Privacy Policy

This Privacy Policy ("Policy") describes how phbida ("the Platform," "we," "us," or "our"), the operator of the online gaming and sportsbook platform accessible at phbida.lat, collects, processes, stores, and protects the personal data of its users ("User," "you," or "your").

This Policy applies to all personal data processed in connection with your use of phbida, including data collected during account registration, identity verification, financial transactions, gameplay activity, customer support interactions, and your general browsing of phbida.lat.

By registering for a phbida account or otherwise accessing phbida.lat, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the practices described in this Policy, you should discontinue use of the Platform.

This Policy should be read alongside phbida's Terms & Conditions, which govern your use of the Platform as a whole.

For the purposes of Republic Act No. 10173 and its Implementing Rules and Regulations, phbida is the personal information controller with respect to all personal data collected from users of phbida.lat. phbida determines the purposes and means of processing personal data obtained through the Platform.

Where phbida engages third-party service providers to process personal data on its behalf (for example, payment processors or identity verification providers), those providers act as personal information processors under phbida's instruction and are contractually required to process data solely for the purposes specified by phbida.

phbida collects the following categories of personal data from users of the Platform:

phbida does not intentionally collect sensitive personal information as defined under RA 10173 (such as health data, political opinions, or religious beliefs) unless specifically required for a legal compliance purpose, in which case explicit consent will be sought.

phbida collects personal data through the following channels:

• Direct collection: Information you provide when registering a phbida account, completing KYC verification, submitting a withdrawal request, contacting customer support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically via cookies, server logs, and similar tracking technologies as you navigate and interact with phbida.lat.
• Third-party sources: Identity verification data cross-referenced against Philippine government ID databases; fraud risk signals from fraud prevention partners; payment confirmation data from GCash, Maya, and Philippine banking partners.

phbida will not collect personal data from you in excess of what is reasonably necessary for the stated purposes. Where phbida requires additional information for a specific purpose, such as enhanced due diligence for large withdrawals, you will be notified and your consent will be obtained prior to collection.

phbida processes your personal data on the following legal bases, as recognised under RA 10173:

• Contractual necessity: Processing required to create and manage your phbida account, process deposits and withdrawals, deliver game services, and give effect to the phbida Terms & Conditions you have agreed to.
• Legal obligation: Processing required to comply with Philippine anti-money laundering laws (RA 9160 as amended), PAGCOR licensing conditions, the Data Privacy Act, and any other applicable regulation.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and internal analytics, where such processing does not override your rights as a data subject.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit and freely given consent, which may be withdrawn at any time.

phbida uses the personal data it collects for the following purposes:

• To create, maintain, and manage your phbida player account and associated wallet balance.
• To verify your identity and age in accordance with PAGCOR requirements and RA 10173 KYC obligations. phbida's strict 21+ age policy requires that identity data be collected and verified before withdrawal privileges are activated.
• To process deposit and withdrawal transactions via GCash, Maya, BPI, BDO, Metrobank, and other approved Philippine payment channels.
• To deliver the games, live casino sessions, sportsbook markets, and all other platform services you have selected.
• To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other security threats.
• To monitor your gaming activity for responsible gaming purposes, including identifying indicators of problem gambling and implementing any self-imposed limits or restrictions you have set on your account.
• To respond to your customer support queries, process complaints, and resolve disputes.
• To comply with reporting and record-keeping obligations imposed on phbida by Philippine regulatory authorities, including PAGCOR and the Anti-Money Laundering Council (AMLC).
• To send you transactional communications such as deposit confirmations, withdrawal notifications, and security alerts via your registered mobile number or email address.
• Where you have provided consent, to send you promotional communications about phbida bonuses, new games, and special events.

phbida does not sell, rent, or trade your personal data to any third party for their own commercial purposes. phbida may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment service providers: GCash (Mynt), Maya (PayMaya Philippines Inc.), BPI, BDO, Metrobank, and other licensed Philippine payment processors, solely for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Licensed KYC and identity verification service providers engaged by phbida to verify the authenticity of government-issued identification documents.
• Game software providers: phbida's licensed game technology partners (such as JILI Games, PG Soft, Pragmatic Play, and Spadegaming) may receive technical data necessary for the delivery of game sessions. These providers do not receive your financial or identity data.
• Fraud prevention and security partners: Third-party fraud detection and risk management services that process technical and transactional data on phbida's behalf to identify and prevent fraudulent activity.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and any other Philippine government body where disclosure is required by law, court order, or regulatory directive.
• Professional advisors: Legal, accounting, and audit professionals retained by phbida, subject to professional confidentiality obligations.

All third parties with whom phbida shares personal data are required to process that data in accordance with RA 10173 and any applicable data processing agreements entered into with phbida. phbida remains responsible for ensuring that such processors provide sufficient guarantees of data protection.

phbida retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law:

• Account and identity data: Retained for a minimum of 5 years from the date of account closure, in accordance with AMLC record-keeping requirements applicable to covered institutions.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, as required under RA 9160 (Anti-Money Laundering Act).
• KYC documents: Retained for a minimum of 5 years from the date of verification, or longer if required by ongoing regulatory investigation or legal proceedings.
• Communications data (support transcripts, live chat logs): Retained for up to 3 years from the date of the interaction.
• Technical and usage data (server logs, IP records): Retained for up to 12 months, unless extended due to a security investigation.

Upon expiry of the applicable retention period, phbida will securely delete or anonymise personal data in a manner that prevents reconstruction of the original information.

phbida implements a comprehensive set of technical, organisational, and physical security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All communications between your device and phbida.lat are protected by 256-bit SSL/TLS encryption. This applies to all pages of the Platform, including login, registration, deposit, and withdrawal flows.
• Encryption at rest: Sensitive personal data — including identity documents, financial records, and authentication credentials — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to phbida's systems and databases containing personal data is restricted to authorised personnel only, on a need-to-know basis. All internal access is logged and subject to regular audit.
• Two-factor authentication (2FA): phbida supports and encourages the use of two-factor authentication on all user accounts. phbida's internal administrative systems require 2FA for all staff with access to user data.
• Penetration testing and security audits: phbida's platform undergoes regular third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: phbida maintains a documented data breach response procedure. In the event of a personal data breach that poses a real risk to data subjects, phbida will notify the National Privacy Commission and affected users within the timeframes required by RA 10173.

Despite these measures, no method of data transmission or storage is 100% secure. phbida cannot guarantee absolute security of data in all circumstances, but undertakes to apply all reasonable and commercially practicable security measures at all times.

phbida uses cookies and similar tracking technologies on phbida.lat to operate the Platform, remember your preferences, analyse usage patterns, and support security functions. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the basic operation of phbida.lat, including session management, login persistence, and security token handling. These cookies cannot be disabled without preventing use of the Platform.
• Functional cookies: Remember your preferences and settings (such as language preference and responsible gaming tool configurations) to improve your experience between sessions.
• Analytical cookies: Collect anonymised or pseudonymised data about how users navigate phbida.lat, which pages are visited most frequently, and where users exit the Platform. This data is used to improve Platform performance and usability.

phbida does not use third-party advertising cookies or cross-site behavioural tracking cookies. You may manage your cookie preferences through your browser settings. Note that disabling functional or analytical cookies may affect Platform performance but will not prevent you from accessing phbida's games and services.

Under Republic Act No. 10173 and its Implementing Rules and Regulations, you have the following rights with respect to personal data that phbida holds about you:

To exercise any of the above rights, please contact phbida's support team via live chat at phbida.lat or by email at [email protected]. phbida will respond to all verified data subject requests within 30 calendar days of receipt. Note that certain rights (particularly erasure) may be limited where phbida has a legal obligation to retain your data under Philippine law.

phbida's services are strictly intended for individuals who are 21 years of age or older. phbida does not knowingly collect or process personal data from any individual under 21 years of age. This minimum age restriction applies in compliance with Philippine gambling regulations, and is more stringent than the general data protection standard of 18 years for consent under RA 10173.

If phbida discovers or has reason to believe that personal data has been collected from an individual who is under 21 years of age, phbida will immediately suspend the associated account, delete all personal data collected in connection with that account to the extent permitted by applicable law, and notify the relevant regulatory authority if required.

In connection with the provision of certain services — such as game delivery by international software providers or cloud infrastructure services — your personal data may be transferred to, processed in, or stored in jurisdictions outside the Philippines.

Where such transfers occur, phbida ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to the protections afforded under RA 10173. These safeguards may include contractual data processing agreements incorporating standard data protection clauses approved by the National Privacy Commission, or phbida's assessment that the recipient jurisdiction provides an adequate level of data protection.

phbida will not transfer your personal data internationally where such a transfer would violate any applicable Philippine law or NPC directive.

phbida may revise this Privacy Policy from time to time to reflect changes in applicable law, regulatory guidance, phbida's data practices, or the services offered on the Platform. The effective date of the current version is always displayed at the top of this page.

Where phbida makes a material change to this Policy — particularly any change that affects the legal basis for processing, the categories of data collected, or your rights as a data subject — phbida will notify registered users via their registered email address or through a prominent in-platform notice prior to the change taking effect.

Your continued use of phbida.lat after any amendment to this Policy constitutes your acknowledgment of the updated Policy. If you do not agree with the changes, you should discontinue use of the Platform and may request account closure in accordance with phbida's Terms & Conditions.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or want to raise a concern about phbida's data practices, please contact phbida's support team through any of the following channels:

If you are not satisfied with phbida's response to a data privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing RA 10173. Details on filing a complaint with the NPC are available on the NPC's official government website.