Privacy Policy — fb099 Philippines

This Policy applies to all personal data collected by fb099 through the fb099 website, mobile platform, live chat support, email communications, and any other channel through which you interact with fb099. It applies to all registered players, prospective players, and visitors to the fb099 platform regardless of their location within the Philippines — whether you are based in Manila, Cebu, Davao, Quezon City, Makati, or any other part of the country.

This Policy should be read together with the fb099 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.

fb099 collects the following categories of personal data from players and platform users:

fb099 does not collect sensitive personal information (as defined under RA 10173) unless strictly required for regulatory compliance, in which case such collection will be clearly disclosed and your explicit consent obtained.

fb099 collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access the fb099 platform, including IP addresses, device identifiers, browser type, and session data via cookies and similar tracking technologies.
• Third-Party Sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment data from GCash, PayMaya, BPI, BDO, and Metrobank in connection with your transactions.

fb099 uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your fb099 player account, including identity verification and KYC compliance.
• Service Delivery: To process deposits and withdrawals, settle bets, award bonuses, and provide all gaming services available on the fb099 platform.
• Legal & Regulatory Compliance: To comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, age verification requirements, and reporting obligations to regulatory authorities.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats to the fb099 platform.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits and self-exclusion.
• Customer Support: To respond to your inquiries, resolve disputes, and improve the quality of our support services.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the features and performance of the fb099 platform.
• Marketing Communications: To send you promotional offers and updates about fb099 services, where you have provided consent to receive such communications. You may opt out at any time.

fb099 processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual Necessity: Processing required to fulfil our obligations under the fb099 Terms & Conditions — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including AML regulations, tax reporting, and regulatory requirements imposed by competent authorities.
• Legitimate Interests: Processing necessary for fb099's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time by contacting fb099 support.

fb099 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank, to process deposits and withdrawals on your behalf.
• KYC & Identity Verification Providers: Third-party services engaged to verify your identity and age in compliance with regulatory requirements.
• Fraud Prevention & AML Partners: Compliance service providers engaged to screen transactions and player activity against AML and fraud risk databases.
• Regulatory Authorities: Government agencies and regulatory bodies in the Philippines, including law enforcement, where disclosure is required by law or court order.
• IT & Platform Service Providers: Cloud hosting, data storage, and platform infrastructure providers engaged to operate the fb099 platform, all of whom are bound by confidentiality obligations.
• Game Content Providers: Third-party game studios whose games are available on the fb099 platform, to the extent necessary to deliver game services and resolve disputes.

fb099 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit the fb099 website. The following types of cookies are used:

You may manage or disable non-essential cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the fb099 platform. fb099 does not use third-party advertising cookies or cross-site tracking technologies.

fb099 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Transaction & Financial Data: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine AML regulations.
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Gaming Activity Data: Retained for a minimum of three (3) years for responsible gaming monitoring and dispute resolution purposes.
• Support Communications: Retained for a minimum of two (2) years for quality assurance and dispute resolution purposes.
• Technical & Log Data: Retained for up to twelve (12) months for security and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with fb099's data disposal procedures.

fb099 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit SSL Encryption: All data transmitted between your device and the fb099 platform is encrypted using 256-bit SSL/TLS protocols.
• Secure Data Storage: Personal data is stored on secured servers with access controls, firewalls, and intrusion detection systems.
• Access Controls: Access to personal data within fb099 is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Two-Factor Authentication: fb099 supports two-factor authentication (2FA) for player accounts to provide an additional layer of login security.
• Regular Security Audits: fb099 conducts regular security assessments and penetration testing to identify and remediate vulnerabilities.

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by fb099:

• Right to Be Informed: The right to be informed of how your personal data is collected, used, and processed — as set out in this Policy.
• Right of Access: The right to request a copy of the personal data fb099 holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data fb099 holds about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to fb099's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact the fb099 Data Protection Officer (DPO) via the contact details provided in Section 13 of this Policy. fb099 will respond to all data subject requests within thirty (30) days of receipt.

fb099 employs age verification measures during the registration process to prevent underage individuals from accessing the platform. If fb099 becomes aware that personal data has been collected from a person under 21 years of age, that data will be deleted immediately and the associated account will be permanently closed.

If you are a parent or guardian and believe that a minor has registered on the fb099 platform, please contact our support team immediately via live chat so that we can take prompt action.

fb099 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform operations. When material changes are made, fb099 will notify registered players via the email address or mobile number on file and will update the "Last Reviewed" date at the top of this document.

We encourage you to review this Policy periodically to stay informed about how fb099 protects your personal data. Your continued use of the fb099 platform following the publication of any changes constitutes your acceptance of the updated Policy.

fb099 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact the fb099 DPO through the following channels:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. fb099 cooperates fully with the NPC in all matters relating to data privacy compliance.