Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how phbonus ("Company," "we," "us," or "our"), the operator of the online gaming platform accessible at https://phbonus.app, collects, uses, stores, shares, and protects the personal information of users ("Player," "you," or "your") who access or use our website, games, and related services (collectively, the "Platform").

phbonus is committed to protecting the privacy and personal data of all players, particularly those based in the Philippines. This Policy is drafted in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

By registering an account, accessing the Platform, or otherwise providing your personal information to phbonus, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately.

2. Data We Collect

phbonus collects personal data that is necessary for the operation of the Platform, compliance with legal obligations, and the delivery of a safe and enjoyable gaming experience. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Email address
• Mobile number
• Residential address (including city, province, and postal code)
• Username and encrypted password
• Government-issued ID details (for KYC verification purposes)

2.2 Financial Data

• Payment method details (e.g., GCash account number, PayMaya account, BPI, BDO, or Metrobank account information)
• Transaction history, including deposits, withdrawals, and bonus credits
• Account balance information

2.3 Gaming Activity Data

• Game history, including games played, wagers placed, and outcomes
• Session duration and frequency of play
• Bonus and promotion usage history
• Responsible gaming tool settings and self-exclusion records

2.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Pages visited, links clicked, and time spent on the Platform
• Referral source and marketing attribution data
• Cookie identifiers and session tokens

2.5 Communications Data

• Records of communications with phbonus customer support
• Feedback, survey responses, and complaint records
• Email and in-platform message history

2.6 Data Collected from Third Parties

In some cases, phbonus may receive personal data about you from third parties, including identity verification service providers, payment processors, fraud prevention agencies, and marketing partners. Such data is handled in accordance with this Policy and the applicable data sharing agreements in place with those third parties.

3. How We Use Your Data

phbonus uses the personal data we collect for the following purposes:

phbonus will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable law.

4. Legal Basis for Processing

phbonus processes your personal data on the following legal bases as recognized under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and phbonus, including account management, payment processing, and the delivery of gaming services.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering obligations, KYC requirements, and regulatory reporting to PAGCOR and other competent authorities.
• Legitimate Interests: Processing is necessary for the legitimate interests of phbonus, including fraud prevention, platform security, and business analytics, provided such interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities, such as direct marketing communications and the use of non-essential cookies, phbonus relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Data Sharing & Disclosure

phbonus does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

5.1 Service Providers

phbonus engages trusted third-party service providers to assist in the operation of the Platform. These include identity verification and KYC providers, payment processors (including GCash, PayMaya, BPI, BDO, and Metrobank), IT infrastructure and hosting providers, customer support platform operators, and fraud detection and cybersecurity firms. All service providers are contractually bound to process your data only on phbonus's instructions and in accordance with applicable data protection law.

5.2 Regulatory & Law Enforcement Authorities

phbonus may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or other competent Philippine government authorities where required by law, court order, or regulatory directive. Such disclosures are made in strict compliance with applicable legal requirements and only to the extent necessary.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of phbonus's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. phbonus will notify affected players of any such transfer and ensure that the receiving entity is bound by privacy obligations no less protective than those set out in this Policy.

5.4 With Your Consent

phbonus may share your personal data with other third parties where you have provided your explicit prior consent to such sharing. You may withdraw this consent at any time by contacting our support team, though withdrawal will not affect any sharing that occurred prior to your request.

6. Cookies & Tracking Technologies

phbonus uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver relevant content. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain executable code and cannot access other data stored on your device.

6.1 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the Platform to function correctly. They enable core features such as account login, session management, and security. These cookies cannot be disabled without affecting Platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymized information about how players use the Platform, such as which pages are visited most frequently and whether error messages are received. This data helps phbonus improve the Platform's performance and user experience.
• Functional Cookies: These cookies remember your preferences and settings, such as your preferred language and display options, to provide a more personalized experience on phbonus.
• Marketing Cookies: With your consent, these cookies track your browsing activity to help phbonus deliver relevant promotional content. You may opt out of marketing cookies at any time through your browser settings.

6.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set preferences for specific websites. Please note that disabling certain cookies may affect the functionality of the phbonus Platform and your ability to access some features.

7. Data Retention

phbonus retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, phbonus will securely delete or anonymize your personal data in accordance with its data disposal procedures. Where data is anonymized rather than deleted, the resulting anonymized data may be retained indefinitely for statistical and analytical purposes, as it can no longer be linked to any individual.

8. Your Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phbonus. phbonus is committed to facilitating the exercise of these rights in a timely and transparent manner.

8.1 Right to Be Informed

You have the right to be informed of how your personal data is being collected and processed. This Privacy Policy serves as phbonus's primary means of fulfilling this obligation. We will notify you of any material changes to this Policy.

8.2 Right to Access

You have the right to request a copy of the personal data phbonus holds about you, along with information about how it is being processed. Requests will be fulfilled within a reasonable timeframe, subject to identity verification.

8.3 Right to Rectification

If any personal data phbonus holds about you is inaccurate, incomplete, or outdated, you have the right to request that it be corrected. You may update certain account details directly through your phbonus account settings, or contact our support team for assistance.

8.4 Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to phbonus's legal and regulatory retention obligations, which may require us to retain certain data even after an account is closed.

8.5 Right to Data Portability

Where technically feasible, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller.

8.6 Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though phbonus may continue processing where it can demonstrate compelling legitimate grounds that override your interests.

8.7 Right to Lodge a Complaint

If you believe that phbonus has not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Contact details for the NPC are available on their official government website.

9. Data Security

phbonus takes the security of your personal data seriously and implements a comprehensive set of technical and organizational measures to protect it against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• Encryption: All data transmitted between your device and the phbonus Platform is encrypted using Transport Layer Security (TLS) technology. Sensitive data stored in our systems, including passwords and financial information, is encrypted at rest using industry-standard algorithms.
• Access Controls: Access to personal data within phbonus is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Firewalls & Intrusion Detection: phbonus employs enterprise-grade firewalls, intrusion detection systems, and continuous security monitoring to protect our infrastructure from external threats.
• Regular Security Audits: Our systems and processes are subject to regular internal and third-party security audits and penetration testing to identify and remediate vulnerabilities.
• Incident Response: phbonus maintains a documented data breach response plan. In the event of a breach affecting your personal data, we will notify you and the National Privacy Commission within the timeframes prescribed by Philippine law.

While phbonus takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are also responsible for maintaining the security of your account credentials and should notify us immediately if you suspect any unauthorized access to your account.

10. Children's Privacy

The phbonus Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. phbonus does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the registration and KYC process to enforce this requirement.

If phbonus becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. Any winnings or balances associated with an underage account will be forfeited.

Parents and guardians are encouraged to use parental control software and to monitor their children's online activities to prevent access to online gambling platforms. If you believe a minor has registered on phbonus, please contact our support team immediately so we can investigate and take appropriate action.

11. Third-Party Links

The phbonus Platform may contain links to third-party websites or services for informational or operational purposes. phbonus is not responsible for the privacy practices or content of any third-party websites. This Privacy Policy applies solely to data collected by phbonus through the Platform.

We encourage you to review the privacy policies of any third-party websites you visit. phbonus has no control over and assumes no responsibility for the content, privacy policies, or practices of any third-party sites or services accessed through links on the Platform.

12. Policy Updates & Contact

12.1 Updates to This Policy

phbonus reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. When material changes are made, we will notify registered players via email or through a prominent notice on the Platform. The "Last Updated" date at the top of this page will be revised accordingly.

We encourage you to review this Policy periodically to stay informed about how phbonus protects your personal data. Your continued use of the Platform following the posting of an updated Policy constitutes your acceptance of the changes.

12.2 Data Protection Officer

phbonus has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection laws. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, you may contact our DPO at:

Email: [email protected]

Our support team is available 24 hours a day, 7 days a week. We aim to acknowledge all privacy-related inquiries within 48 hours and to resolve them within 30 calendar days. For complex requests, we may require additional time and will keep you informed of the expected resolution timeline.