1. Who We Are — The Data Controller
BR234 (operating at br234.best) is the data controller responsible for the personal data of all registered players and website visitors in the Philippines. BR234 operates under a valid PAGCOR (Philippine Amusement and Gaming Corporation) license and is subject to the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, or "DPA") and its Implementing Rules and Regulations.
As data controller, BR234 determines the purposes and means of processing your personal data. We are accountable for ensuring that your data is handled lawfully, fairly, and transparently — and that your rights as a data subject under Philippine law are respected at all times.
For all privacy-related inquiries, requests, and complaints, you may contact the BR234 Data Privacy Officer (DPO) directly at privacy@br234.best. We commit to acknowledging all data privacy requests within 3 business days and resolving them within 30 calendar days in accordance with the DPA.
2. What Personal Data We Collect
BR234 collects personal data that is necessary to operate a licensed online gaming platform, verify player identities, process payments, and comply with PAGCOR and Philippine AML (Anti-Money Laundering) regulations. We do not collect data beyond what is genuinely needed for these purposes.
| Data Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number and type (PhilSys, passport, driver's license, UMID) | At registration and KYC verification |
| Contact Data | Mobile number (Philippine), email address, residential address in the Philippines | At registration |
| Financial Data | GCash number, Maya account, bank account name and number, transaction history on BR234 (deposits, withdrawals, bet settlements) | At first deposit and withdrawal |
| Account Activity Data | Login timestamps, session durations, games played, bets placed, bet amounts, winnings and losses, bonus activity | Ongoing during platform use |
| Technical Data | IP address, device type, operating system, browser type, screen resolution, cookies, session identifiers | Automatically on site visit |
| Communications Data | Support chat transcripts, email correspondence, complaint records | When you contact BR234 support |
| Verification Documents | Scanned or photographed government IDs, selfies with ID (for liveness verification), proof of payment method ownership | During KYC/AML verification |
BR234 does not collect sensitive personal information such as health or medical records, religious beliefs, sexual orientation, or political affiliations — except where directly required by PAGCOR regulation or Philippine law (for example, proof of self-exclusion status).
3. Why We Collect Your Data — Our Purposes
Every piece of data that BR234 collects has a specific, documented purpose. We do not collect data "just in case" — each category serves a defined operational, legal, or regulatory function:
- Account creation and management: Your identity and contact data is needed to create, verify, and maintain your BR234 account and to communicate with you about your account.
- Age and identity verification (KYC): Philippine law and PAGCOR regulations require BR234 to verify that all players are at least 21 years of age and are who they claim to be. This requires government-issued ID documents.
- Payment processing: Financial data is required to process GCash and Maya deposits, bank transfers, and withdrawals. We must retain this data to reconcile transactions and handle payment disputes.
- Anti-Money Laundering (AML) compliance: As a PAGCOR-licensed operator, BR234 is required under Republic Act No. 9160 (Anti-Money Laundering Act) and related regulations to monitor transactions for suspicious activity and report to the AMLC (Anti-Money Laundering Council) where required.
- Responsible gaming: Account activity data helps BR234 identify patterns of potentially problematic gambling behaviour and reach out to affected players with support information. This is a PAGCOR compliance requirement and a genuine player welfare obligation.
- Fraud prevention and platform security: Technical data, IP addresses, and session information help BR234 detect and prevent fraudulent activity, multi-accounting, and security breaches.
- Customer support: Communications data allows our support team to resolve your queries accurately and maintain a record of all support interactions for quality assurance.
- Product improvement: Aggregated, anonymised usage data helps BR234 understand how players use the platform and identify areas for improvement. This analysis does not involve identifiable individual data.
- Marketing communications: With your consent, BR234 may send you information about promotions, new features, and relevant updates. You can withdraw consent at any time through your account settings or by emailing privacy@br234.best.
4. Legal Basis for Processing
Under the Philippine Data Privacy Act, BR234 processes your personal data on the following legal bases:
- Contractual necessity: Processing of identity, contact, and financial data is necessary to fulfil our obligations to you as a player under the BR234 Terms and Conditions — including account management, payment processing, and bet settlement.
- Legal obligation: Processing for KYC, AML monitoring, and PAGCOR regulatory reporting is required by Philippine law, regardless of player consent. BR234 cannot legally operate without conducting this processing.
- Legitimate interests: Security monitoring, fraud prevention, and platform integrity measures are based on BR234's legitimate interest in protecting the platform and all players from harm. These interests are not overridden by individual privacy interests in the context of a licensed gaming platform.
- Consent: Marketing communications and non-essential cookies are processed on the basis of your freely given, informed consent. You may withdraw this consent at any time without affecting your account standing.
5. Cookies & Tracking Technologies
BR234 uses cookies and similar technologies on br234.best to make the platform work, improve your experience, and — with your consent — to understand how the platform is used. Here's what each type of cookie does:
- Essential cookies (always active): These are necessary for the br234.best platform to function. They maintain your login session, store your preferences, and enable core features like the betting slip and cashier. You cannot opt out of essential cookies without disabling the platform entirely.
- Functional cookies (consent required): These remember your preferences — your language setting, your preferred deposit method, and similar personalisation choices — so you don't have to re-enter them every session.
- Analytics cookies (consent required): BR234 uses aggregated analytics data to understand how players navigate the platform — which pages are visited most, where players encounter difficulties, and which features are most used. This data is anonymised and used only for product improvement.
- Marketing cookies (consent required): If you have opted in to BR234 promotional communications, marketing cookies help us ensure the promotions and offers you see are relevant to your interests. BR234 does not share cookie data with third-party advertisers.
You can manage your cookie preferences at any time through the Cookie Settings option in the BR234 footer or through your browser's settings. Withdrawing cookie consent does not affect your account or your ability to use the platform's core features.
6. How and When We Share Your Data
BR234 does not sell, rent, or trade your personal data to any third party for commercial purposes. Period. Data is shared only in the limited circumstances described below, and only to the minimum extent necessary:
- Payment processors: When you deposit or withdraw via GCash, Maya, BDO, BPI, UnionBank, or other payment channels, your financial data is shared with that payment provider to process the transaction. These providers operate under their own privacy policies and applicable Philippine regulations.
- Identity verification providers: BR234 may use PAGCOR-approved third-party KYC providers to verify identity documents. These providers process your data under strict contractual data protection terms and do not retain your data beyond the verification purpose.
- PAGCOR and Philippine regulators: As a licensed operator, BR234 is legally required to provide player data to PAGCOR upon request, and to report suspicious transactions to the AMLC (Anti-Money Laundering Council) under Republic Act No. 9160. These disclosures are legal obligations — BR234 cannot refuse them.
- Philippine law enforcement: BR234 will disclose player data to the Philippine National Police, NBI, or other law enforcement agencies when lawfully required to do so via court order, subpoena, or equivalent legal instrument.
- Technology and hosting partners: BR234's platform infrastructure is operated on servers physically located in the Philippines. Our hosting and platform technology partners access data solely to provide their services to BR234 and are bound by data processing agreements that prohibit independent use of player data.
- Professional advisors: BR234's legal, audit, and compliance advisors may access limited player data where necessary for regulatory filings, audit processes, or legal advice. All such advisors are bound by professional confidentiality obligations.
In all cases where BR234 shares data with service providers, we maintain data processing agreements that require those providers to handle your data only as instructed by BR234, to implement appropriate security measures, and to delete the data when the purpose is fulfilled.
7. How We Protect Your Data
BR234 implements the same level of security used by Philippine commercial banks to protect player data. Our security measures include both technical controls and operational procedures:
- 256-bit SSL/TLS encryption: All data transmitted between your device and br234.best is encrypted in transit using 256-bit SSL/TLS — the same standard used by BDO, BPI, and GCash. This prevents interception by any third party.
- Encrypted data storage: All personal data stored in BR234's databases is encrypted at rest. Even in the unlikely event of a physical breach of our servers, the data would not be readable without the encryption keys.
- Access controls: BR234 staff access to player data is role-based and logged. Only staff with a documented operational need to access specific data categories can do so, and all access is logged with timestamps and purpose. No BR234 employee has unrestricted access to the full player database.
- Two-factor authentication: All internal BR234 administrative systems require multi-factor authentication. Players are also encouraged — and can choose — to enable 2FA on their own accounts via account settings.
- Regular penetration testing: BR234 contracts independent cybersecurity professionals to conduct regular penetration tests and vulnerability assessments of the br234.best platform and its underlying infrastructure.
- Security incident response: BR234 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to player rights, we will notify affected players and the National Privacy Commission (NPC) within 72 hours as required under the DPA.
8. How Long We Keep Your Data
BR234 retains personal data only for as long as necessary for the purposes it was collected, and in compliance with Philippine legal and regulatory retention requirements. The key retention periods at BR234 are:
- Account data and transaction history: Retained for a minimum of 5 years from account closure, in compliance with PAGCOR regulations and Philippine AML law requirements. This includes your identity documents, deposit and withdrawal records, and bet history.
- KYC verification documents: Retained for 5 years from the date of verification or from account closure, whichever is later.
- Support communications: Retained for 3 years from the date of the communication for quality assurance and dispute resolution purposes.
- Session and technical data: Retained for 12 months for security monitoring and fraud detection purposes.
- Marketing consent records: Retained for the duration of your account and for 2 years after account closure, to demonstrate compliance with DPA consent requirements.
When the applicable retention period expires, BR234 securely deletes or anonymises your personal data. Anonymised, aggregated data (from which individuals cannot be identified) may be retained indefinitely for statistical and product research purposes.
9. Your Rights Under the Philippine Data Privacy Act
As a registered player at BR234, you are a data subject under the Philippine Data Privacy Act of 2012. The DPA grants you the following rights with respect to your personal data:
Right to Be Informed
You have the right to know that BR234 is collecting your personal data, why it is being collected, and how it will be used. This Privacy Policy is BR234's fulfilment of this right.
Right of Access
You may request a copy of all personal data BR234 holds about you. We will provide this within 30 days of a verified request submitted to privacy@br234.best.
Right to Correction
If any personal data BR234 holds about you is inaccurate, incomplete, or outdated, you have the right to request that we correct it. Contact support or the DPO with updated information and supporting documentation.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where the processing was unlawful — subject to BR234's legal retention obligations under PAGCOR and AML regulations.
Right to Object
You may object to processing of your personal data based on BR234's legitimate interests or for direct marketing. An objection to marketing communications will be processed immediately.
Right to Data Portability
You may request your personal data in a structured, commonly used, machine-readable format (such as CSV) for transfer to another service provider. This applies to data processed on the basis of consent or contract.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time via account settings or by emailing privacy@br234.best. Withdrawal does not affect the lawfulness of prior processing.
Right to Lodge a Complaint
If you believe BR234 has not handled your data in accordance with the DPA, you may lodge a complaint with the National Privacy Commission (NPC) of the Philippines. BR234 will cooperate fully with any NPC investigation.
10. Children's Privacy
BR234 is strictly an adults-only platform. Philippine law and PAGCOR regulations require all online gaming participants to be at least 21 years of age. BR234 does not knowingly collect, store, or process personal data of individuals under 21 years of age.
If BR234 discovers that an account has been created by or for a person under 21, the account will be immediately suspended, all funds returned to the verified payment method where possible, and the account permanently closed. Identity documents confirming the account holder's age will be requested before any funds are released.
If you are a parent or guardian and believe that a person under 21 has registered at BR234 using false information, please contact support@br234.best immediately with the details. BR234 will investigate and act promptly.
11. Third-Party Links
The br234.best website may contain links to third-party websites — for example, links to GCash, Maya, or Philippine news sources in blog content. This Privacy Policy applies only to br234.best and BR234's services. When you follow a link to a third-party site, you leave the BR234 platform and that site's own privacy policy governs any data you provide to them.
BR234 does not endorse or assume responsibility for the privacy practices of any third-party websites linked from br234.best. We recommend that you read the privacy policy of any website you visit before providing personal information.
12. Changes to This Privacy Policy
BR234 may update this Privacy Policy from time to time to reflect changes in Philippine data privacy law, PAGCOR regulatory requirements, or our operational practices. When material changes are made, BR234 will:
- Update the "Last Updated" date at the top of this page.
- Send an email notification to all registered players at their BR234-registered email address at least 7 days before the updated policy takes effect.
- Display a prominent notice on br234.best for at least 7 days before the updated policy becomes effective.
Your continued use of BR234 after the effective date of any policy update constitutes acceptance of the revised Privacy Policy. If you do not agree with any changes, you may close your account by contacting BR234 support — your verified balance will be returned in full.
For minor changes (such as clarifications that do not affect the substance of how we handle data), BR234 may update the policy without active notification, though the "Last Updated" date will always reflect the most recent revision.
13. Contact Us & Data Privacy Officer
For any questions, concerns, or requests relating to this Privacy Policy or BR234's handling of your personal data, please contact:
If you are unsatisfied with BR234's response to a data privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines (NPC). BR234 will cooperate fully with all NPC investigations and directives.