Privacy Policy

1. Introduction

This Privacy Policy ("Policy") explains how phbrt Casino ("phbrt", "we", "us", or "our") collects, uses, discloses, stores, and protects the personal information of users ("you", "your", or "Player") who access our website at https://phbrt.cam or use our online gaming services. This Policy has been prepared in compliance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, and all applicable regulations issued by the National Privacy Commission (NPC).

phbrt is committed to protecting your privacy and ensuring the security of your personal data. We recognize that when you provide us with information about yourself, you trust us to handle it responsibly and in accordance with Philippine law. This Policy describes our data processing practices, your rights as a data subject, and the measures we implement to safeguard your information.

By creating an account with phbrt, accessing our platform, or using any of our services, you acknowledge that you have read, understood, and consent to the data processing practices described in this Privacy Policy. If you do not agree with any aspect of this Policy, you should discontinue use of our services immediately.

2. Information We Collect

2.1 Personal Information Collected During Registration

When you register for a phbrt account, we collect the following personal information:

• Identification Information: Full legal name, date of birth, nationality, and government-issued identification numbers (for identity verification and age verification purposes).
• Contact Information: Email address, mobile phone number, residential address, and postal code.
• Account Credentials: Username and encrypted password for account security.
• Verification Documents: Copies of government-issued identification documents (Philippine passport, driver's license, UMID, postal ID, or other valid IDs) and proof of address documents (utility bills, bank statements) submitted for KYC (Know Your Customer) and AML (Anti-Money Laundering) compliance.

2.2 Financial and Transaction Information

To process deposits, withdrawals, and other financial transactions, phbrt collects:

• Payment Method Details: GCash account information, Maya (PayMaya) account details, bank account numbers for BPI, BDO, Metrobank, UnionBank and other Philippine banks, credit/debit card information (card number, expiration date, CVV), and other payment processor account identifiers.
• Transaction History: Records of all deposits, withdrawals, wagers, wins, losses, and bonus transactions associated with your account.
• Financial Verification Documents: Bank statements, proof of payment method ownership, and source of funds documentation when required for enhanced due diligence.

2.3 Gameplay and Behavioral Data

To provide personalized gaming experiences, ensure fair play, and comply with responsible gaming obligations, we collect:

• Gaming Activity: Games played, bets placed, game outcomes, session duration, play patterns, and gaming preferences.
• Device and Technical Information: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, and unique device identifiers.
• Geolocation Data: Your location data to verify that you are accessing phbrt from within the Philippines, as required by our PAGCOR license and Philippine gaming regulations.
• Session Information: Login timestamps, session duration, pages visited, features used, and navigation patterns on our platform.

2.4 Communications and Support Interactions

When you contact phbrt customer support or communicate with us, we collect:

• Email correspondence, live chat transcripts, and telephone call recordings (with your consent).
• Survey responses, feedback submissions, and complaints filed through our support channels.
• Social media interactions if you contact us through our official social media accounts.

2.5 Cookies and Tracking Technologies

phbrt uses cookies, web beacons, and similar tracking technologies to enhance your user experience. These technologies collect information such as:

• Essential Cookies: Required for basic website functionality, account authentication, and security features.
• Performance Cookies: Used to analyze website performance, identify technical issues, and improve our services.
• Functional Cookies: Remember your preferences, settings, and previously entered information to provide personalized experiences.
• Analytics Cookies: Help us understand how users interact with our platform to optimize user experience and content.

You can control cookie preferences through your browser settings, though disabling certain cookies may limit some functionality of our platform.

3. How We Use Your Information

3.1 Primary Purposes of Data Processing

phbrt processes your personal information for the following legitimate purposes:

Purpose	Description	Legal Basis
Account Creation & Management	Establish your player account, verify your identity, manage account settings, and provide customer support.	Contract performance and legal obligation
Age Verification	Verify that you are at least 21 years old, as required by Philippine law and PAGCOR regulations.	Legal obligation
Transaction Processing	Process deposits, withdrawals, and all financial transactions; detect and prevent fraudulent transactions.	Contract performance and legitimate interest
Gameplay Provision	Provide access to casino games, sports betting, and all gaming services offered by phbrt.	Contract performance
Responsible Gaming	Monitor gameplay patterns to identify problem gambling behaviors; implement deposit limits, session limits, and self-exclusion measures.	Legal obligation and legitimate interest
Regulatory Compliance	Comply with PAGCOR licensing requirements, AML/CTF regulations, tax reporting obligations, and other Philippine legal requirements.	Legal obligation
Security & Fraud Prevention	Detect, investigate, and prevent fraudulent activities, money laundering, underage gambling, account takeovers, and other security threats.	Legal obligation and legitimate interest
Platform Improvement	Analyze user behavior and feedback to improve our website, mobile experience, game selection, and overall service quality.	Legitimate interest
Marketing Communications	Send promotional offers, bonus notifications, newsletters, and other marketing materials (with your consent).	Consent

3.2 Marketing and Promotional Communications

With your explicit consent, phbrt may send you promotional communications including:

• Exclusive bonus offers and deposit match promotions tailored to your gaming preferences.
• Information about new games, features, and platform updates.
• Invitations to special tournaments, competitions, and VIP events.
• Newsletters containing gaming tips, strategy guides, and industry news.

You may opt out of marketing communications at any time by clicking the unsubscribe link in our emails, adjusting your communication preferences in your account settings, or contacting customer support. Please note that even if you opt out of marketing emails, we will still send you essential transactional communications related to your account, deposits, withdrawals, and other service-related matters.

4. Information Sharing and Disclosure

4.1 When We Share Your Information

phbrt does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients under specific circumstances:

Payment Service Providers: We share necessary financial information with GCash, Maya (PayMaya), Philippine banks (BPI, BDO, Metrobank, UnionBank), credit card processors (Visa, Mastercard networks), and other payment service providers to process your deposits and withdrawals. These providers are contractually obligated to protect your information and use it solely for payment processing purposes.

Game Providers and Platform Vendors: We share limited account and gameplay data with third-party game developers and software providers who supply the casino games, live dealer platforms, sports betting systems, and other gaming content on phbrt. This data sharing is necessary to deliver gaming services and maintain game integrity.

Identity Verification Services: We may share identification documents and personal information with third-party KYC (Know Your Customer) and identity verification service providers to verify your identity, age, and address as required by PAGCOR regulations and anti-money laundering laws.

Regulatory Authorities: We are legally obligated to disclose personal information to the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), the National Privacy Commission (NPC), and other Philippine government agencies when required by law or regulation. This includes reporting suspicious transactions, responding to official investigations, and complying with court orders or legal process.

Professional Service Providers: We engage trusted third-party service providers to perform functions on our behalf, including customer support services, data analytics, fraud detection and prevention, cybersecurity services, cloud hosting infrastructure, marketing agencies (only with your consent for marketing), and legal and accounting advisors. These service providers are bound by strict confidentiality agreements and are permitted to use your information only for the specific purposes for which they were engaged.

Corporate Transactions: In the event of a merger, acquisition, corporate restructuring, sale of assets, or similar transaction, your personal information may be transferred to the acquiring or successor entity, subject to the same privacy protections outlined in this Policy.

4.2 International Data Transfers

phbrt primarily stores and processes your personal data within the Philippines. However, some of our service providers and technology partners may be located outside the Philippines, including in jurisdictions that may have different data protection standards. When we transfer personal information internationally, we ensure that appropriate safeguards are in place, such as:

• Data processing agreements incorporating standard contractual clauses approved by the National Privacy Commission.
• Verification that the recipient country provides adequate data protection levels comparable to Philippine standards.
• Implementation of technical and organizational security measures to protect data during transfer and storage.

5. Data Security Measures

phbrt implements comprehensive technical, physical, and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

Encryption Technologies: All data transmitted between your device and our servers is protected using industry-standard 256-bit SSL (Secure Socket Layer) encryption. Sensitive information stored in our databases, including passwords and financial data, is encrypted using advanced cryptographic algorithms.

Access Controls: Access to personal data is restricted on a need-to-know basis using role-based access control (RBAC) systems. Only authorized phbrt employees and contractors who require access to perform their job functions can view personal information, and all access is logged and monitored.

Network Security: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection and prevention systems (IDS/IPS), distributed denial-of-service (DDoS) attack mitigation, and continuous security monitoring to detect and respond to potential threats in real-time.

Security Audits and Testing: We conduct regular security audits, vulnerability assessments, and penetration testing performed by independent third-party security firms to identify and remediate potential weaknesses in our systems. All critical systems undergo annual security certification.

Employee Training: All phbrt employees receive mandatory data privacy and security training and are bound by strict confidentiality agreements. Employees who handle personal data undergo additional specialized training on data protection requirements and incident response procedures.

Incident Response Plan: phbrt maintains a comprehensive data breach response plan to quickly detect, contain, and remediate security incidents. In the event of a personal data breach affecting your information, we will notify you and the National Privacy Commission as required by law, along with details of the incident and steps we are taking to address it.

While we implement robust security measures, please understand that no system is completely impenetrable. We cannot guarantee absolute security of data transmitted over the internet or stored electronically. You also have responsibility for maintaining the security of your account by keeping your password confidential, logging out after each session, and promptly notifying us of any unauthorized access.

6. Data Retention

phbrt retains your personal information only for as long as necessary to fulfill the purposes for which it was collected or as required by Philippine law. Our data retention practices include:

Active Account Data: While your account remains active, we retain all account information, transaction history, and gameplay records to provide continuous service and comply with regulatory requirements.

Closed Account Data: After account closure, we retain certain personal information for a minimum of five (5) years as required by PAGCOR regulations, Anti-Money Laundering Act compliance, and tax reporting obligations. This includes identification documents, transaction records, and account history necessary for regulatory audits and legal proceedings.

Marketing Data: If you consented to receive marketing communications, we retain your contact information until you withdraw consent by unsubscribing. Upon unsubscribing, your information is removed from marketing lists but may be retained in suppression lists to honor your opt-out preference.

Legal Hold: If your account or activities are subject to legal proceedings, regulatory investigations, disputes, or fraud investigations, we may retain relevant information beyond standard retention periods until the matter is fully resolved.

Anonymized Data: After applicable retention periods expire, we may anonymize your personal data (removing all personally identifiable information) for statistical analysis, research, and business intelligence purposes. Anonymized data cannot be traced back to you and is not considered personal information under Philippine law.

7. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal information:

Right to Be Informed: You have the right to be informed about how your personal data is being collected, used, and shared. This Privacy Policy serves as our primary means of providing such information.

Right to Access: You have the right to request access to your personal information held by phbrt, including the right to obtain copies of your data in a commonly used electronic format.

Right to Rectification: If any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request correction or update of such information.

Right to Erasure or Blocking: You have the right to request deletion or blocking of your personal data under certain circumstances, including when the data is no longer necessary for the purposes for which it was collected, you withdraw consent (where processing was based on consent), or the data was unlawfully processed. However, this right is subject to legal and regulatory retention requirements.

Right to Object: You have the right to object to certain types of processing of your personal information, including processing for direct marketing purposes (you can opt out at any time) and processing based on legitimate interests when you have compelling reasons related to your particular situation.

Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit such data to another controller without hindrance from phbrt, where technically feasible.

Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

Right to Lodge a Complaint: If you believe that phbrt has violated your data privacy rights, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.

7.1 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer using the contact information provided in Section 10 of this Policy. We will respond to your request within fifteen (15) days from receipt, as required by NPC regulations. We may request additional information to verify your identity before processing requests that involve access to or disclosure of personal data.

8. Children's Privacy

phbrt Casino services are strictly intended for individuals who are at least 21 years of age or older, in compliance with Philippine gambling laws and PAGCOR regulations. We do not knowingly collect personal information from anyone under the age of 21. All account registration processes include mandatory age verification steps.

If we discover that we have inadvertently collected personal information from a person under 21 years of age, we will immediately delete such information from our systems, close the account, void any transactions or bets, and notify the account holder. If you believe that phbrt has collected information from a minor, please contact us immediately so we can investigate and take appropriate action.

Parents and guardians are encouraged to monitor their children's internet activities and use parental control tools to prevent minors from accessing online gambling sites. phbrt supports efforts to protect minors from gambling harm and maintains strict policies against underage gambling.

9. Changes to This Privacy Policy

phbrt reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this Policy.
• Notify you via email to your registered email address, where the changes are substantial.
• Display a prominent notice on our website homepage alerting users to the updated Policy.
• Request your consent to the updated Policy where required by law, particularly if new processing activities require additional consent.

We encourage you to periodically review this Privacy Policy to stay informed about how we protect your personal information. Your continued use of phbrt services after Policy updates constitutes your acceptance of the revised terms.

10. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us through the following channels:

Data Protection Officer
phbrt Casino
Email: [email protected]
Available: 24 hours a day, 7 days a week

For formal complaints or concerns that cannot be resolved through our customer support channels, you may contact the National Privacy Commission of the Philippines:

National Privacy Commission
5th Floor, Philippine International Convention Center (PICC)
Vicente Sotto Street, Pasay City, Metro Manila, Philippines
Website: www.privacy.gov.ph
Email: [email protected]
Hotline: (+63 2) 8234-2228

phbrt is committed to working cooperatively with data protection authorities and responding promptly to all inquiries regarding our data processing activities.