bestph Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") is published by bestph ("bestph," "we," "us," "our") and applies to all personal information collected through the bestph website at https://bestph.co, the bestph mobile platform, and all related gaming services, promotional communications, and customer support channels (collectively, the "Services").

bestph is committed to protecting the privacy and personal data of all individuals who interact with our platform — including registered players, visitors to our website, and individuals who contact our support team. This Policy has been prepared in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines (the "DPA"), its Implementing Rules and Regulations, and applicable guidelines issued by the National Privacy Commission (NPC) of the Philippines.

By using any part of the bestph Services — including creating an account, logging in, making a deposit, or playing any game — you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the bestph platform.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, bestph acts as the personal information controller ("PIC") in respect of personal data collected from players and users of the bestph.co platform. As PIC, bestph determines the purposes and means of processing your personal data and is responsible for ensuring that processing activities comply with applicable Philippine data privacy law.

For any privacy-related enquiries, data subject access requests, or complaints, you may contact the bestph Data Protection Officer (DPO) at:

3. Personal Data We Collect

The categories and specific types of personal data collected by bestph depend on the nature of your interaction with the platform. The following table summarises what we collect and why:

bestph does not collect sensitive personal data (as defined under the DPA) unless explicitly required by law or regulation — for example, government ID numbers collected solely for the purpose of legally-mandated identity verification under PAGCOR KYC requirements.

4. How We Collect Your Data

bestph collects personal data through the following channels:

4.1 Direct Collection

• When you register a bestph account — including your name, date of birth, mobile number, and email address.
• When you complete KYC verification by uploading identity documents.
• When you make a deposit or withdrawal and provide payment method details.
• When you contact our customer support team via live chat or email.
• When you respond to surveys, promotions, or feedback requests.

4.2 Automated Collection

• Automatically when you access the bestph website or platform — including your IP address, device identifiers, and browser information collected via server logs and session management systems.
• Through cookies and similar tracking technologies used on the bestph website (see Section 8 for details).
• Through game session monitoring systems that log all gaming activity for integrity and responsible gaming purposes.

4.3 Third-Party Sources

• From payment processors (e.g. GCash, Maya) who may share transaction confirmation data with bestph.
• From identity verification partners where additional KYC checks are performed.
• From fraud prevention and AML screening databases where required by law or PAGCOR regulation.

5. How We Use Your Personal Data

bestph processes your personal data only for specific, legitimate purposes. We do not sell your personal data to third parties, and we do not use your data for purposes incompatible with those stated in this Policy. The primary purposes for which bestph processes personal data include:

• Providing and operating the bestph gaming platform and all associated services.
• Verifying your identity and age in compliance with PAGCOR requirements and Philippine law (21+ verification).
• Processing financial transactions — deposits, withdrawals, and bonus credits — securely and accurately.
• Complying with Anti-Money Laundering Act (AMLA) and Counter-Terrorism Financing obligations, including transaction monitoring and reporting.
• Detecting, investigating, and preventing fraud, cheating, collusion, and other prohibited activities on the platform.
• Providing customer support and resolving disputes.
• Administering bonuses, promotions, and the bestph VIP loyalty programme.
• Monitoring gaming activity for responsible gaming purposes — including detecting signs of problem gambling and administering self-exclusion or deposit limit tools.
• Improving the bestph platform through aggregate analytics and usage data analysis.
• Sending account-related communications — transaction confirmations, security alerts, and system notifications.
• Sending promotional and marketing communications where you have provided explicit consent (you may withdraw consent at any time).

6. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, bestph relies on the following legal bases for processing your personal data:

• Consent: Where you have explicitly consented to processing — for example, opting in to promotional communications or accepting cookies beyond strictly necessary categories.
• Contractual Necessity: Processing required to provide the Services under our Terms & Conditions — including account creation, game operation, and payment processing.
• Legal Obligation: Processing required to comply with Philippine law — including PAGCOR regulatory requirements, AMLA obligations, Data Privacy Act compliance, and tax reporting requirements.
• Legitimate Interests: Processing for purposes such as fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by your privacy rights.

7. Data Sharing & Disclosure

bestph does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data in the following limited circumstances:

7.1 Service Providers

bestph engages trusted third-party service providers who process personal data on our behalf under strict data processing agreements, including: payment processors (GCash, Maya, BPI, BDO), KYC and identity verification providers, game studios whose games are hosted on the platform, customer support platform providers, and IT infrastructure and hosting providers. These parties are contractually prohibited from using your data for any purpose other than providing services to bestph.

7.2 Regulatory Authorities

bestph is required by Philippine law to share certain personal and financial data with PAGCOR and other relevant Philippine government agencies — including the Anti-Money Laundering Council (AMLC) and the Bureau of Internal Revenue (BIR) — where reporting obligations arise. These disclosures are made in compliance with applicable legal requirements, not on a voluntary commercial basis.

7.3 Law Enforcement

bestph may disclose personal data to Philippine law enforcement agencies, courts, or other government bodies where required by a valid legal order, subpoena, or where disclosure is necessary to protect the legal rights, safety, or property of bestph, its players, or the public.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of substantially all of bestph's business assets, personal data held by bestph may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy and notification to affected players as required by the DPA.

8. Cookies & Tracking Technologies

The bestph website uses cookies and similar tracking technologies to provide, secure, and improve the platform. Cookies are small data files stored on your device when you visit the bestph website. We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the platform to function — including session authentication tokens, security cookies, and load balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences — such as language settings, display preferences, and last-visited game categories — to personalise your experience.
• Analytics Cookies: Collect aggregate, anonymised data about how players use the bestph platform to help us improve the user experience. This data does not identify you individually.
• Security Cookies: Used to detect fraudulent login attempts, session hijacking, and other security threats.

You may control non-essential cookies through your browser settings or the cookie consent banner presented on your first visit to bestph.co. Note that disabling functional cookies may affect certain platform features. Disabling strictly necessary cookies will prevent you from logging in and using the platform.

9. Data Retention

bestph retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Active account data: Retained for the duration of your bestph account plus a minimum of five (5) years after account closure, in compliance with AMLA record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required under AMLA and applicable tax regulations.
• KYC documentation: Retained for five (5) years after account closure or the last transaction, whichever is later.
• Gaming session logs: Retained for a minimum of three (3) years for game integrity and dispute resolution purposes.
• Customer support communications: Retained for two (2) years from the date of the communication.
• Marketing consent records: Retained for the period of consent plus two (2) years following withdrawal of consent.

Upon expiry of applicable retention periods, bestph will securely delete or anonymise personal data in accordance with NPC guidelines on personal data destruction.

10. Data Security

bestph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and bestph servers.
• Encryption of sensitive data at rest, including stored passwords (hashed with a cryptographic algorithm — never stored in plain text) and financial data.
• Multi-factor authentication for internal system access by bestph staff.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Continuous network monitoring and intrusion detection systems.
• Regular independent security audits and penetration testing.
• Formal data breach response procedures compliant with NPC notification requirements.

In the event of a personal data breach that poses a real risk to your rights and freedoms, bestph will notify the National Privacy Commission and affected players within seventy-two (72) hours of discovering the breach, as required by the DPA and NPC Circular No. 16-03.

11. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bestph. To exercise any of these rights, please contact our Data Protection Officer at [email protected]:

bestph will respond to all verified data subject requests within ten (10) Philippine business days. Where additional time is required, we will notify you of the extension and reason. We may need to verify your identity before processing access or deletion requests.

12. Children & Minors

13. Changes to This Privacy Policy

bestph reserves the right to update this Privacy Policy at any time to reflect changes in Philippine law, NPC guidelines, PAGCOR requirements, or our internal data processing practices. Material changes will be communicated to registered players via email and/or a prominent notice on the bestph platform at least fourteen (14) days before they take effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the bestph platform after the effective date of any update constitutes acceptance of the revised Policy.

14. Contact & Complaints

For any privacy-related questions, data subject access requests, or complaints regarding bestph's handling of your personal data, please contact our Data Protection Officer:

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the independent body responsible for enforcing the Data Privacy Act of 2012 and protecting the privacy rights of Filipino data subjects.