filbit Privacy Policy

1. Who We Are

This Privacy Policy is issued by filbit ("filbit," "we," "us," or "our"), the operator of the online gaming and casino platform accessible at filbit.vip ("Platform"). filbit operates under applicable PAGCOR (Philippine Amusement and Gaming Corporation) regulatory guidelines and is subject to the Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations as enforced by the National Privacy Commission ("NPC").

filbit is committed to safeguarding the privacy and personal data of all registered players, including those from Manila, Cebu, Davao, Quezon City, Makati, Iloilo, Cagayan de Oro, and every other city and province across the Philippines. This Privacy Policy describes how filbit collects, uses, stores, discloses, and protects your personal information in connection with your use of the filbit platform.

By registering an account on filbit, completing the KYC (Know Your Customer) verification process, or using any feature of the Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

2. Personal Data We Collect

filbit collects personal data that is necessary and proportionate to the purposes described in this Policy. The categories of personal data we may collect include:

2.1 Identity and Contact Data

• Full legal name as it appears on your Philippine government-issued ID;
• Date of birth (for age verification — players must be 21 or older);
• Registered mobile number (Philippine format, +63);
• Email address;
• Permanent residential address in the Philippines;
• Government-issued ID details: UMID, PhilSys National ID, Passport, or Driver's License number and copies where required for KYC.

2.2 Financial and Transaction Data

• GCash account number linked to your filbit wallet;
• Maya (PayMaya) account details where applicable;
• BPI, BDO, Metrobank, or UnionBank account details for bank transfer transactions;
• Deposit and withdrawal transaction history, amounts, timestamps, and reference numbers;
• Wallet balance history and adjustments.

2.3 Gaming and Behavioral Data

• Game session data: which games you played, duration, bet amounts, and outcomes;
• Bonus and promotion usage history;
• Self-imposed responsible gaming settings (deposit limits, self-exclusion status);
• Customer support interaction records.

2.4 Technical Data

• IP address and approximate geolocation at the time of login;
• Device type, operating system, and browser information;
• Session tokens and authentication logs;
• Cookies and similar tracking technologies (see Section 8).

3. How We Collect Your Data

filbit collects personal data through the following channels:

• Direct Collection: Information you provide when registering your account, completing KYC verification, contacting support, or participating in promotions;
• Automated Collection: Technical data collected automatically when you access filbit.vip, including server logs, session data, and cookie data;
• Payment Processors: Transaction confirmation data provided by GCash, Maya, and banking partners when you make deposits or withdrawals;
• Game Studios: Aggregated game outcome and session data provided by licensed third-party game studios operating on the filbit platform;
• Third-Party Verification Services: Identity and address verification data from KYC service providers used to verify the authenticity of government-issued Philippine IDs.

4. How We Use Your Personal Data

filbit uses your personal data strictly for the following purposes:

• To create and manage your filbit player account;
• To verify your identity and age (21+) in compliance with PAGCOR requirements and Philippine anti-money laundering law;
• To process deposits and withdrawals to your GCash, Maya, or designated bank account;
• To provide you with access to casino games, live dealer tables, sports betting, and other Platform features;
• To communicate account-related notifications, including transaction confirmations, security alerts, and support responses;
• To administer bonus credits and promotional offers to eligible accounts;
• To detect, prevent, and investigate fraudulent activity, money laundering, or other illegal conduct;
• To operate and enforce responsible gaming tools, including self-exclusion enforcement;
• To comply with PAGCOR regulatory reporting obligations and NPC data requirements;
• To improve the Platform's performance, security, and user experience based on aggregated and anonymized usage analytics.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, filbit processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfill the Terms and Conditions you agreed to upon registration, including account management, payment processing, and game access;
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA) reporting obligations, and NPC data registration requirements;
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming enforcement, where these interests are not overridden by your privacy rights;
• Consent: Where required by applicable law for specific processing activities not covered by the above grounds, filbit will seek your explicit consent, which you may withdraw at any time.

6. Data Sharing and Disclosure

filbit shares your personal data only in the following limited circumstances:

6.1 Service Providers

filbit engages trusted third-party service providers who process data on our behalf under strict data processing agreements consistent with the DPA. These include: payment processors (GCash/Maya/banking partners), KYC identity verification providers, game studios, cloud hosting providers, and customer support technology providers. All processors are contractually bound to process data only as instructed by filbit and to maintain appropriate security measures.

6.2 Regulatory Authorities

filbit is required by law to disclose certain data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government authorities upon lawful request or as required by regulatory reporting obligations.

6.3 Law Enforcement

filbit may disclose personal data to Philippine law enforcement authorities where required by valid legal process, court order, or where disclosure is necessary to prevent imminent harm or illegal activity.

6.4 No Third-Party Marketing

filbit does not share, sell, or disclose your personal data to any third party for marketing, advertising, or commercial purposes unrelated to the services you have specifically requested from filbit.

7. Data Retention

filbit retains your personal data for as long as necessary to fulfill the purposes described in this Policy, subject to the following minimum retention periods:

• Account data and KYC records: Retained for a minimum of 5 years following account closure, in accordance with AMLC record-keeping requirements;
• Transaction and financial records: Retained for a minimum of 5 years from the date of the transaction;
• Gaming session logs: Retained for 2 years for game integrity and dispute resolution purposes;
• Support interaction records: Retained for 2 years;
• Self-exclusion records: Retained indefinitely to prevent re-registration by self-excluded players.

Upon expiry of the applicable retention period, filbit will securely delete or anonymize your personal data in accordance with NPC-approved disposal procedures.

8. Cookies and Tracking Technologies

filbit uses cookies and similar tracking technologies on filbit.vip to deliver and improve the Platform. The types of cookies we use include:

• Strictly Necessary Cookies: Required for the Platform to function, including authentication session tokens and security cookies. These cannot be disabled without disabling core Platform functionality;
• Performance Cookies: Anonymized analytics data that helps filbit understand how Filipino players navigate and use the Platform, enabling us to improve page performance and user experience;
• Functionality Cookies: Cookies that remember your preferences, such as language settings and login state where "Remember Me" is enabled.

You can control non-essential cookies through your browser settings. Disabling cookies may affect Platform functionality. filbit does not use third-party advertising cookies or cross-site tracking technologies.

9. Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by filbit:

• Right to Access: You may request a copy of the personal data filbit holds about you;
• Right to Correction: You may request correction of inaccurate or incomplete personal data in your account;
• Right to Erasure: You may request deletion of your personal data where retention is no longer legally required, subject to filbit's regulatory retention obligations under AMLA and PAGCOR guidelines;
• Right to Data Portability: You may request your personal data in a structured, machine-readable format where technically feasible;
• Right to Object: You may object to processing of your personal data based on legitimate interests, subject to overriding legal grounds;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact filbit's Data Protection Officer via the contact details in Section 13. filbit will respond to verified requests within 15 business days as required by the DPA.

10. Data Security

filbit implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include:

• TLS 1.3 encryption for all data in transit between your device and filbit servers;
• AES-256 encryption for sensitive data stored at rest, including financial records and ID documents;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Multi-factor authentication for all internal administrative system access;
• Regular security audits and penetration testing of the filbit platform;
• Incident response procedures for prompt notification in the event of a data breach, in accordance with NPC breach notification requirements.

Notwithstanding these measures, no system is completely immune to security risks. If you become aware of any unauthorized use of your filbit account or suspect a security incident, please contact filbit support immediately via live chat.

11. Children's Privacy and 21+ Policy

If you believe that a minor may have registered on filbit or provided us with personal data, please contact our support team immediately so that we can take prompt action.

12. Changes to This Privacy Policy

filbit reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. When material changes are made, filbit will notify registered players via the email address or mobile number on file at least 7 days before the changes take effect, where practicable. The "Last updated" date at the top of this page reflects the most recent revision. Your continued use of filbit following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using filbit and request account closure.

13. Contact – Data Protection Officer

For privacy-related inquiries, data subject rights requests, or concerns about filbit's data practices, please contact our Data Protection Officer:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy / DPA Request – [Your Registered Mobile Number]"
• Live Chat: 24/7 via filbit.vip — request transfer to the Data Privacy team
• Response Time: Within 15 business days for written data subject requests

If you are not satisfied with filbit's response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. NPC contact information is publicly available on the official NPC website.