philboss is committed to protecting the personal data of every player on our platform in full compliance with the Philippine Data Privacy Act of 2012. This Policy explains what we collect, why we collect it, and how we keep it safe.
Effective Date: 1 January 2026 · Last Updated: 1 January 2026These cards summarise our core privacy commitments. They complement — and do not replace — the full Privacy Policy below, which all players are required to read.
philboss collects registration details, identity documents, payment records, game history, and device/browser data. We collect only what is necessary for account management, KYC compliance, fraud prevention, and regulatory obligations under PAGCOR and the AMLC.
All personal data stored by philboss is encrypted at rest and in transit using industry-standard 256-bit SSL/TLS. Access to personal data is restricted to authorised personnel on a need-to-know basis and is logged for audit purposes.
philboss does not sell personal data. We share data only with regulated third parties required for platform operation: KYC verification providers, licensed payment processors (GCash, Maya, BPI, BDO), game technology providers, and regulatory bodies including PAGCOR and the AMLC where legally required.
Filipino players have enforceable rights under the Data Privacy Act of 2012 (RA 10173), including the right to access, correct, object, erase, and port their personal data. philboss provides a clear channel for exercising each right — detailed in Section 9 of this Policy.
philboss uses session cookies, functional cookies, and analytics cookies to keep your account active, remember your preferences, and understand how players navigate the platform. You can manage cookie preferences through your browser. Declining non-essential cookies does not prevent you from accessing the platform.
philboss retains personal data for as long as your account is active and for the minimum period required by PAGCOR and AMLA regulations after account closure (currently five years for transaction records). Data no longer required for regulatory or business purposes is securely deleted or anonymised.
philboss ("philboss", "we", "us", or "the Company") operates the online gaming platform accessible at philboss.co (the "Platform"). We are licensed by the Philippine Amusement and Gaming Corporation (PAGCOR) to provide online casino, sports betting, and related gaming services to eligible players in the Philippines.
philboss takes the privacy of its players seriously. This Privacy Policy describes how we collect, use, process, store, share, and protect the personal information of every individual who visits, registers on, or transacts through the philboss Platform. It is prepared in accordance with the requirements of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC).
This Privacy Policy applies to all personal data collected through the Platform, through email or live chat communications with philboss support, and through any other interaction with philboss as a data subject.
For the purposes of the Philippine Data Privacy Act of 2012, philboss is the personal information controller in respect of all data collected from players and site visitors through the philboss Platform. philboss is responsible for determining the purposes for which and the manner in which personal data is processed.
philboss has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with data protection law and this Privacy Policy. Contact details for the DPO are provided in Section 14 of this Policy.
When you register a philboss account, complete KYC verification, make deposits or withdrawals, or contact support, you provide us with personal data that may include:
When you access or use the philboss Platform, certain technical data is collected automatically, including:
philboss may receive personal data about you from third-party sources in the following circumstances:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, ID documents | KYC verification, age verification, fraud prevention |
| Contact Data | Mobile number, email address, residential address | Account management, OTP delivery, support communications |
| Financial Data | GCash / Maya number, bank account reference, transaction history | Deposit and withdrawal processing, AMLA compliance |
| Gaming Data | Bets, game sessions, win/loss records, bonus usage | Game provision, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, device ID, browser, login logs | Security, fraud detection, platform performance |
| Communication Data | Support chat transcripts, email correspondence | Customer support, dispute records, quality assurance |
philboss processes personal data for the following specific purposes:
Under the Philippine Data Privacy Act of 2012, philboss processes personal data on the following legal bases:
philboss does not sell, rent, or trade personal data to any third party for marketing purposes. We disclose personal data only in the following circumstances and only to the extent necessary for the stated purpose:
philboss is required by law to disclose personal data to regulatory bodies and law enforcement agencies in specific circumstances, including:
In the event of a merger, acquisition, or sale of all or part of philboss's business assets, personal data held by philboss may be transferred to the acquiring entity, subject to the same data protection obligations set out in this Policy. Players will be notified of any such transfer in advance.
philboss implements technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
philboss retains personal data for as long as your account remains active and, following account closure, for the minimum period required by applicable Philippine law. Current retention periods are as follows:
| Data Category | Retention Period | Legal Basis |
|---|---|---|
| Account registration and profile data | Duration of account + 5 years post-closure | PAGCOR licence conditions |
| Identity verification (KYC) documents | Duration of account + 5 years post-closure | AMLA, PAGCOR requirements |
| Financial transaction records | 5 years from transaction date | Anti-Money Laundering Act |
| Game history and wagering records | Duration of account + 2 years post-closure | Dispute resolution, PAGCOR audit |
| Customer support communications | 3 years from last communication | Dispute resolution, quality assurance |
| Technical and device logs | 90 days (rolling) | Security and fraud monitoring |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data (which can no longer be linked to an individual) may be retained for statistical analysis and platform improvement purposes without limitation.
As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in respect of the personal data philboss holds about you:
Request a copy of the personal data philboss holds about you and information on how it is processed.
Request correction of inaccurate or incomplete personal data held in your philboss account or records.
Request deletion of personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Object to processing of personal data carried out on the basis of legitimate interests or for direct marketing purposes.
Receive a copy of your personal data in a structured, commonly used, machine-readable format where technically feasible.
Be notified promptly in the event of a data breach that is likely to result in harm to your rights and interests as a data subject.
To exercise any of the rights listed above, contact the philboss Data Protection Officer using the details in Section 14. philboss will acknowledge your request within three (3) business days and provide a substantive response within fifteen (15) business days of receipt. We may request additional information to verify your identity before processing a data rights request.
The exercise of data subject rights may be limited where processing is required for compliance with a legal obligation applicable to philboss (including PAGCOR licence conditions and AMLA requirements), or where deletion of data is incompatible with mandated retention periods. philboss will inform you of any such limitation when responding to your request.
If you believe that philboss has processed your personal data in a manner inconsistent with the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on the NPC's complaint process is available from the NPC's official channels.
The philboss Platform uses cookies and similar tracking technologies to operate correctly, remember your preferences, keep your session active, and understand how players use the platform. The following types of cookies are used:
These cookies are essential for the Platform to function. They maintain your login session, preserve your wallet balance display, and enable core features such as the game lobby and cashier. The Platform cannot operate without these cookies and they cannot be disabled.
Functional cookies remember your preferences — such as your preferred language, recently played games, and display settings — to provide a more personalised experience. These cookies do not track browsing activity outside the philboss Platform.
philboss uses analytics tools to understand aggregated player behaviour on the Platform — which pages are visited most, where players drop off, and how game categories perform. This data is used to improve the platform. Analytics cookies collect anonymised or pseudonymised data only.
You can manage cookie settings through your browser. Most browsers allow you to block or delete cookies, though disabling strictly necessary cookies will prevent you from logging in or using core platform features. Blocking analytics or functional cookies will not prevent you from accessing the platform but may affect your experience.
If you are a parent or guardian and believe that a person under 21 in your care has registered or used the philboss Platform, please contact us immediately at the details provided in Section 14.
The philboss Platform does not contain links to third-party websites. All navigation on the philboss Platform leads exclusively to philboss-operated pages. Any third-party service providers referenced in this Policy (such as payment processors and game providers) are accessed through philboss's own integrated systems — players do not navigate away from the philboss Platform to complete transactions or play games.
If philboss were to include links to third-party resources in the future, this Privacy Policy would be updated accordingly and a notice provided to players. Third-party websites operate under their own independent privacy policies for which philboss bears no responsibility.
philboss reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. Where a material change is made, philboss will notify players via a prominent notice on the Platform and/or by email to the address registered on your account, with a minimum of seven (7) days' advance notice before the revised Policy takes effect.
The "Last Updated" date at the top of this Policy will always reflect the most recent revision. Players are encouraged to review this Policy periodically. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.
For all data privacy-related enquiries, data subject rights requests, or to report a suspected data breach or suspected collection of data from a minor, please contact the philboss Data Protection Officer:
philboss aims to acknowledge all data privacy requests within three (3) business days and to provide a substantive response within fifteen (15) business days. Complex requests may require additional time — if so, you will be informed of the expected resolution timeline.
Your personal data is protected under the Philippine Data Privacy Act and handled with full transparency at philboss. Create your free account today — PAGCOR-licensed, GCash-ready, 21+.