From the first moment you land on our platform, this Privacy Policy outlines the clear and straightforward commitment BIGBUNNY makes to protecting your personal information. We operate with full transparency, ensuring you understand what data we collect, why we need it, and how we keep it secure. This document is not just a legal formality; it’s our direct promise to you, built on the foundations of Philippine law and designed to give you complete control over your data.
Your Data, Your Rights: Understanding BIGBUNNY’s Approach
As a PAGCOR-licensed operator, we have a duty to not only provide a fair gaming environment but also to uphold the strictest standards of data protection. For us, this isn’t about minimal compliance; it’s about building lasting trust with our players. You have a right to know exactly how your information makes your gaming experience possible and safe. The data you share allows us to verify you are of legal age (18+), process your GCash and Maya transactions without delay, and protect the entire community from fraudulent activity.
What Types of Information Do We Collect?
We only collect data that is essential for operating a secure and legal online gaming platform in the Philippines. We don’t ask for information we don’t need. The collection is tied directly to specific functions like account creation, identity verification, and payment processing. Below is a plain-language summary of the data categories and their direct purpose.
| Data Category | Specific Examples of Data | Primary Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, government-issued ID. | Know Your Customer (KYC) verification to comply with PAGCOR regulations and prevent underage gaming. |
| Contact Data | Mobile number, email address. | Account security (2FA), important service announcements, and processing cash-out requests. |
| Financial Data | GCash or Maya account number, bank account details. | To process your cash-in and cash-out transactions smoothly and accurately. |
| Transaction Data | Bet history, deposit and withdrawal amounts and times. | Account management, responsible gaming checks, and financial reconciliation. |
| Technical Data | IP address, device type, browser information. | Fraud detection, platform security, and optimizing the site for your device. |
How We Use Your Personal Data
Every piece of data listed above has a specific, legitimate job. We use your Identity and Contact Data primarily for account setup and mandatory KYC checks. This is a non-negotiable step required by our regulator, PAGCOR, to ensure all players are real people and over 18. Your Financial Data is used exclusively to execute your payment commands—when you request a cash-in from your e-wallet or a cash-out to your bank, this data facilitates that transfer. We never store your full payment credentials on our servers. Instead, we use secure tokens to communicate with payment gateways like GCash. Transaction Data is vital for maintaining your account history, settling bets correctly, and providing you with an accurate statement of your activity. Finally, Technical Data is our first line of defense, helping our systems spot unusual login patterns or potential security threats, keeping your account safe.
Ensuring Data Security and Trust
Your trust is earned, not given. At BIGBUNNY, we earn it by implementing solid, multi-layered security measures that protect your data from the moment you sign up. This isn’t just about firewalls; it’s a comprehensive strategy involving technology, people, and processes, all designed to keep your information confidential and intact.
BIGBUNNY protects your personal data with robust, multi-layered security protocols.
Our Technical and Organizational Safeguards
We deploy a defense-in-depth security model. This means multiple layers of protection are in place so that if one fails, others are still active. Here’s what that looks like in practice:
- Encryption in Transit: All data exchanged between your device and our servers is protected using Transport Layer Security (TLS 1.3), the same encryption standard used by banks. This prevents anyone from intercepting your data as it travels over the internet.
- Encryption at Rest: Once your data is on our servers, it isn’t just sitting there in plain text. Sensitive information is encrypted using the AES-256 algorithm. This makes the data unreadable even in the unlikely event of a direct server breach.
- Access Control: Within our team, we operate on the principle of ‘least privilege.’ This means employees can only access the specific information necessary to do their job. For example, a customer support agent helping with a deposit can see transaction details but not your account password.
- Regular Audits: Our security systems and protocols are regularly audited by independent third-party experts to identify and remedy any potential vulnerabilities.
Compliance with the Philippine Data Privacy Act
Our entire data handling framework is built to strictly adhere to the Republic Act No. 10173, also known as the Data Privacy Act of 2012. This is the cornerstone of data protection law in the Philippines, and it grants you fundamental rights. For you, this means we are legally bound to follow its core principles: transparency, legitimate purpose, and proportionality. We must be open about how we use your data, have a valid reason for collecting it, and only collect what is truly needed. This law is your assurance that your privacy is not just our policy, but our legal obligation, overseen by the National Privacy Commission (NPC).
Managing Your Information and Consent
Your data belongs to you. We are simply its custodians while you have an active account with us. This means you have the power to view, amend, and control how it’s used. We’ve made these controls as accessible as possible directly within your account profile, ensuring you don’t have to jump through hoops to manage your own information.
Your personal information is secured by encryption, preventing unauthorized access at BIGBUNNY.
Accessing, Correcting, and Deleting Your Data
You can review most of your personal information, such as your contact number and past transactions, at any time by logging in and visiting your account dashboard. If you spot an error, like a typo in your registered name or an old mobile number, you can request a correction. For security reasons, changes to critical details like your name or date of birth will require you to contact our support team and may involve re-submitting a valid ID. This extra step ensures no one but you can alter your core identity details.
You also have the right to request the deletion of your personal data. Please understand that due to legal and regulatory requirements (like anti-money laundering laws), we are required to retain certain transaction and identity data for a specific period even after you close your account. Once this mandatory retention period expires, your data is permanently and securely erased from our active systems.
How to Withdraw Consent or Lodge a Complaint
Withdrawing consent is straightforward. For marketing communications like promotional SMS or emails, you can opt-out at any time by clicking the ‘unsubscribe’ link found at the bottom of every message. This will not affect your ability to use the platform. Withdrawing consent for the core processing of your data (e.g., for KYC and payments) would mean we can no longer legally provide you with our gaming services, and this action would necessitate the closure of your account. If you feel we have mishandled your data or violated your rights, we urge you to first contact our Data Protection Officer directly. This allows us to address your concerns immediately. If you are not satisfied with the resolution, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines.
Responsible Processing: Transparency and Accountability
Our commitment to privacy extends beyond our own platform. We are also accountable for how your data is handled when we must share it with trusted partners to deliver our services. This sharing is minimal, necessary, and conducted under strict contractual agreements that legally bind our partners to the same high data protection standards that we uphold.
BIGBUNNY ensures your data stays private with strict compliance to national privacy laws.
Third-Party Data Sharing Practices
We do not and will never sell your personal data to unrelated marketing companies. That is a firm promise. We only share information with third parties when it is essential for the platform to function. These include:
- Payment Processors: To facilitate your GCash, Maya, and bank transfers, we must securely transmit transaction details to these financial providers.
- KYC Verification Services: To validate the identity documents you provide, we use specialized, secure services that check them against official records.
- Platform Service Providers: We work with technical partners for services like data hosting and security monitoring. These partners are chosen through a rigorous vetting process.
Each partner is bound by a Data Processing Agreement, a legal contract that restricts them to using your data only for the specific purpose we’ve hired them for and requires them to maintain robust security measures.
Data Retention Periods and Anonymization
We do not keep your personal data forever. Our retention policy is governed by legal obligations and practical needs. For example, under Philippine Anti-Money Laundering Act (AMLA) regulations, we are required to keep records of your identity and financial transactions for at least five years. After this legal retention period ends and you no longer have an active account, your personally identifiable information is put through a process of secure deletion or anonymization. Anonymized data—which has all personal identifiers like your name and contact info stripped away—may be retained for statistical analysis to help us understand general player trends and improve our services without ever knowing who the data belonged to. This careful management is a key part of our Privacy Policy commitment.
Contacting Our Data Protection Officer (DPO)
For any questions, concerns, or requests regarding your personal data that aren’t answered here, you have a direct line to our Data Protection Officer. The DPO is a designated individual responsible for overseeing our compliance with data privacy laws and acting as your primary point of contact for these matters.
You can reach the DPO via email at: [email protected]
All inquiries are handled with confidentiality and seriousness. This is part of our broader commitment to player welfare, which also includes promoting responsible gaming. Always play within your means, stake only what you are prepared to lose, and remember that our support channels are available if you need guidance. We apply this same duty of care to protecting your personal information as we do to ensuring a safe gaming environment.
Feel free to review your account profile to see these principles in action.