channel for exercising these rights. We aim to respond to all data rights requests within fifteen (15) business days of receipt.
Defined Retention Periods
phbit does not retain personal data indefinitely. Retention periods are set based on the type of data and applicable legal requirements in the Philippines. KYC documents are retained for a minimum of five (5) years in compliance with anti-money laundering regulations. Transaction records are retained for seven (7) years. Data no longer required is securely deleted.
Breach Notification
In the event of a personal data breach that poses a risk to your rights, phbit will notify affected account holders and the appropriate Philippine data protection authority within the timeframe prescribed by applicable law. We maintain an incident response plan and conduct regular simulations to ensure readiness in the unlikely event of a security incident.
01 Introduction
phbit ("we", "our", "us") operates an online gaming platform accessible at phbit.net, designed specifically for Filipino players. As the operator of this platform, phbit acts as the data controller responsible for the personal data of registered users and visitors to the website.
This Privacy Policy describes the types of personal data phbit collects, the purposes for which that data is processed, the parties with whom it may be shared, the security measures in place to protect it, the periods for which it is retained, and the rights available to you as a data subject under applicable Philippine data protection law.
This policy should be read alongside the phbit Terms & Conditions and Responsible Gaming Policy, both of which are incorporated into the phbit user agreement. By registering a phbit account or continuing to use the platform, you confirm your acceptance of this Privacy Policy as it applies to your personal data.
If you have questions about this Privacy Policy or wish to exercise any of your data rights, you may contact phbit's support team via the 24/7 live chat available after logging in to your phbit account, or by emailing [email protected] (plain text — not a clickable link).
02 Data We Collect
phbit collects personal data through multiple channels: directly from you when you register, use platform features, or contact support; automatically through your use of the platform via cookies and technical logs; and from third parties such as payment processors and identity verification services.
2.1 Registration & Identity Data
When you create a phbit account, we collect the following information:
- Full legal name (as it appears on your government-issued ID)
- Date of birth (to verify you are 21 years of age or older)
- Residential address (current and complete, including barangay, city, and province)
- Email address and mobile number registered to your account
- Username and encrypted password
- Government-issued identification document details (document type, number, expiry date, and scanned copy) for KYC purposes
2.2 Payment & Financial Data
To process deposits and withdrawals in Philippine Peso, phbit collects:
- GCash or PayMaya mobile number linked to your account
- Bank account name and number (for BPI, BDO, Metrobank, or UnionBank withdrawals)
- Transaction records including deposit amounts, withdrawal requests, and bonus redemptions
- Source-of-funds information where required by anti-money laundering regulations
2.3 Gaming Activity Data
phbit automatically logs all gaming activity associated with your account, including game type, bet amounts, session duration, win/loss records, and responsible gaming tool usage. This data supports account integrity, regulatory compliance, and responsible gaming monitoring.
2.4 Technical & Device Data
When you access phbit, our systems automatically collect technical information including your IP address, browser type and version, device type and operating system, session timestamps, and pages visited. This data is used for security monitoring, fraud detection, and platform performance optimisation.
2.5 Communications Data
When you contact phbit support via live chat, email, or any other channel, we retain records of those communications, including the content of messages, timestamps, and the resolution outcome. This enables consistent, high-quality support and serves as an audit trail for dispute resolution.
03 How We Use Your Data
The following table summarises the primary purposes for which phbit processes your personal data, together with the legal basis for each purpose:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, contact, and login data | Contract performance |
| Age and identity verification (KYC) | Date of birth, government ID | Legal obligation |
| Processing deposits and withdrawals | Payment and financial data | Contract performance |
| Anti-money laundering compliance | Transaction records, source of funds | Legal obligation |
| Fraud and security monitoring | Technical, device, and gaming data | Legitimate interests |
| Responsible gaming monitoring | Gaming activity and session data | Legal obligation / Legitimate interests |
| Customer support | Communications and account data | Contract performance |
| Platform improvement and analytics | Technical and gaming activity data | Legitimate interests |
| Promotional communications (where consented) | Contact data, gaming preferences | Consent |
phbit does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where expressly required for fraud prevention or regulatory compliance purposes.
04 Legal Basis for Processing
phbit processes personal data under the following legal bases recognised under applicable Philippine data protection law and the principles of the Data Privacy Act of 2012 (Republic Act No. 10173):
- Contract Performance: Processing necessary to provide the phbit gaming platform, manage your account, and fulfil deposit and withdrawal transactions.
- Legal Obligation: Processing required to comply with anti-money laundering regulations, age verification obligations, and directives from Philippine regulatory authorities.
- Legitimate Interests: Processing for fraud detection, platform security, responsible gaming oversight, and analytics, where these interests are balanced against your privacy rights.
- Consent: Processing for optional purposes such as promotional email communications and personalised offers, where you have provided clear, affirmative consent that can be withdrawn at any time.
Where phbit relies on consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal. To withdraw consent for marketing communications, update your preferences via your phbit account settings or contact support.
05 Sharing Your Data
5.1 Third-Party Service Providers
phbit shares personal data with carefully selected third-party service providers who assist in the delivery of the phbit platform. These include licensed game software providers, payment processing services (including GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank), identity verification and KYC service providers, customer support software providers, and cloud infrastructure operators. All third-party processors are bound by data processing agreements requiring them to process your data solely on phbit's instructions and in compliance with applicable data protection standards.
5.2 Regulatory and Law Enforcement Authorities
phbit may disclose personal data to Philippine regulatory authorities, law enforcement agencies, or other government bodies where required to do so by law, court order, or in the legitimate discharge of our compliance obligations. Such disclosures are made on a case-by-case basis, limited to the data strictly necessary for the regulatory or investigative purpose, and documented internally.
5.3 Business Transfers
In the event of a merger, acquisition, asset sale, or corporate restructuring involving phbit, personal data held by phbit may be transferred to the acquiring or successor entity. In such circumstances, phbit will notify affected users via the email address registered to their account and ensure that the receiving entity maintains data protections equivalent to those described in this Privacy Policy.
5.4 No Sale of Data
phbit does not sell, rent, lease, or otherwise transfer your personal data to third parties for commercial marketing or advertising purposes. No phbit user data is made available to data brokers, advertising networks, or social media platforms for targeting purposes.
06 Cookies & Tracking Technologies
phbit uses cookies and similar tracking technologies to operate and improve the platform. When you visit phbit.net, cookies may be placed on your device for the following purposes:
- Essential Cookies: Required for the phbit platform to function correctly, including maintaining your login session, remembering your language preference, and ensuring security features operate as intended. These cookies cannot be disabled without impairing platform functionality.
- Performance Cookies: Collect anonymised data about how users interact with the phbit platform, including pages visited, session duration, and error reports. This data helps phbit identify and resolve technical issues and prioritise platform improvements.
- Functional Cookies: Remember user preferences such as game category filters and responsible gaming settings between sessions, providing a more personalised and efficient experience on return visits.
- Analytics Cookies: Used by phbit's internal analytics tools to understand platform usage patterns at an aggregate level. No individually identifiable data is shared with external analytics services.
You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling essential cookies will affect the functionality of the phbit platform, including the ability to stay logged in to your account.
07 Data Retention
phbit retains personal data for as long as necessary to fulfil the purposes for which it was collected, and in compliance with applicable legal retention requirements in the Philippines. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal obligation (AML) |
| KYC / identity verification documents | Minimum 5 years after account closure | Legal obligation (AML / RA 9160) |
| Transaction records | 7 years from transaction date | Legal obligation (tax / AML) |
| Gaming activity logs | 3 years from session date | Legitimate interests / Regulatory |
| Customer support communications | 3 years from last interaction | Legitimate interests |
| Marketing preferences & consent records | Duration of consent + 1 year after withdrawal | Legal obligation (consent audit trail) |
| Technical / device access logs | 12 months from log date | Legitimate interests (security) |
Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised such that it can no longer be associated with any identifiable individual. Anonymised aggregated data may be retained indefinitely for statistical and platform improvement purposes.
08 Security Measures
phbit employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:
- TLS 1.2 / 1.3 encryption for all data transmitted between your device and the phbit platform.
- AES-256 encryption for personal data stored in phbit's databases and backup systems.
- Role-based access controls ensuring that only authorised phbit personnel with a defined business need can access personal data, with all access logged.
- Multi-factor authentication requirements for all phbit internal system access.
- Regular penetration testing and vulnerability assessments of the phbit platform infrastructure.
- An incident response plan covering detection, containment, investigation, and notification procedures in the event of a data breach.
- Staff training on data protection obligations and secure data handling practices, conducted at onboarding and at least annually thereafter.
While phbit takes all reasonable precautions to protect your personal data, no online system can guarantee absolute security. You are responsible for keeping your phbit login credentials confidential and for ensuring that any device used to access your phbit account is appropriately secured.
09 Your Data Rights
Under the Data Privacy Act of 2012 (RA 10173) and related Philippine National Privacy Commission (NPC) regulations, you have the following rights in respect of your personal data held by phbit:
Your Data Rights at phbit
As a registered phbit user in the Philippines, you have the following rights over the personal data we hold about you.
Right to Access
You may request a copy of the personal data phbit holds about you at any time. We will provide this within fifteen (15) business days in a structured, readable format.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Contact phbit support with the corrected information and supporting documentation.
Right to Erasure
You may request deletion of your personal data. Note that data subject to legal retention obligations (such as KYC and transaction records) cannot be deleted until the applicable retention period expires.
Right to Object / Restrict
You may object to or request restriction of processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes, subject to phbit's overriding regulatory obligations.
Right to Data Portability
You may request a machine-readable export of personal data you have provided to phbit, where processing is based on contract or consent and is carried out by automated means.
Right to Withdraw Consent
Where phbit processes your data on the basis of consent (such as for marketing communications), you may withdraw that consent at any time through your account settings or by contacting support, without affecting prior lawful processing.
To exercise any of these rights, contact phbit support via the 24/7 live chat after logging in to your phbit account, or email [email protected]. phbit will acknowledge your request within three (3) business days and aim to resolve it within fifteen (15) business days. If you are dissatisfied with phbit's response to a data rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.
10 Children & Minors
phbit is strictly an adult gaming platform. The minimum age to register and use phbit is 21 years old, in accordance with Philippine law governing online gaming activities. phbit does not knowingly collect personal data from individuals under 21 years of age.
If phbit becomes aware that personal data has been collected from a person under the age of 21 — whether through KYC verification, account review, or a report from a third party — phbit will immediately suspend the account, delete the personal data collected, and permanently close the account. Any funds deposited by or on behalf of a minor will be handled in accordance with applicable regulations.
If you are a parent or guardian and believe your child may have registered a phbit account, please contact phbit support immediately via live chat or at [email protected] so that appropriate action can be taken without delay.
11 Changes to This Privacy Policy
phbit reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable law. When material changes are made, phbit will notify registered users by email to the address associated with their account at least seven (7) days before the changes take effect, except where immediate changes are required by law or regulatory directive.
The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how phbit protects your personal data. Continued use of the phbit platform after the effective date of any revision constitutes your acceptance of the updated policy.
If a proposed change to this Privacy Policy would affect the way phbit processes data for which your consent is the legal basis, phbit will seek fresh consent before the new processing begins, rather than relying on deemed acceptance through continued platform use.
12 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data phbit holds about you, please reach out through any of the following channels:
- 24/7 Live Chat: Available after logging in to your phbit account at phbit Login.
- Email: [email protected] (plain text — not a clickable link). Responses are provided within three (3) business days.
- In-Platform Support: Access the Help section from within your phbit account dashboard for self-service resources and to initiate a support ticket.
phbit's support team is staffed by Filipino agents operating on Philippine Standard Time (PST, UTC+8) and is available around the clock, every day of the year including Philippine public holidays.
Ready to Play at phbit?
Explore 500+ casino games in Philippine Peso with GCash deposits from ₱100. Your data is protected under this Privacy Policy at every step. Must be 21 years or older to play.
Play Responsibly at phbit
phbit is intended for entertainment purposes only and is strictly restricted to players aged 21 and above. Deposit limits, session reminders, and self-exclusion options are available in your account settings. If gaming is causing concern, please visit our Responsible Gaming page for resources and support.