mb7ph Privacy Policy – How We Handle Your Personal Data

1. Introduction & Scope

mb7ph ("we," "us," "our," or the "Platform") operates the online gaming website accessible at mb7ph.cam and any associated mobile interfaces or services. This Privacy Policy applies to all personal data processed in connection with the mb7ph platform, including data collected from users who browse the website without registering, users who register an account, users who actively play games, and users who contact our customer support team.

By accessing mb7ph or registering an account, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any provision of this Privacy Policy, you must discontinue use of the mb7ph platform immediately.

This Privacy Policy should be read together with our Terms & Conditions and our Responsible Gaming policy, both of which form part of the complete agreement between you and mb7ph.

2. Personal Data We Collect

mb7ph collects only the personal data that is necessary and proportionate for the purposes described in this Privacy Policy. The categories of personal data we collect include:

2.1 Account Registration Data

• Full legal name as it appears on government-issued Philippine identification
• Date of birth (for age verification — all users must be 21 or older)
• Email address and mobile phone number
• Residential address within the Philippines
• Username and encrypted password
• Preferred currency and language settings

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (PhilSys National ID, Passport, LTO Driver's License, SSS/GSIS ID, PRC ID, Voter's ID, or other PAGCOR-accepted documents)
• Proof of residential address (utility bill, bank statement, or government correspondence dated within 90 days)
• Selfie photographs taken during the biometric verification process
• Additional documentation requested during enhanced due diligence reviews

2.3 Financial & Transaction Data

• GCash and PayMaya mobile wallet identifiers (account numbers and registered mobile numbers)
• Bank account numbers for BPI, BDO, Metrobank, and other Philippine bank transfers
• Deposit and withdrawal history including amounts, dates, and payment methods used
• Transaction reference numbers and payment processor confirmation codes
• Cryptocurrency wallet addresses where applicable

2.4 Gameplay & Activity Data

• Game session history, including titles played, bet amounts, wins, losses, and session durations
• Bonus and promotion participation history
• Responsible gaming settings and limit configurations
• Self-exclusion requests and status
• Customer support interactions, including chat transcripts and email correspondence

2.5 Technical & Device Data

• IP address and approximate geographic location (province/city level)
• Device type, operating system, and browser version
• Mobile device identifiers (IMEI, Android ID, Apple IDFA where permitted)
• Session timestamps, page views, and navigation paths
• Connection type (WiFi, mobile data) and internet service provider

3. How We Collect Personal Data

mb7ph collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions.
• Automatically: Through cookies, web beacons, and similar tracking technologies as you interact with the mb7ph website or mobile interface. See Section 7 for full details on cookies.
• From third-party payment processors: GCash, PayMaya, InstaPay, PESONet, and partner banks share transaction confirmation data with mb7ph to verify and reconcile payments.
• From identity verification providers: Third-party KYC service providers process document and biometric verification on mb7ph's behalf and return verification results to us.
• From fraud detection services: Risk management and anti-fraud systems may contribute device fingerprinting and behavioral analytics data to supplement mb7ph's own security measures.
• From regulatory authorities: PAGCOR and other Philippine regulatory bodies may share information relevant to player exclusion registers or compliance requirements.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012 (RA 10173), mb7ph processes personal data under the following lawful bases:

Processing Purpose	Legal Basis
Account registration and service delivery	Performance of a contract (Terms & Conditions)
Age verification (21+ requirement)	Legal obligation (PAGCOR regulations)
KYC identity verification	Legal obligation (Anti-Money Laundering Act / PAGCOR)
Payment processing and fraud prevention	Legitimate interest / legal obligation
Responsible gaming monitoring	Legal obligation / legitimate interest
Marketing communications	Consent (opt-in only)
Website analytics and performance	Legitimate interest
Legal and regulatory compliance	Legal obligation

5. How We Use Your Personal Data

mb7ph uses your personal data for the following purposes:

5.1 Platform Operations

To create and maintain your mb7ph account, process deposits and withdrawals via GCash, PayMaya, and Philippine bank channels, verify your identity and age (21+), provide access to casino games and betting services, deliver customer support, and enforce responsible gaming limits and self-exclusion requests.

5.2 Legal & Regulatory Compliance

To fulfill mb7ph's obligations under Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act (RA 9160 as amended), the Cybercrime Prevention Act (RA 10175), and the Data Privacy Act (RA 10173). This includes filing mandatory suspicious transaction reports (STRs) and covered transaction reports (CTRs) with the Anti-Money Laundering Council (AMLC) where required.

5.3 Security & Fraud Prevention

To detect, investigate, and prevent fraudulent account activity, unauthorized access, bonus abuse, money laundering, collusion, and other prohibited activities. mb7ph's security systems analyze behavioral patterns, device data, and transaction histories to identify anomalous activity that may indicate fraud or policy violations.

5.4 Personalization & Communications

With your consent, to send promotional emails, SMS notifications, and in-platform messages about bonuses, new games, and platform updates tailored to your gaming preferences and activity history. You may withdraw consent for marketing communications at any time through your account notification settings or by contacting support.

5.5 Platform Improvement

To analyze aggregated and anonymized usage data that helps mb7ph improve the platform — identifying which games are most popular among Filipino players, where users encounter technical difficulties, and how the mobile experience can be optimized for devices commonly used across Metro Manila, Cebu, Davao, and other regions.

6. Data Sharing & Disclosure

mb7ph may share personal data with the following categories of recipients:

6.1 Payment Processors & Financial Institutions

GCash (Mynt), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, InstaPay network participants, and other payment service providers receive the minimum necessary data (name, account identifier, transaction amount) to process your deposits and withdrawals.

6.2 Identity Verification Providers

Third-party KYC vendors process your identity documents and biometric data on mb7ph's behalf under strict data processing agreements that prohibit any secondary use of your information.

6.3 Regulatory & Law Enforcement Authorities

PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the National Bureau of Investigation (NBI), the Philippine National Police (PNP), and other competent Philippine authorities may receive personal data where disclosure is required by law, court order, or regulatory mandate.

6.4 Game Providers

Third-party game studios and live dealer operators who supply games to the mb7ph platform may receive a pseudonymous player identifier and game session data necessary to deliver game functionality. These providers do not receive your full name, contact details, or financial data.

6.5 Group Companies

mb7ph may share personal data within its corporate group for internal administration, compliance monitoring, and consolidated security operations, subject to the same data protection standards described in this Privacy Policy.

7. Cookies & Tracking Technologies

mb7ph uses cookies and similar technologies to operate and improve the platform. The categories of cookies we use include:

Cookie Type	Purpose	Consent Required
Strictly Necessary	Session management, login authentication, security tokens, anti-CSRF protection	No — essential for platform operation
Functional	Remembering language preferences, game settings, and responsible gaming limits	No — supports core functionality
Analytics	Understanding how users navigate the platform, identifying error-prone pages, measuring load performance	Yes — opt-in
Marketing	Measuring promotion campaign effectiveness and personalizing offers	Yes — opt-in

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may affect platform functionality. Note that mb7ph does not use third-party advertising cookies that transmit your data to unrelated advertisers.

8. Data Retention

mb7ph retains personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, subject to the following minimum retention periods:

• Account data and KYC records: Retained for a minimum of five (5) years from the date of account closure, as required under the Anti-Money Laundering Act and PAGCOR licensing conditions.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with BSP and AMLC record-keeping requirements.
• Customer support communications: Retained for three (3) years from the date of the interaction.
• Marketing consent records: Retained for the duration of your account plus three (3) years following account closure, as evidence of consent for compliance purposes.
• Technical logs: Retained for up to twelve (12) months, after which they are anonymized or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized using industry-standard data sanitization procedures.

9. Data Security Measures

Our security infrastructure includes:

• Encryption in transit: All data transmitted between your device and mb7ph servers is encrypted using TLS 1.2 or higher. HTTPS is enforced across all pages of the platform.
• Encryption at rest: Sensitive personal data including KYC documents and financial records are encrypted at rest using AES-256 encryption.
• Password security: User passwords are never stored in plain text. mb7ph uses industry-standard salted hashing algorithms (bcrypt) for password storage.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis using role-based access control (RBAC). All internal data access is logged and audited.
• Two-factor authentication: mb7ph supports and encourages 2FA for all user accounts. Internal staff with access to personal data are required to use 2FA.
• Penetration testing: The mb7ph platform undergoes regular security assessments by independent third-party security professionals.
• Incident response: mb7ph maintains a documented data breach response procedure. In the event of a breach that poses risk to your rights and freedoms, we will notify the National Privacy Commission and affected users within the timeframes specified by the Data Privacy Act.

10. Your Data Privacy Rights

As a data subject under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by mb7ph:

• Right to be Informed: You have the right to be informed of what personal data mb7ph collects about you, the purposes for processing, and how long it is retained. This Privacy Policy fulfills that obligation.
• Right to Access: You may request a copy of the personal data mb7ph holds about you. Access requests will be processed within 30 calendar days of receipt.
• Right to Rectification: If your personal data held by mb7ph is inaccurate or incomplete, you may request corrections. Certain corrections (such as name changes) may require supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to mb7ph's legal retention obligations under PAGCOR and AMLC regulations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest grounds, though this may affect your ability to use certain mb7ph features.
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format for transfer to another service provider where technically feasible.
• Right to Withdraw Consent: Where mb7ph processes your data based on consent (such as marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: If you believe mb7ph has processed your personal data in violation of the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, contact mb7ph's Data Protection Officer (DPO) via the contact information in Section 15 of this Privacy Policy. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

11. Children's & Minors' Privacy

If mb7ph discovers or is informed that personal data has been collected from an individual under 21 years of age, we will immediately suspend the associated account, delete the personal data collected, and report the incident as required by applicable Philippine law. If you are a parent or guardian and believe your child has registered an mb7ph account, please contact our Data Protection Officer immediately using the details in Section 15.

12. International Data Transfers

Some of mb7ph's technology infrastructure, cloud storage, and third-party service providers may be located outside of the Philippines. Where personal data is transferred to countries that do not provide a level of data protection equivalent to Philippine law, mb7ph ensures that appropriate safeguards are in place, including data processing agreements that incorporate standard contractual clauses approved by the National Privacy Commission.

mb7ph prioritizes data residency within the Philippines and the Asia-Pacific region where technically and commercially feasible. The primary data center servicing Filipino players is located within the ASEAN region.

13. Third-Party Services & Links

The mb7ph platform integrates third-party services including payment processors, game providers, and customer support tools. These third parties operate under their own privacy policies, which mb7ph does not control. mb7ph vets all third-party service providers for data protection compliance before integration and requires them to process personal data solely for mb7ph-specified purposes under binding data processing agreements.

mb7ph does not include links to external websites. The mb7ph website does not embed third-party social media widgets, advertising trackers from unrelated platforms, or any technology that transmits your personal data to organizations unrelated to mb7ph service delivery.

14. Changes to This Privacy Policy

mb7ph may update this Privacy Policy from time to time to reflect changes in our data processing practices, updates to Philippine privacy law, or operational changes to the platform. Material changes will be communicated to registered users via email to the address on file and through a prominent notice on the mb7ph website at least fourteen (14) days prior to the changes taking effect.

The "Last Updated" date at the top of this Privacy Policy reflects the most recent revision. We encourage all mb7ph users to review this Privacy Policy periodically. Continued use of mb7ph following the effective date of any revised Privacy Policy constitutes acceptance of the updated terms.

15. Contact & Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by mb7ph, please contact our designated Data Protection Officer:

• Data Protection Officer: mb7ph Privacy & Compliance Team
• Email: [email protected] (plain text — not a clickable link)
• 24/7 Live Chat: Available from any logged-in mb7ph session
• Response Time: Acknowledgment within 5 business days; substantive response within 30 calendar days

For complaints that cannot be resolved directly with mb7ph, you may contact the National Privacy Commission of the Philippines:

• National Privacy Commission (NPC)
• 3rd Floor, Core G, DICT Building, C.P. Garcia Avenue, Diliman, Quezon City 1101

By using mb7ph services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Privacy Policy was last reviewed and approved by the mb7ph Data Protection Officer on October 8, 2026.