betsoft Privacy
Policy

Data Controller

For purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, the data controller responsible for the personal information collected through the betsoft Platform is:

As data controller, betsoft determines the purposes and means by which your personal information is collected and processed. We are committed to processing your personal data lawfully, transparently, and in accordance with the rights afforded to you under Philippine law.

By creating a betsoft Account and using the betsoft Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you should discontinue use of the betsoft Platform.

Data We Collect

betsoft collects personal data from you through several means: directly when you register and use the Platform, automatically through your device and browsing behavior, and from third parties such as payment providers and identity verification services. The categories of personal data we collect are set out below.

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (for age verification — you must be 21 years or older);
• Residential address, including barangay, city/municipality, and province;
• Email address and mobile phone number;
• Government-issued ID type and number (submitted during KYC verification);
• Selfie or photo verification image (where required for KYC).

2.2 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, dates, and payment methods used;
• GCash account number, PayMaya account details, or bank account information (last four digits only; full account credentials are handled exclusively by your payment provider);
• Transaction reference numbers and payment gateway response data;
• Bonus claims, wagering activity, and promotional transaction history.

2.3 Gameplay & Activity Data

• Game session logs, including games played, bet amounts, game outcomes, and session durations;
• Bonus usage, free spin activity, and promotional participation records;
• Responsible gaming tool activations, including deposit limits, cooling-off periods, and self-exclusion records;
• Customer support interaction records and correspondence history.

2.4 Technical & Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser type and version;
• Unique device identifiers;
• Pages visited, click paths, time on page, and referral source;
• Session tokens and authentication logs.

How We Use Your Data

betsoft uses the personal data we collect for specific, legitimate purposes directly related to operating the betsoft Platform and fulfilling our obligations to you as a player and to Philippine regulatory authorities. We do not use your data for purposes that are incompatible with those listed below.

betsoft uses automated decision-making in limited circumstances, including automated fraud detection and responsible gaming risk scoring. Where automated decisions may significantly affect your Account (for example, an automated account suspension triggered by a fraud detection alert), you have the right to request human review of that decision by contacting betsoft support.

Legal Basis for Processing

betsoft processes your personal data on one or more of the following legal bases, as applicable under the Data Privacy Act of 2012:

• Consent: Where you have given express consent to the processing of your personal data for a specific purpose, such as receiving marketing communications or providing biometric verification during KYC. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Contractual Necessity: Where processing is necessary for betsoft to perform its obligations under the betsoft Terms and Conditions, including account management, payment processing, and game delivery.
• Legal Obligation: Where processing is required for betsoft to comply with applicable Philippine law, including PAGCOR regulations, anti-money laundering (AML) obligations under Republic Act No. 9160 (Anti-Money Laundering Act), and mandatory record-keeping requirements.
• Legitimate Interests: Where processing is necessary for the legitimate interests of betsoft, provided those interests are not overridden by your rights and interests. This includes fraud prevention, platform security, responsible gaming monitoring, and platform analytics.

Data Sharing & Disclosure

betsoft does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

5.1 Payment Processors & Banking Partners

betsoft shares transaction data with payment service providers including GCash, PayMaya, BPI, BDO, Metrobank, RCBC, and UnionBank solely for the purpose of processing your deposits and withdrawals. Each payment provider operates under its own privacy policy and applicable financial regulations.

5.2 Identity Verification & KYC Providers

betsoft may share identity data with certified third-party KYC and identity verification service providers for the purpose of verifying your age and identity as required by PAGCOR regulations. These providers are contractually bound to process your data only for verification purposes and to maintain appropriate security standards.

5.3 Regulatory Authorities

betsoft is legally required to share certain information with PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory and law enforcement bodies upon lawful request or as required under applicable reporting obligations. Such disclosures are made without prior notice to the player where required by law.

5.4 Technology & Platform Service Providers

betsoft works with trusted third-party technology vendors — including game software providers, cloud hosting providers, customer support platforms, and analytics services — who may process personal data on betsoft's behalf as data processors. All such vendors are bound by data processing agreements that require them to handle your data in accordance with this Privacy Policy and applicable Philippine law.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of betsoft's business or assets, your personal data may be transferred to the acquiring entity as part of that transaction. betsoft will provide notice via the Platform or by email prior to any such transfer, and the acquiring entity will be required to maintain the same privacy protections described in this Policy.

Cookies & Tracking Technologies

betsoft uses cookies, web beacons, pixel tags, and similar tracking technologies on the betsoft Platform. These technologies help us deliver a functional, personalized experience and allow us to analyze how the Platform is used so we can continue improving it for Filipino players.

Most web browsers allow you to manage cookies through their settings. You can typically instruct your browser to refuse all cookies, delete existing cookies, or notify you when a cookie is being placed. Please note that disabling functional or essential cookies may significantly affect your ability to use the betsoft Platform normally.

betsoft does not use cross-site tracking cookies to follow your browsing activity on other websites outside of betsoft.app.

Data Retention

betsoft retains your personal data for as long as your betsoft Account remains active and for a defined period thereafter, as required by applicable Philippine law and regulatory obligations. The specific retention periods that apply to different categories of your data are summarized below.

• Account & Identity Data: Retained for the full duration of your Account and for a minimum of five (5) years following permanent account closure, in compliance with PAGCOR record-keeping and AML requirements under Republic Act No. 9160.
• Financial & Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, in compliance with applicable AML and financial regulation requirements.
• KYC & Verification Data: Retained for the duration of your Account and for five (5) years following closure, or longer if required by a specific regulatory investigation or legal proceeding.
• Gameplay & Activity Logs: Retained for a minimum of three (3) years from the date of each game session.
• Customer Support Records: Retained for three (3) years from the date of each interaction.
• Marketing Consent Records: Retained for the duration of the consent and for three (3) years following withdrawal of consent.
• Technical & Log Data: Retained for twelve (12) months from collection, after which it is automatically deleted or anonymized.

Upon expiry of the applicable retention period, betsoft will securely delete or anonymize your personal data in a manner that makes it impossible to re-identify. Where complete deletion is not technically feasible (for example, in backup archives), data will be isolated and protected until deletion is possible.

Data Security

betsoft employs a layered set of technical, organizational, and physical security measures to protect your personal data against unauthorized access, disclosure, alteration, destruction, or loss. Our security framework includes the following key controls:

• Encryption in Transit: All data transmitted between your device and the betsoft Platform is encrypted using TLS (Transport Layer Security) 1.2 or higher.
• Encryption at Rest: Sensitive personal data stored on betsoft servers — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. betsoft staff who handle personal data are subject to confidentiality obligations and regular privacy training.
• Two-Factor Authentication: betsoft's internal systems require multi-factor authentication for all staff accessing player data. betsoft also strongly encourages players to enable 2FA on their own Accounts.
• Security Monitoring: betsoft maintains 24/7 security monitoring of its Platform infrastructure, with automated alerts for suspicious access patterns and potential security incidents.
• Regular Security Audits: betsoft engages independent security professionals to conduct regular penetration testing and vulnerability assessments of the Platform.

Your Privacy Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by betsoft. betsoft will respond to all verified privacy rights requests within fifteen (15) business days, or within the timeframe required by applicable law.

• Right to be Informed: You have the right to know what personal data betsoft holds about you, the purposes for which it is being processed, and to whom it may be disclosed. This Privacy Policy is the primary means by which betsoft fulfills this right.
• Right to Access: You may request a copy of the personal data betsoft holds about you. Requests will be fulfilled within fifteen (15) business days. betsoft may charge a reasonable administrative fee for repeated or manifestly unfounded access requests.
• Right to Rectification: If any of the personal data betsoft holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain information directly within your Account settings.
• Right to Erasure: You may request that betsoft delete your personal data where: it is no longer necessary for the purposes for which it was collected; you withdraw consent and there is no other legal basis for processing; or the data has been unlawfully processed. This right is subject to betsoft's legal retention obligations.
• Right to Object: You may object to the processing of your personal data where betsoft relies on legitimate interests as the legal basis. betsoft will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Data Portability: Where processing is based on your consent or a contract and is carried out by automated means, you may request that betsoft provide your personal data in a structured, commonly used, machine-readable format.
• Right to File a Complaint: If you believe betsoft has mishandled your personal data, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the rights listed above, please contact betsoft's Data Protection Officer using the contact details provided in Section 14 of this Privacy Policy. betsoft may need to verify your identity before processing a privacy rights request.

Children's Privacy

The betsoft Platform is strictly intended for adults who are twenty-one (21) years of age or older, in accordance with applicable Philippine law and PAGCOR regulations. betsoft does not knowingly collect, process, or store personal data from any person under the age of 21.

If you are a parent or guardian and believe that a person under 21 in your care has registered a betsoft Account without your knowledge, please contact betsoft support immediately at support@betsoft.app so we can take prompt action to close the Account and delete the associated data.

International Data Transfers

betsoft's primary servers and data processing infrastructure are operated within the Philippines. However, in the course of providing the betsoft Platform, your personal data may be transferred to and processed in countries outside the Philippines — for example, by international game software providers or global cloud infrastructure partners.

Where such international transfers occur, betsoft ensures that appropriate safeguards are in place to protect your personal data in compliance with the Data Privacy Act of 2012. These safeguards may include:

• Contractual clauses with the recipient that require them to protect personal data to the same standard as required by Philippine law;
• Transfers to countries that have been determined to provide an adequate level of data protection; or
• Other legally recognized transfer mechanisms under the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

betsoft will not transfer your personal data to any country or international organization unless the transfer is covered by one of the safeguards described above. If you would like more information about the specific safeguards in place for any particular international transfer, please contact betsoft's Data Protection Officer at the details provided in Section 14.

Third-Party Services & Links

The betsoft Platform integrates with certain third-party services to deliver its features — including payment gateways, game software providers, and customer support tools. These third-party services operate under their own privacy policies and data practices, which are independent of this Privacy Policy.

betsoft is not responsible for the privacy practices or content of any third-party service providers. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the betsoft Platform, particularly your chosen payment provider (GCash, PayMaya, BPI, BDO, Metrobank, RCBC, or UnionBank).

Where betsoft engages third parties as data processors — meaning they process personal data on betsoft's behalf and under betsoft's instructions — those processors are required by contract to:

• Process personal data only on betsoft's documented instructions;
• Implement appropriate technical and organizational security measures;
• Not engage additional sub-processors without betsoft's prior written consent;
• Delete or return all personal data upon termination of the service relationship;
• Assist betsoft in fulfilling its obligations to data subjects under the Data Privacy Act of 2012.

Updates to This Privacy Policy

betsoft reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or Platform features. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page;
• Post a notice on the betsoft Platform homepage or within your Account dashboard for a minimum of thirty (30) days following the change;
• Where required by law or where changes materially affect how we use your data, send a notification to your registered email address.

Your continued use of the betsoft Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with a material change to this Privacy Policy, you may close your Account by contacting betsoft support before the effective date of the change.

We encourage you to review this Privacy Policy periodically to stay informed about how betsoft is protecting your personal data. This Privacy Policy was last comprehensively reviewed and updated on January 1, 2026.

Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or betsoft's handling of your personal data, please contact betsoft's designated Data Protection Officer (DPO). The DPO is responsible for overseeing betsoft's compliance with the Data Privacy Act of 2012 and for handling all privacy-related inquiries from players and the National Privacy Commission.

When submitting a privacy rights request, please include your full name, registered email address, and a clear description of your request or concern. betsoft may need to verify your identity before processing certain requests to protect the security of your personal data.

betsoft is committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with betsoft's response to your privacy inquiry, you have the right to escalate your complaint to the National Privacy Commission using the NPC's official complaint procedures.