● Data Privacy
This Privacy Policy explains how bestph collects, uses, stores, and protects the personal data of players registered on the bestph Platform. It is drafted in compliance with the Philippine Data Privacy Act of 2012 (Republic Act 10173) and PAGCOR's player data protection requirements.
Privacy at a Glance
This summary does not replace the full Privacy Policy below. All bestph players are bound by the complete document.
bestph processes all player personal data in accordance with the Philippine Data Privacy Act of 2012 (RA 10173) and the implementing rules issued by the National Privacy Commission (NPC). Your data rights as a Filipino data subject are fully recognized and exercisable.
bestph does not sell, rent, or trade player personal data to third-party marketing companies. Data sharing with external parties is limited to regulated service providers (payment processors, KYC partners), PAGCOR, AMLC, and other authorities where required by Philippine law.
All personal data transmitted between your device and bestph is protected by 256-bit SSL/TLS encryption — the same standard used by Philippine banks and government platforms. Data at rest in bestph's systems is encrypted using AES-256 and stored in access-controlled environments.
As a bestph player, you have the right under RA 10173 to access your personal data, request corrections, withdraw consent for marketing, and in certain circumstances request deletion. All data subject requests are handled by our designated Data Protection Officer within 15 business days.
bestph holds a valid PAGCOR license. Certain player data is shared with PAGCOR and the Anti-Money Laundering Council (AMLC) as required by the Philippine AMLA (RA 9160 as amended). These disclosures are mandatory, legally authorized, and do not require your separate consent.
bestph retains player personal data only for as long as necessary for the purposes described in this Policy, and no longer than the minimum periods required by PAGCOR regulations and Philippine law. Inactive account data is subject to a defined review and deletion schedule.
bestph ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of every player who accesses or registers on the bestph online gaming platform at bestph.win. This Privacy Policy ("Policy") sets out the basis on which bestph collects, processes, stores, and uses personal data relating to its players and website visitors.
This Policy is drafted in compliance with the Philippine Data Privacy Act of 2012 (Republic Act 10173), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC). It also reflects bestph's obligations under PAGCOR's licensing conditions regarding the handling of player data.
By registering a bestph account, using the bestph Platform, or interacting with bestph's customer support, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should not create or maintain a bestph account.
Note for Filipino players: RA 10173, the Data Privacy Act, gives you specific rights over your personal information. This Policy explains how those rights apply to your bestph account data and how to exercise them.
For the purposes of the Data Privacy Act and this Policy, bestph is the Personal Information Controller (PIC) with respect to all personal data collected from players and website visitors. As PIC, bestph determines the purposes and means of processing your personal data and bears primary accountability for ensuring that all processing complies with RA 10173.
bestph has designated a Data Protection Officer (DPO) as required by the NPC's circular on DPO registration. The DPO oversees compliance with this Policy and RA 10173, handles data subject access requests, and serves as the point of contact for the NPC on privacy matters. Contact details for the DPO are provided in Section 15 of this Policy.
bestph operates under a valid PAGCOR license. As a PAGCOR-licensed operator, bestph's data processing activities related to player accounts, gaming records, and financial transactions are additionally subject to PAGCOR's own supervisory oversight.
bestph collects the following categories of personal data from players and website visitors:
bestph collects personal data through the following means:
bestph does not purchase personal data from third-party data brokers or list providers for marketing purposes.
bestph processes your personal data for the following specific, legitimate purposes:
| Purpose | Data Categories Used |
|---|---|
| Account registration & management — creating and maintaining your bestph player account | Identity data, contact data |
| Age & identity verification (KYC) — confirming you are 21 or older and a legitimate account holder | Identity data, ID document images |
| Payment processing — executing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank | Financial data, identity data |
| Game delivery & platform operation — enabling access to games and recording gaming activity | Gaming data, technical data |
| Fraud prevention & security — detecting and preventing unauthorized access, account takeover, and fraudulent transactions | Technical data, financial data, identity data |
| AML / regulatory compliance — meeting obligations under AMLA, PAGCOR reporting requirements, and NPC directives | All categories as required |
| Responsible gaming — monitoring for problem gambling indicators and administering player protection tools | Gaming data, financial data |
| Customer support — resolving queries, complaints, and disputes | Communications data, identity data |
| Marketing communications — sending promotional offers where you have provided consent | Identity data, contact data, gaming data (for personalisation) |
| Platform improvement — analysing aggregated usage patterns to improve bestph's products and services | Technical data, gaming data (anonymised) |
Under the Data Privacy Act (RA 10173), bestph processes personal data only where a lawful basis exists. The applicable legal bases for bestph's processing activities are:
bestph does not sell, rent, or exchange your personal data for commercial value. Data sharing is limited to the following categories of recipients, each bound by appropriate contractual and legal data protection obligations:
bestph engages third-party Personal Information Processors (PIPs) who process player data on bestph's behalf and under bestph's documented instructions. These include: identity verification and KYC service providers; payment gateway operators (GCash, PayMaya, BPI, BDO, Metrobank); cloud hosting and infrastructure providers; live chat and customer support platform operators; and game content suppliers whose RNG-based games are delivered through the bestph Platform. All PIPs are subject to data processing agreements that require them to implement data protection measures consistent with RA 10173.
bestph is required by law to disclose player data to the following authorities in specified circumstances:
Where a Player has self-excluded from bestph or been registered in a gaming exclusion program, bestph may share relevant data with PAGCOR's exclusion registry to prevent re-registration by excluded persons across PAGCOR-licensed platforms.
bestph does not share your personal data with social media platforms, advertising networks, or data aggregators. Where third-party analytics tools are used, data is processed in anonymised or aggregated form only.
bestph uses cookies and similar tracking technologies on bestph.win to enable platform functionality, maintain login sessions, and analyse usage patterns. The following categories of cookies are used:
These cookies are essential for bestph to function and cannot be disabled without breaking core platform features. They include session authentication tokens, security tokens (CSRF protection), and load-balancing cookies. No consent is required for strictly necessary cookies under applicable law.
Functional cookies remember your preferences — such as your preferred language settings or your last visited game category — to improve your experience on bestph. These cookies do not track activity across external websites.
bestph uses first-party analytics tools to understand how players navigate the Platform — which pages are visited most frequently, where players encounter friction, and how games are accessed. Analytics data is processed in aggregated form. Individual player identifiers are not used in analytics reports.
You can manage or disable non-essential cookies through your browser settings or through bestph's cookie preference panel, where available. Disabling functional or analytics cookies will not prevent you from using bestph but may affect the quality of your experience. Disabling strictly necessary cookies will prevent the bestph Platform from functioning correctly.
bestph implements appropriate technical and organisational measures to protect personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:
Your role in security: bestph's technical measures are complemented by your responsibility to keep your bestph login credentials confidential. Use a strong, unique password and do not share your account details with anyone. bestph will never ask for your password via SMS, email, or live chat.
bestph retains personal data for no longer than is necessary to fulfil the purposes described in this Policy, subject to the minimum retention periods required by Philippine law and PAGCOR regulations. Key retention periods are summarised below:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration & KYC documents | 5 years from account closure | PAGCOR license conditions; AMLA |
| Financial transaction records | 5 years from transaction date | AMLA (RA 9160 as amended) |
| Gaming session logs | 3 years from session date | PAGCOR audit requirements |
| Customer support communications | 3 years from last interaction | Dispute resolution; legal claims |
| Marketing consent records | Until consent is withdrawn + 1 year | NPC consent requirements |
| Technical logs (IP, session data) | 12 months | Security and fraud prevention |
| Self-exclusion records | Indefinitely (permanent exclusion) or for the duration of the exclusion period + 3 years | PAGCOR responsible gaming requirements |
Following the expiry of the applicable retention period, bestph will securely delete or anonymise personal data. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.
Under the Philippine Data Privacy Act (RA 10173), you have the following rights with respect to your personal data held by bestph. These rights may be exercised by submitting a written request to bestph's Data Protection Officer (see Section 15).
You may request a copy of the personal data bestph holds about you, together with information about how it is processed. bestph will provide this within 15 business days of a valid request.
If any personal data bestph holds about you is inaccurate or incomplete, you have the right to request correction. Some corrections may require submission of supporting documents for verification.
You may request deletion of your personal data where it is no longer necessary for the purposes described in this Policy and no legal retention obligation applies. Regulatory retention requirements may mean erasure is not possible in all cases.
You may object to processing of your personal data where bestph relies on legitimate interests as the legal basis. You also have an absolute right to opt out of direct marketing processing at any time.
Where technically feasible, you may request a structured, machine-readable copy of personal data you provided to bestph, for the purpose of transferring it to another service. This right applies to data processed by automated means on the basis of consent or contract.
Where bestph processes your data on the basis of consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Use the unsubscribe link in any marketing email or contact bestph's DPO.
If bestph fails to respond adequately to a data subject rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) through its official complaints process. bestph encourages players to contact our DPO first as most issues can be resolved directly and more quickly.
The bestph Platform is strictly for persons aged 21 years or older. bestph does not knowingly collect or process personal data of individuals under the age of 21. Registration by minors is prohibited and constitutes a violation of bestph's Terms & Conditions and PAGCOR regulations.
Where bestph discovers or has reasonable grounds to believe that an account has been registered by or on behalf of a person under 21, bestph will: (a) immediately suspend the account; (b) conduct an age verification investigation; (c) if confirmed, permanently close the account and return deposited funds (net of withdrawals already processed); and (d) report the matter to PAGCOR as required.
Parents or guardians who believe a minor has registered a bestph account should contact bestph's support team immediately via live chat or the email address listed in Section 15.
bestph's primary data processing operations are conducted within the Philippines. Where personal data is transferred to third-party service providers (such as KYC verification platforms or game content providers) whose infrastructure is located outside the Philippines, bestph ensures that such transfers comply with Section 21 of the Data Privacy Act and NPC guidelines on cross-border data transfers.
Specifically, bestph requires that cross-border data recipients:
bestph maintains a register of cross-border data transfers and makes a summary available to players upon request through the DPO.
bestph may update this Privacy Policy from time to time to reflect changes in its data processing practices, applicable Philippine law, or NPC guidance. Material changes to this Policy — particularly changes that affect the rights of data subjects or introduce new processing purposes — will be communicated to registered bestph players via email or in-Platform notification at least seven (7) calendar days before the change takes effect.
The "Last Updated" date at the top of this Policy indicates the date of the most recent revision. The current version of this Policy is always available at bestph.win/privacy-policy. Your continued use of bestph following the effective date of any revision constitutes your acknowledgment of the updated Policy.
If you object to a material change to this Policy, you may close your bestph account and request deletion of your personal data (subject to applicable legal retention requirements) by contacting the DPO.
For all data privacy-related queries, data subject rights requests, or complaints regarding bestph's handling of your personal data, please contact bestph's designated Data Protection Officer through the following channels:
For general platform support (account queries, withdrawal status, game issues), please use the standard bestph live chat support channel, also available 24/7 on Philippine Time (PHT, UTC+8).
Players who are not satisfied with bestph's response to a data privacy complaint may file a complaint with the National Privacy Commission (NPC) of the Philippines through the NPC's official channels. bestph will cooperate fully with any NPC investigation.
Effective Date: This Privacy Policy is effective as of 1 January 2026 and supersedes all prior bestph privacy policy versions. © 2026 bestph. All rights reserved.
● Play With Confidence
You know how bestph protects your data. Now discover 500+ games, instant GCash deposits, and 24/7 Filipino-timezone support — all under one PAGCOR-licensed roof. 21+ only.
Must be 21 or older. PAGCOR licensed. Gamble responsibly.