Privacy Policy

01 Introduction

fb008 ("we," "us," "our," or "the Platform") operates an online gaming platform accessible at https://fb008.net, offering a range of games including Dragon Fortune, Treasures of Aztec, Bingo, Slide, Aviator, MG Live, and Super Fruit Machine, primarily to players based in the Philippines.

We understand that your personal data is important to you, and we take our responsibility as a data controller seriously. This Privacy Policy sets out in clear, plain language what personal data we collect from you, why we collect it, how we use it, who we share it with, how long we keep it, and what rights you have in relation to it.

This policy applies to all personal data collected through the fb008 website, mobile application, customer support channels, and any other interaction you have with the fb008 platform. It should be read alongside our Terms & Conditions, which govern your use of the platform.

02 Data Controller

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, fb008 is the data controller responsible for the personal data collected through the fb008 platform. As data controller, fb008 determines the purposes and means of processing your personal data.

fb008 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with applicable data privacy laws and handling data subject requests. Contact details for the DPO are provided in Section 16 of this policy.

Where fb008 engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC verification providers, and cloud hosting services), those providers act as data processors and are bound by data processing agreements that require them to process personal data only on fb008's instructions and in accordance with applicable law.

03 Personal Data We Collect

fb008 collects the following categories of personal data from players and platform visitors:

fb008 does not intentionally collect sensitive personal information as defined under RA 10173 (such as health data, political opinions, or religious beliefs) unless specifically required for regulatory compliance purposes, in which case you will be notified and your explicit consent obtained.

04 How We Collect Your Data

fb008 collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access and use the fb008 platform, including through cookies, web beacons, log files, and similar tracking technologies. See Section 10 for more details on cookies.
• Third-Party Sources: Identity and fraud-check data received from licensed KYC verification providers, payment processors, and fraud prevention services engaged by fb008 to verify player identities and prevent financial crime.
• Publicly Available Sources: In limited circumstances, fb008 may supplement player data with information from publicly available sources, such as public records or regulatory databases, for the purposes of fraud prevention and regulatory compliance.

05 How We Use Your Personal Data

fb008 uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and manage your fb008 player account, including processing your registration, verifying your identity, and managing your account settings and preferences.
• Service Delivery: To provide you with access to the fb008 platform and its games, process your deposits and withdrawals, and deliver the services you have requested.
• Identity Verification (KYC): To verify your identity and age (21+) in compliance with applicable Philippine regulations and to prevent underage gambling and fraud.
• Payment Processing: To process your financial transactions, including deposits via GCash, PayMaya, BPI, BDO, and Metrobank, and to process withdrawal requests to your verified payment accounts.
• Regulatory Compliance: To comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, responsible gaming requirements, and reporting obligations to relevant regulatory authorities.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other illegal or prohibited conduct on the fb008 platform.
• Customer Support: To respond to your inquiries, resolve complaints, and provide technical assistance.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the functionality, performance, and user experience of the fb008 platform.
• Responsible Gaming: To monitor gaming behavior, identify potential problem gambling indicators, and administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may opt out at any time.

06 Legal Basis for Processing

Under the Data Privacy Act of 2012, fb008 processes your personal data on the following legal bases:

• Contractual Necessity: Processing necessary for the performance of the contract between you and fb008 (i.e., the Terms & Conditions), including account management, payment processing, and service delivery.
• Legal Obligation: Processing necessary for fb008 to comply with its legal and regulatory obligations under Philippine law, including KYC/AML requirements and responsible gaming regulations.
• Legitimate Interests: Processing necessary for fb008's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including for marketing communications and the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

07 Data Sharing & Disclosure

fb008 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: Licensed payment service providers (including GCash, PayMaya, and partner banks such as BPI, BDO, and Metrobank) for the purpose of processing your deposits and withdrawals.
• KYC and Identity Verification Providers: Licensed third-party identity verification and fraud prevention services engaged to verify player identities and ages in compliance with Philippine regulations.
• Cloud and Technology Service Providers: Hosting, infrastructure, and technology service providers who process data on fb008's behalf under binding data processing agreements.
• Customer Support Platforms: Third-party customer support software providers used to manage and respond to player inquiries and complaints.
• Regulatory Authorities: Philippine government agencies and regulatory bodies, including law enforcement authorities, where fb008 is required by law to disclose personal data, or where disclosure is necessary to protect the rights, property, or safety of fb008, its players, or the public.
• Professional Advisors: Legal, accounting, and auditing professionals engaged by fb008, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of fb008's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

All third-party service providers engaged by fb008 are required to implement appropriate technical and organizational security measures and to process personal data only in accordance with fb008's instructions and applicable Philippine data privacy law.

08 International Data Transfers

Some of fb008's third-party service providers may be located outside the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection to that afforded under Philippine law, fb008 will ensure that appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by the National Privacy Commission of the Philippines.
• Binding corporate rules where the recipient is part of a corporate group with approved intra-group data transfer policies.
• Your explicit consent to the transfer, where required.

By using the fb008 platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines. fb008 will always take steps to ensure that any such transfers are carried out in compliance with applicable data privacy law and that your data remains protected to the standard described in this policy.

09 Data Retention

fb008 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following general retention periods apply:

• Account Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements under Philippine law.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable AML and financial record-keeping regulations.
• KYC Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer retention period is required for the resolution of a dispute or legal claim.
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, as evidence of the consent given.
• Technical and Usage Data: Retained for up to two (2) years from collection, unless required for longer for fraud investigation or legal proceedings.

Upon expiry of the applicable retention period, fb008 will securely delete or anonymize your personal data in accordance with its data disposal procedures.

10 Cookies & Tracking Technologies

fb008 uses cookies and similar tracking technologies (such as web beacons and local storage) on its website and mobile application. Cookies are small text files placed on your device that help us recognize you, remember your preferences, and improve your experience on the platform.

fb008 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the operation of the fb008 platform. These cookies enable core functions such as account login, session management, and security features. They cannot be disabled without affecting platform functionality.
• Performance and Analytics Cookies: Used to collect anonymized information about how players use the fb008 platform, including which pages are visited most frequently and how players navigate between pages. This data helps us improve platform performance and user experience.
• Functional Cookies: Used to remember your preferences and settings, such as your preferred language, display settings, and game preferences, so that you do not need to re-enter them on each visit.
• Marketing and Targeting Cookies: Used to deliver relevant promotional content and offers to you based on your interests and activity on the fb008 platform. These cookies are only placed with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the fb008 platform. For strictly necessary cookies, no consent is required as they are essential for platform operation.

11 Your Data Subject Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by fb008:

• Right to Be Informed: The right to be informed about how your personal data is collected, used, stored, and shared. This Privacy Policy fulfils fb008's obligation to inform you.
• Right of Access: The right to request a copy of the personal data fb008 holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data fb008 holds about you. You may also update certain account information directly through your fb008 account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to fb008's legal and regulatory retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on fb008's legitimate interests.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that fb008 has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the above rights, please contact fb008's Data Protection Officer using the contact details provided in Section 16. fb008 will respond to all data subject requests within thirty (30) days of receipt, or within such extended period as permitted by applicable law where the request is complex or numerous.

12 Children's Privacy

The fb008 platform is strictly intended for individuals aged 21 years and above. fb008 does not knowingly collect personal data from individuals under the age of 21. The collection of personal data from minors is strictly prohibited under both fb008's Terms & Conditions and applicable Philippine law.

If fb008 becomes aware that it has inadvertently collected personal data from an individual under the age of 21, it will take immediate steps to delete that data and close the associated account. Any deposits made by a minor will be returned in accordance with applicable law.

If you are a parent or guardian and believe that your child under the age of 21 has registered on the fb008 platform or provided personal data to fb008, please contact our Data Protection Officer immediately using the details in Section 16.

13 Data Security

fb008 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the fb008 platform is encrypted using Transport Layer Security (TLS) protocol. Sensitive stored data, including passwords and financial information, is protected using industry-standard encryption and hashing algorithms.
• Access Controls: Access to personal data within fb008 is restricted to authorized personnel who require access to perform their job functions. All staff with access to personal data are subject to confidentiality obligations.
• Security Monitoring: fb008 employs continuous security monitoring, intrusion detection systems, and regular security audits to identify and address potential vulnerabilities.
• Incident Response: fb008 maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, fb008 will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012.
• Secure Development: fb008's platform is developed and maintained in accordance with secure coding practices and undergoes regular security testing.

While fb008 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the security of your fb008 account credentials and for notifying fb008 immediately if you suspect unauthorized access to your account.

14 Third-Party Links

The fb008 platform may contain references to third-party services, such as payment providers (GCash, PayMaya, BPI, BDO, Metrobank). While fb008 takes care to work only with reputable third-party providers, fb008 is not responsible for the privacy practices or content of any third-party services.

When you interact with a third-party payment provider or other external service in connection with your use of fb008, that provider's own privacy policy will govern the collection and use of your personal data by that provider. fb008 encourages you to review the privacy policies of any third-party services you use in connection with the fb008 platform.

15 Updates to This Privacy Policy

fb008 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made to this policy, fb008 will notify registered players through one or more of the following methods:

• Email notification to the address registered on your fb008 account.
• An in-platform notification displayed upon your next login.
• A prominent notice on the fb008 website or mobile application.

The date of the most recent revision to this Privacy Policy is displayed at the top of this page. Your continued use of the fb008 platform following notification of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the updated policy, you must cease using the platform and contact our Data Protection Officer to close your account.

fb008 recommends that you review this Privacy Policy periodically to stay informed about how we protect your personal data.

16 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or fb008's handling of your personal data, please contact our Data Protection Officer through the following channels:

• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 through the fb008 platform.
• FAQ: Visit our FAQ page for answers to common questions.

fb008 will acknowledge all privacy-related inquiries within 48 hours and provide a substantive response within thirty (30) days of receipt, or within such extended period as permitted by applicable law.

If you are not satisfied with fb008's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.