phbrt Privacy Policy

1. Overview & Scope

phbrt ("we," "us," "our," "the Platform") respects your right to privacy and is committed to handling your personal data with transparency, integrity, and in full compliance with Philippine data protection law. This Privacy Policy applies to all personal information collected, processed, stored, and shared by phbrt in connection with your registration, access to, and use of the phbrt online gaming platform accessible at phbrt.net, including all associated games, features, promotions, customer support interactions, and payment processing activities.

This Policy applies to all registered Players and visitors to the phbrt website, regardless of the device or channel through which access is made. By registering an account or otherwise using the phbrt platform, you acknowledge that you have read, understood, and consented to the collection and processing of your personal data as described in this Privacy Policy.

This Policy should be read together with the phbrt Terms and Conditions and the Responsible Gaming Policy, both of which are available on this website. Where any conflict arises between this Policy and those documents in relation to the handling of personal data, this Privacy Policy shall prevail.

2. Data Controller Details

For the purposes of the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, phbrt is the personal information controller in respect of all personal data collected through the phbrt platform. phbrt operates in accordance with Philippine gaming regulations and processes personal data solely for the lawful purposes described in this Policy.

phbrt has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and with applicable Philippine data protection law. Contact details for the phbrt DPO are set out in Section 14 of this Policy. Players who have questions, concerns, or requests relating to their personal data may direct these to the DPO at any time.

3. Personal Data We Collect

phbrt collects personal data through several channels, including the registration process, account activity, payment transactions, customer support interactions, and your general use of the platform. The categories of personal data we collect are set out in the table below.

Category	Examples	Collection Method
Identity Data	Full legal name, date of birth, gender, government-issued ID details	Registration form; KYC verification
Contact Data	Email address, mobile number, residential address (barangay, city, province)	Registration form; account settings
Financial Data	GCash / Maya account reference, BPI / BDO / Metrobank account details (masked), transaction history, deposit and withdrawal records	Payment processor integration
Gaming Activity Data	Game session logs, bet history, win/loss records, bonus redemptions, game preferences	Platform activity logs
Technical Data	IP address, device type, browser type, operating system, session duration, login timestamps	Cookies; server logs
Communications Data	Live chat transcripts, support ticket content, email correspondence, survey responses	Customer support channels
KYC Documents	Scanned or photographed copies of Philippine passport, SSS ID, UMID, driver's license, PhilSys National ID, proof of address	KYC verification upload

3.1 Data You Provide Voluntarily

The majority of personal data phbrt holds about you is information you provide directly during registration, KYC submission, payment processing, or when contacting our support team. Providing accurate and complete data is a condition of account registration, and submission of false information is a breach of the phbrt Terms and Conditions.

3.2 Data Collected Automatically

When you access the phbrt platform, certain technical data is collected automatically through cookies, server logs, and similar technologies. This includes your IP address, device identifiers, browser configuration, and session data. This data is used primarily for platform security, fraud prevention, and service improvement purposes, as further described in Section 7 of this Policy.

4. How We Use Your Personal Data

phbrt processes your personal data only for specified, explicit, and legitimate purposes. We do not use your data in any manner incompatible with the purposes for which it was originally collected. The primary purposes for which phbrt processes personal data are as follows:

• Account Registration and Management: To create, verify, and maintain your phbrt player account, including KYC age and identity verification to confirm you meet the 21+ eligibility requirement.
• Service Delivery: To provide access to the full range of phbrt games and features, including slots, live casino, bingo, rummy, wheel, and sports betting.
• Payment Processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and other approved Philippine payment channels, and to maintain accurate transaction records.
• Legal and Regulatory Compliance: To fulfill obligations under Philippine gaming law, Anti-Money Laundering Act (RA 9160), and the Data Privacy Act of 2012 (RA 10173), including the reporting of covered and suspicious transactions to the AMLC.
• Fraud Prevention and Platform Security: To detect, investigate, and prevent fraudulent activity, account abuse, multi-accounting, unauthorized access, and other security threats.
• Customer Support: To respond to inquiries, resolve disputes, process complaints, and provide assistance through live chat and email support channels.
• Responsible Gaming: To monitor gaming patterns for indicators of problem gambling behavior and to administer deposit limits, self-exclusion requests, and other responsible gaming tools at the Player's request.
• Marketing and Promotions: To send you information about phbrt promotions, bonuses, and new game releases where you have provided consent to receive marketing communications. You may withdraw this consent at any time through your account settings.
• Platform Improvement: To analyze aggregated usage patterns, optimize game performance, and improve the overall phbrt user experience.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, phbrt processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and phbrt — i.e., to operate your account and deliver gaming services — is conducted on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with Philippine law, including KYC verification, AML transaction monitoring and reporting, and responsible gaming compliance, is conducted on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement is conducted on the basis of phbrt's legitimate interests, where those interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications is conducted on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Data Sharing & Third-Party Disclosure

phbrt does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the relevant purpose.

6.1 Service Providers

phbrt engages trusted third-party service providers to assist in delivering the platform's services. These include payment processors (GCash, Maya, BPI, BDO, Metrobank), KYC verification technology providers, live dealer game studio operators, cloud hosting infrastructure providers, and customer support platform operators. All service providers are contractually bound to process personal data only on phbrt's instructions and in accordance with applicable data protection law.

6.2 Regulatory and Law Enforcement Disclosure

phbrt is required by Philippine law to disclose personal and transaction data to PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent government authorities in specified circumstances. This includes the mandatory reporting of covered transactions (single transactions of PHP 500,000 or above) and suspicious transactions under the Anti-Money Laundering Act. phbrt will also comply with valid court orders, subpoenas, and other lawful requests from Philippine law enforcement agencies.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial part of phbrt's business assets, personal data held by phbrt may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and the applicable privacy terms of the successor entity in advance of the transfer taking effect.

7. Cookies & Tracking Technologies

The phbrt platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalized gaming experience. Cookies are small text files stored on your device when you visit the phbrt website. The following categories of cookies are used on the phbrt platform:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and responsible gaming tool configurations set within your account.
• Analytics Cookies: Used to collect aggregated, anonymized data about how Players use the phbrt platform, including which games are most popular and where users experience navigation difficulties. This data is used solely to improve the platform.
• Security Cookies: Used to detect and prevent fraudulent activity, including multi-accounting, bot access, and unauthorized login attempts.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to log in and use the phbrt platform. phbrt does not use third-party advertising or behavioral tracking cookies.

8. Data Retention

phbrt retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Active Account Data: Retained for the duration of your account registration plus a period of five (5) years following account closure, in accordance with AML record-keeping obligations under RA 9160.
• Transaction Records: Deposit, withdrawal, and gaming transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML law.
• KYC Documents: Retained for the duration of your account plus five (5) years following account closure.
• Customer Support Records: Chat transcripts and email correspondence are retained for three (3) years from the date of the interaction.
• Marketing Consent Records: Records of your marketing consent or withdrawal of consent are retained for five (5) years from the date of the relevant action.
• Technical Logs: Server and access logs are retained for twelve (12) months and are used exclusively for security and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with phbrt's data disposal procedures. Where anonymization is not technically feasible, data is securely destroyed using industry-standard methods.

9. Data Security

phbrt implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security framework includes:

• Encryption: All data transmitted between your device and the phbrt platform is encrypted using TLS 1.2 or higher. Sensitive data stored within our systems, including financial records and KYC documents, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within phbrt's systems is restricted to authorized personnel on a strict need-to-know basis. All access is logged and subject to regular audit.
• Multi-Factor Authentication: phbrt supports and encourages the use of multi-factor authentication (MFA) for player account logins to reduce the risk of unauthorized access.
• Penetration Testing: The phbrt platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: phbrt maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, phbrt will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected Players without undue delay.

10. Your Rights Under the Data Privacy Act

As a data subject under the Data Privacy Act of 2012 (RA 10173), you have the following rights in respect of your personal data held by phbrt. You may exercise any of these rights by contacting our Data Protection Officer as set out in Section 14.

• Right to Be Informed: You have the right to be informed about the collection and processing of your personal data. This Privacy Policy fulfills that right.
• Right of Access: You have the right to request a copy of the personal data phbrt holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. You may update certain data directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to phbrt's legal retention obligations under Philippine law.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to other processing based on legitimate interests where you have grounds relating to your particular situation.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to phbrt in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: If you believe your data protection rights have been violated, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

phbrt will respond to all valid data subject requests within thirty (30) calendar days of receipt. Where a request is complex or involves a high volume of data, phbrt may extend this period by a further thirty (30) days, with prior notification to the requesting Player.

11. Children & Minors

If you are a parent or guardian and have reason to believe that a minor in your care has registered an account with phbrt, please contact our support team immediately at [email protected]. We will investigate and take appropriate action as quickly as possible.

12. International Data Transfers

phbrt's primary data processing infrastructure is located within the Philippines. In certain circumstances, personal data may be processed by phbrt's service providers in other jurisdictions — for example, where cloud infrastructure or live dealer game studio operations are located abroad. Where such transfers occur, phbrt ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under Philippine law.

These safeguards may include contractual data processing agreements incorporating the standard data protection clauses recognized under Philippine regulations, or transfers to jurisdictions recognized as providing an adequate level of data protection. phbrt will not transfer your personal data to any jurisdiction or entity that cannot provide adequate protection for your data rights.

13. Changes to This Privacy Policy

phbrt reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. Where changes are material — meaning they significantly affect how your personal data is processed or your rights as a data subject — phbrt will provide advance notice via email to your registered address and/or a prominent notification on the phbrt platform prior to the changes taking effect.

Minor amendments, such as clarifications, typographical corrections, or updates required for legal compliance, may take effect immediately upon publication. The "Last Reviewed" date at the top of this Policy will always reflect the date of the most recent update. Continued use of the phbrt platform after the effective date of any amendment constitutes your acknowledgment of the revised Policy.

14. Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by phbrt, you may contact our Data Protection Officer directly. Our DPO is responsible for ensuring phbrt's ongoing compliance with the Data Privacy Act of 2012 and is the designated point of contact for all data subject rights requests.

Data Protection Officer — phbrt
Email: [email protected]
Subject line: Data Privacy Request / DPO Inquiry

phbrt aims to acknowledge all data privacy inquiries within forty-eight (48) hours and to provide a substantive response within thirty (30) calendar days. For urgent matters — including suspected data breaches or unauthorized disclosures of your personal information — please contact our support team immediately via the live chat channel on the phbrt platform.

You also have the right to escalate unresolved data protection complaints to the National Privacy Commission (NPC) of the Philippines, the independent body responsible for administering and enforcing the Data Privacy Act of 2012.

This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all previous versions of the phbrt Privacy Policy.