28PhBet Privacy Policy – How We Protect Your Personal Data

28PhBet is an online gaming platform operating in the Philippines, offering sports betting, live casino games, e-Sabong, and a range of locally loved card and casino games. For the purposes of the Philippine Data Privacy Act of 2012, 28PhBet acts as the Personal Information Controller — meaning we determine why and how your personal data is processed.

Our registered contact for data privacy matters is our Data Protection Officer (DPO), reachable at privacy@28phbet.com. If you have any concerns about how 28PhBet handles your personal data, your first point of contact should be our DPO. We are committed to resolving all data privacy inquiries within 15 business days.

28PhBet collects personal data that is necessary to provide you with a safe, functional, and legally compliant gaming service. We do not collect more information than we need. The categories of data we collect include:

28PhBet collects your personal data through several channels, all of which are clearly defined below. We never obtain personal data without a legitimate reason, and we aim to collect it in a way that is transparent and respectful.

• Direct from you: When you register a 28PhBet account, complete identity verification, make a deposit or withdrawal, contact support, or respond to a promotion.
• Automatically during platform use: Technical data such as your IP address, device information, and session activity is captured automatically when you access 28PhBet. This is necessary for security and platform performance.
• From payment providers: When you deposit or withdraw via GCash, Maya, or a Philippine bank, 28PhBet receives transaction reference data from the payment provider to confirm and process your transaction.
• From identity verification services: 28PhBet uses third-party KYC (Know Your Customer) services to verify government IDs. These providers share the outcome of verification checks with 28PhBet but do not give us copies of your ID documents for ongoing storage beyond regulatory retention requirements.
• From cookies and similar technologies: Our website uses cookies to manage sessions, remember preferences, and gather analytics. See Section 7 for full details.

28PhBet processes your personal data only for clear, specific purposes. We do not use your data for anything beyond what is described in this Privacy Policy. Our key purposes are:

• Account creation and management: Registering your account, verifying your identity, managing your profile, and maintaining the security of your 28PhBet account.
• Payment processing: Crediting deposits, processing withdrawal requests, and verifying that all transactions are authorised by the account holder.
• Providing gaming services: Running the games and betting products you use on 28PhBet, calculating and settling winnings, and maintaining game records.
• Regulatory compliance: Verifying your age and identity as required by law, complying with Anti-Money Laundering (AML) obligations, and reporting to relevant Philippine authorities where legally required.
• Responsible gaming: Monitoring gaming behaviour to identify players who may need support and enforcing limits, exclusions, or interventions in line with our responsible gaming policy.
• Customer support: Responding to your inquiries, resolving disputes, and maintaining records of communications for quality assurance.
• Security and fraud prevention: Detecting and preventing unauthorized account access, payment fraud, bonus abuse, and other prohibited activities.
• Marketing (with consent): Sending you promotional emails, SMS notifications, and offers relevant to your 28PhBet activity — but only if you have opted in. You can opt out at any time.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, design, and features of 28PhBet.

Under the Philippine Data Privacy Act of 2012, 28PhBet must have a lawful basis for processing personal data. The legal grounds we rely on are:

• Contract performance: Processing necessary to fulfil our obligations under the 28PhBet Terms and Conditions — including running games, processing payments, and managing your account.
• Legal obligation: Processing required to comply with Philippine law — including AML obligations, KYC requirements, and regulatory reporting.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and responsible gaming interventions — where our interests do not override your privacy rights.
• Consent: For non-essential marketing communications. You may withdraw consent at any time by adjusting your account communication settings or contacting our DPO.

28PhBet does not sell your personal data to any third party, ever. We share data only in the following limited, necessary circumstances:

• Payment processors: GCash, Maya, GrabPay, BDO, BPI, UnionBank, Visa, Mastercard — to facilitate your deposits and withdrawals. These providers operate under their own privacy policies and are bound by financial data protection regulations.
• Identity verification partners: Third-party KYC providers who verify government IDs and confirm player eligibility. They process data on our behalf under binding data processing agreements.
• Game and software providers: Where you play games supplied by third-party providers (e.g., live casino providers), limited technical and gaming data may be shared with those providers to operate the game session. These providers are contractually prohibited from using your data for any other purpose.
• Regulatory and law enforcement authorities: 28PhBet will disclose personal data to competent Philippine authorities when legally required to do so — for example, to comply with AML reporting obligations or a court order.
• Fraud prevention services: Aggregated, pseudonymised data may be shared with fraud prevention networks to protect against account takeover and payment fraud.

28PhBet uses cookies and similar tracking technologies on its platform. A cookie is a small text file stored on your device that helps us recognise you and remember your preferences across sessions.

The types of cookies 28PhBet uses include:

• Essential cookies: Required for the 28PhBet platform to function — managing login sessions, maintaining your wallet balance display, and ensuring page security. These cannot be disabled.
• Performance cookies: Collect anonymised data about how players use 28PhBet — which pages are visited most, where errors occur, and how load times vary. This data helps us improve platform performance.
• Preference cookies: Remember your settings such as language preference, notification settings, and display customisations.
• Analytics cookies: Used by 28PhBet's internal analytics tools to understand aggregate player behaviour — always in anonymised, aggregated form.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from logging in to 28PhBet. 28PhBet does not use third-party advertising cookies or share cookie data with advertising networks.

28PhBet retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by Philippine law. Our general retention periods are:

• Account data: Retained for the duration of your account plus 5 years after account closure, as required by AML regulations.
• Transaction and financial records: Retained for a minimum of 5 years from the date of the transaction, in line with Philippine financial record-keeping requirements.
• Identity verification documents: Retained for the period your account is active plus 5 years. Copies are stored in encrypted format with access restricted to compliance personnel.
• Gaming activity records: Retained for 5 years from the date of each session, to support dispute resolution and regulatory audit.
• Support communications: Retained for 3 years from the date of the last communication.
• Marketing data (where consented): Retained until you withdraw consent or for 2 years of inactivity, whichever comes first.

Once the applicable retention period expires, 28PhBet permanently deletes or anonymises your personal data in a secure manner.

Data security at 28PhBet is treated as a core operational priority — the same way game fairness and payout reliability are. We apply multiple layers of technical and organisational security measures to protect your personal information:

• Encryption in transit: All data transmitted between your device and 28PhBet servers is encrypted using industry-standard TLS (Transport Layer Security) protocols. You can verify this by the padlock icon in your browser address bar.
• Encryption at rest: Personal and financial data stored on 28PhBet servers is encrypted at rest using AES-256 encryption.
• Access controls: 28PhBet staff access to personal data is strictly need-to-know. Access is granted based on job function, logged, and regularly audited. Former employees' access is revoked immediately upon departure.
• Two-factor authentication (2FA): 28PhBet strongly recommends enabling 2FA on your account. Internal systems handling player data require multi-factor authentication for all staff access.
• Regular security testing: 28PhBet conducts regular penetration tests and vulnerability assessments on its platform and infrastructure.
• Incident response: In the unlikely event of a data breach that poses a risk to your rights and freedoms, 28PhBet will notify affected players and the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required by the Philippine Data Privacy Act.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 28PhBet. We are committed to honouring these rights promptly and without unnecessary barriers.

To exercise any of your data rights, contact our Data Protection Officer at privacy@28phbet.com. We will not charge a fee for reasonable requests and will respond within 15 business days.

28PhBet is strictly an adults-only platform. We do not knowingly collect personal data from individuals under 21 years of age. Our registration process includes age verification, and we reserve the right to request documentary proof of age at any time.

If 28PhBet discovers or is notified that it has inadvertently collected personal data from a person under 21, that account will be immediately suspended, the data will be deleted, and any funds held in that account will be returned to the depositing payment method after verification.

If you believe a minor has registered a 28PhBet account, please contact us immediately at privacy@28phbet.com or support@28phbet.com. We take such reports very seriously and will act promptly.

28PhBet's primary data infrastructure is located in the Philippines. In some cases — particularly for live casino game provision and international payment processing — your data may be processed by service providers operating outside the Philippines.

When this occurs, 28PhBet ensures that appropriate data transfer safeguards are in place. These include:

• Binding contractual clauses requiring the receiving party to apply data protection standards consistent with or exceeding those required under the Philippine DPA.
• Transferring only the minimum data necessary for the specific service purpose.
• Regular reviews of third-party processors' data protection practices.

28PhBet will never transfer your personal data to any jurisdiction or party where we cannot adequately verify that your privacy rights will be protected.

28PhBet may update this Privacy Policy from time to time to reflect changes in our data practices, new services, or updates to Philippine data protection law. When we make material changes — those that meaningfully affect how we collect or use your data — we will notify you at least 7 days in advance via the email address registered to your account or through a prominent in-platform notification.

The "Last Updated" date at the top of this policy always reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically. If you disagree with any material change, you have the right to close your 28PhBet account — contact support@28phbet.com for assistance.

For any questions, concerns, or requests relating to your personal data and its handling by 28PhBet, please contact our designated Data Protection Officer. We are committed to clear, timely, and helpful responses to all data privacy enquiries.

We aim to respond to all privacy enquiries within 15 business days. For urgent matters — such as suspected unauthorized access to your account — please use the live chat feature within the 28PhBet platform for the fastest response.