99bom Privacy Policy

i Introduction

Welcome to 99bom. This Privacy Policy ("Policy") describes how 99bom ("we," "us," or "our"), the operator of the online gaming platform at 99bom.cam, collects, processes, stores, and protects the personal information of users ("you" or "Player") who access and use our platform, whether through a desktop browser or mobile device.

99bom is a PAGCOR-registered and regulated online gaming operator serving Filipino players across Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond. We are committed to upholding the highest standards of data privacy protection in full compliance with:

• Republic Act No. 10173 — Data Privacy Act of 2012 (Philippines)
• IRR of RA 10173 — Implementing Rules and Regulations
• PAGCOR Regulations — Philippine Amusement and Gaming Corporation guidelines
• Republic Act No. 9160 — Anti-Money Laundering Act (AMLA), as amended

By creating an account or using any service on 99bom, you acknowledge that you have read, understood, and agreed to the collection and use of your information as described in this Policy. If you do not agree, please discontinue use of the platform.

This Policy applies to all personal data collected through the 99bom website, mobile interface, customer support channels, and any associated promotional activities. It does not apply to third-party sites or applications that may be linked from our platform.

1 Information We Collect

When you register and use 99bom, we collect several categories of personal data necessary to deliver our gaming services, verify your identity, process payments, and comply with applicable laws. The types of information we collect include:

Sensitive Personal Information: In cases required by PAGCOR or AMLA regulations, we may collect sensitive personal information such as government ID numbers or financial records for enhanced due diligence (EDD) purposes. This data is handled with additional security controls and strictly limited access.

2 How We Use Your Information

99bom processes your personal data only for lawful, specified, and legitimate purposes. We do not process your data in a manner incompatible with the purposes for which it was originally collected. Our lawful bases for processing include your consent, contractual necessity, legal obligation, and legitimate interest.

Specifically, we use your information for the following purposes:

1. Account Registration & Management — To create, verify, and maintain your 99bom player account, including identity verification as required by PAGCOR and AMLA.
2. Service Delivery — To enable gameplay across all 99bom products including Live Casino, Slots, Bingo, Wild Bandito, and other game categories.
3. Payment Processing — To facilitate deposits and withdrawals via GCash, Maya (PayMaya), BPI, BDO, Metrobank, GrabPay, 7-Eleven CLiQQ, and QR Ph.
4. Legal Compliance — To meet obligations under RA 10173, AMLA, PAGCOR licensing requirements, and applicable Philippine laws, including mandatory reporting of suspicious transactions.
5. Fraud Prevention & Security — To detect and prevent fraudulent activities, unauthorized access, money laundering, and other illegal conduct on the platform.
6. Responsible Gaming — To monitor gameplay patterns and enforce responsible gaming measures, including self-exclusion, deposit limits, and session time reminders, in line with PAGCOR's responsible gaming framework. 99bom is a 21+ platform.
7. Customer Support — To respond to your inquiries, resolve complaints, and provide technical assistance.
8. Marketing & Promotions — With your explicit consent, to send you promotional offers, bonus announcements, and platform updates relevant to your interests. You may opt out at any time.
9. Platform Improvement — To analyze usage data and improve the performance, features, and user experience of the 99bom platform.

3 Disclosure of Your Information

99bom does not sell, rent, or trade your personal data to third parties for commercial purposes. We may, however, share your information in the following limited circumstances:

• Regulatory Authorities: We are legally required to disclose player information to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other government bodies upon lawful request or as mandated by applicable regulations.
• Payment Service Providers: We share necessary financial data with payment processors (e.g., GCash, Maya, BancNet) strictly for transaction processing and fraud verification. These processors are bound by confidentiality obligations and applicable data protection laws.
• Technology & Platform Vendors: We may engage trusted third-party service providers for hosting, analytics, customer support software, and cybersecurity services. All vendors undergo data processing agreements (DPAs) ensuring compliance with RA 10173.
• Game Software Providers: Where game-level data is required for technical integration with our game partners, only the minimum necessary data (e.g., player session IDs) is shared, never full identity details.
• Law Enforcement: In response to court orders, subpoenas, or lawful requests from Philippine law enforcement agencies investigating criminal activity, we will cooperate fully as required by law.
• Business Transfers: In the event of a merger, acquisition, or transfer of assets, player data may be transferred to the successor entity, subject to the same privacy protections outlined in this Policy.

In all cases, we apply the principle of data minimization — only the minimum necessary data is disclosed, and only for the stated purpose.

4 Cookies and Tracking Technologies

99bom uses cookies and similar tracking technologies to enhance the functionality and security of our platform. Cookies are small data files stored on your device that help us recognize you across sessions, maintain your preferences, and deliver a seamless gaming experience.

We use the following types of cookies:

• Strictly Necessary Cookies: Required for core platform functions such as user authentication, session management, and security. These cannot be disabled without affecting basic functionality.
• Functional Cookies: Remember your preferences such as language settings, display options, and login status to provide a more personalized experience on 99bom.
• Analytics Cookies: Help us understand how players interact with the platform — which pages are visited most, where users encounter issues, and how to improve overall performance.
• Security Cookies: Used for fraud detection, preventing unauthorized access, and ensuring that your account activity comes from your registered device and location.

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect your ability to use specific features of the 99bom platform. We do not use cookies to serve third-party advertising on our platform.

5 Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. Below are our general data retention principles:

• Active Account Data: Retained for the entire duration of your active player relationship with 99bom.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years as required under AMLA and PAGCOR regulations.
• KYC & Identity Documents: Retained for at least five (5) years after account closure as mandated by anti-money laundering obligations.
• Communication Records: Customer support interactions and complaint records are retained for three (3) years for quality assurance and dispute resolution purposes.
• Closed Accounts: Upon account closure, personal data is anonymized or securely deleted after applicable retention periods expire, except where legal holds apply.

When data is no longer needed and no legal obligation requires its retention, 99bom will securely erase or anonymize it in accordance with established data disposal procedures.

6 Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by 99bom:

• Right to Be Informed: You have the right to know how your personal data is collected, used, stored, and shared — which is what this Privacy Policy addresses.
• Right to Access: You may request a copy of the personal data we hold about you, including the sources, recipients, and purposes of processing.
• Right to Rectification: You may request correction of any inaccurate, incomplete, or outdated personal data in your 99bom account.
• Right to Erasure or Blocking: You may request the deletion or suspension of processing of your personal data in certain circumstances, subject to our legal retention obligations.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time, with no adverse effect on your gaming account.
• Right to Damages: You are entitled to claim compensation for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data.

To exercise any of these rights, please contact our Data Protection Officer (DPO) using the contact details provided in Section 9 of this Policy. We will respond to all legitimate requests within fifteen (15) business days, or within the timeframes prescribed by the NPC where applicable.

7 Security Measures

99bom implements a comprehensive set of technical, organizational, and physical security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit TLS/SSL Encryption for all data in transit between your device and our servers.
• AES-256 Encryption for sensitive data stored in our databases, including financial credentials and identity documents.
• Multi-Factor Authentication (MFA) options for player accounts to prevent unauthorized login.
• Firewall & Intrusion Detection Systems (IDS) monitoring all inbound and outbound network traffic 24/7.
• Role-Based Access Control (RBAC) ensuring only authorized 99bom personnel can access specific categories of player data, on a need-to-know basis.
• Regular Security Audits and penetration testing by independent cybersecurity firms to identify and address vulnerabilities proactively.
• Incident Response Plan — In the event of a personal data breach, 99bom will notify affected players and the NPC within 72 hours of becoming aware of the breach, as required by NPC Circular 16-03.

While we take every reasonable precaution to protect your data, no online platform can guarantee absolute security. We encourage you to use a strong, unique password for your 99bom account and never share your login credentials with anyone.

8 Cross-Border Data Transfers

Some of 99bom's technology service providers and game software partners may be located outside of the Philippines. In such cases, personal data may be transferred internationally. We ensure that all cross-border data transfers comply with the requirements of RA 10173 and NPC guidelines, including:

• Ensuring that recipient countries or organizations provide an adequate level of data protection.
• Executing appropriate contractual safeguards, such as Data Processing Agreements and Standard Contractual Clauses, with all overseas data processors.
• Conducting Privacy Impact Assessments (PIAs) for high-risk international processing activities.

We will not transfer sensitive personal information outside the Philippines without your explicit consent, unless required by law or necessary for contractual performance.

9 Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by 99bom, please reach out to our designated Data Protection Officer (DPO):

• Platform: 99bom (99bom.cam)
• Email: [email protected]
• Response Time: Within 5–15 business days, depending on the nature of your request

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated:

• National Privacy Commission (NPC) — the independent government body mandated to administer and implement RA 10173 in the Philippines.

We take all privacy complaints seriously. Filing a complaint with the NPC is always your right as a data subject, and 99bom will fully cooperate with any NPC investigation.

10 Updates to This Policy

99bom reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered players via email or in-platform notification for significant changes.
• Where required by law or regulation, obtain fresh consent from affected users.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of 99bom after the effective date of any changes constitutes your acceptance of the updated Policy.

This Privacy Policy was last reviewed and approved on January 1, 2026. Prior versions of this Policy are available upon request to our DPO.