bidaph Privacy Policy – Your Data, Protected

1. Data Controller Information

bidaph is the data controller responsible for the personal data collected and processed through the bidaph platform. As a PAGCOR-licensed online gaming operator, bidaph is registered with the National Privacy Commission (NPC) of the Philippines as required under Republic Act No. 10173 (Data Privacy Act of 2012).

Our designated Data Protection Officer (DPO) is responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act. You may contact the bidaph DPO directly regarding any data privacy concern at the contact details provided in Section 13 of this policy.

For all purposes under this Privacy Policy, the "Platform" refers to bidaph.cam and all associated services, applications, and communications channels operated under the bidaph brand.

2. Personal Data We Collect

bidaph collects the following categories of personal data, depending on how you use our platform and services:

2.1 Identity and Contact Data

• Full legal name as appearing on a Philippine government-issued ID
• Date of birth (to verify the 21+ age requirement)
• Residential address within the Philippines
• Valid Philippine mobile number
• Email address
• Nationality and citizenship status

2.2 Identity Verification (KYC) Data

• Scanned or photographed copies of valid government-issued IDs (Philippine passport, driver's license, UMID, PhilSys National ID, SSS ID, PRC ID, or Postal ID)
• Proof of address documents (utility bills, bank statements, barangay certification)
• Selfie photograph for liveness verification, where required
• Source of funds declaration for high-value transactions

2.3 Financial and Transaction Data

• GCash mobile number and transaction reference numbers
• Maya (PayMaya) account details
• Bank account names and account numbers (BPI, BDO, UnionBank, Metrobank)
• Deposit amounts, withdrawal amounts, and transaction timestamps
• Cryptocurrency wallet addresses (for USDT TRC20 transactions)
• Account balance history and wagering records

2.4 Technical and Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session duration, login timestamps, and activity logs
• Game history, bet amounts, and gaming preferences
• Cookies and similar tracking technology identifiers

2.5 Communication Data

• Live chat transcripts and support ticket records
• Email correspondence with bidaph support or compliance teams
• Responses to surveys, promotions, or feedback requests

3. How We Collect Your Data

bidaph collects personal data through the following methods:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, or contacting customer support.
• Automated Technical Collection: Data collected automatically when you access bidaph, including IP addresses, device identifiers, browser cookies, and session activity logs.
• Third-Party Payment Processors: Transaction confirmation data received from GCash, Maya, bank payment gateways, and cryptocurrency processors when you make deposits or withdrawals.
• Identity Verification Services: Results and records from PAGCOR-compliant KYC verification partners who assist in verifying government-issued documents.
• Fraud Prevention Services: Risk signals and flagging data from third-party fraud detection and anti-money laundering screening services.
• Game and Betting Activity: All game outcomes, bet placements, wager amounts, and winnings are automatically recorded by the bidaph gaming system for regulatory and operational purposes.

4. Purposes and Legal Bases for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules, bidaph must have a lawful basis for processing your personal data. The following table outlines the primary processing purposes and their applicable legal bases:

5. How We Use Your Personal Data

bidaph uses your personal data for the following specific purposes:

5.1 Account and Service Operation

Your identity and contact data are used to create and maintain your bidaph account, verify your eligibility (including the mandatory 21+ age check), process your deposits and withdrawals, and provide you with access to all bidaph gaming services. Without this data, bidaph cannot provide services to you.

5.2 Regulatory Compliance

As a PAGCOR-licensed operator, bidaph is legally required to collect and retain KYC documentation, transaction records, and gaming activity logs. This data is used to prepare mandatory regulatory reports, respond to PAGCOR audit requests, and comply with the Anti-Money Laundering Act (RA 9160, as amended by RA 10365 and RA 11521). Relevant records are retained for the minimum periods mandated by PAGCOR and the Anti-Money Laundering Council (AMLC).

5.3 Fraud Prevention and Security

bidaph analyzes account activity, transaction patterns, IP addresses, and device data to detect and prevent fraud, money laundering, multi-accounting, bonus abuse, and unauthorized access. Accounts flagged by automated systems may be subject to manual review and temporary restrictions pending investigation.

5.4 Responsible Gaming

Gaming activity data is used to monitor player behavior for indicators of problem gambling, such as rapidly increasing bet sizes, extended uninterrupted sessions, or large rapid withdrawals following significant losses. This monitoring supports bidaph's responsible gaming obligations under PAGCOR regulations and enables timely intervention through deposit limit recommendations, session limit prompts, or outreach from our player welfare team.

5.5 Communications and Marketing

With your consent, bidaph may send you promotional emails, SMS notifications about bonuses, and updates about new games or platform features. You may withdraw marketing consent at any time through your account settings or by contacting support. Withdrawal of marketing consent does not affect your ability to use bidaph services or receive essential account communications.

5.6 Platform Improvement

Aggregated and anonymized usage data is analyzed to understand how players navigate the bidaph platform, which games are most popular, and where the user experience can be improved. This analysis does not identify you personally and is used solely to guide product development decisions.

6. Data Sharing and Third Parties

bidaph does not sell your personal data. We may share your data with the following categories of third parties only where necessary and under appropriate data protection agreements:

6.1 Regulatory Authorities

PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies may receive your data as required by law, regulatory reporting obligations, or in response to lawful orders and investigations.

6.2 Payment Processors

GCash (G-Xchange Inc.), Maya Philippines, partner banks (BPI, BDO, UnionBank), and other payment service providers receive necessary transaction data to process deposits and withdrawals. These providers operate under their own privacy policies and are regulated by the Bangko Sentral ng Pilipinas (BSP).

6.3 Identity Verification Partners

Third-party KYC and document verification service providers may process your identity documents to assist with PAGCOR-mandated verification. These partners are bound by strict data processing agreements and may only use your data for the verification purpose specified.

6.4 Game Technology Providers

Third-party game studios providing games available on bidaph may receive anonymized session identifiers and game activity data necessary for game function, jackpot operation, and technical support. These providers do not receive your name, contact details, or financial information.

6.5 IT and Infrastructure Providers

Cloud hosting, cybersecurity, fraud detection, and analytics service providers may have access to platform data in the course of providing services to bidaph under data processing agreements that require them to protect your data and restrict its use to the contracted purpose.

7. Cookies and Tracking Technologies

bidaph uses cookies and similar technologies to operate the platform, remember your session, prevent fraud, and improve your experience. The following types of cookies are used:

• Essential Cookies: Required for the platform to function. These include session authentication tokens, security cookies, and load balancing cookies. You cannot opt out of essential cookies while using bidaph.
• Functional Cookies: Remember your preferences such as language settings, currency display, and game lobby view. These improve your experience but are not strictly necessary.
• Analytics Cookies: Collect anonymized data about how you use the platform, including pages visited, time spent, and navigation paths. This data helps bidaph improve the platform. You may opt out of analytics cookies.
• Fraud Prevention Cookies: Used to detect unusual patterns, flag suspicious activity, and protect your account from unauthorized access. These are treated as essential for security purposes.

You may manage cookie preferences through your browser settings. Note that disabling non-essential cookies will not prevent you from using bidaph, but may affect certain functionality. bidaph does not use cross-site advertising cookies or share cookie data with advertising networks.

8. Data Security Measures

bidaph implements the following technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Encryption in Transit: All data exchanged between your device and bidaph servers is encrypted using TLS 1.2 or TLS 1.3 protocols with 256-bit AES encryption.
• Encryption at Rest: Sensitive personal data, KYC documents, and financial records stored on bidaph servers are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to bidaph staff and authorized processors on a need-to-know basis, with role-based access controls and multi-factor authentication for all administrative systems.
• Security Audits: Regular vulnerability assessments and penetration testing are conducted by third-party security specialists to identify and remediate weaknesses in bidaph's infrastructure.
• Incident Response: bidaph maintains a documented data breach response plan. In the event of a breach affecting your personal data, bidaph will notify affected players and the National Privacy Commission within the timeframes required by the Data Privacy Act.
• Employee Training: All bidaph staff with access to personal data receive regular training on data privacy obligations, secure data handling, and phishing/social engineering awareness.

While bidaph implements industry-standard security measures, no system is entirely immune from breach. You are responsible for maintaining the security of your account password and notifying bidaph immediately if you suspect unauthorized access to your account.

9. Data Retention Periods

bidaph retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by Philippine law and PAGCOR regulations. The following general retention periods apply:

After the applicable retention period expires, your personal data is either securely deleted from bidaph systems or anonymized such that it can no longer be used to identify you. Anonymized, aggregated data may be retained indefinitely for statistical and analytical purposes.

10. Your Rights Under the Data Privacy Act of 2012

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by bidaph. You may exercise any of these rights by contacting the bidaph Data Protection Officer using the contact details in Section 13.

To exercise any of the above rights, contact the bidaph Data Protection Officer at the email address listed in Section 13. We will respond to all data subject requests within fifteen (15) business days of receipt. In complex cases, this may be extended by an additional fifteen (15) days, with prior notification to you.

11. Children's Privacy and Minor Protection

bidaph services are strictly intended for individuals who are at least twenty-one (21) years of age, in accordance with PAGCOR regulations governing online gaming in the Philippines. bidaph does not knowingly collect personal data from individuals under the age of 21.

During registration, players are required to provide their date of birth and to complete KYC verification with a valid Philippine government-issued ID confirming their age. Accounts found to belong to individuals under 21 years old will be immediately closed, and any funds held in those accounts will be returned via the original deposit method after deducting any winnings derived from gameplay.

If you are a parent or guardian and believe a minor has accessed bidaph or provided personal data to the platform, please contact the bidaph Data Protection Officer immediately using the contact details in Section 13. We will investigate and take appropriate action promptly.

12. Changes to This Privacy Policy

bidaph reserves the right to update this Privacy Policy periodically to reflect changes in Philippine law, PAGCOR regulations, NPC guidelines, or our business practices. Material changes — those that significantly affect your rights or the way we process your data — will be communicated to registered players via email at least fourteen (14) days before the change takes effect.

For minor or non-material changes, such as clarifications in language or corrections of typographical errors, the updated Privacy Policy will be published on this page with a revised "Last Updated" date, without prior individual notification.

Your continued use of bidaph services after the effective date of any Privacy Policy update constitutes your acknowledgment of the changes. We recommend reviewing this page periodically to stay informed of how bidaph protects your personal data.

13. How to Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by bidaph, please contact our Data Protection Officer through the following channels:

• Email (Data Privacy Inquiries): [email protected] — please include "Privacy / DPO Request" in the subject line
• Live Chat: Available 24 hours a day, 7 days a week through the bidaph platform — request to be transferred to the Privacy / Compliance team
• Postal Address: Available upon verified request to registered players for formal legal correspondence

For general questions about your bidaph account, payments, or platform support, please use the main customer support Live Chat. The DPO contact is specifically for data privacy requests and formal complaints.

If you are unsatisfied with bidaph's response to your data privacy concern, you may escalate your complaint to the National Privacy Commission (NPC) of the Philippines through its official complaint channels. Information about the NPC's complaint procedure is available on the NPC's official website.

This Privacy Policy was last reviewed and updated in October 2026. bidaph reserves all rights not expressly granted herein. This policy is governed by and construed in accordance with the laws of the Republic of the Philippines.