citibet Privacy Policy

1 Introduction

Welcome to the citibet Privacy Policy. citibet ("we," "us," "our") operates the online betting and gaming platform accessible at citibet.xyz, offering Filipino players a wide range of products including sports betting, live casino games, bingo, and slot games.

We understand that your personal data is important to you, and we take our responsibility as a data controller seriously. This Privacy Policy explains in clear terms what personal information citibet collects from you, why we collect it, how we use and protect it, and what rights you have in relation to your data under Philippine law.

This Privacy Policy applies to all personal data collected through the citibet website, mobile platform, customer support channels, and any other citibet services. It should be read together with our Terms & Conditions, which govern your use of the citibet platform.

If you have any questions about this Privacy Policy or how citibet handles your personal data, please contact our Data Privacy Officer using the details provided in Section 14 of this policy.

2 Data Controller

For the purposes of the Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, citibet is the data controller responsible for the personal data collected through the citibet platform.

As data controller, citibet determines the purposes and means of processing your personal data. We are committed to processing your data lawfully, fairly, and transparently, and only for the purposes described in this Privacy Policy.

3 Personal Data We Collect

citibet collects the following categories of personal data from players and visitors to the citibet platform:

3.1 Identity & Registration Data

• Full legal name
• Date of birth (for age verification — players must be 21 years of age or older)
• Gender
• Government-issued identification number (e.g., Philippine National ID, passport, driver's licence)
• Username and password (stored in encrypted form)

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address (city, province, region within the Philippines)

3.3 Financial & Transaction Data

• Payment method details (e.g., GCash account number, PayMaya account, BPI, BDO, or Metrobank account details — as applicable)
• Deposit and withdrawal history
• Account balance and transaction records
• Bonus and promotional activity records

3.4 Gaming & Betting Activity Data

• Betting history, game session records, and wagering patterns
• Game preferences and product usage data
• Responsible gaming settings and self-exclusion records

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration and platform interaction logs
• Cookie identifiers and similar tracking data (see Section 9)

3.6 Communications Data

• Records of your communications with citibet customer support
• Feedback, survey responses, and complaints submitted to citibet

The table below summarises the main data categories and their primary purposes:

4 How We Collect Your Data

citibet collects personal data through the following means:

• Directly from you: When you register a citibet account, complete identity verification, make deposits or withdrawals, place bets, contact customer support, or respond to surveys and promotions.
• Automatically: When you access and use the citibet platform, we automatically collect technical and device data through cookies, log files, and similar tracking technologies (see Section 9).
• From third parties: citibet may receive data from identity verification service providers, payment processors (such as GCash, PayMaya, BPI, BDO, and Metrobank), fraud prevention services, and regulatory authorities where required by law.
• From publicly available sources: In limited circumstances, citibet may supplement your data with information from publicly available sources for the purposes of fraud prevention or regulatory compliance.

5 Purpose & Legal Basis for Processing

citibet processes your personal data only where we have a lawful basis to do so under the Data Privacy Act of 2012. The primary purposes for which citibet processes your personal data are as follows:

1. To provide and manage your citibet account — including registration, login authentication, account maintenance, and customer support. Legal basis: performance of a contract.
2. To process financial transactions — including deposits, withdrawals, and bonus payments via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods. Legal basis: performance of a contract.
3. To verify your identity and age — citibet is required to verify that all players are at least 21 years of age and to conduct Know Your Customer (KYC) checks in compliance with applicable regulations. Legal basis: legal obligation.
4. To prevent fraud, money laundering, and other financial crimes — citibet monitors transactions and account activity for suspicious patterns and is required to report certain activities to the relevant Philippine authorities. Legal basis: legal obligation; legitimate interest.
5. To comply with regulatory requirements — including obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012. Legal basis: legal obligation.
6. To promote responsible gaming — citibet monitors player behaviour to identify signs of problem gambling and to enforce responsible gaming tools such as deposit limits and self-exclusion. Legal basis: legal obligation; legitimate interest.
7. To improve the citibet platform — we use aggregated and anonymised data to analyse platform performance, identify technical issues, and develop new features. Legal basis: legitimate interest.
8. To send you service communications — including account notifications, security alerts, and updates to our Terms & Conditions or Privacy Policy. Legal basis: contract; legitimate interest.
9. To send you marketing communications — where you have given your consent, citibet may send you promotional offers, bonus notifications, and news about new games and features. Legal basis: consent. You may withdraw consent at any time.

6 Sharing Your Personal Data

citibet does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors and financial institutions: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• Identity verification and KYC providers: Third-party service providers that assist citibet in verifying the identity and age of players as required by applicable regulations.
• Fraud prevention and security services: Providers that help citibet detect and prevent fraudulent activity, money laundering, and other financial crimes on the platform.
• Technology and infrastructure providers: Cloud hosting, data storage, and platform technology providers that support the operation of the citibet platform. These providers process data on our behalf and are bound by strict data processing agreements.
• Regulatory and law enforcement authorities: citibet may be required by law to disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government authorities. citibet will comply with all lawful requests for disclosure.
• Professional advisers: Legal, accounting, and auditing firms that provide professional services to citibet, subject to confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of citibet's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

7 Data Retention

citibet retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations.

The following general retention periods apply:

• Account and identity data: Retained for the duration of your citibet account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering regulations.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act (AMLA) and related regulations.
• Gaming and betting activity data: Retained for the duration of your account and for a minimum of three (3) years following account closure.
• Customer support communications: Retained for a minimum of two (2) years from the date of the communication.
• Technical and device data: Generally retained for up to twelve (12) months, unless required for longer periods for security or fraud investigation purposes.
• Marketing consent records: Retained for the duration of your consent and for a reasonable period thereafter as evidence of consent.

When personal data is no longer required, citibet will securely delete or anonymise it in accordance with our data retention and disposal procedures.

8 Data Security

citibet takes the security of your personal data seriously and implements a range of technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the citibet platform is encrypted using 256-bit SSL/TLS encryption — the same standard used by Philippine banks and financial institutions.
• Password Security: Player passwords are stored using strong one-way cryptographic hashing algorithms. citibet staff cannot view your password in plain text.
• Access Controls: Access to personal data within citibet is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Secure Infrastructure: citibet's platform is hosted on secure, access-controlled servers with regular security patching, vulnerability scanning, and intrusion detection monitoring.
• Two-Factor Authentication: citibet supports two-factor authentication (2FA) for player accounts to provide an additional layer of security against unauthorised access.
• Regular Security Audits: citibet conducts regular internal and third-party security assessments to identify and address potential vulnerabilities in our systems.

While citibet implements robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your citibet login credentials and for ensuring that your device is adequately protected. If you suspect that your account has been compromised, please contact citibet support immediately.

9 Cookies & Tracking Technologies

citibet uses cookies and similar tracking technologies to enhance your experience on the platform, to analyse platform usage, and to support security and fraud prevention functions. A cookie is a small text file placed on your device when you visit a website.

citibet uses the following types of cookies:

• Strictly Necessary Cookies: These cookies are essential for the citibet platform to function correctly. They enable core features such as account login, session management, and security. These cookies cannot be disabled.
• Performance & Analytics Cookies: These cookies collect anonymised information about how players use the citibet platform — such as which pages are visited most frequently and whether error messages are received. This data helps us improve the platform.
• Functional Cookies: These cookies allow the citibet platform to remember your preferences and settings, such as your preferred language and display options, to provide a more personalised experience.
• Security Cookies: These cookies support citibet's fraud detection and account security systems by helping to identify unusual or suspicious activity on the platform.

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. However, please note that disabling certain cookies may affect the functionality of the citibet platform and your ability to access certain features.

10 Your Data Rights

Under the Data Privacy Act of 2012 of the Philippines and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by citibet:

• Right to be Informed: You have the right to be informed about how citibet collects, uses, and processes your personal data — which is the purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data that citibet holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request that citibet corrects any inaccurate or incomplete personal data held about you. You can update certain account details directly through your citibet account settings.
• Right to Erasure: You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected. Please note that citibet may be required to retain certain data for regulatory compliance purposes even after a deletion request.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests in certain circumstances.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Withdraw Consent: Where citibet processes your personal data based on your consent (e.g., for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Lodge a Complaint: If you believe that citibet has not handled your personal data in accordance with the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact our Data Privacy Officer at the email address provided in Section 14. citibet will respond to all data rights requests within fifteen (15) business days, in accordance with the requirements of the Data Privacy Act of 2012.

11 Minors & Age Restriction

The citibet platform is strictly intended for adults aged 21 years and above. citibet does not knowingly collect personal data from persons under the age of 21. This age restriction is a mandatory legal requirement under the PAGCOR regulatory framework governing online gaming in the Philippines.

citibet employs age verification procedures during the registration process to prevent access by underage individuals. If citibet discovers that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child under the age of 21 has registered a citibet account or provided personal data to citibet, please contact our support team immediately so that we can take appropriate action.

12 International Data Transfers

citibet primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to, or processed by, service providers located outside the Philippines — for example, cloud infrastructure providers or technology partners operating in other jurisdictions.

Where personal data is transferred outside the Philippines, citibet ensures that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012. These safeguards may include:

• Contractual clauses that require the recipient to protect personal data to the same standard as required under Philippine law.
• Transfers to countries or organisations that have been assessed as providing an adequate level of data protection.
• Other legally recognised transfer mechanisms as approved by the National Privacy Commission.

By using the citibet platform, you acknowledge and consent to the transfer of your personal data as described in this section, subject to the safeguards described above.

13 Changes to This Privacy Policy

citibet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made to this Privacy Policy, citibet will notify registered players by posting a prominent notice on the citibet platform or by sending a notification to the email address registered on your account.

The date of the most recent revision is always displayed at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how citibet protects your personal data. Your continued use of the citibet platform following the publication of any updated Privacy Policy constitutes your acceptance of the changes.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way citibet handles your personal data, please contact our Data Privacy Officer. Our support team is available 24 hours a day, 7 days a week, and is happy to assist players from Manila, Quezon City, Makati, Cebu, Davao, and all regions of the Philippines.

If you are not satisfied with citibet's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the independent authority responsible for enforcing the Data Privacy Act of 2012.

For more information about your rights and responsibilities as a citibet player, please also review our Terms & Conditions and our Responsible Gaming page.