kralbet Privacy Policy

1. Introduction

kralbet ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with our services at kralbet.club. This Privacy Policy has been prepared in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations issued by the National Privacy Commission (NPC).

This Privacy Policy applies to all personal data collected through the kralbet website, mobile platform, customer support channels, and any other touchpoints through which you interact with us. It covers data collected from players based in the Philippines, including those in Metro Manila, Cebu, Davao, Quezon City, Makati, and other regions across the archipelago.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. Together, these documents form the complete framework governing your relationship with kralbet.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, kralbet acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes. This means we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. You may contact our DPO at any time using the contact details provided in Section 14 of this Policy.

3. Personal Data We Collect

Depending on how you interact with the kralbet platform, we may collect the following categories of personal data:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued ID;
• Date of birth (used to verify the 21+ age requirement);
• Residential address, including barangay, city, and province;
• Valid Philippine mobile number;
• Email address;
• Government-issued ID number (e.g., Philippine passport, driver's license, SSS/GSIS/PhilSys ID).

3.2 Financial Data

• GCash or PayMaya mobile wallet number;
• Bank account details for BPI, BDO, Metrobank, or other accepted Philippine banks;
• Transaction history, including deposit and withdrawal records denominated in Philippine Peso (PHP);
• Source of funds documentation where required by AML regulations.

3.3 Gaming & Behavioral Data

• Game history, wager amounts, and session durations;
• Bonus and promotion usage records;
• Responsible gaming tool settings (deposit limits, self-exclusion status);
• Customer support interaction records.

3.4 Technical & Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Login timestamps and session activity logs;
• Cookie identifiers and similar tracking technologies (see Section 9).

4. How We Collect Your Data

We collect personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated collection: Technical data collected automatically when you access the platform, including through cookies, log files, and analytics tools;
• Third-party sources: Identity verification data from accredited KYC service providers; fraud prevention data from industry databases; payment confirmation data from GCash, PayMaya, and banking partners;
• Regulatory sources: Information received from PAGCOR or other regulatory authorities in connection with licensing, compliance, or investigation requirements.

5. Purpose & Legal Basis for Processing

We process your personal data only where we have a lawful basis to do so under the Data Privacy Act of 2012. The table below summarizes the primary purposes for which we process your data and the corresponding legal basis:

6. Data Sharing & Disclosure

kralbet does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

6.1 Service Providers

We engage trusted third-party service providers to assist in operating the platform, including KYC and identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), cloud hosting providers, fraud detection services, and customer support platforms. All service providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection laws.

6.2 Regulatory & Law Enforcement Authorities

We may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where required by law, court order, or regulatory directive. Such disclosures are made only to the extent required and in accordance with applicable legal procedures.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that may result from it.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, in compliance with PAGCOR regulations and the Anti-Money Laundering Act;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Customer support records: Retained for two (2) years from the date of the last interaction;
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year thereafter for compliance purposes;
• Technical and log data: Retained for up to twelve (12) months, unless required for longer periods for security or legal purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures.

8. Data Security

kralbet implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• AES-256 encryption for sensitive data stored in our databases;
• Multi-factor authentication (MFA) for all administrative access to systems holding personal data;
• Role-based access controls ensuring that only authorized personnel can access personal data, and only to the extent required for their role;
• Regular penetration testing and security audits conducted by independent third-party security firms;
• 24/7 intrusion detection and monitoring of all systems processing personal data;
• Staff training on data privacy and security obligations under Philippine law.

9. Cookies & Tracking Technologies

The kralbet platform uses cookies and similar tracking technologies to enhance your experience, maintain your session, and analyze platform usage. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that keep you logged in and security cookies that prevent fraudulent use. These cannot be disabled.
• Functional Cookies: Remember your preferences, such as language settings and display options, to personalize your experience.
• Analytics Cookies: Help us understand how players use the platform so we can improve performance and usability. Data collected is aggregated and anonymized where possible.
• Marketing Cookies: Used only where you have given explicit consent to receive personalized promotional communications from kralbet.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the platform. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by kralbet:

• Right to be Informed: You have the right to be informed about how your personal data is collected, used, and processed — which is the primary purpose of this Privacy Policy;
• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is being processed;
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interest;
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. We will respond to all verified requests within thirty (30) days of receipt. In complex cases, we may extend this period by a further thirty (30) days, and will notify you accordingly.

11. Children's Privacy

The kralbet platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations governing online gaming in the Philippines. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from an individual under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the platform, please contact us immediately at the details provided in Section 14.

12. Cross-Border Data Transfers

In certain circumstances, your personal data may be transferred to, stored in, or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international fraud prevention services. Where such transfers occur, kralbet ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under Philippine law.

These safeguards may include contractual clauses approved by the National Privacy Commission, binding corporate rules, or transfers to countries recognized as providing an adequate level of data protection. By using the kralbet platform, you consent to such transfers where they are necessary for the provision of our services.

13. Changes to This Privacy Policy

kralbet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email and/or a prominent notice on the platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy will always reflect the most recent revision. We encourage you to review this Policy periodically to stay informed about how we protect your data. Your continued use of the platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

14. Contact & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our Data Protection Officer:

If you are not satisfied with our response, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent authority responsible for administering and implementing the Data Privacy Act of 2012 and protecting the fundamental human right of privacy of communication and information.