1. Introduction
Welcome to BossPH. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how BossPH ("we," "us," or "our") collects, uses, stores, and protects your data when you use our website atbossph.best, our mobile applications, and any related services (collectively, the "Platform").
By registering an account, placing a bet, playing game, or simply browsing the BossPH platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms outlined here, we respectfully ask that you discontinue use of the Platform.
BossPH operates in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its Implementing Rules and Regulations, and other applicable Philippine laws. Our data processing activities are guided by the principles of transparency, legitimate purpose, and proportionality.
2. What Personal Data We Collect
When you use the BossPH platform, we may collect and process the following categories of personal data:
2.1 Registration and Identity Data
- Full legal name as it appears on your government-issued ID
- Date of birth (to verify you are at least 21 years old, per PAGCOR regulations)
- Nationality and country of residence
- Valid email address
- Mobile number (used for OTP verification and account security)
- Username and password (passwords are stored in hashed form and never in plain text)
2.2 Identity Verification (KYC) Data
To comply with anti-money laundering (AML) regulations and PAGCOR requirements, BossPH conducts Know Your Customer (KYC) checks. This may require:
- A copy of a valid government-issued ID (e.g., Philippine passport, SS ID, PhilSys National ID, driver's licence, PRC ID, voter's ID)
- A selfie or live photo for facial verification
- Proof of billing or residential address
- Source-of-funds documentation for higher-value transactions
2.3 Financial and Transaction Data
- Deposit and withdrawal records, including amounts, dates, and methods (GCash, Maya, GrabPay, Coins.ph, InstaPay/PESONet, BDO/BPI/UnionBank online banking, Visa/Mastercard)
- Wallet balances and bonus credit history
- Betting history, game logs, and winings records
2.4 Technical and Device Data
- IP address and approximate geolocation
- Device type, operating system, and browser version
- Session timestamps and activity logs
- Cookies and similar tracking technologies (see Section 4)
2.5 Communications Data
- Messages sent to our customer support team via live chat, email, or in-app messaging
- Feedback, survey responses, and promotional opt-ins
3. How We Use Your Personal Data
BossPH processes your personal data only for specific, legitimate purposes. We do not process your data in a way that is incompatible with those purposes. Here is how we use the data we collect:
- Account Management: To create, verify, and maintain your BossPH account, including login authentication and security alerts.
- Service Delivery: To process bets, facilitate game play, credit winings, and manage deposits and withdrawals in Philippine Peso (₱).
- Legal and Regulatory Compliance: To fulfil our obligations under PAGCOR licensing, AML laws, and the Data Privacy Act. This includes reporting to relevant authorities where legally required.
- Fraud Prevention and Security: To detect and prevent fraudulent activity, money laundering, underage gambling, and unauthorised account access.
- Responsible Gaming: To monitor gaming behaviour and flag potential problem gambling patterns, and to implement self-exclusion or limit requests from players.
- Customer Support: To respond to your queries, resolve disputes, and improve our support services.
- Marketing and Promotions: To send you relevant offers, bonus updates, and platform news—but only if you have opted in or where permitted by law. You can withdraw consent at any time.
- Platform Improvement: To analyse usage patterns, fix technical issues, and develop new features that better serve Filipino players.
4. Cookies and Tracking Technologies
Like most online platforms, BossPH uses cookies and similar tracking technologies to enhance your experience and gather analytical data.
Types of Cookies We Use
- Essential Cookies: Required for the Platform to function—session management, login persistence, and security tokens. You cannot opt out of these.
- Analytics Cookies: Help us understand how players use the site—page visits, session duration, drop-off points. Data is aggregated and anonymised.
- Preference Cookies: Remember your settings like language preference, display options, and notification choices.
- Marketing Cookies: Used to serve relevant promotions. You can manage these through your account settings or your browser's cookie controls.
You can control cookie behaviour through your browser settings. Blocking certain cookies may affect Platform functionality. For a full list of cookies in use, please contact us at the email address in Section 11.
5. Sharing Your Personal Data
BossPH does not sell, rent, or trade your personal information to any third party for their marketing purposes—full stop. We may share your data only in the following limited circumstances:
- Service Providers: Trusted third-party vendors who assist us in operating the Platform (e.g., payment processors, KYC/AML verification partners, cloud hosting providers, analytics tools). These vendors are bound by strict data processing agreements and may only use your data to provide services to BossPH.
- Regulatory and Law Enforcement Authorities: When required by law, court order, or a valid request from Philippine government agencies (e.g., PAGCOR, AMLC, NPC), we may disclose relevant data.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity. We will notify you in advance and give you the option to delete your account if you disagree.
- With Your Consent: We may share data with other parties if you give us explicit, informed consent to do so.
Any third-party recipients of your data outside the Philippines must provide an equivalent level of data protection as required under Philippine law.
6. Data Retention
We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Generally:
- Account Data: Retained for the duration of your account's active life plus five (5) years after closure, to comply with AML and tax reporting obligations.
- Transaction Records: Retained for a minimum of five (5) years in accordance with BSP and PAGCOR requirements.
- KYC Documents: Retained for five (5) years after account closure or the last transaction, whichever is later.
- Support Communications: Retained for two (2) years from the date of last interaction.
- Analytics Data: Retained in anonymised, aggregated form for up to three (3) years.
Once the retention period expires, your data is securely deleted or anonymised so it can no longer be linked back to you.
7. How We Protect Your Data
Data security is not just a checkbox for us—it's a core part of running a trustworthy platform. BossPH implements multiple layers of technical and organisational security measures, including:
- 256-bit TLS encryption for all data in transit between your device and our servers
- AES-256 encryption for sensitive data stored in our databases
- Multi-factor authentication (MFA) options for player accounts
- Regular penetration testing and security audits conducted by independent third parties
- Strict role-based access controls—only authorised personnel can access personal data, and only on need-to-know basis
- Intrusion detection and prevention systems (IDS/IPS) monitoring our infrastructure 24/7
- Secure data centres with physical access controls
- A documented incident response plan—in the event of a data breach, we will notify affected players and the National Privacy Commission (NPC) within 72 hours as required by law
While we take every reasonable precaution, no digital system is 100% immune to threats. We encourage you to use a strong, unique password for your BossPH account and to enable MFA in your account settings.
8. Your Rights Under the Data Privacy Act
As a data subject under Republic Act 10173, you have the following rights with respect to your personal data held by BossPH:
- Right to be Informed: You have the right to know what personal data we collect and how it is used.
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: If your data is inaccurate or incomplete, you can request that we correct it.
- Right to Erasure or Blocking: You may request deletion or blocking of your data if it is no longer necessary for the purpose it was collected, or if consent has been withdrawn—subject to our legal retention obligations.
- Right to Object: You can object to the processing of your personal data for direct marketing, profiling, or automated decision-making.
- Right to Data Portability: You can request your data in a structured, commonly used, machine-readable format.
- Right to Lodge a Complaint: If you believe we have violated your privacy rights, you may file a complaint with the National Privacy Commission (NPC) of the Philippines.
To exercise any of these rights, contact our Data Protection Officer at privacy@bossph.best. We will respond to your request within fifteen (15) business days.
9. Children and Minors
BosPH is strictly an adults-only platform. In accordance with PAGCOR regulations, you must be at least 21 years old to register and use our services. We do not knowingly collect personal data from anyone under 21 years of age.
If we discover that we have inadvertently collected data from a minor, we will immediately delete that data and close the associated account. If you believe a minor has registered on our platform, please notify us at privacy@bossph.best and we will act on it right away.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to reflect changes in our services, legal obligations, or industry best practices. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Send an in-app notification or email to registered users
- In some cases, ask for your renewed consent if the changes significantly affect how we process your data
We encourage you to review this page periodically. Continued use of BossPH after any changes take effect constitutes your acceptance of the updated Privacy Policy.
11. Contact Our Data Protection Officer
If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please reach out to our designated Data Protection Officer:
- Email: privacy@bossph.best
- Website: bossph.best
- Response Time: Within 15 business days for standard requests
We are here to help, Kabayan. Your privacy matters to us, and we will do our best to address your concerns in a timely and transparent manner.