ibets Privacy Policy

1Introduction & Scope

ibets ("ibets," "we," "us," or "our") operates the online gaming platform accessible at ibets.club (the "Platform"). This Privacy Policy ("Policy") describes how ibets collects, processes, stores, shares, and protects personal information relating to individuals who access or use the Platform, including registered players, prospective players who browse the Platform without registering, and individuals who contact ibets customer support ("you" or "Data Subject").

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. ibets is registered as a Personal Information Controller (PIC) with the NPC in accordance with applicable requirements.

By registering an ibets account or using any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please do not use the ibets Platform.

2Personal Data We Collect

ibets collects the following categories of personal data in connection with your use of the Platform:

Identity & Contact Data:

• Full legal name, date of birth, and gender
• Residential address (including city, province, and postal code)
• Mobile number and email address
• Government-issued identification documents (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's licence, UMID) submitted for identity and age verification

Financial & Transaction Data:

• GCash or Maya account details (mobile number associated with the e-wallet)
• Bank account details (account name, account number, bank name) for withdrawal processing
• Debit card details (card number masked, expiry date) where applicable
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method used
• Source-of-funds documentation where required by anti-money laundering regulations

Gaming & Behavioural Data:

• Game history, bet amounts, win/loss records, and session duration
• Responsible gaming settings, including deposit limits, loss limits, and self-exclusion status
• Bonus and promotion participation history
• Customer support interaction records, including chat transcripts and email correspondence

Technical & Device Data:

• IP address, device type, operating system, and browser type
• Geolocation data (country and region level) derived from IP address
• Cookie identifiers and session tokens
• Platform usage data, including pages visited, features used, and time spent on the Platform

3How We Collect Your Data

ibets collects personal data through the following means:

• Direct Collection: Information you provide when registering an ibets account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical and device data collected automatically when you access the Platform, through cookies, web beacons, server logs, and similar tracking technologies.
• Third-Party Sources: Identity verification data from third-party KYC (Know Your Customer) service providers; transaction data from payment processors including GCash, Maya, and banking partners; fraud prevention data from third-party risk management services.
• Regulatory Sources: Information received from PAGCOR, the NPC, the Anti-Money Laundering Council (AMLC), or other Philippine regulatory bodies in connection with compliance obligations.

ibets does not collect sensitive personal information (as defined under the Data Privacy Act) beyond what is strictly necessary for identity verification, age verification, and regulatory compliance purposes.

4How We Use Your Personal Data

ibets processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your ibets account, including identity verification, age verification (21+ requirement), and account security.
• Service Delivery: Providing access to casino games, sports betting, bingo, slots, and all other Platform features; processing deposits and withdrawals; delivering customer support.
• Regulatory Compliance: Fulfilling ibets's obligations under PAGCOR regulations, the Anti-Money Laundering Act (Republic Act No. 9160, as amended), the Data Privacy Act, and all other applicable Philippine laws.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct.
• Responsible Gaming: Monitoring gaming behaviour to identify potential problem gambling patterns; administering deposit limits, loss limits, session timers, and self-exclusion requests; complying with PAGCOR responsible gaming requirements.
• Marketing & Promotions: Sending promotional communications, bonus offers, and platform updates where you have provided explicit consent to receive such communications. You may withdraw this consent at any time.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve Platform performance, user experience, and game offerings.
• Dispute Resolution: Maintaining records necessary to investigate and resolve player complaints, disputes, and regulatory inquiries.

5Legal Basis for Processing

Under the Philippine Data Privacy Act, ibets processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and ibets (i.e., the Terms & Conditions), including account creation, game access, and payment processing.
• Legal Obligation: Processing required to comply with ibets's obligations under Philippine law, including PAGCOR regulations, anti-money laundering requirements, and NPC data protection obligations.
• Legitimate Interests: Processing necessary for ibets's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and business analytics, where such interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6Data Sharing & Disclosure

ibets shares your personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment Processors: GCash, Maya, and banking partners receive the minimum data necessary to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• Identity Verification Providers: Third-party KYC service providers receive identity documents and biometric data solely for the purpose of verifying your identity and age in compliance with PAGCOR requirements.
• Game Content Providers: Game providers may receive anonymised session data necessary to deliver their games on the ibets Platform. They do not receive your identity or financial data.
• Regulatory Authorities: ibets discloses personal data to PAGCOR, the AMLC, the NPC, the Bureau of Internal Revenue (BIR), and other Philippine government agencies when required by law, court order, or regulatory directive.
• Fraud Prevention Services: Third-party risk management and fraud detection providers receive technical and behavioural data to assist ibets in identifying and preventing fraudulent activity.
• Professional Advisers: Legal counsel, auditors, and compliance consultants engaged by ibets may access personal data on a strictly need-to-know basis and are bound by confidentiality obligations.

ibets does not share your personal data with any third party for their own independent marketing, advertising, or commercial purposes. All third-party service providers engaged by ibets are required to process your data only on ibets's documented instructions and in accordance with the Data Privacy Act.

7Cookies & Tracking Technologies

ibets uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the ibets Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences, such as language settings, responsible gaming limits you have set, and your last-used payment method, to provide a more personalised experience.
• Analytics Cookies: Collect anonymised data about how players use the Platform — which pages are visited most, how long sessions last, and where users encounter errors — to help ibets improve the Platform. These are only placed with your consent.
• Marketing Cookies: Used to deliver relevant promotional content within the ibets Platform based on your gaming activity and preferences. These are only placed with your explicit consent and can be withdrawn at any time.

You can manage your cookie preferences through the cookie settings panel accessible from the footer of the ibets Platform. Please note that disabling certain cookies may affect the functionality of the Platform. Your browser settings may also allow you to block or delete cookies, though this may impact your ibets experience.

8Data Retention

ibets retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account Data: Retained for the duration of your ibets account and for a minimum of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the AMLC and BIR regulations.
• Identity Verification Documents: Retained for the duration of your account and for five (5) years post-closure, or longer if required by a regulatory investigation or legal proceeding.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, to support dispute resolution and regulatory inquiries.
• Marketing Consent Records: Retained for as long as you remain subscribed to marketing communications, plus three (3) years following withdrawal of consent, as evidence of your consent history.
• Technical & Log Data: Retained for twelve (12) months from collection, unless required for longer periods in connection with a security investigation or legal matter.

Upon expiry of the applicable retention period, ibets will securely delete or anonymise your personal data in accordance with NPC-approved data disposal procedures. Anonymised, aggregated data that cannot be used to identify you may be retained indefinitely for statistical and analytical purposes.

9Data Security

ibets implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the ibets Platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest, including identity documents and financial records, is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to ibets personnel and authorised third-party processors who require it to perform their duties. Role-based access controls and multi-factor authentication are enforced for all internal systems.
• Security Monitoring: ibets operates continuous security monitoring, intrusion detection systems, and regular vulnerability assessments to identify and address potential threats to Platform security.
• Data Minimisation: ibets collects only the personal data strictly necessary for the stated purposes and does not retain data beyond the applicable retention periods.
• Staff Training: All ibets personnel with access to personal data receive regular data privacy and security training in accordance with NPC guidelines.
• Incident Response: ibets maintains a documented data breach response procedure. In the event of a personal data breach that poses a real risk to your rights and freedoms, ibets will notify the NPC within 72 hours of becoming aware of the breach and will notify affected Data Subjects without undue delay, as required by the Data Privacy Act.

10Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ibets:

• Right to Be Informed: The right to be informed of how your personal data is collected, processed, and used — which this Policy fulfils.
• Right of Access: The right to request a copy of the personal data ibets holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of inaccurate, incomplete, or outdated personal data. You may update basic account information directly through your ibets account dashboard.
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ibets's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on ibets's legitimate interests. Objection to marketing can be exercised by unsubscribing from communications at any time.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format, where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe ibets has processed your personal data in violation of the Data Privacy Act.

To exercise any of the above rights, please contact ibets's Data Protection Officer (DPO) using the contact details provided in Section 14 of this Policy. ibets will respond to all verified Data Subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. ibets may request proof of identity before processing your request to protect against unauthorised access to your data.

11Children & Minors

The ibets Platform is strictly intended for individuals aged 21 years and above, in accordance with the age restriction for casino-style gambling in the Philippines as regulated by PAGCOR. ibets does not knowingly collect personal data from individuals under the age of 21.

If you are a parent or guardian and believe that your child or a minor in your care has registered an ibets account or provided personal data to ibets, please contact our Data Protection Officer immediately using the details in Section 14. ibets takes underage access extremely seriously and will act promptly on all such reports.

12International Data Transfers

ibets primarily processes and stores personal data within the Philippines. However, certain third-party service providers engaged by ibets — including game content providers, cloud infrastructure providers, and KYC verification services — may process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, ibets ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by the Philippine Data Privacy Act. These safeguards include:

• Contractual data processing agreements incorporating NPC-approved standard contractual clauses.
• Transfers only to jurisdictions or organisations that the NPC has determined provide an adequate level of data protection.
• Technical and organisational security measures applied consistently regardless of the location of processing.

ibets will not transfer your personal data to any jurisdiction or third party that cannot provide adequate data protection guarantees consistent with the Data Privacy Act and NPC regulations.

13Updates to This Privacy Policy

ibets may update this Privacy Policy from time to time to reflect changes in our data processing practices, Platform features, or applicable Philippine law and NPC regulations. When material changes are made, ibets will notify registered players via email or in-platform notification at least seven (7) days before the changes take effect.

The most current version of this Policy will always be available at ibets.club/privacy-policy, with the effective date clearly indicated at the top of the document. We encourage you to review this Policy periodically to stay informed about how ibets protects your personal data.

Your continued use of the ibets Platform after the effective date of any updated Policy constitutes your acknowledgement of the changes. If you do not agree to the updated Policy, you must stop using the Platform and may request account closure by contacting ibets support.

14Contact & Data Protection Officer

ibets has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act and NPC Circular No. 16-01. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ibets, please contact our DPO through the following channel:

If you are not satisfied with ibets's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph. ibets cooperates fully with NPC investigations and takes all regulatory inquiries seriously.

For general information about ibets, our platform, and our team, please visit our About Us page. For the full terms governing your use of the Platform, please review our Terms & Conditions.