phbest
Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how phbest ("phbest," "we," "us," or "our") collects, uses, discloses, retains, and protects personal information relating to you ("Player," "User," or "you") when you access or use the phbest online gaming platform at phbest.cam, including all associated websites, mobile interfaces, services, features, and communications (collectively, the "Platform").

phbest is committed to protecting the privacy and personal data of all registered players, in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission (NPC).

By registering a phbest account or continuing to use the Platform, you acknowledge that you have read and understood this Policy, and that you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please discontinue use of the Platform and contact phbest support to close your account.

This Policy is to be read together with the phbest Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Data Controller Identity

For the purposes of the Data Privacy Act of 2012, phbest is the Personal Information Controller with respect to the personal data of registered players and platform visitors. phbest determines the purposes and means of processing personal data collected through the Platform.

phbest has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact the phbest DPO at the address provided in Section 17 of this Policy.

3. Personal Data We Collect

phbest collects the following categories of personal data in connection with your registration and use of the Platform:

3.1 Registration & Account Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (for age verification — players must be 21 years of age or older)
• Residential address (province, city, barangay, postal code)
• Email address
• Philippine mobile number
• Username and encrypted account password
• Security questions and answers (where applicable)

3.2 Identity Verification (KYC) Data

• Government-issued photo identification (Philippine National ID, Passport, Driver's License, SSS ID, GSIS ID, PRC ID, or equivalent)
• Proof of residential address (utility bill, bank statement, barangay certificate)
• Selfie or live video verification image for biometric matching (where required)
• Documentation relating to source of funds (for high-value accounts subject to enhanced due diligence)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records (amounts, dates, payment methods used)
• Payment method identifiers (e.g., registered GCash mobile number, Maya account reference, bank account suffix — never full account or card numbers)
• Bonus and promotion redemption history
• Account balance history

3.4 Gaming Activity Data

• Game session logs (games played, bet amounts, win/loss outcomes, timestamps)
• Betting history across all game categories (slots, live casino, bingo, mine games, sports)
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

3.5 Technical & Device Data

• IP address and geolocation data (country and city level)
• Device type, operating system, and browser version
• Unique device identifiers
• Login timestamps and session duration logs
• Referring URL and page navigation data

3.6 Communications Data

• Customer support chat transcripts and email correspondence
• Records of marketing communication preferences and opt-in/opt-out history
• Feedback and survey responses submitted voluntarily

4. How We Collect Your Data

phbest collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically through cookies, web beacons, and server logs when you access and interact with the Platform.
• Third-party sources: Identity verification data received from KYC verification service providers; fraud risk signals from payment processors; geolocation data from IP resolution services; and, where applicable, publicly available sources used for AML screening purposes.

5. Legal Basis for Processing

phbest processes your personal data on one or more of the following legal grounds, as applicable to each processing activity:

Legal Basis	Processing Activities Covered
Contractual necessity	Processing required to create and manage your phbest account, process deposits and withdrawals, provide gaming services, and respond to support requests.
Legal obligation	KYC/AML verification, age verification, PAGCOR regulatory reporting, NPC compliance, tax reporting obligations, and responding to lawful government requests.
Legitimate interests	Fraud prevention and detection, platform security monitoring, responsible gaming analytics, and improving phbest services.
Consent	Marketing communications (email, SMS, push notifications) where opt-in consent has been obtained; non-essential cookies and analytics tracking.

6. How We Use Your Personal Data

phbest uses the personal data collected for the following purposes:

• Account management: Creating, verifying, and maintaining your phbest player account; authenticating your identity at login; enabling account recovery.
• Service delivery: Processing deposits and withdrawals; crediting bonuses; providing access to the phbest game library; delivering customer support.
• Regulatory compliance: Conducting KYC and AML checks; verifying age eligibility (21+); filing mandatory reports with PAGCOR and other regulatory bodies; responding to lawful law enforcement requests.
• Fraud and security: Detecting, investigating, and preventing fraudulent activity, unauthorized access, money laundering, and other prohibited conduct on the Platform.
• Responsible gaming: Monitoring gaming patterns for indicators of problem gambling; applying and enforcing player-configured deposit limits, loss limits, session limits, and self-exclusion settings; complying with responsible gaming obligations.
• Platform improvement: Analyzing aggregate usage data to improve game selection, platform performance, payment flows, and user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may withdraw consent at any time through your account settings or by contacting support.
• Legal proceedings: Establishing, exercising, or defending legal claims; complying with court orders; participating in regulatory investigations.

7. Data Sharing & Disclosure

phbest does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share personal data only in the following circumstances:

• Payment processors: GCash (Mynt), Maya (PayMaya), GrabPay, BPI, BDO, Metrobank, and other payment service providers receive transaction data strictly necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and data protection frameworks.
• KYC/AML verification providers: Identity verification service providers receive the documentation you submit for KYC purposes solely to verify your identity and screen for AML risk indicators.
• Technology service providers: Cloud hosting, content delivery, game platform providers, and cybersecurity partners who process data on phbest's behalf under binding data processing agreements that prohibit secondary use of your data.
• Regulatory and law enforcement authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and law enforcement agencies may receive personal data where phbest is legally required or compelled to disclose it.
• Business transfers: In the event of a merger, acquisition, or sale of phbest assets, personal data may be transferred to the acquiring entity, subject to the same data protection obligations as described in this Policy.

All third-party recipients of phbest player data are required to handle such data in accordance with applicable privacy laws and phbest's data protection standards.

8. Cookies & Tracking Technologies

phbest uses cookies and similar tracking technologies on the Platform to support core functionality, analyze usage, and where you have consented, deliver personalized content.

Cookie Type	Purpose	Consent Required?
Strictly Necessary	Maintaining your login session, preserving platform preferences, security tokens	No — essential for Platform operation
Functional	Remembering language preferences, game lobby layout, notification settings	No — for enhanced usability
Analytics	Aggregated usage statistics, page performance metrics, error tracking	Yes — opt-in only
Marketing	Serving relevant promotional content to consenting players	Yes — opt-in only

You may manage or withdraw cookie consent at any time through your browser settings or the phbest cookie preference center available on the Platform. Note that disabling strictly necessary cookies may impair your ability to use the Platform.

9. Data Security Measures

phbest implements a layered set of technical, organizational, and procedural security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction:

• Encryption in transit: All data transmitted between your device and phbest infrastructure is encrypted using TLS 1.3 or higher.
• Encryption at rest: Personal data stored in phbest databases is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to phbest personnel and authorized service providers who have a documented business need to process such data. All staff with access to personal data are bound by confidentiality obligations and undergo regular data protection training.
• Multi-factor authentication: Administrative access to phbest backend systems requires multi-factor authentication (MFA).
• Penetration testing: phbest infrastructure undergoes regular security assessments and penetration testing by qualified third-party security professionals.
• Incident response: phbest maintains a documented data breach response plan. In the event of a breach involving personal data, affected players and the NPC will be notified within 72 hours of confirmed discovery, in accordance with NPC Circular 16-03.

10. Data Retention

phbest retains personal data for the minimum period necessary to fulfill the purposes described in this Policy, subject to longer retention where required by applicable law or legitimate business need:

• Active account data: Retained for the duration of the account relationship plus five (5) years following account closure, in line with PAGCOR record-keeping requirements and AMLC obligations.
• KYC verification documents: Retained for a minimum of five (5) years following account closure, as required under the Anti-Money Laundering Act of 2001 and its amendments.
• Transaction records: Retained for a minimum of five (5) years following each transaction, consistent with BIR and AMLC documentation requirements.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless the subject matter relates to an ongoing dispute or regulatory investigation.
• Marketing consent records: Retained for the duration of the consent plus two (2) years following withdrawal of consent or account closure, whichever is later.
• Website analytics data: Aggregated and anonymized after 14 months; individual session data deleted after 26 months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be used to identify an individual.

11. Your Data Protection Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to the personal data phbest holds about you:

• Right to be informed: The right to be notified of how your personal data is being collected and processed. This Policy fulfills that obligation.
• Right of access: The right to obtain from phbest confirmation of whether personal data concerning you is being processed, and to receive a copy of that data.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data held by phbest.
• Right to erasure: The right to request deletion of personal data that is no longer necessary for the purpose for which it was collected, where consent has been withdrawn, or where processing is unlawful — subject to phbest's legal retention obligations.
• Right to data portability: The right to receive personal data you have provided to phbest in a structured, commonly used, machine-readable format.
• Right to object: The right to object to processing of your personal data for direct marketing purposes at any time, and to object to other processing activities based on legitimate interests.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe phbest has violated your data protection rights. The NPC can be reached through their official government portal.

To exercise any of the above rights, please submit a written request to phbest support at [email protected]. phbest will respond to verified data subject requests within 30 calendar days of receipt. We may request proof of identity before processing your request to prevent unauthorized access to your data.

12. Children's Privacy

The phbest Platform is strictly intended for individuals aged 21 years and older in compliance with PAGCOR regulations governing online gaming in the Philippines. phbest does not knowingly collect personal data from anyone under the age of 21.

If phbest discovers or is notified that it has inadvertently collected personal data from an individual under 21 years of age, it will immediately suspend the relevant account, delete the associated personal data to the extent legally permissible, and return any deposited funds to the original payment source.

If you believe that phbest may have collected data from an underage individual, please contact us immediately at [email protected].

13. International Data Transfers

phbest's primary data processing infrastructure is located within the Asia-Pacific region. In certain circumstances, personal data may be transferred to or accessed from jurisdictions outside the Philippines — for example, where phbest engages technology or game platform service providers headquartered or operating in other countries.

Where personal data is transferred internationally, phbest ensures that appropriate safeguards are in place to protect your data to a standard equivalent to Philippine data protection requirements. These safeguards may include: contractual data protection clauses incorporated into agreements with overseas data processors; adequacy determinations by the NPC where applicable; or other mechanisms recognized under Philippine law.

14. Marketing Communications

With your consent, phbest may send you promotional emails, SMS messages, push notifications, and in-platform messages about bonuses, game promotions, new game releases, and special events. Marketing communications are sent only to players who have affirmatively opted in to receive them.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences in your phbest account settings under "Communication Preferences";
• Clicking the unsubscribe link in any promotional email sent by phbest; or
• Contacting phbest customer support and requesting removal from all marketing lists.

Withdrawal of marketing consent will take effect within five (5) business days. Note that opting out of marketing communications does not affect transactional communications related to your account — such as deposit confirmations, withdrawal notifications, and security alerts — which are sent as a necessary part of the service.

15. Third-Party Links & Integrations

The phbest Platform may contain references or links to payment service providers and gaming software platforms whose services are integrated into the Platform. These third-party services operate under their own privacy policies and data protection practices, for which phbest is not responsible.

phbest recommends that you review the privacy policies of any third-party services you interact with through the Platform. phbest does not endorse or accept responsibility for the data handling practices of third-party services.

16. Updates to This Privacy Policy

phbest reserves the right to update or modify this Privacy Policy at any time. When material changes are made, phbest will provide notice to registered players by email or through a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the phbest Platform following the effective date of any update constitutes acceptance of the revised Policy. If you do not agree to the updated Policy, you must discontinue use of the Platform and may request account closure in accordance with the phbest Terms & Conditions.

17. Contact Us & Complaints

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or wish to raise a concern about phbest's data handling practices, please contact us:

• Data Protection Officer: [email protected] — please include "Privacy / DPO Request" in your subject line.
• Live Chat: Available 24 hours a day, 7 days a week, directly from your phbest account dashboard.
• Response Commitment: phbest will acknowledge data subject requests within five (5) business days and provide a substantive response within 30 calendar days.

If you are not satisfied with phbest's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which has jurisdiction over data protection complaints under the Data Privacy Act of 2012.