1. Introduction

At BB Wave Inc. ("we," "our," "us"), we are committed to protecting the privacy and security of your personal data.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services, including our iGaming (online gambling) platform.

By accessing or using our website and services, you acknowledge that you have read and understood this Privacy Policy.

If you do not agree with the terms set forth herein, you should not use our services.

This Privacy Policy is in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and other applicable Philippine laws related to data protection and privacy.

2. Data Collection

3. Use of Cookies and Tracking Technologies

We use cookies and similar technologies (e.g., tracking pixels, analytics tools) to improve performance and user experience.

You may disable cookies in your browser settings, but certain features may not function properly if cookies are disabled.

For more details, refer to our Cookie Policy.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful access, alteration, or disclosure.

These include:

• Encryption: All sensitive data, including payment details, are encrypted during transmission.
• Access Controls: Only authorized employees have access to personal data on a need-to-know basis.
• Regular Audits: Security systems and data protection controls are reviewed and tested regularly.
• Data Minimization: We collect only the minimum amount of data necessary for lawful purposes.

We affirm that strict security controls are in place to prevent unauthorized or unnecessary disclosure of your personal data.

5. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law.

Specific retention periods include:

• Account Data: Retained for the duration of your active account and for five (5) years thereafter, as required by AMLA and PAGCOR regulations.
• Transaction Data: Retained for at least five (5) years from the date of the transaction or account closure, whichever is longer.
• Gaming Activity Data: Retained as needed for compliance, audit, and dispute resolution purposes.

When personal data is no longer required, it is securely deleted or anonymized.

Retention periods are determined based on regulatory requirements, contractual obligations, and risk management needs.

6. Sharing of Personal Data

We do not sell or rent your personal information to third parties.

However, we may share your data under the following lawful circumstances:

• Authorized Service Providers: We may disclose personal data to payment processors, KYC/AML verification providers, data hosting services, and IT security vendors. All third parties operate under strict data protection agreements.
• Regulatory and Law Enforcement Bodies: We may disclose data to PAGCOR, AMLC, or other authorities when legally required.
• Business Transfers: In case of a merger or acquisition, your data may be transferred under confidentiality safeguards.

We affirm that all disclosures are lawful, necessary, and proportionate, and we maintain measures to prevent unauthorized or unnecessary disclosure.

7. Your Rights and Choices

Under the Data Privacy Act of 2012, you have the following rights regarding your personal data:

• Right to Access: Request access to the personal data we hold about you.
• Right to Rectification: Correct inaccurate or incomplete information.
• Right to Erasure: Request deletion of your personal data, subject to legal retention obligations.
• Right to Portability: Request a copy of your data in a structured, machine-readable format.
• Right to Object: Object to data processing, including marketing.
• Right to Withdraw Consent: If processing is based on your consent, you may withdraw it at any time.
• Right to File a Complaint: You may file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise your rights, contact us at [email protected].

We will process requests within a reasonable timeframe in accordance with applicable law.

8. Legal or Contractual Obligations

Providing personal data is necessary to comply with legal and regulatory requirements (e.g., PAGCOR licensing, AMLA compliance).

Failure to provide mandatory data may result in denial of account registration, suspension, or inability to process transactions.

9. Automated Decision-Making and Profiling

We may use automated systems to verify identity, detect fraud, or analyze player behavior to ensure compliance and responsible gaming.

However, these processes do not make fully automated decisions that produce legal or similarly significant effects without human review.

Safeguards include:

• Human oversight and review of flagged accounts.
• The right to contest any automated decision and request human intervention.
• Transparency on profiling methods used for risk or compliance monitoring.

10. Responsible Gaming and Data Use

We promote responsible gaming and may process personal data to:

• Detect harmful gambling behavior.
• Enforce self-exclusion requests.
• Support players through responsible gambling programs or referrals.

Data used for these purposes is handled with confidentiality and only shared with accredited responsible gaming organizations when necessary.

11. Changes to this Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time.

You will be notified and required to reconfirm acceptance if material updates occur.

The effective date will be indicated at the top of this page.

12. Contact Information

If you have any questions or wish to exercise your rights, you may contact us at:

For complaints, you may also contact the National Privacy Commission (NPC):

Website: https://www.privacy.gov.ph