ikbet Privacy Policy

1 Scope & Application

This Privacy Policy ("Policy") applies to all personal data collected, processed, stored, and used by the ikbet online gaming platform accessible at ikbet.cam, including all associated web interfaces, mobile browser experiences, and customer support channels operated under the ikbet brand.

This Policy applies to:

• Registered ikbet account holders residing in or accessing the platform from the Philippines;
• Individuals who have initiated but not completed the ikbet registration process;
• Visitors to the ikbet.cam website who have not registered an account but whose technical data (such as IP address and browser information) is collected in the ordinary course of platform operation;
• Former account holders whose data is retained in accordance with applicable legal and regulatory retention obligations.

This Policy is to be read in conjunction with the ikbet Terms and Conditions, which address broader contractual obligations, and the ikbet Responsible Gaming Policy. Together these documents constitute the full framework governing the ikbet player relationship.

2 Data Controller Identity

For the purposes of the Philippine Data Privacy Act of 2012 and general data protection principles, ikbet, operating the platform accessible at ikbet.cam, acts as the personal information controller (PIC) in respect of all personal data collected from players and platform visitors.

As a personal information controller, ikbet determines the purposes for which personal data is collected and processed, and is responsible for ensuring that such processing is conducted lawfully, transparently, and in accordance with the data subject's rights as provided under applicable law.

ikbet has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy, responding to data subject requests, and serving as the point of contact with the National Privacy Commission. Contact details for the DPO are provided in Section 13 of this Policy.

3 Personal Data We Collect

ikbet collects personal data through multiple channels: directly from you during registration and account management, through your use of the platform and its features, through payment transactions, and automatically through technical systems as you interact with ikbet.cam. The categories of personal data collected are as follows:

ikbet does not intentionally collect sensitive personal information as defined under the Philippine Data Privacy Act (such as health, religious, or political data) unless specifically required for a regulatory or responsible gaming purpose and with your explicit consent.

4 Purposes & Legal Bases for Processing

ikbet processes personal data only where a lawful basis exists under the Philippine Data Privacy Act. The primary bases relied upon are: performance of a contract (operating your Account), compliance with a legal obligation (KYC, AML), legitimate interest (fraud prevention, platform security), and consent (marketing communications).

• Account registration and management: To create, maintain, and operate your ikbet account, verify your identity, process deposits and withdrawals, and provide customer support. Basis: contractual necessity.
• Identity and age verification (KYC): To comply with our obligations under applicable anti-money laundering laws, verify that you meet the 21+ age requirement, and prevent fraudulent registrations. Basis: legal obligation.
• Payment processing: To process PHP deposit and withdrawal transactions via your chosen payment method (GCash, PayMaya, BPI, BDO, Metrobank, etc.) and maintain accurate financial records. Basis: contractual necessity and legal obligation.
• Responsible gaming monitoring: To monitor gaming activity patterns for indicators of problem gambling, enforce self-imposed limits and exclusions, and reach out proactively where concern thresholds are triggered. Basis: legal obligation and legitimate interest.
• Fraud detection and platform security: To identify and prevent fraudulent transactions, multi-accounting, bonus abuse, unauthorised account access, and other prohibited conduct. Basis: legitimate interest.
• Marketing and promotional communications: To send you information about ikbet bonuses, promotions, and new game releases via email or SMS where you have provided consent. Basis: consent. You may withdraw consent at any time by contacting support or using the unsubscribe function in any marketing email.
• Platform improvement and analytics: To analyse aggregate, anonymised usage patterns to improve the ikbet platform, identify bugs, and optimise the user experience. Basis: legitimate interest. Analytics data used for this purpose is anonymised where practicable.
• Regulatory compliance and reporting: To fulfil reporting obligations to applicable regulatory bodies, cooperate with law enforcement, and respond to legal processes. Basis: legal obligation.

5 Data Sharing & Third-Party Processors

ikbet shares personal data with third parties only where necessary for operational, legal, or regulatory purposes, and only under the following conditions:

• Payment processors: GCash, PayMaya, BPI, BDO, UnionBank, Metrobank, Coins.ph, Visa/Mastercard network processors, and USDT blockchain infrastructure — to process your financial transactions. These processors receive only the data required to execute and verify each transaction.
• KYC and identity verification providers: Third-party identity verification services that assist ikbet in processing government-issued ID documents and conducting age and identity checks. These providers process identity data under strict data processing agreements.
• Game technology providers: Licensed third-party game providers including Playtech and others whose games are accessible through the ikbet lobby. Game providers may receive session and activity data necessary for game delivery, RNG certification compliance, and dispute resolution.
• IT infrastructure and security providers: Cloud hosting, cybersecurity, and fraud detection service providers that support the operation and security of the ikbet platform. All such providers operate under data processing agreements that restrict use of ikbet player data to the specified service purpose only.
• Regulatory authorities and law enforcement: The National Privacy Commission, PAGCOR, the Anti-Money Laundering Council (AMLC), the Philippine National Police, and other competent authorities, where ikbet is legally required to disclose data or where disclosure is necessary to prevent or report criminal activity.
• Professional advisers: Legal counsel, auditors, and other professional advisers, subject to professional confidentiality obligations, where required for the conduct of ikbet's business.

All third-party data processors engaged by ikbet are required to implement appropriate technical and organisational measures to protect personal data and are prohibited from using ikbet player data for any purpose beyond the specific service they provide to ikbet.

6 Data Retention Periods

ikbet retains personal data for the period necessary to fulfil the purposes described in this Policy, comply with applicable legal and regulatory obligations, and resolve any outstanding disputes or claims. The following general retention guidelines apply:

• Active account data: Retained for the duration of your ikbet account plus a minimum of five (5) years following account closure, consistent with Philippine AML record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of account closure or the completion of the transaction that triggered the KYC requirement, whichever is later, as required under applicable anti-money laundering regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with AMLC and tax record-keeping obligations.
• Game activity logs: Retained for a minimum of two (2) years from the date of each game session. Anonymised aggregate game data may be retained indefinitely for platform improvement purposes.
• Customer support communications: Retained for a minimum of two (2) years from the date of the last communication, or for as long as a related dispute remains open.
• Marketing consent records: Retained for as long as you hold an active ikbet account and for two (2) years following account closure, to evidence consent given or withdrawn.
• Technical and security logs: Retained for a minimum of twelve (12) months for fraud detection and platform security purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with ikbet's internal data disposal procedures. Data subject to an active legal hold, regulatory investigation, or unresolved dispute will be retained until such matters are fully resolved.

7 Technical & Organisational Security

ikbet implements a layered security architecture to protect personal data against unauthorised access, accidental loss, destruction, or alteration. The following measures are in place:

• Encryption in transit: All communications between your browser or device and ikbet servers are encrypted using TLS 1.2 or higher (256-bit SSL). This protects your login credentials, payment details, and personal data from interception during transmission.
• Encryption at rest: Sensitive personal data — including identity documents and payment references — is encrypted at rest using industry-standard symmetric encryption. Passwords are stored as salted cryptographic hashes and are never stored or transmitted in plain text.
• Access controls: Access to personal data within ikbet's internal systems is restricted on a role-based, need-to-know basis. All personnel with access to personal data are subject to confidentiality obligations. Administrative access to production data systems requires multi-factor authentication.
• Intrusion detection and monitoring: ikbet operates continuous security monitoring, automated anomaly detection, and regular penetration testing to identify and address vulnerabilities before they can be exploited.
• Data breach response: ikbet maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to the rights and freedoms of players, ikbet will notify the National Privacy Commission within the timeframes prescribed by the Philippine Data Privacy Act, and will notify affected players without undue delay where required by law.
• Third-party security standards: All third-party processors and service providers engaged by ikbet are required to demonstrate adequate data security measures commensurate with the sensitivity of the data they process on ikbet's behalf.

While ikbet applies rigorous technical and organisational safeguards, no digital platform can guarantee absolute security against all possible threats. You play an important role in protecting your own account by using a strong, unique password for ikbet, enabling two-factor authentication, and never sharing your login credentials with any third party.

8 Cookies & Tracking Technologies

ikbet.cam uses cookies and similar browser-based tracking technologies to ensure the platform functions correctly, maintain your session security, and understand how the platform is used so we can continue to improve it. The cookies used by ikbet fall into the following categories:

• Strictly necessary cookies: These cookies are essential for the ikbet platform to operate. They maintain your login session, protect against cross-site request forgery (CSRF), and ensure secure navigation between pages. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These cookies remember your preferences — such as your chosen language, display settings, and responsible gaming tool configurations — so you do not need to reconfigure them on each visit. Disabling these cookies will not prevent access to the platform but may reduce your experience quality.
• Analytics cookies: ikbet uses first-party analytics cookies to collect anonymised aggregate data about how the platform is used: which pages are visited most frequently, where users encounter errors, and how game categories are navigated. This data helps the ikbet team identify improvements. No individual user is identifiable from analytics data.

ikbet does not use third-party advertising network cookies, social media tracking pixels, or behavioural profiling tools on the ikbet.cam domain. Your browsing activity on ikbet is not shared with external advertising platforms.

You may control cookie settings through your browser's privacy settings. Please note that disabling strictly necessary cookies will prevent access to the ikbet platform. Instructions for managing cookies vary by browser — consult your browser's help documentation for specific guidance applicable to Chrome, Safari, Firefox, or Edge on Android or iOS.

9 Minors & Age Restriction

By registering an account on ikbet, you confirm that you are at least 21 years of age. ikbet enforces this requirement through mandatory age declaration at registration and through KYC identity verification procedures that require submission of a government-issued identification document confirming your date of birth.

If ikbet discovers or has reasonable grounds to suspect that an account has been registered by or on behalf of an individual under the age of 21, ikbet will:

• Immediately suspend the account pending investigation;
• Void all bets placed from the account during the period of suspected underage access;
• Return any net Real Money deposits (after voiding of bonuses and bonus-generated winnings) through the original deposit payment method;
• Permanently close the account; and
• Securely delete personal data collected from the underage individual beyond what is required by law for record-keeping purposes.

If you are a parent or guardian and believe that a minor under your supervision has registered on the ikbet platform, please contact the ikbet support team immediately via live chat so that the matter can be addressed without delay.

10 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, you have the following rights in respect of your personal data held by ikbet. These rights are exercisable at no cost to you by contacting the ikbet support team:

To exercise any of the above rights, contact the ikbet support team via live chat or at the email address provided in Section 13. ikbet will acknowledge your request within five (5) business days and respond substantively within fifteen (15) business days, extendable to thirty (30) days where the complexity or volume of requests requires additional processing time.

11 International Data Transfers

The ikbet platform serves Filipino players and processes personal data primarily within systems that may be operated from or accessible in jurisdictions outside the Philippines. Where personal data is transferred to a third country or territory in connection with the services described in this Policy (for example, to a cloud hosting provider or game technology provider with infrastructure in another country), ikbet ensures that appropriate safeguards are in place to protect that data.

Such safeguards include:

• Contractual clauses in data processing agreements with third-party processors that impose obligations consistent with the standards of the Philippine Data Privacy Act;
• Assessment of the recipient country's data protection framework to ensure an adequate level of protection is available; and
• Additional technical measures, such as encryption, applied to data transferred internationally where the legal framework of the destination country does not provide equivalent protection to Philippine law.

By registering an account on ikbet, you acknowledge and agree that your personal data may be transferred to and processed in jurisdictions outside the Philippines as described in this Section, subject to the protections described above.

12 Changes to This Privacy Policy

ikbet reviews this Privacy Policy periodically and updates it to reflect changes in our data processing practices, applicable law, or regulatory guidance. The "Last Updated" date at the top of this document reflects the date of the most recent revision.

Where a material change is made to this Policy that affects your rights or the manner in which ikbet processes your personal data, ikbet will notify you by:

• Sending an email notification to your registered account email address; and/or
• Displaying a prominent in-platform notification on your next login to ikbet.cam following the effective date of the change.

Continued use of the ikbet platform after the effective date of any material change to this Policy constitutes your acknowledgement of the revised terms. If you do not accept the revised Policy, you should cease using the ikbet platform and contact support to request account closure.

Minor updates — including corrections of typographical errors, clarifications that do not alter the substance of our data processing practices, or updates to reflect changes in third-party processor names — may be made without advance notice. The current version of this Policy is always accessible at ikbet.cam/privacy-policy.

13 Contact & DPO Details

For any questions, concerns, or formal requests relating to this Privacy Policy or ikbet's data processing practices, please contact the ikbet data protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly from any page on ikbet.cam — click the chat icon to begin
• Email: [email protected] — please include "Data Privacy Request" in the subject line for formal data subject requests
• Response Language: English and Tagalog
• Response Time: Acknowledgement within 5 business days; substantive response within 15 business days

For formal data subject rights requests (access, correction, deletion, objection, portability), please provide: your full registered name, registered email address, the specific right you are exercising, and sufficient detail to allow ikbet to locate and process the relevant data. ikbet may request proof of identity before processing a data subject request to protect against unauthorised requests made by third parties.