Privacy Policy

This Privacy Policy ("Policy") is issued by fb009 ("fb009," "we," "us," "our") and governs the collection, processing, storage, use, and disclosure of personal information relating to individuals ("Data Subjects," "Players," "you," "your") who register for and use the fb009 online gaming platform accessible at fb009.club and any associated mobile-optimized interfaces (collectively, the "Platform").

fb009 operates as a personal information controller under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its implementing rules and regulations. We are also subject to the oversight of the National Privacy Commission ("NPC") of the Philippines. In addition, our status as a PAGCOR-licensed online casino operator imposes further obligations on the handling of player data in connection with anti-money laundering compliance, responsible gaming enforcement, and regulatory reporting.

This Policy applies to all personal information we collect — whether submitted by you directly during registration, generated automatically through your use of the Platform, obtained from third-party payment processors, or required by PAGCOR's Know Your Customer framework. By creating an account at fb009, depositing funds, or using any feature of the Platform, you acknowledge that you have read, understood, and agreed to the data practices described in this Policy.

The personal information controller responsible for your data under this Policy is fb009, operating as a PAGCOR-registered online gaming entity with its primary operations serving the Philippine market. fb009 has designated a Data Protection Officer ("DPO") as required by the DPA and NPC implementing rules.

For all matters relating to data privacy, the exercise of data subject rights, or the reporting of a potential data breach, you may contact the fb009 Data Protection Officer at: [email protected] — this is a plain text contact address and is not a clickable link. Please include "Data Privacy – DPO" in the subject line of your email. The DPO will acknowledge receipt of all privacy-related inquiries within seventy-two (72) hours and respond substantively within fifteen (15) business days.

fb009 collects personal information from Data Subjects through multiple channels. The categories of personal data we process are set out below:

3.1 Registration Data

When you create an fb009 account, we collect your Philippine mobile number (which serves as your primary account identifier), your chosen username, and a hashed representation of your password. We also record the date, time, and device information associated with account creation.

3.2 Identity Verification (KYC) Data

In compliance with PAGCOR's mandatory Know Your Customer requirements and the Anti-Money Laundering Act of the Philippines (AMLA), we collect and process the following data during identity verification:

• Full legal name as appearing on your government-issued Philippine identification document;
• Date of birth (for minimum age verification — 21 years old per PAGCOR regulations);
• ID type and reference number from a valid Philippine government-issued ID (UMID, SSS, PhilHealth, Driver's License, Passport, Voter's ID, or PhilSys National ID);
• Photographic image of the front and back of the submitted ID document;
• Real-time selfie photograph taken for biometric liveness verification against the submitted ID.

3.3 Financial Transaction Data

We record all financial transactions on your account including: deposit amounts, payment channels used (GCash, Maya, BPI, BDO, UnionBank, Metrobank, 7-Eleven Cliqq, Coins.ph, USDT TRC20), transaction reference numbers, timestamps, and withdrawal records. This data is retained for regulatory reporting and anti-money laundering audit purposes.

3.4 Gameplay & Platform Activity Data

fb009 maintains server-side logs of all player activity on the Platform, including game sessions, wagers placed, game outcomes, bonus activation and completion records, and session durations. This data is used for platform integrity, dispute resolution, responsible gaming monitoring, and game performance analytics.

3.5 Technical and Device Data

We automatically collect technical data when you access the Platform, including your IP address, device type and operating system, browser type and version, mobile network carrier, and session identifiers. This data is used for security monitoring, fraud detection, and platform performance optimization.

3.6 Communications Data

When you contact fb009 Customer Support via live chat, Messenger, Viber, or email, we retain records of those communications including the content of messages, timestamps, and the nature of the inquiry or complaint. These records are used for quality assurance, dispute resolution, and regulatory compliance.

fb009 processes personal data only for specified, legitimate purposes consistent with the principles of the Philippine Data Privacy Act. The following table sets out our processing purposes and the corresponding data categories used for each:

Under the Philippine Data Privacy Act, all processing of personal information must be based on at least one recognized lawful criterion. fb009 relies on the following legal bases for each category of processing:

• Contractual Necessity: Processing required to perform our obligations under the fb009 Terms and Conditions — including account management, game delivery, payment processing, and withdrawal fulfillment — is lawful as necessary for the performance of the contract between you and fb009.
• Legal Obligation: Processing required to comply with our obligations under PAGCOR's licensing framework, the Philippine AMLA, Republic Act No. 10173 (DPA), and any other applicable Philippine statute or regulatory directive.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and communications quality assurance, where these interests are not overridden by the Data Subject's fundamental rights.
• Consent: Where we seek to process personal data for purposes beyond those listed above — such as voluntary participation in market research or receipt of promotional communications — we will obtain your explicit prior consent, which you may withdraw at any time without prejudice to the lawfulness of processing conducted prior to withdrawal.

fb009 does not sell, rent, or trade your personal information to third parties for marketing purposes under any circumstances. We share personal data with third parties only in the following limited circumstances:

6.1 Regulatory and Law Enforcement Authorities

fb009 is obligated to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and any other competent Philippine government authority when required by law, court order, or regulatory directive. Such disclosures are made pursuant to our legal obligations and do not require your separate consent.

6.2 Payment Service Providers

To process your deposits and withdrawals, we transmit necessary transaction data to our contracted payment partners (GCash/G-Xchange Inc., Maya/Voyager Innovations, BPI, BDO, UnionBank, Metrobank, 7-Eleven Cliqq, Coins.ph, and USDT processing networks). These providers receive only the minimum data required to process the specific transaction.

6.3 Game Content Providers

Game studios whose titles are hosted on the fb009 Platform receive anonymized or pseudonymized session identifiers necessary for game delivery and RNG certification purposes. No personally identifying information is transmitted to game providers beyond what is operationally necessary.

6.4 KYC Verification Service Providers

fb009 may use third-party identity verification technology providers to process KYC submissions. Any such provider is bound by a data processing agreement that limits their use of your data to the provision of verification services only and prohibits any secondary use, sale, or disclosure of your KYC data.

Some of fb009's contracted service providers — particularly certain game studios and technology vendors — operate infrastructure located outside of the Republic of the Philippines. Where personal data is transferred outside the Philippines in connection with such services, fb009 ensures that such transfers comply with Section 21 of the Philippine Data Privacy Act and applicable NPC rules on cross-border data transfers.

Specifically, cross-border transfers of personal data are permitted only where: (a) the recipient country has been determined to provide an adequate level of data protection; (b) the recipient has entered into a data transfer agreement incorporating protections substantially equivalent to those required under the DPA; or (c) another recognized transfer mechanism under NPC guidelines applies. Your personal data will not be transferred internationally beyond what is necessary for the legitimate operational purposes described in this Policy.

fb009 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, subject to any longer retention periods required by Philippine law or regulation. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with NPC-approved data disposal standards. Anonymized or aggregated statistical data derived from gameplay or platform analytics may be retained indefinitely, as it no longer constitutes personal information under the DPA.

fb009 implements a multilayered data security framework in compliance with the security standards prescribed by the National Privacy Commission under NPC Advisory No. 2017-01 and subsequent NPC issuances. Our security measures include:

• Transport Encryption: All data transmitted between your device and fb009 servers is encrypted using TLS 1.2 or higher. The presence of a padlock in your browser's address bar confirms active SSL/TLS encryption during Platform use.
• Password Security: Player passwords are stored exclusively as cryptographic hashes using industry-standard one-way hashing algorithms. fb009 does not store plaintext passwords and cannot retrieve your password — only reset it via OTP to your registered Philippine mobile number.
• KYC Document Encryption: Government ID images and biometric selfies submitted for KYC verification are stored in encrypted form at rest, with access restricted to authorized personnel whose roles require it.
• Access Controls: Internal access to personal data systems is governed by role-based access controls, with access logging, multi-factor authentication for administrative accounts, and regular access audits.
• Fraud Detection Systems: Automated systems monitor all account activity in real time for patterns indicative of unauthorized access, fraudulent transactions, or account takeover attempts.
• Penetration Testing: fb009's platform undergoes periodic security assessments by qualified third-party security professionals to identify and remediate vulnerabilities before exploitation.

The fb009 Platform uses cookies and similar browser-based technologies to support Platform functionality, maintain your session state after login, and collect anonymized analytics data about Platform usage. The categories of cookies used by fb009 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your logged-in session, remember your game lobby preferences, and support security features such as CSRF protection. These cookies cannot be disabled without disrupting Platform functionality.
• Analytics Cookies: We use anonymized analytics data to understand how players navigate the Platform — which game categories are most visited, where navigation difficulties occur, and how page load performance affects the player experience. This data is aggregated and does not identify individual players.
• Functional Cookies: These cookies remember your language preference, responsible gaming notification settings, and platform layout choices across sessions.

fb009 does not use third-party advertising cookies or behavioral tracking technologies for the purpose of targeting players with off-platform advertising. Your browser settings allow you to manage or delete cookies; however, disabling strictly necessary cookies may impair Platform functionality including login persistence.

The age of every registered player is verified during the KYC process through submission of a valid Philippine government-issued identification document. This is not an optional step — it is a mandatory precondition to the processing of any withdrawal from an fb009 account.

If fb009 discovers or has reasonable grounds to believe that a registered account belongs to an individual under 21 years of age, we will immediately suspend the account, void any associated winnings, return deposited funds to the originating payment source (net of any bonus credits applied), and report the matter to PAGCOR as required by our licensing obligations. All personal data collected during the registration of such an account will be retained solely for the duration required to complete the above regulatory reporting obligations, after which it will be securely deleted.

If you believe that a minor has created an account on the fb009 Platform using falsified identity documents, please contact the fb009 Data Protection Officer immediately at [email protected].

As a Data Subject under the Philippine Data Privacy Act, you are entitled to the following rights in relation to the personal information fb009 holds about you. To exercise any of these rights, contact the fb009 DPO at [email protected] with the subject line "Data Privacy – Rights Request," along with sufficient identification information to verify your identity as the Account holder.

fb009 will respond to all verified data rights requests within thirty (30) days of receipt. Where a request is complex or numerous, we may extend this period by a further thirty (30) days with written notification of the extension and the reasons for it.

In the event of a personal data breach — defined under the DPA as any accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed by fb009 — we will comply with all applicable NPC notification requirements, including:

• Notifying the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, where the breach is likely to result in a risk to the rights and freedoms of Data Subjects;
• Notifying affected Data Subjects without undue delay where the breach is likely to result in a high risk to their rights and freedoms, including their financial security in connection with their fb009 account;
• Maintaining a register of all personal data breaches, including those that do not require NPC notification, in compliance with NPC Circular 16-03.

Breach notifications to affected players will be communicated via the mobile number registered on the affected account and will include a description of the nature of the breach, the categories and approximate number of records affected, the likely consequences of the breach, and the measures fb009 has taken or proposes to take to address it.

fb009 may update this Privacy Policy from time to time to reflect changes in applicable Philippine law, NPC guidance, PAGCOR regulatory requirements, our business operations, or the privacy practices of our third-party service providers. The "Last Updated" date displayed at the top of this page will be revised to reflect the date of the most recent modification.

Where changes to this Policy are material — defined as changes that significantly alter the way we process your personal data, expand the categories of data collected, or introduce new sharing arrangements with third parties — we will notify you through the mobile number registered on your fb009 account prior to the changes taking effect. For non-material updates (such as typographical corrections, formatting changes, or clarifications that do not alter the substance of the Policy), notice through the Platform is sufficient.

Your continued use of the fb009 Platform following the publication of a revised Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you must cease using the Platform and request account closure through fb009 Customer Support.

All data privacy inquiries, rights requests, breach reports, and formal complaints relating to this Privacy Policy should be directed to the fb009 Data Protection Officer:

• Email (DPO): [email protected] — please include "Data Privacy – DPO" in the subject line. This is a plain text address and is not a clickable link.
• Live Chat: Available 24/7 through the fb009 Platform. For data privacy matters, request to be connected to the Data Protection team.
• Response Time: Acknowledgement within 72 hours; substantive response within 15 business days; complex requests within 30 days.

This Privacy Policy, together with the fb009 Terms and Conditions and all applicable PAGCOR regulatory requirements, constitutes the complete framework governing the collection, use, and protection of personal data on the fb009 Platform. In the event of any inconsistency between this Policy and applicable Philippine law or NPC regulation, the applicable law or regulation shall prevail.