Privacy Policy – 99bon.com

1. Introduction

This Privacy Policy ("Policy") describes how 99bon.com ("the Company," "we," "us," or "our") collects, uses, stores, and protects the personal information of users ("you," "your," or "Player") who access or use the 99bon.com website and associated gaming services (collectively, the "Platform").

99bon.com is committed to protecting the privacy and personal data of all users, particularly those accessing the Platform from the Philippines. This Policy is drafted in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines.

By registering an account on 99bon.com or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact our support team to close your account.

2. Data We Collect

99bon.com collects the following categories of personal data from users of the Platform:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued ID;
• Date of birth (for age verification — players must be 21 years or older);
• Philippine mobile number and email address;
• Residential address (province, city/municipality);
• Government-issued ID details (UMID, PhilSys National ID, passport, or driver's license number and expiry).

2.2 Financial Data

• GCash or PayMaya account number (last four digits only, for verification);
• Bank account details provided for withdrawal processing (account name, bank name, account number);
• Debit card details (card type, last four digits, expiry — full card numbers are never stored by 99bon.com);
• Transaction history including deposits, withdrawals, and bonus credits.

2.3 Gaming & Behavioural Data

• Game history, wager amounts, win/loss records, and session durations;
• Bonus usage, promotional participation, and wagering activity;
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests).

2.4 Technical & Device Data

• IP address and approximate geolocation (city/region level);
• Device type, operating system, browser type and version;
• Session timestamps, login history, and access logs;
• Cookie identifiers and similar tracking technologies (see Section 7).

2.5 Communications Data

• Records of live chat conversations, email correspondence, and support tickets submitted to 99bon.com;
• Survey responses and feedback submitted voluntarily by users.

3. How We Collect Your Data

99bon.com collects personal data through the following means:

3.1 Directly From You

When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion, you provide personal data directly to 99bon.com. This is the primary source of identity and financial data.

3.2 Automatically Through the Platform

When you access and use the 99bon.com Platform, technical and behavioural data is collected automatically through server logs, cookies, and similar technologies. This includes your IP address, device information, pages visited, games played, and session duration. This data collection is necessary for the Platform to function correctly and securely.

3.3 From Third-Party Service Providers

99bon.com may receive personal data from regulated third-party service providers engaged to support Platform operations, including:

• KYC / Identity Verification Providers: To verify the authenticity of government-issued IDs submitted during account registration;
• Payment Processors: GCash, PayMaya, and banking partners may share transaction confirmation data with 99bon.com to reconcile deposits and withdrawals;
• Fraud Detection Services: Third-party fraud and AML screening tools may provide risk scores or flagged activity alerts associated with your account.

All third-party providers engaged by 99bon.com are contractually bound to process personal data only as instructed by the Company and in compliance with applicable Philippine data privacy law.

4. How We Use Your Data

99bon.com processes personal data for the following specific, legitimate purposes:

• Account Management: To create, maintain, verify, and administer your 99bon.com player account;
• Identity & Age Verification: To confirm that you are at least 21 years of age and are who you claim to be, in compliance with PAGCOR requirements;
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, bank transfer, and debit card;
• Gaming Services: To deliver game content, record game outcomes, calculate winnings, and apply bonuses to your account;
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance;
• Legal & Regulatory Compliance: To comply with anti-money laundering (AML) obligations, PAGCOR reporting requirements, and the Data Privacy Act of 2012;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account takeovers, and other security threats;
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling and to administer responsible gaming tools such as deposit limits and self-exclusion;
• Platform Improvement: To analyse aggregated, anonymised usage data to improve Platform performance, game selection, and user experience;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided explicit consent and only via channels you have opted into.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, 99bon.com processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and 99bon.com — including account management, payment processing, and game delivery;
• Legal Obligation: Processing required to comply with applicable Philippine law, including AML regulations, PAGCOR licensing conditions, and NPC guidelines;
• Legitimate Interests: Processing necessary for the legitimate interests of 99bon.com, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given consent that may be withdrawn at any time.

6. Data Sharing & Disclosure

99bon.com does not sell, rent, or trade your personal data. We may share your data only in the following limited circumstances:

6.1 Service Providers

We engage regulated third-party processors to support Platform operations — including KYC verification providers, payment processors (GCash, PayMaya, banking partners), cloud hosting providers, and fraud detection services. These processors act strictly on our instructions and are bound by data processing agreements.

6.2 Regulatory & Legal Authorities

We may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other competent Philippine authorities where required by law, court order, or regulatory directive. We will notify you of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of 99bon.com's business, personal data held by the Company may be transferred to the acquiring entity, subject to equivalent data protection obligations. You will be notified of any such transfer in advance.

6.4 With Your Consent

We may share your data with third parties in any other circumstance where you have provided explicit, informed consent for that specific sharing.

7. Cookies & Tracking Technologies

99bon.com uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The following categories of cookies are used:

You may manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using the Platform. For full details on the cookies we use, please refer to our Cookie Notice accessible from the Platform footer.

8. Data Retention

99bon.com retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Active Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements under Republic Act No. 9160;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction;
• KYC Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction;
• Customer Support Records: Retained for three (3) years from the date of the last interaction;
• Marketing Consent Records: Retained for the duration of your consent and for two (2) years following withdrawal of consent, as evidence of compliance;
• Technical Logs: Retained for twelve (12) months from the date of generation, unless required for an ongoing investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with NPC guidelines.

9. Data Security

99bon.com implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the 99bon.com Platform is encrypted using industry-standard TLS 1.3 protocols;
• Encrypted Data Storage: Sensitive personal data, including financial information and ID documents, is encrypted at rest using AES-256 encryption;
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data undergo background checks and regular data privacy training;
• Multi-Factor Authentication: Administrative access to systems containing personal data requires multi-factor authentication;
• Regular Security Audits: The Platform undergoes regular penetration testing and security audits by independent third-party security firms;
• Incident Response: 99bon.com maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, we will notify the NPC within 72 hours and affected users without undue delay, as required by the DPA.

10. Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 99bon.com:

• Right to Be Informed: The right to be informed of how your personal data is collected, used, and processed — which this Privacy Policy fulfils;
• Right of Access: The right to request a copy of the personal data we hold about you, including information on how it is being processed;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update basic account information directly through your account settings;
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer (DPO) using the contact details in Section 15. We will respond to all verified data rights requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

11. Children's Privacy

The 99bon.com Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. We do not knowingly collect personal data from persons under the age of 21.

During registration, all users are required to confirm their age and submit government-issued identification for verification. If 99bon.com discovers that personal data has been collected from a person under 21 years of age, the account will be immediately closed, all balances forfeited, and the personal data deleted without undue delay.

If you are a parent or guardian and believe that a minor has registered an account on 99bon.com, please contact our support team immediately via live chat or email at [email protected].

12. International Data Transfers

99bon.com primarily processes personal data within the Philippines. Where personal data is transferred to service providers located outside the Philippines — for example, cloud infrastructure providers or international game suppliers — such transfers are conducted only where:

• The recipient country provides an adequate level of data protection as recognised by the NPC; or
• Appropriate safeguards are in place, such as standard contractual clauses approved by the NPC; or
• The transfer is necessary for the performance of the contract between you and 99bon.com.

All international data transfers are documented and subject to the same security standards applied to data processed within the Philippines.

13. Third-Party Links

The 99bon.com Platform may contain links to third-party websites or services for informational purposes. This Privacy Policy applies solely to the 99bon.com Platform and does not govern the data practices of any third-party website. We encourage you to review the privacy policies of any third-party sites you visit. 99bon.com accepts no responsibility or liability for the privacy practices of third-party websites.

14. Updates to This Privacy Policy

99bon.com reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. Where changes are material, we will notify you by email to your registered address or via a prominent notice on the Platform at least seven (7) days before the changes take effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated Policy, you must cease using the Platform and may request account closure.

We recommend reviewing this Privacy Policy periodically to stay informed of how 99bon.com protects your personal data.

15. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer (DPO):

We will acknowledge all data privacy requests within three (3) business days and provide a full response within fifteen (15) business days.