xpbet Privacy Policy

xpbet operates the online gaming platform accessible at xpbet.club, offering casino games, slots, bingo, live dealer games, and other gaming services to eligible players in the Philippines. In the course of providing these services, xpbet collects and processes certain personal data about you.

This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by xpbet. Please read this policy carefully to understand our practices regarding your personal data and how we will treat it. By registering an account on xpbet or by continuing to use the xpbet platform, you acknowledge that you have read and understood this Privacy Policy.

This policy should be read alongside our Terms & Conditions, which govern your use of the xpbet platform as a whole. In the event of any conflict between this Privacy Policy and the Terms & Conditions on matters relating to data privacy, this Privacy Policy shall prevail.

xpbet collects personal data from you in several ways — directly when you register and use our platform, automatically through your device and browser, and occasionally from third-party sources as part of our verification processes. The categories of personal data we collect include:

xpbet uses the personal data we collect for the following purposes:

• Account Registration & Management: To create and maintain your xpbet player account, verify your identity, and manage your account settings and preferences.
• Service Delivery: To provide you with access to xpbet's full range of gaming services, process your deposits and withdrawals, and ensure the smooth operation of the platform.
• Identity Verification (KYC): To verify your age (21+ requirement), identity, and the source of your funds in compliance with PAGCOR regulations and Philippine anti-money laundering laws.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other illegal or prohibited conduct on the xpbet platform.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance through our support channels.
• Responsible Gaming: To monitor your gaming activity and identify patterns that may indicate problem gambling behavior, and to administer responsible gaming tools such as deposit limits and self-exclusion.
• Legal & Regulatory Compliance: To comply with our obligations under Philippine law, including reporting requirements under the Anti-Money Laundering Act (AMLA) and PAGCOR licensing conditions.
• Marketing & Promotions: To send you information about xpbet promotions, bonuses, and new games — but only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time.
• Platform Improvement: To analyze usage patterns and player behavior in aggregate to improve the xpbet platform, fix bugs, and develop new features.

Under the Philippine Data Privacy Act of 2012, xpbet processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and xpbet — specifically, to provide you with the gaming services you have registered for, process your transactions, and manage your account.
• Legal Obligation: Processing is required to comply with xpbet's legal and regulatory obligations under Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate Interests: Processing is necessary for xpbet's legitimate business interests, including fraud prevention, platform security, and improving our services — provided these interests are not overridden by your rights and interests.
• Consent: For certain processing activities — particularly direct marketing communications and the use of non-essential cookies — xpbet relies on your freely given, specific, and informed consent. You have the right to withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

xpbet does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may, however, share your personal data with carefully selected third parties in the following circumstances:

• Payment Processors: We share necessary financial data with payment service providers (including GCash, PayMaya, BPI, BDO, and Metrobank) to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• Identity Verification Providers: We work with licensed KYC and AML compliance service providers to verify your identity and screen against sanctions lists and politically exposed persons (PEP) databases.
• Game Software Providers: Certain usage data may be shared with our game content providers to ensure the proper functioning of their games on the xpbet platform. These providers do not receive your identity or financial data.
• Regulatory Authorities: xpbet is required by law to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies upon lawful request or as required by our operating license.
• Professional Advisors: We may share data with our lawyers, auditors, and other professional advisors where necessary for the conduct of our business, subject to strict confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of xpbet's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

xpbet uses cookies and similar tracking technologies to enhance your experience on the platform, analyze usage patterns, and support our security and fraud prevention measures. A cookie is a small text file placed on your device when you visit a website.

The types of cookies xpbet uses include:

• Strictly Necessary Cookies: These are essential for the xpbet platform to function correctly. They enable core features such as account login, session management, and security. These cookies cannot be disabled.
• Performance & Analytics Cookies: These cookies collect anonymized information about how players use the xpbet platform — which pages are visited most, how long sessions last, and where errors occur. This data helps us improve the platform.
• Functional Cookies: These cookies remember your preferences (such as language settings and display options) to provide a more personalized experience on xpbet.
• Marketing Cookies: With your consent, these cookies track your activity to help us deliver relevant promotional content about xpbet. You may opt out of marketing cookies at any time through your browser settings or our cookie preference center.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the xpbet platform. For more information on managing cookies, refer to your browser's help documentation.

xpbet retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. Our general data retention periods are as follows:

• Account Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in compliance with PAGCOR licensing requirements and the Anti-Money Laundering Act.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine financial regulations.
• KYC & Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer retention period is required for dispute resolution or legal proceedings.
• Marketing Preferences: Retained until you withdraw your consent or request deletion, subject to any overriding legal retention requirements.

Upon expiry of the applicable retention period, xpbet will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

xpbet takes the security of your personal data seriously. We implement a comprehensive set of technical and organizational security measures designed to protect your data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the xpbet platform is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal data, including financial information and identity documents, is stored in encrypted form on secure servers.
• Access Controls: Access to personal data within xpbet is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication (2FA): xpbet offers 2FA for player accounts and requires it for all internal staff accounts with access to personal data systems.
• Regular Security Audits: xpbet conducts regular internal and third-party security audits and penetration testing to identify and address vulnerabilities in our systems.
• Incident Response: xpbet maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, xpbet will notify the National Privacy Commission (NPC) and affected players within the timeframes required by the Data Privacy Act.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by xpbet:

• Right to Be Informed: You have the right to be informed about how your personal data is being collected and processed. This Privacy Policy fulfills that obligation.
• Right of Access: You have the right to request a copy of the personal data xpbet holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You can update most of your account information directly through your xpbet account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to xpbet's overriding legitimate grounds.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that xpbet has violated your data privacy rights.

To exercise any of these rights, please contact xpbet's Data Protection Officer (DPO) using the contact details provided in Section 13 of this policy. xpbet will respond to all verified data rights requests within thirty (30) days of receipt, as required by the Data Privacy Act.

The xpbet platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling regulations. xpbet does not knowingly collect personal data from individuals under the age of 21.

If xpbet becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage player will be handled in accordance with applicable Philippine law and PAGCOR guidelines.

If you are a parent or guardian and believe that your child has registered on the xpbet platform or provided personal data to us, please contact our support team immediately at [email protected] so that we can take appropriate action.

xpbet primarily processes and stores personal data within the Philippines. However, in certain circumstances — such as when using internationally based game software providers, cloud infrastructure services, or KYC verification partners — your personal data may be transferred to and processed in countries outside the Philippines.

Where such international transfers occur, xpbet ensures that appropriate safeguards are in place to protect your personal data, including:

• Transferring data only to countries that the National Privacy Commission has determined provide an adequate level of data protection.
• Implementing standard contractual clauses or binding corporate rules that require the recipient to protect your personal data to the same standard as required under the Philippine Data Privacy Act.
• Obtaining your explicit consent for the transfer where required by law.

If you would like more information about the specific safeguards in place for any international data transfer, please contact our Data Protection Officer using the details in Section 13.

xpbet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. The most current version of this policy will always be available at xpbet.club/privacy-policy, with the effective date clearly indicated at the top of the document.

Where we make material changes to this Privacy Policy — particularly changes that affect how we use your personal data or your rights as a data subject — xpbet will notify registered players via the email address associated with their account or through a prominent notice on the xpbet platform prior to the changes taking effect.

Your continued use of the xpbet platform following the posting of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with any updated terms, you should stop using the platform and may request account closure in accordance with our Terms & Conditions.

xpbet has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact our DPO directly.

Data Protection Officer — xpbet
Email: [email protected]
General Support: [email protected]

Please note that the email addresses above are provided as plain text only and are not clickable links. Copy and paste the address into your email client to get in touch.

xpbet aims to respond to all privacy-related inquiries within ten (10) business days. For complex data rights requests, we may require up to thirty (30) days as permitted under the Data Privacy Act, and we will inform you if an extension is needed.