bilibet Privacy Policy

01 Data Controller

bilibet is the data controller responsible for the personal information collected through the bilibet platform at bilibet.net. As data controller, bilibet determines the purposes and means by which your personal data is processed. We are committed to handling your data responsibly, transparently, and in accordance with applicable data protection laws, including the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines.

If you have any questions or concerns about how bilibet handles your personal data, you may contact our Data Protection Officer using the contact details provided in Section 14 of this Policy.

02 Data We Collect

bilibet collects personal data that is necessary to provide you with a safe, secure, and compliant gaming experience. The categories of personal data we collect include:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by law or for responsible gaming purposes (e.g., self-exclusion records).

03 How We Collect Data

bilibet collects your personal data through the following means:

• Direct interactions: When you register an account, complete identity verification, make deposits or withdrawals, contact customer support, or participate in promotions, you directly provide us with personal data.
• Automated technologies: As you use the bilibet platform, we automatically collect technical and usage data through cookies, server logs, and similar tracking technologies. See Section 9 for more details on our cookie practices.
• Third-party sources: We may receive data about you from third-party identity verification providers, payment processors (such as GCash, PayMaya, BPI, BDO, and Metrobank), fraud prevention services, and publicly available sources, where permitted by applicable law.
• Regulatory sources: We may receive information from regulatory bodies or law enforcement agencies in connection with our legal compliance obligations.

04 How We Use Your Data

bilibet uses your personal data only for legitimate, specified purposes. We will not use your data in ways that are incompatible with the purposes for which it was collected. The primary purposes for which we use your data include:

• Creating and managing your bilibet player account.
• Verifying your identity and age in compliance with applicable regulations.
• Processing financial transactions, including deposits and withdrawals.
• Providing customer support and resolving disputes.
• Detecting, preventing, and investigating fraud, money laundering, and other illegal activities.
• Complying with legal and regulatory obligations, including reporting requirements under applicable Philippine law.
• Monitoring gameplay for responsible gaming purposes and enforcing self-exclusion requests.
• Improving the bilibet platform, personalizing your experience, and developing new features.
• Sending you service-related communications, including account notifications and security alerts.
• Sending you marketing communications about bilibet promotions and offers, where you have provided your consent to receive such communications.

05 Legal Basis for Processing

bilibet processes your personal data on the following legal bases, in accordance with the Data Privacy Act of 2012 and applicable data protection principles:

• Contractual necessity: Processing is necessary to perform our contract with you — specifically, to provide you with access to the bilibet platform and its services.
• Legal obligation: Processing is necessary to comply with applicable laws and regulations, including anti-money laundering requirements, age verification obligations, and regulatory reporting duties.
• Legitimate interests: Processing is necessary for bilibet's legitimate business interests, such as fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and interests.
• Consent: Where we rely on your consent as the legal basis for processing — for example, for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

06 Sharing Your Data

bilibet does not sell your personal data to third parties. We may share your data with the following categories of recipients only where necessary and in accordance with applicable law:

• Payment processors: Financial service providers such as GCash, PayMaya, BPI, BDO, and Metrobank, to facilitate deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML service providers who assist us in verifying your identity and complying with regulatory requirements.
• Game providers: Software providers whose games are available on the bilibet platform, to the extent necessary to deliver gameplay services.
• Technology and infrastructure providers: Cloud hosting, cybersecurity, and analytics service providers who support the operation of the bilibet platform.
• Regulatory and law enforcement authorities: Government agencies, regulators, and law enforcement bodies where we are required by law to disclose your information, including PAGCOR and relevant Philippine authorities.
• Professional advisors: Legal counsel, auditors, and other professional advisors where necessary for the conduct of our business.

All third parties with whom we share your data are required to handle it in accordance with applicable data protection laws and are bound by appropriate data processing agreements or contractual safeguards.

07 Data Retention

bilibet retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable financial regulations.
• Identity verification documents: Retained for the duration of your account and for a minimum of five (5) years following account closure.
• Customer support records: Retained for up to three (3) years from the date of the interaction.
• Marketing consent records: Retained until you withdraw your consent or for three (3) years from the date of last interaction, whichever is earlier.

When your personal data is no longer required, bilibet will securely delete or anonymize it in accordance with our data retention and disposal procedures.

08 Data Security

bilibet takes the security of your personal data seriously. We implement a range of technical and organizational measures designed to protect your data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the bilibet platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Strict access controls ensuring that only authorized personnel can access personal data, on a need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of our systems.
• Multi-factor authentication options for player accounts.
• Comprehensive staff training on data protection and information security practices.
• Incident response procedures to detect, report, and address personal data breaches promptly.

09 Cookies and Tracking

bilibet uses cookies and similar tracking technologies to enhance your experience on the platform, analyze usage patterns, and support security functions. Cookies are small text files stored on your device when you visit the bilibet website.

The types of cookies we use include:

• Strictly necessary cookies: Essential for the operation of the bilibet platform, including session management and security functions. These cannot be disabled.
• Functional cookies: Remember your preferences and settings to provide a more personalized experience.
• Analytics cookies: Help us understand how players use the bilibet platform so we can improve our services. Data collected is aggregated and anonymized where possible.
• Security cookies: Used to detect and prevent fraudulent activity and protect the integrity of the platform.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the bilibet platform. For more information on managing cookies, refer to your browser's help documentation.

10 Your Privacy Rights

Under the Data Privacy Act of 2012 and applicable data protection principles, you have the following rights with respect to your personal data held by bilibet:

To exercise any of these rights, please contact bilibet's Data Protection Officer using the contact details in Section 14. We will respond to your request within thirty (30) days. In some cases, we may need to verify your identity before processing your request. Please note that certain rights may be limited where bilibet has overriding legal obligations to retain or process your data.

11 Minors and Age Restriction

If you are a parent or guardian and believe that a minor has registered on the bilibet platform or provided us with personal data, please contact us immediately at the details provided in Section 14. We take the protection of minors very seriously and will act promptly upon receiving such a report.

12 International Data Transfers

bilibet primarily processes and stores your personal data within the Philippines. In some cases, your data may be transferred to and processed in countries outside the Philippines — for example, where we use cloud infrastructure or third-party service providers based in other jurisdictions.

Where such transfers occur, bilibet ensures that appropriate safeguards are in place to protect your personal data, including contractual protections consistent with the requirements of the Data Privacy Act of 2012 and the standards set by the National Privacy Commission of the Philippines. We will only transfer your data to countries or organizations that provide an adequate level of data protection.

13 Changes to This Policy

bilibet reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this Policy, we will notify registered players via email or through a prominent notice on the bilibet platform. The "Last Updated" date at the top of this document will reflect the date of the most recent revision.

We encourage you to review this Privacy Policy periodically to stay informed about how bilibet protects your personal data. Your continued use of the bilibet platform following the posting of a revised Policy constitutes your acceptance of the changes.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bilibet handles your personal data, please contact our Data Protection Officer:

We are committed to resolving any privacy-related concerns promptly and fairly. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.