egebet Privacy Policy

1 About This Policy

This Privacy Policy describes how egebet — the online gaming platform accessible at egebet.ws — collects, uses, stores, shares, and protects the personal data of individuals who register as players, visit the platform, or interact with egebet's services in any manner.

This Policy is issued in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. It applies to all personal data collected through the egebet website, mobile platform, customer support channels, and any other touchpoints through which egebet interacts with players.

This Policy should be read together with egebet's Terms & Conditions, which govern the overall use of the platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions regarding data privacy matters, this Privacy Policy shall prevail.

2 Data Controller

egebet acts as the personal information controller (PIC) in respect of all personal data collected from players and visitors of the egebet platform. As data controller, egebet determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data protection law.

egebet has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection legislation. You may contact the DPO at any time using the contact details set out in Section 17 of this Policy.

3 Data We Collect

egebet collects several categories of personal data depending on how you interact with the platform. The table below summarises the main categories of data collected:

egebet does not intentionally collect sensitive personal information such as health data, religious beliefs, or political affiliations. If you voluntarily disclose such information in a support communication, egebet will handle it with the heightened protections required under the Data Privacy Act.

4 How We Collect Data

egebet collects personal data through the following means:

4.1 Direct Collection

Information you provide directly when you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, participate in a promotion, or respond to a survey.

4.2 Automated Collection

Technical and gaming data collected automatically when you access the egebet platform, including your IP address, device identifiers, browser information, cookies, and gameplay activity logs. This data is collected using cookies, web beacons, server logs, and similar tracking technologies as described in Section 11 of this Policy.

4.3 Third-Party Sources

egebet may receive personal data from third-party identity verification providers engaged to perform KYC checks, payment processors confirming transaction details, and fraud detection services providing risk signals. All third-party data providers engaged by egebet are contractually required to handle personal data in compliance with applicable Philippine data protection law.

5 How We Use Your Data

egebet processes your personal data for the following purposes:

• Account creation and management: To register your egebet account, verify your identity and age, and maintain your account in accordance with these Terms & Conditions.
• Platform operation: To provide you with access to all egebet games, sports betting markets, bingo rooms, and other gaming products, and to process your wagers, deposits, and withdrawals.
• KYC and AML compliance: To verify your identity, conduct anti-money laundering checks, and meet egebet's regulatory obligations under applicable Philippine law.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, bonus abuse, money laundering, and unauthorised account access.
• Responsible gaming: To monitor gaming patterns, identify indicators of problem gambling, enforce deposit limits and self-exclusion requests, and fulfil egebet's responsible gaming obligations.
• Customer support: To respond to your enquiries, resolve complaints, and improve the quality of egebet's customer service.
• Marketing communications: To send you personalised offers, promotions, and updates about egebet — but only where you have provided valid consent. You may withdraw this consent at any time.
• Platform analytics and improvement: To analyse how players use the egebet platform, identify areas for improvement, and develop new features and products.
• Legal and regulatory compliance: To comply with applicable Philippine laws, regulatory requirements, and orders from competent authorities.

6 Legal Basis for Processing

Under the Data Privacy Act of 2012, egebet processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and egebet (i.e., the Terms & Conditions), including account management, game provision, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including KYC/AML obligations and regulatory reporting requirements.
• Legitimate interests: Processing necessary for egebet's legitimate interests, including fraud prevention, platform security, and responsible gaming monitoring, provided those interests are not overridden by your data protection rights.
• Consent: Processing for optional purposes such as marketing communications and the placement of non-essential cookies, which requires and relies on your prior informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7 Data Sharing & Disclosure

egebet does not sell, rent, or trade your personal data. egebet may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

7.1 Service Providers

Third-party companies engaged by egebet to provide services necessary for platform operation, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), KYC verification providers, fraud detection services, cloud hosting providers, and customer support software providers. All service providers are bound by data processing agreements requiring them to process personal data only on egebet's documented instructions and to implement appropriate security measures.

7.2 Regulatory and Law Enforcement Authorities

egebet may disclose personal data to Philippine government agencies, regulatory bodies, or law enforcement authorities where required to do so by applicable law, court order, or regulatory direction. Such disclosures may include reporting to the Anti-Money Laundering Council (AMLC) of the Philippines in accordance with Republic Act No. 9160 (Anti-Money Laundering Act), as amended.

7.3 Corporate Transactions

In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of egebet's assets, player personal data may be transferred to the acquiring entity, subject to that entity assuming the obligations of this Privacy Policy or providing equivalent protections.

7.4 With Your Consent

egebet may share your personal data with other third parties where you have provided your explicit informed consent to such sharing for a specific, stated purpose.

8 International Data Transfers

egebet's primary data processing operations are conducted within the Philippines. However, some of egebet's service providers — particularly cloud hosting and fraud detection partners — may process personal data on servers located outside the Philippines.

Where personal data is transferred outside the Philippines, egebet ensures that appropriate safeguards are in place, including contractual clauses that impose data protection obligations on the receiving party equivalent to those required under the Data Privacy Act of 2012. egebet will not transfer your personal data to a jurisdiction that does not provide an adequate level of data protection unless such safeguards are in place.

9 Data Retention

egebet retains your personal data for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory retention obligations, and to resolve any disputes or enforce egebet's agreements.

The following general retention periods apply:

• Account and KYC data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in accordance with Philippine AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, consistent with AMLC reporting obligations.
• Gaming history: Retained for a minimum of three (3) years from the date of each gaming session, for dispute resolution and regulatory audit purposes.
• Marketing consent records: Retained for the duration of the marketing relationship and for two (2) years after consent is withdrawn, to demonstrate compliance.
• Support communications: Retained for two (2) years from the date of the communication, for quality assurance and complaint handling purposes.

When personal data is no longer required for any of the above purposes, egebet will securely delete or anonymise it in accordance with industry-standard data destruction practices.

10 Security Measures

egebet implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption: All data transmitted between your device and egebet's servers is encrypted using TLS (Transport Layer Security). Sensitive stored data, including payment credentials and identity documents, is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data is restricted to egebet personnel and authorised service providers who require access to perform their duties. Role-based access controls and the principle of least privilege are applied throughout egebet's systems.
• Two-factor authentication: egebet offers SMS OTP-based two-factor authentication for player accounts and mandates multi-factor authentication for all internal staff access to production systems.
• Regular security assessments: egebet conducts periodic vulnerability assessments and penetration testing of its platform infrastructure to identify and remediate security weaknesses.
• Incident response: egebet maintains a data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, egebet will notify the National Privacy Commission and affected players within the timeframes prescribed by the Data Privacy Act and its Implementing Rules.

While egebet implements robust security measures, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your egebet account and to enable two-factor authentication to further protect your account.

11 Cookies & Tracking Technologies

11.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. egebet uses cookies and similar technologies (such as web beacons and local storage) to operate the platform, enhance your user experience, and gather analytics data.

11.2 Types of Cookies Used

• Strictly necessary cookies: Required for the egebet platform to function correctly, including session management, login authentication, and security features. These cookies cannot be disabled without significantly impairing your ability to use the platform.
• Functional cookies: Allow egebet to remember your preferences, such as your preferred language, display settings, and responsible gaming limits configured in your account.
• Analytics cookies: Used to collect anonymised data about how players use the egebet platform, including pages visited, time spent, and navigation paths, in order to improve platform performance and user experience.
• Security cookies: Help egebet detect and prevent fraudulent activity, bot access, and other security threats.

11.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse some or all cookies, delete existing cookies, and set preferences for specific websites. Please note that disabling strictly necessary cookies will affect your ability to log in and use the egebet platform. For guidance on managing cookies in your browser, refer to your browser's help documentation.

12 Your Privacy Rights

Under the Data Privacy Act of 2012 and its Implementing Rules, you have the following rights in respect of your personal data held by egebet:

• Right to be informed: The right to be informed whether egebet holds personal data about you and to receive a clear explanation of how it is processed — as provided in this Privacy Policy.
• Right of access: The right to request a copy of the personal data egebet holds about you, including information about how it is used and with whom it is shared.
• Right to rectification: The right to request correction of any inaccurate, incomplete, or outdated personal data egebet holds about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to egebet's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or for purposes based on egebet's legitimate interests.
• Right to data portability: The right to receive a copy of personal data you have provided to egebet in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe egebet has processed your personal data in breach of the Data Privacy Act.

To exercise any of the above rights, please contact egebet's Data Protection Officer using the contact details in Section 17. egebet will respond to privacy rights requests within thirty (30) calendar days of receipt, or within the extended period permitted under applicable law for complex requests.

13 Children & Minors

The egebet platform is strictly intended for individuals who are at least 21 years of age, consistent with Philippine gaming regulations. egebet does not knowingly collect personal data from persons under 21 years of age.

If egebet becomes aware that personal data has been collected from a person under 21 years of age, it will immediately suspend the associated account, delete the collected data to the extent permitted by law, and void any wagers or winnings associated with the account. Parents and guardians who believe that a minor may have registered an egebet account are encouraged to contact egebet's support team immediately.

14 Responsible Gaming & Data

egebet uses your gaming data — including session duration, deposit frequency, wager amounts, and win/loss patterns — to support responsible gaming monitoring. This processing is carried out in egebet's legitimate interest and in fulfilment of its responsible gaming obligations, and does not require your separate consent.

Where egebet's responsible gaming systems identify indicators of potential problem gambling, egebet may contact you with information about responsible gaming tools and resources available through the platform, or may apply account-level restrictions in accordance with the egebet Responsible Gaming policy.

If you request self-exclusion, egebet will retain a record of your self-exclusion status for the duration of the exclusion period and for a reasonable period thereafter to prevent re-registration. This retention is necessary to fulfil egebet's responsible gaming obligations and is not used for any other purpose.

15 Third-Party Links

The egebet platform may contain links to third-party websites or services, including payment provider portals. This Privacy Policy applies only to the egebet platform. egebet is not responsible for the privacy practices of third-party websites and recommends that you review the privacy policies of any third-party sites you visit.

16 Policy Amendments

egebet reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, egebet's data processing practices, or the features of the egebet platform. Material changes to this Privacy Policy will be communicated to registered players via email to the address on file and/or via a prominent notice on the egebet platform.

The updated Privacy Policy will take effect on the date specified in the notice. Your continued use of the egebet platform after the effective date of any amendment constitutes your acknowledgement of the updated Privacy Policy. If you do not accept the amended Privacy Policy, you must cease using the platform and may request voluntary account closure.

The current version of this Privacy Policy is always accessible at egebet.ws/privacy-policy. The effective date at the top of this document indicates when it was last revised.

17 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or egebet's data processing practices, please contact egebet's Data Protection Officer:

• Email (Data Privacy): [email protected]
• Live Chat: Available 24/7 via the egebet platform after login — select "Privacy & Data" from the support menu.
• Response Time: egebet aims to acknowledge all privacy-related enquiries within 3 business days and resolve them within 30 calendar days.

If you are not satisfied with egebet's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing the Data Privacy Act of 2012. Information about filing a complaint with the NPC is available on the NPC's official website.