Privacy Policy — bepk Casino

1 Introduction

This Privacy Policy ("Policy") describes how bepk Casino ("bepk," "we," "us," "our"), operating through the website bepk.one, collects, uses, stores, shares, and protects the personal data of its users ("Data Subject," "you," "your") in the course of providing online gambling and entertainment services.

bepk Casino is committed to protecting the privacy and personal data of all individuals who interact with our platform — whether as registered account holders, visitors to bepk.one, or individuals who contact our support team. This Policy is designed to comply with the requirements of the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and applicable issuances of the National Privacy Commission (NPC) of the Philippines.

This Policy forms an integral part of bepk Casino's Terms and Conditions. By registering for a bepk Casino account or using any bepk service, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Policy, you should not create an account or use bepk Casino services.

2 Data Controller Identity

For the purposes of the Data Privacy Act of 2012 and this Policy, the data controller responsible for your personal data is bepk Casino, operating the online gambling platform accessible at bepk.one. Our designated Data Protection Officer (DPO) is responsible for overseeing this Policy and can be contacted as described in Section 15 of this document.

bepk Casino operates within the regulatory framework of the Philippine Amusement and Gaming Corporation (PAGCOR). Compliance with PAGCOR's data handling requirements for licensed online gaming operators forms part of bepk's data governance obligations alongside the Data Privacy Act.

3 Personal Data We Collect

bepk Casino collects the following categories of personal data from account holders and platform users:

3.1 Identity and Contact Data

• Full legal name as it appears on your government-issued ID;
• Date of birth (for age verification — 21+ requirement);
• Residential address in the Philippines;
• Email address;
• Philippine mobile number;
• Government-issued identification document number and copies (PSA national ID, passport, driver's license, SSS/UMID card, or equivalent).

3.2 Financial Data

• GCash account details linked to your bepk Wallet;
• Maya account details (if applicable);
• Bank account name, number, and bank name for withdrawal processing (BPI, BDO, Metrobank, or other Philippine banks);
• Transaction history: deposit amounts, dates, reference numbers, withdrawal requests, and processing outcomes;
• Source of funds documentation (where required for enhanced KYC).

3.3 Gaming Activity Data

• Game sessions played, bet amounts, game outcomes, and win/loss records;
• Bonus and promotion claims, wagering progress, and expiry records;
• Responsible gaming settings, deposit limits, session timers, and self-exclusion records.

3.4 Technical and Device Data

• IP address, device type, operating system, and browser type;
• Login timestamps and session duration;
• Geolocation data (country/region level, for compliance verification);
• Cookies and similar tracking technologies (see Section 8).

3.5 Communications Data

• Records of live chat support conversations;
• Email correspondence with bepk Casino customer support;
• Feedback and survey responses submitted through the platform.

4 How We Collect Your Data

bepk Casino collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit, requesting a withdrawal, contacting support, or participating in promotions;
• Automated collection: Technical data collected automatically when you use the bepk platform, including through cookies, server logs, and session tracking technologies;
• Third-party sources: Information received from payment processors (GCash, Maya, Philippine banks), identity verification service providers, and fraud detection services in connection with your account activity;
• Publicly available sources: In limited circumstances, bepk may verify information against publicly available Philippine government databases as part of its AML compliance obligations.

5 Purposes of Processing Your Personal Data

bepk Casino processes your personal data for the following purposes:

• Account creation and management: To register, maintain, and administer your bepk Casino account, including processing login authentication and managing account settings;
• Age and identity verification: To verify that you are 21 years of age or older and are the person you claim to be, in compliance with Philippine gambling regulations and PAGCOR requirements;
• Payment processing: To process deposits via GCash, Maya, QR Ph, GrabPay, BPI, BDO, Metrobank, 7-Eleven, USDT TRC20, and Coins.ph, and to process withdrawal requests to your verified payment accounts;
• Anti-money laundering (AML) compliance: To fulfill our legal obligations under the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended) and related PAGCOR requirements, including monitoring for suspicious transaction activity;
• Responsible gaming: To implement and enforce responsible gaming tools including deposit limits, session controls, and self-exclusion, and to identify players who may be experiencing gambling-related difficulties;
• Customer support: To respond to your inquiries, resolve complaints, and provide technical assistance;
• Security and fraud prevention: To detect, prevent, and investigate fraud, account compromise, and other prohibited conduct;
• Marketing and promotions: To send you information about bepk Casino promotions, bonuses, and new game releases, where you have provided consent or where legitimate interest applies. You may opt out of marketing communications at any time;
• Platform improvement: To analyze usage patterns and improve the functionality, security, and user experience of the bepk platform;
• Legal compliance: To comply with applicable Philippine laws, court orders, regulatory requirements, and law enforcement requests.

6 Legal Basis for Processing

bepk Casino processes personal data on the following legal bases as recognized under the Data Privacy Act of 2012 and its IRR:

• Contractual necessity: Processing required to fulfill our contractual obligations to you under the bepk Casino Terms and Conditions, including account management and payment processing;
• Legal obligation: Processing necessary to comply with applicable Philippine law, including AML obligations, PAGCOR licensing requirements, and tax regulations;
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — including consent to marketing communications and certain cookie deployments;
• Legitimate interests: Processing necessary for bepk Casino's legitimate interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your fundamental rights and freedoms.

7 Data Sharing and Disclosure

bepk Casino does not sell your personal data to third parties for their own marketing or commercial purposes. We may share your personal data with the following categories of recipients:

7.1 Service Providers and Processors

Third-party service providers engaged by bepk Casino to deliver specific functions on our behalf — including payment processors (GCash, Maya, Philippine banking partners), KYC and identity verification providers, live casino studio operators (Evolution Gaming, Pragmatic Play Live, Asia Gaming), IT infrastructure providers, and customer support platform operators. These providers are contractually bound to process your data only on bepk's instructions and in accordance with applicable data protection law.

7.2 Regulatory and Law Enforcement Authorities

bepk Casino may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), Philippine National Police (PNP), National Bureau of Investigation (NBI), and other competent Philippine authorities where required by law, court order, or regulatory requirement.

7.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or restructuring involving bepk Casino, your personal data may be transferred to the relevant successor entity, subject to the same or equivalent data protection obligations.

8 Cookies and Tracking Technologies

bepk Casino uses cookies and similar tracking technologies on the bepk.one website to enhance your experience, maintain your session, prevent fraud, and analyze platform usage. The following categories of cookies are deployed:

• Strictly necessary cookies: Essential for the operation of the platform, including session management, login authentication, and security functions. These cookies cannot be disabled without affecting core platform functionality;
• Functional cookies: Store your preferences such as language settings, game lobby filters, and responsible gaming settings to improve your experience across sessions;
• Analytics cookies: Collect aggregated, anonymized data about how users interact with bepk.one to help us improve platform performance and user experience;
• Security cookies: Used to detect and prevent fraud, multiple account registrations, and unauthorized access attempts.

You may control non-essential cookie usage through your browser settings. Note that disabling certain cookies may affect the functionality of the bepk Casino platform. Continued use of bepk.one after accepting the cookie notice constitutes consent to cookie deployment as described in this section.

9 Data Retention

bepk Casino retains personal data for as long as necessary to fulfill the purposes described in this Policy, subject to the following minimum retention periods:

• Account data and KYC documentation: Retained for a minimum of five (5) years from account closure, in accordance with PAGCOR licensing requirements and AML obligations under Philippine law;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and BIR regulations;
• Customer support communications: Retained for three (3) years from the date of the communication, for dispute resolution and quality assurance purposes;
• Gaming activity records: Retained for five (5) years to support responsible gaming monitoring, dispute resolution, and regulatory audit requirements;
• Technical and device logs: Retained for twelve (12) months in active storage, then archived for a further period as required by security and fraud investigation purposes.

Upon expiry of applicable retention periods, personal data will be securely deleted or anonymized in accordance with bepk Casino's data disposal procedures. Where deletion is requested by you before the expiry of a mandatory retention period, the data will be restricted from further use but cannot be deleted until legal retention obligations are fulfilled.

10 Data Security Measures

bepk Casino implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your device and bepk.one is encrypted using TLS 1.2/1.3 with 256-bit SSL certificates;
• Encryption at rest: Sensitive personal data stored on bepk's servers, including KYC documents and financial records, is encrypted at rest using AES-256 encryption;
• Access controls: Personal data is accessible only to bepk Casino staff and contractors with a documented need-to-know basis. Role-based access controls are enforced throughout our systems;
• Two-factor authentication: Internal system access by bepk Casino personnel requires multi-factor authentication;
• Penetration testing: bepk Casino's platform undergoes regular security assessments and penetration testing by qualified security professionals;
• Incident response: bepk Casino maintains a documented data breach response procedure. In the event of a data breach affecting your personal data, we will notify you and the NPC within the timeframes required by RA 10173 and its IRR.

11 Your Data Subject Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by bepk Casino:

• Right to be informed: The right to know what personal data bepk Casino collects about you and how it is processed — which is the purpose of this Policy;
• Right of access: The right to obtain a copy of your personal data held by bepk Casino, together with information about the purposes for which it is processed;
• Right to correction: The right to have inaccurate, incomplete, or outdated personal data corrected without undue delay;
• Right to erasure or blocking: The right to request the deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, subject to mandatory retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes at any time;
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format, where technically feasible;
• Right to damages: The right to claim compensation for any damages suffered as a result of inaccurate, incomplete, outdated, false, or unlawful use of your personal data;
• Right to file a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact bepk Casino's Data Protection Officer as described in Section 15. Requests will be acknowledged within five (5) business days and resolved within thirty (30) calendar days, except where the complexity or volume of requests requires additional time, in which case you will be notified of the extension.

12 Children's Privacy and Age Restriction

bepk Casino strictly prohibits the use of its platform by persons under the age of twenty-one (21) years. The collection of personal data from minors is not permitted under any circumstances.

bepk Casino enforces age verification through mandatory KYC documentation at account registration. Any account found to have been registered by a person under 21 years of age will be immediately closed, all personal data associated with the account will be securely deleted (subject to any mandatory reporting obligations), and any funds associated with the account will be handled in accordance with applicable legal requirements.

If you believe that bepk Casino has inadvertently collected personal data from a person under 21 years of age, please contact our Data Protection Officer immediately at the contact details provided in Section 15 so that the data can be promptly deleted.

13 International Data Transfers

In the course of operating the bepk Casino platform, your personal data may be transferred to and processed by service providers located outside the Philippines — including game studio operators and technology infrastructure providers. bepk Casino takes appropriate steps to ensure that any such international data transfers are conducted in compliance with the Data Privacy Act of 2012 and applicable NPC issuances, including:

• Ensuring that recipient countries provide an adequate level of data protection, or;
• Implementing appropriate safeguards such as data processing agreements and standard contractual clauses with international processors;
• Obtaining your explicit consent to the transfer where required by applicable law.

bepk Casino does not transfer personal data to jurisdictions that do not provide adequate data protection guarantees unless appropriate safeguards are in place. All international processors engaged by bepk Casino are contractually required to treat your personal data in accordance with standards equivalent to those required by RA 10173.

14 Updates to This Privacy Policy

bepk Casino reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the NPC's guidance. When material changes are made to this Policy, bepk Casino will provide notice to registered account holders via email or in-platform notification prior to the changes taking effect.

The effective date of the current version of this Policy is stated at the top of this document. Your continued use of bepk Casino following the effective date of any revised Policy constitutes your acknowledgment of the updated Policy. We encourage you to review this Policy periodically. The most current version is always available at bepk.one/privacy-policy.

15 Data Protection Officer Contact

For all data privacy inquiries, requests to exercise your data subject rights, or to report a potential data privacy concern, please contact bepk Casino's Data Protection Officer through the following channels:

• Email (DPO): [email protected] — please include "Data Privacy Request" in the subject line
• Live Chat: Available 24/7 through the bepk Casino website at bepk.one
• Response time: Acknowledgment within 5 business days; resolution within 30 calendar days (Philippine Standard Time)

If you are not satisfied with bepk Casino's response to your data privacy request or complaint, you have the right to escalate your concern to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory body responsible for administering and enforcing the Data Privacy Act of 2012.