movbit.vip Privacy Policy

This Privacy Policy ("Policy") describes the data processing practices of movbit.vip ("the Platform," "we," "us," or "our") with respect to personal information collected from individuals ("you," "the User," or "the Player") who access, register on, or otherwise use the movbit.vip website and associated gaming services.

This Policy applies to all personal data processing activities undertaken by movbit.vip in connection with the Platform, including account registration and management, identity verification, financial transactions, gameplay data, customer support interactions, marketing communications, and regulatory compliance activities.

This Policy should be read together with the movbit.vip Terms & Conditions, Responsible Gaming Policy, and any cookie consent notices presented to you when using the Platform. By registering an account or using movbit.vip, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

movbit.vip is operated in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission (NPC). Where our operations require adherence to additional data protection frameworks (for example, due to cross-border data transfers), we will apply the more protective standard.

For purposes of the Philippine Data Privacy Act, movbit.vip is the Personal Information Controller (PIC) in respect of all personal data collected from players using the Platform. As the PIC, movbit.vip determines the purposes and means by which personal data is collected and processed, and bears the legal obligations associated with that role under RA 10173.

movbit.vip has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with this Policy and applicable data protection laws. The DPO can be reached through the movbit.vip Support team. All data rights requests, privacy complaints, and data breach reports should be directed to the DPO's attention.

Certain data processing activities are carried out by authorized Personal Information Processors (PIPs) — third-party service providers engaged by movbit.vip — acting strictly on movbit.vip's instructions and under contractual data processing agreements that impose equivalent data protection obligations.

movbit.vip collects personal data in the categories described in the table below. Collection is limited to what is necessary for the stated purposes.

movbit.vip does not intentionally collect sensitive personal information as defined under RA 10173 (such as health records, political affiliations, or religious beliefs) unless specifically required for compliance purposes, in which case explicit consent will be obtained separately.

movbit.vip collects personal data through the following means:

• Directly from you: Information you provide during registration, identity verification, deposit/withdrawal requests, customer support communications, or when completing account profile updates;
• Automatically during Platform use: Technical data including IP addresses, device identifiers, browser information, and session logs are collected automatically through Platform infrastructure, server logs, and cookies when you access movbit.vip;
• From payment service providers: Transaction confirmation data received from GCash, Maya, BPI, BDO, Metrobank, and other payment processors when you initiate a deposit or withdrawal;
• From identity verification services: Enhanced identity check results from third-party KYC/AML service providers used to verify documents submitted during the verification process;
• From PAGCOR and regulatory bodies: Compliance-related information shared by PAGCOR or other Philippine regulatory authorities in furtherance of legal obligations.

movbit.vip processes your personal data only for the specific, legitimate purposes described below. We do not process personal data in a manner incompatible with these stated purposes.

Under RA 10173, personal data processing must be based on at least one lawful criterion. movbit.vip relies on the following criteria, depending on the processing activity:

• Consent: Where you have provided clear, informed, and voluntary consent to a specific processing activity (such as marketing communications). You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal;
• Contractual Necessity: Processing is necessary to perform the contract between you and movbit.vip — i.e., to provide the casino and sports betting services you have registered to use;
• Legal Obligation: Processing is required to comply with a legal obligation applicable to movbit.vip, including PAGCOR regulations, AMLA obligations, tax reporting requirements, and NPC directives;
• Legitimate Interests: Processing is necessary for the legitimate interests of movbit.vip (such as fraud prevention and Platform security), provided those interests are not overridden by your fundamental rights and freedoms.

movbit.vip does not sell your personal data. We share personal data only as described below, and only to the extent necessary for the stated purpose:

• Payment Processors: GCash (Mynt), Maya (PayMaya Philippines), BancNet, and other Philippine payment network operators receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own BANGKO SENTRAL NG PILIPINAS (BSP)-regulated privacy frameworks;
• KYC/AML Service Providers: Third-party identity verification and anti-money laundering screening providers process identity documents and conduct sanctions screening on movbit.vip's behalf under contractual data processing agreements;
• Game Content Providers: Certified game studios (such as JILI, PG Soft, and Pragmatic Play) receive minimum necessary session data required to deliver their game content. These providers are contractually bound to use this data only for game delivery purposes;
• PAGCOR: As movbit.vip's licensing authority, PAGCOR may receive player account data, transaction reports, and other information as required by our operating license and applicable gaming regulations;
• AMLC (Anti-Money Laundering Council): Where required by RA 9160 (AMLA), transaction reports are submitted to the AMLC as mandated by law. This is a legal obligation, not a discretionary disclosure;
• Law Enforcement: Personal data may be disclosed to Philippine law enforcement agencies, courts, or government regulators where required by valid legal process, court order, or statutory obligation;
• IT Infrastructure Providers: Hosting, cloud storage, and security infrastructure providers process data on movbit.vip's behalf in their capacity as PIPs, under binding data processing agreements.

movbit.vip retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and identity data: Retained for the duration of the account relationship, plus five (5) years from account closure, as required by AMLA record-keeping obligations and PAGCOR licensing conditions;
• Transaction records: Retained for a minimum of five (5) years from the transaction date, consistent with AMLA and BSP record retention requirements;
• KYC documents: Retained for five (5) years from the date of the most recent transaction associated with the account, or longer where required by an ongoing regulatory or law enforcement matter;
• Customer support communications: Retained for three (3) years from the date of the communication, unless part of an ongoing dispute or investigation;
• Technical and log data: Retained for up to twelve (12) months for routine security and fraud analysis purposes;
• Marketing consent records: Retained for the period of your account relationship plus three (3) years, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Anonymized, aggregated data (which can no longer identify any individual) may be retained indefinitely for Platform analytics purposes.

movbit.vip implements a comprehensive set of technical, organizational, and administrative security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These include:

• Encryption: All data in transit is protected by 256-bit TLS/SSL encryption. Sensitive data at rest (including identity documents and financial records) is encrypted using AES-256 or equivalent standards;
• Access Controls: Access to personal data is restricted to authorized movbit.vip personnel and PIP staff on a strict need-to-know basis. Multi-factor authentication is required for all staff accessing data systems;
• Security Monitoring: Continuous automated monitoring for unauthorized access attempts, anomalous data access patterns, and potential security incidents. Intrusion detection systems are maintained across all production environments;
• Penetration Testing: Regular third-party security assessments and penetration tests are conducted to identify and remediate vulnerabilities in the Platform's infrastructure;
• Data Minimization: Systems are designed to process the minimum personal data necessary for each function, reducing the potential impact of any security incident;
• Staff Training: All movbit.vip staff with access to personal data receive mandatory data privacy and security training, including Philippine data privacy law requirements.

While movbit.vip takes all reasonable and legally required steps to protect your data, no online platform can guarantee absolute security against all possible threats. You are encouraged to protect your own account by using a strong, unique password and enabling two-factor authentication.

movbit.vip uses cookies and similar technologies (including local storage and session tokens) to operate the Platform and improve your experience. The following categories of cookies are used:

You can manage non-essential cookie preferences through the cookie consent interface presented when you first access the Platform, or through your browser settings. Blocking all cookies may impair certain Platform functions.

movbit.vip strictly prohibits the registration and use of the Platform by persons under 21 years of age. This is a non-negotiable legal requirement under PAGCOR regulations and Philippine gambling law.

movbit.vip does not knowingly collect personal data from persons under the age of 21. Age verification is conducted as part of the KYC process for all registered accounts. If movbit.vip identifies or is notified that an account has been registered by a person under 21 years of age, the following actions will be taken immediately:

• The account will be permanently suspended;
• All personal data associated with the account will be assessed and, where legally permissible, deleted within 30 days;
• Any funds deposited will be returned (net of any bonus amounts) to the original payment method after identity verification of the rightful owner;
• The matter may be referred to PAGCOR in accordance with our licensing obligations.

Parents and guardians are encouraged to use device-level parental controls to prevent minors from accessing online gambling platforms. If you believe a minor has created a movbit.vip account, please contact our Support team immediately.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by movbit.vip. These rights are legally enforceable and can be exercised by contacting our Data Protection Officer through the Support team.

To exercise any of the above rights, submit a written request to the movbit.vip Data Protection Officer via the Support live chat or email, clearly identifying yourself, the right you wish to exercise, and the specific data concerned. movbit.vip will respond within 15 business days and may request identity verification before processing your request.

If you believe movbit.vip has violated your data privacy rights, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines through their official channels. movbit.vip will cooperate fully with any NPC investigation.

Certain personal data processing activities — particularly those involving game content delivery servers, cloud infrastructure, and KYC verification systems — may involve the transfer of personal data to servers or service providers located outside the Philippines.

All cross-border transfers of personal data by movbit.vip are conducted in compliance with Section 21 of RA 10173 and the NPC's cross-border transfer rules. Specifically, movbit.vip ensures that:

• The receiving country or organization provides a comparable level of data protection to that afforded under Philippine law, or
• Appropriate contractual safeguards are in place through data transfer agreements that impose RA 10173-equivalent obligations on the recipient, or
• The transfer is covered by one of the recognized legal bases for cross-border transfers under the NPC framework (such as performance of a contract, legal claims, or your explicit consent).

Details of the specific countries or regions where movbit.vip's data processors operate are available upon request from the DPO.

In the event of a personal data breach that is likely to result in a real risk of serious harm to affected data subjects, movbit.vip will comply with the mandatory breach notification obligations under RA 10173 and NPC Circular No. 16-03:

• NPC Notification: movbit.vip will notify the NPC of a qualifying breach within seventy-two (72) hours of becoming aware of it, providing details of the nature of the breach, the categories and approximate number of affected individuals, likely consequences, and measures taken or proposed;
• Player Notification: Affected players will be notified without undue delay where the breach is likely to result in a high risk to their rights and freedoms. Notification will be provided via the registered email address and/or mobile number associated with the affected account;
• Documentation: All data breaches, including those not meeting the notification threshold, are documented internally in movbit.vip's breach register maintained by the DPO.

If you suspect unauthorized access to your movbit.vip account, you must contact our Support team immediately. We will investigate and take appropriate action, including account security measures and coordination with law enforcement where warranted.

movbit.vip may update this Privacy Policy from time to time to reflect changes in our data processing practices, Platform features, applicable law, or NPC guidance. The "Effective" date at the top of this Policy indicates the date of the most recent revision.

Material changes — meaning changes that substantially affect how we collect, use, or share your personal data, or that affect your rights — will be communicated to registered players via email and/or a prominent notice on the Platform at least 7 days before taking effect.

For non-material changes (such as clarifications or corrections to existing language), the updated Policy will be published without advance notice. It is your responsibility to review this Policy periodically. Continued use of movbit.vip after the effective date of an updated Policy constitutes acceptance of the changes, except where additional consent is legally required for new processing activities.

For any questions, concerns, or requests related to this Privacy Policy or the processing of your personal data by movbit.vip, please contact our Data Protection Officer through the following channels:

• Live Chat: 24/7 live chat support is available on the movbit.vip Platform. Requests intended for the DPO should be clearly marked as such.
• Email: Send your privacy-related correspondence to [email protected] with the subject line "Data Privacy Request." This is a plain-text email address — do not attempt to send sensitive documents without confirming a secure submission method with the DPO first.

We are committed to resolving all privacy-related inquiries promptly and transparently. The DPO will acknowledge your request within 3 business days and provide a substantive response within 15 business days. If you are not satisfied with movbit.vip's response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.