bepk Privacy Policy

1.1 bepk ("bepk," "we," "us," "our") is committed to protecting the personal data of everyone who uses the bepk online gaming platform at bepk.club. This Privacy Policy sets out how bepk collects, uses, stores, protects, and shares your personal information, and describes the rights you hold under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, the "Data Privacy Act") and applicable PAGCOR regulatory requirements.

1.2 This Policy should be read together with bepk's Terms & Conditions and Responsible Gaming Policy, both of which are available on the bepk platform. Where there is any conflict between this Policy and another bepk document regarding the handling of personal data, this Privacy Policy prevails.

1.3 bepk processes personal data on the basis that it is necessary for the provision of our online gaming services to you, for compliance with our legal and regulatory obligations under Philippine law, and on the basis of your consent where required. We do not process personal data in ways that are incompatible with the purposes described in this Policy.

2.1 For the purposes of the Philippine Data Privacy Act, bepk is the personal information controller in respect of all personal data collected and processed through the bepk platform. As the controller, bepk determines the purposes and means of processing your personal information.

2.2 bepk operates under applicable PAGCOR regulations governing online gaming in the Philippines. Our data processing activities are subject to PAGCOR compliance oversight in addition to the National Privacy Commission's (NPC) regulatory framework under the Data Privacy Act.

2.3 bepk has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with data protection obligations. Contact details for bepk's DPO are provided in Section 16 of this Policy.

3.1 bepk collects the following categories of personal data:

3.2 bepk does not intentionally collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance. Where sensitive information (such as government ID data) is collected, it is processed with heightened security controls.

3.3 You are not obligated to provide personal data to bepk, but failure to provide data necessary for registration, KYC, or AML compliance will prevent bepk from providing full platform services, including withdrawal processing.

4.1 Directly from you — through your bepk account registration form, KYC document submission, deposit and withdrawal requests, customer support communications, and responsible gaming tool settings.

4.2 Automatically through the bepk platform — when you access bepk.club, our systems automatically collect technical data such as your IP address, device information, browser type, and session duration. This data is collected through server logs and cookies (see Section 8).

4.3 From payment service providers — when you make a deposit or withdrawal via GCash, PayMaya, or a Philippine bank, bepk receives confirmation data from those providers, including transaction reference numbers and the mobile number or account name associated with your payment method. We do not receive your full GCash PIN or banking passwords.

4.4 From identity verification partners — where bepk uses third-party KYC verification services to validate government-issued identification, those partners may return identity match results and fraud risk scores to bepk.

4.5 From publicly available sources — for AML compliance purposes, bepk may verify certain information against publicly available databases, including PEP (Politically Exposed Persons) and sanctions lists maintained under Philippine law.

5.1 bepk processes your personal data for the following purposes:

• Account registration and management: To create and maintain your bepk Account, authenticate your identity at login, and communicate account-related information;
• Service delivery: To provide access to bepk casino games, process bets and game outcomes, credit winnings, and manage your Account balance;
• Payment processing: To process GCash, PayMaya, and bank deposits and withdrawals, verify payment methods, and maintain accurate financial records;
• KYC and identity verification: To verify your identity and age (21+) in compliance with PAGCOR regulations and Philippine AML laws;
• Anti-money laundering compliance: To monitor transaction patterns for suspicious activity, conduct AML checks required under the Anti-Money Laundering Act (Republic Act No. 9160) as amended, and report to relevant authorities as required by law;
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, and cheating;
• Responsible gaming monitoring: To track gaming patterns that may indicate problem gambling behaviour, apply deposit limits and self-exclusion settings, and meet PAGCOR responsible gaming obligations;
• Customer support: To respond to your inquiries, resolve disputes, and improve support service quality;
• Marketing communications: To send you bonus offers, promotions, and platform updates, subject to your communication preferences (see Section 13);
• Legal and regulatory compliance: To comply with bepk's obligations under Philippine law, PAGCOR regulations, and any court orders or government agency directives;
• Platform improvement: To analyse aggregated, anonymised usage patterns and improve bepk's platform performance, game selection, and user experience.

6.1 Under the Philippine Data Privacy Act, bepk processes personal data on the following legal bases:

• Performance of a contract: Processing necessary to provide the bepk gaming services you have registered for, including account management, game access, and payment processing;
• Legal obligation: Processing required to comply with KYC, AML, PAGCOR regulations, tax obligations, and other Philippine legal requirements;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service quality improvement, where these interests are not overridden by your data privacy rights;
• Consent: Processing for marketing communications and optional data collection purposes, where we have obtained your explicit consent. You may withdraw consent for marketing at any time without affecting the lawfulness of prior processing.

7.1 Game providers: bepk shares necessary session and bet data with our game content providers (including live dealer operators) to enable game delivery and bet settlement. These providers are contractually bound to process data only for game delivery purposes.

7.2 Payment service providers: Transaction data is shared with GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard to the extent necessary to process your deposits and withdrawals.

7.3 KYC and identity verification partners: Identity document data is shared with our KYC verification partners solely for the purpose of verifying your identity and age. These partners operate under data processing agreements consistent with the Data Privacy Act.

7.4 Regulatory and law enforcement authorities: bepk discloses personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government authorities when required by law, court order, or regulatory direction.

7.5 IT and infrastructure service providers: Personal data may be processed by cloud hosting, cybersecurity, and technical operations providers engaged by bepk to operate the platform. These providers are subject to strict data processing agreements.

7.6 Professional advisors: bepk may share personal data with legal counsel, auditors, and compliance consultants under obligations of professional confidentiality, where necessary for bepk's legal or regulatory obligations.

8.1 bepk uses cookies and similar tracking technologies on bepk.club for the following purposes:

• Strictly necessary cookies: Required for the bepk platform to function, including session authentication, fraud detection, and load balancing. These cannot be disabled without preventing platform functionality;
• Functional cookies: Remember your preferences, such as language settings and display options, to personalise your experience across sessions;
• Analytics cookies: Collect aggregated, anonymised data on how members use bepk to help us improve platform performance and navigation. bepk uses privacy-configured analytics and does not share this data with advertising platforms;
• Security cookies: Detect suspicious activity and multiple account creation attempts to protect the bepk platform and its members.

8.2 bepk does not use third-party advertising cookies or retargeting pixels. Your bepk gaming behaviour is not shared with external advertising networks.

8.3 You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the bepk platform, including logging in and placing bets.

9.1 bepk retains personal data for as long as necessary to fulfil the purposes described in this Policy, comply with legal and regulatory obligations, and resolve disputes. The following general retention guidelines apply:

9.2 At the end of applicable retention periods, bepk securely deletes or anonymises personal data in accordance with the Data Privacy Act's implementing rules and regulations.

10.1 bepk implements the following security measures to protect your personal data:

• Encryption in transit: All data exchanged between your device and bepk servers is protected by 256-bit SSL/TLS encryption;
• Encryption at rest: Sensitive stored data, including password hashes and identity documents, is encrypted using AES-256 or equivalent standards;
• Access controls: Access to personal data is restricted on a strict need-to-know basis. bepk employees are subject to confidentiality obligations and access logs are maintained;
• Two-factor authentication: Member accounts are protected by OTP two-factor authentication on new device logins;
• Intrusion detection: bepk's infrastructure is monitored for unauthorized access attempts and anomalous activity on a continuous basis;
• Regular security assessments: bepk conducts periodic security reviews of its platform and data handling practices.

10.2 In the event of a personal data breach that is likely to result in harm to affected individuals, bepk will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected members without undue delay, consistent with the Data Privacy Act's breach notification requirements.

10.3 No security system is completely impenetrable. While bepk takes all reasonable steps to protect your data, we cannot guarantee absolute security against all threats. You are responsible for maintaining the security of your bepk login credentials and for notifying bepk immediately of any suspected unauthorised account access.

11.1 Under the Philippine Data Privacy Act, you hold the following rights in respect of your personal data held by bepk:

11.2 To exercise any of the above rights, submit a written request to bepk's Data Protection Officer at the contact details provided in Section 16. bepk will respond within fifteen (15) business days of receiving a verifiable request, consistent with the Data Privacy Act's implementing rules.

11.3 If you believe bepk has processed your personal data in violation of the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

12.1 The bepk platform is an online gambling service restricted to adults aged 21 and above under PAGCOR regulations. bepk does not knowingly collect, process, or retain personal data from persons under 21 years of age.

12.2 If bepk discovers or has reason to believe that a registered account holder is under 21 years of age, the account will be immediately suspended, all funds will be held pending investigation, and the personal data associated with the account will be handled in accordance with applicable child protection and data privacy laws.

12.3 If you believe a person under 21 has registered a bepk account, please notify us immediately at [email protected] so we can take appropriate action.

13.1 With your consent, bepk may send you marketing communications about bepk promotions, bonuses, new games, Super Wheel rewards, and platform updates via SMS to your registered Philippine mobile number and/or email.

13.2 You may withdraw consent for marketing communications at any time by updating your communication preferences in Account Settings, or by contacting bepk support. Opt-out requests take effect within 5 business days.

13.3 Even if you opt out of marketing communications, bepk will continue to send you transactional and account-related communications that are necessary for the management of your bepk Account, such as deposit confirmations, withdrawal notifications, KYC requests, and security alerts.

13.4 bepk does not share your contact data with third-party marketing services or external promotional partners.

14.1 Some of bepk's game content providers and technical infrastructure partners are based outside the Philippines. Where personal data is transferred to recipients in other countries in connection with game delivery, cloud hosting, or KYC services, bepk ensures that such transfers comply with the cross-border data transfer requirements of the Philippine Data Privacy Act.

14.2 bepk implements appropriate safeguards for cross-border transfers, including data processing agreements with contractual clauses that bind recipients to data protection standards consistent with the Data Privacy Act, or by verifying that the recipient country or organisation provides an adequate level of data protection.

14.3 bepk does not transfer your personal data internationally for marketing or advertising purposes.

15.1 bepk may update this Privacy Policy from time to time to reflect changes in our data practices, platform functionality, or applicable Philippine law. The date of the most recent revision is displayed at the top of this document.

15.2 For material changes to this Policy — meaning changes that significantly affect your privacy rights or bepk's data collection practices — bepk will provide advance notice through the bepk platform and, where appropriate, via SMS to your registered mobile number, at least fourteen (14) days before the changes take effect.

15.3 Your continued use of the bepk platform after the effective date of revised Terms constitutes acknowledgment of the updated Policy. If you do not agree with the revised Privacy Policy, you may request closure of your bepk account.

16.1 For all data privacy inquiries, rights requests, breach notifications, or complaints regarding bepk's handling of your personal information, please contact bepk's Data Protection Officer:

16.2 If you are not satisfied with bepk's response to a data privacy concern, you may lodge a formal complaint with the National Privacy Commission of the Philippines (NPC). The NPC's contact details and complaint procedure are available on the NPC's official website.

16.3 For general account inquiries unrelated to data privacy, please use the standard bepk support channel accessible through the bepk platform.