BigBuny Privacy Policy

1 Introduction

BigBuny ("we," "us," or "our") is committed to protecting the privacy and personal data of every player who registers and uses the BigBuny online gaming platform at bigbuny.net and its associated mobile applications. This Privacy Policy describes how BigBuny collects, uses, stores, shares, and protects your personal information in connection with your use of the platform.

This Privacy Policy is issued in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and other applicable data protection laws and regulations in the Philippines. By registering a BigBuny account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

If you have any questions about how BigBuny handles your personal data, or if you wish to exercise any of your data privacy rights, please contact our Data Privacy Officer using the contact details provided in Section 12 of this Policy.

2 Personal Data We Collect

BigBuny collects personal data from you in the following categories, depending on how you interact with the platform:

BigBuny does not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where sensitive data is collected (such as government ID numbers), it is handled with the highest level of care and stored using appropriate security measures.

3 How We Use Your Personal Data

BigBuny uses the personal data we collect for the following specific purposes:

• Account Registration and Management: To create and maintain your BigBuny player account, verify your identity, and manage your account settings and preferences.
• Age and Identity Verification: To confirm that you are at least 21 years of age and to verify your identity in compliance with applicable Philippine regulations and anti-money laundering (AML) requirements.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods, and to maintain accurate financial records of all transactions.
• Platform Provision and Improvement: To deliver the BigBuny gaming experience, including all games, bonuses, and features, and to continuously improve platform performance, stability, and user experience.
• Customer Support: To respond to your enquiries, resolve complaints, and provide technical assistance through our support channels.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, and other security threats to the BigBuny platform and its players.
• Regulatory Compliance: To comply with applicable Philippine laws and regulations, including reporting obligations to relevant regulatory authorities where required by law.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits, session reminders, and self-exclusion requests.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided your consent to receive such communications. You may opt out of marketing communications at any time through your account settings.
• Analytics and Research: To analyse aggregated, anonymised usage data to understand how players interact with the BigBuny platform and to inform product development decisions.

BigBuny will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by applicable law.

4 Legal Basis for Processing

BigBuny processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012 and applicable regulations:

• Contractual Necessity: Processing is necessary to perform our obligations under the BigBuny Terms and Conditions, including account management, payment processing, and game provision.
• Legal Obligation: Processing is required to comply with applicable Philippine laws and regulations, including AML obligations, age verification requirements, and regulatory reporting duties.
• Legitimate Interests: Processing is necessary for BigBuny's legitimate interests in operating a secure, fair, and commercially viable gaming platform, including fraud prevention, platform security, and business analytics — provided these interests are not overridden by your data privacy rights.
• Consent: For certain processing activities, such as sending marketing communications or using non-essential cookies, BigBuny relies on your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing and Disclosure

BigBuny does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only where necessary and in accordance with this Privacy Policy:

• Payment Service Providers: We share financial data with payment processors such as GCash, PayMaya, and partner banks (BPI, BDO, Metrobank) solely to facilitate deposits and withdrawals on your behalf.
• Identity Verification Providers: We may share identity documents and personal data with third-party KYC (Know Your Customer) verification service providers to fulfil our age verification and AML compliance obligations.
• Technology and Infrastructure Partners: We share technical data with cloud hosting, platform infrastructure, and cybersecurity service providers who support the operation of the BigBuny platform. All such providers are contractually bound to process your data only on BigBuny's instructions and in accordance with applicable data protection law.
• Game Software Providers: Certain usage data may be shared with our game software providers to facilitate the delivery of games and to resolve technical disputes regarding game outcomes.
• Regulatory and Law Enforcement Authorities: BigBuny may disclose personal data to Philippine regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. This includes reporting obligations under Philippine AML regulations.
• Professional Advisers: We may share personal data with our legal, financial, and compliance advisers on a confidential basis where necessary for the conduct of BigBuny's business.

Where BigBuny engages third-party data processors, we ensure that appropriate data processing agreements are in place and that all processors maintain data security standards consistent with applicable Philippine data protection law.

6 Cookies and Tracking Technologies

BigBuny uses cookies and similar tracking technologies on the platform to enhance your experience and support platform operations. The following types of cookies may be used:

• Strictly Necessary Cookies: These cookies are essential for the BigBuny platform to function correctly. They enable core features such as account login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised information about how players use the BigBuny platform, such as which pages are visited most frequently and whether error messages are received. This data helps us improve platform performance and user experience.
• Functional Cookies: These cookies allow the platform to remember your preferences, such as your preferred language, display settings, and game lobby configuration, to provide a more personalised experience.
• Marketing and Targeting Cookies: With your consent, BigBuny may use cookies to deliver relevant promotional content and bonus offers based on your gaming activity and preferences on the platform.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the BigBuny platform. For detailed instructions on managing cookies in your specific browser, please refer to your browser's help documentation.

7 Data Retention

BigBuny retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active BigBuny account and for a minimum of five (5) years following account closure, in accordance with applicable AML and regulatory record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required under Philippine AML regulations and financial record-keeping obligations.
• Identity Verification Documents: Retained for the duration of your account and for a minimum of five (5) years following account closure, or longer if required by applicable law.
• Customer Support Records: Retained for a period of three (3) years from the date of the last interaction, to enable resolution of any subsequent disputes or complaints.
• Technical and Usage Data: Retained for a period of up to two (2) years from collection, after which it is anonymised or deleted.
• Marketing Consent Records: Retained for the duration of your consent and for a reasonable period thereafter to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, BigBuny will securely delete or anonymise your personal data in accordance with our internal data disposal procedures. Where data is anonymised rather than deleted, the resulting anonymised data may be retained indefinitely for analytical purposes.

8 Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012 and applicable regulations, you have the following rights in relation to your personal data held by BigBuny:

• Right to Be Informed: You have the right to be informed about how BigBuny collects, uses, and processes your personal data, as set out in this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data that BigBuny holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data that BigBuny holds about you. You may update certain account details directly through your BigBuny account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to BigBuny's legal and regulatory retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on BigBuny's legitimate interests, subject to applicable legal exceptions.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that BigBuny has processed your personal data in violation of applicable data protection law.

Please note that certain rights are subject to limitations and exceptions under applicable Philippine law. For example, BigBuny may be required to retain certain data for regulatory compliance purposes even where a deletion request is received.

9 Data Security

BigBuny takes the security of your personal data seriously and implements a range of technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and the BigBuny platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. Sensitive data stored on our servers is encrypted at rest.
• Access Controls: Access to personal data within BigBuny is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Security Monitoring: BigBuny's security team monitors the platform continuously for suspicious activity, unauthorised access attempts, and potential data breaches.
• Regular Security Assessments: BigBuny conducts regular security assessments and penetration testing to identify and address potential vulnerabilities in our systems.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, BigBuny will notify the National Privacy Commission and affected players in accordance with the requirements of the Philippine Data Privacy Act.

Despite our best efforts, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. If you have reason to believe that your BigBuny account has been compromised, please contact our support team immediately.

10 Children's Privacy

The BigBuny platform is strictly intended for adults aged 21 years and older. BigBuny does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you are not permitted to register for or use the BigBuny platform.

If BigBuny becomes aware that personal data has been collected from an individual under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. Any deposits made by an underage player will be returned in accordance with applicable law, and any winnings will be forfeited.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gaming platforms. BigBuny supports responsible gaming initiatives and takes its obligations regarding the protection of minors very seriously.

11 Changes to This Privacy Policy

BigBuny reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The most current version of this Privacy Policy will always be available on the BigBuny platform at bigbuny.net/privacy-policy.

Where changes to this Privacy Policy are material — meaning they significantly affect your rights or how your personal data is processed — BigBuny will provide advance notice to registered players via the email address associated with their account or through an in-platform notification, at least fourteen (14) days before the changes take effect.

Your continued use of the BigBuny platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Privacy Policy, you should cease using the platform and may request account closure by contacting our support team.

12 Contact Us and Data Privacy Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or BigBuny's handling of your personal data, please contact our Data Privacy Officer. You may also use these contact details to exercise any of your data privacy rights as described in Section 8 of this Policy.

BigBuny's customer support team is available 24 hours a day, 7 days a week via live chat in the BigBuny app and on the website. For data privacy-specific enquiries, you may also reach us by email:

BigBuny will acknowledge all data privacy requests within five (5) business days and will endeavour to resolve all requests within thirty (30) days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it.

If you are not satisfied with BigBuny's response to your data privacy request or complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines.