ibizabet Privacy Policy

1. Introduction

ibizabet is committed to protecting the privacy and personal data of every player, visitor, and user who interacts with our Platform. We understand that trust is the foundation of any good relationship — and that trust starts with being transparent about how we handle your information.

This Policy tells you, in plain and straightforward terms, what data ibizabet collects when you use our services, the reasons we collect it, who we may share it with, how long we keep it, and what rights you have as a data subject under Philippine law. We encourage you to read this Policy carefully alongside our Terms & Conditions before registering an ibizabet account.

By accessing the ibizabet Platform or creating an account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform.

2. Personal Data We Collect

ibizabet collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Gender
• Nationality and country of residence
• Registered email address
• Mobile phone number (Globe, Smart, DITO, or other Philippine networks)
• Username and encrypted password

2.2 Identity Verification (KYC) Data

• Government-issued photo identification (e.g., Philippine passport, SSS ID, PhilHealth ID, UMID, driver's license, or Postal ID)
• Proof of address (e.g., utility bill, bank statement, or barangay certificate)
• Selfie photograph for liveness verification
• Tax Identification Number (TIN), where required by regulation

2.3 Financial & Transaction Data

• GCash or Maya account reference (mobile number linked to e-wallet)
• Bank account details for bank transfer transactions (BPI, BDO, Metrobank, UnionBank, and others)
• Debit card details (card number masked; full PAN is not stored by ibizabet)
• Deposit and withdrawal history
• Transaction amounts in Philippine Peso (PHP)

2.4 Gaming & Behavioural Data

• Game session history, bet amounts, and outcomes
• Bonus and promotion usage records
• Responsible gaming tool settings (deposit limits, session timers, self-exclusion status)
• Login timestamps and session durations

2.5 Technical & Device Data

• IP address and approximate geolocation (city/region level)
• Device type, operating system, and browser version
• Unique device identifiers
• Referring URL and on-site navigation data

2.6 Communications Data

• Live chat transcripts and support ticket records
• Email correspondence with ibizabet
• Feedback, survey responses, and complaint records

3. How We Collect Your Data

ibizabet collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion.
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you access the ibizabet Platform.
• From third parties — including identity verification service providers, payment processors (GCash, Maya, banks), fraud detection partners, and PAGCOR or other regulatory bodies where required by law.

4. Purpose & Legal Basis for Processing

ibizabet processes your personal data only where we have a lawful basis to do so. The table below summarises the primary purposes for which we process your data and the corresponding legal basis under the DPA:

Where ibizabet relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Cookies & Tracking Technologies

ibizabet uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage patterns, and deliver relevant content. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled without affecting core functionality such as login sessions and security features.
• Performance & Analytics Cookies: Help us understand how players use the Platform so we can improve it. Data collected is aggregated and anonymised where possible.
• Functional Cookies: Remember your preferences such as language settings and responsible gaming tool configurations.
• Marketing Cookies: Used to deliver promotions and offers relevant to your interests. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the ibizabet Platform.

6. Data Sharing & Disclosure

ibizabet does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data only in the following circumstances and only to the extent necessary:

• Service Providers: Third-party vendors who assist ibizabet in operating the Platform, including KYC and identity verification providers, payment processors (GCash, Maya, Philippine banks), IT infrastructure providers, and customer support platforms. These parties are bound by data processing agreements and may only use your data as instructed by ibizabet.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where disclosure is required by law, court order, or regulatory directive.
• Fraud Prevention & Security Partners: Third-party fraud detection and cybersecurity services engaged to protect the integrity of the Platform and the safety of our players.
• Game Content Providers: Licensed game studios and live dealer operators whose games are available on the ibizabet Platform may receive limited session and gameplay data necessary to deliver their services.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of ibizabet's business, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.
• With Your Consent: In any other circumstance where you have given explicit consent to the disclosure.

7. Data Retention

ibizabet retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The general retention periods we apply are as follows:

• Account and KYC data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AMLC record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required under the Anti-Money Laundering Act.
• Gaming and session data: Retained for up to three (3) years from the date of the session, unless a longer period is required for dispute resolution or regulatory purposes.
• Support and communications records: Retained for up to three (3) years from the date of the last interaction.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter for audit purposes.

When personal data is no longer required, ibizabet will securely delete or anonymise it in accordance with our internal data disposal procedures.

8. Data Security

ibizabet implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the ibizabet Platform.
• Encryption of sensitive data at rest, including financial account references and identity documents.
• Role-based access controls ensuring that only authorised ibizabet personnel can access personal data, and only to the extent required for their role.
• Regular security assessments, vulnerability scanning, and penetration testing of the Platform.
• Multi-factor authentication (MFA) options for player accounts.
• Incident response procedures in place to detect, contain, and notify affected parties of any personal data breach in accordance with NPC requirements.

While ibizabet takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your ibizabet login credentials and for notifying us immediately if you suspect any unauthorised access to your account.

9. Your Data Subject Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by ibizabet:

• Right to be Informed: You have the right to know what personal data ibizabet collects about you and how it is processed — which is the primary purpose of this Policy.
• Right of Access: You may request a copy of the personal data ibizabet holds about you, along with information about how it is being used.
• Right to Rectification: You may request correction of any inaccurate, incomplete, or outdated personal data in your ibizabet account.
• Right to Erasure or Blocking: You may request deletion or blocking of your personal data where it is no longer necessary for the purpose for which it was collected, or where processing is unlawful, subject to ibizabet's legal retention obligations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to ibizabet's overriding legal or regulatory obligations.
• Right to Data Portability: You may request that ibizabet provide your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Lodge a Complaint: If you believe ibizabet has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact ibizabet's Data Protection Officer using the details provided in Section 13 of this Policy. ibizabet will respond to all verified data subject requests within fifteen (15) business days, or within such extended period as permitted by the NPC.

10. Children's Privacy

The ibizabet Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine law and PAGCOR regulations governing casino-style gaming. ibizabet does not knowingly collect personal data from individuals under the age of 21.

If ibizabet becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an ibizabet account, please contact our support team immediately so we can investigate and take appropriate action.

11. Cross-Border Data Transfers

ibizabet's primary operations and data storage are based within the Philippines. However, some of our third-party service providers — including cloud infrastructure providers, KYC verification platforms, and game content studios — may process or store data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, ibizabet ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the DPA. These safeguards may include contractual data processing agreements incorporating the NPC's standard contractual clauses, or transfers to jurisdictions recognised by the NPC as providing adequate data protection.

By using the ibizabet Platform, you consent to the transfer of your personal data to third-party service providers in other jurisdictions, subject to the safeguards described above.

12. Updates to This Privacy Policy

ibizabet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this Policy, we will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how ibizabet protects your personal data. Your continued use of the Platform following the posting of an updated Policy constitutes your acceptance of the revised terms.

13. Contact & Data Protection Officer

ibizabet has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO through the following channels:

• Live Chat: Available 24/7 via the ibizabet Platform — the fastest way to reach us.
• Email (DPO): [email protected]
• General Support: [email protected]

ibizabet aims to acknowledge all privacy-related enquiries within two (2) business days and to resolve them within fifteen (15) business days. If you are not satisfied with ibizabet's response, you may escalate your complaint to the National Privacy Commission (NPC) of the Philippines through its official channels.