buenas Privacy Policy

1. Privacy Policy Overview

This Privacy Policy ("Policy") describes how buenas ("buenas," "we," "us," or "our"), operating the online gaming platform at https://buenas.cam, collects, uses, discloses, stores, and protects personal information of users ("you," "your," or "Player") in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations, as well as other applicable Philippine data protection laws and regulations.

By registering an account, accessing the buenas Platform, or using any of our gaming services, you acknowledge that you have read, understood, and consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. This Policy applies to all personal data collected through our website, mobile applications, customer support channels, and any other means of interaction with buenas.

buenas is committed to protecting your privacy and ensuring the confidentiality, integrity, and security of your personal information. We implement industry-standard security measures, comply with regulatory requirements, and maintain transparent data practices to earn and maintain your trust as a valued member of the buenas gaming community.

2. Information We Collect

2.1 Personal Identification Information

When you register an account with buenas, we collect personal identification information necessary to verify your identity, comply with regulatory obligations, prevent fraud, and provide gaming services. This information includes:

• Full Legal Name: Your complete name as it appears on government-issued identification documents.
• Date of Birth: To verify that you meet the minimum age requirement of 21 years for online gaming in the Philippines.
• Gender: For demographic purposes and personalized service delivery.
• Residential Address: Your complete physical address including street, barangay, city, province, and postal code.
• Government-Issued ID Number: Philippine identification numbers such as passport number, driver's license number, Unified Multi-Purpose ID (UMID), PhilSys ID, or other valid government-issued identification.
• Nationality and Citizenship: To verify eligibility for using our services and comply with jurisdictional requirements.

2.2 Contact Information

To maintain communication with you regarding your account, transactions, promotional offers, and customer support matters, we collect:

• Email Address: Your primary email address for account registration, verification, and communications.
• Mobile Phone Number: Philippine mobile number for two-factor authentication, security alerts, and SMS notifications.
• Alternative Contact Information: Additional email addresses or phone numbers you provide for account recovery purposes.

2.3 Financial and Transaction Information

To process deposits, withdrawals, and gaming transactions, buenas collects financial information including:

• Payment Method Details: Information about your chosen payment methods including GCash account details, bank account numbers for BPI, BDO, UnionBank, and other banks, cryptocurrency wallet addresses, and e-wallet credentials.
• Transaction History: Complete records of all deposits, withdrawals, bets placed, winnings, bonuses claimed, and account adjustments.
• Source of Funds Information: Documentation regarding the source of deposited funds, required for anti-money laundering compliance when deposits exceed certain thresholds.
• Payment Verification Documents: Bank statements, utility bills, or other documents verifying payment method ownership.

2.4 Technical and Usage Information

When you access the buenas Platform, we automatically collect technical information about your device, connection, and usage patterns:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifier (IMEI, MAC address), and mobile network information.
• IP Address and Geolocation: Your Internet Protocol (IP) address and approximate geographic location to verify that you are accessing our services from within the Philippines and to detect suspicious login attempts.
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixel tags, and similar technologies about your browsing behavior, preferences, and interactions with our Platform.
• Session and Activity Logs: Records of your login times, logout times, pages viewed, games played, bets placed, time spent on Platform, and navigation patterns.
• Clickstream Data: Information about the links you click, features you use, and actions you take on the Platform.

2.5 Communication and Support Information

When you contact buenas customer support or communicate with us through any channel, we collect and retain:

• Support Tickets and Inquiries: The content of your questions, complaints, feedback, and support requests submitted through live chat, email, or phone.
• Call Recordings: Audio recordings of telephone conversations with our support team (with your consent and notification).
• Chat Transcripts: Complete transcripts of live chat conversations with customer support representatives.
• Correspondence: Emails, messages, and other communications exchanged between you and buenas.

2.6 Verification and KYC Documents

To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations, we may collect and verify:

• Identity Verification Documents: Scanned copies or photographs of government-issued IDs, passports, driver's licenses, or other official identification documents.
• Proof of Address: Utility bills, bank statements, or government correspondence showing your current residential address.
• Selfie Verification: Photographs of you holding your identification document for facial recognition verification.
• Enhanced Due Diligence Documents: Additional documentation for high-value players or when required by regulatory authorities.

3. How We Use Your Personal Data

buenas processes your personal information for the following legitimate business purposes and legal obligations:

3.1 Account Management and Service Provision

• Creating and managing your player account and user profile.
• Authenticating your identity during login and verifying account ownership.
• Processing gaming transactions, including bet placement, winnings calculation, and payout processing.
• Managing deposits, withdrawals, and account balances.
• Providing access to gaming products including slots, live casino, sports betting, and other gaming services.
• Maintaining transaction history and account activity records.

3.2 Regulatory Compliance and Legal Obligations

• Verifying that you meet the minimum age requirement of 21 years to participate in online gaming.
• Complying with Philippine Anti-Money Laundering Act (AMLA) regulations and Know Your Customer (KYC) requirements.
• Detecting and preventing money laundering, terrorist financing, and other financial crimes.
• Complying with regulatory reporting obligations to PAGCOR and other government authorities.
• Responding to legal requests, court orders, subpoenas, and law enforcement inquiries.
• Maintaining records as required by gaming regulations and tax laws.

3.3 Security, Fraud Prevention, and Risk Management

• Detecting and preventing fraudulent activities, account abuse, bonus abuse, and unauthorized access.
• Identifying multiple accounts, collusion, chip dumping, and other prohibited activities.
• Monitoring betting patterns and transactions for suspicious activity.
• Implementing two-factor authentication and other security measures.
• Protecting against hacking attempts, cyber attacks, and security breaches.
• Investigating disputes, complaints, and potential Terms of Service violations.

3.4 Customer Support and Communication

• Responding to your inquiries, questions, and support requests.
• Providing technical assistance and troubleshooting account issues.
• Resolving disputes related to transactions, bets, or account activities.
• Sending transactional communications including deposit confirmations, withdrawal notifications, and account alerts.
• Providing updates about changes to our Terms, Privacy Policy, or services.

3.5 Marketing, Promotions, and Personalization

With your consent, we may use your information to:

• Send promotional emails, SMS messages, and push notifications about bonuses, special offers, and tournaments.
• Personalize your gaming experience based on your preferences and playing history.
• Recommend games and betting options that match your interests.
• Conduct market research, surveys, and feedback collection to improve our services.
• Analyze customer behavior and preferences to develop new products and features.

You may opt out of marketing communications at any time through your account settings or by contacting customer support.

3.6 Analytics and Platform Improvement

• Analyzing Platform usage patterns to improve user experience and functionality.
• Monitoring Platform performance, identifying technical issues, and optimizing system operations.
• Conducting statistical analysis and generating aggregated reports on gaming trends.
• Testing new features, games, and services before wider release.
• Enhancing security measures and fraud detection capabilities.

4. Data Sharing and Disclosure

buenas does not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information only in the following circumstances:

4.1 Service Providers and Business Partners

We share personal data with trusted third-party service providers who assist us in operating the Platform and delivering services:

• Payment Processors: GCash, PayMaya, banks (BPI, BDO, UnionBank), and cryptocurrency payment gateways to process deposits and withdrawals.
• Gaming Software Providers: Companies that develop and operate the games available on our Platform, including slots, live dealer games, and sports betting systems.
• Identity Verification Services: Third-party KYC and identity verification providers that help us confirm player identity and prevent fraud.
• Cloud Storage and Hosting Providers: Companies that provide data storage, server hosting, and cloud computing infrastructure.
• Customer Support Platforms: Third-party systems used to manage customer inquiries, live chat, and support ticketing.
• Marketing and Communication Services: Email service providers, SMS gateways, and push notification platforms for delivering communications.

All service providers are bound by strict confidentiality obligations and data protection agreements. They are permitted to use your personal information only for the specific purposes for which it was disclosed and are required to implement appropriate security measures.

4.2 Regulatory Authorities and Legal Compliance

We may disclose personal information to government authorities, regulators, and law enforcement agencies when required by law or to comply with legal obligations:

• Philippine Amusement and Gaming Corporation (PAGCOR) for licensing and regulatory compliance.
• Anti-Money Laundering Council (AMLC) for suspicious transaction reporting and AML compliance.
• National Privacy Commission (NPC) in response to data protection inquiries or investigations.
• Bureau of Internal Revenue (BIR) for tax reporting and withholding tax compliance.
• Philippine National Police (PNP) or National Bureau of Investigation (NBI) in criminal investigations.
• Courts and judicial authorities in response to court orders, subpoenas, or legal proceedings.

4.3 Business Transfers and Corporate Transactions

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor company. You will be notified via email or prominent notice on the Platform of any change in ownership or control of your personal data.

4.4 Protection of Rights and Safety

We may disclose personal information when we believe in good faith that disclosure is necessary to:

• Protect the rights, property, or safety of buenas, our employees, or other users.
• Detect, prevent, or investigate security incidents, fraud, or illegal activities.
• Enforce our Terms and Conditions, Privacy Policy, or other agreements.
• Respond to claims that content or activities violate the rights of third parties.
• Comply with legal obligations or exercise legal rights.

4.5 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for analytics, research, marketing, or business intelligence purposes. Such data does not constitute personal information under this Privacy Policy.

5. Data Security Measures

buenas implements comprehensive technical, organizational, and administrative security measures to protect your personal information from unauthorized access, use, alteration, disclosure, or destruction:

5.1 Technical Security Controls

• Encryption: All data transmitted between your device and our servers is protected using 256-bit SSL/TLS encryption. Sensitive data stored in our databases is encrypted at rest using industry-standard encryption algorithms.
• Firewalls and Intrusion Detection: Multi-layered firewalls and intrusion detection/prevention systems monitor and protect our network infrastructure from cyber attacks.
• Secure Authentication: Two-factor authentication (2FA), strong password requirements, and session management controls protect account access.
• Access Controls: Role-based access controls ensure that only authorized personnel can access personal data on a need-to-know basis.
• Security Monitoring: 24/7 security monitoring, log analysis, and threat detection systems identify and respond to security incidents in real-time.

5.2 Organizational Security Measures

• Employee Training: All employees receive mandatory data protection and security awareness training.
• Confidentiality Agreements: Employees and contractors sign confidentiality agreements obligating them to protect personal information.
• Security Policies: Comprehensive information security policies govern data handling, access, and protection practices.
• Incident Response Plan: Documented procedures for detecting, responding to, and recovering from security breaches.
• Vendor Management: Third-party service providers undergo security assessments and are contractually obligated to maintain appropriate security standards.

5.3 Data Breach Notification

In the unlikely event of a data breach that compromises your personal information, buenas will notify affected users and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by the Data Privacy Act. Notification will include information about the nature of the breach, the data affected, potential consequences, and measures taken to address the breach.

6. Data Retention and Deletion

buenas retains personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

6.1 Retention Periods

Data Category	Retention Period	Legal Basis
Account Registration Information	Duration of account plus 5 years after closure	Gaming regulations, tax compliance
Transaction Records	5 years after transaction date	Anti-Money Laundering Act, BIR requirements
KYC and Verification Documents	5 years after account closure	AML/CFT compliance, regulatory requirements
Gaming Activity Logs	3 years	Dispute resolution, fraud investigation
Customer Support Communications	3 years after last interaction	Quality assurance, dispute resolution
Marketing Consent Records	Duration of consent plus 2 years	Data Privacy Act compliance

6.2 Account Closure and Data Deletion

When you close your buenas account, we will:

• Deactivate your account and prevent future logins.
• Process any pending withdrawals of remaining account balance.
• Retain data required for legal and regulatory compliance for the periods specified above.
• Delete or anonymize personal data that is no longer required after applicable retention periods expire.

Please note that we cannot delete personal information that we are legally required to retain for regulatory, tax, or legal purposes. Certain data may also be retained in backup systems for a limited period.

7. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal information:

7.1 Right to Be Informed

You have the right to be informed about the collection, use, and disclosure of your personal data. This Privacy Policy fulfills our obligation to inform you about our data practices.

7.2 Right to Access

You have the right to request access to your personal data held by buenas. You may request copies of your account information, transaction history, and other personal data we maintain. Access requests can be made through your account settings or by contacting our Data Protection Officer.

7.3 Right to Rectification

You have the right to correct inaccurate or incomplete personal information. You can update most of your personal information directly through your account settings. For changes to verified information (name, date of birth, identification documents), please contact customer support with supporting documentation.

7.4 Right to Erasure or Blocking

You have the right to request deletion or blocking of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or when you withdraw consent. This right is subject to legal limitations where we are required to retain data for regulatory or legal compliance.

7.5 Right to Object

You have the right to object to processing of your personal data for direct marketing purposes. You can opt out of marketing communications at any time through your account settings or by clicking the unsubscribe link in promotional emails.

7.6 Right to Data Portability

You have the right to request a copy of your personal data in a structured, commonly used, and machine-readable format. You may also request that we transfer your data directly to another service provider where technically feasible.

7.7 Right to File a Complaint

If you believe that buenas has violated your privacy rights or failed to comply with data protection laws, you have the right to file a complaint with the National Privacy Commission of the Philippines. Contact information for the NPC is available at privacy.gov.ph.

7.8 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with your full name, account username, and a description of your request. We will respond to verified requests within fifteen (15) days as required by law. We may require identity verification before processing requests to ensure data security.

8. Cookies and Tracking Technologies

buenas uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience on our Platform, analyze usage patterns, and deliver personalized content and advertisements.

8.1 Types of Cookies We Use

• Essential Cookies: Required for Platform functionality, including session management, authentication, and security. These cookies cannot be disabled.
• Performance Cookies: Collect information about how you use the Platform, including pages visited, time spent, and errors encountered, to improve Platform performance.
• Functional Cookies: Remember your preferences, settings, and choices to provide a personalized experience.
• Analytics Cookies: Help us understand user behavior, measure audience size, and analyze usage patterns using tools like Google Analytics.
• Marketing Cookies: Track your browsing activity to deliver relevant advertisements and measure advertising campaign effectiveness.

8.2 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Please note that disabling cookies may affect Platform functionality and prevent you from accessing certain features. You can manage cookie preferences through your browser settings or through our cookie consent manager available on the Platform.

8.3 Third-Party Tracking

Our Platform may contain links to third-party websites and integrations with third-party services that use their own cookies and tracking technologies. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

9. International Data Transfers

buenas primarily stores and processes personal data within the Philippines. However, some of our service providers, including cloud hosting providers, payment processors, and gaming software providers, may be located outside the Philippines. When we transfer personal data internationally, we ensure that appropriate safeguards are in place to protect your information in accordance with the Data Privacy Act.

International data transfers are conducted under legal mechanisms such as Standard Contractual Clauses, adequacy decisions recognizing equivalent data protection standards, or other approved transfer mechanisms. We verify that third-party recipients maintain adequate security measures and comply with applicable data protection requirements.

By using buenas services, you acknowledge and consent to the transfer of your personal data to third countries for the purposes described in this Privacy Policy, subject to the safeguards outlined above.

10. Protection of Minors

buenas is committed to preventing underage gambling and protecting the privacy of minors. Our services are intended exclusively for individuals who are at least twenty-one (21) years of age. We do not knowingly collect personal information from individuals under the age of 21.

During account registration, all users must verify that they meet the minimum age requirement. We implement age verification procedures, including identity document verification and third-party age validation services, to prevent minors from accessing our Platform.

If we discover that we have inadvertently collected personal information from a minor, we will promptly delete such information from our systems and close the account. If you believe that a minor has registered an account with buenas, please contact us immediately at [email protected] so we can take appropriate action.

Parents and guardians are encouraged to monitor their children's internet usage and use parental control tools to prevent access to online gaming websites.

11. Changes to This Privacy Policy

buenas reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Changes become effective immediately upon posting to the Platform unless otherwise specified.

We will notify you of material changes to this Privacy Policy through email notification sent to your registered email address, prominent notice on the Platform homepage, or through your account dashboard. We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal information.

Your continued use of the buenas Platform following the posting of changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with any modifications, you must immediately cease using our services and may request account closure.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent changes were made.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Data Protection Officer

• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 through the Platform
• Response Time: Privacy-related inquiries answered within 15 days

National Privacy Commission

If you wish to file a complaint regarding our data practices:

• Website: privacy.gov.ph
• Email: [email protected]
• Hotline: (02) 8234-2228