Filbit Privacy Policy – How We Protect Your Personal Data

1 Who We Are

This Privacy Policy applies to Filbit, the online betting and casino platform available at filbit.best ("Filbit," "we," "us," or "our"). Filbit is the data controller responsible for the personal information collected through the platform and its related services.

Filbit is built specifically for Filipino players and operates in accordance with Philippine data protection principles, including those set out under Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations. We take our obligations under that law seriously — not because we have to, but because protecting the privacy of our users is simply the right thing to do.

If you have any questions about this policy, how your data is handled, or how to exercise your privacy rights, you can reach us at support@filbit.best. We aim to respond to all privacy-related enquiries within five business days.

2 Personal Data We Collect

Filbit collects the minimum personal data necessary to operate the platform, verify identities, process transactions, and comply with legal obligations. Here is a breakdown of the categories of data we collect:

3 How We Collect Your Data

Filbit collects personal data through the following channels:

Directly from You

When you register an account on Filbit, complete KYC verification, make a deposit or withdrawal, place a bet, contact customer support, or respond to a survey or promotion, you are providing personal data directly to us.

Automatically Through the Platform

When you use the Filbit website or mobile interface, certain technical and usage data is collected automatically through cookies, log files, and similar technologies. This includes your IP address, device type, browser version, pages visited, session duration, and betting activity. This data is used primarily for platform security, fraud detection, and user experience improvement.

From Third-Party Service Providers

Filbit may receive data from third-party identity verification services (used for KYC), payment processors (used for transaction confirmation), and anti-fraud services. These providers supply only the information necessary to complete the specific function and are contractually bound to handle data securely and only for the stated purpose.

4 Why We Use Your Personal Data

Filbit uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, and securing your Filbit account; processing login and authentication.
• Identity verification (KYC): Confirming your age and identity as required by applicable law and Filbit's own responsible gaming commitments.
• Payment processing: Facilitating deposits and withdrawals through your chosen Philippine payment method.
• Betting and gaming services: Recording and settling bets, calculating odds, and managing game outcomes.
• Customer support: Responding to your enquiries, resolving disputes, and handling complaints.
• Legal compliance: Meeting obligations under Philippine law, including anti-money laundering (AML) reporting, data privacy compliance, and cooperation with lawful regulatory requests.
• Fraud and security: Detecting and preventing fraudulent activity, unauthorised account access, bonus abuse, and other platform misuse.
• Platform improvement: Analysing usage patterns to improve the Filbit interface, fix bugs, and develop new features that serve Filipino players better.
• Marketing communications: Sending promotional offers and platform updates to registered users who have not opted out. You can unsubscribe at any time through your account settings or by contacting support.

Filbit does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review.

5 Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules, Filbit relies on the following legal grounds to process your personal data:

• Contractual necessity: Processing required to create and manage your account, process bets, and handle payments. Without this data, Filbit cannot provide its services to you.
• Legal obligation: Processing required to comply with Philippine law, including KYC requirements, AML obligations, and responses to lawful regulatory orders.
• Legitimate interests: Processing for fraud prevention, platform security, and analytics, where these interests do not override your fundamental privacy rights.
• Consent: Processing for direct marketing communications. You can withdraw this consent at any time without affecting the lawfulness of processing before withdrawal.

6 Who We Share Your Data With

Filbit does not sell, rent, or trade your personal data. We share data only in the following specific circumstances, and only to the extent necessary:

Payment Processors

When you make a deposit or withdrawal, your payment details are shared with the relevant payment provider (GCash, Maya, GrabPay, Coins.ph, InstaPay/PESONet, BDO/BPI/UnionBank, or Visa/Mastercard networks). These providers process your transaction under their own privacy policies and PCI-DSS compliance frameworks.

Identity Verification Services

To complete KYC, Filbit may share your submitted ID documents and selfie with a licensed third-party identity verification provider. These providers are contractually bound to use your data only for the verification purpose and to delete it after the retention period required by law.

Fraud and Security Services

Filbit uses third-party anti-fraud tools that may receive technical data such as your IP address, device fingerprint, and behavioural patterns to assess risk. These tools do not receive your full identity data.

Legal and Regulatory Authorities

Filbit will disclose personal data to Philippine government agencies, law enforcement, or courts when legally required to do so — for example, in response to a lawful subpoena, AML investigation, or regulatory audit. In such cases, Filbit will disclose only the minimum data required.

Business Operations

Filbit may use trusted third-party service providers for hosting, analytics, customer support tools, and communications infrastructure. All such providers are subject to data processing agreements that restrict them from using your data for any purpose other than providing the contracted service to Filbit.

7 Cookies and Tracking Technologies

Filbit uses cookies and similar tracking technologies to operate the platform, maintain your logged-in session, remember your preferences, and analyse how users interact with the site. Here is a summary of the types of cookies in use:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without breaking core functionality.
• Functional cookies: Used to remember your language preferences, display settings, and other platform customisations. These improve your experience but are not strictly required.
• Analytics cookies: Used to collect aggregated, anonymised data about how the Filbit platform is used — which pages are visited most, where users experience friction, and how the platform can be improved. No personally identifiable information is included in analytics reports.
• Security cookies: Used to detect and prevent fraudulent logins, bot activity, and other security threats.

You can manage cookie preferences through your browser settings. Note that disabling cookies may affect the functionality of the Filbit platform, including the ability to stay logged in.

8 How Long We Keep Your Data

Filbit retains personal data only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required by law.

• Account data: Retained for the duration of your active account, plus an additional period after closure as required by Philippine AML regulations (typically five years from account closure).
• KYC documents: Retained for five years from account closure, or longer if required by a specific legal or regulatory obligation.
• Transaction records: Retained for five years from the date of each transaction, as required by Philippine financial record-keeping rules.
• Support communications: Retained for two years from the date of the last interaction, unless the matter relates to an ongoing dispute or investigation.
• Technical and usage data (logs): Retained for up to 12 months from collection, unless required longer for security incident investigation.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with any individual user.

9 How We Protect Your Data

Filbit takes data security seriously and has implemented technical and organisational measures appropriate to the risk level associated with processing your personal data. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Filbit platform.
• Encryption at rest for sensitive personal data stored in Filbit's systems.
• Access controls ensuring that only authorised Filbit personnel can access personal data, limited to what they need for their specific role.
• Multi-factor authentication for Filbit internal systems that contain user data.
• Regular security audits and vulnerability assessments to identify and address potential weaknesses.
• Staff training on data privacy obligations and secure data handling practices.
• Incident response procedures to detect, report, and respond to data breaches within required timeframes.

Despite these measures, no online platform can guarantee absolute security. If you suspect that your Filbit account has been compromised, contact support immediately and change your password.

10 Your Privacy Rights as a Filipino Player

Under the Data Privacy Act of 2012 and its Implementing Rules, you have the following rights with respect to your personal data held by Filbit:

To exercise any of these rights, contact Filbit at support@filbit.best with "Privacy Request" in the subject line. We will respond within 15 business days. Identity verification may be required before we can process certain requests.

11 Children's Privacy

Filbit is strictly for adults aged 21 and above. The platform does not knowingly collect personal data from anyone under the age of 21. If Filbit discovers that an account has been registered by a person under the minimum age, that account will be immediately closed and any associated data deleted, except where retention is required to fulfil a legal obligation.

If you are a parent or guardian and believe a minor has created an account on Filbit using false age information, contact support at support@filbit.best immediately. We will act promptly to investigate and close the account.

12 International Data Transfers

Filbit primarily processes and stores data within systems that serve the Philippine market. Where it is necessary to transfer personal data to a third-party service provider located outside the Philippines — for example, a cloud hosting provider or an international payment gateway — Filbit ensures that:

• The recipient country or organisation provides an adequate level of data protection comparable to Philippine standards.
• Appropriate contractual safeguards are in place, including data processing agreements that bind the recipient to confidentiality and security obligations.
• Transfers are limited to what is strictly necessary for the stated purpose.

Filbit does not transfer personal data to jurisdictions known for inadequate data protection without implementing additional safeguards. Where legally required, cross-border transfers are registered with the National Privacy Commission.

13 Changes to This Privacy Policy

Filbit may update this Privacy Policy from time to time to reflect changes in the platform, applicable law, or our data processing practices. When material changes are made, registered users will be notified by email using the address on file. The updated policy will be published on this page with a revised "Last updated" date at the top.

If changes reduce your privacy rights in any significant way, Filbit will provide at least 14 days' advance notice before the changes take effect, giving you time to review them and, if you disagree, to close your account before they apply.

Continued use of Filbit after the effective date of a policy update constitutes acceptance of the revised policy.

14 Contact Us About Privacy

For any questions, concerns, or requests related to this Privacy Policy or your personal data held by Filbit, please contact us:

• Email: support@filbit.best (use "Privacy Request" in the subject line for faster routing)
• Response time: We aim to respond to all privacy-related enquiries within 5 business days. Formal data subject rights requests will receive a full response within 15 business days.

If you are not satisfied with Filbit's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC accepts complaints through its official channels and can investigate potential violations of the Data Privacy Act of 2012.