1. Data Controller
For the purposes of the Philippines Data Privacy Act of 2012 (Republic Act No. 10173), the data controller responsible for your personal information is phbuenas, operating the online gaming platform accessible at phbuenas.net.
phbuenas has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and with applicable data protection law. You can contact the DPO directly at privacy@phbuenas.net for any data-related enquiries.
Scope: This Privacy Policy applies to all personal data collected through the phbuenas website, mobile platform, customer support channels, and related services. It does not apply to third-party websites or services that may be linked from phbuenas content.
2. Personal Data We Collect
phbuenas collects the following categories of personal data from players:
| Category |
Examples |
When Collected |
| Identity Data |
Full legal name, date of birth, government ID number |
Registration & KYC verification |
| Contact Data |
Email address, mobile number, home address |
Registration & account updates |
| Financial Data |
GCash number, bank account details, transaction history |
Deposits, withdrawals, KYC |
| Technical Data |
IP address, device type, browser, operating system |
Each platform session |
| Usage Data |
Pages visited, games played, bet history, session duration |
Each platform session |
| Communications Data |
Support chat transcripts, email correspondence |
When you contact support |
| Marketing Preferences |
Opted-in channels, promotion history |
Account settings & opt-ins |
phbuenas does not collect or process special categories of personal data (such as racial or ethnic origin, health data, or political opinions) unless you voluntarily provide such information in the context of a responsible gaming or self-exclusion request, in which case it is used solely for that purpose.
3. How We Collect Your Data
3.1 Directly from You
The majority of personal data phbuenas holds is provided directly by you when you: register an account; complete identity verification; make a deposit or withdrawal; contact customer support; participate in a promotion; or update your account settings.
3.2 Automatically During Your Use of the Platform
When you access phbuenas, certain technical and usage data is collected automatically through server logs, cookies, and similar tracking technologies. This includes your IP address, the device and browser you are using, pages and games you access, and the duration of your sessions. This data is used primarily for platform security, fraud prevention, and performance optimisation.
3.3 From Third Parties
phbuenas may receive limited personal data from third-party service providers in specific circumstances, including: identity verification services used during KYC checks; payment processors confirming transaction details; and fraud prevention services that may flag suspicious activity patterns. Where data is received from third parties, phbuenas ensures that it was collected lawfully and in a manner consistent with this Privacy Policy.
4. How We Use Your Personal Data
phbuenas uses your personal data for the following purposes:
- Account creation and management: To register your phbuenas account, verify your identity, and maintain your account in good standing.
- Processing transactions: To process deposits, withdrawals, and any winnings accurately and securely through your chosen payment method.
- Regulatory compliance: To meet obligations under Philippine gaming regulations, anti-money laundering laws, and know-your-customer requirements enforced by applicable authorities.
- Platform security and fraud prevention: To detect and prevent unauthorised account access, fraudulent transactions, and multi-accounting. Technical data and usage patterns are analysed for this purpose.
- Customer support: To respond to your queries, resolve disputes, and process complaints. Support communications are recorded to ensure accuracy and for training purposes.
- Responsible gaming: To monitor for signs of problem gambling behaviour and to administer player-requested self-exclusion or account limit settings.
- Marketing communications (where consented): To send you promotions, bonus offers, and platform updates via your preferred channel. This is only done where you have opted in, and you can withdraw consent at any time from your account settings.
- Platform improvement: Aggregated and anonymised usage data is used to understand how players interact with phbuenas and to inform product development decisions.
5. Legal Basis for Processing
Under the Philippines Data Privacy Act, phbuenas processes your personal data on the following legal bases:
- Contract performance: Processing your data is necessary to fulfil the agreement between you and phbuenas — including account management, bet placement, and payment processing.
- Legal obligation: phbuenas is required to collect and retain certain personal data to comply with Philippine gaming regulations, AML laws, and tax requirements.
- Legitimate interests: Fraud prevention, platform security, and responsible gaming monitoring are carried out on the basis of phbuenas's legitimate interests, provided those interests are balanced against your rights.
- Consent: Where processing is based on consent — primarily for direct marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
6. Sharing Your Personal Data
phbuenas does not sell, rent, or trade your personal data. We share data only in the following limited circumstances:
6.1 Service Providers
phbuenas works with carefully selected third-party service providers to operate the platform. These include payment processors (GCash, Maya, BancNet, bank partners), identity verification providers, fraud detection services, game providers (such as JILI), and cloud hosting infrastructure. All service providers are contractually required to handle data in accordance with this Privacy Policy and applicable law.
6.2 Regulatory and Legal Authorities
phbuenas may disclose personal data to Philippine government agencies, regulatory bodies, law enforcement, or courts where required to do so by law or valid legal process. This includes disclosures required under anti-money laundering obligations to the Anti-Money Laundering Council (AMLC).
6.3 Business Transfers
In the event of a merger, acquisition, or sale of phbuenas's business assets, your personal data may be transferred to the successor entity. We will provide notice of any such transfer and the privacy commitments that apply going forward.
Important: phbuenas will never share your financial data, bet history, or identity documents with any third party for commercial marketing purposes. These categories of data are used exclusively for operational and regulatory purposes.
7. Cookies and Tracking Technologies
phbuenas uses cookies and similar technologies to operate the platform, improve your experience, and support security functions. The types of cookies used include:
- Essential cookies: Required for the platform to function. These manage your login session, security tokens, and platform preferences. They cannot be disabled without impairing platform functionality.
- Analytics cookies: Collect aggregated data about how players navigate and use phbuenas. This information is used to improve the platform and is not used to identify individuals.
- Security cookies: Assist in detecting fraudulent activity, multi-accounting attempts, and unusual access patterns.
You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using phbuenas, though some personalisation features may be affected. phbuenas does not use third-party advertising cookies or retargeting pixels.
8. How Long We Keep Your Data
phbuenas retains personal data for as long as it is needed to fulfil the purpose for which it was collected, and for as long as required by applicable law. General retention principles are as follows:
- Active account data: Retained for the duration of your active relationship with phbuenas.
- Closed account data: Identity documents, transaction records, and account history are retained for a minimum of five (5) years after account closure, in compliance with AML and gaming regulatory requirements.
- Support communications: Retained for three (3) years from the date of the interaction, or longer where a formal dispute remains unresolved.
- Marketing data: Retained until you withdraw consent or request deletion, at which point it is removed from active marketing lists within 30 days.
When data is no longer required, it is securely deleted or anonymised in a manner that makes re-identification impossible.
9. Your Data Rights Under Philippine Law
As a data subject under the Philippines Data Privacy Act of 2012, you have the following rights with respect to the personal data phbuenas holds about you:
Right to Access
You may request a copy of the personal data phbuenas holds about you, including information about how it is being used. Requests will be fulfilled within 30 days.
Right to Rectification
If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. For account details, many fields can be updated directly from your phbuenas account settings.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent. Note that regulatory retention requirements may override deletion requests in some cases.
Right to Object or Restrict
You may object to processing based on legitimate interests, or request that processing be restricted while a complaint is under review. Marketing processing can be stopped at any time by updating your communication preferences.
Right to Data Portability
Where processing is carried out by automated means on the basis of consent or contract, you may request your data in a structured, machine-readable format.
Right to Complain
If you believe phbuenas has handled your data unlawfully, you have the right to lodge a complaint with the Philippines National Privacy Commission (NPC) in addition to raising the matter with phbuenas directly.
To exercise any of these rights, contact the phbuenas Data Protection Officer at privacy@phbuenas.net. We will acknowledge your request within five (5) business days and complete it within the timeframes required by law.
10. Data Security
phbuenas implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Security measures in place include:
- TLS/SSL encryption for all data transmitted between your device and the phbuenas platform.
- Encryption at rest for sensitive data including identity documents and financial records.
- Role-based access controls ensuring staff can only access data necessary for their job function.
- Regular security assessments and penetration testing by independent third parties.
- Two-factor authentication available for all player accounts and mandatory for administrative access.
- Incident response procedures that include notification to affected players and to the National Privacy Commission where required by law.
While phbuenas takes every reasonable precaution to protect your data, no platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights, phbuenas will notify you and the relevant regulatory authority within 72 hours of becoming aware of the incident, in line with applicable law.
11. Children and Minors
phbuenas is strictly an adults-only platform. The minimum age to use phbuenas is 21 years, in line with Philippine online gaming law. phbuenas does not knowingly collect or process personal data from individuals under 21 years of age.
If phbuenas becomes aware that an account was registered by a person under 21, that account will be immediately closed, all balances will be forfeited, and any personal data associated with the account will be deleted as soon as practically possible in compliance with applicable law. If you believe a minor has registered on phbuenas, please notify us immediately at support@phbuenas.net.
12. Changes to This Privacy Policy
phbuenas may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable law. When material changes are made, we will notify registered players by email and display a prominent notice on the platform at least 14 days before the changes take effect.
The "Last updated" date at the top of this page shows when the current version was published. Continued use of phbuenas after a revised policy takes effect constitutes acceptance of the changes. If you do not agree with any changes, you should close your account before the new version comes into force.
