fb009 Privacy Policy

This Privacy Policy ("Policy") is issued by fb009 ("fb009," "we," "us," "the Company") and applies to all personal data collected, processed, and stored by fb009 in connection with the operation of the online gaming and sports betting platform accessible at fb009.org and all related subdomains and service interfaces (the "Platform").

fb009 is committed to protecting the privacy and personal data of all users, including registered players, visitors, and prospective registrants in the Philippines. This Policy is designed to comply with the requirements of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines.

By registering an account on fb009, accessing the Platform, or otherwise providing your personal information to fb009, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the fb009 Platform.

For the purposes of the Data Privacy Act of 2012 and this Policy, the personal information controller responsible for your data is fb009, the operator of the Platform at fb009.org. fb009 determines the purposes and means of processing your personal data in connection with the provision of online gaming services to Filipino players across the Philippines, including players based in Metro Manila, Cebu City, Davao, Quezon City, Makati, and all other regions of the country.

Contact details for the fb009 Data Protection Officer (DPO) are provided in Section 16 of this Policy. You may direct any data privacy-related inquiries, complaints, or requests to exercise your rights to the DPO using those contact details.

fb009 collects the following categories of personal data in the course of operating the Platform and providing services to players:

fb009 collects your personal data through the following means:

• Direct provision by you: when you complete the registration form, submit KYC documents, contact customer support, participate in promotions, or interact with any input field on the Platform;
• Automated collection: technical data such as your IP address, device identifiers, browser type, and geolocation data are collected automatically when you access the Platform through cookies, server logs, and similar tracking technologies (see Section 10);
• Third-party sources: fb009 may receive data about you from KYC verification service providers, payment processors (including GCash and Maya), fraud prevention and AML screening services, and credit reference agencies, where required for regulatory compliance or to protect the security of the Platform;
• PAGCOR and regulatory bodies: in fulfilling regulatory reporting obligations, fb009 may receive information from PAGCOR or other Philippine government authorities in connection with its licensing obligations.

fb009 processes your personal data only where it has a lawful basis to do so under the Data Privacy Act of 2012. The applicable legal bases for fb009's processing activities are:

• Contractual necessity: processing is necessary to perform the contract between you and fb009 (the Terms and Conditions), including creating and managing your account, processing deposits and withdrawals, delivering game services, and communicating with you regarding your account;
• Compliance with a legal obligation: processing is necessary for fb009 to comply with applicable Philippine laws, including PAGCOR licensing requirements, the Anti-Money Laundering Act (RA 9160 as amended), the Anti-Terrorism Financing provisions, KYC regulatory requirements, and tax reporting obligations;
• Legitimate interests: processing is necessary for fb009's legitimate interests in preventing fraud, maintaining platform security, improving services, analyzing usage patterns, and enforcing the Terms and Conditions, where such interests are not overridden by your rights and freedoms;
• Consent: for certain processing activities — such as sending you marketing communications about promotions and new game releases — fb009 relies on your explicit consent, which you may withdraw at any time by contacting the DPO or updating your communication preferences in account settings.

fb009 uses the personal data it collects for the following purposes:

• To create and manage your fb009 account and verify your identity and age in compliance with PAGCOR's minimum age requirement of 21 years old;
• To process deposits, withdrawals, and other financial transactions through GCash, Maya, BPI, BDO, UnionBank, Coins.ph, 7-Eleven, and other accepted payment methods;
• To provide, operate, and maintain the full range of fb009 gaming services, including slot games, live casino, sports betting, bingo, fishing games, and card game tournaments;
• To administer and enforce bonus terms, promotions, loyalty programs, and VIP rewards;
• To fulfil fb009's obligations under Philippine AML legislation, including conducting transaction monitoring, customer due diligence, and reporting suspicious activity to the Anti-Money Laundering Council (AMLC);
• To fulfil PAGCOR reporting and audit requirements applicable to fb009 as a licensed operator;
• To detect, investigate, and prevent fraudulent activity, security breaches, account sharing, multi-accounting, and other prohibited conduct;
• To provide customer support and resolve disputes through live chat and email channels;
• To administer fb009's responsible gaming tools, including deposit limits, session limits, loss limits, and self-exclusion programs;
• To send you transactional communications relating to your account, including deposit confirmations, withdrawal notifications, and security alerts;
• To send you marketing communications about fb009 promotions, new games, and special offers — only where you have provided consent or where such communications relate directly to services you have already used;
• To analyze Platform usage and player behavior in aggregate form to improve the fb009 user experience, game library, and payment infrastructure;
• To enforce the fb009 Terms and Conditions and pursue or defend legal claims where necessary.

fb009 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. fb009 may share your personal data with the following categories of third parties only to the extent strictly necessary for the purposes outlined in this Policy:

• Payment service providers: GCash (G-Xchange, Inc.), Maya (Voyager Innovations, Inc.), BPI, BDO, UnionBank, Coins.ph (Coins Technologies, Inc.), and other payment processors, solely to facilitate the processing of deposits and withdrawals from your fb009 account;
• KYC and identity verification service providers: third-party service providers engaged by fb009 to perform electronic identity verification, document authentication, and biometric checks in connection with mandatory KYC processes;
• AML and fraud screening services: providers of anti-money laundering transaction monitoring, politically exposed person (PEP) screening, and fraud detection services engaged by fb009 to meet its regulatory obligations;
• Game content providers: third-party game software providers whose games are accessible through the fb009 lobby may receive limited technical data (such as session tokens and anonymized player identifiers) necessary to operate game sessions — these providers do not receive your full personal profile;
• IT, hosting, and cloud infrastructure providers: third parties engaged by fb009 to provide data hosting, content delivery, cybersecurity, and related technical infrastructure services, under contractual obligations of confidentiality and data protection;
• PAGCOR and Philippine government authorities: fb009 discloses personal and transactional data to PAGCOR, the AMLC, the Bureau of Internal Revenue (BIR), and other Philippine government bodies as required by law, regulatory directive, or court order;
• Legal and professional advisers: lawyers, accountants, auditors, and other professional advisers retained by fb009 in connection with the operation of its business, under strict confidentiality obligations;
• Business successors: in the event of a merger, acquisition, or sale of all or part of fb009's business, your personal data may be transferred to the acquiring entity, subject to the same data protection obligations as set out in this Policy.

In certain circumstances, some of fb009's third-party service providers — including cloud infrastructure providers, game content providers, and KYC verification services — may process personal data outside the Republic of the Philippines. Where such international transfers occur, fb009 takes steps to ensure that appropriate safeguards are in place to protect your personal data to a standard consistent with the Data Privacy Act of 2012, including:

• Requiring data processing agreements with foreign data processors that impose data protection obligations equivalent to those required under Philippine law;
• Transferring data only to jurisdictions or entities that the NPC has determined provide an adequate level of protection, or where other appropriate safeguards have been implemented;
• Limiting the data transferred to the minimum necessary for the specific processing purpose.

If you would like more information about the safeguards applicable to a specific international transfer, you may contact the fb009 Data Protection Officer using the details in Section 16.

fb009 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, and in compliance with applicable legal and regulatory retention obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, fb009 will securely delete or anonymize your personal data in accordance with its data destruction procedures. Anonymized data — from which you can no longer be individually identified — may be retained indefinitely for statistical and analytical purposes.

The fb009 Platform uses cookies and similar tracking technologies (collectively, "Cookies") to enhance your user experience, maintain session state, detect fraud, and analyze platform usage. The following categories of Cookies are used:

• Strictly necessary cookies: required for the Platform to function — including session management cookies that keep you logged in across pages during your gaming session. These cannot be disabled without preventing basic platform functionality;
• Functional cookies: remember your preferences, such as language settings, responsible gaming limit configurations, and game lobby preferences;
• Analytics cookies: collect aggregated, anonymized data about how visitors navigate the Platform to help fb009 improve performance, page layout, and game discovery;
• Security and fraud-detection cookies: used by fb009's security infrastructure to identify unusual login patterns, detect bot activity, and prevent unauthorized access.

fb009 does not use third-party advertising cookies or allow external advertising networks to track your activity on the Platform. You may manage non-essential cookies through your browser settings. Note that disabling strictly necessary cookies may impair your ability to use the fb009 Platform.

fb009 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption on all data transmission between your device and the fb009 servers, equivalent to the encryption standard used by Philippine banks and major financial institutions;
• Encryption at rest for all sensitive personal data stored in fb009's databases, including KYC documents and financial account details;
• Access controls: personal data is accessible only to authorized fb009 personnel who require access in the performance of their specific job functions, enforced through role-based access controls and multi-factor authentication for system access;
• Two-factor authentication (2FA) available to all players as an additional layer of account security, which fb009 strongly recommends enabling;
• Regular security audits and penetration testing conducted by independent third-party security professionals to identify and remediate vulnerabilities;
• Incident response procedures that meet the NPC's mandatory notification requirements in the event of a personal data breach — fb009 will notify affected players and the NPC within the timeframes prescribed by the Data Privacy Act.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by fb009. To exercise any of these rights, contact the fb009 Data Protection Officer using the details in Section 16. fb009 will respond to verified requests within thirty (30) calendar days.

The fb009 Platform is strictly intended for persons who are at least twenty-one (21) years of age, in accordance with PAGCOR's minimum age requirements for online gaming in the Philippines. fb009 does not knowingly collect personal data from individuals under 21 years of age.

If fb009 becomes aware that it has collected personal data from an individual who is under 21 years of age, it will immediately close the associated account, void any transactions or winnings, return the deposit principal where verifiable, and permanently delete all personal data associated with the underage account.

If you believe that a person under 21 years of age has registered an account on fb009, please notify the DPO immediately at the contact details provided in Section 16.

The fb009 Platform integrates with third-party payment services (including GCash, Maya, and Coins.ph) and game content providers, each of which may operate under its own privacy policy. fb009 is not responsible for the data practices of any third-party service provider, and this Policy does not apply to any website, platform, or service operated by a third party, even where that service is accessible from the fb009 Platform.

fb009 strongly encourages you to review the privacy policies of all third-party services you use in connection with your fb009 account, including your GCash or Maya wallet, to understand how they handle your personal data.

fb009 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or fb009's data processing practices. Material changes to this Policy will be communicated to registered players via the email address on file and/or through a prominent notice on the Platform, with a minimum of seven (7) calendar days' advance notice before the updated Policy takes effect.

The "Effective Date" at the top of this Policy will be updated each time the Policy is revised. Continued use of the fb009 Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the Platform and may request account closure.

All previous versions of this Policy are archived and available upon request from the Data Protection Officer.

For any questions, concerns, or requests relating to this Privacy Policy or to exercise your data subject rights under the Data Privacy Act of 2012, please contact the fb009 Data Protection Officer through the following channels:

• 24/7 Live Chat: Available directly on the fb009 Platform — select "Privacy / Data Request" from the support topic menu
• Email: [email protected] — subject line: "Data Privacy Request"

fb009 aims to acknowledge all written data privacy requests within seventy-two (72) hours of receipt and to resolve substantive requests within thirty (30) calendar days, as required under the Data Privacy Act. If your request requires extended processing time, fb009 will notify you of the delay and provide an estimated resolution date.