1phb Privacy Policy

1phb ("1phb," "we," "us," "our") operates the online gaming platform accessible at 1phb.com. As a data controller, 1phb is committed to protecting the privacy and security of the personal information entrusted to us by our Players and website visitors.

This Privacy Policy ("Policy") describes how 1phb collects, uses, stores, shares, and protects personal data in connection with your use of the 1phb website, mobile applications, and all associated services (collectively, the "Platform"). It also describes the rights available to you under the Data Privacy Act of 2012 (Republic Act No. 10173) and how to exercise those rights.

This Policy should be read together with our Terms & Conditions, which govern your use of the Platform. Terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

If you have any questions about this Policy or how 1phb handles your personal data, please contact our Data Protection Officer (DPO) using the details provided in Section 14 of this Policy.

1phb collects the following categories of personal data from Players and website visitors:

1phb does not intentionally collect sensitive personal information as defined under the Data Privacy Act (e.g., health data, political opinions, religious beliefs) unless specifically required for responsible gaming assessments or regulatory compliance, in which case your explicit consent will be obtained.

1phb collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar tracking technologies (see Section 7).
• Third-party sources: Identity verification data from KYC service providers; fraud screening data from anti-fraud partners; payment confirmation data from GCash, PayMaya, BPI, BDO, and Metrobank; and analytics data from platform analytics providers.
• Publicly available sources: Publicly accessible government databases or court records consulted during enhanced due diligence for anti-money laundering compliance.

1phb uses your personal data for the following purposes:

• Account management: To create, verify, maintain, and administer your 1phb account, including processing your registration and KYC verification.
• Service delivery: To provide access to games, process deposits and withdrawals, apply bonuses, and deliver all features of the 1phb Platform.
• Legal and regulatory compliance: To comply with Philippine anti-money laundering laws (AMLA), PAGCOR regulatory requirements, the Data Privacy Act, and other applicable laws. This includes transaction monitoring, suspicious activity reporting, and record-keeping obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, cheating, and other prohibited conduct on the Platform.
• Responsible gaming: To monitor gaming patterns, enforce responsible gaming limits set by the Player, identify potential problem gambling behavior, and administer self-exclusion requests.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. You may opt out at any time.
• Platform improvement: To analyze usage patterns, conduct A/B testing, and improve the performance, security, and user experience of the 1phb Platform.

Under the Data Privacy Act of 2012, 1phb processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you (the Terms & Conditions), including account creation, game access, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws, including AMLA, PAGCOR regulations, and the Data Privacy Act itself.
• Legitimate interests: Processing necessary for 1phb's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and optional data collection. You may withdraw consent at any time without affecting the lawfulness of prior processing.

1phb does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers receive transaction data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party KYC service providers receive identity documents and personal data to verify your identity and age in compliance with regulatory requirements.
• Game providers: Third-party game studios and live casino operators receive your Player ID and session data necessary to deliver their games on the 1phb Platform. These providers do not receive your full identity or financial data.
• Fraud prevention and security partners: Anti-fraud and cybersecurity service providers receive technical data (IP address, device fingerprint, behavioral data) to detect and prevent fraudulent activity.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities may receive personal data where required by law, court order, or regulatory directive.
• Professional advisors: Legal counsel, auditors, and compliance consultants may access personal data under strict confidentiality obligations where necessary for legal or audit purposes.

All third-party data processors engaged by 1phb are contractually required to process personal data only on 1phb's instructions, to implement appropriate security measures, and to comply with the Data Privacy Act of 2012.

1phb uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies are used:

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using the Platform. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.

1phb retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law:

• Account and KYC records: Retained for a minimum of five (5) years from the date of account closure, as required by AMLA and PAGCOR regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming logs: Retained for a minimum of three (3) years from the date of each game session.
• Customer support communications: Retained for two (2) years from the date of the last communication, or longer if related to an ongoing dispute or regulatory inquiry.
• Marketing consent records: Retained for the duration of your account plus two (2) years following account closure.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with 1phb's data disposal procedures. Anonymized data (which can no longer identify you) may be retained indefinitely for statistical and analytical purposes.

1phb implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the 1phb Platform.
• Encryption of sensitive data at rest, including financial data and government ID information.
• Role-based access controls ensuring that 1phb staff can only access personal data necessary for their specific job function.
• Multi-factor authentication requirements for all internal systems that process personal data.
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent security professionals.
• Staff training on data privacy obligations and secure data handling practices.
• Incident response procedures for detecting, containing, and reporting personal data breaches in accordance with NPC notification requirements.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 1phb will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected Players without undue delay, as required by the Data Privacy Act and NPC Circular No. 16-03.

While 1phb takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying 1phb immediately if you suspect unauthorized access to your account.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 1phb:

• Right to be informed: You have the right to be informed of how your personal data is collected, used, and processed — which is the purpose of this Privacy Policy.
• Right of access: You have the right to request a copy of the personal data 1phb holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data. You may update basic account information directly through your account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 1phb's legal retention obligations under AMLA and PAGCOR regulations.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you have grounds relating to your particular situation.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe 1phb has violated your data privacy rights.

To exercise any of these rights, please submit a written request to 1phb's Data Protection Officer using the contact details in Section 14. 1phb will respond to all verified requests within fifteen (15) business days. We may need to verify your identity before processing your request to protect against unauthorized access to your data.

The 1phb Platform is strictly intended for individuals who are at least twenty-one (21) years of age. 1phb does not knowingly collect personal data from persons under the age of 21.

If 1phb discovers or has reason to believe that personal data has been collected from a person under 21 years of age, the relevant account will be immediately suspended, all personal data associated with that account will be deleted as soon as practicable (subject to any mandatory retention obligations), and the matter may be referred to the appropriate Philippine regulatory authority.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to 1phb, please contact our Data Protection Officer immediately using the details in Section 14 so that we can take appropriate action.

Some of 1phb's third-party service providers — including game studios, KYC verification providers, and cloud infrastructure providers — may be located outside the Philippines. Where personal data is transferred to a country outside the Philippines, 1phb ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under the Data Privacy Act of 2012.
• Transfers only to countries or organizations that the National Privacy Commission has determined provide an adequate level of data protection.
• Where neither of the above applies, obtaining your explicit consent to the transfer after informing you of the risks.

By using the 1phb Platform and accepting this Privacy Policy, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines, subject to the safeguards described above.

1phb may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, 1phb will notify registered Players via email or in-platform notification at least seven (7) days before the changes take effect.

The updated Policy will always be available at 1phb.com/privacy-policy with a revised effective date at the top of the page. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy.

We encourage you to review this page periodically to stay informed about how 1phb protects your personal data. If you have concerns about any changes to this Policy, please contact our Data Protection Officer before the effective date of the change.

If you have any questions, concerns, or requests relating to this Privacy Policy or 1phb's handling of your personal data, please contact our designated Data Protection Officer (DPO):

• Role: Data Protection Officer, 1phb
• Email: [email protected]
• Live Chat: Available 24/7 via the support widget on the 1phb Platform — select "Privacy & Data" as your inquiry category.
• Response time: Within fifteen (15) business days of receiving a verified written request (Philippine Standard Time).

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated. The NPC can be reached through their official government channels.

For general support inquiries unrelated to data privacy, please use our standard live chat support channel available on the Platform.