mrbet Privacy Policy

1.1 mrbet is committed to protecting the personal data of all players who use the mrbet platform. We recognize that privacy is a fundamental right of every Filipino player, and we take our obligations under Republic Act No. 10173 (the "Data Privacy Act" or "DPA") seriously.

1.2 This Policy applies to all personal data collected through the mrbet website at mrbet.cam, any mrbet mobile browser application, customer support channels (including live chat, email), and any other interaction you have with mrbet as a registered player or prospective registrant.

1.3 This Policy should be read alongside mrbet's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2.1 For the purposes of the Data Privacy Act of 2012 and its implementing rules and regulations, mrbet is the personal information controller responsible for the personal data collected through the mrbet platform.

2.2 mrbet has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with the DPA and this Policy. The DPO may be contacted via the details provided in Section 14 of this Policy.

2.3 mrbet processes personal data within the Philippines and may transfer data to processors in other jurisdictions where necessary for platform operations, subject to the safeguards described in Section 12.

mrbet collects the following categories of personal data, depending on the nature of your interaction with the platform:

3.1 mrbet does not collect special categories of sensitive personal data (such as data concerning health, religion, ethnicity, or political opinions) unless explicitly required by applicable regulation and with your explicit consent.

mrbet collects personal data through the following channels:

• Directly from you — when you register an account, complete the KYC process, submit a deposit or withdrawal request, contact customer support, or update your account settings on the mrbet platform;
• Automatically — when you access and use the mrbet platform, technical data (IP address, device identifiers, session logs, and cookie data) is collected automatically by our platform systems;
• From third-party identity verification providers — when mrbet uses licensed third-party KYC and AML service providers to verify your identity, those providers may return verification results and related data to mrbet as part of the verification process;
• From payment processors — when you make a deposit or withdrawal via GCash, Maya, BPI, BDO, or other supported payment methods, confirmation and transaction reference data is returned to mrbet by the relevant payment gateway.

mrbet processes your personal data on the following legal bases under the Data Privacy Act of 2012:

6.1 mrbet does not sell, rent, or otherwise provide your personal data to third parties for their own commercial or marketing purposes. Data sharing is limited to the categories listed below, and only to the extent necessary for the stated purpose.

6.2 Service Providers and Processors. mrbet may share your personal data with trusted third-party service providers acting as personal information processors on mrbet's behalf, including:

• KYC and identity verification providers;
• Payment gateways and e-wallet operators (GCash, Maya, and similar);
• Cloud hosting and data storage providers;
• Customer support software providers;
• Fraud detection and cybersecurity service providers;
• Game content providers and software studios (anonymized game session data only).

All third-party processors are bound by contractual data processing agreements requiring them to process your data only on mrbet's instructions and in compliance with applicable data protection law.

6.3 Legal and Regulatory Disclosure. mrbet may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or courts of competent jurisdiction where required by Philippine law, valid court order, or lawful regulatory request.

6.4 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all assets of mrbet, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the applicable privacy protections prior to your data being transferred.

7.1 mrbet retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulation. The following minimum retention periods apply:

• Account and identity data — retained for a minimum of five (5) years after account closure, in compliance with PAGCOR record-keeping requirements and AML obligations under RA 9160;
• Transaction and financial records — retained for a minimum of five (5) years from the date of each transaction, as required under Philippine AML regulations;
• Gaming activity records — retained for a minimum of three (3) years after account closure or the date of the activity, whichever is later;
• Customer support communications — retained for a minimum of two (2) years from the date of the final communication in each support interaction;
• Technical and log data — retained for a maximum of twelve (12) months from the date of collection unless required longer for an active investigation.

7.2 Following the applicable retention period, personal data will be securely deleted or anonymized such that it can no longer be attributed to you as an individual. Anonymized or aggregated data may be retained indefinitely for analytical purposes.

8.1 mrbet implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the mrbet platform;
• Encryption of sensitive data (including passwords and payment details) at rest using industry-standard cryptographic algorithms;
• Role-based access controls ensuring that mrbet staff can only access personal data to the extent necessary for their specific role;
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent security specialists;
• Multi-factor authentication for administrative access to systems containing personal data;
• Intrusion detection systems and 24/7 platform security monitoring.

8.2 While mrbet takes all reasonable precautions to protect your data, no online system can guarantee absolute security. You are responsible for maintaining the confidentiality of your mrbet login credentials and for notifying mrbet immediately via live chat if you suspect any unauthorized access to your account.

8.3 Data Breach Notification. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, mrbet will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular 16-03. Affected players will be notified without undue delay where the breach is likely to result in a high risk to their rights.

9.1 mrbet uses cookies and similar tracking technologies (including local storage and session tokens) on the mrbet platform. Cookies are small data files placed on your device that help the platform function correctly and securely.

9.2 mrbet uses the following categories of cookies:

• Strictly Necessary Cookies — required for the platform to function. These include session authentication tokens, security tokens, and anti-CSRF cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies — used to remember your preferences (such as language, currency display, and responsible gaming settings) so you don't need to reconfigure them on every visit.
• Analytics Cookies — used to collect anonymized and aggregated data about how players use the platform, helping mrbet improve user experience. No individual player is identified in analytics data.

9.3 mrbet does not use third-party advertising cookies or cross-site tracking cookies. Your activity on mrbet is not tracked across external websites for advertising or retargeting purposes.

9.4 You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair the functionality of the mrbet platform, including the ability to log in and maintain a session.

10.1 mrbet is strictly for individuals aged 21 years and above, in accordance with PAGCOR online gaming regulations for the Philippines. mrbet does not knowingly collect personal data from individuals under the age of 21.

10.2 Age is verified as a mandatory step in the KYC process. If mrbet discovers that an account has been registered by an individual under the age of 21, the account will be immediately closed, all associated data will be permanently deleted (except where retention is required for regulatory purposes), and any deposited funds will be returned to the payment method of origin.

10.3 If you have reason to believe that a minor has accessed or registered on the mrbet platform, please contact mrbet support immediately via live chat or at the email address in Section 14.

As a data subject under the Philippine Data Privacy Act of 2012, you hold the following rights with respect to your personal data processed by mrbet. You may exercise any of these rights by contacting the mrbet DPO using the details in Section 14.

11.1 mrbet will respond to all data rights requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, mrbet may extend this period by a further thirty (30) days, and will notify you of any extension within the initial thirty-day period.

11.2 Requests to exercise data rights must be submitted by the registered account holder and may require identity verification to prevent unauthorized disclosure of personal data. mrbet will not charge a fee for processing reasonable data rights requests.

12.1 The operation of the mrbet platform may require the transfer of certain personal data to processors located outside the Philippines, including for cloud hosting, KYC verification, and payment processing services.

12.2 Where personal data is transferred outside the Philippines, mrbet ensures that adequate safeguards are in place to protect your data in accordance with the requirements of the Data Privacy Act. These safeguards include:

• Contractual data processing agreements incorporating the NPC's standard contractual clauses for cross-border transfers;
• Transfer only to recipient countries or organizations that the NPC has determined provide an adequate level of data protection;
• Implementation of technical security controls equivalent to those applied within the Philippines.

12.3 You may request information about specific cross-border transfers affecting your personal data by contacting the mrbet DPO.

13.1 mrbet reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform features, or data processing practices.

13.2 Material changes to this Policy will be notified to registered players via their registered mobile number or email address at least seven (7) calendar days before the changes take effect. Non-material changes (such as clarifications or corrections) will take effect upon publication on the mrbet platform.

13.3 The effective date at the top of this Policy reflects the date of the most recent substantive update. We encourage you to review this Policy periodically to stay informed of how mrbet protects your data. Your continued use of the mrbet platform after any changes to this Policy constitutes your acknowledgment of the updated version.

For any privacy-related inquiries, requests to exercise your data rights, or concerns regarding mrbet's data processing practices, please contact the mrbet Data Protection Officer through the following channels:

• Email: [email protected] — include "Privacy" or "DPO Request" in the subject line for faster routing.
• Live Chat: Available 24/7 directly on the mrbet platform. Request to speak with the Data Protection team when connecting.

The mrbet DPO will acknowledge all privacy-related inquiries within three (3) Philippine business days and will endeavour to resolve all requests within the thirty (30) day period prescribed by the Data Privacy Act.

If you are not satisfied with mrbet's response to a privacy complaint or request, you have the right to escalate the matter to the Philippine National Privacy Commission (NPC), which may be contacted through the NPC's official channels. mrbet will cooperate fully with any NPC investigation or inquiry.