kbs99 Privacy Policy

1 Introduction

1.1 kbs99 ("kbs99," "we," "us," or "our") is committed to protecting the privacy and personal data of all users of the kbs99 online gaming platform accessible at kbs99.app ("Platform"). This Privacy Policy ("Policy") describes how kbs99 collects, uses, stores, shares, and protects personal information in connection with your use of the Platform.

1.2 This Policy is issued in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission ("NPC"). It also reflects applicable PAGCOR regulatory requirements relating to player data.

1.3 By registering an account on kbs99, accessing the Platform, or otherwise providing your personal data to us, you acknowledge that you have read and understood this Policy and consent to the collection, use, and processing of your personal data as described herein.

1.4 If you do not agree with any part of this Policy, you should not use the kbs99 Platform. You may withdraw your consent at any time, subject to the limitations described in Section 10 of this Policy.

2 Personal Data We Collect

2.1 kbs99 collects the following categories of personal data from players and platform users:

2.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify the 21+ age requirement);
• Nationality and country of residence;
• Residential address, including barangay, city or municipality, province, and postal code;
• Email address and mobile phone number.

2.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's licence, UMID);
• Selfie or facial photograph submitted for identity verification purposes;
• Proof of address documents where required.

2.3 Financial Data

• GCash or PayMaya account details (mobile number associated with the account);
• Bank account details for bank transfer transactions (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank);
• Debit card details where applicable;
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment methods.

2.4 Gaming and Account Data

• Username and encrypted password;
• Account balance and transaction history;
• Game history, including games played, wagers placed, and outcomes;
• Bonus and promotion history;
• Responsible gaming settings, including deposit limits, loss limits, and self-exclusion status;
• Customer support communications and chat logs.

2.5 Technical and Usage Data

• IP address and approximate geographic location;
• Device type, operating system, and browser information;
• Session duration, pages visited, and features used on the Platform;
• Cookies and similar tracking technologies (see Section 7 for details).

3 How We Collect Your Data

3.1 kbs99 collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated collection: Technical and usage data collected automatically when you access or use the Platform, including through cookies, web beacons, and server logs;
• Third-party sources: Identity verification data from KYC service providers; fraud detection data from anti-fraud partners; payment data from payment processors such as GCash, PayMaya, and Philippine banks;
• Publicly available sources: Where permitted by law, information from publicly available databases used to verify identity or comply with anti-money laundering obligations.

3.2 kbs99 will always inform you at the point of collection what data is being collected and for what purpose. Providing certain data is mandatory for account registration and regulatory compliance; other data is optional and collected only with your explicit consent.

4 How We Use Your Personal Data

4.1 kbs99 uses your personal data for the following purposes:

Purpose	Data Used
Account registration and management	Identity, contact, and account data
Identity verification (KYC)	Identity, KYC, and contact data
Processing deposits and withdrawals	Financial and identity data
Providing gaming services	Account and gaming data
Fraud prevention and security	Technical, financial, and identity data
Anti-money laundering compliance	Identity, financial, and transaction data
Responsible gaming monitoring	Gaming, account, and responsible gaming data
Customer support	Identity, contact, and communication data
Marketing and promotions (with consent)	Contact and gaming preference data
Platform improvement and analytics	Technical and usage data (anonymised where possible)
Legal and regulatory compliance	All categories as required by law

4.2 kbs99 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.

5 Legal Basis for Processing

5.1 kbs99 processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual necessity: Processing required to perform our contract with you, including account management, payment processing, and delivery of gaming services;
• Legal obligation: Processing required to comply with applicable Philippine laws and PAGCOR regulations, including KYC verification, anti-money laundering obligations, and responsible gaming requirements;
• Legitimate interests: Processing necessary for kbs99's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights;
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Personal Data

6.1 kbs99 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors: GCash, PayMaya, and Philippine banking partners, for the purpose of processing deposits and withdrawals;
• KYC and identity verification providers: Third-party service providers that assist kbs99 in verifying player identities in compliance with PAGCOR and anti-money laundering requirements;
• Game content providers: Licensed game suppliers whose games are available on the kbs99 Platform, to the extent necessary to deliver gaming services and maintain game integrity;
• Fraud prevention and security partners: Service providers that assist kbs99 in detecting and preventing fraudulent activity, money laundering, and other prohibited conduct;
• IT and platform service providers: Cloud hosting, data storage, and technical infrastructure providers engaged by kbs99 to operate the Platform;
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine authorities, where disclosure is required by law or regulatory directive;
• Professional advisers: Lawyers, auditors, and accountants engaged by kbs99 in connection with its legal and compliance obligations.

6.2 All third-party service providers engaged by kbs99 are required to process personal data only on kbs99's instructions and in accordance with applicable data protection laws. kbs99 enters into data processing agreements with all relevant third parties to ensure appropriate safeguards are in place.

6.3 kbs99 does not transfer personal data outside the Philippines except where required by law or where adequate data protection safeguards are in place in the recipient country.

7 Cookies and Tracking Technologies

7.1 kbs99 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the kbs99 website. They help us recognise your device, maintain your session, and understand how you use the Platform.

7.2 kbs99 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings and responsible gaming limits, to provide a more personalised experience.
• Analytics cookies: Collect anonymised data about how players use the Platform, including pages visited and features used, to help kbs99 improve its services.
• Marketing cookies: Used with your consent to deliver relevant promotional content about kbs99 games and offers. You may opt out of marketing cookies at any time.

7.3 You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the kbs99 Platform. For more information on managing cookies, refer to your browser's help documentation.

8 Data Retention

8.1 kbs99 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, and reporting requirements.

8.2 The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, in accordance with PAGCOR requirements and Philippine anti-money laundering laws;
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction;
• Gaming history: Retained for a minimum of three (3) years from the date of the relevant game session;
• Customer support communications: Retained for two (2) years from the date of the communication;
• Marketing data: Retained until you withdraw consent or opt out of marketing communications.

8.3 Upon expiry of the applicable retention period, kbs99 will securely delete or anonymise your personal data in accordance with its data disposal procedures.

9 Data Security

9.1 kbs99 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the kbs99 Platform;
• Encryption of sensitive data at rest, including KYC documents and financial information;
• Role-based access controls limiting access to personal data to authorised kbs99 personnel on a need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability scanning of the Platform;
• Multi-factor authentication for access to systems containing personal data;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

9.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, kbs99 will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012 and NPC guidelines.

9.3 While kbs99 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your kbs99 account credentials and for notifying kbs99 immediately if you suspect any unauthorised access to your account.

10 Your Data Privacy Rights

10.1 Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by kbs99:

10.2 To exercise any of the above rights, please contact kbs99's Data Protection Officer via the contact details in Section 14. kbs99 will respond to all data privacy requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

10.3 If you believe that kbs99 has not handled your personal data in accordance with the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11 Children's Privacy

11.1 The kbs99 Platform is strictly intended for persons aged twenty-one (21) years and above. kbs99 does not knowingly collect personal data from persons under the age of 21.

11.2 If kbs99 becomes aware that personal data has been collected from a person under the age of 21, it will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the kbs99 Platform, please notify us immediately via the contact details in Section 14.

12 Third-Party Links and Services

12.1 The kbs99 Platform may contain links to third-party websites or services, including payment provider portals. kbs99 is not responsible for the privacy practices of any third-party websites or services. This Policy applies solely to personal data collected and processed by kbs99 in connection with the kbs99 Platform.

12.2 We encourage you to review the privacy policies of any third-party services you access in connection with your use of kbs99, including GCash, PayMaya, and your bank's online banking portal.

13 Changes to This Privacy Policy

13.1 kbs99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. The date of the most recent revision is indicated at the top of this page.

13.2 When material changes are made to this Policy, kbs99 will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect. Your continued use of the kbs99 Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

13.3 If you do not agree with any changes to this Policy, you should cease using the Platform and may request account closure in accordance with the Terms & Conditions.

14 Contact and Data Protection Officer

14.1 kbs99 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Policy, please contact:

• Data Protection Officer, kbs99
• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 within the kbs99 Platform

14.2 kbs99 aims to respond to all data privacy enquiries within fifteen (15) business days. For urgent matters relating to account security or suspected data breaches, please use the live chat function for the fastest response.