mathbot Privacy Policy

This Privacy Policy applies to the mathbot online casino and sports betting platform, accessible at mathbot.bet (the "Platform", "We", "Us", "Our"). mathbot acts as the Personal Information Controller (PIC) in relation to the personal data of registered users and visitors, as defined under Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines (the "DPA").

This Privacy Policy governs the collection, use, storage, sharing, and protection of personal data in connection with your use of the mathbot Platform. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy should be read alongside our Terms & Conditions, which govern the overall relationship between mathbot and registered users.

mathbot collects only the personal data that is necessary for the purposes described in this Privacy Policy. The categories of personal data we collect are set out in the table below:

mathbot collects personal data through the following means:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or update your account settings.
• Automatically — when you access and use the Platform, our servers and analytics tools record technical data such as your IP address, device identifiers, browser type, session timestamps, and in-game activity logs.
• From payment providers — when you transact via GCash, Maya, BPI, BDO, UnionBank, Metrobank, 7-Eleven Cliqq, or Coins.ph, we receive transaction confirmation data from the respective payment processor necessary to credit or debit your mathbot account.
• From identity verification partners — mathbot works with licensed third-party KYC (Know Your Customer) service providers to verify government-issued Philippine IDs and perform liveness checks during account verification.
• From cookies and similar technologies — as described in Section 6 of this Privacy Policy.

mathbot does not purchase personal data lists from third-party data brokers, and does not collect personal data from your social media profiles without your explicit consent.

mathbot processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its IRR:

• Performance of a contract — Processing your registration data, deposits, withdrawals, bets, and account settings is necessary to provide you with the mathbot service.
• Legal obligation — Identity verification, transaction record-keeping, and suspicious transaction reporting are required by PAGCOR regulations and the Anti-Money Laundering Act of 2001 (AMLA), as amended.
• Legitimate interests — Fraud detection, platform security, abuse prevention, and improving the quality of the mathbot service are pursued as legitimate interests, balanced against your privacy rights.
• Consent — Marketing communications via SMS, email, and push notifications are processed only where you have provided explicit opt-in consent. You may withdraw this consent at any time through your account settings.

mathbot does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where expressly permitted by applicable law.

mathbot does not sell your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors — GCash, Maya, BPI, BDO, UnionBank, Metrobank, 7-Eleven (Cliqq), Coins.ph, and USDT TRC20 network operators receive only the data necessary to process your specific transaction.
• Identity verification providers — Licensed KYC service providers receive identity documents and biometric data solely for the purpose of account verification, under contractual data processing agreements.
• Game content providers — Third-party game providers (such as JILI, Pragmatic Play, and Evolution Gaming) may receive anonymised session identifiers to facilitate gameplay. They do not receive your full identity or financial data.
• Regulatory authorities — mathbot is legally required to share data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities upon lawful request or as required by regulation.
• Legal and professional advisers — Lawyers, auditors, and compliance consultants engaged by mathbot may access account data where necessary and are bound by confidentiality obligations.
• Fraud prevention networks — Shared fraud databases used to identify and prevent account fraud, identity theft, and money laundering across the Philippine online gaming industry.

mathbot uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the mathbot website. The following categories of cookies are used:

• Strictly necessary cookies — Required for the Platform to function. These include session authentication cookies that keep you logged in during a game session. These cannot be disabled.
• Functional cookies — Remember your preferences such as language settings, preferred payment method display, and responsible gaming settings you have configured.
• Analytics cookies — Used to understand how players navigate the Platform, which games are most popular, and where technical issues occur. Data collected is aggregated and anonymised wherever possible.
• Security cookies — Help detect and prevent fraudulent access attempts, CSRF attacks, and session hijacking.

mathbot does not use third-party advertising or behavioural tracking cookies. You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to the Platform.

mathbot implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your device and mathbot servers is protected by TLS 1.3 encryption. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Encryption at rest: Sensitive personal data — including government ID images, financial account details, and password hashes — is stored using AES-256 encryption.
• Access controls: Access to personal data is restricted to mathbot personnel and service providers who have a legitimate need. Role-based access control (RBAC) and multi-factor authentication are enforced for all internal systems.
• Penetration testing: mathbot undergoes regular security assessments and penetration tests by independent cybersecurity professionals to identify and address vulnerabilities.
• Incident response: mathbot maintains a documented data breach response plan. In the event of a personal data breach, we will notify affected users and the National Privacy Commission within the timeframes required by the DPA and its IRR.

mathbot retains your personal data for the minimum period necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable Philippine law, whichever is longer:

• Account and identity data: Retained for the duration of your active account plus five (5) years following account closure, as required by PAGCOR regulations and the AMLA.
• Transaction and betting records: Retained for a minimum of five (5) years from the date of each transaction, as required under Philippine anti-money laundering legislation.
• KYC documents (ID images, selfies): Retained for five (5) years from the date of verification, unless a longer period is required by a regulatory authority.
• Customer support records: Retained for two (2) years from the date of the last interaction on a support ticket.
• Marketing preference records: Retained for the duration of your account, plus one (1) year, as evidence of consent or opt-out status.

Upon expiry of the applicable retention period, personal data is securely deleted from mathbot systems or rendered permanently anonymous so that it can no longer be linked to any individual.

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by mathbot. You can exercise most of these rights directly through your account dashboard or by contacting our Data Protection Officer.

The mathbot Platform is strictly intended for persons aged 21 years and above, in accordance with Philippine gambling law. mathbot does not knowingly collect personal data from any person under the age of 21.

If mathbot becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete or restrict the personal data to the extent permitted by law, and take appropriate action in accordance with our obligations under PAGCOR regulations and the Data Privacy Act.

Some of mathbot's service providers and game content partners are based outside the Philippines. Where your personal data is transferred to a recipient in another country, mathbot ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections afforded under the Data Privacy Act of 2012.

Safeguards used for cross-border transfers include:

• Data processing agreements containing standard contractual clauses approved by the National Privacy Commission;
• Transfers only to countries or organisations that provide an adequate level of data protection as recognised by the NPC;
• Technical and organisational measures — including encryption and access controls — applied to data in transit and at rest at the recipient location.

mathbot limits cross-border data transfers to the minimum necessary and maintains a record of all such transfers as part of its data processing register.

mathbot may update this Privacy Policy from time to time to reflect changes in our data practices, Philippine legal requirements, NPC guidance, or the scope of the Platform's services. The effective date at the top of this page will be updated whenever a material change is made.

Where a material change affects the way we process your personal data, mathbot will provide prior notice through a prominent notification displayed when you next log in to the Platform. For minor, non-material updates, the revised policy will be posted on this page without a specific login notification.

Your continued use of the mathbot Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the changes, you should close your account and cease using the Platform before the effective date of the update.

mathbot has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data, you may contact the mathbot DPO through the following channels:

• Live Chat: Available 24/7 via the mathbot Platform — the fastest way to reach us for urgent data concerns.
• Email (plain text — not a clickable link): [email protected] — Please include "Data Privacy Request" in the subject line of your message.

Please include your registered account username, the nature of your request, and any relevant reference numbers to allow us to process your request efficiently. mathbot will acknowledge all data privacy requests within three (3) business days and will endeavour to resolve them within fifteen (15) business days.