ddbet Privacy Policy

ddbet is an online gaming platform serving players in the Philippines, offering live casino games, slot games, bingo, sports betting, and specialty games. As part of operating this platform, ddbet necessarily collects and processes certain personal data about its players and website visitors.

ddbet takes its data privacy obligations seriously. We are committed to handling your personal data with transparency, integrity, and respect. This Policy explains in plain terms what data we collect, why we collect it, how long we keep it, who we may share it with, and what rights you have as a data subject under Philippine law.

This Policy applies to all personal data collected through the ddbet website at ddbet.club, the ddbet mobile platform, and any communications between you and ddbet (including live chat, email, and support tickets). It does not apply to third-party websites or services that may be linked from the ddbet platform.

This Policy should be read alongside the ddbet Terms & Conditions and the ddbet Responsible Gaming Policy, both of which form part of the overall agreement between you and ddbet.

ddbet collects the following categories of personal data, depending on how you interact with the platform:

ddbet collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting our support team, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the ddbet platform, including through cookies, web beacons, server logs, and similar tracking technologies. See Section 8 for more details on cookies.
• Third-party sources: Identity verification data from KYC service providers; fraud and risk data from anti-fraud partners; payment confirmation data from GCash, PayMaya, and banking partners. ddbet only receives data from third parties where you have authorized that third party to share your information, or where ddbet is legally permitted to obtain such data.

ddbet does not purchase personal data lists from data brokers or any other commercial data sources. All personal data collected by ddbet originates from your direct interaction with the platform or from regulated service providers involved in operating the platform.

ddbet uses your personal data for the following purposes:

• Account management: Creating and maintaining your ddbet account, verifying your identity, and managing your account settings and preferences.
• Service delivery: Enabling you to access and use all ddbet platform features, including games, deposits, withdrawals, and promotions.
• Payment processing: Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods.
• Identity and age verification: Verifying that you meet the minimum age requirement of 21 years and confirming your identity in compliance with KYC regulations.
• Regulatory compliance: Meeting our obligations under PAGCOR regulations, the Data Privacy Act of 2012, and applicable anti-money laundering laws.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, cheating, money laundering, and other prohibited conduct on the platform.
• Responsible gaming: Monitoring gaming activity to identify signs of problem gambling and to enforce responsible gaming tools such as deposit limits and self-exclusion.
• Customer support: Responding to your inquiries, resolving disputes, and providing technical assistance.
• Platform improvement: Analyzing usage patterns to improve the ddbet platform, fix bugs, and develop new features.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. You may opt out at any time through your account settings.

Under the Data Privacy Act of 2012 (RA 10173), ddbet processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and ddbet — including account creation, game access, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, KYC obligations, and anti-money laundering laws.
• Legitimate interests: Processing necessary for ddbet's legitimate business interests, including fraud prevention, platform security, and service improvement — provided these interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

ddbet does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors — for the purpose of processing your deposits and withdrawals.
• Identity verification providers: KYC and AML service providers engaged by ddbet to verify player identities and screen for financial crime risk.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities — where required by law or regulatory obligation.
• Technology service providers: Cloud hosting, platform infrastructure, and cybersecurity providers engaged by ddbet to operate and secure the platform. These providers act as data processors under ddbet's instructions and are bound by data processing agreements.
• Professional advisers: Legal counsel, auditors, and compliance consultants — where necessary for ddbet's legal and regulatory obligations.

ddbet retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following general retention periods apply:

Upon expiry of the applicable retention period, ddbet will securely delete or anonymize your personal data in accordance with our internal data disposal procedures. Where data is anonymized rather than deleted, the anonymized data may be retained indefinitely for statistical and analytical purposes, as it can no longer be linked to any individual.

ddbet uses cookies and similar tracking technologies (such as web beacons and local storage) on the ddbet platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and understand how you use the platform.

ddbet uses the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings, display preferences, and responsible gaming tool configurations.
• Analytics cookies: Used to collect aggregated, anonymized data about how players use the ddbet platform — such as which pages are visited most frequently and where users encounter errors. This data helps us improve the platform experience.
• Marketing cookies: Used only where you have given explicit consent, to deliver relevant promotional content and measure the effectiveness of ddbet marketing campaigns.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the ddbet platform. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

ddbet implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the ddbet platform is encrypted using industry-standard SSL/TLS protocols.
• Data encryption at rest: Sensitive personal data stored in ddbet's systems is encrypted at rest using AES-256 encryption.
• Two-factor authentication (2FA): ddbet supports OTP-based two-factor authentication for player accounts to prevent unauthorized access.
• Access controls: Access to personal data within ddbet's systems is restricted to authorized personnel on a strict need-to-know basis. All access is logged and audited.
• Regular security audits: ddbet conducts regular vulnerability assessments and penetration testing to identify and remediate security weaknesses.
• Incident response: ddbet maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights, ddbet will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of the Data Privacy Act of 2012.

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by ddbet:

• Right to be informed: You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfills that obligation.
• Right of access: You have the right to request a copy of the personal data ddbet holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data ddbet holds about you. You can update most account information directly through your account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ddbet's legal and regulatory retention obligations.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time through your account settings.
• Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: If you believe ddbet has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, please contact the ddbet support team via live chat or email as detailed in Section 14. ddbet will respond to all data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, and you will be notified accordingly.

The ddbet platform is strictly intended for adults aged 21 years and above. ddbet does not knowingly collect personal data from individuals under the age of 21. The minimum age for casino-style gambling in the Philippines, as regulated under PAGCOR oversight, is 21 years.

ddbet enforces age verification at the point of registration and may request documentary proof of age at any subsequent point. Any account found to have been registered by an individual under the age of 21 will be immediately closed, all deposits returned, and any associated personal data deleted in accordance with our data retention procedures.

The ddbet platform may contain links to third-party websites or services for informational purposes. ddbet has no control over the content, privacy practices, or data handling of any third-party website. This Privacy Policy applies solely to the ddbet platform and does not extend to any third-party sites.

ddbet encourages you to review the privacy policies of any third-party websites you visit. We are not responsible for the privacy practices or content of any third-party websites, and your use of such sites is entirely at your own risk.

ddbet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When we make material changes to this Policy, we will notify you by posting a prominent notice on the ddbet platform and, where appropriate, by sending a notification to the email address associated with your account.

The updated Policy will take effect on the date indicated at the top of the document as the "Last Updated" date. Your continued use of the ddbet platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should discontinue use of the platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how ddbet protects your personal data. Previous versions of this Policy are available upon request by contacting our support team.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way ddbet handles your personal data, please contact our Data Privacy team through any of the following channels:

• Live Chat: Available 24/7 directly on the ddbet platform. This is the fastest way to reach our support team for urgent privacy concerns.
• Email: You may reach our support team at [email protected]. Please include "Privacy Request" in the subject line so your message is routed to the appropriate team.
• Correspondence Address: ddbet, Metro Manila, Philippines. For formal legal notices and data rights requests submitted in writing, please direct correspondence to this address via registered mail.

For complaints regarding ddbet's compliance with the Data Privacy Act of 2012, you may also contact the National Privacy Commission (NPC) of the Philippines directly. The NPC is the independent government body responsible for administering and implementing the Data Privacy Act and protecting the privacy rights of Filipino citizens.