bso99 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how bso99.co ("bso99", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of individuals ("Players", "Users", "you") who access or use the bso99 online casino and sports betting platform available at https://bso99.co.

bso99 is committed to protecting the privacy and personal data of Filipino players in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), and its implementing rules and regulations issued by the National Privacy Commission ("NPC") of the Philippines. bso99 also processes personal data in connection with its obligations under PAGCOR licensing requirements and applicable anti-money laundering legislation.

By registering an account on bso99 or using any feature of the bso99 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not consent to this Policy, you must not create an account or use the bso99 platform.

2. Data Controller

bso99.co is the data controller for personal data collected through the bso99 platform. As data controller, bso99 determines the purposes and means by which your personal data is processed. bso99 is responsible for ensuring that personal data is processed in accordance with the DPA and this Policy.

bso99 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with the DPA and this Policy. You may contact the bso99 DPO through the contact details provided in Section 13 of this Policy.

3. Personal Data We Collect

bso99 collects personal data through several channels, including account registration, identity verification, payment processing, and platform interaction. The categories of personal data collected by bso99 include:

• Identity Data: Full legal name, date of birth, government-issued ID type and number (e.g., Philippine passport, SSS, UMID, driver's licence), nationality, and photograph (where required for verification).
• Contact Data: Philippine mobile number, email address (where provided), and residential address.
• Financial Data: GCash mobile number, PayMaya account reference, bank account details (BPI, BDO, Metrobank), deposit history, withdrawal history, and transaction records. bso99 does not store full bank card numbers or CVV codes.
• Account Data: Username, account ID, login history, session timestamps, device identifiers, and IP addresses associated with account access.
• Gaming Activity Data: Game history, betting patterns, wagering amounts, win/loss records, bonus usage, and responsible gaming tool settings.
• Technical Data: Browser type, operating system, device model, screen resolution, referring URL, and platform navigation data collected automatically via cookies and server logs.
• Communications Data: Records of correspondence between you and bso99 customer support, including chat transcripts and email records.

4. How bso99 Uses Your Personal Data

bso99 uses the personal data collected for the following purposes:

• To create, verify, and maintain your bso99 player account.
• To verify your age and identity in compliance with PAGCOR's Know Your Customer ("KYC") requirements and the Anti-Money Laundering Act (Republic Act No. 9160, as amended).
• To process deposits and withdrawals through your chosen Philippine payment method (GCash, PayMaya, BPI, BDO, Metrobank).
• To provide access to bso99's gaming services, including live casino, slots, bingo, fishing games, and sports betting.
• To administer bonuses, promotions, and loyalty programs applicable to your bso99 account.
• To detect, investigate, and prevent fraud, money laundering, account abuse, and other prohibited activities.
• To enforce bso99's Terms and Conditions and this Privacy Policy.
• To comply with legal and regulatory obligations, including reporting obligations to PAGCOR and the Anti-Money Laundering Council ("AMLC").
• To provide customer support and resolve account-related inquiries and disputes.
• To send account-related communications, including security alerts, transaction confirmations, and policy updates. bso99 will not send unsolicited marketing communications without your consent.
• To improve platform functionality, user experience, and game offerings based on aggregated, anonymised usage data.

5. Legal Basis for Processing

bso99 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing necessary to enter into and perform the contract established by the bso99 Terms and Conditions — including account creation, payment processing, and game access.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act, and other applicable Philippine law — including KYC verification, transaction monitoring, and regulatory reporting.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such processing is proportionate and does not override your fundamental rights.
• Consent: Processing for optional communications and marketing activities, where you have provided explicit, informed consent. You may withdraw consent at any time by contacting [email protected].

6. Data Sharing & Third-Party Disclosure

bso99 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. bso99 shares personal data only in the following circumstances:

• Regulatory Authorities: bso99 discloses personal and financial data to PAGCOR, the AMLC, and other competent Philippine government authorities as required by law or regulation.
• Payment Processors: Transaction data is shared with licensed Philippine payment service providers (GCash/GXI, PayMaya/Voyager, and partner banks) solely to process deposits and withdrawals.
• Game Providers: Account reference identifiers (not full identity data) are shared with licensed third-party game software providers to enable game access and auditing.
• Identity Verification Services: Identity documents and identity data may be shared with PAGCOR-accredited KYC verification service providers for the purpose of age and identity verification.
• Legal Proceedings: bso99 may disclose personal data in response to a valid court order, subpoena, or other binding legal process under Philippine law.

All third parties with whom bso99 shares personal data are contractually required to maintain the confidentiality of that data and to process it only for the specified purpose.

7. Cookies & Tracking Technologies

bso99 uses cookies and similar tracking technologies on its platform. Cookies are small data files placed on your device that allow bso99 to recognise your browser across sessions, maintain your login state, and understand how players use the platform.

The types of cookies used by bso99 include:

• Essential Cookies: Required for the platform to function — including session authentication, security tokens, and login state persistence. These cannot be disabled without disrupting platform functionality.
• Functional Cookies: Remember your preferences, such as language settings and responsible gaming tool configurations.
• Analytics Cookies: Collect anonymised usage data to help bso99 understand how players navigate the platform, which pages are most visited, and where technical issues occur. This data is aggregated and does not identify individual players.

You may configure your browser to refuse or delete cookies. Note that disabling essential cookies will prevent you from logging into your bso99 account.

8. Data Retention

bso99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the satisfaction of legal, regulatory, and reporting requirements. Specific retention periods include:

• Account Data: Retained for the duration of your active bso99 account, plus a minimum of five (5) years following account closure, as required by PAGCOR and AMLC regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years following each transaction, in compliance with Philippine anti-money laundering record-keeping requirements.
• KYC Verification Documents: Retained for a minimum of five (5) years following account closure, or longer where required by a regulatory investigation or legal proceeding.
• Customer Support Records: Retained for two (2) years following the close of each support interaction, unless related to an ongoing dispute or regulatory matter.

Upon expiry of applicable retention periods, bso99 will securely delete or anonymise personal data in accordance with NPC guidelines.

9. Data Security

bso99 implements technical and organisational security measures appropriate to the sensitivity of the personal data it processes. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bso99 servers.
• Encryption of sensitive personal data at rest within bso99's data storage systems.
• Access controls restricting personal data access to bso99 personnel and contractors with a legitimate operational need.
• Multi-factor authentication requirements for bso99 administrative systems that access personal data.
• Regular security assessments and vulnerability testing of the bso99 platform.
• Staff training on data privacy obligations under the DPA and bso99's internal data protection policies.

In the event of a personal data breach that is likely to result in significant harm to affected individuals, bso99 will notify the NPC and affected players in accordance with the DPA's breach notification requirements.

10. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bso99:

• Right to Be Informed: The right to be informed that your personal data is being collected and processed, including the purposes and legal bases for processing.
• Right of Access: The right to obtain a copy of the personal data bso99 holds about you and information about how it is processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held by bso99.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bso99's legal retention obligations.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to Object: The right to object to the processing of your personal data on the basis of legitimate interests, where your fundamental rights override those interests.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission if you believe bso99 has violated your rights under the DPA.

To exercise any of these rights, submit a written request to [email protected]. bso99 will respond to verified data subject requests within fifteen (15) calendar days, as required by the DPA implementing rules.

11. Minors and Age Restriction

bso99 does not knowingly collect personal data from individuals under the age of 21. The bso99 platform is not directed at minors. In compliance with PAGCOR requirements, bso99 enforces a strict 21+ age restriction at registration and through ongoing KYC verification.

If bso99 becomes aware that personal data has been collected from an individual under 21 years of age, bso99 will immediately suspend the relevant account, delete the personal data collected, and report the matter as required by applicable law and PAGCOR regulations.

Parents and guardians who believe their child has registered an account on bso99 are encouraged to contact bso99 immediately at [email protected].

12. Updates to This Privacy Policy

bso99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. Material changes to this Policy will be communicated to registered players via the Platform or through registered contact information.

The effective date of the current version of this Policy is stated at the top of this page. Continued use of the bso99 platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

13. Contact & Data Subject Requests

For questions about this Privacy Policy, to exercise your data subject rights, or to contact bso99's Data Protection Officer, please use the following:

• Email: [email protected]
• Platform: https://bso99.co

For general information about bso99, please visit our About Us page. For bso99's Terms and Conditions, visit Terms & Conditions. For responsible gaming resources, visit Responsible Gaming.