bf009 Privacy Policy

1. Introduction

bf009 ("bf009," "we," "us," or "our") operates the online gaming and sports betting platform accessible at bf009.net (the "Platform"). We are committed to protecting the privacy and personal data of all users ("you," "Player," or "Data Subject") in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission (NPC).

This Privacy Policy ("Policy") describes the types of personal data bf009 collects from players and visitors, the purposes for which that data is processed, the circumstances under which it may be shared, your rights as a data subject, and how you can exercise those rights. This Policy applies to all services offered through the bf009 Platform, including online casino games, sports betting, bingo, and related promotional and customer service activities.

By accessing the Platform, registering an account, or otherwise interacting with bf009 services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, please do not use the Platform.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, bf009 acts as the Data Controller with respect to the personal data of registered players and Platform visitors. As Data Controller, bf009 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is lawful, fair, and transparent.

bf009 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with data privacy obligations. You may contact the DPO directly via email at [email protected] with the subject line "Data Privacy — DPO Enquiry." All DPO communications are handled with confidentiality.

3. Data We Collect

bf009 collects the following categories of personal data from players and Platform visitors. The specific data collected depends on how you interact with the Platform.

Category	Examples of Data Collected	Purpose
Identity Data	Full legal name, date of birth, nationality, government-issued ID number (e.g., PhilSys, passport, UMID, SSS ID, driver's licence)	Account registration, KYC verification, age verification
Contact Data	Email address, Philippine mobile number, residential address (city, province, postal code)	Account communication, support, notifications
Financial Data	GCash number, Maya account, bank account details (BPI, BDO, Metrobank), transaction history, deposit and withdrawal records	Payment processing, AML compliance, fraud prevention
Technical Data	IP address, device type, browser type and version, operating system, session timestamps, geolocation (city-level)	Platform security, fraud detection, service optimisation
Usage Data	Pages visited, games played, bet history, session duration, bonus redemptions, login frequency	Responsible gaming monitoring, personalisation, analytics
Communications Data	Live chat transcripts, support email content, feedback submissions	Customer support, dispute resolution, quality assurance
Marketing Preferences	Email/SMS opt-in or opt-out status, preferred language, bonus preferences	Sending relevant promotional communications where consented

bf009 does not intentionally collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance. We do not collect biometric data, health information, or political or religious affiliations.

4. How We Collect Data

bf009 collects personal data through the following means:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting support, or filling in any Platform form.
• Automated Collection: Technical and usage data collected automatically when you access or use the Platform, including through cookies, web beacons, and server logs.
• Third-Party Payment Providers: Transaction confirmation data received from payment processors such as GCash, Maya, GrabPay, InstaPay, PesoNet, and partner banks (BPI, BDO, Metrobank) when you make deposits or withdrawals.
• Identity Verification Partners: Where bf009 uses a third-party KYC service to verify identity documents, that provider may return verification results and document metadata to bf009.
• Publicly Available Sources: In certain cases involving fraud investigation or AML checks, bf009 may supplement account data with information from publicly available government or regulatory databases.

5. How We Use Your Data

bf009 processes your personal data for the following purposes:

• Account Management: To register, maintain, and administer your bf009 account, including processing logins, account settings changes, and password resets.
• Identity and Age Verification: To confirm that you are who you say you are and that you meet the minimum age requirement of 21 years as required under Philippine gaming regulations.
• Payment Processing: To process deposits, withdrawals, and refunds via your chosen payment method (GCash, Maya, GrabPay, BPI, BDO, Metrobank, InstaPay, PesoNet, 7-Eleven CLiQQ, QR Ph).
• Legal and Regulatory Compliance: To meet bf009's obligations under the Data Privacy Act, Anti-Money Laundering Act (AMLA), and applicable gaming regulations, including record-keeping and reporting requirements.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, collusion, money laundering, and other prohibited activities.
• Responsible Gaming: To monitor gaming patterns and intervene where there are signs of problem gambling behaviour, enforce self-exclusion requests, and maintain responsible gaming tools.
• Customer Support: To respond to your enquiries, resolve disputes, and improve our support processes through quality assurance reviews of support interactions.
• Marketing Communications: Where you have opted in, to send you promotional offers, tournament announcements, and platform updates via email or SMS. You may opt out at any time.
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the performance and features of the bf009 Platform.

6. Legal Basis for Processing

bf009 processes your personal data on one or more of the following legal bases under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Consent: Where you have given clear, freely given, specific, informed, and unambiguous consent to the processing of your data for a particular purpose (e.g., marketing communications). You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Contractual Necessity: Where processing is necessary to perform our contract with you (i.e., the bf009 Terms and Conditions), including operating your account, processing payments, and delivering gaming services.
• Legal Obligation: Where processing is required for bf009 to comply with its legal obligations under Philippine law, including the Anti-Money Laundering Act, data privacy regulations, and gaming licensing requirements.
• Legitimate Interests: Where processing is necessary for bf009's legitimate interests, provided those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, and service analytics.

7. Sharing Your Data

7.1 Third-Party Service Providers

bf009 may share your personal data with carefully selected third-party service providers who assist us in operating the Platform. These include payment processors (GCash, Maya, GrabPay, BPI, BDO, Metrobank, InstaPay, PesoNet), identity verification providers, cloud hosting and infrastructure providers, and customer support software vendors. All third-party processors are contractually required to handle your data securely, use it only for the specified purpose, and comply with applicable data privacy laws.

7.2 Regulatory and Law Enforcement Authorities

bf009 may disclose your personal data to government agencies, regulatory bodies, or law enforcement authorities where required or permitted by Philippine law. This includes the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent authorities. Such disclosures are made only to the extent necessary and in accordance with applicable legal procedures.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of bf009's business, your personal data may be transferred to the relevant successor entity. If such a transfer occurs, you will be notified in advance, and the successor entity will be bound by data privacy obligations no less protective than those set out in this Policy.

7.4 No Sale of Data

bf009 does not sell, rent, or trade your personal data to third-party marketers, data brokers, or any other commercial parties for their own marketing or commercial purposes. Full stop.

8. Cookies & Tracking Technologies

bf009 uses cookies and similar tracking technologies on the Platform to ensure proper functionality, enhance your user experience, and gather analytical insights. The types of cookies we use include:

• Essential Cookies: Required for the Platform to function correctly, including session management, login persistence, and security features. These cannot be disabled without affecting Platform functionality.
• Analytical Cookies: Used to collect anonymised information about how players interact with the Platform — such as pages visited and session duration — to help us improve performance and user experience.
• Functional Cookies: Allow the Platform to remember your preferences, such as language settings and game display options, to provide a personalised experience.
• Security Cookies: Used to detect and prevent fraudulent activity, including session hijacking and credential stuffing attempts.

You can manage cookie preferences through your browser settings. Blocking essential cookies may prevent certain Platform features from working correctly. bf009 does not use third-party advertising cookies or retargeting pixels.

9. Data Retention

bf009 retains your personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by Philippine law and applicable gaming regulations. The following retention periods generally apply:

• Account Data: Retained for the duration of your active account and for a period of at least five (5) years after account closure, as required for AML and regulatory record-keeping purposes.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction in compliance with the Anti-Money Laundering Act.
• KYC Documents: Retained for the duration of your account and for at least five (5) years after account closure.
• Support Communications: Retained for up to two (2) years after the support interaction is resolved, unless required longer for dispute resolution purposes.
• Technical and Usage Logs: Retained for up to twelve (12) months and then deleted or anonymised.
• Marketing Preferences: Retained until you withdraw consent or close your account, whichever comes first.

When personal data is no longer required, bf009 will securely delete or anonymise it in a manner that prevents reconstruction or identification.

10. Data Security

bf009 implements technical, organisational, and administrative security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and bf009 servers.
• Encryption of sensitive data at rest, including financial data and identity documents.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent their role requires.
• Regular security assessments and vulnerability testing of Platform infrastructure.
• Multi-factor authentication requirements for internal systems that process personal data.
• Incident response procedures for detecting, containing, and reporting data breaches in accordance with NPC requirements.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, bf009 will notify the National Privacy Commission and affected players in accordance with applicable breach notification requirements under the Data Privacy Act.

11. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bf009:

• Right to Be Informed: The right to be told what personal data bf009 collects about you, how it is used, and with whom it is shared — which this Policy fulfils.
• Right of Access: The right to obtain a copy of the personal data bf009 holds about you and information about how it is processed.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected. You can update most account information directly through your account settings or by contacting support.
• Right to Erasure ("Right to be Forgotten"): The right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bf009's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data where bf009 relies on legitimate interests as the legal basis, including objecting to direct marketing at any time.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another service provider where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe bf009 has violated your data privacy rights. The NPC can be reached through its official channels.

To exercise any of these rights, contact bf009 at [email protected] with the subject line "Data Privacy Rights Request." We will respond within fifteen (15) business days of receiving your verified request. We may need to verify your identity before processing certain requests.

12. Children and Minors

The bf009 Platform is strictly intended for adults aged 21 years and above in accordance with Philippine gaming regulations. bf009 does not knowingly collect personal data from individuals under the age of 21. If you believe that a minor has registered an account or provided personal data to bf009, please notify us immediately at [email protected] and we will take prompt action to investigate and delete the relevant data.

Parents and guardians are encouraged to use parental control tools and monitor online activity to prevent minors from accessing online gambling platforms. bf009 cooperates fully with verification processes designed to exclude underage players.

13. Changes to This Privacy Policy

bf009 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform features. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via email or an in-Platform notification.

Your continued use of the bf009 Platform after a revised Policy has been posted constitutes your acknowledgment and acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we protect your personal data.

14. Contact & Data Protection Officer

If you have questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by bf009, please contact us through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Data Privacy Enquiry" or "Data Privacy Rights Request"
• Support Hours: 8AM – 12MN PHT, daily

For formal complaints that cannot be resolved directly with bf009, you have the right to escalate your concern to the National Privacy Commission of the Philippines through their official published channels.