bonusph Privacy Policy

bonusph ("we," "us," "our," or "the Company") operates the online gaming platform accessible at bonusph.net and any related mobile or desktop applications (collectively, the "Platform"). This Privacy Policy explains how bonusph collects, uses, stores, protects, and discloses personal information in connection with your use of the Platform.

This policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. By registering for or using the bonusph Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal information as described herein.

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, bonusph is the Personal Information Controller (PIC) in respect of all personal data collected through the Platform. As PIC, bonusph determines the purposes and means of processing your personal information and is responsible for ensuring that such processing complies with applicable Philippine data privacy law.

bonusph has appointed a Data Protection Officer (DPO) who is responsible for overseeing our data protection strategy and ensuring compliance with RA 10173 and related NPC regulations. Contact details for our DPO are provided in the Contact section of this policy.

bonusph collects the following categories of personal information from players and prospective players:

bonusph collects personal information through the following means:

• Direct interactions: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in a promotion.
• Automated technologies: Technical and usage data collected automatically when you access and use the bonusph Platform, including through cookies, server logs, and session tracking tools.
• Third-party payment providers: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank when you initiate a deposit or withdrawal.
• Identity verification services: Data returned by our KYC and document verification service providers during the account verification process.
• Regulatory and compliance sources: Information received from PAGCOR, the Anti-Money Laundering Council (AMLC), or other Philippine regulatory bodies in connection with our legal obligations.

bonusph processes your personal information for the following purposes:

1. Account registration and management: To create, maintain, and administer your bonusph account, including verifying your identity and age in accordance with Philippine gaming regulations.
2. Transaction processing: To process deposits, withdrawals, and related financial transactions in Philippine Peso (PHP) via your chosen payment method.
3. Regulatory and legal compliance: To fulfill our obligations under RA 10173, the Anti-Money Laundering Act (AMLA), PAGCOR licensing conditions, and any lawful orders or requests from Philippine regulatory authorities.
4. Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, account takeovers, money laundering, and other prohibited conduct on the Platform.
5. Responsible gaming: To monitor gameplay patterns, enforce responsible gaming tools (deposit limits, self-exclusion), and identify players who may require intervention in accordance with our Responsible Gaming Policy.
6. Customer support: To respond to your inquiries, process complaints, and resolve disputes through our live chat and email support channels.
7. Platform improvement and analytics: To understand how players use the bonusph Platform and to improve game offerings, user experience, and technical performance. Analytics data is processed in aggregate and anonymized form wherever possible.
8. Marketing communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided your explicit consent to receive such communications. You may withdraw consent at any time.

Under the Data Privacy Act of 2012, bonusph processes your personal information on the following legal bases:

• Consent: Where you have given your explicit, informed consent to the processing of your data for a specific purpose — such as receiving marketing communications or participating in a bonus promotion.
• Contractual necessity: Where processing is necessary to perform the contract between you and bonusph — specifically, to operate your account and deliver the gaming and payment services you have requested.
• Legal obligation: Where processing is required to comply with a legal obligation to which bonusph is subject, including PAGCOR licensing conditions, AMLA reporting obligations, and NPC data breach notification requirements.
• Legitimate interests: Where processing is necessary for the legitimate interests of bonusph or a third party — including fraud prevention, platform security, and responsible gaming monitoring — provided that such interests are not overridden by your rights and freedoms as a data subject.

bonusph may share your personal information with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank receive transaction data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party identity verification services receive your ID documents and personal details solely to conduct the verification process required by Philippine regulations.
• Fraud detection and cybersecurity vendors: Service providers engaged by bonusph to protect the Platform from unauthorized access, fraud, and money laundering may process technical and behavioral data for security purposes.
• Regulatory and law enforcement authorities: PAGCOR, the AMLC, the National Privacy Commission, and other competent Philippine authorities may receive data where bonusph is legally obligated to disclose it.
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged by bonusph may access data on a confidential basis as required for their professional services.
• Business successors: In the event of a merger, acquisition, or transfer of bonusph's operations, your personal data may be transferred to the relevant successor entity, subject to equivalent data protection commitments.

All third parties engaged by bonusph as Personal Information Processors (PIPs) are bound by written data processing agreements that require them to process your data only in accordance with bonusph's instructions and applicable Philippine data privacy law.

bonusph retains your personal information for as long as your account is active and for a defined period thereafter, in accordance with our legal obligations. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted from bonusph's systems, or anonymized in a manner that permanently prevents re-identification, whichever is technically appropriate.

bonusph implements a comprehensive set of technical, organizational, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include, but are not limited to:

• Encryption in transit: All data transmitted between your browser or app and the bonusph Platform is encrypted using TLS 1.3 protocol.
• Encryption at rest: Sensitive data stored on bonusph servers — including identity documents, payment details, and passwords — is encrypted using AES-256 encryption.
• Access controls: Access to personal data within bonusph's systems is restricted on a strict need-to-know basis. All staff with access to personal data undergo background screening and regular data privacy training.
• Multi-factor authentication: Critical internal systems are protected by multi-factor authentication. Players are also encouraged to enable available account security features.
• Penetration testing: bonusph engages independent security specialists to conduct regular vulnerability assessments and penetration tests of the Platform's infrastructure.
• Incident response: bonusph maintains a formal data breach response procedure. In the event of a personal data breach that is likely to result in harm to affected data subjects, bonusph will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with RA 10173.

bonusph uses cookies and similar technologies (collectively, "cookies") to enable essential Platform functionality, manage your login session, and collect aggregate analytics data. The following categories of cookies are used on the bonusph Platform:

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that maintain your login state and security tokens that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional cookies: Used to remember your preferences — such as language settings and responsible gaming limit selections — to provide a more personalized experience.
• Analytics cookies: Used to collect aggregate, anonymized data about how players navigate the bonusph Platform, which pages are most visited, and how performance can be improved. No individual player is identified through analytics data.

bonusph does not use third-party advertising cookies, tracking pixels from social media platforms, or behavioral profiling tools that share data with external advertising networks.

You may manage or disable non-essential cookies through your browser's settings. Note that disabling strictly necessary cookies will impair your ability to use core Platform features, including logging in to your account.

Under the Data Privacy Act of 2012, you have the following rights as a bonusph data subject. You may exercise any of these rights by contacting our Data Protection Officer using the details provided in Section 14 of this policy:

• Right to be Informed: You have the right to be informed of how your personal information is being collected and processed. This Privacy Policy constitutes our primary notice to you.
• Right of Access: You have the right to request a copy of the personal information bonusph holds about you, including details of how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate, incomplete, or outdated personal information in your bonusph account. Minor details — such as your contact number or email address — may be updated directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your personal information, subject to bonusph's legal obligations to retain certain data under AMLA and PAGCOR regulations. Where a retention obligation applies, data cannot be erased before the mandatory retention period expires.
• Right to Object: You have the right to object to the processing of your personal information — in particular, to processing carried out for direct marketing purposes. If you object to marketing communications, you may also unsubscribe directly through the link included in any marketing email or SMS.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another personal information controller where technically feasible.
• Right to File a Complaint: If you believe that bonusph has processed your personal information in violation of RA 10173, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.

bonusph will respond to all data subject rights requests within 15 business days of receipt. In complex cases, we may extend this period by a further 15 business days and will notify you of the extension in writing.

The bonusph Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. bonusph does not knowingly collect personal information from persons under the age of 21.

If bonusph discovers or is notified that personal information has been collected from a person under 21 years of age, the relevant account will be immediately suspended, the personal data will be deleted in accordance with applicable regulations, and any funds held in the account will be dealt with in accordance with PAGCOR guidelines.

bonusph reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When we make material changes to this policy, we will notify registered players by email or through a prominent notice on the Platform at least 14 days before the changes take effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how bonusph protects your personal information. Your continued use of the bonusph Platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.

If you do not agree with any changes to this Privacy Policy, you may close your account and request deletion of your personal data by contacting our Data Protection Officer. Note that certain data must be retained beyond account closure to satisfy our legal obligations as described in Section 8.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal information by bonusph, you may contact our Data Protection Officer through the following channels:

When submitting a data subject rights request, please include your registered account email address and a brief description of your request so our DPO can process it as efficiently as possible. bonusph will respond to all privacy-related inquiries within 15 business days.