Privacy Policy

1. Who We Are

biga10 ("we," "us," "our," or "the Platform") is an online gaming platform operating under regulatory oversight and serving users in the Philippines. For the purposes of this Privacy Policy, biga10 acts as the data controller in respect of personal data collected from registered users and visitors to the biga10 website at https://biga10.net.

We are committed to protecting the personal data of our users in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA) of the Philippines, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

2. Personal Data We Collect

biga10 collects personal data that is necessary for the provision of our services, compliance with legal obligations, and the improvement of the user experience. The categories of personal data we collect include:

Category	Examples	Purpose
Identity Data	Full name, date of birth, gender, nationality	Account registration, KYC verification, age verification (21+)
Contact Data	Email address, mobile number, residential address	Account communications, support, notifications
Government ID Data	Passport, driver's license, SSS/UMID, PhilSys ID	KYC/AML compliance, identity verification
Financial Data	GCash number, Maya account, bank account details, transaction history	Deposit and withdrawal processing, fraud prevention
Technical Data	IP address, device type, browser, operating system, session data	Security, fraud detection, platform optimization
Usage Data	Games played, wager amounts, session duration, login history	Responsible gaming monitoring, personalization, analytics
Communications Data	Support chat logs, email correspondence, feedback submissions	Customer support, dispute resolution, quality assurance

We do not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect biometric data except where required by applicable law.

3. How We Collect Your Data

biga10 collects personal data through the following channels:

• Direct interactions: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs;
• Third-party sources: Identity verification data from KYC service providers; fraud screening data from anti-money laundering (AML) compliance partners; payment data from GCash, Maya, and banking partners;
• Publicly available sources: Information from public registries or databases where permitted by law for compliance purposes.

4. How We Use Your Personal Data

biga10 uses the personal data we collect for the following purposes:

4.1 Service Delivery

To create and manage your biga10 account; to process deposits and withdrawals through GCash, Maya, and Philippine bank transfers; to provide access to games including live casino, slots, bingo, and sports betting; and to deliver customer support services.

4.2 Legal and Regulatory Compliance

To verify your identity and age (21+ requirement) in compliance with Philippine gaming regulations; to fulfill our obligations under the Data Privacy Act of 2012; to comply with Anti-Money Laundering Act (AMLA) requirements; and to respond to lawful requests from regulatory authorities including PAGCOR and the NPC.

4.3 Security and Fraud Prevention

To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, and other prohibited conduct; to monitor for unusual account activity; and to protect the integrity of the biga10 Platform and its users.

4.4 Responsible Gaming

To monitor gaming patterns and identify users who may be exhibiting signs of problem gambling; to enforce deposit limits, session restrictions, and self-exclusion requests; and to comply with responsible gaming obligations under applicable regulations.

4.5 Marketing and Communications

To send you promotional offers, bonus notifications, and platform updates where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time through your account settings or by contacting our support team.

4.6 Platform Improvement

To analyze usage patterns, conduct internal research, and improve the functionality, performance, and user experience of the biga10 Platform.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, biga10 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfill our obligations under the biga10 Terms & Conditions, including account management and payment processing;
• Legal obligation: Processing required to comply with applicable laws, including KYC/AML requirements, PAGCOR regulations, and NPC directives;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

biga10 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients:

• KYC and identity verification providers: To verify your identity and age in compliance with regulatory requirements;
• Payment processors: GCash, Maya, and Philippine banking partners, solely for the purpose of processing your financial transactions;
• AML compliance partners: For screening against sanctions lists and fraud databases as required by the Anti-Money Laundering Act;
• IT and platform service providers: Cloud hosting, data analytics, and cybersecurity vendors who process data on our behalf under strict data processing agreements;
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities, where required by law or court order;
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third-party service providers engaged by biga10 are required to implement appropriate technical and organizational measures to protect your personal data and are prohibited from using it for any purpose other than those specified by biga10.

7. Cookies and Tracking Technologies

biga10 uses cookies and similar tracking technologies to enhance your experience on the Platform. The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function, including session management and security tokens. These cannot be disabled;
• Functional cookies: Remember your preferences such as language settings and login state to improve your experience;
• Analytics cookies: Collect aggregated, anonymized data about how users interact with the Platform to help us improve performance;
• Security cookies: Used to detect and prevent fraudulent activity and unauthorized access.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the biga10 Platform. biga10 does not use third-party advertising cookies or behavioral tracking for advertising purposes.

8. Data Retention

biga10 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML and gaming regulatory requirements;
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act;
• Communications and support data: Retained for three (3) years from the date of the communication;
• Technical and usage data: Retained for up to twelve (12) months, after which it is anonymized or deleted;
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year for audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures.

9. Data Security

biga10 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the biga10 Platform;
• Encryption of sensitive data at rest, including financial and identity information;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing;
• Multi-factor authentication for administrative access to systems containing personal data;
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

While biga10 takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. We encourage you to use a strong, unique password for your biga10 account and to enable any available two-factor authentication features.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by biga10:

• Right to be informed: The right to know what personal data we collect, how we use it, and with whom we share it — as set out in this Privacy Policy;
• Right of access: The right to request a copy of the personal data we hold about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing or where processing is based on legitimate interests;
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible;
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 14 of this Policy. We will respond to all verified requests within fifteen (15) days, as required by the Data Privacy Act of 2012. In complex cases, we may extend this period by a further fifteen (15) days with prior notice.

11. Children's Privacy

The biga10 Platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine law governing casino-style gambling. We do not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the data, and return any deposits subject to verification.

If you are a parent or guardian and believe that a minor has registered on the biga10 Platform, please contact our support team immediately so that we can take appropriate action.

12. Cross-Border Data Transfers

Some of biga10's service providers and technology partners may be located outside the Philippines. Where personal data is transferred to recipients in other countries, biga10 ensures that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012 and NPC regulations. These safeguards may include:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under Philippine law;
• Transfers to countries recognized by the NPC as providing an adequate level of data protection;
• Binding corporate rules where transfers occur within a corporate group.

biga10 does not transfer personal data to jurisdictions that do not provide adequate protections without implementing the safeguards described above.

13. Updates to This Privacy Policy

biga10 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users via email or an in-platform notification.

We encourage you to review this Privacy Policy periodically to stay informed about how biga10 protects your personal data. Your continued use of the Platform following the posting of any changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, you may contact the biga10 Data Protection Officer (DPO) through the following channels:

• Live Chat: Available 24/7 through the biga10 Platform — the fastest way to reach our support team;
• Email: [email protected]
• General Support: [email protected]

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint is available on the NPC's official website.

For matters related to our Terms & Conditions, please refer to the Terms & Conditions page. For responsible gaming support and self-exclusion requests, please visit our Responsible Gaming page.