bf099 Privacy Policy

1. Introduction

Welcome to bf099 — a PAGCOR-licensed online casino and sports betting platform built for Filipino players across the Philippines. We understand that your privacy matters deeply, and we are fully committed to safeguarding the personal information you entrust to us when you register, play, and interact with bf099.

This Privacy Policy ("Policy") governs the collection, use, storage, and disclosure of personal data relating to our website at bf099.cam, our mobile applications, and any related services we operate. It has been prepared in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the guidelines of the National Privacy Commission (NPC) of the Philippines.

Whether you are browsing our slots lobby from Makati, placing a live sports bet from Cebu, or enjoying a bingo session from Davao — your data privacy rights follow you throughout your entire bf099 experience. We encourage you to read this Policy carefully and reach out to us if anything is unclear.

2. Data Controller Information

For purposes of the Data Privacy Act of 2012, bf099 acts as the Personal Information Controller (PIC) with respect to the personal data we collect directly from you. Any third-party service providers we engage to process data on our behalf act as Personal Information Processors (PIPs) and are contractually bound to handle your data only per our instructions and in accordance with applicable law.

Our Data Protection Officer (DPO) oversees all matters related to this Policy. For inquiries, corrections, or privacy-related concerns, you may reach our DPO at the contact details provided in Section 13 of this document.

3. Personal Data We Collect

bf099 collects personal data that is adequate, relevant, and not excessive in relation to the purposes for which it is collected. We gather information through the following means:

3.1 Information You Provide Directly

• Account Registration: Full name, date of birth, nationality, residential address, valid government-issued ID details.
• Contact Details: Email address, mobile number (Philippine-registered).
• Financial Information: Preferred payment method (e.g., GCash, PayMaya, BPI, BDO, Metrobank, UnionBank), transaction records, deposit and withdrawal history.
• Identity Verification (KYC): Scanned copies or photographs of government-issued IDs (e.g., PhilSys National ID, passport, UMID) as required under PAGCOR anti-money laundering compliance.
• Support Communications: Records of messages, feedback, and support tickets submitted to bf099.

3.2 Information Collected Automatically

• IP address, browser type and version, operating system, and device identifiers.
• Login timestamps, session duration, pages visited, and features accessed.
• Game history, wagering patterns, and bonus participation records.
• Geolocation data (at the city or region level, not precise GPS coordinates) to verify you are accessing the platform from within the Philippines.
• Cookie identifiers and similar tracking technologies (see Section 7).

3.3 Information from Third Parties

• Data from payment processors and e-wallet providers (GCash, PayMaya) to verify and complete financial transactions.
• Identity verification data from accredited KYC service providers where applicable.
• Fraud prevention signals from security partners.

4. How We Use Your Personal Data

bf099 processes your personal data for the following specific, legitimate, and explicit purposes:

• Account Management: To create, maintain, and authenticate your bf099 account.
• Service Delivery: To provide access to our casino games, sports betting, bingo, fishing games, and slot titles.
• Financial Processing: To process deposits, withdrawals, and bonus transactions via your chosen payment method.
• Regulatory Compliance: To fulfill our obligations under PAGCOR licensing, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012 — including KYC verification and suspicious transaction reporting.
• Responsible Gaming: To monitor gaming behavior, apply self-exclusion requests, enforce deposit limits, and deliver responsible gaming interventions where necessary.
• Customer Support: To respond to your queries, resolve disputes, and improve service quality.
• Security and Fraud Prevention: To detect, investigate, and prevent unauthorized access, fraudulent activity, and abuse of our platform.
• Communications: To send you service-related notifications, transaction confirmations, and (where you have consented) promotional offers and bonus alerts.
• Platform Improvement: To analyze usage patterns and improve the performance, personalization, and design of bf099.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, bf099 processes your personal data based on the following lawful criteria:

• Consent: Where you have given explicit consent — for example, opting in to receive marketing communications from bf099.
• Contractual Necessity: Processing necessary to fulfill the terms of your account agreement with bf099, including service delivery and payment processing.
• Legal Obligation: Processing required to comply with PAGCOR licensing terms, AMLA reporting requirements, tax laws, and NPC data privacy obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and business analytics — where such interests are not overridden by your fundamental rights and freedoms.

6. Sharing and Disclosure of Personal Data

bf099 does not sell, rent, or trade your personal information to third parties for commercial purposes. We may disclose your data only in the following limited circumstances:

• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies as required by law.
• Payment Service Providers: Banks and e-wallet providers (GCash, PayMaya, BPI, BDO, Metrobank, UnionBank) solely to facilitate your financial transactions.
• Identity Verification Partners: Accredited KYC and fraud prevention providers engaged under strict data processing agreements.
• Technology Service Providers: Cloud hosting, data analytics, and customer support tool providers who process data on bf099's behalf under binding confidentiality and data security obligations.
• Legal Proceedings: Where disclosure is required by court order, subpoena, or other lawful legal process.

7. Cookies and Tracking Technologies

bf099 uses cookies and similar technologies (web beacons, pixel tags, local storage) to deliver, operate, and improve our platform. Here is what we use and why:

• Essential Cookies: Strictly necessary for the platform to function — maintaining your login session, applying security settings, and processing transactions.
• Functional Cookies: Remembering your language preferences, game settings, and responsible gaming limits you have set.
• Analytics Cookies: Understanding how users navigate bf099 so we can improve performance and content — data is aggregated and anonymized where possible.
• Security Cookies: Detecting and preventing fraudulent activity, bot traffic, and unauthorized access attempts.

You may manage your cookie preferences through your browser settings. Note that disabling essential cookies may affect platform functionality and prevent you from accessing certain features of bf099.

8. Data Retention

bf099 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Specific retention periods include:

• Active Account Data: Retained for the duration of your account relationship with bf099 plus five (5) years following account closure, in compliance with AMLA record-keeping requirements.
• Transaction Records: Minimum of five (5) years from the date of the transaction, as required by PAGCOR and AMLA.
• KYC Documents: Retained for the period required under AMLA and PAGCOR licensing conditions.
• Support Communications: Up to two (2) years from the date of resolution, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Until withdrawal of consent plus one (1) year for compliance documentation.

Upon expiry of applicable retention periods, your personal data will be securely deleted or anonymized in a manner that prevents reconstruction or re-identification.

9. Security Measures

bf099 implements robust organizational and technical security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Industry-standard TLS/SSL encryption for all data transmitted between your device and our servers.
• AES-256 encryption for data stored at rest in our systems, particularly for sensitive financial and identity data.
• Multi-factor authentication (MFA) for platform access and high-value transactions.
• Regular third-party security audits and penetration testing of our platform infrastructure.
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
• Continuous 24/7 security monitoring and intrusion detection systems.
• Incident response procedures compliant with the NPC's 72-hour breach notification requirement.

While bf099 employs all reasonable and appropriate security safeguards, no method of internet transmission or digital storage is 100% secure. We encourage you to protect your account credentials and notify us immediately at [email protected] if you suspect unauthorized activity on your account.

10. Your Data Privacy Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bf099:

• Right to Be Informed: The right to know what personal data bf099 collects and how it is processed — as detailed in this Policy.
• Right to Access: The right to request a copy of the personal data bf099 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure / Blocking: The right to request deletion or blocking of your personal data where it is no longer necessary for its original purpose, subject to legal retention obligations.
• Right to Object: The right to object to the processing of your personal data, including for direct marketing purposes.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer at [email protected]. We will respond to verified requests within fifteen (15) working days.

11. Minors and Age Restriction

bf099 is strictly a platform for adults. In accordance with Philippine law and PAGCOR regulations, you must be at least 21 years of age to register and use our services. We do not knowingly collect personal information from individuals under 21 years old.

During the registration process, bf099 collects your date of birth and requires identity verification specifically to enforce this age restriction. If we discover that personal data has been collected from a person under 21 years of age, we will promptly delete such data and close the associated account in compliance with PAGCOR requirements.

If you are a parent or guardian and believe a minor has provided personal data to bf099, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

bf099 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. When material changes are made, we will:

• Update the "Effective Date" and "Last Reviewed" date at the top of this page.
• Notify registered users via email or in-platform notification at least fifteen (15) days before changes take effect, where feasible.
• For material changes affecting how we process your personal data, seek fresh consent where required by the DPA.

Your continued use of bf099 after the effective date of any updated Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically.

13. Contact Our Data Protection Officer

For any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, please contact our Data Protection Officer:

For complaints about data privacy violations, you may also lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines through their official channels.