BEPK Privacy Policy

BEPK ("we," "us," or "our") operates the online gaming platform accessible at bepk.net and through the BEPK mobile application (collectively, the "Platform"). We are committed to protecting the privacy and personal data of all individuals who use our Platform, including registered players, visitors, and prospective users (collectively, "you" or "your").

This Privacy Policy explains how BEPK collects, uses, stores, shares, and protects your personal data in connection with your use of the Platform. It also describes the rights you have in relation to your personal data and how you can exercise those rights.

This Privacy Policy is governed by Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, and its implementing rules and regulations. By accessing or using the BEPK Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

BEPK collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

We do not collect sensitive personal information (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless specifically required for responsible gaming compliance purposes, in which case your explicit consent will be obtained.

BEPK uses your personal data for the following purposes:

• Account management: To create, verify, and maintain your BEPK player account, including identity verification (KYC) and age verification to ensure compliance with the 21+ requirement.
• Service delivery: To provide you with access to games, process deposits and withdrawals in Philippine Peso (₱), and deliver the features and functionality of the Platform.
• Regulatory compliance: To comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, gaming regulations, and data protection requirements under the Data Privacy Act of 2012.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other prohibited conduct on the Platform.
• Customer support: To respond to your inquiries, resolve disputes, and provide assistance through our support channels.
• Responsible gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion.
• Marketing and promotions: To send you information about BEPK promotions, bonuses, and new games, where you have consented to receive such communications. You may opt out at any time.
• Platform improvement: To analyze usage patterns, troubleshoot technical issues, and improve the overall performance and user experience of the Platform.

BEPK will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or as otherwise permitted by applicable law.

BEPK processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its implementing rules:

• Contractual necessity: Processing is necessary to perform our contract with you — specifically, to operate your BEPK account, process transactions, and deliver gaming services.
• Legal obligation: Processing is required to comply with applicable Philippine laws, including KYC and AML obligations imposed by gaming and financial regulations.
• Legitimate interests: Processing is necessary for BEPK's legitimate interests, including fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your rights and interests.
• Consent: For certain processing activities — such as sending marketing communications or processing sensitive personal information — BEPK will obtain your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

BEPK does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Service providers: Third-party vendors who assist us in operating the Platform, including payment processors (e.g., GCash, PayMaya, BPI, BDO, Metrobank), KYC verification providers, cloud hosting providers, and customer support platforms. All service providers are contractually required to process your data only on BEPK's instructions and to maintain appropriate security standards.
• Regulatory and law enforcement authorities: Philippine government agencies, gaming regulators, and law enforcement bodies where disclosure is required by law, court order, or regulatory directive. This includes reporting obligations under applicable AML regulations.
• Fraud prevention and security partners: Third-party fraud detection and cybersecurity services used to protect the Platform and its users from unauthorized access and financial crime.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of BEPK's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

BEPK retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

As a general rule, BEPK retains player account data for a minimum of five (5) years following account closure or the last transaction on the account, in accordance with applicable Philippine gaming and AML regulations. Specific retention periods may be longer where required by law or where data is subject to an ongoing investigation or dispute.

When your personal data is no longer required for any legitimate purpose, BEPK will securely delete or anonymize it in accordance with our internal data retention procedures.

BEPK implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the BEPK Platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data stored on our servers is encrypted at rest.
• Access controls: Access to personal data is restricted to authorized BEPK personnel and service providers who have a legitimate need to access it. All access is logged and audited.
• Secure infrastructure: BEPK's Platform is hosted on secure, certified cloud infrastructure with regular security assessments, penetration testing, and vulnerability management.
• Incident response: BEPK maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, BEPK will notify the National Privacy Commission (NPC) and affected individuals in accordance with the requirements of the Data Privacy Act of 2012.

BEPK uses cookies and similar tracking technologies (such as web beacons and local storage) to enhance your experience on the Platform, remember your preferences, maintain your session, and analyze how the Platform is used.

The types of cookies we use include:

• Strictly necessary cookies: These are essential for the Platform to function correctly. They enable core features such as account login, session management, and security. These cookies cannot be disabled.
• Functional cookies: These remember your preferences and settings (such as language and display preferences) to provide a more personalized experience.
• Analytics cookies: These help us understand how players interact with the Platform, which pages are most visited, and where technical issues occur. This data is used in aggregate and anonymized form to improve the Platform.
• Marketing cookies: These may be used to deliver relevant promotional content about BEPK games and offers. They are only set with your consent.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights in relation to your personal data held by BEPK:

• Right to be informed: You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfills that obligation.
• Right of access: You have the right to request a copy of the personal data BEPK holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to BEPK's legal retention obligations.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to BEPK's overriding legitimate grounds.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that BEPK has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of these rights, please contact BEPK's support team. We will respond to all verified requests within thirty (30) days. In some cases, we may need to verify your identity before processing your request.

The BEPK Platform is strictly intended for individuals who are 21 years of age or older, in accordance with applicable Philippine gaming regulations. BEPK does not knowingly collect personal data from individuals under the age of 21.

If BEPK becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. Any winnings generated by an underage player will be forfeited.

BEPK's primary operations and data storage are based in the Philippines. However, some of our service providers — including cloud hosting and technical infrastructure partners — may process or store data in other countries.

Where personal data is transferred outside the Philippines, BEPK ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012. These safeguards may include contractual data protection clauses, adequacy decisions, or other legally recognized transfer mechanisms.

By using the BEPK Platform, you acknowledge and consent to the transfer of your personal data to countries outside the Philippines where necessary for the purposes described in this Privacy Policy, subject to the safeguards described above.

BEPK reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the features and functionality of the Platform. The date of the most recent update is displayed at the top of this page.

Where changes are material, BEPK will notify registered players via email or through a prominent notice on the Platform prior to the changes taking effect. Your continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how BEPK protects your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way BEPK processes your personal data, please contact our Data Protection Officer (DPO) or customer support team. We are available 24 hours a day, 7 days a week.

You may reach us via the live chat feature on the Platform, or by email at: [email protected] (plain text — not a clickable link).

BEPK aims to acknowledge all privacy-related inquiries within 24 hours and to resolve them within thirty (30) days. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.