betbk Privacy Policy

betbk ("we," "us," "our") respects your privacy and is committed to safeguarding the personal information of all users of the betbk platform accessible at betbk.app ("Platform"). This Privacy Policy describes our practices with respect to the collection, use, storage, disclosure, and protection of personal data submitted to or collected by betbk in the course of operating the Platform and providing online gaming services to players in the Philippines.

betbk processes personal data in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), the relevant issuances of the National Privacy Commission (NPC) of the Philippines, and the data governance requirements set by PAGCOR under betbk's Online Gaming Service Provider license.

This policy applies to all personal data collected from players, prospective players, visitors to the betbk Platform, and individuals who communicate with betbk's support team. It does not apply to the privacy practices of third-party game providers, payment processors, or other external services — those entities maintain their own privacy policies, which govern their respective data handling activities.

betbk is the Personal Information Controller (PIC) as defined under the Data Privacy Act of 2012. We determine the purposes and means of processing personal data collected through the betbk Platform. Our registered place of business is in Metro Manila, Philippines.

betbk has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy, the DPA, and the NPC's regulations. Contact details for the betbk DPO are provided in Section 15 of this Policy.

betbk collects personal data necessary for the operation of a PAGCOR-licensed online gaming service. The categories of personal data we collect are described below.

betbk does not intentionally collect sensitive personal information beyond what is necessary for KYC compliance. Government ID numbers collected during verification are treated as sensitive personal information under the DPA and are subject to heightened security controls.

betbk collects personal data through the following means:

• Direct submission: Information you provide during registration, KYC verification, payment processing, responsible gaming tool setup, and customer support interactions;
• Automated collection: Technical data collected automatically when you access the betbk Platform, including device identifiers, IP addresses, session data, and platform interaction logs;
• Cookies and similar technologies: Session cookies, authentication tokens, and analytics data collected through standard browser mechanisms — see Section 10 for full details;
• Third-party payment processors: Transaction reference numbers and payment status information received from GCash, Maya, BPI, BDO, Metrobank, and other payment partners for the purpose of crediting and debiting your betbk Wallet;
• KYC verification partners: Where betbk uses a third-party identity verification service provider to assist with document and liveness checks, the result and confidence score of that verification are shared with betbk — the underlying ID data is processed in accordance with the verification provider's certified security standards;
• PAGCOR-mandated data sharing: betbk may receive data from PAGCOR's national databases, including the national self-exclusion register, for the purpose of access control compliance.

betbk processes your personal data only for legitimate, specified, and declared purposes consistent with our obligations as a PAGCOR-licensed operator. The primary purposes are:

1. Account management: Creating, maintaining, and securing your betbk Account, processing betbk Login authentication, and managing Account recovery;
2. Identity and age verification (KYC): Fulfilling PAGCOR's mandatory KYC requirements and ensuring compliance with the 21+ age restriction under Philippine gaming law;
3. Payment processing: Processing deposits and withdrawals via GCash, Maya, and bank transfer; reconciling your betbk Wallet balance; and maintaining financial records as required by law;
4. Regulatory compliance and AML: Fulfilling betbk's obligations under the Anti-Money Laundering Act (RA 9160, as amended), the PAGCOR license conditions, and related AMLC regulations, including suspicious transaction reporting;
5. Game provision and integrity: Delivering and recording gaming sessions across all betbk verticals — casino, bingo, slots, and sports betting — and investigating disputes or suspected cheating;
6. Customer support: Responding to inquiries, resolving complaints, and managing escalated account issues through betbk's 24/7 Metro Manila support team;
7. Responsible gaming: Administering deposit limits, session controls, self-exclusion requests, and communicating with players who may be at risk of problem gambling;
8. Platform security and fraud prevention: Detecting and preventing unauthorized access, account takeover, bonus abuse, multi-accounting, and other forms of platform misuse;
9. Service improvement and analytics: Analyzing aggregated, anonymized usage patterns to improve betbk's platform performance, game offerings, and user experience;
10. Marketing communications: Sending promotional offers, bonus notifications, and betbk Platform updates to players who have not opted out — subject to consent requirements under the DPA.

Under the Data Privacy Act of 2012, betbk relies on the following legal bases for processing personal data:

• Contractual necessity: Processing required to perform the betbk Terms & Conditions contract — including account creation, payment processing, and game provision;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AMLC regulations, NPC requirements, and other applicable Philippine laws — including mandatory KYC, AML reporting, and self-exclusion enforcement;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics — where such interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and non-essential cookies — where we rely on your freely given, informed consent, which you may withdraw at any time without detriment to your betbk Account.

betbk does not sell, rent, or trade your personal data to third parties for commercial purposes. betbk shares personal data only in the following circumstances and with the following categories of recipients:

7.1 Service Providers (Personal Information Processors)

betbk engages third-party service providers acting as Personal Information Processors under betbk's instruction. These include payment processors (GCash, Maya, BPI, BDO, Metrobank), KYC verification providers, game software providers (JILI, Evolution Gaming, PG Soft, and others), IT infrastructure and cloud service providers, and fraud detection service providers. All such processors are bound by data processing agreements that restrict their use of betbk player data to the specified service delivery purpose.

7.2 Regulatory and Law Enforcement Disclosures

betbk is legally required to disclose personal data to:

• PAGCOR — for license compliance, player complaints, and national self-exclusion register administration;
• The Anti-Money Laundering Council (AMLC) — for covered transaction reports and suspicious transaction reports as required under RA 9160;
• The National Privacy Commission (NPC) — in the event of a personal data breach or upon lawful request;
• Law enforcement agencies and courts — upon receipt of a lawful subpoena, court order, or warrant under Philippine law.

Such disclosures are made to the minimum extent necessary and, where legally permitted, betbk will notify the affected player prior to disclosure.

7.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of betbk's business or assets, personal data held by betbk may be transferred to the successor entity, subject to that entity assuming equivalent data protection obligations. Affected players will be notified of any such transfer and the privacy implications thereof.

betbk retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, betbk will securely delete or anonymize personal data in accordance with NPC-approved disposal procedures. Data subject to an ongoing legal dispute, regulatory investigation, or court order may be retained beyond the standard period until the matter is fully resolved.

betbk implements appropriate organizational and technical security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• Encryption in transit: All data transmitted between your device and betbk's servers is encrypted using TLS 1.3 with 256-bit key strength;
• Encryption at rest: Sensitive personal data, including government ID data and financial identifiers, is stored in encrypted form using AES-256 encryption;
• Access controls: Personal data is accessible only to betbk personnel and processors with a legitimate, role-defined need. Access is authenticated via multi-factor authentication and subject to audit logging;
• Password security: betbk stores only a salted hash of player passwords — plaintext passwords are never stored or transmitted internally;
• Intrusion detection and monitoring: betbk employs continuous monitoring of platform infrastructure for anomalous activity indicative of unauthorized access attempts;
• Vendor security assessments: All third-party processors handling betbk player data are assessed for security compliance before engagement and periodically thereafter;
• Incident response: betbk maintains a documented personal data breach response procedure. In the event of a breach affecting your data, betbk will notify you and the NPC within 72 hours of becoming aware of the breach, as required under the DPA IRR.

betbk uses cookies and similar tracking technologies on the betbk Platform for the following purposes:

10.1 Strictly Necessary Cookies

These cookies are essential for the operation of the betbk Platform. They include session authentication tokens (which keep you logged in during your betbk session), security cookies that detect and prevent unauthorized access, and load-balancing cookies that route your requests to the appropriate server. Strictly necessary cookies cannot be disabled without preventing you from using the Platform — they do not require your consent under the DPA.

10.2 Functional Cookies

Functional cookies remember your preferences — such as your preferred display language, game category, or session time reminder settings — to personalize your betbk experience across sessions. These are set with your implicit consent through use of the Platform.

10.3 Analytics Cookies

betbk uses analytics cookies to collect aggregated, anonymized information about how players use the Platform — including which pages are visited most frequently, where players navigate from, and which features are used. This data is used solely to improve betbk's product. Analytics cookies are set only with your consent, which you may withdraw at any time via your browser settings.

10.4 Managing Cookies

You can control and delete cookies through your browser settings. Disabling certain cookies may affect Platform functionality. Strictly necessary cookies cannot be disabled via browser settings while using the betbk Platform, as they are required for authenticated sessions and security functions.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data processed by betbk. These rights may be exercised by contacting betbk's Data Protection Officer using the details in Section 15.

betbk enforces the 21+ restriction through mandatory KYC verification of government-issued identification. Where betbk discovers or has reason to believe that personal data has been collected from a person under 21 years of age, betbk will:

• Immediately suspend the associated Account;
• Permanently delete all personal data associated with that Account, except to the extent retention is required by law;
• Void any gameplay or financial transactions associated with the Account and process any eligible refund of underage deposits;
• Report the matter to PAGCOR in accordance with betbk's license obligations.

If you believe a minor has registered on or is accessing the betbk Platform, please contact our support team via live chat immediately. betbk takes underage gambling prevention seriously and cooperates with parents, guardians, and PAGCOR in all such matters.

Some of betbk's third-party service providers — including game software providers (such as Evolution Gaming, JILI, and PG Soft) and cloud infrastructure partners — may process or store data in jurisdictions outside the Philippines. Where such cross-border data transfers occur, betbk ensures that:

• The recipient country has been assessed as providing an adequate level of data protection, or
• Appropriate contractual safeguards are in place between betbk and the recipient, including standard contractual clauses or binding corporate rules, or
• The transfer is necessary for the performance of your contract with betbk (e.g., the delivery of live casino games from certified streaming studios).

betbk does not transfer your Philippine government ID data or sensitive personal information to any overseas processor beyond what is strictly required for NPC-compliant KYC services certified to handle Philippine data subjects.

betbk may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or Platform functionality. The effective date at the top of this Policy reflects the date of the most recent revision.

Material changes — those that significantly affect your privacy rights or the way betbk uses your personal data — will be communicated to registered players via SMS to their registered mobile number and/or via Platform notification, at least seven (7) days before the change takes effect where practicable.

Non-material changes, including typographical corrections and clarifications that do not alter the substance of your rights, will take effect upon publication. Your continued use of the betbk Platform after the effective date of a revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not accept the revised Policy, you must close your Account before the change takes effect.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by betbk, please contact our Data Protection Officer through the following channels:

• Live Chat: Available 24/7 within the betbk Platform — for urgent account or data security matters, live chat provides the fastest escalation path to our compliance team;
• Email (DPO): [email protected] — mark your message "ATTN: Data Protection Officer" for routing to the DPO directly;
• Registered Address: betbk Data Protection Officer, Metro Manila, Philippines.

betbk aims to respond to all data subject rights requests and privacy inquiries within fifteen (15) business days. Complex requests involving large volumes of data or requiring coordination with third-party processors may take longer — betbk will notify you if an extended processing period is required.