bon999 Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how bon999 ("the Platform," "we," "us," "our") collects, processes, stores, and protects the personal data of individuals ("Players," "Users," "you," "your") who access or use the bon999 website and associated gaming services available at bon999.cam.

bon999 is committed to handling your personal data responsibly, transparently, and in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines. bon999 also operates in compliance with the requirements of the Philippine Amusement and Gaming Corporation (PAGCOR), which governs data handling obligations applicable to licensed online gaming operators in the Philippines.

02 Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, bon999 acts as the Personal Information Controller (PIC) in respect of the personal data collected from players registered on the Platform.

bon999 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data privacy legislation. Enquiries relating to the processing of your personal data may be directed to the DPO via the contact details provided in Section 14 of this Policy.

03 Personal Data We Collect

bon999 collects the following categories of personal data in connection with your use of the Platform:

3.1 Identity and Contact Data

• Full legal name;
• Date of birth (for mandatory 21+ age verification);
• Email address;
• Mobile phone number;
• Residential address (city, province, Philippines).

3.2 Identity Verification (KYC) Data

• Government-issued photo identification (e.g., Philippine Passport, SSS ID, UMID, Driver's License, PhilHealth ID, Voter's ID);
• Proof of address documentation;
• Source of funds documentation where required by PAGCOR anti-money laundering obligations.

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records;
• Payment method identifiers (e.g., GCash mobile number, Maya account reference, bank account details — stored in masked form);
• Wallet balance history and bonus transaction records.

3.4 Gaming Activity Data

• Game session history, bet amounts, win/loss records, and game preferences;
• Sports betting selections and settlement history;
• Responsible gaming tool usage (deposit limits set, self-exclusion periods).

3.5 Technical and Device Data

• IP address and approximate geographic location;
• Device type, operating system, and browser type;
• Session timestamps and login history;
• Cookie identifiers and similar tracking technologies (see Section 8).

3.6 Communications Data

• Records of communications with bon999's customer support team (live chat transcripts, email correspondence);
• Responses to surveys, feedback forms, or promotional communications where you have opted in to receive them.

04 How We Collect Your Data

bon999 collects personal data through the following means:

• Account Registration: Information you provide when creating your bon999 account;
• KYC Verification: Documents you submit in response to identity verification requests;
• Platform Use: Data generated automatically through your gaming and betting activity;
• Financial Transactions: Data associated with deposits and withdrawal requests processed via GCash, Maya, Philippine banks, and other accepted payment channels;
• Customer Support Interactions: Communications you initiate with our support team;
• Technical Collection: Cookies, log files, and analytics tools that record your interaction with the bon999 website (see Section 8);
• Third-Party Sources: In limited circumstances, from identity verification service providers or payment processors where required by PAGCOR compliance obligations.

05 Purposes for Which We Process Your Data

bon999 processes your personal data for the following specific and legitimate purposes:

06 Legal Basis for Processing

bon999 processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to provide you with the services you have contracted for by registering on bon999 — including account management, transaction processing, and game delivery;
• Legal Obligation: Processing required to comply with PAGCOR regulations, anti-money laundering laws (Republic Act No. 9160), the Data Privacy Act, and other applicable Philippine legislation;
• Legitimate Interests: Processing necessary for fraud prevention, account security, platform analytics, and responsible gaming monitoring, where these interests do not override your fundamental rights;
• Consent: Where required by law, we will obtain your explicit consent before processing your data for specific purposes such as marketing communications. You may withdraw such consent at any time.

07 Data Sharing and Disclosure

bon999 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

7.1 Regulatory Authorities

Personal and financial data may be disclosed to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other competent Philippine government authorities where required by law, court order, or regulatory direction.

7.2 Payment Processors and Financial Partners

Limited financial data is shared with payment processors (including GCash / GXI, Maya / Paymaya, Philippine banks, and other payment infrastructure providers) to facilitate deposit and withdrawal transactions. These processors are bound by their own data privacy and security obligations.

7.3 Identity Verification Providers

Where bon999 engages a third-party KYC service provider to conduct identity verification, your identity and documentation data may be processed by that provider on bon999's behalf under a written data processing agreement.

7.4 Gaming Platform and Software Providers

Game providers and platform technology partners may receive limited technical and session data required to deliver their gaming products within the bon999 environment. No financial or identity data is shared with game studios beyond what is technically necessary.

7.5 Professional Advisers

In limited circumstances, data may be shared with legal, accounting, or auditing professionals engaged by bon999 where such sharing is necessary for the provision of professional services, subject to professional confidentiality obligations.

08 Cookies and Tracking Technologies

bon999 uses cookies and similar technologies (such as session tokens and local storage) to operate and improve the Platform. These technologies serve the following purposes:

• Strictly Necessary Cookies: Required for the Platform to function — including session authentication, login state maintenance, and security token validation. These cannot be disabled without breaking core Platform functionality;
• Functional Cookies: Remember your preferences such as language settings and last-visited game category to improve your experience across sessions;
• Analytics Cookies: Collect aggregated and anonymised data about how players use the Platform, enabling bon999 to identify performance issues and improve game delivery;
• Security Cookies: Help detect and prevent fraudulent access attempts, account takeovers, and automated bot activity.

You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may limit the functionality of the bon999 Platform. bon999 does not use third-party advertising cookies or behavioural tracking cookies for external marketing purposes.

09 Data Retention

bon999 retains personal data only for as long as necessary to fulfil the purposes outlined in this Policy, subject to the following considerations:

• Active Account Data: Retained for the duration of your active player relationship with bon999;
• Closed Account Data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and anti-money laundering regulations under Philippine law;
• KYC and Transaction Records: Retained for a minimum of five (5) years from the date of the relevant transaction or the closure of the account, whichever is later, in compliance with the Anti-Money Laundering Act;
• Communications Data: Customer support records are retained for a minimum of three (3) years for dispute resolution and quality assurance purposes;
• Technical Logs: Server and security logs are retained for a period of twelve (12) months, after which they are securely deleted or anonymised.

Upon the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised in accordance with bon999's data disposal procedures.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012 and its Implementing Rules, you — as a data subject — have the following rights with respect to your personal data held by bon999:

To exercise any of the above rights, please contact bon999's Data Protection Officer using the contact details in Section 14. bon999 will respond to all data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

11 Security Measures

bon999 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These include:

• Encryption: All data transmitted between your device and bon999's servers is protected using TLS/SSL encryption (256-bit). Data at rest is encrypted using industry-standard algorithms;
• Access Controls: Access to personal data is restricted to authorized bon999 personnel on a strict need-to-know basis, with role-based access permissions and audit logging;
• Two-Factor Authentication: Available to all players for account login security, and used internally by bon999 staff for system access;
• Intrusion Detection: bon999's infrastructure is monitored continuously for suspicious activity, unauthorized access attempts, and security anomalies;
• Third-Party Security Audits: bon999's platform and data handling practices are subject to periodic independent security assessments;
• Incident Response: bon999 maintains a data breach incident response plan. In the event of a breach, affected players and the National Privacy Commission will be notified within the timeframes required by Philippine law.

12 Children and Minors

bon999 is strictly prohibited from providing gaming services to individuals under the age of 21 years, as required by PAGCOR regulations applicable to online casino and sports betting operators in the Philippines. bon999 does not knowingly collect personal data from individuals under this age.

Age verification is conducted as a mandatory step during the bon999 account registration and KYC process. Players who cannot verify that they are 21 years of age or older will not be permitted to make deposits or access gaming services on the Platform.

13 Changes to This Privacy Policy

bon999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, PAGCOR regulatory requirements, or the services we offer. The effective date at the top of this Policy will be updated to reflect the date of the most recent revision.

Where changes to this Policy are material — that is, where they significantly affect your rights or how we process your personal data — bon999 will notify registered players via email or via an in-platform notification prior to the changes taking effect. Continued use of bon999 following the posting of updated Policy terms constitutes your acceptance of those changes.

The current version of this Policy is always available at bon999.cam/privacy-policy. We encourage players to review this page periodically to stay informed about how bon999 protects their personal information.

14 Contact Us and Filing a Complaint

14.1 Data Protection Officer

For any questions, concerns, or requests related to this Privacy Policy or the processing of your personal data by bon999, please contact our Data Protection Officer:

14.2 Complaints to the National Privacy Commission

If you are not satisfied with bon999's response to a data privacy concern or request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for administering and implementing the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is available on the NPC's official website and communications channels.

bon999 encourages players to first raise concerns directly with our DPO so that we have the opportunity to resolve the matter promptly before escalation is necessary.