ByGame Privacy Policy
PHILIPPINE DATA PRIVACY ACT OF 2012 (RA 10173) COMPLIANT

ByGame Privacy & Data Protection Policy

Operator: Global Play Hub Innovations Corp (GPHI)•Brand: ByGame Casino PH•Effective Date: October 2026•Jurisdiction: Republic of the Philippines

At ByGame Casino PH, protecting your personal data, transactional privacy, and confidential gaming records is our highest priority. This comprehensive Privacy Policy explains how Global Play Hub Innovations Corp (“GPHI”, “we”, “us”, or “our”) collects, stores, processes, and protects your information in strict accordance with Republic Act No. 10173 (The Data Privacy Act of 2012), National Privacy Commission (NPC) directives, and Philippine Amusement and Gaming Corporation (PAGCOR) regulatory mandates.

1. Information We Collect

We collect information to provide seamless gaming, ensure regulatory KYC compliance, and prevent financial fraud. Information is gathered through account registration, payment processing, gameplay sessions, and customer service communications:

A. Identity & KYC Information

  • Full legal name, date of birth, gender, and nationality.
  • Government-issued ID details (PhilSys National ID, Driver’s License, Passport, UMID) for account verification.
  • Biometric or selfie verification where required by anti-fraud algorithms.

B. Contact & Account Credentials

  • Verified Philippine mobile telephone number (for SMS OTP security).
  • Email address, chosen username, and encrypted password hash.
  • Security PINs and recovery credentials.

C. Financial & Transaction Logs

  • GCash account registered mobile number and account name.
  • Maya mobile wallet identifier and QRPH transaction codes.
  • Bank account numbers, transaction reference IDs, deposit/withdrawal timestamps, and turnover logs.

D. Technical & Gameplay Telemetry

  • IP address, device hardware fingerprint, operating system, and browser version.
  • Geolocation data (ensuring gaming access from within permitted Philippine territory).
  • Wager timestamps, game round IDs, stake values, payouts, and customer support chat transcripts.

2. Purpose & Lawful Basis of Processing

In accordance with Section 12 and Section 13 of Republic Act No. 10173, ByGame processes personal data strictly under established lawful grounds:

Contractual Necessity:

To register and maintain your account, validate wagers, settle game rounds, distribute VIP rewards, and credit deposits and withdrawals to your GCash or Maya wallet.

Compliance with Legal & Regulatory Obligations:

Mandatory enforcement of PAGCOR responsible gaming regulations, verifying that all players are at least 21 years of age, preventing underage gaming, and fulfilling statutory recordkeeping under Republic Act No. 9160 (Anti-Money Laundering Act of 2001, as amended).

Legitimate Interests & Platform Security:

To safeguard against syndicate betting, bot manipulation, account takeovers, cyberattacks, and chargeback fraud, ensuring a safe and fair environment for all players.

Express Consent:

For optional promotional announcements, tournament notifications, and tailored deposit bonus news. You can easily revoke promotional consent at any time via your account profile or by notifying customer service.

3. Strict Non-Sale Guarantee & Third-Party Disclosures

Zero Commercial Sale of Personal Data

ByGame Casino PH will never sell, lease, trade, or monetize your personal or financial data to third-party advertisers, data aggregators, or marketing firms under any circumstance.

We share data only with authorized, legally bound service processors strictly necessary to deliver our services:

  • Certified Payment Rail Providers: Authorized electronic money issuers (GCash, PayMaya, local banking institutions) to process transactions.
  • Audited Game Software Studios: Passing anonymized session tokens (such as JILI, PG Soft, Pragmatic Play) to load games without revealing personal identity.
  • Regulatory & Judicial Authorities: Disclosing records to PAGCOR, the Anti-Money Laundering Council (AMLC), or Philippine law enforcement agencies only upon receipt of a lawful subpoena, search warrant, or mandatory statutory order.

4. 256-Bit SSL Encryption & Technical Safeguards

Our multi-layered security infrastructure adheres to international cybersecurity standards to ensure complete data integrity and confidentiality:

End-to-End TLS 1.3 Encryption

All communications between your mobile device, browser, and ByGame servers are guarded with 256-bit SSL/TLS 1.3 protocols, preventing eavesdropping and man-in-the-middle attacks.

AES-256 Storage at Rest

Databases, encrypted password hashes (using Argon2/Bcrypt), and financial transaction archives are stored on hardened, firewall-protected cloud clusters with continuous intrusion monitoring.

Zero-Trust Internal Controls

Our internal staff undergo background checks and operate on strict principle-of-least-privilege access, governed by Multi-Factor Authentication (MFA) and immutable audit logging.

5. Data Retention Schedule & Secure Destruction

Personal data is retained only for as long as necessary to fulfill the purposes outlined in this policy and satisfy Philippine regulatory mandates:

  • Active Accounts: Maintained continuously for the lifetime of your active gaming relationship with ByGame.
  • Closed or Dormant Accounts (5-Year Mandate): In strict compliance with Philippine Anti-Money Laundering Act (RA 9160) regulations and PAGCOR directives, account identification records, transaction ledgers, and KYC files must be preserved for a minimum of five (5) years following account closure.
  • Cryptographic Shredding: Upon expiration of the mandatory statutory retention period, all associated physical and digital records are permanently sanitized and cryptographically shredded in compliance with National Privacy Commission standards.

6. Player Rights under the Data Privacy Act of 2012

As a Data Subject residing in the Philippines, you hold statutory rights under Section 16 of Republic Act No. 10173:

1. Right to be Informed:

You have the right to know whether personal data pertaining to you is being processed, including the sources and reasons.

2. Right to Access:

You may request reasonable access to your personal data, transaction history, and account profile held in our systems.

3. Right to Rectification:

You have the right to dispute any inaccuracies in your personal data and have them promptly updated or corrected.

4. Right to Erasure or Blocking:

You may request the suspension, withdrawal, or deletion of your data (subject to mandatory AMLA 5-year retention requirements).

5. Right to Object:

You hold the right to object to processing for marketing purposes or automated decision-making.

6. Right to File a Complaint:

You have the right to seek redress with the National Privacy Commission (NPC) if your data privacy rights have been violated.

7. Underage Gaming & Minors Protection (Strict 21+ Policy)

ByGame Casino PH strictly prohibits individuals under twenty-one (21) years of age from registering, logging in, or participating in gaming activities, in strict adherence to Philippine gaming laws.

Any account discovered to be opened by or on behalf of an individual under 21 years of age will be immediately closed, all transactions cancelled, and any remaining balance handled strictly in accordance with PAGCOR directives.

8. Contact Our Data Protection Officer (DPO)

If you wish to exercise your rights under the Data Privacy Act of 2012, update your information, or submit a data privacy grievance, please reach our designated Data Protection Officer:

Operating Entity

Global Play Hub Innovations Corp (GPHI)

Official Gaming Operator of ByGame Casino PH

Bonifacio Global City (BGC), Taguig, Metro Manila, Philippines
Direct Privacy Inquiries

Email: [email protected]

24/7 Live Support: Customer Support Portal

Our Data Protection Office guarantees a formal written acknowledgment within forty-eight (48) hours and a resolution within thirty (30) business days.