valabet Privacy Policy

valabet (referred to in this document as "valabet," "we," "us," or "our") is an online gaming platform operating under the domain valabet.org, providing digital gaming and entertainment services to Filipino players. valabet acts as the data controller in respect of all personal data collected through the platform, its associated mobile interfaces, and any related services.

This Privacy Policy applies to all users of the valabet platform, including registered players, visitors who browse without registering, and any individual who interacts with any component of the valabet service. By accessing or using valabet, you acknowledge that you have read and understood this policy.

valabet collects several categories of personal data, depending on how you interact with the platform. The table below summarizes the main categories:

valabet does not collect sensitive personal information — such as racial or ethnic origin, political opinions, religious beliefs, or biometric data — unless specifically required for identity verification purposes and only with your explicit consent.

valabet collects personal data through the following means:

• Direct collection: Information you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your profile settings.
• Automated collection: Technical data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access the platform. See Section 7 for full details on our cookie practices.
• Third-party verification services: Identity and age verification data received from accredited KYC and anti-money laundering (AML) service providers when we are required to verify your identity prior to processing withdrawals.
• Payment processors: Transaction confirmation data received from payment partners such as GCash, PayMaya, BPI, BDO, and Metrobank to reconcile and confirm financial transactions on your account.
• Fraud detection systems: Risk and behavioral signals generated by automated fraud-detection tools that monitor platform activity to protect all users from account compromise and financial crime.

valabet uses the personal data we hold about you for the following specific purposes:

• Account management: To create, maintain, verify, and administer your player account on the valabet platform.
• Identity verification (KYC): To verify your identity and age (21+) in compliance with applicable gaming regulations and anti-money laundering requirements before processing withdrawals or granting full account access.
• Payment processing: To process deposits, withdrawals, and refunds via your registered payment methods (GCash, PayMaya, BPI, BDO, Metrobank), and to maintain accurate financial records of all transactions.
• Gaming service delivery: To provide access to the full range of valabet games and services, including slots, live casino, bingo, sports betting, Mine, HRG Live, and sabong.
• Customer support: To respond to your queries, resolve disputes, investigate complaints, and maintain a record of communications for quality assurance.
• Fraud prevention & security: To detect, investigate, and prevent fraudulent transactions, account compromise, cheating, money laundering, and other prohibited conduct that could harm you or other players.
• Regulatory compliance: To fulfill our obligations under applicable Philippine gaming regulations, AML legislation, and any lawful request from regulatory authorities.
• Responsible gaming: To monitor gaming patterns that may indicate problem gambling behavior, and to enforce deposit limits, cooling-off periods, and self-exclusion requests you have set on your account.
• Platform improvement: To analyze aggregated usage data and improve the performance, reliability, and user experience of the valabet platform.
• Marketing communications: Where you have provided consent, to send you promotional offers, bonus notifications, and news about new games or features available on valabet. You may withdraw this consent at any time through your account settings or by contacting support.

Under the Data Privacy Act of 2012 (RA 10173), valabet processes your personal data on one or more of the following lawful bases:

• Contractual necessity: Processing is necessary to perform the contract between you and valabet (i.e., providing you with gaming services, processing payments, and managing your account).
• Legal obligation: Processing is required for valabet to comply with its legal and regulatory obligations, including KYC verification, AML monitoring, and regulatory reporting.
• Legitimate interests: Processing is necessary for the legitimate interests of valabet or a third party (e.g., fraud prevention, platform security, and improving gaming services), provided those interests are not overridden by your data protection rights.
• Consent: For non-essential data uses such as marketing communications and optional personalization features, valabet relies on your freely given, specific, and informed consent, which you may withdraw at any time.

Where processing is based on consent, withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal, nor does it affect processing carried out under a different legal basis.

valabet does not sell your personal data to third parties. We may, however, share your data with the following categories of recipients where necessary and lawful:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment infrastructure providers, solely for the purpose of processing your financial transactions.
• KYC and identity verification providers: Accredited third-party identity verification services used to conduct age and identity checks in compliance with regulatory requirements.
• Game content providers: Licensed third-party game studios and live casino operators that supply the gaming content available on the valabet platform. These providers may receive anonymized session data for technical integration purposes.
• Fraud detection and security services: Specialist third-party vendors that assist valabet in identifying and preventing fraudulent activity, account compromise, and financial crime.
• Regulatory and law enforcement authorities: Government agencies, gaming regulators, and law enforcement bodies where disclosure is required by applicable Philippine law or by a valid legal order.
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations, where necessary in connection with legal proceedings or regulatory matters.

All third-party service providers engaged by valabet are required under contract to process personal data only for specified purposes, to maintain appropriate data security standards, and to comply with applicable Philippine data privacy legislation. valabet does not permit its service providers to use your data for their own independent purposes.

valabet uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, and analyze usage patterns. The following categories of cookies are in use:

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that keep you logged in, security tokens, and load-balancing identifiers. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your language preferences, display settings, and responsible gaming tool configurations. Disabling these may affect your user experience but will not prevent access to games.
• Analytics cookies: Used to collect anonymized data about how players navigate the platform, which features are most used, and where technical errors occur. This data is used solely to improve platform performance and user experience.
• Security and fraud detection cookies: Used by our fraud prevention systems to identify anomalous device behavior, detect account sharing, and flag suspicious login patterns.

Non-essential cookies (functional and analytics) are only set with your consent. You may manage your cookie preferences through your browser settings at any time. Please note that clearing cookies may log you out of your valabet session and reset your saved preferences.

valabet does not use third-party advertising cookies or behavioral targeting technologies that share your data with external advertising networks.

valabet implements a layered security framework to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• TLS 1.3 encryption for all data in transit between your device and valabet servers.
• AES-256 encryption for sensitive data stored at rest, including payment details and identity documents.
• Multi-factor authentication (MFA) options for player accounts, including SMS OTP verification.
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis.
• Regular independent security audits and penetration testing of platform infrastructure.
• 24/7 automated intrusion detection and real-time alerting systems.
• Incident response procedures aligned with NPC breach notification requirements under RA 10173.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, valabet will notify the National Privacy Commission and, where required, affected players within 72 hours of becoming aware of the breach, in accordance with NPC guidelines.

valabet retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law. The following general retention guidelines apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with AML and gaming regulatory record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required under Philippine financial regulations.
• Gaming activity logs: Retained for up to three (3) years from the date of the activity, primarily for dispute resolution and responsible gaming monitoring purposes.
• Customer support communications: Retained for up to two (2) years from the date of the last communication, unless longer retention is required for ongoing legal proceedings.
• Marketing consent records: Retained for the duration of your account and for one (1) year after consent is withdrawn, as evidence of compliance.
• Technical and security logs: Retained for up to twelve (12) months for operational security purposes.

Upon expiry of the applicable retention period, personal data is either securely and permanently deleted from valabet systems or anonymized so that it can no longer be linked to any identifiable individual. Anonymized data may be retained indefinitely for aggregated statistical analysis.

As a data subject under Philippine law, you have the following rights with respect to your personal data held by valabet:

• Right to be informed: The right to be informed about how your personal data is collected and processed — which this Privacy Policy fulfills.
• Right of access: The right to request a copy of the personal data valabet holds about you and to receive information about how it is being used.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. You may update most account information directly through your profile settings.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to valabet's legal retention obligations. Note that we may not be able to delete data we are legally required to retain.
• Right to object: The right to object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests. Objection to marketing will be honored immediately; other objections will be assessed on their merits.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe valabet has not handled your personal data in accordance with the Data Privacy Act of 2012.

To exercise any of the above rights, please contact the valabet Data Protection Officer (DPO) using the details provided in Section 14. valabet will respond to all data rights requests within thirty (30) calendar days of receipt. Complex requests may require additional time, in which case we will notify you of the expected timeline.

The valabet platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations applicable to casino-style online gaming. valabet does not knowingly collect personal data from any individual under the age of 21.

During the registration process, all applicants are required to confirm that they are at least 21 years of age. Age verification documentation may be requested at any stage of the account lifecycle. Accounts found to belong to individuals under the minimum age will be immediately suspended and closed, and any funds held in such accounts will be handled in accordance with applicable regulatory requirements.

If you are a parent or guardian and believe that a minor has registered on valabet using false age information, please contact our support team immediately at the details provided in Section 14. We will investigate the matter promptly and take appropriate action, including account closure and notification of relevant authorities where required.

Some of valabet's service providers — including game content suppliers, cloud infrastructure providers, and fraud detection partners — may be located outside the Philippines. Where personal data is transferred to a recipient in another country, valabet ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under Philippine law.

These safeguards may include:

• Contractual clauses requiring the overseas recipient to comply with data protection standards at least equivalent to those prescribed by the Data Privacy Act of 2012.
• Binding corporate rules where the recipient is part of a corporate group that has adopted group-wide data protection standards.
• Transfer to jurisdictions that have been assessed by the NPC as providing an adequate level of data protection.

By using the valabet platform, you acknowledge and consent to the transfer of your personal data to overseas service providers as described in this section, subject always to the safeguards outlined above. You may request further information about the specific safeguards applicable to any particular transfer by contacting our DPO.

valabet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, the introduction of new features, changes in applicable law, or guidance issued by the National Privacy Commission.

When material changes are made to this Privacy Policy, valabet will notify registered players by:

• Displaying a prominent in-platform notification upon your next login.
• Sending an email notification to the address registered on your account, where the changes materially affect how we use your personal data.
• Updating the "Last Updated" date at the top of this document.

Your continued use of the valabet platform after the updated Privacy Policy has been published constitutes your acceptance of the revised terms. If you do not agree with any material changes, you may close your account in accordance with the valabet Terms & Conditions. The most current version of this Privacy Policy is always available at valabet.org/privacy-policy.

valabet has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act of 2012. If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, you may reach us through the following channels:

• Email: [email protected]
• Subject line for DPO matters: Privacy — [Your Request Type]
• Live Chat: Available 24/7 directly through the valabet platform

For complaints that have not been satisfactorily resolved by valabet, you have the right to escalate the matter to the National Privacy Commission of the Philippines:

• National Privacy Commission (NPC)
• Website: privacy.gov.ph