How kilibet Protects Your Personal Data
These highlights summarise our key privacy commitments. Please read the full policy below for complete details.
Data Privacy Act Compliance
kilibet operates in full compliance with Republic Act No. 10173 — the Philippine Data Privacy Act of 2012 — and its Implementing Rules and Regulations. Your personal data is handled in accordance with the principles of transparency, legitimate purpose, and proportionality as mandated by the National Privacy Commission (NPC) of the Philippines.
SSL Encryption & Secure Storage
All data transmitted between your device and the kilibet platform is encrypted using industry-standard TLS/SSL protocols. Personal data stored in kilibet's systems is protected by layered security controls, access restrictions, and regular security audits. We do not store unencrypted payment credentials on our servers.
Minimal Data Collection
kilibet collects only the personal data that is strictly necessary to operate the platform, verify player identity, process payments, and comply with our PAGCOR regulatory obligations. We do not sell your personal data to third parties for commercial marketing purposes. Data sharing is limited to regulated service providers and legally mandated disclosures.
Your Rights Under Philippine Law
As a registered kilibet player, you have the right to access, correct, delete, and object to the processing of your personal data under the Data Privacy Act of 2012. kilibet has a designated Data Protection Officer (DPO) responsible for overseeing compliance and handling player data rights requests.
No Third-Party Ad Tracking
kilibet does not allow third-party advertising networks to place tracking cookies or pixels on the platform for the purpose of building external advertising profiles from your gaming activity. Any analytics tools used by kilibet are operated solely to improve platform performance and player experience — not for re-targeting or external sale.
Clear Retention Periods
kilibet retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Philippine law and PAGCOR regulations. Account data for inactive accounts is reviewed on a rolling basis, and players may request deletion of non-mandatory data at any time via our support channels.
1 Who We Are
kilibet ("kilibet," "we," "us," or "our") is a PAGCOR-regulated online gaming platform accessible at kilibet.app, offering slots, live casino, sports betting, bingo, and other gaming products to eligible Filipino players across the Philippines — including players based in Metro Manila, Cebu, Davao, Quezon City, Makati, and other regions.
As a personal information controller under Republic Act No. 10173 (Data Privacy Act of 2012), kilibet determines the purposes and means of processing the personal data of registered players and platform visitors. kilibet has appointed a Data Protection Officer (DPO) who is responsible for overseeing our data protection practices and serving as the primary point of contact for data privacy concerns.
2 Personal Data We Collect
kilibet collects personal data in the following categories, limited to what is necessary for the purposes described in this policy:
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender, government-issued ID number (PhilSys, Driver's License, Passport, UMID, PRC ID, Voter's ID) | Yes — KYC/AML |
| Contact Data | Philippine mobile number, email address, residential address (barangay, city/municipality, province) | Yes — Account |
| Account Data | Username, hashed password, account creation date, login history, session timestamps | Yes — Account |
| Financial Data | Deposit and withdrawal transaction records, payment method type (GCash, Maya, BPI, BDO, etc.), transaction amounts in PHP, wallet reference numbers | Yes — Payments/AML |
| Gaming Activity Data | Game titles played, bet amounts, win/loss records, session duration, bonus usage history | Yes — Regulatory |
| Technical Data | IP address, device type, browser type and version, operating system, geolocation (country/region level) | Yes — Security |
| Communications Data | Live chat transcripts, email correspondence, support ticket content, feedback submissions | Where applicable |
| KYC Documents | Scanned or photographed government-issued IDs, selfie images taken alongside ID documents, proof of address documents, source of funds declarations | Yes — Withdrawals |
kilibet does not collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance. We do not collect biometric data, health information, religious affiliation, or political views.
3 How We Collect Your Data
kilibet collects personal data through the following methods:
3.1 Direct Collection
You provide data directly to kilibet when you: register an account on the platform; complete the KYC identity verification process; make a deposit or request a withdrawal; contact our customer support team via live chat or email; participate in promotions, surveys, or competitions; or update your account profile settings.
3.2 Automated Collection
When you access the kilibet platform, our systems automatically collect technical data including your IP address, device identifiers, browser characteristics, and session activity logs. This data is collected through server logs, session tracking, and first-party cookies (see Section 7 for full details on our cookie practices).
3.3 Third-Party Sources
kilibet may receive limited personal data from third parties in specific circumstances, including:
- Payment providers (GCash, Maya, BPI, BDO, and others) confirming transaction completion and payment method ownership.
- Identity verification service providers used to assist in document authentication during the KYC process.
- PAGCOR and other regulatory bodies in connection with exclusion orders, compliance reviews, or investigation requests.
- Fraud detection and anti-money laundering screening services used to flag suspicious account activity.
4 Legal Basis for Processing
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, kilibet processes your personal data on the following legal bases:
- Performance of a contract: Processing necessary to create and manage your kilibet account, process deposits and withdrawals, settle wagers, and provide the gaming services you have registered for.
- Legal obligation: Processing required for kilibet to comply with its obligations under PAGCOR regulations, Republic Act No. 9160 (Anti-Money Laundering Act), Republic Act No. 10173 (Data Privacy Act), and other applicable Philippine law.
- Legitimate interests: Processing for fraud prevention, platform security, responsible gaming enforcement, and improving the kilibet player experience — where such interests are not overridden by your privacy rights.
- Consent: Where kilibet relies on your consent as the legal basis for processing (for example, sending optional promotional communications), you may withdraw your consent at any time by contacting support or updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
5 How We Use Your Personal Data
kilibet uses the personal data we collect for the following purposes:
5.1 Platform Operation
To create and manage your kilibet account; authenticate your identity at login; process deposits, wagers, and withdrawal requests; credit bonuses and promotional awards; and provide customer support services.
5.2 Regulatory Compliance
To verify that you meet the age and eligibility requirements for online gaming in the Philippines (minimum 21 years of age); to conduct Know Your Customer (KYC) identity verification; to fulfil anti-money laundering (AML) obligations under RA 9160; to maintain gaming activity records as required by PAGCOR; and to respond to lawful requests from PAGCOR, AMLC, NPC, and other Philippine regulatory and law enforcement bodies.
5.3 Security and Fraud Prevention
To detect, investigate, and prevent unauthorised access to player accounts; to identify and block fraudulent transactions, bonus abuse, and prohibited conduct; to enforce the Terms and Conditions of the kilibet platform; and to protect the integrity of games and sports betting markets.
5.4 Responsible Gaming
To monitor gaming activity for signs of problem gambling behaviour; to enforce deposit limits, session limits, and self-exclusion orders set by players or mandated by PAGCOR; and to provide responsible gaming alerts and tools as described in the kilibet Responsible Gaming policy.
5.5 Communications
To send transactional notifications (deposit confirmations, withdrawal updates, bonus credits, account alerts) via SMS and email; to respond to support inquiries and resolve complaints; and — where you have provided consent — to send promotional communications about kilibet offers and new game releases.
5.6 Platform Improvement
To analyse aggregated, anonymised usage data for the purpose of improving platform performance, game selection, and user experience. This analysis does not involve individually identified player profiles and is not shared externally.
6 Sharing Your Personal Data
kilibet does not sell, rent, or trade your personal data to third parties for commercial advertising purposes. We share personal data only in the following limited circumstances:
6.1 Service Providers
kilibet engages regulated third-party service providers who process personal data on our behalf under strict data processing agreements. These include payment processors (GCash, Maya, BPI, BDO, and partner acquirers), identity verification providers, cloud hosting infrastructure providers, customer support platform providers, and fraud detection service providers. All such providers are contractually required to process data only on kilibet's instructions and to maintain appropriate security standards.
6.2 Game Providers
Certain game data (session identifiers, bet activity, and game results) is transmitted to third-party game providers — including JILI and live casino operators — solely for the purpose of game settlement and system reconciliation. These providers operate under data processing agreements with kilibet and are not permitted to use player data for independent marketing purposes.
6.3 Regulatory and Legal Disclosure
kilibet will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), Philippine law enforcement agencies, or courts of competent jurisdiction where disclosure is required by law, court order, or lawful regulatory demand. kilibet will notify affected players of such disclosures where legally permissible to do so.
6.4 Business Transfers
In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of kilibet's assets, personal data may be transferred to the acquiring entity as part of that transaction, subject to the acquiring entity assuming the obligations of this Privacy Policy. Affected players will be notified of any such transfer and any resulting changes to privacy practices before they take effect.
7 Cookies & Tracking Technologies
kilibet uses cookies and similar tracking technologies on the platform to ensure its proper operation, maintain session security, and support platform analytics. We do not use third-party advertising cookies or cross-site tracking technologies.
7.1 Types of Cookies Used
- Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your gaming session, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without affecting platform functionality.
- Functional cookies: Remember your preferences such as language settings, responsible gaming limits display, and notification preferences. These persist across sessions to improve your experience.
- Analytics cookies: First-party analytics tools use cookies to collect aggregated, anonymised data on how players navigate the platform — which pages are visited most frequently, where players encounter errors, and how new features are used. This data is used exclusively for internal platform improvement and is not shared with external analytics platforms.
7.2 Cookie Management
You may manage non-essential cookies through your browser settings. Please note that disabling essential cookies will prevent you from accessing your kilibet account or using platform features that require authentication. For detailed cookie management instructions, refer to your browser's help documentation.
8 Data Security
kilibet implements appropriate technical and organisational security measures designed to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes:
- TLS 1.2 / 1.3 encryption for all data in transit between your device and kilibet servers.
- AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records.
- Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
- Two-factor authentication (2FA) requirements for all kilibet staff accessing systems that contain player personal data.
- Regular penetration testing and vulnerability assessments conducted by independent security professionals.
- 24/7 intrusion detection and monitoring of platform systems for anomalous activity.
Notwithstanding these measures, no internet-based system can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, kilibet will notify affected players and the National Privacy Commission within the timeframes required by the Data Privacy Act of 2012 and its Implementing Rules.
9 Data Retention
kilibet retains personal data for the minimum period necessary to fulfil the purpose for which it was collected and to comply with our legal and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | PAGCOR / AML regulatory requirement |
| Financial transaction records | 10 years from transaction date | RA 9160 (Anti-Money Laundering Act) |
| KYC documents | Duration of account + 5 years after closure | PAGCOR / AML regulatory requirement |
| Gaming activity records | 5 years from last activity date | PAGCOR regulatory requirement |
| Support communications | 3 years from last interaction | Legitimate interest / dispute resolution |
| Technical / security logs | 12 months from creation | Security and fraud prevention |
| Marketing consent records | Until consent withdrawn + 1 year | Compliance with DPA 2012 |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Players may request early deletion of non-mandatory data (such as optional profile information) at any time, subject to kilibet's legal retention obligations.
10 Your Privacy Rights
Under the Data Privacy Act of 2012 of the Philippines, registered kilibet players have the following rights with respect to their personal data. You may exercise these rights by contacting kilibet's Data Protection Officer via live chat or email:
Right to Access
Request a copy of the personal data kilibet holds about you, along with information on how it is being processed.
Right to Correction
Request correction of inaccurate or incomplete personal data held in your kilibet account or KYC records.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
Right to Object
Object to processing of your personal data where kilibet relies on legitimate interests as the legal basis, including objecting to receiving promotional communications.
Right to Block
Request that processing of your data be suspended pending resolution of a correction or objection request.
Right to Damages
Seek indemnity for damages sustained due to inaccurate, incomplete, outdated, or unlawfully obtained personal data, as provided under the Data Privacy Act.
Right to Portability
Receive a structured, machine-readable copy of the personal data you have provided to kilibet, where technically feasible.
Right to Complain
Lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe kilibet has violated your data privacy rights.
kilibet will respond to all verified data rights requests within fifteen (15) business days. We may require identity verification before fulfilling a request to ensure data is not disclosed to an unauthorised party. Where a request cannot be fulfilled (for example, due to a mandatory legal retention obligation), we will explain the reason in writing.
11 Children's Privacy
The kilibet platform is strictly intended for individuals who are twenty-one (21) years of age or older, in accordance with PAGCOR regulations governing online gaming in the Philippines. kilibet does not knowingly collect personal data from individuals under the age of 21.
If kilibet discovers or is notified that a registered account belongs to an individual under the minimum age, we will immediately suspend the account, void any transactions or winnings associated with it, and securely delete the associated personal data to the extent permitted by our legal obligations. If you believe a minor has registered on kilibet, please notify us immediately via live chat or at [email protected].
12 Cross-Border Data Transfers
kilibet's primary data processing infrastructure is located within the Philippines. In limited circumstances, personal data may be transferred to and processed in countries outside the Philippines — for example, where third-party game providers or cloud infrastructure partners operate servers in other jurisdictions.
Where such cross-border transfers occur, kilibet ensures that they are conducted in compliance with Section 21 of the Data Privacy Act of 2012, which requires that the receiving country or organisation provides a level of data protection substantially equivalent to Philippine standards. kilibet achieves this through:
- Standard contractual clauses incorporated into data processing agreements with international service providers.
- Transferring data only to jurisdictions that the National Privacy Commission has recognised as providing adequate data protection.
- Obtaining your consent for specific cross-border transfers where required by applicable law.
You may request information about the specific countries to which your data may be transferred by contacting kilibet's Data Protection Officer.
13 Changes to This Privacy Policy
kilibet reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. The "Effective Date" displayed at the top of this page will be updated whenever a new version is published.
Where changes are material — meaning they significantly affect your rights or the way kilibet processes your personal data — we will notify you by email to your registered address or via a prominent on-platform notice at least seven (7) days before the changes take effect. For non-material changes (such as typographical corrections or clarifications that do not alter the substance of the policy), we may update the policy without prior notice.
Your continued use of the kilibet platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not accept the revised policy, you must cease using the platform and may request account closure by contacting our support team.
14 Contact & Data Protection Officer
If you have any questions, concerns, or requests relating to this Privacy Policy or the way kilibet handles your personal data, please contact us through the following channels:
- Live Chat: Available 24/7 directly on the kilibet platform — the fastest channel for urgent account and data inquiries.
- Email — General Support: [email protected]
- Email — DPO / Privacy Requests: [email protected] (subject line: "DPO — Privacy Inquiry")
When submitting a data rights request, please include your registered kilibet username and mobile number so that we can verify your identity before processing the request. We aim to respond to all privacy-related inquiries within fifteen (15) business days.
If you are not satisfied with kilibet's response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the government body responsible for administering and enforcing the Data Privacy Act of 2012.
Play on a Platform You Can Trust
kilibet is PAGCOR-regulated, Data Privacy Act compliant, and built around player protection. GCash deposits in seconds, 24/7 live support, and the best JILI slots in the Philippines.
Must be 21 years or older. Play responsibly. PAGCOR regulated.