bb8ph Privacy Policy

bb8ph ("we", "us", "our") operates the online gaming and sports betting platform accessible at bb8ph.club. bb8ph is a premium casino brand designed for Filipino players, offering slots, live dealer games, sports betting, bingo, online sabong, and other gaming services via a mobile-first browser platform.

For the purposes of applicable Philippine data protection law, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, bb8ph acts as the Personal Information Controller (PIC) in respect of personal data collected through this platform. Questions regarding data practices may be directed to our Data Protection Officer at the contact details provided in Section 13 of this policy.

bb8ph is committed to complying with RA 10173 and the regulations issued by the National Privacy Commission (NPC) of the Philippines. Where additional international standards are applicable to the processing of personal data, bb8ph endeavors to meet those standards as well.

bb8ph collects personal data from you in several ways: directly when you register an account, make a deposit or withdrawal, contact support, or interact with the platform; automatically when you browse the site; and from third parties such as payment processors and identity verification services during KYC. The categories of data we may collect are described below.

2.1 Registration & Account Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (for 21+ age verification)
• Philippine mobile number (used for OTP and account communications)
• Email address
• Username and encrypted password
• Home address and city (e.g., Manila, Cebu, Davao, Quezon City)

2.2 Identity Verification (KYC) Data

• Government-issued Philippine ID document (UMID, PhilSys, Driver's License, Passport — front and back images)
• Selfie photograph for identity matching
• Tax Identification Number (TIN) where required for large transactions

2.3 Financial & Transaction Data

• GCash or Maya account details (masked; we do not store full wallet credentials)
• BPI, BDO, or Metrobank account details used for bank transfers
• Transaction history: deposits, withdrawals, amounts, timestamps, and payment method used
• Betting and gaming history: game type, stake amounts, outcomes, and session durations

2.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Pages visited, session duration, and in-platform navigation behavior
• Login timestamps and device identifiers
• Referral source (how you arrived at bb8ph)

2.5 Communications Data

• Live chat transcripts with customer support
• Email correspondence with bb8ph support or the Data Protection Officer
• Feedback, survey responses, or complaints submitted through the platform

bb8ph uses your personal data only for legitimate, specified purposes directly related to operating the platform and providing services to you. We do not sell your personal data to third parties. The primary purposes for which we process your data are:

• Account creation and management: Setting up your bb8ph player account, verifying your identity, and managing your login credentials securely.
• Age verification: Confirming that you are at least 21 years of age before granting access to real-money gaming services, in compliance with applicable Philippine law.
• Transaction processing: Facilitating GCash, Maya, BPI, BDO, and other payment method deposits and withdrawals to and from your bb8ph wallet.
• Regulatory compliance and anti-money laundering (AML): Meeting obligations under Philippine law including monitoring for suspicious transaction patterns, large transaction reporting, and maintaining required records.
• Responsible gaming: Monitoring gaming behavior to identify signs of problematic gambling and enforcing self-exclusion, deposit limits, and cooling-off periods where requested or required.
• Fraud prevention and security: Detecting and preventing unauthorized access, identity fraud, account takeover attempts, and payment fraud.
• Customer support: Responding to queries, resolving disputes, and maintaining support records.
• Platform improvements: Analyzing usage patterns and technical performance to improve the bb8ph player experience.
• Marketing communications (with consent): Sending promotional offers, bonus notifications, and platform updates to players who have opted in. You may withdraw consent at any time via your account settings or by contacting support.
• Legal obligations: Complying with orders, investigations, or requests from lawful Philippine regulatory or law enforcement authorities.

Under the Data Privacy Act of 2012 (RA 10173), bb8ph processes personal data on the following lawful bases:

• Consent: Where you have given clear, informed consent for a specific processing purpose — such as marketing emails or newsletters. You may withdraw consent at any time.
• Contractual necessity: Processing required to perform the contract between you and bb8ph — namely, creating your account, processing your bets, and paying out winnings.
• Legal obligation: Processing required to comply with Philippine law, including AML regulations, KYC requirements, and data retention mandates issued by competent regulatory authorities.
• Legitimate interest: Processing reasonably necessary for bb8ph's legitimate business interests — such as fraud prevention, platform security, and platform improvement — where those interests are not overridden by your privacy rights.
• Vital interests: Where processing is necessary to protect the life or health of a data subject — for instance, acting on information suggesting a player is at risk of serious harm related to problem gambling.

bb8ph does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We may share your data with trusted third parties solely to the extent necessary to operate the platform and fulfill our legal obligations:

All third-party service providers engaged by bb8ph are contractually required to handle your personal data securely, use it only for the specified purpose, and comply with applicable Philippine data protection law. bb8ph does not authorize any third-party processor to use your data for their own commercial purposes.

bb8ph uses cookies and similar tracking technologies to operate the platform correctly, improve your experience, and understand how players use the site. A cookie is a small text file stored on your device by your browser. We use the following categories of cookies:

• Essential cookies: Required for the platform to function — including login session management, security tokens, and load balancing. These cannot be disabled without breaking core functionality.
• Performance cookies: Collect anonymized data about how pages are used, loading times, and error occurrences. Used to improve platform stability and speed. No personally identifiable information is transmitted.
• Functional cookies: Remember your preferences — such as preferred game category, language settings, and display options — to personalize your bb8ph experience across visits.
• Analytics cookies: Help us understand aggregate player behavior — popular game categories, navigation paths, and session length trends — so we can improve the lobby and content relevance.

You can control non-essential cookies through your browser settings. Disabling cookies may affect certain platform features. For the best experience at bb8ph, we recommend keeping essential and functional cookies enabled.

bb8ph retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law or legitimate business need. Specific retention periods are as follows:

• Account and KYC records: Retained for a minimum of five (5) years from account closure, in compliance with Philippine AML and financial record-keeping regulations.
• Transaction and betting history: Retained for a minimum of five (5) years from the date of each transaction for regulatory compliance and dispute resolution purposes.
• Support communications: Retained for three (3) years from the date of the communication, unless a longer period is required for an ongoing investigation or dispute.
• Marketing consent records: Retained for the duration of your consent and for three (3) years after withdrawal of consent as evidence of compliance.
• Technical/usage logs: Retained for up to twelve (12) months for security monitoring and fraud investigation purposes, after which they are anonymized or deleted.

When retention periods expire, bb8ph securely deletes or anonymizes personal data so that it can no longer be associated with an identified individual. You may request early deletion of certain data categories subject to overriding legal or regulatory retention obligations — see Section 8 for your rights.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by bb8ph. To exercise any of these rights, contact our Data Protection Officer using the details in Section 13.

bb8ph implements technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to:

• SSL/TLS encryption on all data in transit between your browser and bb8ph servers — visible as HTTPS and the padlock icon in your browser address bar.
• Encryption at rest for sensitive data including KYC documents, payment references, and authentication credentials stored on bb8ph infrastructure.
• Hashed and salted passwords — bb8ph never stores your password in plain text. Even if a data breach were to occur, raw passwords would not be exposed.
• Two-factor authentication (2FA) available to all players and required for staff accounts with access to player data.
• Access controls and role-based permissions limiting which bb8ph staff can access which categories of player data based on job function and need-to-know.
• Regular security audits and penetration testing conducted by qualified third-party security professionals.
• Automated brute-force protection on the bb8ph login system — account lockouts, login alerts, and suspicious activity detection.
• Data breach response procedures: In the event of a personal data breach that poses a risk to your rights, bb8ph will notify the National Privacy Commission and affected individuals within the timeframes required by RA 10173.

While bb8ph takes all reasonable steps to protect your data, no online platform can guarantee absolute security. We encourage you to use a strong, unique password for your bb8ph account, enable 2FA, and never share your login credentials with anyone — including people claiming to represent bb8ph support.

bb8ph is strictly an adults-only platform. Access is prohibited for any person under 21 years of age, in line with applicable Philippine regulations governing real-money online gaming. We do not knowingly collect personal data from individuals under 21.

Age verification is a mandatory part of the bb8ph registration and KYC process. Any account found to belong to a person under 21 will be immediately suspended, all funds will be frozen pending investigation, and the account will be permanently closed in accordance with our Terms and Conditions. If you believe that bb8ph has inadvertently collected data from a minor, please contact our Data Protection Officer immediately at the address in Section 13 so we can take prompt corrective action.

The bb8ph platform may contain references to third-party services such as payment gateways (GCash, Maya, BPI, BDO), game software providers, and responsible gaming organizations. When you follow a link to a third-party service, you leave the bb8ph platform and are subject to the privacy policy of that third party. bb8ph is not responsible for the privacy practices of external websites or services. We encourage you to review the privacy policy of any third-party service before submitting personal data to it.

bb8ph reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page;
• Display a prominent notice on the bb8ph platform informing logged-in users of the update;
• Where required by law or where changes significantly affect your rights, notify you directly via your registered email address or mobile number.

Your continued use of the bb8ph platform following the posting of changes constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with the changes, please discontinue using the platform and contact our support team to initiate account closure.

If you have any questions, concerns, or requests regarding this Privacy Policy or bb8ph's data practices, please contact our Data Protection Officer. We are committed to addressing all data-related inquiries promptly and in good faith.