bitph Privacy Policy

1

Who We Are

bitph operates the online casino and sports betting platform accessible at bitph.net, offering games including JILI slots, live dealer tables, Tongits Go, Mini Baccarat, Bingo, and sports betting markets to registered players in the Philippines.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, bitph acts as the Personal Information Controller in respect of the personal data you provide when registering for and using the bitph platform.

This Privacy Policy applies to all personal data collected through the bitph website at bitph.net, any mobile-optimized version of the platform, and any communication channels through which you interact with bitph including email and live chat support.

2

Data We Collect

bitph collects personal information across several categories depending on how you interact with our platform. The following table summarises the types of data we collect and the context in which each type is gathered:

2.1 Sensitive Personal Information

Under Philippine law, certain categories of information are classified as Sensitive Personal Information and are subject to stricter safeguards. bitph may process the following sensitive data where legally required:

• Government-issued identification numbers (e.g., PhilSys number, SSS number, TIN) — collected for KYC and anti-money laundering compliance purposes only.
• Financial account information — processed exclusively through secure, certified payment gateways and never stored in plain text on bitph's servers.

bitph does not collect sensitive personal information relating to health, religion, race, political affiliation, or criminal history unless compelled by a specific legal obligation.

3

How We Use Your Data

bitph uses the personal data we collect for the following specific, legitimate purposes:

3.1 Account Management

To create, maintain, verify, and secure your bitph account. This includes processing your registration, authenticating your identity at login, enabling the bitph Login functionality, and managing account settings and preferences.

3.2 Payment Processing

To facilitate your deposits via GCash, PayMaya, BPI, BDO, and Metrobank, and to process withdrawal requests in Philippine Peso (₱). Financial data is shared with our certified payment processing partners solely for the purpose of completing your transactions.

3.3 Regulatory Compliance

To comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and any reporting obligations to PAGCOR or other competent authorities. bitph is required by law to retain certain transaction and identity records for specified minimum periods.

3.4 Responsible Gaming

To monitor gameplay patterns and identify potential problem gambling behaviour. Where our systems detect indicators of excessive play, bitph may proactively reach out to affected players with information about responsible gaming tools available on the platform.

3.5 Platform Improvement & Analytics

To understand how players navigate and use the bitph platform, identify technical issues, and improve the overall user experience. Analytics data is used in aggregated, anonymised form wherever possible.

3.6 Marketing Communications

To send you promotional offers, bonus notifications, and platform updates where you have provided consent to receive such communications. You may opt out of marketing emails at any time by following the unsubscribe link in any promotional message or by contacting bitph support.

3.7 Fraud Prevention & Security

To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other security threats to the bitph platform and its players.

4

Legal Basis for Processing

bitph processes your personal data on the following legal bases as recognised under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform the contract between you and bitph — i.e., to provide you with access to the platform, process your transactions, and manage your account.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including AML regulations, KYC requirements, and PAGCOR operational conditions.
• Legitimate Interest: Processing is necessary for bitph's legitimate interests in preventing fraud, ensuring platform security, and improving our services — provided these interests are not overridden by your privacy rights.
• Consent: Where processing is based on your consent — such as for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

5

Data Sharing & Third Parties

bitph does not sell or rent your personal data to third parties. We share your data only with trusted service providers and authorities in the following limited circumstances:

5.1 Service Providers

bitph works with carefully selected third-party service providers who process personal data on our behalf. These include:

• Payment processors (GCash, PayMaya, BPI, BDO, Metrobank) — to complete your deposit and withdrawal transactions in PHP.
• KYC and identity verification providers — to verify your identity and age as required under Philippine regulations.
• Fraud detection and security services — to protect the platform and its players from unauthorised access and financial crime.
• Cloud infrastructure and hosting providers — to securely store and process platform data.
• Game software providers (including JILI and live dealer studios) — who may receive anonymised session data for game integrity purposes.

All third-party service providers engaged by bitph are contractually required to process your data only on bitph's documented instructions, to maintain appropriate security measures, and to comply with Philippine data privacy law.

5.2 Regulatory and Law Enforcement Authorities

bitph may be required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or courts of competent jurisdiction where required by law, legal process, or a binding regulatory order.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of bitph's business assets, your personal data may be transferred to the acquiring entity. bitph will notify you of any such transfer and ensure that the receiving party is bound by privacy obligations no less protective than those in this Policy.

6

Cookies & Tracking Technologies

bitph uses cookies and similar tracking technologies on its platform to ensure proper functionality, improve the user experience, and support analytics. The following types of cookies are used:

• Essential Cookies: Required for the platform to function correctly. These include session cookies that keep you logged in during your visit and security cookies that help protect your account. These cannot be disabled without affecting platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game display options, and responsible gaming tool configurations.
• Analytics Cookies: Collect anonymised data about how players use the platform — including which games are most popular and where players encounter difficulties — to help bitph improve performance and usability.
• Fraud Prevention Cookies: Help bitph identify and flag suspicious activity, protect against account takeover, and enforce geolocation restrictions.

7

Data Retention

bitph retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to applicable legal and regulatory retention requirements under Philippine law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account plus a minimum of 5 years following account closure, in compliance with AML record-keeping obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, as required by the Anti-Money Laundering Act of 2001 (as amended).
• KYC documents: Retained for the duration of your account plus 5 years following closure or the resolution of any ongoing investigation, whichever is later.
• Support and communications data: Retained for up to 3 years from the date of the last interaction, unless a longer period is required for dispute resolution purposes.
• Marketing consent records: Retained for as long as you maintain a bitph account or until you withdraw consent, whichever comes first.
• Technical and usage logs: Retained for up to 12 months for security monitoring and fraud investigation purposes, then deleted or anonymised.

When personal data is no longer required, bitph securely destroys or permanently anonymises it in accordance with our data disposal procedures.

8

Data Security

bitph implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and the bitph platform.
• Encryption at rest for stored sensitive personal and financial data.
• Access controls and role-based permissions limiting internal access to personal data to authorised personnel only.
• Regular security assessments and penetration testing of the bitph platform infrastructure.
• Two-factor authentication options available to all registered players to protect account access.
• Continuous monitoring for suspicious access patterns and automated fraud detection systems.

9

Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bitph. You may exercise any of these rights by contacting our Data Protection Officer at the address provided in Section 12.

bitph will respond to all valid privacy rights requests within 15 business days of receipt. In complex cases, this may be extended by a further 15 business days, of which you will be informed. There is no charge for submitting a privacy rights request.

10

Children & Minors

The bitph platform is strictly intended for adults aged 21 years and above. bitph does not knowingly collect personal data from individuals under the age of 21. The minimum legal gambling age in the Philippines is 21, and bitph enforces this requirement through its registration and KYC verification processes.

If bitph becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, void any transactions conducted, and securely delete the personal data of the underage individual in accordance with our data disposal procedures.

11

Updates to This Privacy Policy

bitph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine laws and regulations, or platform features. When material changes are made, bitph will notify registered players via email or an in-platform notification at least 7 days before the updated Policy takes effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. The current version of this Privacy Policy is always available at bitph.net/privacy-policy. Your continued use of the bitph platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy.

bitph encourages all players to review this Privacy Policy periodically so that you remain informed about how your personal data is being handled.

12

Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bitph handles your personal data, please contact our Data Protection Officer using the details below. All privacy-related enquiries are treated with strict confidentiality.

12.1 Complaints to the National Privacy Commission

If you are not satisfied with bitph's response to your privacy concern, or if you believe your rights under the Philippine Data Privacy Act of 2012 have been violated, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the government agency responsible for administering and implementing data privacy laws in the Philippines and ensuring compliance by personal information controllers and processors.

bitph cooperates fully with the NPC in all investigations and compliance matters, and we are committed to resolving any privacy concerns raised by our players promptly and fairly.