xpbet Privacy
Policy

This Privacy Policy is issued by xpbet ("xpbet," "we," "us," "our"), the operator of the online gaming and sports betting platform accessible at xpbet.cam. We are committed to protecting the personal data of all players, visitors, and individuals who interact with our platform.

This Policy applies to all personal data collected through the xpbet website, mobile web application, customer support channels, and any other service offered under the xpbet brand. It describes our practices regarding the collection, use, storage, disclosure, and protection of your personal information.

By registering an account, accessing the xpbet platform, or otherwise engaging with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the xpbet platform and close your account.

xpbet collects personal data from you in three primary ways: data you provide directly when registering and using the platform; data generated automatically through your use of our services; and data received from third-party verification and payment processors for compliance purposes.

Data You Provide Directly:

• Full legal name, date of birth, and Philippine residential address.
• Email address and mobile phone number.
• Government-issued identification documents (PhilSys National ID, UMID, driver's license, or Philippine passport) for Know Your Customer (KYC) verification.
• Payment account details, including GCash mobile number, Maya account details, BPI or BDO account information, or other registered payment credentials.
• Profile information, player preferences, and communication history with our support team.
• Responsible gaming preferences, including any deposit limits, session timers, or self-exclusion settings you configure.

Data Collected Automatically:

• IP address, device type, operating system, browser type, and screen resolution.
• Session data including login timestamps, pages visited, games played, bets placed, and session duration.
• Geolocation data (country and region level) derived from IP address.
• Cookies, local storage identifiers, and similar tracking technologies — see Section 06 for full details.
• Transaction logs including deposit amounts, withdrawal requests, bonus redemptions, and bet histories.

Data Received from Third Parties:

• Identity verification results from licensed KYC and anti-money laundering screening providers.
• Transaction confirmation and fraud signals from payment processors including GCash, Maya, and banking partners.
• Publicly available information from Philippine government databases used for compliance screening.

xpbet uses your personal data only for the purposes described in this Policy. We do not use your data in ways that are incompatible with the original purpose of collection without first obtaining your consent or having a lawful basis to do so.

Where xpbet sends you promotional communications — such as bonus offers, new game notifications, or event updates — we do so only where you have opted in to receive such messages. You may withdraw marketing consent at any time through your account preferences or by contacting our support team.

xpbet processes your personal data on the following lawful bases as recognised under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual necessity: Processing required to perform the contract between you and xpbet — including account registration, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable Philippine law, including AML reporting obligations under Republic Act No. 9160 (as amended), tax obligations, and regulatory directives.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and analytics, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and any other purposes where we have obtained your explicit, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

xpbet does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

Service Providers & Data Processors: xpbet engages third-party service providers who process data on our behalf under written data processing agreements that obligate them to maintain confidentiality and security standards consistent with this Policy and applicable Philippine law. These include:

• KYC and identity verification providers for age and identity confirmation.
• Payment processors including GCash, Maya, and banking partners for transaction handling.
• Cloud hosting and server infrastructure providers for platform operations.
• Customer support platform providers for helpdesk functionality.
• Fraud detection and cybersecurity providers for platform integrity.

Legal & Regulatory Authorities: xpbet will disclose personal data to Philippine government bodies, law enforcement agencies, or regulators — including the Anti-Money Laundering Council (AMLC), the National Bureau of Investigation (NBI), and the Bureau of Internal Revenue (BIR) — where required by law, valid legal process, or regulatory directive. We will notify affected players of such disclosures where legally permissible.

Business Transfers: In the event of a merger, acquisition, restructuring, or sale of assets involving xpbet, your personal data may be transferred to a successor entity. You will be notified of any such transfer and the privacy protections that will apply to your data in the hands of the new controller.

xpbet uses cookies and similar tracking technologies to operate the platform, maintain your session, personalise your experience, and analyse usage patterns. This section explains the types of cookies we use and how you can manage your preferences.

Essential Cookies: These cookies are necessary for the xpbet platform to function. They maintain your login session, remember your security preferences, and enable core platform functionality. Essential cookies cannot be disabled without significantly impairing your ability to use the platform.

Performance & Analytics Cookies: These cookies collect aggregated, anonymised data about how players navigate the xpbet platform — which pages are visited most, how long sessions last, and where players encounter errors. This data helps us improve the platform experience. No personally identifiable information is collected through these cookies.

Functional Cookies: These cookies remember your preferences and settings, such as your preferred language, display preferences, and responsible gaming configurations, so you do not need to reconfigure them on each visit.

Marketing Cookies (Opt-In Only): With your consent, xpbet may use cookies to present relevant promotional content based on your gaming activity and preferences. You may opt out of marketing cookies at any time through your browser settings or account preferences without affecting your ability to use the core platform.

xpbet retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal obligations, to resolve disputes, and to enforce our agreements. The following general retention periods apply:

• Account data and KYC documents: Retained for the duration of your account's active status and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements under Philippine law.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, consistent with Anti-Money Laundering Act obligations.
• Customer support communications: Retained for three (3) years from the date of the interaction, or longer if related to an unresolved dispute or legal matter.
• Marketing preferences and consent records: Retained until you withdraw consent, plus an additional period sufficient to demonstrate compliance with consent requirements.
• Session and analytics data: Aggregated, anonymised analytics data may be retained indefinitely. Raw session logs are typically retained for up to twelve (12) months.

Upon expiry of the applicable retention period, xpbet will securely delete or anonymise your personal data in accordance with our data disposal procedures. Where deletion is not immediately practicable due to technical constraints, the data will be isolated and protected from further processing until deletion can be completed.

xpbet implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption at rest for sensitive data records including payment credentials and KYC documents.
• Access controls ensuring that xpbet staff access your personal data only on a need-to-know basis, with activity logging and audit trails.
• Multi-factor authentication for all internal system access by xpbet personnel.
• Regular security assessments including penetration testing and vulnerability scanning conducted by independent third-party security firms.
• Incident response procedures enabling rapid detection, containment, and notification in the event of a personal data breach.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, xpbet will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay as required by the Data Privacy Act of 2012.

As a data subject under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by xpbet. These rights may be exercised by contacting our Data Protection Officer using the details in Section 12.

xpbet will respond to verified data rights requests within fifteen (15) business days of receipt. Where a request is complex or numerous, we may extend this period by up to an additional thirty (30) days with prior notice. We may need to verify your identity before processing a rights request to ensure your data is not disclosed to an unauthorised party.

xpbet's services are strictly restricted to individuals who are 21 years of age or older, consistent with Philippine laws governing participation in online gambling and casino-style gaming. xpbet does not knowingly collect personal data from individuals under the age of 21.

All new account registrations require age verification. Before withdrawal access is activated, players must submit a valid government-issued Philippine identification document confirming their date of birth. Registration by a person under 21, or registration by a person misrepresenting their age, constitutes a material breach of our Terms & Conditions and will result in immediate account suspension and forfeiture of balances.

Parents and guardians are encouraged to use parental control tools available on Philippine mobile networks (Smart, Globe, DITO) and devices to prevent minors from accessing online gaming content.

xpbet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered players via their registered email address where the change materially affects their rights or the way their data is processed.
• Display a prominent notice on the xpbet platform for a reasonable period following the update.

Your continued use of the xpbet platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should cease using the platform and request account closure.

We encourage all players to review this Privacy Policy periodically to stay informed of how xpbet handles their personal data. Archived versions of prior Privacy Policies are available upon request from our Data Protection Officer.

xpbet has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act of 2012. If you have any questions about how xpbet processes your personal data, wish to exercise your data rights, or wish to raise a privacy concern, please contact us using the details below.

• Data Protection Officer — xpbet
• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through the xpbet platform. Select "Privacy & Data" as the enquiry category.
• Response Time: We aim to respond to all privacy-related enquiries within five (5) business days.

If you are not satisfied with xpbet's response to your data rights request or privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines:

• National Privacy Commission (NPC)
• 5th Floor, Delegation Building, PICC Complex, Pasay City, Metro Manila, Philippines

This Privacy Policy was last updated on January 1, 2026. It supersedes all prior versions of the xpbet Privacy Policy. For historical versions, please submit a request to our Data Protection Officer.