Privacy Policy – Phil Boss: Your Data, Protected Always

1. Scope of This Privacy Policy

This PhilBoss Privacy Policy applies to all users who access or use our website at phillboss.com, our mobile apps, or any of our online gaming products and services. By registering for a PhilBoss account and using our platform, you agree to the terms described in this policy.

This policy covers all personal data we collect — whether you sign up as a new member, contact our customer support, participate in promotions, or simply browse our website. It applies to all PhilBoss services including Virtual Sports, Poker, Fishing Games, PBA Betting, Sabong, Pusoy, and all other products on the platform.

If you are under 21 years old, you are not permitted to use PhilBoss in accordance with Philippine gaming regulations. We do not knowingly collect personal data from individuals below the legal gambling age.

2. What Personal Data We Collect

When you interact with PhilBoss, we may collect the following types of personal information:

Registration & Identity Information

• Full legal name, date of birth, and gender
• Filipino mobile number and email address
• Government-issued ID details (for KYC/AML compliance — e.g., UMID, passport, SSS ID, driver's license)
• Residential address within the Philippines

Financial & Transaction Data

• GCash number, Maya (formerly PayMaya) account, GrabPay details
• BDO, BPI, UnionBank, or other Philippine bank account information used for deposits/withdrawals
• Transaction history including deposits, withdrawals, bets placed, and winnings
• Visa/Mastercard details (processed securely through our payment gateway — we do not store full card numbers)

Technical & Usage Data

• IP address, browser type, and operating system
• Device identifiers and mobile device type
• Pages visited, features used, and time spent on the PhilBoss platform
• Cookies and session data (see Section 7 on Cookies)

Communications Data

• Messages and chat logs submitted to our customer support team
• Responses to surveys, promotions, or referral programs
• Email and SMS communication history with PhilBoss

3. How We Use Your Personal Data

PhilBoss processes your personal information for the following legitimate purposes:

• Account creation and management — to set up, verify, and maintain your PhilBoss player account.
• Identity verification (KYC) — as required by Philippine Anti-Money Laundering laws and PAGCOR regulations, we verify your identity before processing large transactions.
• Processing deposits and withdrawals — to handle your payments via GCash, Maya, InstaPay/PESONet, and other supported local payment methods.
• Customer support — to respond to your queries, complaints, and requests promptly and effectively.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, cheating, or unauthorized access to PhilBoss accounts.
• Responsible gaming — to monitor gameplay patterns and proactively reach out to players who may show signs of problem gambling, in line with our Responsible Gaming commitments.
• Promotions and bonuses — to administer bonus offers, loyalty rewards, and referral programs for PhilBoss members.
• Legal and regulatory compliance — to comply with Philippine law, respond to lawful government requests, and fulfill our obligations to PAGCOR and the NPC.
• Platform improvement — to analyze usage patterns and improve the PhilBoss user experience, games, and features.

4. When We Share Your Data — And With Whom

PhilBoss does not sell, rent, or trade your personal data. However, there are limited situations where we may share your information with trusted parties:

Payment Service Providers

We share the minimum necessary financial data with payment processors (e.g., GCash, Maya, InstaPay partner banks) strictly to process your deposits and withdrawals. These providers are bound by their own strict security and privacy standards.

Identity Verification Partners

To comply with KYC requirements, we may use third-party identity verification services. These partners are contractually required to handle your data securely and only for verification purposes.

Regulatory Authorities

We may disclose your information to PAGCOR, the AMLC (Anti-Money Laundering Council), the National Privacy Commission, or other Philippine government agencies when required by law, court order, or lawful investigation.

Technology and Service Providers

We work with reputable technology partners — such as cloud hosting providers and customer support tools — who may process data on our behalf. All such partners are under strict data processing agreements aligned with Philippine data privacy standards.

Corporate Transactions

In the event of a merger, acquisition, or business restructuring involving PhilBoss, your data may be transferred to the new entity, which will be required to honor this Privacy Policy.

5. How Long We Keep Your Data

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this PhilBoss Privacy Policy, or as required by Philippine law. Specifically:

• Active accounts: We retain your data for as long as your PhilBoss account remains active.
• Closed accounts: Upon account closure, we retain your data for a minimum of five (5) years in compliance with PAGCOR licensing requirements and anti-money laundering regulations.
• Financial records: Transaction histories are retained for at least ten (10) years as mandated under Philippine banking and AML laws.
• Support communications: Customer support records are kept for up to three (3) years.
• Marketing data: If you opt out of marketing, we remove you from active lists promptly but retain a suppression record to ensure we don't contact you again.

After the applicable retention period, your data is securely deleted or anonymized so it can no longer be linked back to you.

6. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 (RA 10173), as a PhilBoss member based in the Philippines, you have the following rights:

• Right to be Informed — You have the right to know what personal data we collect and how we use it. That is exactly what this Privacy Policy is for.
• Right to Access — You can request a copy of the personal data we hold about you at any time.
• Right to Correction — If any of your data is inaccurate or outdated, you can request that we correct it.
• Right to Erasure / Blocking — Under certain conditions, you may request that we delete or block your personal data, such as when the data is no longer necessary for the original purpose.
• Right to Object — You can object to the processing of your data for marketing or other non-essential purposes.
• Right to Data Portability — You can request your data in a structured, commonly used format.
• Right to Lodge a Complaint — If you believe your data privacy rights have been violated, you may file a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, simply contact our Data Protection Officer using the details in Section 9 below.

7. Cookies and Tracking Technologies

PhilBoss uses cookies and similar technologies to improve your experience on our platform. Here is a summary of how we use them:

• Essential cookies — Required for the PhilBoss website and app to function properly, including maintaining your login session and security tokens. You cannot disable these without affecting core functionality.
• Analytics cookies — Help us understand how players use PhilBoss, which games are popular, and where we can improve the platform. Data is aggregated and anonymized.
• Preference cookies — Remember your settings and preferences, such as language or game filters, so you do not need to reset them every visit.
• Marketing cookies — Used to show you relevant PhilBoss promotions when you visit partner websites. You can opt out of these at any time via your account settings or your browser's cookie preferences.

By continuing to use PhilBoss after being notified of our cookie use, you consent to the use of essential and analytics cookies. Non-essential cookies only activate after you provide explicit consent via our cookie consent banner.

8. How We Protect Your Data

PhilBoss implements a multi-layered security approach to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• SSL/TLS encryption on all web pages and API communications
• Two-factor authentication (2FA) available for your PhilBoss account login
• Regular security audits and penetration testing by independent cybersecurity firms
• Access controls — only authorized staff with a need-to-know basis can access player data
• Data breach response plan — in the unlikely event of a breach, we will notify affected users and the NPC within 72 hours as required by law
• Secure payment handling — card and e-wallet data is processed through PCI-DSS compliant payment gateways; we never store full card numbers on our servers

9. Contact Our Data Protection Officer

If you have questions about this PhilBoss Privacy Policy, want to exercise your data subject rights, or have a privacy-related concern, please contact our designated Data Protection Officer (DPO):

We aim to respond to all privacy-related requests within 15 business days as required under RA 10173. If your request is complex, we may take up to 30 days and will notify you accordingly.

10. Changes to This Privacy Policy

PhilBoss may update this Privacy Policy from time to time to reflect changes in our practices, new product features, or updates to Philippine data privacy regulations. When we make significant changes, we will:

• Post a notice on our homepage and within your PhilBoss account dashboard
• Send an email notification to your registered email address
• Update the "Last Updated" date at the top of this page

Your continued use of PhilBoss after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you disagree with the changes, you have the right to close your account and request data deletion as described in Section 6.

We encourage you to review this PhilBoss Privacy Policy periodically so you stay informed about how we protect your data. Salamat for trusting PhilBoss with your information — we don't take that trust for granted.