1. Introduction
This Privacy Policy ("Policy") describes how fb099 ("fb099," "we," "our," or "us") collects, processes, stores, and protects personal information relating to individuals ("you," "Player," or "User") who access or use the fb099 online gaming platform at fb099.org and any associated interfaces (the "Platform").
fb099 takes its obligations under applicable data protection laws seriously, including the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. By registering an account or using the fb099 Platform, you acknowledge that you have read this Policy and consent to the processing of your personal data as described herein.
Your data belongs to you. fb099 does not sell your personal information to third parties for their own marketing purposes. Period. Your data is used to operate, secure, and improve the fb099 Platform for you and fellow Filipino players.
2. Personal Data We Collect
fb099 collects the following categories of personal data in connection with your use of the Platform:
- Identity Data: Full legal name, date of birth, nationality, and government-issued identification document details (e.g., Philippine passport, SSS, UMID, PhilSys ID, driver's licence) collected during the Know Your Customer (KYC) verification process.
- Contact Data: Philippine mobile number (Smart, Globe, or DITO), email address, and residential address.
- Account Data: Username, encrypted password, account registration date, account status, and login history.
- Financial Data: Payment method details (GCash number, Maya wallet ID, bank account number), transaction history including deposits and withdrawals, and balance records. fb099 does not store full card numbers or banking credentials — financial data is handled via secure third-party payment processors.
- Gaming Data: Game session history, wager amounts, win/loss records, bonus usage, and responsible gaming tool settings.
- Technical Data: IP address, device type and model, operating system, browser type and version, and time zone. This data is collected automatically when you access the Platform.
- Communications Data: Records of your interactions with fb099 customer support, including live chat transcripts, email correspondence, and support ticket history.
3. How We Collect Your Data
fb099 collects personal data through the following means:
- Direct Collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, claiming promotions, or contacting fb099 support.
- Automated Collection: Technical data collected automatically via cookies, server logs, and similar tracking technologies when you access or use the Platform. See Section 10 (Cookies) for more detail.
- Third-Party Sources: Identity verification and fraud prevention data received from licensed KYC service providers, payment processors, and, where applicable, credit reference agencies. fb099 only engages reputable third-party data sources who are themselves bound by applicable data protection obligations.
4. How We Use Your Personal Data
fb099 processes your personal data for the following purposes:
- Account Management: To register, maintain, and administer your fb099 account, including verifying your identity and eligibility to use the Platform.
- Service Delivery: To provide access to games, process deposits and withdrawals, apply bonuses, and deliver the full range of fb099 Platform features.
- Legal Compliance: To comply with anti-money laundering (AML) obligations, PAGCOR regulatory requirements, tax reporting obligations, and other applicable legal duties. fb099 is required by law to retain certain transaction records for prescribed periods.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other illegal conduct on or through the Platform.
- Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour and to administer responsible gaming tools such as deposit limits, session controls, and self-exclusion.
- Customer Support: To respond to your enquiries, resolve disputes, and improve the quality of support services provided by the fb099 team.
- Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving Platform performance, game selection, and user experience.
- Communications: To send you transactional communications (account notifications, payment confirmations, security alerts) and, where you have opted in, promotional communications about fb099 offers and new games.
5. Legal Basis for Processing
fb099 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012 and applicable regulations:
- Contractual Necessity: Processing required to perform our obligations under the fb099 Terms & Conditions and to provide you with the services you have registered for.
- Legal Obligation: Processing required to comply with our obligations under Philippine law, including AML regulations, PAGCOR licensing conditions, and tax laws.
- Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, where such processing does not override your fundamental rights and interests.
- Consent: Processing for optional purposes such as promotional communications, where your prior consent has been freely given and may be withdrawn at any time.
6. Sharing Your Personal Data
fb099 does not sell your personal data. We share your data only in the following limited circumstances:
- Service Providers: Trusted third-party processors who assist in operating the fb099 Platform, including payment processors (GCash, Maya, BPI, BDO, Metrobank), KYC verification providers, IT infrastructure providers, and customer support software vendors. All processors are contractually bound to process your data solely on fb099's instructions and in compliance with applicable data protection law.
- Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), tax authorities, and law enforcement agencies, where disclosure is required by law or in response to a valid legal demand.
- Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of fb099's assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.
- With Your Consent: To any other third party where you have provided explicit prior consent.
fb099 does not transfer personal data outside of appropriate legal frameworks. Where cross-border data transfers occur in connection with third-party service providers, fb099 ensures that appropriate safeguards are in place.
7. Data Retention
fb099 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, and reporting obligations. In general:
- Account and identity data is retained for the duration of your account relationship with fb099 and for a period of at least five (5) years following account closure, in compliance with AML record-keeping obligations.
- Financial transaction records are retained for a minimum of five (5) years from the date of each transaction.
- Communications data (support interactions) is retained for three (3) years.
- Technical and usage data is retained in anonymised or aggregated form for platform analytics purposes.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with fb099's data disposal procedures.
8. Data Security
fb099 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- SSL/TLS encryption for all data transmitted between your device and the fb099 Platform.
- Encrypted storage of passwords using industry-standard hashing algorithms — fb099 does not store passwords in plaintext.
- Two-factor authentication (2FA) via SMS OTP, available to all fb099 account holders and strongly recommended.
- Role-based access controls limiting staff access to personal data on a need-to-know basis.
- Regular security assessments and penetration testing of Platform infrastructure.
- 24/7 fraud monitoring systems that detect and flag anomalous account activity in real time.
While fb099 applies rigorous security standards, no internet-based platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying fb099 immediately if you suspect any unauthorised access to your account.
9. Your Data Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by fb099:
- Right to Be Informed: You have the right to be informed about how fb099 collects and processes your personal data — which this Policy fulfils.
- Right of Access: You may request a copy of the personal data fb099 holds about you at any time.
- Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held by fb099. You can update basic profile information directly in your account dashboard.
- Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to fb099's legal retention obligations.
- Right to Data Portability: You have the right to receive a copy of certain personal data in a structured, commonly used, machine-readable format.
- Right to Object: You may object to certain types of processing, including processing for direct marketing purposes. You can opt out of promotional emails at any time by contacting support.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of the above rights, contact fb099 support via live chat or by email at [email protected]. fb099 will respond to verified requests within thirty (30) days.
10. Cookies & Tracking Technologies
fb099 uses cookies and similar tracking technologies to enhance your Platform experience, maintain session security, and collect anonymised usage analytics. The cookies used on the fb099 Platform fall into the following categories:
- Strictly Necessary Cookies: Required for core Platform functionality, including session authentication and security. These cannot be disabled without impacting Platform usability.
- Functional Cookies: Used to remember your preferences, such as your chosen language and last-viewed game category.
- Analytics Cookies: Used to collect anonymised, aggregated data about how users interact with the fb099 Platform, enabling us to identify areas for improvement.
You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the fb099 Platform. fb099 does not use cookies to serve third-party advertising or to track your activity across unrelated websites.
11. Minors
The fb099 Platform is strictly for individuals aged 21 years and above, in accordance with PAGCOR regulations governing online gaming in the Philippines. fb099 does not knowingly collect personal data from individuals under the age of 21. If fb099 becomes aware that personal data has been collected from a minor, that data will be deleted and the associated account permanently closed. If you believe a minor has registered on fb099, please contact our support team immediately.
12. Amendments to This Policy
fb099 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, Platform features, or applicable law. Material changes will be communicated to registered players via their registered email or mobile number, and/or by a prominent notice on the Platform, prior to the changes taking effect. The "Last updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically.