// data privacy — effective 01 january 2026
bit100 Privacy Policy
bit100 is committed to protecting your personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173). This policy explains what we collect, why we collect it, and how we keep it safe.
// our privacy commitments
How bit100 Protects Your Data
Six core principles that define how bit100 handles the personal information of Filipino players across the Philippines.
All personal data processing on bit100 is governed by the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, enforced by the National Privacy Commission (NPC). Your rights as a data subject are fully upheld.
Personal and financial data stored in bit100 systems is encrypted using AES-256. All data in transit is protected by TLS 1.3. Sensitive fields such as passwords are hashed using bcrypt and are never stored in plain text.
bit100 collects only the personal information that is strictly necessary for account operation, KYC compliance, and regulatory obligations. We do not collect data for purposes unrelated to providing our platform services.
bit100 does not sell, rent, or trade your personal information to third parties for commercial purposes. Data is shared only with regulated partners required for service delivery, or with authorities mandated by Philippine law.
As a bit100 player, you have the right to access, correct, object to, and request erasure of your personal data under RA 10173. Data subject requests are processed within 15 business days of receipt by our Data Protection Officer.
In the unlikely event of a personal data breach affecting your information, bit100 will notify affected players and the National Privacy Commission within 72 hours of discovery, in compliance with NPC Circular No. 16-03.
Scope & Data Controller
This Privacy Policy applies to all personal data collected, processed, stored, or transmitted by bit100 in connection with your use of the bit100 platform, accessible at bit100.cam, including all associated services, mobile-optimised interfaces, promotional communications, and customer support interactions.
bit100 is the personal information controller (as defined under Section 3(h) of Republic Act No. 10173, the Data Privacy Act of 2012) responsible for determining the purposes and means by which your personal information is processed. bit100 operates as a PAGCOR-regulated online gaming platform serving Filipino players across the Philippines.
This policy governs the personal data of:
- Registered bit100 account holders
- Individuals who have submitted registration information but have not completed the process
- Visitors to the bit100.cam domain who interact with platform features
- Former account holders whose data is retained for regulatory compliance purposes
This Privacy Policy has been drafted in accordance with Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC) of the Philippines.
Personal Data We Collect
bit100 collects personal data through several channels: directly from you during registration and account use, automatically through platform technology, and from authorised third parties in connection with KYC verification and payment processing.
2.1 Information You Provide Directly
- Full legal name as it appears on your government-issued Philippine ID
- Date of birth (for age verification — players must be 21 years of age or older)
- Residential address (barangay, city/municipality, province, ZIP code)
- Philippine mobile number
- Email address
- Government-issued ID type and ID number submitted for KYC
- Source of funds documentation where required by AML compliance protocols
- GCash or PayMaya mobile number or bank account details used for transactions
- Preferences, settings, and responsible gaming limit configurations
- Communications submitted to customer support via live chat or email
2.2 Information Collected Automatically
- IP address and geolocation data (to verify Philippine jurisdiction)
- Device type, operating system, and browser version
- Session logs including login timestamps, duration, and game activity
- Betting history, transaction records, and wagering patterns
- Pages visited and features accessed on the bit100 platform
- Cookies and similar tracking technologies (see Section 05)
2.3 Information from Third Parties
- Identity verification data returned by KYC verification providers
- Transaction status and confirmation data from GCash, PayMaya, BPI, BDO, and Metrobank
- Fraud risk scores and AML screening results from compliance service providers
- Player exclusion status from PAGCOR's exclusion registry, where shared
Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012, bit100 processes your personal data on the following legal grounds:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and management | Performance of contract (Sec. 12(b), RA 10173) |
| KYC identity and age verification | Legal obligation — PAGCOR and AMLA requirements |
| Deposit and withdrawal processing | Performance of contract; legal obligation |
| Anti-money laundering monitoring | Legal obligation — RA 9160 (AMLA) as amended |
| Responsible gaming monitoring | Legal obligation — PAGCOR responsible gaming standards |
| Customer support communications | Performance of contract; legitimate interests |
| Fraud detection and security monitoring | Legitimate interests (Sec. 12(f), RA 10173) |
| Service personalisation and recommendations | Consent (Sec. 12(a), RA 10173) |
| Promotional communications and marketing | Consent — may be withdrawn at any time |
| Regulatory reporting to PAGCOR and AMLC | Legal obligation |
How bit100 Uses Your Data
bit100 uses the personal data collected for the following specific and legitimate purposes. Data is not used for any purpose incompatible with the purposes stated at the time of collection without obtaining fresh consent or establishing a new legal basis.
4.1 Account & Service Operations
To create and manage your bit100 account, authenticate your identity at login, process deposits and withdrawals in Philippine Peso, maintain your gaming history and transaction records, and provide access to all platform features including slots, live dealer games, bingo, fishing arcade games, and sports betting with PBA, NBA, and international markets.
4.2 Regulatory Compliance
To fulfil mandatory obligations under PAGCOR licensing requirements, Republic Act No. 9160 (Anti-Money Laundering Act) as amended by RA 10365, and applicable Philippine gaming and financial regulations. This includes filing Covered Transaction Reports (CTRs) and Suspicious Transaction Reports (STRs) with the Anti-Money Laundering Council (AMLC) where required by law.
4.3 Player Safety & Responsible Gaming
To monitor gaming activity for signs of problem gambling, enforce deposit limits and self-exclusion requests, comply with PAGCOR's responsible gaming standards, and ensure the platform is accessed only by players who are 21 years of age or older as required under Philippine gaming regulations.
4.4 Security & Fraud Prevention
To protect the integrity of the bit100 platform and safeguard player accounts through real-time fraud detection, multi-account identification, unusual betting pattern analysis, and verification of payment method ownership to prevent money laundering and identity fraud.
4.5 Communications
To deliver transactional notifications (deposit confirmations, withdrawal updates, security alerts, account status changes) via SMS and email. With your consent, to send promotional communications about bit100 offers, bonuses, and new game releases. You may withdraw marketing consent at any time through your account settings or by contacting support.
Cookies & Tracking Technologies
bit100 uses cookies and similar client-side technologies to maintain session state, authenticate users, detect fraud, and analyse platform performance. Cookies are small data files stored on your device when you access bit100.cam.
The following categories of cookies are used on the bit100 platform:
| Category | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Maintain login sessions, prevent CSRF attacks, load-balance requests | No — required for platform function |
| Security | Detect fraudulent login attempts, verify device consistency | No — required for account safety |
| Analytics | Understand page performance and navigation patterns (anonymised) | Yes — via cookie preferences |
| Preference | Remember language settings, game filters, display preferences | Yes — via cookie preferences |
You may manage non-essential cookie preferences through your browser settings. Disabling strictly necessary or security cookies will impair your ability to log in and use the bit100 platform. bit100 does not use cookies for third-party advertising networks or cross-site tracking.
Data Sharing & Disclosure
bit100 does not sell, rent, or commercially transfer your personal data to unaffiliated third parties. Personal data is shared only in the following controlled circumstances:
6.1 Service Providers (Processors)
bit100 engages third-party service providers who process personal data strictly on bit100's documented instructions. These include identity verification providers for KYC, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), cloud infrastructure providers, and customer support platform operators. All processors are contractually bound to comply with RA 10173 data protection standards.
6.2 Regulatory & Law Enforcement Authorities
bit100 is required by Philippine law to share personal and financial data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and other competent authorities upon lawful request or as mandated by reporting obligations. bit100 will not share data beyond what is strictly required by the specific legal obligation.
6.3 Business Transfers
In the event of a merger, acquisition, or transfer of bit100's business operations, personal data held by bit100 may be transferred to the successor entity. Affected players will be notified prior to any such transfer, and the receiving entity will be bound by obligations no less protective than those in this policy.
bit100 has never sold and will never sell your personal data to data brokers, advertising networks, or any commercial third party for marketing profiling purposes. Your data is used solely to operate the bit100 platform and comply with Philippine law.
Data Retention
bit100 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | 5 years after account closure | PAGCOR licensing obligation |
| KYC identity documents | 5 years after account closure | RA 9160 (AMLA) retention requirement |
| Transaction and betting history | 5 years after each transaction | AMLA and BIR record-keeping requirements |
| Customer support communications | 3 years after last interaction | Legitimate interests (dispute resolution) |
| Platform session and access logs | 12 months rolling | Security monitoring; fraud prevention |
| Marketing consent records | Duration of consent + 1 year after withdrawal | Consent proof under RA 10173 |
Upon expiry of the applicable retention period, personal data will be securely and irreversibly deleted or anonymised so that it can no longer be attributed to any identified or identifiable individual. Anonymised statistical data may be retained indefinitely for platform analytics.
Security Measures
bit100 implements technical and organisational security measures appropriate to the risk level associated with the personal data we process, in accordance with Section 20 of the Data Privacy Act and NPC Circular No. 16-01 on Security of Personal Data in Government Agencies (applied by analogy to private entities).
Technical Measures
- TLS 1.3 encryption for all data transmitted between your device and bit100 servers
- AES-256 encryption for personal and financial data stored in bit100 databases
- bcrypt password hashing — passwords are never stored or transmitted in plain text
- Multi-factor authentication (2FA) available for all player accounts
- Automated intrusion detection and real-time threat monitoring
- Regular penetration testing by independent security assessors
- Role-based access controls limiting staff access to personal data on a need-to-know basis
Organisational Measures
- Designated Data Protection Officer (DPO) registered with the National Privacy Commission
- Annual data privacy training for all staff who handle personal information
- Written data processing agreements with all third-party service providers
- Formal incident response procedures with 72-hour NPC breach notification protocol
- Regular Privacy Impact Assessments (PIAs) for new systems involving personal data
Account security is a shared responsibility. Use a strong, unique password for your bit100 account, enable two-factor authentication, and never share your login credentials with anyone — including individuals claiming to be bit100 staff. bit100 will never ask for your password via any communication channel.
Your Data Subject Rights
Under Chapter IV of the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bit100:
Know what personal data bit100 collects, why it is collected, and how it is processed before or at the time of collection.
Request a copy of the personal data bit100 holds about you, including information on how it has been processed.
Request correction of inaccurate or incomplete personal data held in your bit100 account without undue delay.
Request deletion of your personal data where it is no longer necessary, subject to legal retention obligations under PAGCOR and AMLA requirements.
Object to processing of your personal data for direct marketing or profiling purposes at any time. Objection to legal-obligation processing may be limited.
Receive a structured, machine-readable copy of personal data you have provided to bit100 for transfer to another service, where technically feasible.
Seek indemnification for damages sustained due to inaccurate, incomplete, outdated, or unlawfully obtained personal data, in accordance with Sec. 16(f) of RA 10173.
File a complaint with the National Privacy Commission (privacy.gov.ph) if you believe bit100 has violated your data privacy rights under RA 10173.
To exercise any of these rights, submit a written data subject request to bit100's Data Protection Officer at [email protected] with the subject line "Data Subject Request". Requests are processed within 15 business days of receipt. Verification of your identity will be required before any request is actioned.
Minors & Age Restriction
The bit100 platform is strictly restricted to individuals who are at least 21 years of age, as required under applicable PAGCOR regulations and Philippine gaming law. bit100 does not knowingly collect or process personal data from individuals under the age of 21.
Age verification through government-issued Philippine identification is mandatory for all registered players. Where bit100 discovers or has reasonable grounds to believe that personal data belonging to a person under 21 has been collected — including through falsification of date of birth at registration — the following actions will be taken immediately:
- The account will be suspended and access revoked
- Any deposits made will be returned to the originating payment method
- Any winnings accumulated will be forfeited
- All personal data collected will be securely deleted, subject only to any mandatory reporting obligations
- The incident may be reported to PAGCOR and relevant authorities
If you believe a person under 21 has registered on bit100, please notify us immediately at [email protected].
Cross-Border Data Transfers
In the ordinary course of operating the bit100 platform, some personal data may be processed by service providers whose infrastructure is located outside the Philippines — for example, cloud computing providers operating regional data centres in Asia-Pacific jurisdictions.
Any transfer of personal data outside the Philippines is conducted only where at least one of the following conditions is satisfied, in accordance with Section 21 of RA 10173 and NPC rules on cross-border data transfers:
- The recipient country provides a level of data protection substantially equivalent to Philippine standards
- The data subject has consented to the transfer
- The transfer is necessary for the performance of a contract with the data subject
- The transfer is necessary for compliance with a legal obligation
- bit100 and the receiving entity have executed binding contractual clauses incorporating adequate data protection standards
bit100 does not transfer personal data to jurisdictions identified by the NPC as providing inadequate data protection without additional safeguards. Cross-border transfers involving sensitive personal information require explicit consent from the data subject unless a legal exception applies.
Data Protection Officer
bit100 has designated a Data Protection Officer (DPO) in accordance with Section 21(a) of the Data Privacy Act Implementing Rules and Regulations and NPC Advisory No. 2017-01. The DPO is responsible for ensuring bit100's compliance with RA 10173, acting as the point of contact between bit100 and the National Privacy Commission, and handling data subject requests and privacy complaints.
The bit100 DPO registration is on file with the National Privacy Commission. For all data privacy matters, data subject requests, or complaints regarding bit100's data processing practices, contact the DPO at:
Email:
[email protected]
(Subject: "Data Protection Officer" or "DPO Request")
Response time: within 15 business days for formal data subject requests.
Changes to This Privacy Policy
bit100 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, Philippine legal requirements, NPC guidance, or platform operations. The effective date at the top of this policy reflects when the current version took effect.
When material changes are made to this Privacy Policy — particularly changes that expand the types of data collected, introduce new processing purposes, or alter data sharing arrangements — bit100 will notify registered players via email to their registered address and via a prominent notice on the bit100 platform at least 7 calendar days before the changes take effect.
Continued use of the bit100 platform following the effective date of an updated Privacy Policy constitutes your acknowledgment of the changes. If you do not accept the revised policy, you should close your account and request deletion of your personal data in accordance with your rights under Section 09 of this policy.
Contact & Complaints
For general privacy inquiries, data subject requests, or complaints about bit100's handling of your personal information, contact us through the following channel:
Email:
[email protected]
Subject line recommendations: "Privacy Inquiry", "Data Subject Request",
"Privacy Complaint", or "DPO Request".
We aim to respond to all privacy-related enquiries within 5 business days,
and to formal data subject requests within 15 business days.
If you are not satisfied with bit100's response to your privacy complaint, you have the right to escalate your complaint directly to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory body responsible for enforcing RA 10173 and can be reached through its official government portal. Filing with the NPC does not preclude any other legal remedies available to you under Philippine law.
Your Data Is Safe with bit100
PAGCOR-regulated. RA 10173 compliant. Encrypted end-to-end. Filipino support team. Play responsibly — 21+ only.
Sign In to Your Account