phlbest Privacy Policy

1. Introduction

phlbest is committed to protecting the privacy and personal data of every player on our platform. We understand that Filipino players trust us with sensitive personal and financial information, and we take that responsibility seriously. This Privacy Policy sets out in clear terms what data we collect, why we collect it, how long we keep it, who we share it with, and what rights you have over your own information.

This Policy applies to all personal data collected through the phlbest website at phlbest.xyz, our mobile platform, customer support channels, and any other services operated by phlbest. It should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of your overall agreement with phlbest.

If you have any questions about how phlbest handles your personal data, or if you wish to exercise any of your rights under Philippine law, please contact our Data Protection Officer using the details provided in Section 15 of this Policy.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, phlbest is the personal information controller responsible for the personal data collected through the phlbest platform. phlbest operates under PAGCOR regulation in the Republic of the Philippines.

phlbest has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. You may contact the DPO at any time using the contact details set out in Section 15 of this Policy.

3. Personal Data We Collect

phlbest collects the following categories of personal data from players and platform users. We collect only what is necessary for the purposes described in this Policy.

4. How We Collect Your Data

phlbest collects personal data through the following means:

4.1 Direct Collection

Most of the personal data phlbest holds is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion. You are responsible for ensuring that the information you provide is accurate and up to date.

4.2 Automated Collection

When you use the phlbest platform, we automatically collect certain technical and usage data through cookies, web beacons, log files, and similar tracking technologies. This includes your IP address, device identifiers, browser type, and your activity on the platform. Please refer to Section 10 of this Policy for more information about our use of cookies.

4.3 Third-Party Sources

In some cases, phlbest may receive personal data about you from third parties, including identity verification providers, payment processors (such as GCash and PayMaya), fraud prevention services, and PAGCOR or other regulatory authorities. Data received from third parties is handled in accordance with this Privacy Policy.

5. How We Use Your Personal Data

phlbest uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your phlbest player account, including processing your registration and verifying your identity.
• Transaction Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels in Philippine Peso (PHP).
• KYC and Age Verification: To verify that you meet the minimum age requirement of 21 years and to comply with PAGCOR's Know Your Customer requirements.
• Regulatory Compliance: To comply with our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and other applicable Philippine laws.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the platform.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance through our 24/7 Filipino support team.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer self-exclusion, deposit limits, and other responsible gaming tools.
• Platform Improvement: To analyze usage patterns and improve the performance, features, and user experience of the phlbest platform.
• Marketing Communications: To send you promotional offers, bonuses, and news about phlbest — but only where you have given your explicit consent to receive such communications. You may withdraw consent at any time.

6. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, phlbest processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your phlbest account, process transactions, and provide gaming services.
• Legal Obligation: Processing is required to comply with our legal and regulatory obligations under PAGCOR regulations, AMLA, and other applicable Philippine laws.
• Legitimate Interests: Processing is necessary for phlbest's legitimate interests, including fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your rights.
• Consent: For marketing communications and non-essential cookies, processing is based on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing and Disclosure

phlbest does not sell, rent, or trade your personal data to third-party marketers under any circumstances. We may share your personal data with the following categories of recipients only where necessary and in accordance with this Policy:

7.1 Service Providers

phlbest works with trusted third-party service providers who process personal data on our behalf, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, cloud hosting providers, and customer support platform operators. All service providers are contractually bound to process data only on phlbest's instructions and to maintain appropriate security standards.

7.2 Regulatory and Law Enforcement Authorities

phlbest may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or other competent authorities where required by law, court order, or regulatory instruction. Such disclosures are made only to the extent required and in accordance with applicable legal procedures.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of phlbest's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it.

8. Data Retention

phlbest retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in accordance with PAGCOR and AMLA requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required under the Anti-Money Laundering Act.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Marketing Preferences: Retained until you withdraw consent or request deletion, whichever is earlier.
• Technical and Usage Data: Retained for up to twelve (12) months from collection, unless required for longer periods for security or fraud investigation purposes.

When personal data is no longer required, phlbest will securely delete or anonymize it in accordance with industry best practices and applicable regulatory guidance.

9. Data Security

phlbest implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phlbest platform.
• Encryption of sensitive data at rest, including financial information and government ID data.
• Role-based access controls ensuring that only authorized phlbest personnel can access personal data, and only to the extent required for their role.
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent security specialists.
• Multi-factor authentication options for player accounts to prevent unauthorized access.
• Continuous monitoring of platform activity for suspicious behavior and potential security incidents.
• Staff training on data protection and information security best practices.

10. Cookies and Tracking Technologies

phlbest uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the platform. Cookies are small text files stored on your device when you visit phlbest.xyz. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and display options to provide a more personalized experience.
• Analytics Cookies: Help us understand how players use the platform by collecting aggregated, anonymized usage data. This information is used to improve platform performance and user experience.
• Marketing Cookies: Used only where you have given explicit consent, to deliver relevant promotional content within the phlbest platform.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the phlbest platform. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.

11. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phlbest:

• Right to be Informed: You have the right to be informed about how your personal data is collected and processed. This Privacy Policy fulfills that obligation.
• Right of Access: You have the right to request a copy of the personal data phlbest holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15. phlbest will respond to all data subject requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, and you will be notified accordingly.

12. Children and Minors

The phlbest platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. phlbest does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If phlbest becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the personal data in question, and return any deposits made, in accordance with applicable regulations. If you believe that a minor has registered an account on phlbest, please contact us immediately using the details in Section 15.

phlbest encourages parents and guardians to make use of parental control software to prevent minors from accessing online gaming platforms. For more information on responsible gaming tools available on phlbest, please visit our Responsible Gaming page.

13. International Data Transfers

phlbest primarily processes and stores personal data within the Republic of the Philippines. In some cases, personal data may be transferred to and processed by service providers located outside the Philippines — for example, cloud infrastructure providers or identity verification services operating internationally.

Where personal data is transferred outside the Philippines, phlbest ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under Philippine law. These safeguards may include contractual data processing agreements, standard contractual clauses, or transfers to countries recognized as providing adequate data protection.

By using the phlbest platform, you acknowledge and consent to the transfer of your personal data to service providers outside the Philippines where necessary for the operation of the platform, subject to the safeguards described above.

14. Changes to This Privacy Policy

phlbest reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The effective date of the current version is displayed at the top of this page.

Where changes to this Policy are material, phlbest will notify registered players by email or through a prominent notice on the platform prior to the changes taking effect. We encourage you to review this Privacy Policy periodically to stay informed about how phlbest protects your personal data.

Your continued use of the phlbest platform following any update to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you must cease using the platform and may request account closure in accordance with our Terms & Conditions.

15. Contact Us and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way phlbest handles your personal data, please contact our Data Protection Officer. Our Filipino support team is available 24 hours a day, 7 days a week.

You can reach us via live chat directly from the phlbest platform, or by email at [email protected]. We aim to acknowledge all privacy-related inquiries within 24 hours and to provide a full response within 30 days.

For general customer support inquiries unrelated to data privacy, please contact us at [email protected] or through the live chat feature on the phlbest platform.