Privacy Policy
At bit100, your privacy isn't just a legal formality — it's a genuine commitment. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it's used and protected, and what rights you have as a data subject under Philippine law. We keep it plain and straightforward.
How bit100 Protects Your Data
Six core principles guide every decision we make about your personal information. These aren't just words — they're built into our systems and processes.
Minimal Data Collection
bit100 only collects personal data that is strictly necessary for the purpose it was gathered — whether that's processing your GCash deposit, completing your PAGCOR-mandated KYC verification, or providing customer support. We do not collect data for the sake of it, and we do not sell your information to third-party advertisers.
Bank-Grade Encryption
All data transmitted between your device and bit100's servers is protected using 256-bit SSL encryption and TLS 1.3 protocols — the same standards used by BPI, BDO, and major Philippine financial institutions. Your account credentials, payment details, and KYC documents are encrypted both in transit and at rest.
Your Rights, Our Obligation
Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the right to access, correct, delete, and port your personal data. bit100 honors every one of these rights. You can submit a data subject access request at any time by contacting our Data Protection Officer through the support channel.
Limited Retention Periods
We do not keep your data longer than necessary. Retention periods are determined by the purpose of collection and applicable legal requirements — such as the five-year record-keeping requirement under Philippine AML law. Once the retention period expires, data is securely deleted or anonymized in line with NPC guidelines.
Regulated Sharing Only
bit100 never sells, rents, or trades your personal data. The only third parties who receive your data are those legally required to — such as PAGCOR, the Anti-Money Laundering Council (AMLC), and our licensed payment processors like GCash and Maya — and only to the extent required by law or to deliver the services you have requested.
Breach Notification
In the unlikely event of a personal data breach that poses a real risk to your rights and freedoms, bit100 is committed to notifying affected players and the National Privacy Commission (NPC) within 72 hours of discovery, as required under RA 10173 and NPC Circular 16-03. We maintain an incident response plan that is reviewed and tested regularly.
1 Who We Are
This Privacy Policy applies to bit100 ("bit100," "we," "our," or "us"), the operator of the online gaming and sports betting platform accessible at bit100.app ("Platform"). bit100 operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the data privacy obligations set out under Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations ("IRR").
bit100 acts as the Personal Information Controller (PIC) with respect to all personal data collected through the Platform. This means we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers to process data on our behalf, those providers act as Personal Information Processors (PIPs) under written data processing agreements that bind them to the same data protection standards we uphold.
2 Data We Collect
bit100 collects personal data through several channels — directly from you when you register or use the Platform, automatically as you browse and play, and from regulated third-party sources as part of our KYC and AML obligations. Below is a full breakdown of the categories of personal data we process:
| Data Category | Examples | Source |
|---|---|---|
| Registration Data | Full name, date of birth, email address, mobile number, username, password (hashed) | Provided by you at sign-up |
| KYC / Identity Data | Government-issued ID (SSS, UMID, Passport, Driver's License), selfie photo, ID number | Provided by you during verification |
| Financial Data | GCash number, Maya account, BPI/BDO account name, deposit and withdrawal history | Provided by you; payment processor records |
| Transaction Data | Bet history, game session logs, win/loss records, bonus usage, balance history | Generated automatically on the Platform |
| Technical Data | IP address, device type, browser, operating system, session timestamps, geolocation (city level) | Collected automatically |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Generated during support interactions |
| Marketing Preferences | Email/SMS opt-in status, promotion engagement, bonus claim history | Provided by you or inferred from usage |
3 How We Use Your Data
bit100 processes your personal data only for specified, legitimate purposes. We do not use your data for purposes incompatible with those disclosed in this Policy. The primary purposes for which we process personal data include:
3.1 Account Management
To create, maintain, and secure your bit100 account, verify your identity during login, and process account closure requests. Your registration data forms the foundation of your player relationship with bit100.
3.2 KYC and Regulatory Compliance
To comply with PAGCOR licensing requirements and the Anti-Money Laundering Act (RA 9160 as amended), bit100 is legally required to verify the identity and age of all account holders. KYC data is processed solely for this purpose and for ongoing AML transaction monitoring.
3.3 Payment Processing
To process deposits via GCash, Maya, QR Ph, BPI, BDO, Metrobank, and other supported methods, and to facilitate withdrawals to your verified payment account. Financial data is shared with payment processors only to the extent necessary to complete transactions.
3.4 Game and Service Delivery
To provide access to slots, live casino, bingo, sports betting, and other gaming services on the Platform. Transaction and session data is used to maintain game history, calculate balances, and resolve disputes.
3.5 Customer Support
To respond to your inquiries, resolve disputes, process complaints, and improve the quality of our support services. Support communications may be retained for quality assurance and regulatory audit purposes.
3.6 Responsible Gaming
To monitor gaming behavior for signs of problem gambling, enforce player-set deposit and loss limits, process self-exclusion requests, and comply with PAGCOR's responsible gaming framework requirements.
3.7 Marketing Communications
To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. You may withdraw your marketing consent at any time through your account settings or by contacting support.
3.8 Fraud Prevention and Security
To detect and prevent multi-accounting, bonus abuse, money laundering, account takeover attempts, and other prohibited activities described in our Terms & Conditions. Technical and behavioral data is analyzed for anomalies that may indicate fraudulent activity.
4 Legal Basis for Processing
Under the Philippine Data Privacy Act and its IRR, every processing activity must be grounded in a lawful basis. bit100 relies on the following legal bases for its processing activities:
- Contractual Necessity: Processing required to perform our contract with you — including account creation, game delivery, deposit/withdrawal processing, and customer support.
- Legal Obligation: Processing mandated by Philippine law — including KYC verification under PAGCOR regulations, AML transaction monitoring under RA 9160, and record-keeping required for tax and regulatory purposes.
- Legitimate Interests: Processing necessary for our legitimate business interests, where those interests are not overridden by your rights — including fraud prevention, platform security, and service improvement analytics.
- Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and optional analytics features. You may withdraw consent at any time without affecting prior processing.
5 Sharing Your Data
bit100 does not sell, rent, or trade your personal data. We share personal data only in the following limited and controlled circumstances:
5.1 Regulatory Authorities
bit100 is legally required to share relevant data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government agencies when required by law, court order, or regulatory directive.
5.2 Payment Processors
Your financial data is shared with licensed payment service providers — including GCash (Mynt), Maya (PayMaya Philippines), and Philippine banking partners — only to the extent necessary to process your deposit and withdrawal requests. These providers are bound by their own regulatory obligations under the Bangko Sentral ng Pilipinas (BSP).
5.3 Game Software Providers
Where required to deliver specific games, certain pseudonymized player data (such as a player session token and bet amounts) may be shared with our certified game software providers. These providers do not receive your full identity data and are contractually prohibited from using game data for any purpose beyond game delivery and integrity verification.
5.4 KYC and Identity Verification Partners
To fulfill our KYC obligations efficiently, bit100 may use accredited identity verification technology partners. Any such partner processes identity documents under a signed data processing agreement and applicable NPC registration requirements.
6 Cookies & Tracking Technologies
The bit100 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your login session, and to analyze usage patterns for performance improvement. The cookies we use fall into the following categories:
- Strictly Necessary Cookies: Required for core Platform functionality, including session management, login persistence, and security token handling. These cannot be disabled without breaking Platform functionality.
- Functional Cookies: Used to remember your preferences such as language settings, game lobby view, and responsible gaming limit settings.
- Analytics Cookies: Used to collect anonymized data about how players use the Platform — which games are most popular, where users navigate, and how performance can be improved. Analytics data is processed in aggregate and is not tied to your individual identity.
You may manage your cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will affect your ability to use the Platform. bit100 does not use advertising or tracking cookies from third-party ad networks.
7 Data Retention
bit100 retains personal data only for as long as is necessary for the purposes for which it was collected, and in accordance with applicable legal requirements. The following retention periods apply:
| Data Category | Retention Period | Legal Basis for Retention |
|---|---|---|
| KYC / Identity Documents | 5 years from account closure | RA 9160 (AMLA) — mandatory AML record-keeping |
| Financial Transaction Records | 5 years from transaction date | PAGCOR licensing conditions; AMLA requirements |
| Account Registration Data | Duration of account + 2 years | Contractual; regulatory audit trail |
| Game / Bet History | 3 years from session date | Dispute resolution; PAGCOR audit requirements |
| Support Communications | 2 years from last interaction | Quality assurance; dispute evidence |
| Marketing Preferences | Until consent withdrawn + 1 year | Consent; proof of opt-in/opt-out compliance |
| Technical / Log Data | 90 days rolling | Security monitoring; fraud detection |
Upon expiry of the applicable retention period, personal data is either securely and irreversibly deleted or anonymized so that it can no longer be linked to any individual, in accordance with NPC guidelines on data disposal.
8 Data Security
bit100 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:
- 256-bit SSL/TLS 1.3 encryption on all data in transit between your device and bit100 servers.
- AES-256 encryption for sensitive personal data stored at rest, including KYC documents and financial account details.
- Role-based access controls (RBAC) ensuring that bit100 staff can only access personal data relevant to their specific job function.
- Two-factor authentication (2FA) for all internal administrative access to systems that hold personal data.
- Regular penetration testing and vulnerability assessments conducted by independent security firms.
- Audit logging of all access to sensitive personal data, with logs retained for security review and incident investigation.
- Data breach incident response plan that is reviewed annually and tested through tabletop exercises.
9 Your Rights as a Data Subject
Under the Philippine Data Privacy Act of 2012 and its IRR, you have the following rights with respect to your personal data held by bit100. These rights are not absolute — they are subject to applicable legal limitations — but bit100 is committed to honoring them in good faith and within the timelines required by the NPC.
Request a copy of all personal data we hold about you and information on how it is being processed.
Request correction of any inaccurate or incomplete personal data in your account.
Request deletion of your personal data where it is no longer necessary, subject to our legal retention obligations.
Object to the processing of your personal data for direct marketing or where processing is based on legitimate interests.
Receive your personal data in a structured, machine-readable format for transfer to another service where technically feasible.
Withdraw any consent you have given for processing at any time, without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact our Data Protection Officer at [email protected] (plain text — copy and paste into your email client). We will respond to all verified data subject requests within fifteen (15) business days as required by the NPC. Complex requests may require up to thirty (30) business days, in which case we will notify you of the extension.
If you believe your data privacy rights have been violated, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines through official NPC channels.
10 Children & Minors
The bit100 Platform is strictly intended for adults aged 21 years and above in compliance with Philippine gambling laws. bit100 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, that account will be immediately suspended, all data will be deleted, and any deposits will be returned through the original payment method.
If you are a parent or guardian and believe your child has registered on the bit100 Platform, please contact our support team immediately via live chat or email. We will investigate and take appropriate action within 24 hours of notification.
11 International Data Transfers
bit100 primarily stores and processes personal data on servers located within the Philippines or in jurisdictions that provide an adequate level of data protection as recognized by the NPC. Where data is transferred to servers or service providers outside the Philippines — for example, in connection with cloud infrastructure or game software providers operating in certified jurisdictions — such transfers are governed by appropriate contractual safeguards, including standard data processing agreements incorporating NPC-recommended data transfer clauses.
bit100 does not transfer personal data to jurisdictions with materially lower data protection standards without putting in place equivalent contractual protections. Sensitive personal information, including KYC documents, is stored on infrastructure subject to Philippine jurisdiction where feasible.
12 Third-Party Links
The bit100 Platform does not contain links to third-party external websites as a general matter of policy. However, should any informational reference or resource link to an external site be present — for example, a reference to PAGCOR's official site for regulatory information — bit100 is not responsible for the privacy practices, content, or data handling of any external website. Each third-party site you visit is governed by its own privacy policy, which you should review independently.
13 Updates to This Privacy Policy
bit100 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or regulatory guidance from the NPC or PAGCOR. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page and, where the changes significantly affect your rights or how your data is used, we will notify registered players via email or in-platform notification prior to the changes taking effect.
Your continued use of the bit100 Platform following any update to this Privacy Policy constitutes your acknowledgment of the revised Policy. If you disagree with any changes, you may close your account by contacting our support team, and your data will be handled in accordance with the retention schedule in Section 7.
14 Contact & Data Protection Officer
bit100 has appointed a Data Protection Officer (DPO) as required under Section 21 of the Data Privacy Act IRR. The DPO is responsible for overseeing bit100's compliance with the DPA, handling data subject requests, and serving as the point of contact for the National Privacy Commission.
For any privacy-related queries, data subject requests, or concerns about how bit100 handles your personal data, please contact our DPO at:
Email: [email protected] (plain text — copy and paste into your email client)
Alternatively, you may reach us through the 24/7 live chat feature available directly within the bit100 Platform. For matters concerning PAGCOR regulatory oversight, please refer to official PAGCOR channels through your own browser.
Play with Confidence at bit100
Your data is protected. Your games are fair. Your winnings are yours. Join thousands of Filipino players in Manila, Cebu, Davao, and Makati who trust bit100 for slots, bingo, sports betting, and live casino — all in one PAGCOR-regulated platform.
21+ Only · PAGCOR Regulated · Play Responsibly