Privacy Policy
Last updated: July 3, 2026
BayadBox (“we,” “us,” “our”), operated by AIO Technologies, is committed to protecting your personal data in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 (“DPA”), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.
This Privacy Policy explains how we collect, use, store, share, and protect personal data when you visit bayadbox.com, apply to become a BayadBox partner store, or use BayadBox services.
1. Personal Data We Collect
From partner store applicants and partners
- Full name, mobile number, and email address
- Store name, address, and business details
- Government-issued identification, as required for onboarding and regulatory compliance
- Transaction records generated through the BayadBox platform
- Settlement and float account details
From website visitors
- Information you submit through our forms (name, contact details, store information)
- Technical data such as IP address, browser type, and pages visited, collected through cookies and standard server logs
From BayadCard applicants
- Identity information required under applicable Know-Your-Customer (“KYC”) regulations, collected at partner stores and processed in coordination with our BSP-regulated financial institution partners
2. Why We Collect It (Purpose and Legal Basis)
- Contract performance — onboarding partner stores, processing transactions, settling funds, and providing support
- Legal obligation — complying with the Anti-Money Laundering Act, BSP regulations, tax laws, and lawful orders of regulators such as the AMLC, BSP, and NPC
- Legitimate interest — fraud prevention, platform security, service improvement, and business analytics
- Consent — marketing communications, which you may withdraw at any time
3. Who We Share Data With
We do not sell personal data. We share it only with:
- Financial service partners — BSP-regulated banks, e-money issuers, and remittance companies whose services are accessed through the BayadBox platform (e.g., for GCash, Maya, bills payment, padala, and BayadCard transactions)
- Regulators and law enforcement — where required by law, including the Anti-Money Laundering Council (AMLC), Bangko Sentral ng Pilipinas (BSP), and National Privacy Commission (NPC)
- Service providers — hosting, communications, and IT providers bound by confidentiality and data processing agreements
4. Retention
We retain personal data only as long as necessary for the purposes above. Transaction and KYC records are retained for at least five (5) years as required by the Anti-Money Laundering Act and BSP regulations, after which they are securely disposed of in accordance with NPC guidelines.
5. Security
We implement organizational, physical, and technical security measures appropriate to the risks involved, including encryption in transit, access controls, and restricted handling of KYC documents. No system is perfectly secure; we will notify affected data subjects and the NPC of any personal data breach as required by NPC Circular No. 16-03 and related issuances.
6. Your Rights as a Data Subject
Under the Data Privacy Act, you have the right to:
- Be informed about how your data is processed
- Access the personal data we hold about you
- Correct inaccurate or outdated data
- Object to processing, including for direct marketing
- Erasure or blocking of data that is unlawfully processed or no longer necessary
- Data portability in a commonly used electronic format
- Damages for violations of your rights
- Lodge a complaint with the National Privacy Commission (privacy.gov.ph)
7. Cookies
We use essential cookies for site functionality and basic analytics cookies to understand site usage. You can disable cookies in your browser settings; essential features may be affected.
8. Contact Us
For privacy concerns, requests, or to exercise your rights, contact our Data Protection Officer:
Email: [email protected] (subject line: “Data Privacy”)
If you are not satisfied with our response, you may file a complaint with the National Privacy Commission, 5th Floor, Philippine International Convention Center, Vicente Sotto Avenue, Pasay City, Metro Manila — privacy.gov.ph.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date above reflects the latest revision. Material changes will be announced on this website.