bygame Privacy Policy

bygame ("bygame," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses the bygame platform, website, and related services (collectively, the "Platform"). This Privacy Policy describes how bygame collects, uses, stores, shares, and protects your personal information when you access or use the Platform.

This Privacy Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. It also reflects bygame's obligations under PAGCOR's player protection framework.

By registering for a bygame account, accessing the Platform, or otherwise providing your personal information to bygame, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, bygame acts as the Personal Information Controller (PIC) in respect of the personal data collected through the Platform. bygame determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data privacy law.

bygame has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data privacy regulations. You may contact the DPO using the contact details provided in Section 16 of this Policy.

bygame collects the following categories of personal data, depending on how you interact with the Platform:

bygame does not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect biometric data, health information, or political affiliations.

bygame collects personal data through the following means:

• Direct collection: Information you provide when registering for a bygame account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser information, and session activity logs, through the use of cookies and similar tracking technologies.
• Third-party sources: Identity verification data obtained from third-party KYC service providers engaged by bygame to assist with document verification and fraud screening, in compliance with Philippine AML regulations.
• Payment processors: Transaction confirmation data received from GCash, PayMaya, and Philippine banking partners when you make deposits or receive withdrawals.
• Regulatory sources: Information received from PAGCOR or other Philippine regulatory authorities in connection with player protection, self-exclusion registries, or compliance obligations.

bygame uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your bygame player account, including processing your registration, verifying your identity, and managing your account settings.
• Service delivery: To provide you with access to bygame's games, process your deposits and withdrawals, apply bonuses and promotions, and deliver the full range of Platform features.
• Identity verification and KYC: To verify your identity and age (21+) in compliance with PAGCOR requirements and Philippine anti-money laundering regulations under Republic Act No. 9160 (Anti-Money Laundering Act), as amended.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other illegal conduct on the Platform.
• Responsible gaming: To monitor gaming patterns, enforce deposit limits and self-exclusion requests, and identify players who may be exhibiting signs of problem gambling, in accordance with PAGCOR's responsible gaming framework.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Legal and regulatory compliance: To comply with applicable Philippine laws, PAGCOR regulations, court orders, and lawful requests from government authorities.
• Platform improvement: To analyze usage patterns, conduct internal research, and improve the functionality, security, and user experience of the bygame Platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent or where permitted by applicable law. You may opt out of marketing communications at any time.

Under the Data Privacy Act of 2012, bygame processes your personal data on the following legal bases:

• Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose, such as receiving marketing communications or the processing of sensitive personal information for KYC purposes.
• Contractual necessity: Where processing is necessary for the performance of the contract between you and bygame — specifically, the Terms & Conditions governing your use of the Platform. This includes account creation, payment processing, and service delivery.
• Legal obligation: Where processing is required to comply with a legal obligation applicable to bygame under Philippine law, including PAGCOR regulations, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate interests: Where processing is necessary for the legitimate interests of bygame, such as fraud prevention, platform security, and responsible gaming monitoring, provided that such interests are not overridden by your rights and freedoms as a data subject.

bygame does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• PAGCOR and Philippine regulatory authorities: bygame is required to share certain player data with PAGCOR and other competent Philippine government agencies as part of its licensing obligations, regulatory reporting requirements, and compliance with the Anti-Money Laundering Act.
• KYC and identity verification providers: Third-party service providers engaged by bygame to assist with document verification, identity screening, and fraud detection. These providers are contractually bound to process data only as instructed by bygame and in compliance with Philippine data privacy law.
• Payment processors: GCash, PayMaya, and Philippine banking partners receive the minimum data necessary to process your deposit and withdrawal transactions.
• Game technology providers: Third-party game studios and platform technology providers may receive anonymized or pseudonymized gaming data for the purpose of game performance monitoring and technical support.
• Law enforcement and courts: bygame may disclose personal data to law enforcement agencies, courts, or other government bodies where required by a valid legal order, warrant, or applicable Philippine law.
• Professional advisers: Lawyers, auditors, and other professional advisers engaged by bygame may access personal data on a confidential basis where necessary for the provision of their services.

bygame uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, and gather analytics data. The following types of cookies are used:

• Essential cookies: Strictly necessary for the Platform to function. These include session authentication cookies that keep you logged in to your bygame account and security cookies that help detect fraudulent activity. These cannot be disabled without affecting Platform functionality.
• Analytics cookies: Used to collect anonymized data about how players interact with the Platform, including pages visited, session duration, and navigation paths. This data helps bygame improve the Platform's usability and performance.
• Preference cookies: Used to remember your Platform settings and preferences, such as language selection and notification preferences, so you do not need to re-enter them on each visit.
• Marketing cookies: Used to deliver relevant promotional content and track the effectiveness of bygame's marketing campaigns. These are only placed where you have provided consent.

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies may impair your ability to use certain features of the bygame Platform, including account login and payment processing.

bygame retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Account data: Retained for the duration of your active bygame account and for a minimum of five (5) years following account closure, in compliance with Philippine AML record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification, as required under the Anti-Money Laundering Act and PAGCOR regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with Philippine financial record-keeping obligations.
• Gaming history: Retained for a minimum of three (3) years for responsible gaming monitoring and dispute resolution purposes.
• Customer support records: Retained for two (2) years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing consent records: Retained for the duration of your account and for one (1) year following account closure or withdrawal of consent.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with bygame's data disposal procedures.

bygame implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the bygame Platform is encrypted using industry-standard SSL/TLS protocols.
• Data encryption at rest: Sensitive personal data stored on bygame's servers, including identity documents and financial information, is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to bygame personnel and authorized third parties who have a legitimate need to access it. All access is logged and monitored.
• Two-factor authentication: bygame supports two-factor authentication (2FA) for player accounts to provide an additional layer of security against unauthorized access.
• Regular security audits: bygame conducts regular security assessments and penetration testing to identify and remediate vulnerabilities in the Platform.
• Incident response: bygame maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, bygame will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012.

While bygame takes all reasonable steps to protect your personal data, no online system is entirely immune to security risks. You are responsible for maintaining the security of your bygame account credentials and for notifying bygame immediately if you suspect unauthorized access to your account.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by bygame:

• Right to be informed: You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfills that obligation.
• Right of access: You have the right to request a copy of the personal data that bygame holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data that bygame holds about you. You may update certain account information directly through your bygame account settings.
• Right to erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to bygame's legal obligations to retain data under Philippine law, including AML and PAGCOR record-keeping requirements.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to bygame's overriding legal obligations.
• Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to lodge a complaint: If you believe that bygame has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of the above rights, please contact bygame's Data Protection Officer using the contact details in Section 16. bygame will respond to all data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

If bygame discovers or has reason to believe that personal data has been collected from a person under 21 years of age, it will immediately suspend the relevant account, delete the personal data collected, and, where appropriate, report the matter to the relevant Philippine authorities.

If you are a parent or guardian and believe that your child has registered on the bygame Platform or provided personal data to bygame, please contact us immediately using the details in Section 16 so that we can take appropriate action.

bygame primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to or accessed by service providers located outside the Philippines — for example, cloud infrastructure providers or international game technology partners.

Where such cross-border transfers occur, bygame ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual clauses requiring the recipient to maintain data protection standards equivalent to those required under the Philippine Data Privacy Act of 2012.
• Transfers only to countries or organizations that have been assessed as providing an adequate level of data protection.
• Obtaining your explicit consent where required by applicable Philippine law.

bygame will not transfer your personal data to jurisdictions that do not provide adequate data protection safeguards without first implementing appropriate protective measures.

The bygame Platform may integrate with or reference third-party services, including payment processors such as GCash and PayMaya, and game content providers. These third parties operate under their own privacy policies, which are independent of this Privacy Policy.

bygame is not responsible for the data practices of third-party service providers beyond the contractual obligations imposed on them by bygame. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the bygame Platform.

bygame does not include external links to unrelated third-party websites on the Platform. Any third-party integrations present on the Platform are limited to those necessary for the delivery of bygame's gaming and payment services.

bygame reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. Where changes are material, bygame will notify registered players via email or an in-platform notification prior to the changes taking effect.

The effective date at the top of this Privacy Policy will be updated each time a revision is made. Your continued use of the bygame Platform following the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how bygame protects your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by bygame, please contact our Data Protection Officer:

Email addresses displayed on this page are for informational reference only and are not clickable links. Please copy the address manually into your email client.

If you are not satisfied with bygame's response to your data privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines (NPC). Information on how to file a complaint with the NPC is available through official Philippine government channels.

For responsible gaming concerns, self-exclusion requests, or player protection matters, please visit our Responsible Gaming page.