Privacy Policy – bso99

1. Introduction

bso99 ("we", "us", "our", "the Company") operates the online gaming platform located at bso99.club. In the course of providing our services to registered users ("you", "your", "the User") in the Philippines and elsewhere, bso99 necessarily collects and processes certain personal data. This Privacy Policy describes those practices in full and in accordance with the requirements of the Philippine Data Privacy Act of 2012 (R.A. 10173) and all relevant issuances by the National Privacy Commission (NPC).

By registering an account on bso99, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, you must not use the bso99 platform.

2. Data Controller

For the purposes of the Philippine Data Privacy Act and other applicable data protection legislation, bso99 is the data controller responsible for the personal data collected through the bso99.club platform. Any questions, requests, or concerns relating to your personal data should be directed to the bso99 Data Protection Officer (DPO) via the contact information set out in Section 14 of this Privacy Policy.

3. Personal Data We Collect

3.1 Data You Provide Directly

When you register for and use a bso99 account, we collect personal data that you provide directly to us, which may include:

• Identity data: Full legal name, date of birth, gender, nationality.
• Contact data: Email address, mobile phone number, residential address.
• Identity document data: PhilSys National ID number, UMID number, passport number, or driver's licence number, plus copies of the relevant documents submitted for KYC verification.
• Financial data: GCash account details, PayMaya account details, bank account information (BPI, BDO, Metrobank), card details (Visa/Mastercard) as applicable for deposits and withdrawals.
• Account credentials: Username and hashed password (bso99 cannot see your plain-text password).
• Support communications: The content of any messages you send to the bso99 support team via live chat or email.

3.2 Data Collected Automatically

When you access and use the bso99 platform, we automatically collect certain technical and behavioral data, including:

• IP address and approximate geolocation (city/region level).
• Device type, operating system, browser type and version.
• Pages visited, session duration, click patterns, and navigation paths.
• Login timestamps and session activity logs.
• Game play data, bet history, deposit and withdrawal records.

4. How bso99 Uses Your Personal Data

bso99 uses the personal data we collect for the following purposes:

• Account management: To register your account, verify your identity, manage your profile, and process your deposits and withdrawals.
• Service delivery: To provide access to casino games, sports betting, bingo, and all other bso99 platform features.
• Regulatory compliance: To fulfill bso99's obligations under PAGCOR licensing, Philippine AML laws, and the Data Privacy Act — including KYC verification, suspicious transaction reporting, and audit trail maintenance.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, bonus abuse, account takeover, and other security threats on the bso99 platform.
• Responsible gaming: To monitor gaming behavior and intervene where indicators of problem gambling are detected, including enforcing self-exclusion and limit settings you have applied.
• Customer support: To respond to your inquiries, resolve complaints, and improve the quality of bso99's customer service.
• Marketing and promotions: To send you relevant offers, bonus notifications, and promotional communications from bso99 — subject to your consent and your right to opt out at any time.
• Platform improvement: To analyze usage patterns and technical performance data for the purpose of improving bso99's website, games, and user experience.

5. Legal Basis for Processing

bso99 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Consent: Where you have given explicit, informed consent — such as for marketing communications.
• Contractual necessity: Where processing is necessary to perform the bso99 user agreement, including account management, payment processing, and service delivery.
• Legal obligation: Where processing is required to comply with PAGCOR licensing requirements, AML obligations, NPC regulations, and other applicable Philippine law.
• Legitimate interests: Where processing is necessary for bso99's legitimate business interests, such as fraud prevention, platform security, and service improvement — provided such interests do not override your data protection rights.

6. Data Sharing and Disclosure

bso99 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients under strict confidentiality and data processing agreements:

• Payment processors: GCash (GXI/G-Xchange Inc.), PayMaya (PayMaya Philippines, Inc.), BPI, BDO, Metrobank, Visa, and Mastercard — for the purpose of processing your financial transactions.
• KYC and identity verification providers: Regulated third-party identity verification services used to fulfill bso99's PAGCOR-mandated KYC obligations.
• Game content providers: Licensed game studios whose content is integrated into the bso99 platform may receive anonymized or pseudonymized gameplay data for technical integration purposes.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies — where legally required.
• Technology service providers: Cloud infrastructure, cybersecurity, analytics, and customer support platforms engaged by bso99 as data processors under binding data processing agreements.

Any third-party data processor engaged by bso99 is contractually required to process personal data only on bso99's instructions and to maintain appropriate security measures.

7. Cookies and Tracking Technologies

bso99 uses cookies and similar tracking technologies on the bso99.club website. Cookies are small data files stored on your device that help us recognize your browser, maintain your login session, remember your preferences, and analyze site usage.

7.1 Types of Cookies Used

• Essential cookies: Required for the bso99 platform to function — including session management, login authentication, and security features. These cannot be disabled.
• Analytical cookies: Used to collect anonymized data on how users interact with bso99, helping us improve the platform's design and performance.
• Marketing cookies: Used to deliver relevant promotional content from bso99 and to measure the effectiveness of marketing campaigns. These are only placed with your consent.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies may affect certain bso99 features but will not prevent you from using the core platform.

8. Data Retention

bso99 retains your personal data for as long as your account is active and for a minimum period of five (5) years following account closure, or such longer period as is required by PAGCOR regulations, Philippine AML laws, or any other applicable legal obligation. Specifically:

• Account and KYC records are retained for a minimum of five (5) years post-closure.
• Transaction and betting records are retained for a minimum of five (5) years in compliance with PAGCOR audit requirements.
• Support communications are retained for three (3) years from the date of last interaction.
• Marketing consent records are retained for three (3) years from the date of last consent or opt-out.

When the applicable retention period expires, bso99 will securely delete or anonymize your personal data.

9. Data Security

bso99 implements industry-standard technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and bso99 servers.
• Salted cryptographic hashing of all user passwords — bso99 staff cannot access your plain-text password.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular penetration testing and security audits by qualified third-party cybersecurity providers.
• Two-factor authentication (2FA) available to all bso99 account holders and required for all bso99 administrative staff.
• Incident response and data breach notification procedures in compliance with NPC requirements.

10. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data processed by bso99:

• Right to be informed: You have the right to know what personal data bso99 collects about you and how it is used — as set out in this Privacy Policy.
• Right of access: You may request a copy of the personal data bso99 holds about you.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held in your bso99 account.
• Right to erasure: Subject to bso99's legal retention obligations, you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time.
• Right to file a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe bso99 has violated your data privacy rights.

To exercise any of the above rights, please contact the bso99 Data Protection Officer using the details in Section 14. bso99 will respond to data subject requests within thirty (30) days of receipt.

11. Children and Minors

The bso99 platform is strictly for adults aged 21 years and above, in accordance with PAGCOR regulations and Philippine online gaming law. bso99 does not knowingly collect personal data from persons under the age of 21. If bso99 discovers that personal data has been collected from an underage individual, that account will be immediately closed and all associated personal data permanently deleted. If you believe a minor has registered on bso99, please contact our support team immediately.

12. International Data Transfers

bso99's primary data processing infrastructure is located within the Asia-Pacific region. In certain circumstances — such as the use of globally distributed cloud infrastructure, CDN services, or international game content providers — your personal data may be transferred to and processed in countries outside the Philippines. Any such transfers are conducted under appropriate safeguards, including standard contractual clauses or the equivalent data protection mechanisms recognized under Philippine law, to ensure your data receives a level of protection equivalent to that provided under R.A. 10173.

13. Changes to This Privacy Policy

bso99 may update this Privacy Policy periodically to reflect changes in our data practices, regulatory requirements, or platform features. Material changes will be communicated to registered users via email or an in-platform notification at least seven (7) days before the revised policy takes effect. The "Last updated" date at the top of this page will be revised accordingly. Your continued use of the bso99 platform after the effective date of any change constitutes your acceptance of the updated Privacy Policy.

14. Contact – Data Protection Officer

For all data privacy inquiries, access requests, correction requests, or complaints related to your bso99 personal data, please contact the bso99 Data Protection Officer:

Email: [email protected] (subject line: "Data Privacy Request")

bso99 will acknowledge receipt of your request within five (5) business days and provide a substantive response within thirty (30) days. Complex requests may take longer, in which case bso99 will notify you of the expected timeframe.

If you are not satisfied with bso99's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.