Privacy Policy
Your Data, Protected by phbet21

phbet21 is a PAGCOR-regulated online casino and sports betting platform operating at phbet21.net, with principal operations based in Metro Manila, Philippines. In the context of this Privacy Policy, phbet21 is the data controller responsible for the personal information you provide when you register an account, make a deposit, place a wager, or otherwise interact with our platform.

This Privacy Policy applies to all personal data collected through the phbet21 website, any mobile-optimised interface, the games lobby, the cashier, live chat support, email correspondence, and any other touchpoint through which you interact with phbet21 as a registered player or as a visitor to the site.

phbet21 collects personal data through several channels during the lifecycle of your relationship with the platform. The categories of data collected, and the primary channel through which each is collected, are set out below:

phbet21 does not collect sensitive personal information as defined under Section 3(l) of the Data Privacy Act (such as health data, biometrics, or political opinions) unless this is strictly required by law for AML or PAGCOR compliance purposes, and only with your explicit consent or on a lawful basis.

phbet21 uses the personal data it collects for specific, declared, and legitimate purposes. The primary purposes for which your data is processed are:

• Account Management: Creating, verifying, and maintaining your phbet21 player account, including password resets, account updates, and profile management.
• Identity & Age Verification (KYC): Confirming your identity and verifying that you are at least 21 years of age, in compliance with PAGCOR regulations and applicable Philippine gambling law.
• Payment Processing: Facilitating deposits and withdrawals via GCash, PayMaya, BDO, BPI, Metrobank, InstaPay, PESONet, and USDT, all denominated in Philippine Peso (₱) where applicable.
• Anti-Money Laundering (AML) Compliance: Monitoring transactions and account behaviour for signs of financial crime as required under the Anti-Money Laundering Act of 2001 (Republic Act No. 9160) and PAGCOR's AML framework.
• Platform Security & Fraud Prevention: Detecting and preventing unauthorised access, account takeover, multi-accounting, bonus abuse, and other forms of fraudulent activity.
• Customer Support: Responding to support requests, resolving disputes, and providing assistance through our 24/7 Filipino-speaking live chat and email support channels.
• Responsible Gaming: Administering self-exclusion requests, deposit limits, cooling-off periods, and other player protection tools in accordance with PAGCOR's responsible gaming requirements.
• Service Improvement: Analysing aggregated usage data to improve platform features, game selection, and the overall player experience — without identifying you as an individual in this analysis.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to you via email or SMS, subject to your marketing preferences and your right to opt out at any time.
• Legal & Regulatory Obligations: Complying with PAGCOR licensing conditions, NPC directives, court orders, and any other binding legal obligation applicable to phbet21's operations in the Philippines.

Under the Philippine Data Privacy Act of 2012, phbet21 must have a lawful basis for each category of personal data processing. The applicable legal bases are:

Where phbet21 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

phbet21 does not sell or commercially transfer your personal data to third parties. Data is shared only in the following limited and controlled circumstances:

• Payment Processors: GCash, PayMaya, BDO, BPI, Metrobank, and other payment infrastructure providers receive the minimum data necessary to process your financial transactions.
• KYC & Identity Verification Providers: Third-party identity verification services may process copies of your government-issued ID documents to confirm your identity and age. These providers are contractually bound to handle your data with the same level of security that phbet21 applies.
• Game Content Providers: Software providers whose games appear on the phbet21 platform may receive anonymised session data required to operate RNG and live dealer game infrastructure. They do not receive your personal identifying information unless strictly necessary.
• Regulatory Authorities: phbet21 is obliged to share data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities upon lawful demand or as required by our licensing conditions.
• Legal and Professional Advisers: phbet21's legal counsel, auditors, and compliance consultants may access personal data on a strictly confidential basis where necessary to provide professional services.
• Business Transfers: In the event phbet21 undergoes a merger, acquisition, or transfer of all or part of its business, personal data held by phbet21 may be transferred to the acquiring entity. Players will be notified of any such transfer in accordance with the Data Privacy Act.

phbet21 uses cookies and similar tracking technologies to operate the platform, maintain your session state, detect fraud, and analyse site usage. The cookies used by phbet21 fall into the following categories:

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair or prevent your ability to log in and use the phbet21 platform. phbet21 does not use third-party advertising or remarketing cookies.

phbet21 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required to meet our legal and regulatory obligations. The key retention periods applicable to phbet21 player data are:

• Active Account Data: Retained for the full duration of your account's active status on the phbet21 platform.
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure, in compliance with PAGCOR licensing requirements and Philippine AML law.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act.
• Support & Communication Records: Retained for three (3) years following the resolution of the last support interaction, to support dispute resolution and service quality review.
• Technical Logs: Retained for up to twelve (12) months for security monitoring purposes, then purged or anonymised.
• Marketing Consent Records: Retained for three (3) years from the date consent was given or last renewed, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, phbet21 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual.

Under the Philippine Data Privacy Act of 2012, you hold the following enforceable rights with respect to your personal data held by phbet21. phbet21 is committed to facilitating the exercise of these rights within the timeframes mandated by law:

To exercise any of these rights, please contact phbet21's Data Protection Officer via the details in Clause 13. phbet21 will respond to all data subject requests within fifteen (15) business days of receipt, and will not charge a fee for handling reasonable requests.

phbet21 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Key security measures in place include:

• Encryption: All personal data is encrypted at rest using AES-256 and in transit via TLS 1.2 or higher. Financial data receives additional field-level encryption.
• Access Controls: Access to personal data within phbet21's systems is restricted on a role-based, need-to-know basis. All internal access is logged and subject to regular audit review.
• Multi-Factor Authentication: phbet21 strongly encourages all players to enable two-factor authentication (2FA) on their accounts. All phbet21 administrative systems require MFA for access.
• Penetration Testing: The phbet21 platform and infrastructure are subject to regular third-party penetration testing to identify and remediate security vulnerabilities before they can be exploited.
• Incident Response: phbet21 maintains a documented data breach response plan. In the event of a breach affecting your data, phbet21 will notify the NPC and affected players within the timeframes prescribed by the Data Privacy Act.
• Staff Training: All phbet21 personnel with access to personal data receive mandatory data privacy and security training upon engagement and on a recurring annual basis.

The phbet21 platform is strictly intended for persons aged 21 years and above, in compliance with PAGCOR regulations and applicable Philippine gambling law. phbet21 does not knowingly collect personal data from anyone under the age of 21.

If phbet21 becomes aware that personal data has been collected from a person under 21 years of age — whether through a falsified registration, a document forgery, or any other means — the account will be immediately suspended, any funds held in the account will be dealt with in accordance with PAGCOR guidance, and all personal data associated with the underage account will be securely deleted in accordance with applicable law.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account on phbet21, please contact our support team immediately via live chat or at [email protected].

phbet21's primary data processing operations are based in the Philippines. However, certain third-party service providers used by phbet21 — including game content providers and cloud infrastructure partners — may be located outside the Philippines and may process your data in other jurisdictions as part of delivering their services.

Where personal data is transferred outside the Philippines, phbet21 ensures that adequate safeguards are in place in accordance with the Data Privacy Act and NPC guidelines. These safeguards include:

• Data processing agreements with contractual clauses equivalent to Philippine DPA standards.
• Transfers to jurisdictions recognised by the NPC as providing an adequate level of data protection.
• Where neither of the above is available, transfers are made only with your explicit consent or on another lawful basis prescribed by the Data Privacy Act.

phbet21 does not transfer personal data to countries on the NPC's list of jurisdictions with inadequate data protection frameworks without implementing appropriate contractual and technical safeguards.

phbet21 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or the legal and regulatory requirements applicable to our operations in the Philippines. When material changes are made, phbet21 will:

• Post the updated Privacy Policy on this page with a revised "Last Updated" date clearly displayed at the top of the document.
• Notify registered players via email to the address held on their account, no less than seven (7) days before the updated policy takes effect — except where changes are required immediately by law or NPC directive.
• Display a prominent notice on the phbet21 platform during the notification period to ensure players are aware of the change.

Continued use of the phbet21 platform following the effective date of an updated Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree with any change to the Privacy Policy, you should cease using the platform and close your account before the effective date.

phbet21 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act. If you wish to exercise your data subject rights, raise a privacy concern, or submit a complaint regarding phbet21's handling of your personal data, please contact the DPO through the following channels:

If you are not satisfied with phbet21's response to your privacy concern, you have the right to escalate your complaint directly to the National Privacy Commission (NPC) of the Philippines, which is the competent supervisory authority for data protection matters under Republic Act No. 10173.

This Privacy Policy was last reviewed and updated on 15 January 2026. phbet21 — operated under PAGCOR regulation. For players aged 21 and above residing in the Philippines only.