bf099 Privacy Policy

1. Data Controller

The data controller responsible for your personal data processed through the bf099 platform is bf099, operating under PAGCOR regulation in the Republic of the Philippines ("bf099," "we," "us," "our"). For all data privacy inquiries, please contact us using the details in Section 13 of this Policy.

2. Personal Data We Collect

bf099 collects the following categories of personal data in connection with the operation of its online casino platform:

Category	Examples	Why Collected
Identity Data	Full legal name, date of birth, gender, government ID number (Passport, PhilSys, UMID, Driver's License)	Account registration, KYC/AML compliance, age verification
Contact Data	Email address, Philippine mobile number, residential address	Account communication, OTP delivery, verification, withdrawal address confirmation
Financial Data	GCash mobile number, bank account details (BPI/BDO/UnionBank), Maya account, USDT wallet address	Payment processing, deposit/withdrawal, AML screening
Transaction Data	Deposit history, withdrawal history, bet records, game history, bonus transactions	Account management, dispute resolution, PAGCOR regulatory reporting
Technical Data	IP address, browser type, device type/OS, session duration, login timestamps	Security monitoring, fraud prevention, platform optimization
Communications Data	Customer support chat logs, email correspondence, feedback submissions	Support delivery, quality assurance, dispute evidence

3. How We Collect Your Data

bf099 collects personal data through the following means:

• Direct Collection: Information you provide during account registration, KYC document upload, deposit/withdrawal requests, and customer support interactions.
• Automated Collection: Technical data collected automatically when you access the bf099 platform, including cookies, server logs, and device fingerprinting for security purposes.
• Third-Party Sources: Identity verification data from KYC service providers; fraud screening results from payment processors; age verification confirmations. bf099 only receives data from third parties where it is lawful to do so and where the third party has appropriate authority to share such data.

4. Purpose and Legal Basis for Processing

bf099 processes your personal data on the following legal bases under Philippine law and applicable PAGCOR regulations:

• Contractual Necessity: Processing required to fulfill your agreement with bf099 — operating your account, processing deposits and withdrawals, delivering games and bonuses.
• Legal Obligation: Processing mandated by Philippine law, including PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) compliance, and tax reporting obligations.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, responsible gaming enforcement, and business analytics — balanced against your privacy interests.
• Consent: Where we send you promotional communications, we will seek your explicit consent and provide a clear and easy mechanism to withdraw that consent at any time.

5. Sharing Your Personal Data

bf099 does not sell personal data. We share personal data only in the following limited circumstances:

• Payment Processors: GCash (Globe Fintech Innovations), Maya (Voyager Innovations), BPI, BDO, UnionBank, Coins.ph, and USDT gateway providers receive transaction data necessary to process payments. Each is bound by their own privacy and security standards.
• KYC/Identity Verification Partners: Third-party identity verification providers receive identity and document data for the purpose of fulfilling PAGCOR-mandated KYC requirements.
• Game Providers: Game studios (PG Soft, Pragmatic Play, Evolution Gaming, etc.) receive session tokens and limited account identifiers necessary to deliver games. Game providers do not receive your full identity data.
• Regulatory Authorities: PAGCOR and other Philippine government agencies (e.g., AMLC) may require disclosure of player data as part of regulatory reporting, licensing compliance, or law enforcement cooperation. bf099 will comply with lawful regulatory demands.
• Legal Proceedings: bf099 may disclose data where required by court order or other lawful process.

All third-party service providers with access to personal data are required to maintain confidentiality and process such data only in accordance with bf099's instructions and applicable law.

6. Cookies and Tracking Technologies

The bf099 website uses cookies and similar tracking technologies to operate the Platform and improve user experience. The following categories of cookies are used:

• Essential Cookies: Necessary for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without affecting platform functionality.
• Analytics Cookies: Used to understand how players use the Platform in aggregate — which games are most popular, how navigation flows work, page load performance. Data is processed at an aggregated, anonymized level.
• Preference Cookies: Store your language preferences, display settings, and other platform customizations across sessions.

You may manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from logging in to the bf099 Platform.

7. Data Retention

bf099 retains personal data for the following periods:

• Active Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by PAGCOR and AMLA record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of the last transaction, in compliance with Anti-Money Laundering Act requirements.
• Transaction Records: Retained for a minimum of five (5) years for PAGCOR reporting and tax compliance purposes.
• Customer Support Logs: Retained for two (2) years to support dispute resolution.
• Technical/Log Data: Retained for ninety (90) days for security monitoring purposes, then deleted or anonymized.

After applicable retention periods expire, personal data is securely deleted using industry-standard methods or anonymized in a manner that renders re-identification impossible.

8. Data Security

bf099 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the bf099 Platform
• Encryption of sensitive data fields (identity documents, financial account details) at rest
• Role-based access controls — bf099 staff access personal data on a need-to-know basis only
• Multi-factor authentication for all internal systems that process personal data
• Regular security assessments and penetration testing
• Data breach response procedures, including NPC notification within 72 hours of discovering a breach that poses a real risk of serious harm

No data transmission over the internet is 100% secure. While bf099 takes reasonable steps to protect your data, we cannot guarantee absolute security.

9. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bf099:

To exercise any of these rights, contact our Data Protection Officer (DPO) using the details in Section 13. bf099 will respond to verified data subject requests within fifteen (15) business days.

10. Minors and Age Restriction

bf099 does not knowingly collect or process personal data of individuals under the age of 21. The Platform is strictly for adults aged 21 and above in accordance with PAGCOR regulations. 21+

If bf099 discovers that personal data has been collected from a minor, that data will be promptly deleted and the associated account will be closed. If you believe a minor has created an account on bf099, please contact us immediately at [email protected].

11. Cross-Border Data Transfers

Some of bf099's service providers (including certain game providers and technical infrastructure providers) may process data in jurisdictions outside the Philippines. Where such transfers occur, bf099 ensures that appropriate safeguards are in place — including contractual data processing agreements — to protect your personal data to a standard equivalent to that required under Philippine law.

12. Changes to This Privacy Policy

bf099 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or PAGCOR requirements. Material changes will be communicated to registered players by email or through a prominent platform notice at least seven (7) days before the change takes effect. The "Effective Date" at the top of this Policy will be updated accordingly. Continued use of the bf099 Platform following any amendment constitutes acceptance of the revised Policy.

13. Contact Information & Data Protection Officer

For all privacy-related inquiries, data subject access requests, complaints, or concerns, please contact bf099's Data Protection Officer:

• Email: [email protected] (Subject line: "Data Privacy Request")
• Live Chat: Available 24/7 through your logged-in bf099 account
• Response Time: Within 15 business days for data subject requests

If you are dissatisfied with bf099's response to a data privacy concern, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines through official NPC channels.

This Privacy Policy was last reviewed and is effective as of January 1, 2026.