phboss Privacy Policy

1. Data Controller and Contact Information

phboss operates as the data controller responsible for processing your personal information in accordance with Philippine data privacy laws. We are headquartered in the Philippines and operate under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR). For questions, concerns, or requests regarding your personal data or this Privacy Policy, you may contact our Data Protection Officer through the following channels:

• Email: [email protected]
• Customer Support: Available 24/7 via live chat on our platform
• Mailing Address: phboss Data Protection Officer, Manila, Philippines

We are committed to responding to all privacy inquiries within fifteen (15) business days of receipt. If you are not satisfied with our response, you have the right to file a complaint with the National Privacy Commission of the Philippines.

2. Personal Information We Collect

phboss collects various types of personal information necessary to provide gaming services, comply with legal obligations, and enhance your user experience. The personal data we collect includes, but is not limited to:

2.1 Information You Provide Directly

• Account Registration Data: Full legal name, date of birth, gender, residential address, mobile phone number, email address, username, and password.
• Identity Verification Documents: Government-issued identification (Philippine passport, driver's license, national ID, voter's ID), proof of address documents (utility bills, bank statements), and selfie photographs for identity verification purposes as required by PAGCOR Know Your Customer (KYC) regulations.
• Financial Information: Bank account details, e-wallet account information (GCash, PayMaya), credit/debit card information, cryptocurrency wallet addresses, transaction history, deposit and withdrawal records, and source of funds documentation.
• Communication Records: Content of communications with our customer support team via live chat, email, phone, or other channels, including complaint records and support tickets.
• Marketing Preferences: Your consent preferences for receiving promotional communications, newsletters, bonus offers, and marketing materials.

2.2 Information Collected Automatically

• Device and Technical Data: IP address, device type and model, operating system, browser type and version, mobile network information, device identifiers (IMEI, MAC address), screen resolution, and time zone settings.
• Usage and Behavioral Data: Pages visited, games played, betting patterns, wagering amounts, session duration, click-through rates, feature usage, navigation paths through our platform, and timestamps of activities.
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, pixels, and similar technologies to analyze platform usage, remember preferences, and deliver personalized content and advertisements.
• Location Data: Geographic location derived from your IP address or GPS data (with your consent) to verify that you are accessing our services from within the Philippines as required by our gaming license.
• Gaming Activity Logs: Detailed records of all gaming transactions, including bets placed, games played, wins, losses, bonus usage, and account balance changes for regulatory compliance and dispute resolution purposes.

2.3 Information from Third-Party Sources

We may receive personal information about you from third-party sources, including payment processors, identity verification services, credit reference agencies, fraud prevention databases, and publicly available sources, to verify your identity, prevent fraud, and comply with legal obligations.

3. How We Use Your Personal Information

phboss processes your personal data for specific, legitimate purposes related to our gaming services and legal obligations. We use your personal information for the following purposes:

3.1 Service Provision and Account Management

• To create, maintain, and manage your phboss gaming account
• To verify your identity and age to ensure compliance with the 21+ age restriction
• To process deposits, withdrawals, and other financial transactions
• To provide access to casino games, sports betting, and other gaming services
• To track gaming activity, account balances, and transaction history
• To provide customer support and respond to your inquiries, complaints, or requests
• To communicate important account information, policy updates, and service announcements

3.2 Legal and Regulatory Compliance

• To comply with PAGCOR licensing requirements and regulatory obligations
• To fulfill Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements under Philippine law
• To maintain gaming transaction logs as required by Philippine gaming regulations
• To report suspicious activities to relevant Philippine authorities when legally required
• To respond to lawful requests from government agencies, law enforcement, or courts
• To comply with tax reporting obligations under Philippine tax laws

3.3 Fraud Prevention and Security

• To detect, prevent, and investigate fraudulent activities, bonus abuse, or terms violations
• To monitor for unusual betting patterns or potential match-fixing in sports betting
• To protect against unauthorized account access or cyber attacks
• To verify the legitimacy of payment methods and prevent financial fraud
• To maintain platform security and protect all users from malicious activities

3.4 Responsible Gaming and Player Protection

• To implement and enforce responsible gaming measures, including deposit limits and self-exclusion
• To monitor player behavior for signs of problem gambling and intervene when appropriate
• To provide access to responsible gaming tools and gambling support resources
• To comply with social responsibility obligations under PAGCOR regulations

3.5 Marketing and Communications (With Your Consent)

• To send promotional offers, bonus notifications, and marketing communications
• To personalize your gaming experience based on your preferences and activity
• To conduct market research and gather feedback on our services
• To inform you about new games, features, and platform improvements

Note: You can opt out of marketing communications at any time through your account settings or by contacting customer support. Opting out will not affect essential service communications.

3.6 Platform Improvement and Analytics

• To analyze usage patterns and improve our platform's functionality and performance
• To conduct statistical analysis and generate aggregated, anonymized reports
• To optimize game selection, payment methods, and user interface design
• To test new features and evaluate their effectiveness

4. Legal Basis for Data Processing

Under the Philippine Data Privacy Act, phboss processes your personal data based on the following legal grounds:

• Consent: You have explicitly consented to the processing of your personal data for specific purposes, such as receiving marketing communications or using location services.
• Contractual Necessity: Processing is necessary to fulfill our contractual obligations to provide gaming services under our Terms and Conditions.
• Legal Obligation: Processing is required to comply with Philippine laws and regulations, including PAGCOR requirements, AML laws, and tax obligations.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, and platform improvement, provided these interests do not override your fundamental rights and freedoms.
• Protection of Vital Interests: In rare cases, processing may be necessary to protect your vital interests or those of another person, such as in emergencies.

5. Sharing and Disclosure of Personal Information

phboss does not sell your personal information to third parties for marketing purposes. However, we may share your personal data with certain third parties under specific circumstances as described below:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform services on our behalf, including payment processors, identity verification services, cloud hosting providers, customer support platforms, marketing service providers, and data analytics firms. These service providers have access only to the personal information necessary to perform their functions and are contractually obligated to protect your data in accordance with Philippine data protection standards.

5.2 Game Providers and Platform Partners

When you play games on phboss, certain information about your gaming activity may be shared with our game providers and software partners to facilitate gameplay, track winnings, and ensure game integrity. These partners are bound by confidentiality agreements and data protection obligations.

5.3 Regulatory Authorities and Law Enforcement

We may disclose your personal information to PAGCOR, the National Privacy Commission, Philippine tax authorities, law enforcement agencies, or other government bodies when required by law, regulatory obligation, court order, or to cooperate with investigations into illegal activities, fraud, or threats to public safety.

5.4 Fraud Prevention and Security Services

To protect against fraud and maintain platform security, we may share limited personal information with fraud detection services, credit reference agencies, and industry databases that help identify suspicious activities across the gaming industry.

5.5 Corporate Transactions

In the event of a merger, acquisition, sale of assets, or corporate restructuring involving phboss, your personal information may be transferred to the successor entity, subject to the same privacy protections described in this Privacy Policy. You will be notified of any such change in ownership or control of your personal data.

5.6 With Your Consent

We may share your personal information with other third parties when you have explicitly consented to such disclosure for a specific purpose.

6. International Data Transfers

Your personal information is primarily stored and processed on servers located within the Republic of the Philippines. In some cases, your data may be transferred to or accessed by service providers located outside the Philippines for specific purposes such as cloud hosting, data analytics, or technical support. When we transfer personal data internationally, we ensure that appropriate safeguards are in place to protect your information in accordance with Philippine data protection standards, including contractual data protection clauses, adequacy determinations, or other legally recognized transfer mechanisms. You have the right to obtain information about the safeguards we implement for international data transfers by contacting our Data Protection Officer.

7. Data Security Measures

phboss implements comprehensive technical, organizational, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols. Sensitive data at rest, including passwords and financial information, is encrypted using advanced encryption standards.
• Access Controls: Strict access controls limit employee access to personal data on a need-to-know basis. All access is logged, monitored, and reviewed regularly for suspicious activity.
• Authentication: Multi-factor authentication and strong password requirements protect your account from unauthorized access.
• Security Audits: Regular security assessments, vulnerability scans, and penetration testing identify and address potential security weaknesses.
• Employee Training: All phboss personnel receive mandatory training on data protection, privacy principles, and security best practices.
• Incident Response: We maintain a comprehensive incident response plan to quickly detect, respond to, and mitigate data security breaches.
• Backup and Recovery: Regular data backups and disaster recovery procedures ensure data availability and business continuity.

While we implement robust security measures, no internet-based platform can guarantee absolute security. You share responsibility for protecting your account by maintaining strong passwords, not sharing login credentials, and reporting suspicious activities immediately to our customer support team.

8. Data Retention and Deletion

phboss retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by Philippine law. Our data retention practices are governed by the following principles:

8.1 Active Account Data

While your phboss account remains active, we retain your personal information to provide continuous service, maintain transaction history, and fulfill ongoing obligations.

8.2 Closed Account Data

After you close your account, we retain certain personal information for a minimum of five (5) years or longer as required by PAGCOR regulations, Philippine tax laws, and anti-money laundering requirements. This retention enables us to comply with legal obligations, resolve disputes, enforce agreements, and respond to regulatory inquiries.

8.3 Marketing and Communication Data

If you opt out of marketing communications, we retain minimal information (email address or phone number) necessary to honor your opt-out preferences and prevent future marketing contacts.

8.4 Legal Hold

In cases involving litigation, investigations, or regulatory proceedings, relevant personal data will be retained until the matter is fully resolved, even if this exceeds our standard retention periods.

8.5 Data Deletion

Once the applicable retention period expires and legal obligations are satisfied, we securely delete or anonymize your personal information using industry-standard data destruction methods to prevent unauthorized reconstruction or access.

9. Your Privacy Rights Under Philippine Law

The Philippine Data Privacy Act grants you specific rights regarding your personal information. As a phboss player, you have the following rights:

9.1 Right to Access

You have the right to request confirmation of whether phboss processes your personal data and to obtain access to that data. You may request a copy of your personal information in our possession.

9.2 Right to Rectification

You have the right to correct inaccurate, incomplete, or outdated personal information. You can update most information directly through your account settings or by contacting customer support.

9.3 Right to Erasure

You have the right to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, you withdraw consent, you object to processing, or processing is unlawful. This right is subject to limitations when retention is required by law or necessary to fulfill legal obligations.

9.4 Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller where technically feasible.

9.6 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

9.7 Right to Lodge a Complaint

You have the right to file a complaint with the National Privacy Commission of the Philippines if you believe your privacy rights have been violated or if you are dissatisfied with how we handle your personal data.

9.8 Exercising Your Rights

To exercise any of these rights, contact our Data Protection Officer at [email protected] or through our customer support channels. We will respond to your request within fifteen (15) business days and provide a substantive response within thirty (30) days, or explain any reasons for delay. We may require identity verification before processing certain requests to protect against fraudulent requests.

10. Cookies and Tracking Technologies

phboss uses cookies, web beacons, pixels, and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you on return visits. We use the following types of cookies:

• Essential Cookies: Necessary for basic platform functionality, account authentication, and security. These cannot be disabled.
• Performance Cookies: Collect anonymous information about how you use phboss to help us improve platform performance and user experience.
• Functional Cookies: Remember your preferences, settings, and customization choices to enhance your experience.
• Marketing Cookies: Track your activity across websites to deliver relevant advertisements and measure campaign effectiveness.

You can manage cookie preferences through your browser settings. Disabling certain cookies may limit platform functionality. For detailed information about our cookie practices, please contact our Data Protection Officer.

11. Children's Privacy

phboss gaming services are strictly intended for individuals who are at least twenty-one (21) years of age or older. We do not knowingly collect personal information from minors under 21 years of age. If we discover that we have inadvertently collected personal data from an underage individual, we will immediately delete such information and permanently close the associated account. Parents or guardians who believe their child has provided personal information to phboss should contact us immediately at [email protected] so we can take appropriate action. Underage gambling is illegal, harmful, and strictly prohibited under Philippine law and our Terms and Conditions.

12. Changes to This Privacy Policy

phboss reserves the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated to you through email notification, prominent notice on our platform, or other appropriate means at least thirty (30) days before the effective date. Your continued use of phboss services after such notification constitutes acceptance of the revised Privacy Policy. We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your personal information. The "Last Updated" date at the top of this document indicates when the policy was most recently revised.

13. Contact Us

If you have questions, concerns, requests, or complaints regarding this Privacy Policy or our data processing practices, please contact our Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 on our platform
• Customer Support: English and Tagalog-speaking representatives available

We are committed to addressing your privacy concerns promptly and transparently. If you are not satisfied with our response, you may file a complaint with the National Privacy Commission of the Philippines.