bybet Privacy Policy
bybet takes the privacy and security of your personal data seriously. This Privacy Policy explains what information we collect when you use the bybet platform, how we use it, who we share it with, how long we keep it, and what rights you have over your own data. Please read this document carefully before registering or depositing on bybet.
How bybet Handles Your Data — Key Points
These cards summarize the most important aspects of bybet's data practices. The complete legal Privacy Policy text is provided below and governs in all cases.
What Data bybet Collects
bybet collects the personal data you provide during registration (name, date of birth, mobile number), KYC verification documents (government-issued ID), financial transaction data (deposit and withdrawal records), and technical data generated by your use of the platform (device type, IP address, session logs). bybet does not collect data beyond what is necessary for the purposes stated in this policy.
Why bybet Uses Your Data
bybet uses your personal data to operate and manage your account, process deposits and withdrawals, verify your identity under KYC and AML obligations, detect and prevent fraud, provide customer support, comply with Philippine gaming regulatory requirements, and send you relevant account communications. bybet does not sell your personal data to third parties for marketing purposes.
How bybet Protects Your Data
bybet implements 256-bit SSL encryption for all data in transit, secure server infrastructure with restricted administrative access, hashed password storage, and regular security audits. Player funds and financial data are segregated from bybet's operating systems. bybet's security protocols are aligned with industry standards applicable to PAGCOR-regulated online gaming operators in the Philippines.
Who bybet Shares Data With
bybet shares player data only with: (a) payment processors necessary to execute GCash, Maya, and bank transfer transactions; (b) game software providers for the purpose of delivering game services; (c) identity verification service providers for KYC processing; and (d) Philippine regulatory and law enforcement authorities where required by law. bybet does not share your data with unrelated commercial third parties.
How Long bybet Keeps Data
bybet retains player account data for a minimum of five (5) years following account closure, as required under Philippine anti-money laundering regulations. Transaction records are retained for seven (7) years. KYC documents are retained for five (5) years post-closure or longer if required by a regulatory investigation. Data is securely deleted or anonymized upon expiry of the applicable retention period.
Your Rights Over Your Data
bybet players have rights over their personal data under applicable Philippine data protection law, including the right to access, correct, and object to processing of their data. Requests to exercise these rights can be submitted to bybet's support team at [email protected]. bybet will acknowledge all data rights requests within five (5) Philippine business days and respond substantively within thirty (30) days.
About This Policy: This Privacy Policy applies to all personal data collected and processed by bybet in connection with the operation of the bybet online gaming platform at bybet.cam. It is incorporated by reference into bybet's Terms & Conditions. By registering an account on bybet, you acknowledge that you have read and understood this policy.
Introduction
bybet is committed to protecting the privacy and personal data of all players and visitors who interact with the bybet platform. This Privacy Policy describes our practices regarding the collection, use, storage, sharing, and protection of personal data in connection with the bybet online casino and sports betting platform accessible at bybet.cam.
bybet operates in compliance with applicable Philippine data protection law, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as the personal data-related obligations arising under Philippine online gaming regulations administered by PAGCOR. This policy reflects bybet's obligations as a personal information controller under Philippine law.
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact bybet's support team using the details in Section 15 of this document.
Data Controller
For the purposes of applicable Philippine data protection law, bybet is the personal information controller responsible for the personal data collected through the bybet platform. As data controller, bybet determines the purposes and means of processing player personal data.
bybet's data protection contact can be reached via the email address stated in Section 15 of this policy. bybet has designated a responsible person for data privacy compliance matters in accordance with requirements under the Data Privacy Act of 2012 and the directives of the National Privacy Commission of the Philippines.
Personal Data We Collect
3.1 Registration Data
When you create a bybet account, we collect the following information which you provide directly:
- Full legal name as it appears on your government-issued ID;
- Date of birth (for age verification — bybet requires all players to be 21 years of age or older);
- Philippine mobile number;
- Email address (where provided);
- Username and password (password stored in hashed form only — never in plain text);
- Residential address in the Philippines.
3.2 KYC Identity Verification Data
To comply with PAGCOR-aligned KYC requirements and the Anti-Money Laundering Act (AMLA), bybet collects copies of government-issued identity documents before enabling full withdrawal access. These may include Philippine Passport, LTO Driver's License, SSS or UMID Card, PhilHealth ID, Postal ID, or PhilSys National ID. bybet may also collect a selfie photograph for liveness verification purposes.
3.3 Financial Transaction Data
bybet records all financial transactions associated with your account, including deposit amounts, dates, and payment method reference numbers; withdrawal requests and processing records; bonus credit and wagering history; and account balance changes. This data is necessary for the operation of your account, fulfillment of regulatory reporting obligations, and resolution of payment disputes.
3.4 Gaming Activity Data
bybet automatically records your gaming activity, including game titles played, bet amounts placed, game outcomes, session start and end times, and responsible gaming tool activations (such as deposit limit settings and self-exclusion requests). This data is used for account management, dispute resolution, fraud detection, and regulatory compliance.
3.5 Technical and Device Data
When you access the bybet platform, we automatically collect certain technical data including your IP address, device type and operating system, browser type and version, mobile network operator, approximate geographic location (country and region level), session duration, and page interaction data. This data is collected through standard server logs and analytics tools for security monitoring, fraud prevention, and platform performance optimization.
The following table summarizes the primary data categories collected by bybet:
| Data Category | Examples | Source |
|---|---|---|
| Identity Data | Full name, date of birth, ID documents | Provided by player at registration / KYC |
| Contact Data | Mobile number, email, address | Provided by player at registration |
| Financial Data | Deposit records, withdrawal records, balances | Generated by platform transactions |
| Gaming Data | Bet history, game logs, session records | Generated automatically during gameplay |
| Technical Data | IP address, device type, browser info | Collected automatically via server logs |
| Responsible Gaming Data | Limit settings, exclusion requests, session times | Set by player or triggered by platform rules |
How bybet Uses Your Personal Data
bybet uses the personal data described in Section 3 for the following purposes:
- Account Management: Creating, maintaining, and administering your bybet player account, including authentication of your login, management of your wallet balance, and delivery of account-related notifications.
- Payment Processing: Executing deposits, withdrawals, and bonus credits in accordance with your instructions and bybet's payment terms, including sharing necessary data with payment service providers such as GCash, Maya, BPI, and BDO.
- KYC and Regulatory Compliance: Verifying your identity and age as required by PAGCOR-aligned KYC regulations and the AMLA, and fulfilling bybet's regulatory reporting obligations to competent Philippine authorities.
- Fraud and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, account takeover, and other security threats through automated monitoring of transaction and login patterns.
- Customer Support: Responding to support requests, resolving account disputes, and investigating game or payment complaints submitted by you.
- Responsible Gaming: Administering the responsible gaming tools associated with your account, including enforcing deposit limits, cooling-off periods, and self-exclusion requests you have activated.
- Platform Improvement: Analyzing aggregated and anonymized usage data to improve the performance, security, and user experience of the bybet platform for all Filipino players.
- Legal Obligations: Complying with applicable Philippine laws, regulatory directives, and court orders, including data retention obligations under the AMLA and Data Privacy Act.
Legal Basis for Processing
Under the Data Privacy Act of 2012 (Republic Act No. 10173), bybet relies on the following lawful bases for processing personal data:
- Contractual Necessity: Processing of registration data, payment data, and gaming activity data is necessary for the performance of bybet's contract with you as a registered player. Without this processing, bybet cannot provide its services to you.
- Legal Obligation: Processing for KYC verification, AML transaction monitoring, regulatory reporting, and data retention is required by applicable Philippine law, including the AMLA, the Data Privacy Act, and PAGCOR regulatory directives.
- Legitimate Interests: Processing for fraud prevention, security monitoring, and platform improvement is carried out on the basis of bybet's legitimate interests, balanced against players' data protection rights.
- Consent: Where bybet processes your data for optional purposes such as direct marketing communications, bybet relies on your explicit consent, which you may withdraw at any time as described in Section 13.
Data Sharing and Disclosure
bybet does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. bybet shares personal data only in the following limited circumstances:
6.1 Payment Service Providers
bybet shares transaction-related data with the payment processors necessary to execute your deposits and withdrawals, including GCash (Mynt), Maya Philippines, BPI, BDO, Metrobank, and InstaPay network operators. Data shared is limited to what is strictly necessary to process the relevant transaction.
6.2 Game Software Providers
bybet shares player identifiers and session tokens with certified game software providers — such as live dealer studio operators — for the purpose of delivering game services and maintaining game history records. These providers are contractually bound to process such data only for service delivery purposes.
6.3 Identity Verification Providers
bybet may engage third-party identity verification service providers to process KYC document submissions on bybet's behalf. Such providers operate under data processing agreements that bind them to appropriate security and confidentiality standards consistent with the Data Privacy Act of 2012.
6.4 Regulatory and Law Enforcement Authorities
bybet is required by Philippine law to disclose certain player data to competent regulatory authorities including PAGCOR and the Anti-Money Laundering Council (AMLC), and to law enforcement agencies acting under valid legal process. bybet will disclose the minimum data necessary to satisfy the applicable legal obligation.
bybet's commitment: bybet never sells your personal data. Any third party that receives bybet player data does so under a contractual data processing agreement with strict confidentiality, security, and use-limitation obligations binding on that party.
Cookies and Tracking Technologies
The bybet platform uses cookies and similar tracking technologies to support platform functionality, enhance security, and improve the user experience. The following types of cookies are used by bybet:
- Strictly Necessary Cookies: These cookies are essential for bybet to function. They manage your login session, maintain your account authentication state, and ensure security features operate correctly. These cookies cannot be disabled without rendering the platform non-functional.
- Functional Cookies: These cookies remember your preferences — such as language settings and responsible gaming tool configurations — so that you do not need to re-enter them on each visit.
- Analytics Cookies: bybet uses anonymized analytics data (collected through standard web analytics tools) to understand aggregate platform usage patterns and improve performance. This data does not identify individual players.
- Security Cookies: These cookies support bybet's fraud detection and security monitoring systems by tracking unusual access patterns and flagging potentially compromised sessions.
You may configure your browser to reject or delete cookies; however, disabling strictly necessary cookies will prevent access to your bybet account. For mobile browser users in the Philippines, cookie settings are typically accessible through the browser's Settings or Privacy menu.
Data Retention
bybet retains personal data for the periods necessary to fulfill the purposes described in this policy and to comply with applicable Philippine legal retention obligations:
- Account and Registration Data: Retained for a minimum of five (5) years from the date of account closure, as required under PAGCOR regulatory requirements and the AMLA.
- Financial Transaction Records: Retained for seven (7) years from the transaction date in accordance with Anti-Money Laundering Act record-keeping obligations.
- KYC Documents: Retained for five (5) years post-account closure, or longer if required by a pending regulatory investigation or legal proceeding.
- Gaming Activity Logs: Retained for five (5) years from the date of the relevant activity for dispute resolution and regulatory audit purposes.
- Technical and Device Data: Retained for twelve (12) months from collection unless a longer retention period is required for an active security investigation.
Upon expiry of the applicable retention period, bybet will securely delete or irreversibly anonymize the relevant personal data in accordance with the requirements of the Data Privacy Act of 2012.
Data Security
bybet implements appropriate technical and organizational measures to protect player personal data against unauthorized access, accidental loss, destruction, alteration, and unlawful disclosure. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and bybet's servers;
- Hashed storage of player passwords using industry-standard cryptographic hashing algorithms — bybet never stores plain-text passwords;
- Restricted administrative access to production systems on a need-to-know basis, with access logs maintained and reviewed regularly;
- OTP-based two-factor authentication on new device logins to prevent unauthorized account access;
- Segregated storage of player financial data separate from bybet's operational systems;
- Regular security audits and vulnerability assessments of the bybet platform infrastructure;
- Employee data protection training for all bybet staff who handle personal data.
In the event of a personal data breach that is likely to result in harm to bybet players, bybet will notify the National Privacy Commission of the Philippines within seventy-two (72) hours of becoming aware of the breach, and will notify affected players in accordance with the requirements of the Data Privacy Act of 2012 and its Implementing Rules.
Your role in account security: bybet's security measures protect data on our side. You are responsible for keeping your bybet login credentials confidential. bybet will never ask for your password by SMS, email, or chat. If you suspect unauthorized access to your bybet account, contact [email protected] immediately.
Your Data Rights
Under the Data Privacy Act of 2012 and applicable Philippine data protection regulations, bybet players have the following rights over their personal data:
bybet Player Data Rights
The Data Privacy Act of 2012 gives you meaningful control over your personal information. Here is how each right applies to your bybet account data.
How to exercise your rights: Submit all data rights requests to bybet's support team at [email protected] with the subject line "Data Rights Request" and your registered mobile number. bybet will acknowledge your request within five (5) Philippine business days and provide a substantive response within thirty (30) calendar days. bybet may require identity verification before processing your request to protect against unauthorized third-party access to your data.
International Data Transfers
bybet's primary server infrastructure is located in the Philippines. In limited circumstances, personal data may be processed by third-party service providers — such as game software providers or cloud infrastructure partners — whose servers are located outside the Philippines. Where such transfers occur, bybet ensures that appropriate contractual safeguards are in place to protect your data to a standard at least equivalent to that required by the Data Privacy Act of 2012 and National Privacy Commission regulations.
bybet does not transfer player personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate transfer mechanisms, including data processing agreements incorporating standard contractual clauses consistent with National Privacy Commission guidance.
Minors and Age Restriction
The bybet platform is strictly for individuals aged 21 years and above. bybet does not knowingly collect, store, or process personal data relating to any individual under the age of 21. The collection of personal data from minors is strictly prohibited by bybet's platform policies and by applicable Philippine gaming law.
Where bybet becomes aware that personal data relating to an individual under 21 years of age has been collected — including through the discovery of an underage account — bybet will immediately suspend the relevant account and delete all associated personal data to the extent not required to be retained for legal or regulatory compliance purposes.
If you are a parent or guardian and believe that your child under the age of 21 has registered on bybet without authorization, please contact bybet's support team at [email protected] immediately so that the account can be investigated and closed.
Marketing Communications
bybet may send you promotional communications — including information about new games, bonus offers, and platform updates — by SMS or email, where you have given your express consent to receive such communications during registration or subsequently through your account settings.
You may withdraw your consent to receive marketing communications from bybet at any time by: (a) updating your communication preferences in your bybet account settings dashboard; or (b) sending a written opt-out request to [email protected]. Withdrawal of marketing consent will be processed within five (5) Philippine business days. Withdrawing consent to marketing does not affect bybet's ability to send you essential account-related communications (such as deposit confirmations, withdrawal notifications, and security alerts) which are necessary for the operation of your account.
bybet does not share your contact details with third parties for their own marketing purposes.
Updates to This Privacy Policy
bybet reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this document reflects the date of the most recent revision. Material changes to this policy will be communicated to registered players via SMS or email at least seven (7) days before the revised policy takes effect, except where an immediate update is required by law or regulatory direction.
Your continued use of the bybet platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not accept the revised policy, you must cease using the bybet platform and may request account closure under the terms stated in bybet's Terms & Conditions.
Contact & Data Protection Officer
For all data protection inquiries, data rights requests, privacy complaints, or questions about this Privacy Policy, please contact bybet's data protection contact using the details below:
Players who are dissatisfied with bybet's response to a data rights request or privacy complaint have the right to escalate the matter to the National Privacy Commission of the Philippines, which is the competent supervisory authority for data protection matters under the Data Privacy Act of 2012.
Your Data Is Safe with bybet
256-bit SSL, hashed passwords, Philippine data law compliance — bybet takes your privacy seriously. Log in and play with confidence.
21+ Only. For entertainment purposes only. Please gamble responsibly.