PH Buenas Privacy Policy – How We Protect Your Data

1. Introduction

This Privacy Policy describes how PH Buenas ("we", "us", "our") collects, uses, stores, and protects the personal information you provide when you register for and use the PH Buenas platform at phbuenas.best ("Platform"). It also explains your rights as a data subject under Philippine law and how to exercise those rights.

PH Buenas is committed to protecting the privacy of every Filipino player on our platform. We understand that you're trusting us with personal information — financial details, identity documents, transaction records — and we take that responsibility seriously. This policy is written to be genuinely readable, not just legally defensible. If something is unclear, please contact us at the details in Section 14 and we'll explain it directly.

By registering on PH Buenas and using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we process your personal data, you should not use PH Buenas. You may withdraw consent for non-essential processing at any time by contacting our Data Protection Officer, though this may affect some platform functionality.

2. Personal Data We Collect

PH Buenas collects personal data in the categories listed below. We collect only what is necessary for the stated purpose — we do not collect data speculatively or in excess of what each function requires.

2.1 Registration and Identity Data

• Full legal name (as it appears on your government-issued Philippine ID)
• Date of birth
• Philippine mobile number
• Email address
• Home address (province, city or municipality)
• Username chosen at registration

2.2 Identity Verification (KYC) Documents

• Scanned or photographed copies of a government-issued Philippine ID (PhilSys National ID, passport, driver's licence, UMID, SSS ID, or Voter's ID)
• Selfie photograph for liveness verification where required
• Proof of payment method ownership where required (e.g. screenshot of GCash wallet showing your name and number)

2.3 Financial and Transaction Data

• Deposit amounts, dates, and payment method identifiers (GCash number, masked bank account number, etc.)
• Withdrawal requests, amounts, and destination payment method identifiers
• Transaction history and account balance records
• Bonus claims and wagering activity

2.4 Gameplay and Betting Data

• Game session records (game type, stakes, outcomes, duration)
• Sports betting history (event, market, odds, stake, result, settlement)
• Responsible gaming tool usage (deposit limits set, session time limits, self-exclusion history)

2.5 Technical and Device Data

• IP address and approximate geolocation (province/region level, not GPS)
• Device type, operating system, and browser version
• Session timestamps and duration
• Referring URL and page navigation data within PH Buenas

2.6 Communications Data

• Messages sent to PH Buenas via email or live chat support
• Survey responses and feedback you voluntarily provide
• Records of notifications we have sent you and whether they were opened

3. How We Collect Your Data

PH Buenas collects your personal data through the following channels:

• Registration form: You provide your name, contact details, and date of birth directly when creating your PH Buenas account.
• KYC verification process: You upload identity documents when PH Buenas initiates a verification request — typically before your first withdrawal or when a compliance review is triggered.
• Platform activity: We automatically record your gameplay sessions, betting history, and account activity as a necessary part of operating the platform.
• Payment transactions: Deposit and withdrawal requests generate transaction records that are stored in your account history.
• Technical logs: Our servers automatically record IP addresses, device information, and session data when you access PH Buenas.
• Cookies and tracking technologies: Our platform uses cookies and similar technologies as described in Section 9.
• Customer support interactions: When you contact PH Buenas support, your messages and our responses are recorded for quality and compliance purposes.
• Third-party verification services: Where we use an identity verification partner to check your ID, that partner may return a verification result and risk score to PH Buenas.

4. How PH Buenas Uses Your Data

The table below maps each category of personal data to the specific purposes for which PH Buenas processes it. We do not use your data for any purpose not listed here without first obtaining your explicit consent.

4.1 Marketing Communications

PH Buenas may send you promotional emails or in-platform notifications about new games, promotions, and bonus offers. You can opt out of marketing communications at any time by clicking the unsubscribe link in any email we send you, or by updating your notification preferences in your PH Buenas account settings. Opting out of marketing communications does not affect transactional notifications (deposit confirmations, withdrawal updates, security alerts) which are sent regardless of marketing preferences.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 (RA 10173), PH Buenas processes your personal data under the following legal bases:

• Contractual necessity: Processing required to fulfil our agreement with you — operating your account, processing your bets, paying out your winnings.
• Legal obligation: Processing required to comply with Philippine gaming regulations, Anti-Money Laundering Act (AMLA) requirements, and other applicable laws — including identity verification and transaction monitoring.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where these interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications and any other non-essential purpose where you have given explicit consent. You may withdraw this consent at any time.

6. Who We Share Your Data With

PH Buenas does not sell your personal data. We share it only with the categories of recipients described below, and only to the extent necessary for the stated purpose:

6.1 Payment Processors

When you make a deposit or withdrawal, your transaction details are shared with the relevant payment processor — GCash, Maya, GrabPay, InstaPay, or your bank. Each payment processor has their own privacy policy and operates under Philippine financial regulations. PH Buenas shares only the transaction data necessary to complete the payment.

6.2 Identity Verification Providers

PH Buenas uses certified third-party KYC and identity verification services to process the documents you submit during account verification. These providers operate under contractual data processing agreements with PH Buenas and are prohibited from using your data for any purpose beyond providing their verification service to us.

6.3 Regulatory and Law Enforcement Authorities

PH Buenas is required by law to share certain data with Philippine regulatory authorities — including the relevant gaming regulatory body, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission — when legally required to do so. We also cooperate with Philippine law enforcement agencies when presented with valid legal process. PH Buenas will not voluntarily share data with authorities beyond what is required by law.

6.4 Technology and Infrastructure Providers

PH Buenas uses third-party providers for cloud hosting, customer support software, and platform analytics. These providers act as data processors under written agreements with PH Buenas that prohibit them from processing your data for their own purposes. All providers used by PH Buenas are assessed for their security and compliance standards before engagement.

6.5 Professional Advisers

In specific circumstances — such as a legal dispute, regulatory audit, or corporate transaction — PH Buenas may share limited personal data with lawyers, accountants, or auditors who are bound by professional confidentiality obligations.

7. Data Retention

PH Buenas retains your personal data for as long as it is needed for the purpose for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for the duration of your account plus 5 years after account closure, in compliance with Philippine AML record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the transaction date, as required by the Anti-Money Laundering Act and Bureau of Internal Revenue record-keeping rules.
• KYC documents: Retained for 5 years after your account is closed or after the last transaction, whichever is later.
• Customer support communications: Retained for 2 years from the date of the last interaction, unless they relate to an ongoing dispute in which case they are retained until resolution plus 1 year.
• Technical logs: Retained for 12 months for security analysis purposes, then deleted or anonymised.
• Marketing preferences: Retained until you withdraw consent or close your account, whichever comes first.

When retention periods expire, personal data is securely deleted or anonymised such that it can no longer be linked to you as an individual. Anonymised aggregated data — for example, platform usage statistics — may be retained indefinitely as it no longer constitutes personal data under RA 10173.

8. Security Measures

PH Buenas implements technical and organisational security measures proportionate to the sensitivity of the data we hold. These include:

• Encryption in transit: All data transmitted between your device and PH Buenas servers is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser confirms this is active.
• Encryption at rest: Sensitive data stored in PH Buenas databases — including identity document images and financial records — is encrypted at rest using AES-256.
• Access controls: Internal access to personal data is restricted to PH Buenas staff who have a specific, documented operational need. Access rights are reviewed quarterly and revoked immediately when employment or role changes occur.
• Two-factor authentication: PH Buenas staff with access to personal data systems are required to use multi-factor authentication. Players are also strongly encouraged to enable 2FA on their PH Buenas account.
• Penetration testing and vulnerability scanning: PH Buenas conducts regular security assessments of the platform, including third-party penetration tests, to identify and remediate vulnerabilities before they can be exploited.
• Fraud detection systems: Automated systems monitor account activity for suspicious patterns — unusual login locations, atypical transaction volumes, and other indicators — and trigger reviews before data or funds can be compromised.

Despite these measures, no online system can guarantee absolute security. If you suspect your PH Buenas account has been compromised, please contact us immediately at support@phbuenas.best and change your password from a trusted device.

9. Cookies and Tracking Technologies

PH Buenas uses cookies and similar tracking technologies to operate the platform, remember your preferences, and gather anonymised usage data. Here is a breakdown of the cookie types in use on PH Buenas:

9.1 Strictly Necessary Cookies

These cookies are essential for PH Buenas to function. They maintain your login session, remember your language preference, and keep your betslip intact as you navigate between pages. You cannot opt out of these cookies while using the platform, as disabling them would prevent the platform from working.

9.2 Performance and Analytics Cookies

PH Buenas uses anonymised analytics cookies to understand how players interact with the platform — which pages are most visited, where users drop off in a registration flow, and how long typical sessions last. This data is aggregated and anonymised; it does not identify you personally. You can opt out of analytics cookies in your account settings.

9.3 Security Cookies

Certain cookies are used by PH Buenas's fraud detection and bot-prevention systems to distinguish legitimate human players from automated traffic. These are necessary for platform security and cannot be disabled.

9.4 Cookie Management

You can manage cookie preferences through your PH Buenas account settings or through your browser settings. Note that blocking all cookies will impair the function of PH Buenas as the strictly necessary cookies are required for login and session management. PH Buenas does not use third-party advertising cookies or tracking pixels for cross-site retargeting.

10. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012 (RA 10173) and its implementing rules, you have the following rights with respect to your personal data held by PH Buenas. To exercise any of these rights, contact our Data Protection Officer at the details in Section 14. We will respond to all verified requests within 15 business days.