Privacy Policy
At bf69, your privacy is not an afterthought — it is built into everything we do. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the rights you hold as a Filipino player under the Data Privacy Act of 2012. Please read it in full before using the bf69 platform.
Privacy Protections at a Glance
These cards highlight the core privacy principles that guide how bf69 handles your data. They are a summary only — the full legal text below is the binding Privacy Policy.
PDPA Compliance
bf69 operates in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and the implementing rules and regulations issued by the National Privacy Commission (NPC). Your data is handled with the legal safeguards every Filipino player deserves.
No Sale of Personal Data
bf69 does not sell, rent, or trade your personal information to any third-party advertiser or data broker. Your data is shared only where strictly necessary for platform operations, regulatory compliance, and the services you have actively requested.
256-Bit SSL Encryption
All data transmitted between your device and bf69 servers is protected using industry-standard 256-bit SSL/TLS encryption. Stored personal data is encrypted at rest using AES-256. We conduct regular security audits and penetration tests to maintain the integrity of our systems.
Your Data Rights
As a data subject under Philippine law, you have the right to access, correct, erase, object to processing, and port your personal data. bf69 provides a straightforward process for exercising all of these rights through our customer support team.
Marketing Opt-Out
Promotional communications from bf69 are strictly opt-in. You can withdraw your consent to receive marketing emails, SMS, or push notifications at any time through your account settings or by contacting our support team, with no impact on your ability to use the platform.
Defined Retention Periods
bf69 does not keep your data indefinitely. Retention periods are set in accordance with PAGCOR regulations, the Anti-Money Laundering Act, and the Philippine Data Privacy Act. Once the retention period expires, your data is securely and permanently deleted.
01 Introduction & Scope
This Privacy Policy ("Policy") is issued by the operator of bf69.app ("bf69," "we," "us," "our") and applies to all personal data collected from individuals ("you," "your," "data subject") who access or use the bf69 online gaming platform, including the bf69.app website and any associated mobile-optimised interfaces.
This Policy governs personal data collected in connection with: account registration and management, gameplay activity, financial transactions, customer support interactions, marketing communications, and any other use of the bf69 platform by Filipino players and other authorised users.
By registering a bf69 account or continuing to use the platform after the effective date of this Policy, you acknowledge that you have read and understood its contents and consent to the collection and processing of your personal data as described herein.
This Policy should be read alongside the bf69 Terms & Conditions, which govern your overall use of the platform, and our Responsible Gaming policy.
02 Data Controller
bf69 acts as the data controller in respect of all personal data collected through the bf69.app platform. As data controller, bf69 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC").
bf69 has designated a Data Protection Officer ("DPO") who is responsible for overseeing data protection compliance and serving as the primary point of contact for data subjects wishing to exercise their rights under the DPA. Contact details for the DPO are provided in Section 14 of this Policy.
bf69 operates under PAGCOR regulation in the Philippines. Our data processing activities are therefore subject to both NPC oversight and PAGCOR's applicable regulatory requirements regarding record-keeping and player data.
03 Data We Collect
bf69 collects personal data from you directly (information you provide during registration and use of the platform) and indirectly (data generated automatically through your use of our services). The categories of personal data we collect are detailed below.
3.1 Registration Data
When you create a bf69 account, we collect: your full legal name, date of birth, gender, nationality, Philippine residential address, email address, and mobile number. This information is mandatory for account creation and cannot be omitted.
3.2 Identity Verification (KYC) Data
To comply with PAGCOR licensing conditions and the Anti-Money Laundering Act (Republic Act No. 9160, as amended), bf69 collects copies of government-issued identification documents such as Philippine passports, driver's licences, SSS cards, PhilSys IDs, or other PAGCOR-accepted documents. We may also collect proof of address documents and selfie photographs for biometric verification purposes.
3.3 Financial Data
bf69 collects data relating to your financial transactions on the platform, including deposit amounts, withdrawal requests, payment method details (e.g., GCash mobile number, bank account details), and transaction history. Note that bf69 does not store full payment card numbers — card transactions are processed by our certified payment service providers directly.
3.4 Gameplay Data
We record complete data relating to your gameplay activity on bf69, including games played, bet amounts, game outcomes, session durations, responsible gaming limit settings, and self-exclusion requests. This data is required for regulatory compliance, dispute resolution, and platform integrity.
3.5 Technical & Device Data
When you access bf69, we automatically collect certain technical data including: IP address, device type and model, operating system, browser type and version, screen resolution, preferred language, and time zone. This data is used for security monitoring, fraud detection, and platform optimisation.
3.6 Communications Data
We retain records of communications between you and bf69, including customer support chat logs, emails, and any feedback or complaints submitted through the platform. These records are kept to resolve disputes, improve our service quality, and fulfil regulatory obligations.
| Data Category | Examples | Mandatory? |
|---|---|---|
| Registration Data | Name, date of birth, address, email, mobile | Yes |
| KYC / Identity | Government ID, proof of address, selfie | Yes (for withdrawals) |
| Financial Data | Transaction history, payment method details | Yes |
| Gameplay Data | Bets, outcomes, session logs, limits | Automatic |
| Technical Data | IP address, device info, browser type | Automatic |
| Communications | Support chat logs, emails, complaints | Automatic |
| Marketing Preferences | Opt-in/opt-out status, communication channel preferences | Optional |
04 How We Use Your Data
bf69 processes your personal data only for specified, explicit, and legitimate purposes. The table below outlines the primary purposes for which we use your data and the corresponding legal basis under the Philippine Data Privacy Act.
4.1 Account Administration
Your registration data is used to create and maintain your bf69 account, verify your identity, process password resets, and communicate essential account information such as deposit confirmations, withdrawal approvals, and security alerts.
4.2 Regulatory Compliance
bf69 is legally required to process certain categories of your personal data to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act, the Terrorism Financing Prevention and Suppression Act, and other applicable Philippine laws. This includes conducting KYC verification, monitoring transactions for suspicious activity, and reporting to PAGCOR and the Anti-Money Laundering Council (AMLC) as required.
4.3 Payment Processing
Your financial data is processed to facilitate GCash deposits, PayMaya payments, bank transfers (BPI, BDO, Metrobank, UnionBank), and over-the-counter transactions at 7-Eleven and Cebuana Lhuillier. We share the minimum necessary financial data with our certified payment service providers to execute transactions.
4.4 Fraud Prevention & Security
bf69 uses your technical data, gameplay data, and financial data to detect and prevent fraudulent activity, money laundering, bonus abuse, account takeover attempts, and other conduct that violates our Terms and Conditions or Philippine law. Automated fraud detection systems may flag accounts for manual review without constituting a final determination of wrongdoing.
4.5 Responsible Gaming
Your gameplay data and responsible gaming settings are used to monitor for signs of problem gambling behaviour, enforce deposit limits and self-exclusion requests, and deliver session time reminders and reality checks. This processing is carried out in the interest of player welfare and in accordance with PAGCOR's responsible gaming requirements.
4.6 Customer Support
Communications data is processed to respond to your support enquiries, investigate and resolve complaints, and improve the quality of our customer service. Support interactions may be recorded and retained for quality assurance and dispute resolution purposes.
4.7 Marketing Communications
Where you have provided explicit consent, bf69 may use your contact details and gameplay preferences to send you personalised promotional offers, bonus notifications, and platform updates via email, SMS, or push notification. You may withdraw your marketing consent at any time without affecting your ability to use the platform.
4.8 Platform Improvement
Aggregated and anonymised technical and gameplay data is used to analyse platform performance, identify and resolve technical issues, develop new features, and enhance the overall user experience on bf69.app.
05 Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012, bf69 relies on the following legal bases for processing your personal data:
- Contractual Necessity: Processing required to fulfil our obligations under the bf69 Terms and Conditions, including account management, payment processing, and gameplay services.
- Legal Obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act itself, and other applicable Philippine laws.
- Legitimate Interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, provided our legitimate interests are not overridden by your rights and freedoms.
- Consent: Processing for marketing communications and non-essential cookies, where your freely given, specific, informed, and unambiguous consent has been obtained. You may withdraw consent at any time.
- Vital Interests: Processing necessary to protect your vital interests or those of another person in emergency circumstances (for example, where a player discloses a risk of self-harm related to problem gambling).
06 Sharing & Disclosure
bf69 does not sell your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent strictly necessary for the specified purpose.
6.1 Service Providers (Personal Information Processors)
bf69 engages third-party service providers — acting as personal information processors under the DPA — to perform functions on our behalf, including payment processing, KYC verification, cloud hosting, fraud detection, customer support software, and email delivery. These providers are contractually bound to process your data only on our instructions and in accordance with the DPA.
6.2 Regulatory Authorities
bf69 is legally required to disclose personal data and transaction records to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies upon lawful request or as mandated by applicable regulations. We cannot decline such disclosures where they are legally compelled.
6.3 Game Providers
The third-party game studios whose titles are available on bf69 (covering slots, live dealer games, poker, and bingo) may receive anonymised or pseudonymised identifiers necessary to facilitate gameplay and verify game outcomes. These providers do not receive your full personal profile unless specifically required for regulatory or dispute resolution purposes.
6.4 Professional Advisers
bf69 may share personal data with legal counsel, auditors, and other professional advisers on a strictly need-to-know basis in connection with the provision of professional services to bf69, subject to applicable professional secrecy obligations.
6.5 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of bf69's business, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify affected players prior to any such transfer and ensure that the acquiring entity is bound by privacy obligations no less protective than those in this Policy.
Important: bf69 will never share your personal data with third-party advertisers, data brokers, or unaffiliated marketing organisations without your explicit prior consent.
07 Data Retention
bf69 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Registration Data | Duration of account + 5 years post-closure | PAGCOR / AMLA requirement |
| KYC / Identity Documents | Duration of account + 5 years post-closure | AMLA, Republic Act No. 9160 |
| Financial Transaction Records | 5 years from transaction date | AMLA, PAGCOR regulations |
| Gameplay Logs | 3 years from session date | PAGCOR dispute resolution requirements |
| Customer Support Records | 3 years from last interaction | Legitimate interests / dispute resolution |
| Marketing Preferences | Until consent withdrawn or account closed | Consent-based |
| Technical / Log Data | 12 months from collection | Security / fraud prevention |
Upon expiry of the applicable retention period, bf69 will securely delete or anonymise your personal data in accordance with our internal data disposal procedures.
08 Security Measures
bf69 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
- Transport Encryption: All data in transit between your device and bf69 servers is protected using TLS 1.2 or higher with 256-bit encryption.
- At-Rest Encryption: Personal data and financial records stored on bf69 servers are encrypted at rest using AES-256.
- Access Controls: Access to personal data within bf69 is restricted on a strict need-to-know basis. All staff with data access undergo background screening and regular data protection training.
- Two-Factor Authentication: bf69 supports two-factor authentication (2FA) for player accounts and enforces it for all internal staff accounts with access to personal data.
- Penetration Testing: bf69 conducts regular independent penetration tests and security audits of our platform infrastructure.
- Incident Response: bf69 maintains a documented data breach response procedure. In the event of a personal data breach, we will notify affected players and the National Privacy Commission within the timeframes required by the DPA.
- Vendor Security: All third-party processors used by bf69 are contractually required to maintain security standards equivalent to those described in this section.
While bf69 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. If you suspect your account has been compromised, contact our support team immediately.
09 Cookies & Tracking Technologies
bf69 uses cookies and similar tracking technologies (collectively "cookies") on the bf69.app platform. A cookie is a small text file placed on your device that allows the platform to recognise your browser and remember certain information about your session and preferences.
9.1 Types of Cookies Used
- Strictly Necessary Cookies: Required for the platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
- Functional Cookies: Remember your preferences such as language settings, preferred game categories, and responsible gaming reminder settings. You may disable these, but doing so may affect your platform experience.
- Analytics Cookies: Collect anonymised data about how players use the bf69 platform, which pages are most visited, and where errors occur. This data is used solely to improve the platform. These are enabled by default but may be opted out of.
- Fraud Prevention Cookies: Used to detect and prevent fraudulent account activity and bot traffic. These operate in the background and are required for platform security.
9.2 Managing Cookies
You can manage your cookie preferences through the bf69 cookie settings panel accessible from any page on the platform. You may also control cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your bf69 account.
9.3 No Third-Party Advertising Cookies
bf69 does not allow third-party advertising networks to place tracking cookies on bf69.app. We do not engage in cross-site behavioural advertising or share your browsing data with ad networks.
10 Your Privacy Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by bf69. To exercise any of these rights, contact our Data Protection Officer using the details in Section 14.
10.1 Right to Be Informed
You have the right to be informed about how your personal data is being collected and processed. This Privacy Policy fulfils that obligation. We will update you promptly if our processing practices materially change.
10.2 Right to Access
You have the right to request a copy of the personal data that bf69 holds about you, including information about the purposes for which it is processed, the categories of data held, and the third parties with whom it has been shared. We will respond to access requests within fifteen (15) business days.
10.3 Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic profile information directly through your bf69 account settings. For corrections to KYC or identity data, please contact our support team.
10.4 Right to Erasure
You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (for consent-based processing), or where the processing is unlawful. Note that bf69 may be legally required to retain certain data (e.g., transaction records under AMLA) even following an erasure request.
10.5 Right to Object
You have the right to object to the processing of your personal data where bf69 relies on legitimate interests as the legal basis. You also have an unconditional right to object to the processing of your data for direct marketing purposes, which will be honoured without delay.
10.6 Right to Data Portability
Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that bf69 transmit that data to another controller where technically feasible.
10.7 Right to Lodge a Complaint
If you believe that bf69 has processed your personal data in violation of the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information about how to file a complaint is available on the NPC's official website.
bf69 will not discriminate against you for exercising any of your data rights. Exercising your rights will have no negative impact on the services available to you, except where the data is strictly necessary for the provision of those services.
11 Minors
The bf69 platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations and Philippine law governing casino-style gambling. bf69 does not knowingly collect personal data from individuals under the age of 21.
Our registration process includes a mandatory date-of-birth field and is designed to prevent underage registration. Where bf69 becomes aware — through KYC verification or other means — that personal data has been collected from an individual under 21 years of age, that account will be immediately suspended, all associated data will be reviewed, and the matter will be handled in accordance with our legal obligations under both the Data Privacy Act and PAGCOR regulations.
If you are a parent or guardian and believe that your child under 21 has registered a bf69 account, please contact our Data Protection Officer immediately using the contact details in Section 14 so that we can take prompt action.
12 Cross-Border Data Transfers
bf69 primarily processes your personal data within the Philippines. However, certain service providers (including cloud infrastructure providers and game studios) may process data in other jurisdictions. Where personal data is transferred outside the Philippines, bf69 ensures that such transfers are made only to countries or organisations that provide adequate levels of data protection, or are subject to appropriate safeguards such as contractual clauses approved by the National Privacy Commission.
bf69 will not transfer your personal data to a foreign jurisdiction where doing so would be prohibited by the Data Privacy Act or where adequate protections cannot be guaranteed. If you have questions about specific cross-border transfers, please contact our Data Protection Officer.
13 Policy Changes
bf69 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. The revised Policy will be published on bf69.app with the updated effective date prominently displayed at the top of the page.
Where changes are material — meaning they significantly affect how we process your data or reduce your rights as a data subject — bf69 will provide advance notice via email to the address registered on your account, or through an in-platform notification, at least fourteen (14) days before the changes take effect.
Your continued use of the bf69 platform after the effective date of any amendment constitutes your acknowledgment of the revised Policy. If you disagree with any changes, you should cease using the platform and contact us to close your account in accordance with our Terms and Conditions.
14 Contact & Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bf69, please contact our Data Protection Officer:
- Email: [email protected] (subject line: "Data Privacy Request")
- Response Time: We aim to acknowledge all privacy enquiries within two (2) business days and to provide a substantive response within fifteen (15) business days.
If you are not satisfied with our response, or if you believe that bf69 has violated your rights under the Philippine Data Privacy Act, you may file a complaint with the National Privacy Commission (NPC). bf69 will cooperate fully with any NPC investigation.
For all data privacy matters — including access requests, rectification requests, erasure requests, and marketing opt- outs — please email us at [email protected] with your full name and registered account email so we can verify your identity before processing your request.
Your Privacy Is Protected at bf69
Now that you understand how we handle your data, explore everything bf69 has to offer — from live dealer games in Makati-style ambiance to the best online slots and sports betting in the Philippines. All secured, all PAGCOR-regulated, all for players 21 and above.