philboss Privacy Policy

1. Who We Are — Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, philboss acts as the Personal Information Controller (PIC) in respect of the personal data collected from players through the philboss.one platform. philboss determines the purposes and means of processing your personal data as described in this Policy.

If you have any questions about how philboss handles your personal data, or wish to exercise your data subject rights, you may contact our Data Protection Officer using the details in Section 14 of this Policy.

2. What Personal Data We Collect

philboss collects the following categories of personal data from players:

philboss does not collect special categories of sensitive personal data (e.g., health data, political opinions, biometric data) unless required by law for KYC or self-exclusion purposes.

3. How We Collect Personal Data

philboss collects your personal data through the following means:

• Direct interactions: Data you provide when registering an Account, completing KYC verification, making deposits or withdrawal requests, contacting support, or participating in promotions.
• Automated technologies: Data collected automatically when you visit or use the philboss platform, including cookies, server logs, and device fingerprinting technologies.
• Third-party sources: Data received from payment processors (GCash, PayMaya, BPI, BDO, Metrobank, UnionBank) necessary to verify and process transactions, and from identity verification service providers used for KYC compliance.

4. Legal Basis for Processing

philboss processes your personal data on the following legal grounds under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to create and manage your philboss Account, process transactions, and deliver gaming services.
• Legal obligation: Processing required to comply with PAGCOR regulations, anti-money laundering (AMLA) requirements, and orders from competent Philippine authorities.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and improving service quality — balanced against your privacy rights.
• Consent: Processing for optional communications such as promotional emails or SMS notifications, where you have given explicit consent. You may withdraw consent at any time via Account settings or by contacting support.

5. How philboss Uses Your Personal Data

philboss uses your personal data for the following purposes:

5.1 Platform Operations

• Creating, verifying, and managing your philboss Account.
• Processing deposits and withdrawals via GCash, PayMaya, and supported Philippine banking channels.
• Providing access to philboss games including slots, live casino, bingo, fishing games, and W Live.
• Delivering customer support via live chat and email.

5.2 Regulatory Compliance

• Conducting age verification to enforce the 21+ requirement under Philippine law.
• Performing Know Your Customer (KYC) identity checks as required by PAGCOR and AMLA regulations.
• Reporting to competent Philippine regulatory authorities when legally obligated.
• Maintaining records of transactions and player activity as required by applicable law.

5.3 Security & Fraud Prevention

• Detecting and preventing fraudulent activity, bonus abuse, money laundering, and collusion on the Platform.
• Monitoring login activity to identify and respond to unauthorised access to philboss Accounts.

5.4 Responsible Gaming

• Enforcing self-exclusion and cooling-off requests made by players.
• Monitoring gaming patterns to identify potential problem gambling behaviour where required.

5.5 Communications (with consent)

• Sending promotional offers, bonus notifications, and platform updates via SMS or email where you have consented.
• You may opt out of marketing communications at any time via Account settings.

6. Data Sharing & Disclosure

philboss does not sell or rent your personal data. We may share your personal data with the following categories of recipients, limited to what is strictly necessary for the stated purpose:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank receive transaction data required to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers receive identity data for the purpose of regulatory verification. These providers are bound by confidentiality obligations.
• Game providers: Game software providers (e.g., PG Soft, Pragmatic Play, Evolution) may receive limited technical data necessary to deliver their games through the philboss Platform.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities as required by law.
• Law enforcement: Philippine law enforcement agencies where philboss is legally compelled to disclose information pursuant to a valid court order or legal process.

All third parties with whom philboss shares personal data are required to handle such data in accordance with applicable data protection laws and are prohibited from using it for their own marketing purposes.

7. Data Retention

philboss retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including the satisfaction of legal, regulatory, accounting, and reporting obligations. Specific retention periods include:

• Account data: Retained for the duration of your active philboss Account plus a minimum of five (5) years after closure, as required by AMLA regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Support communications: Retained for three (3) years from the date of the last interaction.
• Technical/log data: Retained for up to twelve (12) months for security and fraud prevention purposes.

Upon expiry of the applicable retention period, philboss will securely delete or anonymise your personal data in accordance with its internal data disposal procedures.

8. Data Security

philboss implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the philboss Platform.
• Encrypted storage of passwords using secure hashing algorithms — philboss staff cannot access your password in plaintext.
• Role-based access controls limiting internal access to personal data to authorised personnel only.
• Regular security audits and penetration testing of the Platform infrastructure.
• Two-factor authentication for account logins from new or unrecognised devices.

In the event of a personal data breach that poses a risk to your rights and freedoms, philboss will notify the National Privacy Commission (NPC) and affected players in accordance with the timelines required by the Data Privacy Act of 2012 and NPC Circular 16-03.

9. Cookies & Tracking Technologies

The philboss Platform uses cookies and similar tracking technologies to operate the Platform, improve user experience, and support security functions. The categories of cookies used include:

• Essential cookies: Required for the Platform to function. These include session cookies that maintain your logged-in state and security cookies that protect against cross-site request forgery (CSRF). These cannot be disabled without affecting Platform functionality.
• Analytics cookies: Used to understand how players navigate and use the Platform, allowing us to improve design and performance. Data collected is aggregated and anonymised.
• Preference cookies: Store your Platform preferences such as language and display settings to improve your experience across sessions.

You may manage cookie preferences through your browser settings. Blocking essential cookies may impair your ability to use the philboss Platform, including the ability to log in.

10. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by philboss:

• Right to be informed: The right to know that your personal data is being collected and processed, including the purposes and legal basis for such processing.
• Right to access: The right to request a copy of the personal data philboss holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where there is no longer a legal or legitimate basis for philboss to retain it.
• Right to data portability: The right to receive your personal data in a structured, commonly used format for transfer to another controller, where technically feasible.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to damages: The right to claim compensation for damages suffered as a result of inaccurate, incomplete, or misleading data processing.

To exercise any of the above rights, please contact our Data Protection Officer as described in Section 14. philboss will respond to verified requests within thirty (30) days of receipt. Some rights may be limited where retention is required by law or regulatory obligation.

11. Children's and Minors' Privacy

The philboss Platform is strictly for individuals aged 21 years and above. philboss does not knowingly collect personal data from persons under 21 years of age. If philboss discovers that personal data has been collected from a person below the required age, that Account will be immediately suspended and all associated data will be deleted in accordance with our data disposal procedures. If you believe a minor has registered an Account on philboss, please contact our support team immediately.

12. Cross-Border Data Transfers

Where philboss transfers your personal data to processors or service providers located outside the Philippines (for example, certain game software providers with servers in other countries), philboss ensures that such transfers are conducted in compliance with Section 21 of the Data Privacy Act of 2012. This includes entering into appropriate data processing agreements that impose data protection obligations equivalent to those applicable in the Philippines, and ensuring that the recipient jurisdiction provides an adequate level of data protection.

13. Changes to This Privacy Policy

philboss reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes to this Policy will be communicated to registered players via the mobile number or email address associated with their Account, or via a prominent notice on the Platform, with a minimum of seven (7) days' advance notice. Your continued use of the philboss Platform following the effective date of any amended Policy constitutes your acceptance of the updated terms. We encourage you to review this Privacy Policy periodically.

14. Contact & Data Protection Officer

For any questions, requests, or concerns relating to this Privacy Policy or your personal data rights, you may contact the philboss Data Protection Officer through the following channels:

• Live Chat: Available 24/7 through the philboss Platform (accessible after philboss login).
• Email: [email protected] — please include "Privacy Request" in your subject line. (Displayed as plain text only — not a clickable link.)

philboss will acknowledge all privacy-related requests within 72 hours and will endeavour to resolve them within thirty (30) days. If you are not satisfied with philboss's response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.