// OUR DATA COMMITMENTS
SSL-Encrypted Storage
All personal data stored by kbl99 is encrypted at rest and in transit using industry-standard TLS/SSL protocols. Your information is never stored in plaintext on kbl99 systems.
DPA 2012 Compliant
kbl99 processes personal data in compliance with the Philippine Data Privacy Act of 2012 (RA 10173). Your rights as a data subject are fully recognized and protected by kbl99.
No Data Selling
kbl99 does not sell, rent, or trade your personal information to third-party marketers. Data sharing is limited to regulated service providers and regulatory requirements only.
Purpose Limitation
Personal data collected by kbl99 is used only for the specific, declared purposes stated in this Policy. We do not repurpose your data for unrelated activities without your consent.
Your Rights Are Real
kbl99 provides genuine, accessible mechanisms for you to exercise your data subject rights — access, correction, erasure, and portability — not just policy text that leads nowhere.
Transparent Processing
We tell you exactly what data we collect, why we collect it, who we share it with, and how long we keep it. No hidden data practices on kbl99's platform.
1. Data Controller
1.1 Identity of the Data Controller. The data controller responsible for the processing of your personal information is kbl99, the operator of the online gaming platform accessible at kbl99.app. For the purposes of the Philippine Data Privacy Act of 2012, kbl99 is the personal information controller with respect to all personal data collected through the Platform.
1.2 Data Protection Officer. kbl99 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection laws. Contact information for the DPO is provided in Section 12 of this Policy.
1.3 Scope. This Policy applies to all personal data collected through the kbl99 website, mobile-optimized web application, and any related communications channels, including live chat, email, and social messaging platforms used for kbl99 customer support.
2. Data We Collect
2.1 kbl99 collects the following categories of personal information:
| Category | Data Types | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, government ID number, nationality | Registration form, KYC verification |
| Contact Data | Mobile number, email address, city/province of residence | Registration form, account settings |
| Financial Data | GCash number, bank account details, transaction history, deposit and withdrawal records | Payment processing, transaction logs |
| Gaming Data | Game history, bet amounts, session duration, wagering patterns, win/loss records | Platform activity logs |
| Technical Data | IP address, device type, browser type, operating system, session tokens | Automatic collection via cookies and server logs |
| Communication Data | Support chat transcripts, email correspondence, feedback submissions | Support interactions |
2.2 Sensitive Personal Information. kbl99 may collect sensitive personal information, including government-issued identification documents, as required for KYC verification and compliance with anti-money laundering obligations. Such sensitive information is processed with heightened security controls and is accessible only to authorized kbl99 personnel on a need-to-know basis.
2.3 Voluntary Provision. Providing personal information to kbl99 is voluntary; however, failure to provide information required for registration or KYC verification will prevent kbl99 from offering its gaming services to you.
3. Purposes of Processing
3.1 kbl99 processes your personal data for the following purposes:
- Account Registration and Management: Creating and maintaining your kbl99 player account, authenticating your identity at login, and managing account settings and preferences;
- Gaming Services Delivery: Providing access to kbl99's game library, processing bets, calculating and crediting winnings, and facilitating live casino, sports betting, bingo, and slot gameplay;
- Payment Processing: Processing deposits via GCash, PayMaya, BPI, BDO, Metrobank, and InstaPay; processing withdrawal requests; and maintaining accurate financial records of all transactions;
- KYC and Identity Verification: Verifying that players meet the minimum age requirement of 21 years, confirming Philippine residency, and satisfying anti-money laundering obligations;
- Regulatory Compliance: Meeting kbl99's obligations under Philippine gaming regulations, anti-money laundering laws, and applicable financial regulations, including mandatory reporting to relevant authorities;
- Customer Support: Responding to player inquiries, resolving disputes, processing complaints, and providing technical assistance;
- Responsible Gaming: Monitoring gaming activity for indicators of problematic gambling behavior, administering deposit limits and self-exclusion requests, and providing responsible gaming support;
- Security and Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, account compromise, bonus abuse, money laundering, and other prohibited conduct;
- Platform Improvement: Analyzing aggregated, anonymized usage data to improve kbl99's game selection, user interface, payment processes, and overall platform experience;
- Marketing Communications: Where you have provided consent, sending promotional offers, bonus notifications, and platform updates relevant to your kbl99 account.
4. Legal Basis for Processing
4.1 kbl99 processes personal data on the following legal bases as recognized under the Philippine Data Privacy Act of 2012:
- Contractual Necessity: Processing required to perform the contract between you and kbl99 — including account creation, game access, payment processing, and customer support;
- Legal Obligation: Processing required to comply with applicable Philippine laws, including anti-money laundering regulations, PAGCOR-aligned compliance requirements, and tax obligations;
- Legitimate Interest: Processing necessary for kbl99's legitimate interests in fraud prevention, platform security, and responsible gaming compliance, where such interests are not overridden by your rights;
- Consent: Processing for marketing communications and optional features where kbl99 has obtained your prior express consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
5. Data Sharing
5.1 Service Providers. kbl99 shares personal data with third-party service providers who assist in delivering the Platform's services, including KYC verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), game software providers, cloud hosting providers, and customer support technology platforms. All such providers are contractually bound to process personal data only in accordance with kbl99's instructions and applicable data protection laws.
5.2 Regulatory Authorities. kbl99 may be required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine regulatory authorities pursuant to applicable legal obligations.
5.3 Law Enforcement. kbl99 may disclose personal data to law enforcement agencies or courts in response to valid legal process, court orders, or investigations into fraud, money laundering, or other criminal activity.
5.4 No Sale of Data. kbl99 does not sell, rent, license, or trade personal data to third-party advertisers or data brokers under any circumstances.
6. Data Retention
6.1 kbl99 retains personal data only for as long as necessary to fulfill the purposes described in this Policy or as required by applicable Philippine law.
6.2 Account Data: Retained for the duration of your active kbl99 account, and for a minimum of five (5) years following account closure, in compliance with applicable financial recordkeeping obligations.
6.3 Financial and Transaction Records: Retained for a minimum of five (5) years from the date of each transaction in compliance with anti-money laundering requirements.
6.4 KYC Documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
6.5 Support Communications: Retained for up to three (3) years following closure of each support interaction.
6.6 Following the expiry of applicable retention periods, personal data is securely deleted or anonymized in accordance with kbl99's data disposal procedures.
7. Data Security
7.1 kbl99 implements appropriate technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:
- TLS/SSL encryption for all data transmitted between your device and kbl99's servers;
- Encryption of sensitive data at rest in kbl99's databases;
- Role-based access controls limiting employee access to personal data on a need-to-know basis;
- Multi-factor authentication for kbl99 internal systems;
- Regular security assessments and penetration testing of the kbl99 platform;
- Incident response procedures for detecting and responding to data security events.
7.2 Security Incident Notification. In the event of a personal data breach that is likely to result in risks to your rights and freedoms, kbl99 will notify you and the National Privacy Commission in accordance with the requirements of the Philippine Data Privacy Act and its Implementing Rules.
8. Your Data Rights
8.1 As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by kbl99:
You have the right to be informed of the purposes for which your personal data is being collected and processed, and the identity of the data controller. This Policy fulfills that obligation.
You may request a copy of the personal data held about you by kbl99, as well as information about the processing activities applied to your data. Requests are fulfilled within fifteen (15) working days of verification.
You have the right to request correction of any inaccurate or incomplete personal data held by kbl99. Most personal data fields can be updated directly in your kbl99 account settings; other corrections may require submitting a formal request.
You may request erasure of your personal data where kbl99 no longer has a lawful basis for processing it. Note that kbl99 may be required to retain certain data for legal and regulatory compliance purposes even after account closure.
You may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests in certain circumstances.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another organization where technically feasible and legally permissible.
8.2 To exercise any of the above rights, submit a written request to kbl99 via the support channels listed in Section 12. kbl99 will acknowledge receipt of your request and respond within the timeframes prescribed by the Philippine Data Privacy Act.
9. Cookies & Tracking Technologies
9.1 kbl99 uses cookies and similar tracking technologies to operate the Platform, maintain your session, remember your preferences, and analyze aggregated usage patterns. The following categories of cookies are used:
- Strictly Necessary Cookies: Required for basic Platform functionality including user authentication, session management, and security features. These cannot be disabled without impacting Platform access;
- Functional Cookies: Remember your preferences such as language settings, currency display, and game lobby layout;
- Analytics Cookies: Collect aggregated, anonymized data about how players interact with kbl99's platform to inform improvements to the user experience. Individual player behavior is not profiled.
9.2 kbl99 does not use third-party advertising cookies or behavioral tracking cookies for cross-site advertising purposes. Your kbl99 gaming activity is not shared with advertising networks.
9.3 You may control cookie settings through your browser. Disabling strictly necessary cookies will affect your ability to use the kbl99 platform and may prevent login.
10. Minors
10.1 kbl99 does not knowingly collect personal data from individuals under 21 years of age. The kbl99 platform is strictly intended for adults aged 21 and above in accordance with applicable Philippine regulations.
10.2 If kbl99 becomes aware that personal data has been collected from an individual under 21 years of age, we will take immediate steps to suspend the relevant account and delete the associated personal data in accordance with applicable law.
11. Policy Changes
11.1 kbl99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or kbl99's data processing practices. Amended versions will be posted on this page with an updated effective date.
11.2 For material changes that significantly affect how kbl99 processes your personal data, kbl99 will provide advance notice via your registered email address or via a prominent in-platform notification prior to the amended Policy taking effect.
11.3 Continued use of the kbl99 platform following the posting of an updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree to the revised Policy, you should cease using kbl99 and may request account closure in accordance with the account termination procedures in kbl99's Terms and Conditions.
12. Contact & Data Protection Officer
12.1 For any questions, concerns, or requests relating to this Privacy Policy or kbl99's data processing activities, including data subject rights requests and privacy complaints, please contact the kbl99 Data Protection Officer through the following channels:
- Live Chat: Available 24/7 on the kbl99 platform — the fastest channel for general inquiries;
- Messenger & Viber: Filipino-speaking agents available around the clock;
- Email (plain text — not a link): [email protected] — for formal data subject requests, include your registered mobile number and a description of your request.
12.2 If you believe that kbl99 has processed your personal data in violation of the Philippine Data Privacy Act of 2012, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file an NPC complaint is available on the NPC's official website.
kbl99 is built on a foundation of player trust. From secure GCash transactions to DPA-compliant data handling, every part of the platform is designed with Filipino players in mind. Questions? Our support team is here 24/7.
// 21+ ONLY · PLAY RESPONSIBLY · kbl99.APP