phbeast Privacy Policy — Your Data, Your Rights, Our Commitment

1 Introduction

This Privacy Policy ("Policy") describes how phbeast ("we," "us," "our," or "the Platform") collects, uses, stores, shares, and protects the personal information of individuals ("you," "your," or "the Player") who access or use the phbeast website at phbeast.net and all associated services.

phbeast is committed to protecting your personal data and respecting your privacy in accordance with the Republic Act No. 10173, known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission ("NPC").

By registering a phbeast account or using any phbeast service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the phbeast platform.

2 Who We Are

For the purposes of this Privacy Policy, phbeast is the personal information controller responsible for your personal data. We operate the phbeast online casino and sports betting platform accessible at phbeast.net, providing gaming services including but not limited to online slots, bingo, fishing games, live casino, and sports betting to eligible players in the Philippines.

phbeast has appointed a Data Protection Officer ("DPO") to oversee compliance with Philippine data privacy laws and to serve as the point of contact for all data subject requests and privacy-related inquiries. Contact details for the DPO are provided in Section 14 of this Policy.

3 Personal Data We Collect

phbeast collects the following categories of personal data, limited to what is necessary for the purposes described in this Policy:

3.1 Identity and Contact Data

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Residential address, including barangay, city/municipality, and province
• Email address
• Mobile number
• Nationality and country of residence

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., Philippine passport, driver's license, SSS ID, UMID, PhilSys National ID)
• Proof of address documents (e.g., utility bills, bank statements)
• Selfie photographs submitted for liveness verification purposes
• Source of funds declarations where required by anti-money laundering regulations

3.3 Financial and Payment Data

• GCash or PayMaya account details (mobile number registered to the e-wallet)
• Bank account details for BPI, BDO, Metrobank, or other approved PH banks used for transactions
• Deposit and withdrawal transaction history
• Payment card details where applicable (stored in tokenized form only; full card numbers are never stored by phbeast)

3.4 Gaming and Account Activity Data

• Game play history, including games played, wagers placed, outcomes, and session durations
• Account balance history, bonus redemptions, and promotion participation records
• Responsible gaming preferences including deposit limits, session reminders, and self-exclusion status
• Customer support correspondence and complaint records

3.5 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type and version
• Unique device identifiers
• Pages visited, features used, and time spent on the phbeast platform
• Cookie and similar tracking technology data (see Section 8)

4 How We Collect Your Personal Data

phbeast collects personal data through the following means:

• Directly from you: Information you provide when registering your account, completing KYC verification, making deposits or withdrawals, participating in promotions, contacting customer support, or completing any form on the phbeast platform.
• Automatically through your use of the platform: Technical and device data collected via cookies, log files, and similar tracking technologies when you access and navigate the phbeast website or application.
• From third-party service providers: Identity verification data from our KYC/AML service partners; payment confirmation data from payment processors including GCash, PayMaya, and partner banks; fraud prevention signals from security service providers.
• From publicly available sources: Information from public registries or databases consulted as part of our anti-money laundering due diligence obligations under Philippine law.

5 How We Use Your Personal Data

phbeast uses your personal data for the following purposes:

Purpose	Data Used
Account registration and management	Identity, contact, and KYC data
Age verification (21+ requirement)	Date of birth, government ID
Processing deposits and withdrawals	Financial and payment data
Fraud prevention and security	Technical, financial, and identity data
Anti-money laundering compliance	Identity, financial, and KYC data
Customer support and dispute resolution	Identity, account activity, and correspondence data
Responsible gaming monitoring	Gaming activity and account data
Platform improvement and analytics	Technical and gaming activity data (aggregated/anonymized)
Promotional communications (with consent)	Contact data and gaming preferences

6 Legal Basis for Processing

Under the Data Privacy Act of 2012, phbeast processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and phbeast — including account management, game provision, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws, including anti-money laundering obligations under Republic Act No. 9160 (as amended), PAGCOR regulatory requirements, and tax reporting obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interests are not overridden by your rights.
• Consent: Processing for optional marketing communications and non-essential cookies, which you may withdraw at any time without affecting your ability to use the phbeast platform.

7 Sharing Your Personal Data

phbeast does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances and only with parties who are contractually bound to protect it:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, and other approved payment partners receive the minimum data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party service providers who assist with document verification and liveness checks as part of our KYC obligations. These providers process data under strict data processing agreements with phbeast.
• Fraud prevention and security providers: Specialist service providers who help phbeast detect and prevent fraudulent activity, account takeover attempts, and bonus abuse.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and other Philippine government authorities, where disclosure is required by law or regulatory mandate.
• Law enforcement: Philippine law enforcement agencies where phbeast is required to disclose data by valid legal process, court order, or where disclosure is necessary to prevent or investigate suspected criminal activity.
• Professional advisers: Legal counsel, auditors, and other professional advisers retained by phbeast, subject to professional confidentiality obligations.

8 Cookies & Tracking Technologies

phbeast uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit the phbeast website. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the operation of the phbeast platform, including maintaining your login session and enabling core security features. These cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences such as language settings, notification preferences, and responsible gaming tool configurations.
• Analytics cookies: Help us understand how players use the phbeast platform so we can improve performance and user experience. Data collected is aggregated and does not identify you personally.
• Marketing cookies: Used only with your explicit consent to deliver relevant promotional information about phbeast features. You may withdraw consent for marketing cookies at any time through your account settings.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent certain platform features from functioning correctly.

9 Data Retention

phbeast retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, in compliance with anti-money laundering record-keeping requirements under RA 9160.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Customer support correspondence: Retained for three (3) years from the date of the last correspondence.
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter as evidence of consent management.
• Technical and device logs: Retained for twelve (12) months from the date of collection, unless retained longer as part of a security investigation.

Upon expiry of the applicable retention period, phbeast will securely delete or anonymize your personal data in a manner that prevents recovery or reconstruction of the original information.

10 Data Security

phbeast implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and phbeast servers.
• Encryption of sensitive data at rest, including payment details and government ID copies.
• Strict role-based access controls ensuring that phbeast staff can access personal data only on a need-to-know basis relevant to their job function.
• Multi-factor authentication requirements for all phbeast internal systems that process personal data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Continuous monitoring of platform infrastructure for suspicious activity or unauthorized access attempts.
• Regular staff training on data privacy obligations and secure data handling practices.

Despite these measures, no online platform can guarantee absolute security. phbeast encourages players to use strong, unique passwords for their accounts and to enable any additional account security features available in the phbeast platform settings.

11 Your Data Subject Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by phbeast:

To exercise any of the above rights, please submit a written request to phbeast's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." phbeast will acknowledge your request within 3 business days and will fulfill it within 30 calendar days of receipt, or notify you if an extension is required under applicable law.

phbeast will not charge a fee for data subject rights requests unless the request is manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may apply.

12 Children's and Underage Players' Privacy

phbeast is strictly an adult platform. We do not knowingly collect personal data from any person under the age of 21. Our registration process includes age verification steps designed to prevent underage individuals from creating accounts.

If phbeast becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to close the account, delete the data, and return any deposited funds to the payment source, subject to identity verification of the legal guardian or parent where applicable.

If you are a parent or guardian and believe that your child under the age of 21 has registered a phbeast account, please contact our Data Protection Officer immediately at [email protected].

13 Changes to This Privacy Policy

phbeast reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, phbeast will:

• Publish the revised Privacy Policy on the phbeast website with an updated effective date at the top of this page.
• Send a notification to the email address registered to your account at least 7 days before material changes take effect.
• Where required by law, seek fresh consent from you before implementing changes that affect the legal basis or purposes for which your data is processed.

Your continued use of the phbeast platform after the effective date of a revised Privacy Policy constitutes your acknowledgment of the updated terms. We recommend checking this page periodically so you are always aware of how phbeast handles your personal information.

14 Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phbeast, please contact our Data Protection Officer:

• Email: [email protected] — Please use the subject line "Privacy Policy Inquiry" or "Data Subject Rights Request" as appropriate.
• Response time: phbeast's DPO acknowledges all privacy-related emails within 3 business days and provides a substantive response within 30 calendar days.

If you are not satisfied with phbeast's response to your privacy inquiry, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) through their official channels.