Data Privacy
Last updated: June 2026 | Effective immediately
This Privacy Policy explains how kbl99 collects, uses, stores, and protects your personal data when you use the kbl99 platform at kbl99.org. kbl99 is committed to safeguarding your privacy in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and the requirements of PAGCOR's licensing framework.
All personal and financial data transmitted to and from kbl99 is protected by 256-bit SSL encryption — the same standard used by Philippine banks like BPI and BDO.
kbl99 does not sell, rent, or trade your personal information to third parties for marketing purposes. Your data is used only for the purposes described in this policy.
kbl99 operates in full compliance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012, and is registered with the National Privacy Commission where required.
As a data subject under Philippine law, you have the right to access, correct, erase, and object to the processing of your personal data held by kbl99.
kbl99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by PAGCOR regulations and Philippine law.
In the unlikely event of a data breach affecting your personal information, kbl99 will notify affected players and the National Privacy Commission within 72 hours of discovery.
The data controller responsible for personal data processed in connection with the kbl99 platform is the entity operating kbl99.org under PAGCOR license (the "Company," "kbl99," "we," "us," or "our"). By registering for or using the kbl99 Platform, you acknowledge that kbl99 is the data controller of your personal information and that processing occurs in accordance with this Privacy Policy and applicable Philippine law.
For the avoidance of doubt, kbl99 acts as a data controller in respect of all personal data you provide directly to kbl99. Where kbl99 engages third-party game providers, payment processors, or other service providers, those parties act as data processors on kbl99's instructions and are bound by data processing agreements consistent with this Policy.
kbl99 collects the following categories of personal data:
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government ID number | Yes (KYC) |
| Contact Data | Email address, mobile number, residential address | Yes |
| Financial Data | GCash number, BPI/BDO account details, transaction history, deposit and withdrawal records | Yes |
| Account Data | Username, password hash, account preferences, bonus history, VIP tier | Yes |
| Gaming Data | Game history, betting patterns, session duration, wagering amounts | Automatic |
| Technical Data | IP address, device type, browser type, operating system, login timestamps | Automatic |
| Communications Data | Records of live chat conversations, support emails, complaint records | As applicable |
| Responsible Gaming Data | Self-exclusion status, deposit limits set, cooling-off periods | As applicable |
kbl99 does not intentionally collect sensitive personal information (as defined under the Philippine Data Privacy Act) beyond what is strictly required for identity verification and PAGCOR compliance. Where sensitive information must be processed — such as a government-issued ID containing your birth date or photograph — it is handled with additional safeguards consistent with RA 10173.
kbl99 collects personal data through the following channels:
kbl99 processes your personal data for the following purposes:
Under the Philippine Data Privacy Act, kbl99 processes your personal data on the following legal bases:
kbl99 does not sell, rent, or otherwise commercially exploit your personal data. kbl99 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to confidentiality obligations:
Some of kbl99's third-party service providers — including game studios and cloud infrastructure providers — may be located outside the Philippines. Where personal data is transferred internationally, kbl99 ensures that appropriate safeguards are in place consistent with the requirements of the Philippine Data Privacy Act, including contractual clauses requiring the receiving party to protect your data to a standard equivalent to Philippine law.
kbl99 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate protective measures.
kbl99 retains your personal data for the following periods, or longer if required by applicable law:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual.
kbl99 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit kbl99.org. kbl99 uses the following types of cookies:
You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent the kbl99 Platform from functioning correctly.
Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal data held by kbl99:
To exercise any of the above rights, please contact kbl99's Data Protection Officer using the details in Section 14. kbl99 will respond to all data subject requests within thirty (30) days of receipt, consistent with the requirements of RA 10173.
If kbl99 discovers that personal data has been collected from a person under 21 years of age, the account will be immediately suspended, all funds will be held pending investigation, and the data will be deleted in accordance with PAGCOR requirements. If you believe that a minor has registered on kbl99, please contact us immediately via the details in Section 14.
kbl99 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
While kbl99 takes all reasonable precautions, no internet transmission is completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, kbl99 will notify you and the National Privacy Commission without undue delay and within 72 hours of becoming aware of the breach.
kbl99 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, or kbl99's data processing practices. Material changes will be communicated to registered players via email and/or a prominent notice on the kbl99 Platform at least seven (7) days before the change takes effect. The date of the most recent revision is shown at the top of this Policy. Your continued use of the kbl99 Platform after the effective date of any amendment constitutes your acceptance of the updated Policy.
If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or wish to lodge a complaint about kbl99's data processing practices, please contact kbl99's Data Protection Officer using the following details:
You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you are unsatisfied with kbl99's handling of your personal data. Information about the NPC and its complaint procedures is available on the NPC's official website.
We've built kbl99 to handle Filipino players' data with the same care we put into the gaming experience — securely, transparently, and in full compliance with Philippine law.
21+ only · PAGCOR regulated · RA 10173 compliant