Privacy Policy – How philsot Handles Your Personal Data

1 Who We Are

philsot is the operator of the online betting and gaming platform available at philsot.best. In the context of this Privacy Policy, "philsot," "we," "us," and "our" refer to the legal entity operating the platform. "You" and "your" refer to any person who accesses, registers with, or uses any part of the philsot platform.

philsot acts as the data controller for personal information collected through the platform. This means we determine the purposes for which your data is processed and the means by which it is handled. Where we engage third-party service providers who process data on our behalf, those parties act as data processors under our instruction.

This Privacy Policy applies to all services offered by philsot, including sports betting, casino games, virtual sports, promotions, and any other features on the platform now or in the future. By using the philsot platform, you acknowledge that you have read and understood this policy.

2 Information We Collect

philsot collects personal information in three main ways: information you provide directly, information generated automatically by your use of the platform, and information received from third parties such as payment providers and identity verification services.

Information you provide directly:

• Full legal name, date of birth, and gender as provided at registration.
• Residential address in the Philippines.
• Mobile number and email address.
• Username and encrypted password.
• Government-issued identification documents submitted for identity verification (e.g., PhilSys ID, passport, driver's licence).
• Proof of address documents (e.g., utility bills, bank statements).
• Payment information including GCash, Maya, or bank account details used for deposits and withdrawals.
• Any information you provide when contacting philsot support, completing surveys, or participating in promotions.

Information collected automatically:

• IP address and approximate geographic location.
• Device type, operating system, and browser version.
• Session data including login times, pages visited, and actions taken on the platform.
• Betting history, game play records, and transaction logs.
• Cookie data and similar tracking technologies as described in Section 6.

Information from third parties:

• Identity verification results from our KYC (Know Your Customer) service provider.
• Transaction confirmation and fraud signals from payment processors.
• Responsible gaming signals from self-exclusion databases where we are required to check membership.

3 Why We Collect Your Information

philsot uses the personal data we collect only for specific, clearly defined purposes. The table below summarises the main purposes and the data types involved.

philsot does not use your personal data for any purpose not listed above without first seeking your explicit consent or updating this policy with advance notice.

4 Legal Basis for Processing

Every time philsot processes your personal data, we do so on one of the following legal grounds:

• Contractual necessity: Processing required to fulfill our obligations to you under the philsot Terms and Conditions — such as operating your account, settling bets, and processing payments.
• Legal obligation: Processing required to comply with applicable law — such as identity verification under anti-money laundering regulations, responsible gaming checks, and financial record-keeping requirements.
• Legitimate interests: Processing necessary for philsot's legitimate operational interests — such as fraud detection, platform security, and improving the user experience — provided these interests are not overridden by your privacy rights.
• Consent: Processing that relies on your active opt-in — primarily marketing communications. You can withdraw this consent at any time from your account settings or by contacting support.

5 How We Share Your Information

philsot does not sell your personal data. We share information with third parties only in the specific circumstances listed below, and only to the extent necessary for the stated purpose.

• Payment processors: GCash, Maya, GrabPay, Coins.ph, InstaPay/PESONet bank networks, BDO/BPI/UnionBank, and Visa/Mastercard payment networks receive transaction data necessary to process your deposits and withdrawals.
• Identity verification providers: Our KYC partner receives copies of identity documents you submit for verification. These providers are contractually bound to process this data only for the verification purpose.
• Regulatory authorities: philsot may be required to share account information, transaction records, or identity documents with regulators, law enforcement, or courts where compelled by law.
• Responsible gaming organisations: Where required, philsot checks player details against self-exclusion registers operated by recognised responsible gaming bodies.
• Technology service providers: Cloud hosting, analytics, and security monitoring partners may process certain data as part of the services they provide to philsot. These parties are bound by strict data processing agreements.
• Business transfers: If philsot is involved in a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. You will be notified via email or a prominent platform notice in advance of such a transfer.

6 Cookies and Tracking Technologies

philsot uses cookies and similar tracking technologies to operate the platform, improve user experience, and understand how players use our services. A cookie is a small text file stored on your device when you visit philsot.best.

The types of cookies philsot uses are:

• Strictly necessary cookies: These are essential for the platform to function. They manage your login session, maintain your bet slip, and ensure secure transactions. These cannot be disabled without breaking core functionality.
• Functional cookies: These remember your preferences — such as your preferred language setting or the last game category you visited — to personalise your experience on return visits.
• Analytics cookies: philsot uses anonymised analytics to understand how the platform is used in aggregate — which features are popular, where players encounter difficulties, and how to improve the overall experience. No personally identifiable information is included in this data.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use the philsot platform. Analytics and functional cookies can be disabled without impact to core betting and gaming functions.

7 How Long We Keep Your Data

philsot retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, or as required by law — whichever is longer. The general retention periods are:

• Active account data: Retained for the lifetime of your account plus five years after closure, in line with standard financial record-keeping obligations.
• Identity verification documents: Retained for five years following the end of the business relationship, as required by anti-money laundering regulations.
• Transaction records: Retained for five years from the date of each transaction.
• Support correspondence: Retained for three years from the date of the most recent interaction.
• Marketing consent records: Retained until consent is withdrawn, plus one year to maintain a record of the withdrawal.
• Anonymised analytics data: May be retained indefinitely as it cannot be linked back to an individual.

When retention periods expire, philsot securely deletes or anonymises the data. In cases where deletion is not technically immediate — for example, in backup systems — data is isolated and no longer actively processed until it is purged on the next scheduled cycle.

8 How We Protect Your Data

philsot takes data security seriously. We implement a layered approach to protecting the personal information of every player on the platform, combining technical controls, operational procedures, and regular review.

• Encryption in transit: All data exchanged between your browser or app and philsot's servers is encrypted using TLS 1.2 or higher. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Encryption at rest: Sensitive stored data — including identity documents, payment details, and account credentials — is encrypted at rest using AES-256 or equivalent standards.
• Access controls: Personal data is accessible only to philsot employees and contractors who require it to perform their specific job functions. All access is logged and regularly audited.
• Two-factor authentication: philsot encourages all players to enable two-factor authentication (2FA) on their accounts. 2FA is enforced for all staff with access to player data.
• Regular security testing: philsot conducts periodic vulnerability assessments and penetration tests of the platform infrastructure.
• Incident response: philsot maintains a documented incident response plan. In the event of a data breach, we will notify affected players and relevant authorities within the timeframes required by applicable law.

While philsot takes every reasonable precaution, no system can be guaranteed completely secure. You also play an important role — protect your account credentials, do not share your password with anyone, and contact philsot support immediately if you suspect your account has been compromised.

9 Your Privacy Rights

As a philsot player, you have the following rights regarding your personal data. philsot will respond to requests within 30 days unless the complexity of the request justifies an extension, in which case we will notify you of the additional time needed.

10 Children's Privacy

philsot is strictly intended for persons aged 21 and above. We do not knowingly collect personal information from anyone under the age of 21. If we become aware that an account has been registered by someone under the minimum age, we will close the account immediately and securely delete all associated personal data, except where retention is required by law.

If you are a parent or guardian and believe your child has registered an account on philsot, please contact us immediately at support@philsot.best. We will take prompt action to close the account and remove the data.

11 Third-Party Links

The philsot platform does not contain links to third-party websites for general browsing. However, your interactions with payment providers — such as GCash, Maya, or your bank's online portal — will be governed by those providers' own privacy policies once you leave the philsot platform to complete a transaction.

philsot is not responsible for the privacy practices of third-party payment processors or any other services you access independently. We encourage you to review the privacy policies of any service you use alongside philsot.

12 Changes to This Privacy Policy

philsot may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform features. The "Last updated" date at the top of this page will always show when the most recent revision was made.

For material changes — such as new types of data being collected or new purposes for processing — philsot will notify registered players via email at least seven days before the changes take effect. For minor clarifications and non-material edits, the policy will be updated without advance notice, and the updated date will reflect the change.

Continued use of the philsot platform after an updated policy has taken effect constitutes your acknowledgement of the revised terms. If you disagree with any changes, you may request account closure as described in the Terms and Conditions.

13 Contact Us About Privacy

If you have questions about this Privacy Policy, want to exercise your data rights, or need to report a potential privacy concern, please reach out to philsot through any of the following channels:

• Email: support@philsot.best — mark the subject line "Privacy Request" for faster routing.
• Live chat: Available 24/7 from any page on the platform when you are logged into your account.
• Response time: philsot aims to acknowledge privacy-related requests within 48 hours and provide a full response within 30 calendar days.

If you are not satisfied with philsot's response to a privacy complaint, you have the right to escalate your concern to the relevant data protection authority in the Philippines. philsot will cooperate fully with any regulatory investigation.