xxbb Privacy Policy

1. Introduction

xxbb ("xxbb," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses the xxbb online gaming platform, accessible at xxbb.today and all associated subdomains, mobile applications, and related services (collectively, the "Platform").

This Privacy Policy ("Policy") describes how xxbb collects, uses, stores, shares, and protects your personal information when you access or use the Platform, create an xxbb account, make deposits or withdrawals, participate in games or promotions, or contact our customer support team. It also explains your rights as a data subject under Philippine law and how you can exercise those rights.

By registering an account on the xxbb Platform or continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform and close your account.

This Policy should be read together with the xxbb Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, xxbb is the Personal Information Controller responsible for the personal data collected through the Platform.

xxbb operates in compliance with the regulations of the National Privacy Commission (NPC) of the Philippines and the Philippine Amusement and Gaming Corporation (PAGCOR). All data processing activities conducted by xxbb are carried out in accordance with the principles of transparency, legitimate purpose, and proportionality as required by Philippine data privacy law.

3. Personal Data We Collect

3.1 Information You Provide Directly

When you register an account, use the Platform, or contact xxbb, we collect personal data that you provide directly, including:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (e.g., Philippine passport number, driver's license number, SSS/UMID number);
• Contact Data: Residential address in the Philippines (including city, province, and postal code), email address, and Philippine mobile number;
• Account Data: xxbb username, password (stored in hashed form), security questions and answers, and account preferences;
• Financial Data: GCash account details, PayMaya account details, bank account information (BPI, BDO, Metrobank), transaction history, deposit and withdrawal records, and account balance information;
• Verification Documents: Copies of government-issued identification documents, proof of address (e.g., utility bills, bank statements), and proof of payment method ownership submitted for KYC verification purposes;
• Communications Data: Records of your correspondence with xxbb customer support, including live chat transcripts, email exchanges, and support ticket history.

3.2 Information We Collect Automatically

When you access or use the xxbb Platform, we automatically collect certain technical and behavioral data, including:

• Device Data: IP address, device type, operating system, browser type and version, device identifiers, and screen resolution;
• Usage Data: Pages visited, games played, bet amounts and outcomes, session duration, click patterns, navigation paths, and feature usage;
• Location Data: General geographic location derived from your IP address (country and city level). xxbb does not collect precise GPS location data;
• Log Data: Server logs recording access times, error reports, and Platform performance data;
• Cookie Data: Data collected through cookies and similar tracking technologies as described in Section 7 of this Policy.

3.3 Information from Third Parties

xxbb may receive personal data about you from third parties in certain circumstances, including:

• Identity verification and KYC service providers who confirm the authenticity of your identification documents;
• Payment processors and e-wallet providers (GCash, PayMaya, BPI, BDO, Metrobank) who confirm transaction details;
• Fraud detection and anti-money laundering (AML) screening services;
• Responsible gaming databases, including self-exclusion registries maintained by PAGCOR or other regulatory bodies.

4. How We Use Your Personal Data

xxbb uses the personal data we collect for the following purposes:

Purpose	Types of Data Used
Account registration and management	Identity, Contact, Account Data
Identity verification (KYC) and age verification	Identity, Verification Documents
Processing deposits, withdrawals, and transactions	Financial, Identity Data
Providing and improving gaming services	Usage, Device, Account Data
Customer support and dispute resolution	Identity, Contact, Communications Data
Fraud prevention and security monitoring	Identity, Financial, Device, Usage Data
Anti-money laundering (AML) compliance	Identity, Financial Data
Responsible gaming monitoring and intervention	Usage, Financial, Account Data
Sending transactional notifications	Contact, Account Data
Sending marketing communications (with consent)	Contact, Usage Data
Regulatory reporting and legal compliance	Identity, Financial, Usage Data
Platform analytics and performance optimization	Usage, Device, Cookie Data

xxbb will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.

5. Legal Basis for Processing

xxbb processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your xxbb account, process transactions, and deliver gaming services;
• Legal Obligation: Processing is required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, AML obligations under Republic Act No. 9160 (Anti-Money Laundering Act), and tax reporting requirements;
• Legitimate Interests: Processing is necessary for xxbb's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided these interests are not overridden by your rights and freedoms;
• Consent: For certain processing activities — such as sending marketing communications or using non-essential cookies — xxbb relies on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Data Sharing and Disclosure

6.1 Service Providers

xxbb shares personal data with carefully selected third-party service providers who assist us in operating the Platform. These providers are contractually bound to process your data only on xxbb's instructions and in accordance with this Policy. Categories of service providers include:

• KYC and identity verification providers;
• Payment processors and e-wallet operators (GCash, PayMaya, BPI, BDO, Metrobank);
• Cloud hosting and data storage providers;
• Fraud detection and cybersecurity service providers;
• Customer support platform providers;
• Analytics and platform performance monitoring tools;
• Email and SMS communication service providers.

6.2 Regulatory and Legal Disclosure

xxbb may disclose your personal data to regulatory authorities, law enforcement agencies, courts, or other government bodies where required to do so by applicable Philippine law, court order, or regulatory directive. This includes disclosures to PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and the National Privacy Commission (NPC).

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of xxbb's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. xxbb will notify affected players of any such transfer and the privacy practices of the acquiring entity prior to the transfer taking effect.

6.4 No Sale of Personal Data

7. Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit the xxbb Platform. They help us recognize your device, remember your preferences, keep your session active, and understand how you use the Platform so we can improve it.

7.2 Types of Cookies We Use

Cookie Type	Purpose	Can Be Disabled?
Strictly Necessary	Required for the Platform to function — login sessions, security tokens, load balancing	No — essential for operation
Functional	Remember your preferences such as language, game settings, and display options	Yes — via cookie settings
Analytics	Collect anonymized data on how players use the Platform to help us improve performance and user experience	Yes — via cookie settings
Responsible Gaming	Track session duration and gaming activity to support responsible gaming tools and alerts	No — required for player protection

7.3 Managing Cookies

You can manage your cookie preferences through the xxbb cookie settings panel, accessible from the footer of the Platform. You may also configure your browser to block or delete cookies; however, disabling strictly necessary cookies may impair the functionality of the Platform, including your ability to log in to your xxbb account.

8. Data Retention

xxbb retains your personal data for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. The following retention periods apply:

• Account Data: Retained for the duration of your active xxbb account, plus a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AML regulations;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act and BIR requirements;
• KYC Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction;
• Customer Support Records: Retained for three (3) years from the date of the last interaction;
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, as evidence of compliance;
• Cookie and Analytics Data: Retained for a maximum of thirteen (13) months from collection.

Upon expiry of the applicable retention period, xxbb will securely delete or anonymize your personal data in accordance with our data disposal procedures.

9. Data Security

xxbb takes the security of your personal data seriously and implements a comprehensive set of technical and organizational measures to protect it against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the xxbb Platform is encrypted using industry-standard SSL/TLS protocols;
• Two-Factor Authentication (2FA): xxbb offers and encourages the use of 2FA for all player accounts to prevent unauthorized access;
• Password Hashing: Player passwords are stored using strong one-way cryptographic hashing algorithms and are never stored in plain text;
• Access Controls: Access to personal data within xxbb is restricted on a strict need-to-know basis, with role-based access controls and audit logging;
• Regular Security Audits: xxbb conducts regular penetration testing, vulnerability assessments, and security audits of its Platform and infrastructure;
• Incident Response: xxbb maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, xxbb will notify the National Privacy Commission and affected players within the timeframes required by Philippine law.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights with respect to your personal data held by xxbb. To exercise any of these rights, please contact our Data Protection Officer at [email protected] or through the xxbb live chat support channel.

xxbb will respond to all data subject rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case xxbb will notify you of the extension and the reasons for it.

Please note that certain rights are subject to limitations under Philippine law. For example, xxbb may be unable to delete data that it is legally required to retain for AML or regulatory compliance purposes.

11. Children's Privacy

The xxbb Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. xxbb does not knowingly collect personal data from individuals under the age of 21.

If xxbb becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data in question, and take appropriate steps to prevent further access. If you believe that a minor has registered an account on the xxbb Platform, please contact our support team immediately.

12. International Data Transfers

xxbb primarily stores and processes personal data within the Philippines. However, some of our third-party service providers — including cloud hosting providers, KYC verification services, and analytics platforms — may process data in other countries.

Where personal data is transferred outside the Philippines, xxbb ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012. These safeguards may include contractual data processing agreements incorporating standard data protection clauses approved by the National Privacy Commission, or transfers to countries recognized as providing an adequate level of data protection.

By using the xxbb Platform, you consent to the transfer of your personal data to countries outside the Philippines where necessary for the purposes described in this Policy, subject to the safeguards described above.

13. Third-Party Links and Services

The xxbb Platform may contain links to third-party websites or services for informational purposes. This Privacy Policy applies solely to the xxbb Platform and does not cover the privacy practices of any third-party websites or services. xxbb is not responsible for the privacy practices, content, or security of any third-party sites. We encourage you to review the privacy policies of any third-party services you access.

14. Changes to This Privacy Policy

xxbb reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, xxbb will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. Your continued use of the xxbb Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you must cease using the Platform and close your account before the effective date.

We encourage you to review this Privacy Policy periodically to stay informed about how xxbb protects your personal data.

15. Contact Us and Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the way xxbb handles your personal data, please contact our Data Protection Officer through any of the following channels:

• Data Protection Officer Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 through the xxbb Platform — the fastest way to reach our team.
• Response Time: xxbb aims to acknowledge all privacy-related inquiries within 48 hours and resolve them within 30 calendar days.

If you are not satisfied with xxbb's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for enforcing the Data Privacy Act of 2012.