99bom Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 99bom ("we," "us," "our") collects, uses, stores, and protects the personal information of players and visitors ("you," "your") who access the 99bom platform at 99bom.app. It applies to all personal data processed in connection with your use of the 99bom website, mobile interface, games, and related services (collectively, the "Platform").

99bom is committed to protecting the privacy and personal data of all users in accordance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). This Policy should be read together with our Terms and Conditions and our Responsible Gaming Policy.

By registering an account, accessing the Platform, or otherwise using any 99bom service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue your use of the Platform.

2. Personal Data We Collect

99bom collects the following categories of personal data, depending on how you interact with the Platform:

2.1 Registration and Identity Data

• Full legal name
• Date of birth (for age verification – players must be 21 years or older)
• Philippine mobile number
• Email address
• Username and encrypted password
• Residential address (province, city, barangay)

2.2 Identity Verification (KYC) Data

• Government-issued photo identification (Philippine passport, driver's license, SSS/UMID card, PhilSys National ID, or Voter's ID)
• Proof of address documents
• Selfie or liveness verification image (where required)
• Proof of payment method ownership

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records
• Payment method details (GCash account reference, Maya account reference, bank account details – stored in tokenized form only)
• Transaction amounts in Philippine Peso (PHP)
• Transaction timestamps and reference numbers

2.4 Gaming Activity Data

• Game session records (games played, wagers placed, outcomes)
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

2.5 Technical and Device Data

• IP address and approximate geographic location
• Device type, operating system, and browser type
• Session duration and navigation patterns on the Platform
• Cookie identifiers and similar tracking data (see Section 7)

2.6 Communications Data

• Records of your communications with 99bom customer support (live chat transcripts, email correspondence)
• Feedback and survey responses
• Promotional communication preferences

3. How We Collect Your Data

99bom collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automatically: When you access and use the Platform, we automatically collect technical and device data through cookies, log files, and similar tracking technologies. This includes your IP address, device identifiers, session data, and browsing behavior on the Platform.
• From third-party payment providers: When you make a deposit or withdrawal via GCash, PayMaya, or a Philippine bank, we receive transaction confirmation data from the relevant payment provider to reconcile your account balance.
• From identity verification partners: Where we use third-party KYC service providers to assist with age and identity verification, we may receive verification results and associated data from those providers.
• From fraud prevention and security services: We may receive data from third-party fraud detection and anti-money laundering screening services to protect the integrity of the Platform and comply with our regulatory obligations.

4. How We Use Your Personal Data

99bom uses the personal data we collect for the following purposes:

We will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for the processing.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, 99bom processes your personal data on the following legal bases:

• Contract performance: Processing is necessary to perform our obligations under the Terms and Conditions you have agreed to, including operating your account, processing transactions, and providing gaming services.
• Legal obligation: Processing is required to comply with applicable Philippine laws and regulations, including anti-money laundering laws, age verification requirements, and PAGCOR regulatory directives.
• Legitimate interest: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and improving the quality of our services, provided those interests are not overridden by your rights and interests.
• Consent: For certain processing activities, such as sending you marketing communications or using non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Sharing Your Personal Data

6.1 Third Parties We Share Data With

99bom does not sell your personal data. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment service providers: GCash, PayMaya/Maya, and Philippine banking partners, for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification service providers engaged to assist with our compliance obligations.
• Fraud prevention and security providers: Third-party services that assist us in detecting and preventing fraudulent activity, money laundering, and other illegal conduct on the Platform.
• IT infrastructure and cloud service providers: Providers of hosting, data storage, and technical infrastructure services that support the operation of the 99bom Platform.
• Customer support platforms: Third-party tools used to manage and respond to player support inquiries.
• Regulatory and law enforcement authorities: Philippine government agencies, including the National Privacy Commission, PAGCOR, the Anti-Money Laundering Council (AMLC), and law enforcement bodies, where we are required by law to disclose information.

6.2 Data Processing Agreements

All third-party service providers who process personal data on behalf of 99bom are required to enter into data processing agreements that obligate them to process personal data only in accordance with our instructions and to implement appropriate security measures consistent with the requirements of the Data Privacy Act of 2012.

6.3 Cross-Border Data Transfers

Where personal data is transferred to service providers located outside the Philippines, 99bom ensures that such transfers are subject to appropriate safeguards, including contractual clauses that provide a level of data protection equivalent to that required under Philippine law.

7. Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit the 99bom Platform. They help us recognize your device, remember your preferences, keep your session active, and understand how you use the Platform so we can improve it.

7.2 Types of Cookies We Use

• Strictly necessary cookies: These are essential for the Platform to function. They enable core features such as account login, session management, and security. These cookies cannot be disabled without affecting Platform functionality.
• Functional cookies: These remember your preferences and settings (such as language and display preferences) to provide a more personalized experience on 99bom.
• Analytics cookies: These help us understand how players interact with the Platform — which pages are visited most, where players encounter difficulties, and how we can improve the overall experience. Data collected is aggregated and anonymized where possible.
• Marketing cookies: These are used to deliver relevant promotional content to you based on your interests and activity on the Platform. They are only placed with your consent.

7.3 Managing Cookies

You can manage your cookie preferences through the cookie settings panel available on the 99bom Platform. You may also configure your browser to block or delete cookies; however, please note that disabling certain cookies may affect the functionality of the Platform and your ability to access some features.

8. Data Security

99bom implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 99bom Platform.
• Encryption at rest for sensitive personal data stored on our servers, including financial data and identity documents.
• Access controls that restrict access to personal data to authorized personnel only, on a strict need-to-know basis.
• Multi-factor authentication for internal systems that process personal data.
• Regular security audits and penetration testing conducted by independent security professionals.
• Incident response procedures to detect, contain, and respond to data security incidents in a timely manner.
• Staff training on data privacy and security obligations under the Data Privacy Act of 2012.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 99bom will notify the National Privacy Commission and affected players in accordance with the timeframes and procedures required by the DPA and its Implementing Rules and Regulations.

9. Data Retention

99bom retains personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine financial regulations.
• KYC verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Gaming activity data: Retained for a minimum of three (3) years for responsible gaming monitoring and dispute resolution purposes.
• Customer support communications: Retained for a minimum of two (2) years from the date of the communication.
• Marketing preferences and consent records: Retained until you withdraw your consent or for a maximum of three (3) years from the date of last interaction, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification. Where data is anonymized rather than deleted, the anonymized data may be retained indefinitely for statistical and analytical purposes.

10. Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 99bom:

• Right to be informed: You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfills that obligation.
• Right of access: You have the right to request a copy of the personal data that 99bom holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held by 99bom. You may update certain account details directly through your account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal and regulatory retention obligations.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests, including the right to object to direct marketing at any time.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission if you believe that your data rights have been violated.

To exercise any of the above rights, please contact our Data Privacy Officer through the customer support channels described in Section 14. We will respond to all verified requests within fifteen (15) calendar days, or within such extended period as permitted by the DPA where the request is complex or numerous.

11. Children and Minors

The 99bom Platform is strictly intended for individuals who are twenty-one (21) years of age or older, in accordance with Philippine gaming regulations. 99bom does not knowingly collect personal data from individuals under the age of 21.

If you are a parent or guardian and believe that a minor has registered an account or provided personal data to 99bom without your consent, please contact us immediately at the details provided in Section 14. We will promptly investigate and, where confirmed, close the account and delete all associated personal data.

Age verification is a mandatory step in the 99bom registration and withdrawal process. We take our obligation to prevent underage gambling seriously and apply robust controls to detect and prevent access by minors.

12. Responsible Gaming and Data Processing

99bom processes certain personal data specifically to support responsible gaming obligations and to protect vulnerable players. This includes monitoring gaming activity patterns to identify signs of problem gambling behavior, enforcing player-set deposit and session limits, and administering self-exclusion requests.

Where a player has activated a self-exclusion or cooling-off period, 99bom retains the data necessary to enforce that exclusion for its full duration, even if the player subsequently requests account closure. This processing is carried out in the public interest and in compliance with our responsible gaming obligations.

For more information about the responsible gaming tools available on 99bom, including deposit limits, reality checks, and self-exclusion options, please visit our Responsible Gaming page.

13. Changes to This Privacy Policy

99bom reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The effective date at the top of this page will be updated whenever a material change is made.

Where changes are material, we will notify registered players by email or through a prominent notice on the Platform prior to the changes taking effect. We encourage you to review this Privacy Policy periodically to stay informed about how 99bom protects your personal data.

Your continued use of the 99bom Platform following the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with the changes, you may request account closure in accordance with the Terms and Conditions.

14. Contact Our Data Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 99bom, please contact our Data Privacy Officer. Our DPO is responsible for overseeing compliance with the Data Privacy Act of 2012 and for handling all data subject rights requests.

You may reach our Data Privacy Officer and customer support team through the live chat feature available on the 99bom Platform, or by email at: [email protected]

For general support inquiries, you may also contact us at: [email protected]

Our support team is available 24 hours a day, 7 days a week, and can assist you in English, Tagalog, and Bisaya. We aim to acknowledge all privacy-related inquiries within two (2) business days and to provide a substantive response within fifteen (15) calendar days.