Summary for Filipino Players: bf099 collects only the personal data necessary to operate a PAGCOR-regulated casino and sportsbook platform. Your data is never sold. It is shared with government authorities only as required by Philippine law. You have the right to access, correct, and request deletion of your data under the Data Privacy Act of 2012. For questions, contact our Data Protection Officer at [email protected].
This Privacy Policy ("Policy") describes how bf099.org ("bf099," "we," "us," "the Platform") collects, uses, stores, discloses, and protects the personal information of individuals who access or use the bf099 online casino and sportsbook platform at bf099.org ("the Service").
This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations promulgated by the National Privacy Commission ("NPC"). It applies to all personal data processed by bf099 in connection with the Service, including data collected during account registration, identity verification, gaming activity, financial transactions, customer support interactions, and platform usage analytics.
This Policy should be read together with the bf099 Terms & Conditions, which govern the overall relationship between bf099 and its registered players. By registering a bf099 account or continuing to use the Service, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
This Policy applies to all users of the bf099 platform, including registered players, visitors who browse bf099.org without registering, and individuals who contact bf099 customer support. It does not apply to third-party websites or services linked from or integrated into bf099.org, which operate under their own privacy policies.
The data controller responsible for your personal information under this Policy is:
bf099.org
Platform: bf099 Online Casino & Sportsbook
Website: https://bf099.org
Regulatory Authority: Philippine Amusement and Gaming Corporation (PAGCOR)
Data Protection Officer Email: [email protected]
Jurisdiction: Republic of the Philippines
As a PAGCOR-regulated operator, bf099 is subject to oversight by both PAGCOR and the National Privacy Commission of the Philippines. Our Data Protection Officer ("DPO") is responsible for ensuring compliance with the DPA and handling all data subject requests and privacy-related inquiries.
bf099 collects personal data through multiple channels, including the registration process, KYC verification, gaming activity, financial transactions, customer support communications, and automated platform analytics. The following table summarizes the categories of data collected:
| Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender | Registration form, KYC documents |
| Contact Data | Philippine mobile number, email address | Registration form |
| Government ID Data | PhilSys ID number, UMID number, Driver's License number, Passport number | KYC verification upload |
| Financial Data | GCash number, bank account details (BPI, BDO, Metrobank), transaction amounts, deposit/withdrawal history | Payment processing, transaction logs |
| Gaming Activity Data | Games played, bet amounts, win/loss records, session durations, game preferences | Platform activity logs |
| Technical Data | IP address, device type, operating system, browser type, geolocation (city/region level) | Automated server and analytics logs |
| Communications Data | Customer support chat transcripts, email correspondence, dispute records | Support system records |
| Responsible Gaming Data | Deposit limit settings, self-exclusion requests, session time preferences | Account settings, responsible gaming tools |
The majority of personal data bf099 holds is provided directly by you during account registration, KYC submission, payment processing, and customer support interactions. Providing accurate, current, and complete data is a condition of using the bf099 Service and a PAGCOR regulatory requirement.
When you access bf099.org, our servers and analytics systems automatically collect certain technical data, including your IP address, device identifiers, browser type, operating system, referring URL, pages visited, and session duration. This data is used for platform security, fraud detection, and performance optimization. It does not identify you personally in isolation but may be combined with other data to do so.
bf099 may receive personal data about you from third-party payment processors (GCash, PayMaya, BPI, BDO, Metrobank) in connection with payment verification, and from Philippine government databases in connection with KYC and AML compliance checks as authorized by law.
bf099 processes your personal data for the following purposes:
Under the Data Privacy Act of 2012, bf099 processes your personal data on the following legal bases:
bf099 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data is shared only in the following circumstances:
bf099 engages third-party service providers to operate the platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), game software providers (JILI Games, Pragmatic Play, PG Soft), KYC verification services, cloud infrastructure providers, and customer support tools. These providers process your data solely on bf099's instructions and under contractual data processing agreements that require them to maintain appropriate security standards.
bf099 is required by Philippine law to disclose personal data to the following authorities upon lawful request or mandatory reporting obligation: the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and Philippine courts and law enforcement agencies in connection with legal proceedings.
In the event of a merger, acquisition, or sale of substantially all assets of bf099, your personal data may be transferred to the successor entity, provided that such transfer complies with the Data Privacy Act and that you are notified prior to the transfer becoming effective.
bf099 retains your personal data for as long as necessary to fulfill the purposes described in this Policy, subject to the following minimum retention periods mandated by Philippine law:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with bf099's data disposal procedures. You may request early deletion of your data where no legal retention obligation prevents it — see Section 10 for your rights.
bf099 implements organizational and technical security measures appropriate to the nature of the personal data processed and the risks associated with an online gaming and financial services platform. These measures include:
Despite these measures, no online platform can guarantee absolute data security. You are responsible for maintaining the security of your bf099 login credentials. If you suspect unauthorized access to your account, contact [email protected] immediately.
bf099.org uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device. The following categories of cookies are used:
You may manage your cookie preferences through your browser settings. Disabling performance and analytics cookies will not affect your ability to use the core bf099 platform but may limit our ability to diagnose and resolve technical issues.
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bf099:
You have the right to be informed of the manner in which your personal data is being collected, processed, and used — which is the purpose of this Policy.
You have the right to request a copy of the personal data bf099 holds about you, information about the purposes for which it is processed, and the identities of third parties to whom it has been disclosed.
You have the right to request correction of inaccurate or incomplete personal data. For KYC data, corrections must be supported by updated documentary evidence.
You have the right to request deletion of personal data that is no longer necessary for its original purpose, where consent has been withdrawn, or where processing is unlawful — subject to bf099's legal retention obligations under PAGCOR regulations and the AML Act.
You have the right to object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where there are compelling grounds relating to your particular situation.
You have the right to receive a structured, machine-readable copy of personal data you have provided to bf099, where processing is based on consent or contractual necessity and is carried out by automated means.
If you believe bf099 has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission of the Philippines through NPC's official government channels.
To exercise any of the above rights, submit a written request to our Data Protection Officer at [email protected]. bf099 will respond to all valid data subject requests within fifteen (15) business days of receipt, as required by the DPA. Identity verification may be required before processing your request.
bf099 does not knowingly collect or process the personal data of individuals under the age of twenty-one (21) years. The bf099 platform is restricted to adults aged 21 and over as required by PAGCOR. Age verification is performed through mandatory KYC review of government-issued Philippine identification during the account activation process.
If bf099 determines at any point that personal data has been collected from an individual under 21 years of age, we will immediately terminate the associated account, delete all personal data collected from that individual (subject to any legal reporting obligations triggered by the attempted underage registration), and return any deposited funds to the original payment source.
If you believe a minor has registered on the bf099 platform, please notify us immediately at [email protected].
bf099 primarily processes personal data within the Philippines using Philippine-based infrastructure. Where data is processed by third-party service providers whose operations or data centers are located outside the Philippines — such as cloud infrastructure providers or international game software providers — bf099 ensures that such transfers comply with Section 21 of the Data Privacy Act, which requires that the recipient country or organization provides an adequate level of protection for personal data comparable to Philippine standards.
Cross-border data transfer agreements (data processing agreements or standard contractual clauses) are in place for all international service providers engaged by bf099 that may process personal data of Philippine data subjects. Details of specific cross-border transfers are available upon request from our Data Protection Officer.
bf099 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. Material changes to this Policy will be communicated to registered players via SMS to the registered Philippine mobile number or email notification at least seven (7) calendar days prior to the effective date of the revised Policy.
The effective date at the top of this Policy indicates when the current version took effect. Continued use of the bf099 platform following notification of a Policy update constitutes acknowledgment of the updated Policy. If you do not agree to any material change, you may close your account as described in the Terms & Conditions.
For any privacy-related inquiries, data subject rights requests, or concerns about bf099's data processing practices, please contact our designated Data Protection Officer:
bf099.org Data Protection Officer
Email: [email protected]
Subject Line: "Data Privacy Request — [Your Full Name]"
Response Time: Within 15 business days (DPA-mandated)
Operating Hours: 24/7 for urgent security matters; standard inquiries within business hours
For formal complaints that have not been satisfactorily resolved by bf099, you may lodge a complaint with the National Privacy Commission of the Philippines through NPC's official government channels, or contact PAGCOR's Player Services division for gaming-related privacy concerns.
Six principles that govern how bf099 handles your data
bf099 processes all personal data in strict compliance with Republic Act No. 10173. Our DPO is registered with the NPC and responsible for ongoing compliance oversight.
Your personal data is never sold, rented, or traded to third parties for their commercial benefit. Sharing occurs only with service providers under strict contracts, or with Philippine government authorities as required by law.
Sensitive personal data — including KYC documents and financial information — is encrypted at rest using AES-256 and in transit using SSL/TLS, meeting international banking-grade security standards.
Philippine law gives you the right to access, correct, delete, and port your personal data. bf099 processes all valid data subject requests within the 15-business-day window required by the DPA.
bf099 retains personal data only for as long as required by law or operational necessity. Data is securely deleted or anonymized upon expiry of applicable retention periods under PAGCOR and AML Act requirements.
In the event of a data breach affecting your personal information, bf099 is required to notify the NPC within 72 hours and affected data subjects without undue delay — in compliance with NPC Circular 16-03.
Filipino players deserve a platform that handles their data the way it handles their money — with care, transparency, and accountability. That's what bf099 is built to do. 21+ only. PAGCOR regulated. Play responsibly.
⚠️ 21+ only. Gambling involves financial risk. Please play responsibly.