bombet Privacy Policy

// contents[]

1. Who We Are 2. Data We Collect 3. How We Collect Data 4. Why We Use Your Data 5. Legal Basis for Processing 6. Data Sharing & Disclosure 7. Cookies & Tracking 8. Data Retention 9. Data Security 10. Your Rights 11. Children's Privacy 12. Cross-Border Transfers 13. Changes to This Policy 14. Contact & DPO

// section_01

1. Who We Are

bombet ("bombet," "we," "us," or "our") is an online gaming platform operating at bombet.app, offering casino games, live dealer tables, slots, bingo, and related entertainment services to eligible players in the Philippines. bombet acts as the data controller for all personal data collected through the Platform.

This Privacy Policy applies to all personal data collected from users of the bombet website, mobile-optimised platform, and any related services or communications. It should be read together with our Terms & Conditions, which govern your use of the Platform.

If you have questions about how bombet handles your personal data, you may contact our Data Protection Officer (DPO) at the details provided in Section 14 of this Policy.

// section_02

2. Personal Data We Collect

bombet collects the following categories of personal data, depending on how you interact with the Platform:

Identity & Contact Data:

Full legal name as it appears on your government-issued ID;
Date of birth (used to verify the 21+ age requirement);
Email address and mobile number;
Residential address (province, city/municipality, barangay, ZIP code);
Government-issued ID number (passport, driver's license, PhilSys ID, UMID, SSS ID).

Financial Data:

GCash or PayMaya account details (registered mobile number and name);
Bank account details for withdrawal processing (account name, account number, bank name);
Transaction history including deposits, withdrawals, and wager records.

Technical & Usage Data:

IP address and approximate geolocation;
Device type, operating system, and browser information;
Session duration, pages visited, and features used;
Login timestamps and access logs.

Communications Data:

Support chat transcripts and email correspondence;
Survey responses and feedback submissions;
Marketing preference settings.

// section_03

3. How We Collect Your Data

bombet collects personal data through the following means:

Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact support, or respond to a survey;
Automated collection: Through cookies, web beacons, server logs, and similar tracking technologies as you navigate the Platform;
Third-party sources: From KYC verification providers, payment processors (GCash, PayMaya, banks), fraud detection services, and, where required, from Philippine government databases for identity verification purposes;
Publicly available sources: Where permitted by law, from publicly accessible records to verify identity or detect fraud.

bombet does not collect sensitive personal information (such as health data, political opinions, or religious beliefs) unless specifically required by law or with your explicit consent.

// section_04

4. Why We Use Your Personal Data

bombet processes your personal data for the following purposes:

Account management: To create, maintain, and secure your bombet player account;
Identity verification (KYC): To verify your age (21+), identity, and eligibility to use the Platform in compliance with PAGCOR regulations and Philippine anti-money laundering laws;
Payment processing: To process deposits and withdrawals via your registered payment methods;
Game delivery: To provide access to casino games, live dealer tables, slots, and bingo;
Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance;
Fraud prevention & security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct;
Regulatory compliance: To meet our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012;
Responsible gaming: To monitor gaming behaviour and apply responsible gaming tools such as deposit limits and self-exclusion where appropriate;
Marketing communications: To send you promotional offers, bonuses, and platform updates — only where you have opted in or where permitted by law. You may opt out at any time;
Platform improvement: To analyse usage patterns and improve the performance, features, and user experience of the bombet Platform.

// section_05

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 (RA 10173), bombet processes your personal data on the following legal bases:

Contractual necessity: Processing required to perform our contract with you — including account creation, game access, and payment processing;
Legal obligation: Processing required to comply with Philippine law, including PAGCOR regulations, AMLA reporting obligations, and tax requirements;
Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights;
Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

// section_06

6. Data Sharing & Disclosure

bombet does not sell your personal data. We share data only as described below and only to the extent necessary for the stated purpose.

bombet may share your personal data with the following categories of recipients:

Payment processors: GCash, PayMaya (Maya), and Philippine banks — to process your deposits and withdrawals;
KYC & identity verification providers: Third-party services that assist with document verification and liveness checks;
Game providers: Licensed game studios whose titles are available on the bombet Platform — limited to the data necessary to deliver the game experience;
Fraud detection & security services: Providers that help bombet detect and prevent fraudulent activity;
Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies — where required by law or court order;
Professional advisers: Lawyers, auditors, and accountants — under strict confidentiality obligations;
Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party service providers engaged by bombet are contractually required to process your data only on our instructions and in accordance with applicable Philippine data protection law.

// section_07

7. Cookies & Tracking Technologies

bombet uses cookies and similar technologies (web beacons, pixel tags, local storage) to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform.

We use the following categories of cookies:

Strictly necessary cookies: Required for the Platform to function — including session management, login authentication, and security. These cannot be disabled;
Functional cookies: Remember your preferences such as language settings and display options;
Analytics cookies: Help us understand how players use the Platform so we can improve performance and user experience. Data collected is aggregated and anonymised where possible;
Marketing cookies: Used to deliver relevant promotional content. These are only set with your consent.

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the Platform. bombet does not use third-party advertising networks that track you across unrelated websites.

// section_08

8. Data Retention

bombet retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

Account data: Retained for the duration of your account and for five (5) years following account closure, in compliance with PAGCOR record-keeping requirements;
KYC documents: Retained for five (5) years from the date of verification, as required under the Anti-Money Laundering Act;
Transaction records: Retained for five (5) years from the date of each transaction;
Support communications: Retained for two (2) years from the date of the last interaction;
Marketing data: Retained until you withdraw consent or opt out, after which it is deleted within thirty (30) days;
Technical logs: Retained for twelve (12) months for security and fraud investigation purposes.

After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to you.

// section_09

9. Data Security

bombet implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

TLS/SSL encryption for all data transmitted between your device and the bombet Platform;
Encryption of sensitive data at rest, including payment details and identity documents;
Role-based access controls limiting staff access to personal data on a need-to-know basis;
Regular security assessments and penetration testing;
Multi-factor authentication for administrative access to data systems;
Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bombet will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected data subjects without undue delay, as required by RA 10173.

While bombet takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying bombet immediately if you suspect unauthorised access to your account.

// section_10

10. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bombet:

Right to be informed: To know what personal data bombet collects, why, and how it is used — as set out in this Policy;
Right of access: To request a copy of the personal data bombet holds about you;
Right to rectification: To request correction of inaccurate or incomplete personal data;
Right to erasure: To request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations;
Right to object: To object to processing based on legitimate interests, including direct marketing;
Right to data portability: To receive your personal data in a structured, commonly used format and to transmit it to another controller where technically feasible;
Right to lodge a complaint: To file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact bombet's Data Protection Officer using the details in Section 14. bombet will respond to all data subject requests within fifteen (15) business days. We may need to verify your identity before processing your request.

// section_11

11. Children's Privacy

The bombet Platform is strictly intended for individuals who are 21 years of age or older. bombet does not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory step in the registration and KYC process.

If bombet becomes aware that personal data has been collected from a person under 21, the account will be immediately suspended, all data will be deleted, and any funds will be returned to the payment source. If you believe a minor has registered on the Platform, please contact us immediately at the details in Section 14.

// section_12

12. Cross-Border Data Transfers

bombet primarily stores and processes personal data within the Philippines. Where data is transferred to service providers located outside the Philippines — for example, cloud infrastructure providers or international game studios — bombet ensures that such transfers are subject to appropriate safeguards, including:

Contractual data processing agreements requiring the recipient to apply data protection standards equivalent to those required under RA 10173;
Transfer only to jurisdictions with adequate data protection laws, as recognised by the National Privacy Commission;
Your explicit consent where required by law.

bombet will not transfer your personal data to a foreign jurisdiction where doing so would violate Philippine law or expose your data to a lower standard of protection than that provided under RA 10173.

// section_13

13. Changes to This Privacy Policy

bombet may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes, we will notify you by email to your registered address or by posting a prominent notice on the Platform at least fourteen (14) days before the changes take effect.

The effective date at the top of this Policy indicates when it was last updated. We encourage you to review this Policy periodically. Your continued use of the bombet Platform after the effective date of any update constitutes your acceptance of the revised Policy.

// section_14

14. Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bombet handles your personal data, please contact our Data Protection Officer:

role: Data Protection Officer (DPO)

platform: bombet

website: bombet.app

email: [email protected]

response_time: 15 business days

regulator: National Privacy Commission (NPC), Philippines

You also have the right to lodge a complaint directly with the National Privacy Commission if you believe your data privacy rights have been violated. Information on how to file a complaint is available on the NPC's official website.

Your Privacy, Summarised

Play with Confidence on bombet