Privacy Policy

This Privacy Policy ("Policy") describes how bestph ("bestph", "we", "us", "our") collects, processes, stores, uses, and shares the personal information of individuals who access or use the bestph online gaming platform at bestph.biz and any associated mobile web experiences, services, and communications ("Platform").

bestph is committed to protecting the privacy and personal data of every player who trusts us with their information. We recognize that Filipino players — whether you're logging in from a condo in Makati, a coffee shop in BGC, your home in Cebu City, or anywhere across the Philippines — deserve to know exactly how their data is being used and kept safe.

This Policy is intended to be read together with the bestph Terms & Conditions and the bestph Responsible Gaming Policy, both of which are incorporated by reference. Capitalized terms not defined in this Policy carry the meanings assigned to them in the Terms & Conditions.

By creating a bestph account, using the Platform, or submitting any personal information to bestph, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the bestph Platform.

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and the regulations promulgated by the National Privacy Commission (NPC), bestph acts as the Personal Information Controller (PIC) with respect to the personal data of players on the Platform.

As the Personal Information Controller, bestph is responsible for determining the purposes and means of processing your personal data, for implementing appropriate organizational and technical security measures, and for ensuring that your rights as a data subject are fulfilled.

bestph's designated Data Protection Officer (DPO) can be reached through the contact details specified in Section 14 of this Policy. The DPO is responsible for overseeing bestph's compliance with applicable data protection laws and for serving as the point of contact for data subject requests and regulatory inquiries.

bestph collects personal data from you in various ways — directly when you provide it to us, automatically through your use of the Platform, and occasionally from third-party sources as described below.

3.1 Data You Provide Directly

When you register an account, complete identity verification, or communicate with bestph, you provide us with the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued ID details (e.g., Philippine Passport number, UMID, PhilSys ID, Driver's License number).
• Contact Data: Email address and mobile number registered in your name.
• Address Data: Residential address, city, province, and postal code (required for KYC verification).
• Financial Data: GCash mobile number, PayMaya account details, bank account name and number (BPI, BDO, Metrobank, or other linked institutions), transaction history, deposit amounts, and withdrawal records.
• Identity Verification Documents: Scanned or photographed copies of government-issued identification submitted during the KYC verification process.
• Communications Data: Content of messages sent to bestph support via live chat, email, or any other communication channel.

3.2 Data Collected Automatically

When you use the bestph Platform, we automatically collect certain technical and behavioral data:

• Device & Technical Data: IP address, device type and model, operating system and version, browser type and version, screen resolution, and device language settings.
• Usage Data: Pages visited on the Platform, time and duration of sessions, game titles played, bet amounts, game outcomes, bonus claims, navigation paths, and feature usage patterns.
• Location Data: General geographic location derived from your IP address (country and city level). bestph does not collect precise GPS location data.
• Log Data: Server logs recording login timestamps, IP addresses at login, failed login attempts, password reset requests, and session termination events.

3.3 Data From Third Parties

bestph may receive personal data about you from the following third-party sources:

• Payment Providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment partners may share transaction confirmation data, payment status updates, and identity verification outputs with bestph.
• KYC Verification Partners: Third-party identity verification service providers engaged by bestph may process and return identity match scores and document authenticity assessments.
• Fraud Prevention Services: Third-party fraud detection tools may flag device fingerprints or behavioral patterns associated with known fraudulent activity.
• Regulatory Authorities: PAGCOR and the Anti-Money Laundering Council (AMLC) may share information with bestph in connection with regulatory compliance obligations.

bestph processes your personal data only for specific, legitimate purposes. The table below sets out the primary purposes for which your data is processed and the categories of data involved in each activity:

bestph does not process your personal data for any purpose not listed above without obtaining your prior consent, unless required to do so by applicable Philippine law or court order.

Under the Data Privacy Act of 2012, bestph relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing required to perform the bestph Terms & Conditions — including account registration, game delivery, payment processing, and withdrawal management.
• Legal Obligation: Processing required to comply with applicable Philippine law, including KYC requirements under BSP and PAGCOR regulations, AML obligations under the Anti-Money Laundering Act, and age verification requirements under gaming legislation.
• Legitimate Interests: Processing necessary for bestph's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where these interests are not overridden by your fundamental rights.
• Consent: Processing for purposes not covered by the above bases — primarily marketing communications — where bestph has obtained your explicit, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bestph does not sell your personal data to third parties. We share your personal data only in the limited circumstances described below, and only to the extent necessary for each purpose:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and InstaPay require your name and payment account details to process deposits and withdrawals. These providers operate under their own privacy policies and are independently regulated.
• Game Technology Providers: Licensed game studios (such as Pragmatic Play, PG Soft, and Evolution Gaming) receive session identifiers and wallet balance information necessary to deliver game functionality. These providers do not receive your identity documents or payment details.
• KYC and Fraud Prevention Partners: Identity verification and fraud detection service providers receive the minimum data necessary to verify your identity and assess fraud risk. All such partners are contractually bound to process your data only as directed by bestph.
• Regulatory Authorities: bestph is required to share certain player data with PAGCOR, the AMLC, the National Privacy Commission, the Bureau of Internal Revenue (BIR), and other Philippine government bodies when required by law, regulation, court order, or legal process.
• Professional Advisors: Legal counsel, accountants, and auditors may access your data to the extent necessary to provide professional services to bestph, under obligations of professional confidentiality.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of bestph's assets, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

All third parties with whom bestph shares personal data are required to implement appropriate technical and organizational security measures and to process your data only in accordance with bestph's instructions and applicable Philippine data protection law.

The bestph Platform uses cookies and similar tracking technologies to operate the site, maintain your session, improve performance, and where consented, to deliver relevant content. A cookie is a small text file stored on your device by your web browser at the instruction of the website you are visiting.

7.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies maintain your login session, remember your language preference, and prevent cross-site request forgery. They cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: Used to understand how players interact with the bestph Platform — which pages are visited most often, how long sessions last, and where players encounter errors. Data collected by these cookies is aggregated and anonymized.
• Functionality Cookies: Remember your preferences — such as remembered username for login and your last selected game category — to personalize your experience on bestph.
• Session Security Cookies: Used to detect suspicious session activity, such as concurrent logins from multiple locations or device fingerprint mismatches, as part of bestph's account security framework.

7.2 Managing Cookies

You may control cookies through your browser settings. Most browsers allow you to view, disable, or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging in to your bestph account and using core platform features. Disabling performance cookies will not affect your ability to play or transact on bestph.

For detailed instructions on managing cookies in your specific browser (Chrome, Safari, Firefox, or others), refer to your browser's built-in help documentation.

bestph retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following retention periods apply:

At the end of the applicable retention period, bestph will securely delete or irreversibly anonymize your personal data. Where deletion is required but technically constrained in the short term, bestph will place the data in a restricted access state pending scheduled deletion.

bestph implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your browser and the bestph Platform is protected by 256-bit TLS/SSL encryption. The bestph website operates exclusively over HTTPS.
• Encryption at Rest: Sensitive personal data stored in bestph's databases — including identity documents, financial account details, and KYC records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within bestph's internal systems is restricted on a strict need-to-know basis. All staff with access to player data undergo background screening and privacy awareness training.
• Two-Factor Authentication (2FA): bestph offers 2FA for player accounts and requires 2FA for all internal administrative access to systems holding personal data.
• Security Monitoring: bestph operates continuous monitoring systems to detect suspicious activity, including unauthorized access attempts, unusual login patterns, and potential data exfiltration events.
• Penetration Testing: bestph commissions independent security assessments of its platform infrastructure on a regular basis to identify and remediate vulnerabilities.
• Incident Response: bestph maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, bestph will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay.

Under the Data Privacy Act of 2012, as a Filipino data subject and bestph player, you are entitled to exercise the following rights with respect to your personal data held by bestph:

• Right to Be Informed: The right to know what personal data bestph collects about you and how it is used — fulfilled by this Privacy Policy.
• Right to Access: The right to request a copy of the personal data bestph holds about you, the purposes for which it is processed, and the categories of third parties with whom it has been shared.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data bestph holds about you. You may update your contact details and certain account information directly through your bestph account settings.
• Right to Erasure ("Right to be Forgotten"): The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bestph's legal retention obligations under PAGCOR regulations and the AMLA.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes at any time, and to object to processing based on legitimate interests where your individual circumstances create a compelling reason to do so.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another controller where technically feasible.
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that bestph has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the above rights, submit a written request to bestph via email at [email protected] with the subject line "Data Subject Rights Request". bestph will acknowledge your request within 5 business days and fulfil it within 30 days, subject to identity verification and any applicable legal exemptions.

The bestph Platform is strictly intended for adults who are 21 years of age or older. bestph does not knowingly collect, process, or retain personal data from individuals under the age of 21. The 21+ age restriction is a legal requirement under Philippine gaming regulations administered by PAGCOR, and bestph enforces this requirement rigorously.

If bestph discovers or is informed that personal data has been submitted by an individual who is under 21 years of age, the following steps will be taken without delay:

• The account will be suspended and access to the Platform will be revoked.
• Any funds deposited by the underage individual will be returned to the source payment account after identity verification.
• All personal data collected in connection with the underage account will be deleted from bestph's systems as soon as legally permissible.
• The incident will be reported to PAGCOR as required by applicable regulatory guidelines.

If you are a parent or guardian and believe that your child under 21 has created a bestph account or submitted personal data to the Platform, please contact bestph support immediately via live chat or at [email protected].

The bestph Platform may contain references to or integrations with third-party services, such as payment gateways (GCash, PayMaya), game streaming technology, and identity verification providers. When you interact with these third-party integrations, you may be subject to the privacy policies of those third-party services, which operate independently of bestph.

bestph is not responsible for the privacy practices, security measures, or data processing activities of any third-party service provider. We recommend that you review the privacy policies of any third-party services you interact with in connection with your use of the bestph Platform — particularly the privacy policies of GCash (operated by Globe Telecom) and PayMaya (operated by Maya Bank), as these payment providers have their own data handling practices.

The inclusion of a third-party integration or reference on the bestph Platform does not constitute bestph's endorsement of that third party's privacy practices or data security standards.

bestph reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or regulatory guidance. The most current version of this Policy is always available on the bestph Platform and is identified by the "Last Updated" date displayed at the top of this page.

Where a proposed update to this Policy involves a material change to the way bestph processes your personal data, bestph will notify active account holders via email to their registered address no fewer than fourteen (14) days before the change takes effect. Non-material updates (such as typographical corrections or clarifications that do not alter your rights) may be published without advance notice.

Continued use of the bestph Platform after the effective date of a Policy update constitutes your acceptance of the updated Policy. If you do not agree with a material change to this Policy, you may close your bestph account before the effective date and request withdrawal of your available balance.

If you have any questions, concerns, or requests relating to this Privacy Policy or bestph's data processing practices, you may contact us through the following channels:

• Live Chat: Available 24/7 on the bestph Platform. The fastest channel for account-related privacy queries and data subject rights requests that require prompt attention.
• Email: [email protected] — for formal data subject rights requests, use the subject line "Data Subject Rights Request". For privacy complaints or DPO correspondence, use the subject line "Privacy Complaint" or "DPO Correspondence" respectively.

The bestph Data Protection Officer (DPO) is responsible for overseeing compliance with the Data Privacy Act of 2012 and all applicable NPC regulations, responding to regulatory inquiries, and ensuring that data subject rights are upheld. The DPO can be contacted via email at [email protected] marked for the attention of the Data Protection Officer.

bestph is committed to resolving all privacy-related queries and complaints fairly and promptly. If you remain unsatisfied with our response after reasonable escalation, you may file a formal complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.