bf099 Privacy Policy – How We Handle Your Data

1. What Personal Data bf099 Collects

bf099 collects personal data that falls into the following categories. We collect only the minimum information required to deliver our services safely and in compliance with applicable regulations.

bf099 does not collect sensitive personal data such as health information, political opinions, or religious beliefs. The only exception is age-related data, which is required to verify that members meet the minimum age requirement of 18 years.

2. How bf099 Collects Your Data

Personal data is collected through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey or promotion.
• Automatically — when you use the bf099 platform, technical data such as your IP address, device details, and session activity is captured automatically by our servers and analytics tools.
• From payment providers — when you deposit or withdraw via GCash, Maya, your bank, or another payment method, we receive confirmation data necessary to process the transaction.
• From identity verification services — when you complete KYC verification, a regulated third-party provider may confirm the authenticity of your identity documents and return a verification status to bf099.
• From fraud prevention systems — our fraud detection tools may cross-reference your account data against known risk indicators to protect all members from financial crime.

3. Why bf099 Uses Your Personal Data

bf099 uses your personal data for specific, clearly defined purposes. We do not use your data in ways that are incompatible with the reason it was originally collected. The main purposes are:

• Account management — to create, maintain, and secure your bf099 account
• Transaction processing — to handle deposits, withdrawals, and bet settlements accurately and securely
• Identity verification — to confirm that you are who you say you are, that you meet the minimum age requirement, and that your payment methods are legitimately yours
• Customer support — to respond to queries, investigate complaints, and resolve disputes
• Legal and regulatory compliance — to meet our obligations under Philippine gaming law, anti-money laundering requirements, and data protection regulations
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, unauthorised access, and abuse of promotional offers
• Platform improvement — to analyse how members use the platform and identify areas for improvement
• Responsible gaming — to monitor account activity for signs of problem gambling and to apply limits or interventions where appropriate
• Marketing (with consent only) — to send you promotional offers, news, and relevant updates if you have opted in to receive them

4. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, bf099 must have a lawful basis for processing your personal data. Depending on the specific activity, we rely on one or more of the following legal bases:

• Contract performance — processing necessary to fulfil the services described in our Terms and Conditions, such as operating your account and processing transactions
• Legal obligation — processing required to comply with applicable Philippine law, including anti-money laundering obligations and gaming regulations
• Legitimate interests — processing for fraud prevention, security monitoring, and platform improvement, where our interests do not override your fundamental privacy rights
• Consent — processing for marketing communications, where you have explicitly opted in; you may withdraw consent at any time

5. Who bf099 Shares Your Data With

bf099 does not sell your personal data. We share data only where it is necessary for legitimate operational purposes or required by law. The categories of recipients are:

• Payment processors — GCash, Maya, BDO, BPI, UnionBank, and other payment providers receive data necessary to process your transactions. These providers are bound by their own privacy obligations.
• Identity verification providers — regulated KYC service providers receive your identity documents and return a verification result to bf099 for compliance purposes.
• Fraud prevention and security services — third-party tools used to detect fraudulent activity may process anonymised or pseudonymised data from your account activity.
• Game and software providers — the providers of specific casino games, virtual sports engines, and fishing games may receive session-level data necessary to run the games you play.
• Regulatory authorities — we will disclose personal data to gaming regulators, law enforcement, or other government authorities when required to do so by law or in connection with an investigation.
• Legal advisers — in the event of a legal dispute or regulatory inquiry, our legal counsel may have access to relevant personal data under strict confidentiality obligations.

6. Cookies and Tracking Technologies

bf099 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and gather data about how the site is used. Here is a breakdown of the types of cookies we use:

• Essential cookies — required for the platform to function. These cannot be disabled without breaking core features such as login sessions and bet placement.
• Functional cookies — remember your preferences such as language settings, preferred sports, and display options to personalise your experience.
• Analytics cookies — collect anonymised data about page visits, time spent, and feature usage to help us understand how members navigate the platform.
• Security cookies — used to detect and prevent fraudulent activity, including identifying unusual login patterns or suspicious device changes.

You can manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to log in and use the platform. Disabling analytics or functional cookies will not affect your ability to bet or play games but may reduce the personalisation of your experience.

bf099 does not use third-party advertising cookies or permit any external advertising network to place tracking cookies on your device through our platform.

7. How Long bf099 Keeps Your Data

bf099 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The general retention periods are:

• Account data — retained for the duration of your active account, plus a minimum of five years after account closure, as required by Philippine anti-money laundering regulations.
• Transaction records — retained for a minimum of five years, in line with financial record-keeping requirements under Philippine law.
• KYC and identity verification documents — retained for a minimum of five years after the last transaction or account closure, whichever is later.
• Support and communications data — retained for three years following the resolution of the relevant query or complaint.
• Marketing preferences — retained until you withdraw consent or your account is closed, whichever comes first.
• Technical and security data — retained for up to 12 months for fraud prevention and platform security analysis.

When personal data is no longer required, bf099 securely deletes or anonymises it so that it can no longer be associated with an identifiable individual.

8. How bf099 Protects Your Data

bf099 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it. These include:

• SSL/TLS encryption on all data transmissions between your device and our servers
• Encrypted storage of sensitive personal and financial data at rest
• Access controls limiting which staff can access member data, based on the principle of least privilege
• Multi-factor authentication requirements for internal administrative systems
• Regular security audits and penetration testing of the platform infrastructure
• Automated monitoring systems that flag unusual activity for security review
• Staff training on data protection obligations and handling procedures

While bf099 takes every reasonable precaution to protect your data, no online system can guarantee complete security. If you believe your account has been compromised, please contact our support team immediately so we can take appropriate action.

In the event of a personal data breach that poses a risk to member rights and freedoms, bf099 will notify the National Privacy Commission as required under the Data Privacy Act and will inform affected members without undue delay.

9. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bf099:

10. Minors and Under-Age Users

bf099 strictly prohibits use of the platform by anyone under 18 years of age. We do not knowingly collect personal data from minors. If we discover that an account has been created by or on behalf of a person under 18, the account will be immediately suspended, any deposits will be refunded, and all collected data will be deleted.

If you are a parent or guardian and believe that a minor has registered on bf099 without your knowledge or consent, please contact our support team immediately so we can investigate and act accordingly.

11. Changes to This Privacy Policy

bf099 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make changes, we will update the "Last updated" date at the top of this page. For significant changes, we may also notify members directly via email or an in-platform notification.

Your continued use of the bf099 platform after a policy update is posted constitutes your acceptance of the revised policy. We recommend reviewing this page periodically, especially before using a new feature or service.

12. Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or want to raise a concern about how bf099 handles your personal data, please get in touch with our Data Privacy Officer through the following channel:

Email: support@bf099.best
Subject line: Data Privacy Request — [Your Name] — [Account Email]

bf099 aims to acknowledge all privacy-related inquiries within 72 hours and to resolve them within 30 days. If your request is complex or involves a large volume of data, we may extend this period by up to an additional 30 days, in which case we will notify you of the extension and the reason for it.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the government authority responsible for enforcing the Data Privacy Act.