manalobet Privacy Policy

manalobet ("we," "us," or "our") operates the online gaming platform accessible at manalobet.club and any associated mobile-optimised pages (collectively, the "Platform"). We understand that when you share your personal information with us, you are placing your trust in manalobet. We take that responsibility seriously.

This Privacy Policy describes the types of personal data manalobet collects from users ("you," "your") of the Platform, the purposes for which that data is processed, the parties with whom it may be shared, the security measures in place to protect it, and the rights available to you under Philippine law. This Policy should be read together with the manalobet Terms & Conditions.

By registering for a manalobet account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, you must not use the Platform.

manalobet collects personal data in the following categories:

2.1 Data You Provide Directly

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification document details (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's licence);
• Contact Data: Philippine mobile number, email address, and residential address;
• Account Data: Username, encrypted password, account preferences, and communication settings;
• Financial Data: GCash account number, PayMaya / Maya account details, Philippine bank account details (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank), and debit card details for the purpose of processing deposits and withdrawals;
• Verification Data: Copies of identity documents and proof of address submitted during KYC verification.

2.2 Data Collected Automatically

• Technical Data: IP address, device type, operating system, browser type and version, and mobile network information;
• Usage Data: Pages visited, games played, session duration, bet history, wagering patterns, and platform interaction logs;
• Location Data: General geographic location derived from IP address (country and region level only);
• Cookie Data: Data collected via cookies and similar tracking technologies as described in Section 6.

2.3 Data from Third Parties

manalobet may receive personal data about you from third-party identity verification providers, payment processors, and fraud prevention services engaged to support the operation of the Platform. Such data is processed in accordance with this Privacy Policy.

manalobet processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your manalobet account, including identity verification and KYC compliance;
• Service Delivery: To provide access to the Platform's games, process deposits and withdrawals, and deliver customer support;
• Regulatory Compliance: To comply with obligations under Philippine law, including anti-money laundering (AMLA) requirements, PAGCOR regulatory directives, and the Data Privacy Act of 2012;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the Platform;
• Responsible Gaming: To monitor gaming activity for indicators of problem gambling and to administer responsible gaming tools such as deposit limits and self-exclusion;
• Communications: To send you transactional notifications (e.g., deposit confirmations, withdrawal updates, security alerts) and, where you have consented, promotional communications about manalobet offers;
• Platform Improvement: To analyse usage patterns and improve the performance, security, and user experience of the manalobet Platform;
• Legal Claims: To establish, exercise, or defend legal claims in connection with the Platform.

manalobet does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by applicable law or regulatory obligation.

Under the Data Privacy Act of 2012 and its Implementing Rules, manalobet processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and manalobet (i.e., the Terms & Conditions), including account creation, game access, and payment processing;
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including AMLA, PAGCOR regulations, and the DPA itself;
• Legitimate Interests: Processing is necessary for manalobet's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, provided such interests are not overridden by your rights;
• Consent: Where manalobet relies on your consent (e.g., for marketing communications), you may withdraw that consent at any time by contacting manalobet support or updating your account communication preferences.

manalobet does not sell, rent, or trade your personal data to third parties for their own marketing purposes. manalobet may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya / Maya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for the purpose of processing deposits and withdrawals;
• Identity Verification Providers: Third-party KYC and anti-money laundering service providers engaged to verify your identity and comply with AMLA obligations;
• Fraud Prevention Services: Specialist providers engaged to detect and prevent fraudulent activity, account takeover, and other security threats on the Platform;
• Technology Service Providers: Cloud hosting, data storage, and platform infrastructure providers who process data on manalobet's behalf under binding data processing agreements;
• Game Content Providers: Licensed game studios and live casino operators whose games are made available on the manalobet Platform, to the extent necessary for game delivery and dispute resolution;
• Regulatory Authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other Philippine government agencies where disclosure is required by law or regulatory directive;
• Legal and Professional Advisers: Lawyers, auditors, and other professional advisers engaged by manalobet in connection with legal claims or compliance obligations, subject to professional confidentiality obligations.

All third-party service providers engaged by manalobet are required to process personal data only on manalobet's documented instructions and in compliance with the Data Privacy Act of 2012. manalobet remains responsible for ensuring that such providers maintain appropriate technical and organisational security measures.

manalobet uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. The following categories of cookies are used:

Strictly necessary cookies are placed without your consent as they are essential to Platform operation. All other cookie categories are placed only where you have provided consent via the cookie preference centre available on the Platform. You may withdraw or adjust your cookie consent at any time through your account settings. Note that disabling certain cookies may affect the functionality of the Platform.

6.1 Do Not Track

Some browsers transmit "Do Not Track" signals to websites. manalobet currently does not alter its data collection practices in response to such signals, as there is no universally accepted standard for how platforms should respond to them. manalobet will review this position as industry standards develop.

manalobet retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements;
• Financial Transaction Data: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and PAGCOR regulations;
• KYC Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later;
• Usage and Technical Data: Retained for up to twenty-four (24) months from collection, unless a longer period is required for fraud investigation or legal proceedings;
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years thereafter as evidence of consent.

Upon expiry of the applicable retention period, manalobet will securely delete or anonymise your personal data in accordance with its data disposal procedures. Where data is anonymised, it may be retained indefinitely for statistical and analytical purposes as it no longer constitutes personal data.

The security measures implemented by manalobet include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the manalobet Platform;
• Encryption of sensitive data at rest, including financial account details and identity document copies;
• Role-based access controls limiting access to personal data to authorised manalobet personnel on a strict need-to-know basis;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Continuous monitoring of Platform systems for anomalous activity and potential security incidents;
• A documented data breach response procedure, including notification to the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of a personal data breach that is likely to result in a risk to your rights and freedoms.

While manalobet takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your manalobet account credentials and for notifying manalobet immediately if you suspect any unauthorised access to your account.

Under the Data Privacy Act of 2012 and its Implementing Rules, you have the following rights in respect of your personal data held by manalobet:

• Right to Be Informed: The right to be informed of how your personal data is collected, used, and processed — which this Privacy Policy fulfils;
• Right of Access: The right to request a copy of the personal data manalobet holds about you and information about how it is processed;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held by manalobet;
• Right to Erasure / Blocking: The right to request deletion or blocking of your personal data where it is no longer necessary for the purpose for which it was collected, subject to manalobet's legal retention obligations;
• Right to Object: The right to object to the processing of your personal data on grounds relating to your particular situation, including processing for direct marketing purposes;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller, where technically feasible;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe manalobet has processed your personal data in violation of the DPA.

To exercise any of the above rights, please contact the manalobet Data Protection Officer (DPO) using the contact details set out in Section 13. manalobet will respond to all verified data subject requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, of which you will be notified.

Please note that certain rights are subject to limitations under applicable law. For example, manalobet may be required to retain certain data to comply with AMLA obligations even where you request erasure.

In compliance with Philippine gaming regulations, manalobet requires all users to be at least twenty-one (21) years of age. Age verification is conducted as part of the account registration and KYC process. If manalobet becomes aware that it has inadvertently collected personal data from a person under the age of 21, it will take immediate steps to delete that data and permanently close the associated account.

If you are a parent or guardian and believe that a minor has registered on the manalobet Platform, please contact the manalobet support team immediately so that appropriate action can be taken.

manalobet's primary data processing operations are conducted within the Republic of the Philippines. However, certain third-party service providers engaged by manalobet — including cloud infrastructure providers and game content suppliers — may process personal data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, manalobet ensures that appropriate safeguards are in place in accordance with the DPA and NPC guidelines, including:

• Binding contractual clauses requiring the recipient to apply data protection standards equivalent to those required under Philippine law;
• Transfers only to jurisdictions that the NPC has determined provide an adequate level of data protection; or
• Other lawful transfer mechanisms recognised under the DPA and its Implementing Rules.

You may request further information about the safeguards applicable to cross-border transfers of your personal data by contacting the manalobet DPO.

manalobet reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or manalobet's data processing practices. The effective date at the top of this page will be updated to reflect the date of the most recent revision.

Where changes to this Privacy Policy are material, manalobet will notify registered users via email or an on-Platform notification prior to the changes taking effect. Your continued use of the manalobet Platform following notification of a material change constitutes your acceptance of the revised Privacy Policy.

manalobet recommends that you review this Privacy Policy periodically to remain informed of how your personal data is being protected.

manalobet has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the manalobet DPO:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. Information on how to file a complaint with the NPC is available through official Philippine government channels.