bso89 Privacy Policy

This Privacy Policy ("Policy") applies to all personal data processed by bso89 in connection with your use of the bso89 online gaming platform accessible at bso89.cam, including any associated mobile-optimized interfaces, customer support channels, and promotional communications (collectively, the "Platform").

This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR), as well as the circulars and issuances of the National Privacy Commission (NPC) of the Philippines. It applies to all registered players, prospective players who browse the Platform, and any individual who contacts bso89 through its support or communication channels.

By registering an account with bso89 or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with this Policy, you should not register an account or continue using the bso89 Platform.

For the purposes of the Data Privacy Act of 2012 and this Policy, the data controller responsible for your personal data is bso89, the operator of the bso89 online gaming platform at bso89.cam, operating under a valid PAGCOR (Philippine Amusement and Gaming Corporation) license.

bso89 has appointed a Data Protection Officer (DPO) as required under the DPA. The DPO is responsible for overseeing bso89's data protection compliance, managing data subject access requests, handling privacy complaints, and liaising with the National Privacy Commission on matters of data privacy.

Contact details for the bso89 DPO are provided in Section 14 of this Policy. All data privacy inquiries, requests, and complaints should be directed to the DPO in the first instance.

bso89 collects and processes the following categories of personal data depending on your level of engagement with the Platform:

bso89 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion;
• Automatically — when you access and use the Platform, through cookies, web beacons, server logs, and similar tracking technologies as described in Section 8;
• From payment service providers — including GCash, Maya, BPI, BDO, Metrobank, and other payment processors, in connection with processing your financial transactions on bso89;
• From identity verification services — third-party KYC and AML screening providers engaged by bso89 to assist with regulatory compliance;
• From PAGCOR and regulatory authorities — where required to comply with our licensing obligations or to respond to regulatory inquiries.

bso89 processes your personal data for the following specific, declared purposes:

• Account creation and management — to register, verify, and administer your bso89 account;
• Identity and age verification — to confirm that you are at least 21 years of age and are who you say you are, as required by PAGCOR;
• Payment processing — to process deposits, withdrawals, and refunds through your chosen payment method;
• Regulatory compliance — to comply with PAGCOR licensing conditions, Anti-Money Laundering Act obligations (RA 9160), tax reporting requirements, and other applicable Philippine laws;
• Fraud prevention and security — to detect, prevent, and investigate fraud, cheating, multiple account abuse, and other unauthorized activity;
• Customer support — to respond to your inquiries, complaints, and requests;
• Responsible gaming — to monitor gaming behavior for indicators of problem gambling and to administer self-exclusion programs;
• Platform improvement — to analyze usage patterns and improve the design, functionality, and game selection of the bso89 Platform;
• Marketing communications — to send you information about bso89 promotions, bonuses, and new games, where you have opted in to receive such communications.

Under the Data Privacy Act of 2012, bso89 relies on the following legal bases when processing your personal data:

• Contractual necessity — processing required to perform the bso89 Player Agreement with you, including account management, payment processing, and delivering the gaming services you have requested;
• Legal obligation — processing necessary to comply with bso89's obligations under PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine laws;
• Legitimate interest — processing conducted for bso89's legitimate business interests, including fraud prevention, network security, and Platform improvement, where such interests are not overridden by your data protection rights;
• Consent — processing based on your explicit consent, including marketing communications and the use of non-essential cookies. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

bso89 does not sell your personal data. We may share your data with the following categories of recipients where necessary and in accordance with this Policy:

• Payment service providers — GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other payment processors, to facilitate your deposits and withdrawals. These providers receive only the data necessary to process the specific transaction;
• KYC and identity verification providers — third-party services engaged by bso89 to verify your identity and age and to screen against AML watchlists as required by law;
• Game content providers — software studios such as PG Soft, Pragmatic Play, and Jili may receive anonymized or pseudonymized session data for game performance analytics. These providers do not receive your name, mobile number, or financial data;
• PAGCOR and regulatory authorities — as required by bso89's PAGCOR license, including player data submitted in regulatory reports, audit requests, and AML declarations to the Anti-Money Laundering Council (AMLC);
• Law enforcement and government bodies — where bso89 is required by law, court order, or lawful authority to disclose data;
• Fraud prevention and security services — specialist providers that assist bso89 in detecting and preventing fraud, bonus abuse, and account compromises.

All third-party service providers engaged by bso89 are required to enter into Data Processing Agreements (DPAs) that prohibit the use of your personal data for any purpose other than the specific service being provided, and that require them to implement appropriate security measures consistent with the DPA of 2012.

bso89 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies — necessary for the Platform to function correctly, including session management, login authentication, and fraud prevention. These cookies cannot be disabled without impairing Platform functionality;
• Performance cookies — used to collect anonymized data about how players navigate and use the bso89 Platform, enabling us to identify technical issues and improve user experience;
• Functional cookies — used to remember your preferences, such as your preferred language setting and game display options;
• Analytics cookies — used to understand aggregate usage patterns and popular game categories on bso89. Analytics data is processed in aggregate form and does not identify individual players.

Non-essential cookies are only placed with your consent, which is requested when you first access the Platform. You may review and adjust your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the bso89 Platform.

bso89 implements a comprehensive information security program designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS encryption for all data in transit between your device and bso89 servers;
• AES-256 encryption for sensitive personal data stored at rest, including identity documents and financial records;
• Multi-factor authentication requirements for administrative access to bso89 internal systems;
• Role-based access controls ensuring that only authorized personnel with a genuine need can access personal data;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• 24/7 security monitoring and intrusion detection systems;
• Employee data privacy and security training, with periodic refresher programs.

In the event of a personal data breach that is likely to result in significant harm to affected data subjects, bso89 will comply with its mandatory breach notification obligations under the DPA, including notification to the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and notification to affected players without undue delay.

bso89 retains personal data for the periods specified below, after which data is securely deleted or anonymized, subject to any overriding legal obligation to retain it for a longer period:

• Account and identity data — retained for the duration of the active account relationship, plus five (5) years following account closure, as required under Anti-Money Laundering regulations;
• Financial transaction records — retained for five (5) years following the date of the transaction, in compliance with AMLC and tax record-keeping requirements;
• KYC and identity verification documents — retained for five (5) years following account closure or the last transaction on the account, whichever is later;
• Customer support communications — retained for two (2) years following resolution of the support interaction;
• Gaming session logs — retained for three (3) years for regulatory and dispute resolution purposes;
• Marketing preference records — retained for the duration of the account relationship and for one (1) year following account closure or opt-out, as evidence of consent history.

Data retained beyond the active account relationship is subject to access controls, stored in a restricted archive environment, and used only for the specific compliance or legal purpose that justifies its continued retention.

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bso89:

• Right to be Informed — the right to be informed of the nature, purpose, and extent of processing of your personal data, including any automated processing;
• Right of Access — the right to request a copy of the personal data bso89 holds about you, and to receive information about how it is used;
• Right to Rectification — the right to request correction of inaccurate or incomplete personal data without undue delay;
• Right to Erasure — the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to bso89's legal retention obligations;
• Right to Object — the right to object to the processing of your personal data based on legitimate interest, including the right to opt out of marketing communications at any time;
• Right to Data Portability — the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request its transfer to another controller where technically feasible;
• Right to Lodge a Complaint — the right to file a complaint with the National Privacy Commission of the Philippines if you believe bso89 has violated your data privacy rights.

To exercise any of the above rights, please contact the bso89 Data Protection Officer as described in Section 14. bso89 will respond to verified data subject requests within thirty (30) days of receipt, or within such extended period as permitted by the DPA where the request is complex or numerous.

The bso89 Platform is strictly intended for individuals who are at least twenty-one (21) years of age, in compliance with PAGCOR regulations and applicable Philippine law. bso89 does not knowingly collect personal data from individuals under the age of 21.

All account registrations require applicants to declare their date of birth, and bso89 conducts age verification as part of its KYC process. If bso89 discovers or is notified that it has inadvertently collected personal data from an individual under 21 years of age, bso89 will immediately close the account, delete the associated personal data (subject to any mandatory reporting obligations), and return any deposited funds to the originating payment method.

bso89 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material — particularly those that affect your rights or the manner in which bso89 uses your personal data — we will notify you by email, in-platform notification, or a prominent notice on the bso89 Platform at least fourteen (14) days before the changes take effect.

The "Last Reviewed" date at the top of this Policy reflects the date of the most recent review. Your continued use of the bso89 Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you should discontinue use of the Platform and may request account closure in accordance with the bso89 Terms & Conditions.

We recommend that you review this Privacy Policy periodically to stay informed about how bso89 protects your personal data.

For all privacy-related inquiries, data subject access requests, complaints, or concerns regarding bso89's handling of your personal data, please contact the bso89 Data Protection Officer through the following channels:

• Email: [email protected] — Please include "Privacy Request" or "Data Subject Request" in the subject line, together with your registered account username or mobile number. The bso89 DPO will acknowledge your request within two (2) business days.
• Live Chat: Available 24 hours a day, 7 days a week via the bso89 Platform. For data privacy matters, please request to be connected with the Data Protection team.
• Support Center: Visit the bso89 Support Center for self-service guides on account data management, including how to download a copy of your data or submit an erasure request.

If you are not satisfied with bso89's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, the supervisory authority responsible for enforcing the Data Privacy Act of 2012.

This Privacy Policy was last reviewed and updated in January 2026 and is effective from January 1, 2026.