bidget Privacy Policy

This Privacy Policy applies to all personal data collected, processed, and stored by bidget in connection with the operation of the bidget online casino and sports betting platform at bidget.app. It covers data collected from registered Players, visitors to the site who have not yet registered, and individuals who contact bidget via support channels.

bidget acts as the Personal Information Controller (PIC) for all personal data processed in connection with the platform. Where bidget engages third-party service providers — such as payment processors, KYC verification providers, or certified game studios — those parties act as Personal Information Processors (PIPs) under written data processing agreements that bind them to the same privacy standards as bidget.

By registering a bidget Account or using the bidget platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we process your personal data as described in this Policy, you should not register an Account or use the bidget platform.

This Policy should be read together with bidget's Terms & Conditions and Responsible Gaming Policy, both of which incorporate privacy-related commitments by reference.

bidget collects the following categories of personal data in connection with providing its services to Filipino players:

bidget collects personal data through the following channels:

• Direct Collection: Data you provide when registering your Account, completing KYC verification, making deposits or withdrawals, placing bets, contacting our support team, or responding to surveys.
• Automated Technical Collection: Data collected automatically as you use the bidget platform, including IP address, device identifiers, browser fingerprint, session activity logs, and cookie-derived behavioural data. See Section 7 for full details on our cookie use.
• KYC and Identity Verification Partners: We work with certified third-party identity verification service providers who cross-reference the documents you submit against authoritative Philippine government data sources to confirm your identity and age.
• Payment Processors: Payment-related data is collected in part by our payment processor partners (GCash, Maya, BPI, BDO, UnionBank, Metrobank) and shared with bidget to the extent necessary to confirm transaction status and perform AML checks.
• Fraud and Security Tools: Device reputation data, IP geolocation data, and behavioural biometrics collected by our integrated fraud prevention systems for the purpose of detecting and preventing fraudulent activity on the platform.

Under the Philippine Data Privacy Act of 2012, bidget processes your personal data on the following lawful bases:

• Contractual Necessity: Processing required to perform the contract between you and bidget — i.e., operating your Account, processing transactions, delivering game services, and resolving disputes.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including PAGCOR licensing requirements, AML obligations under the Anti-Money Laundering Act (RA 9160 as amended), and KYC requirements.
• Legitimate Interests: Processing necessary for bidget's legitimate business interests, including fraud prevention, platform security, network integrity monitoring, and responsible gaming enforcement — where those interests are not overridden by your rights.
• Consent: Processing for purposes where you have given us specific, informed, and freely given consent — primarily for marketing communications. You may withdraw your consent at any time through your Account settings or by contacting [email protected].

bidget uses the personal data it collects for the following specific purposes:

• To create and manage your bidget Account and verify your identity and age in compliance with PAGCOR requirements.
• To process deposits, withdrawals, and all financial transactions on the platform in Philippine Peso (₱).
• To deliver casino games, sports betting, bingo, hi-lo, slots, and other platform services to you.
• To monitor gaming activity for responsible gaming purposes — including identifying patterns consistent with problem gambling and triggering interventions where appropriate.
• To detect, investigate, and prevent fraud, money laundering, cheating, bonus abuse, and other prohibited conduct.
• To comply with PAGCOR reporting obligations and respond to requests from other competent Philippine regulatory or law enforcement authorities.
• To provide customer support, resolve disputes, and maintain records of support interactions.
• To send you transactional communications related to your Account — such as deposit confirmations, withdrawal notifications, and security alerts. These are service-related and are not subject to marketing opt-out.
• To send you promotional communications about bidget offers, bonuses, and new game releases, where you have consented to receive such communications.
• To improve the bidget platform through aggregated, anonymised analytics data covering player behaviour patterns, device performance, and game popularity metrics.

bidget does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Personal data is shared with third parties only in the following circumstances:

• Payment Processors: GCash, Maya, BPI, BDO, UnionBank, Metrobank, 7-Eleven Cliqq, Coins.ph, and USDT TRC20 processors receive only the transaction data necessary to process your deposits and withdrawals.
• KYC Verification Partners: Certified identity and age verification service providers receive your submitted identification documents for the sole purpose of verifying your identity and age on bidget's behalf.
• Game Studio Providers: Game studios whose titles are hosted on the bidget platform receive limited technical session data (player ID, session token, wager amounts) necessary to deliver gameplay and settle game outcomes. They do not receive your full identity data.
• Fraud and AML Prevention: Shared risk signals and flagged transaction data may be shared with certified fraud prevention networks and AML compliance partners as required by law.
• Regulatory Authorities: PAGCOR and other competent Philippine government authorities (including the AMLC — Anti-Money Laundering Council) may receive data as required by law, court order, or regulatory directive. bidget will comply with all lawful data requests from competent Philippine authorities.
• Professional Advisers: Lawyers, auditors, and other professional advisers who assist bidget in legal, compliance, and financial matters, under strict confidentiality obligations.

All third-party partners who process personal data on bidget's behalf are subject to written data processing agreements that require them to process data only on bidget's documented instructions, maintain appropriate technical and organisational security measures, and comply with the Philippine Data Privacy Act.

The bidget platform uses cookies and similar tracking technologies to enable essential site functions, improve platform performance, and — where you have given consent — to personalise your experience and deliver relevant promotional content.

The cookies used on the bidget platform fall into the following categories:

You can manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary or security cookies will significantly impair your ability to use the bidget platform.

bidget retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following retention periods apply:

• Account and Identity Data: Retained for a minimum of five (5) years from the date of Account closure, as required by PAGCOR licensing conditions and AML regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act of the Philippines.
• KYC Documents: Retained for the duration of your active Account plus a minimum of five (5) years following Account closure, as mandated by PAGCOR regulations.
• Gaming Activity Logs: Retained for a minimum of three (3) years for dispute resolution purposes, and longer where required by PAGCOR reporting obligations.
• Support Communications: Retained for two (2) years from the date of the interaction, or longer if the matter relates to an ongoing dispute or regulatory investigation.
• Marketing Consent Records: Retained for as long as your Account is active, and for two (2) years following opt-out or Account closure.

Following the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents identification of the individual. Anonymised and aggregated data (from which you cannot be identified) may be retained indefinitely for statistical analysis and platform improvement purposes.

bidget implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our key security controls include:

• Encryption in Transit: All data transmitted between your browser or device and the bidget platform is protected using TLS 1.2 or higher encryption. HTTPS is enforced across all bidget platform endpoints.
• Encryption at Rest: Sensitive personal data — including identity data, KYC documents, and financial records — is stored using AES-256 encryption in bidget's secure data infrastructure.
• Access Controls: Access to personal data within bidget's systems is restricted on a strict need-to-know basis. Staff access is role-based, logged, and subject to regular review. All staff with access to personal data receive mandatory data privacy training.
• Two-Factor Authentication: Administrative access to systems that store or process personal data requires multi-factor authentication. Players are strongly encouraged to enable two-factor authentication on their bidget Accounts.
• Penetration Testing: bidget's platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response: bidget maintains a documented data breach response plan. In the event of a personal data breach affecting your rights, bidget will notify the National Privacy Commission within seventy-two (72) hours of discovery and notify affected Players without undue delay, as required by the Data Privacy Act.

Under the Philippine Data Privacy Act of 2012, you are entitled to exercise the following rights with respect to your personal data held by bidget:

• Right to be Informed: The right to know that your personal data is being or has been collected, and the purposes for which it is being processed. This Privacy Policy fulfils that obligation.
• Right to Access: The right to request a copy of the personal data bidget holds about you, as well as information about how it has been processed.
• Right to Rectification: The right to request correction of any inaccurate, incomplete, or outdated personal data we hold about you.
• Right to Erasure / Blocking: The right to request deletion or blocking of your personal data where it is no longer necessary for the stated purpose, where your consent has been withdrawn, or where it has been unlawfully processed — subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes, or where processing is based on legitimate interests, where your particular situation justifies an objection.
• Right to Data Portability: The right to receive your personal data in a structured, machine-readable format.
• Right to Damages: The right to seek compensation for any actual damages suffered as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised processing of your personal data.
• Right to Complain: The right to file a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please submit a written request to our Data Protection Officer at [email protected] with the subject line "Data Privacy Request – [Your Account Username]". We will acknowledge your request within three (3) business days and provide a full response within fifteen (15) business days of identity verification. Some requests may take longer where the matter is complex or involves a large volume of data — we will keep you informed of progress.

All Account registrations are subject to mandatory age verification through our KYC process. Where bidget discovers or has reasonable grounds to believe that personal data has been collected from a person under 21 years of age, the following actions will be taken immediately:

• The Account will be permanently suspended pending investigation.
• Any deposits made will be returned to the originating payment method.
• No winnings generated during the period of underage use will be released.
• All personal data associated with the underage Account will be deleted as soon as the investigation is concluded and legal retention obligations are addressed.
• The matter may be reported to PAGCOR and relevant Philippine authorities.

If you are a parent or guardian and believe that a minor in your household has registered a bidget Account, please contact our support team at [email protected] immediately. We take these reports seriously and will act without delay.

bidget's primary data infrastructure is located within the Philippines. In certain cases, personal data may be transferred to or accessed from servers located outside the Philippines — for example, where a certified game studio or KYC verification partner operates data infrastructure abroad.

Where personal data is transferred outside the Philippines, bidget ensures that equivalent data protection standards are in place through one or more of the following safeguards:

• The recipient country has data protection laws recognised as providing an adequate level of protection by the National Privacy Commission of the Philippines.
• The transfer is governed by a written data transfer agreement incorporating the standard contractual clauses approved by the NPC.
• The recipient is certified under a recognised international data protection framework (such as ISO 27001 or equivalent).

You may request information about the specific international transfer safeguards applicable to your data by contacting our Data Protection Officer.

bidget reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, new regulatory requirements, or improvements to our platform. The current version of this Policy is always published at bidget.app/privacy-policy with the effective date clearly displayed at the top of the page.

Where changes to this Policy are material — for example, changes that introduce new categories of data collection, new sharing arrangements, or changes to your rights — bidget will notify affected Players via their registered email address at least seven (7) days before the changes take effect.

Your continued use of the bidget platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree to the updated Policy, you should stop using the platform and request Account closure in accordance with the Terms & Conditions.

bidget has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests relating to this Policy or the processing of your personal data, please contact our DPO using the details below:

• Data Protection Officer — bidget
• Email: [email protected] (subject line: "DPO – Privacy Enquiry")
• Live Chat: Available 24/7 on the bidget platform
• Response time: Initial acknowledgement within 3 business days; full response within 15 business days

If you are not satisfied with our response, or if you believe your data privacy rights under the Philippine Data Privacy Act have been violated, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on filing a complaint with the NPC is available through official Philippine government channels.