bmy99 Privacy Policy
Your personal data belongs to you. This Privacy Policy explains exactly what information bmy99 collects from Filipino players, why we collect it, how we use and protect it, and what rights you have over your own data at every stage of your account's lifecycle.
How bmy99 Approaches Privacy
These six principles guide every data decision bmy99 makes. They do not replace the full policy text below — all players are required to read the complete Privacy Policy.
Purpose Limitation
bmy99 collects only the personal data that is necessary for a clearly defined purpose — account management, identity verification, payment processing, legal compliance, and responsible gaming obligations. We do not collect data speculatively or for purposes we cannot justify to you in plain language.
Security First
All data stored and transmitted on bmy99 is protected by 256-bit SSL encryption — the same standard used by BPI and BDO for online banking. Access to personal data is restricted to authorised personnel only, and all access events are logged and audited on a rolling basis.
Your Rights, Always
Filipino players on bmy99 retain clear rights over their personal data at all times: the right to access it, correct it, request its deletion, object to its processing, and receive a portable copy. We make exercising these rights straightforward — no bureaucratic obstacles, no unreasonable delays.
No Data Selling
bmy99 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Data sharing is limited strictly to service providers who process data on our behalf under binding confidentiality agreements, and to regulatory authorities where legally required.
Minimum Retention
bmy99 retains personal data only for as long as it is needed for the purpose it was collected, or as required by Philippine law. When data is no longer needed and no legal retention obligation applies, it is securely deleted or anonymised so it can no longer be linked back to you.
Transparent Communication
This Privacy Policy is written in plain, straightforward English that Filipino players can actually understand. We update it whenever our data practices change, and we notify registered Players of material changes before they take effect. No hidden clauses, no buried conditions.
Important Notice: This Privacy Policy ("Policy") describes how bmy99 ("Platform", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of registered players and website visitors ("you", "Player", "User"). By registering an account on bmy99 or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree, please discontinue use of the Platform immediately.
1 Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
- "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly — including but not limited to a name, identification number, mobile number, email address, location data, or online identifier.
- "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transfer, or deletion.
- "Data Controller" means bmy99, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
- "Data Processor" means any third party that processes Personal Data on behalf of bmy99 under a binding data processing agreement.
- "KYC" means Know Your Customer — the mandatory identity verification process that bmy99 uses to confirm the identity, age, and payment method ownership of registered Players.
- "Cookies" means small text files placed on your device by the Platform to enable functionality, remember preferences, and collect usage analytics.
- "Sensitive Personal Information" means categories of data that warrant heightened protection — including government-issued ID numbers, financial account details, and health-related information provided in connection with responsible gaming requests.
2 Scope of This Policy
This Policy applies to all Personal Data collected by bmy99 from individuals who:
- Register or apply to register an account on the bmy99 Platform at bmy99.net;
- Visit any page of the bmy99 website without necessarily registering;
- Contact bmy99 customer support via live chat or email;
- Participate in any bmy99 promotion, survey, or feedback initiative;
- Interact with the Platform in any other capacity that results in the collection of personal information.
This Policy does not apply to third-party websites, payment providers, or game studios that maintain their own privacy practices. When you interact with a third-party service accessible through bmy99 — such as a GCash payment gateway — that service's own privacy policy governs the data it collects independently.
This Policy is intended to comply with the Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations as administered by the National Privacy Commission (NPC) of the Philippines.
3 Personal Data We Collect
bmy99 collects the following categories of Personal Data, depending on the nature of your interaction with the Platform:
| Category | Examples | Collected At |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number and type | Registration and KYC verification |
| Contact Data | Email address, mobile number, residential address, city (e.g. Manila, Cebu, Davao) | Registration and profile updates |
| Financial Data | GCash number, Maya account, BPI/BDO account name, transaction reference numbers | Deposit and withdrawal processing |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps | Automatically on each visit |
| Usage Data | Pages visited, games played, wager amounts, session duration, click patterns | Automatically during active sessions |
| Communications Data | Live chat transcripts, support email content, survey responses | When you contact support |
| Responsible Gaming Data | Self-exclusion requests, deposit/loss limit settings, cooling-off period activations | When you use responsible gaming tools |
bmy99 does not deliberately collect Sensitive Personal Information beyond what is strictly necessary for KYC compliance and responsible gaming obligations. Where the collection of a government-issued ID number is required for verification purposes, this data is handled with heightened security controls and is not used for any purpose beyond identity confirmation.
4 How We Collect Your Data
bmy99 collects Personal Data through the following channels and methods:
- Direct collection: Information you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal, requesting a bonus, contacting customer support, or participating in a promotion.
- Automated collection: Technical and usage data collected automatically through server logs, cookies, and similar tracking technologies each time you access the Platform. See Section 8 (Cookies and Tracking) for details.
- Third-party collection: Identity and address verification data received from licensed KYC service providers when we verify your identity against Philippine government databases.
- Payment provider data: Transaction confirmation data, payment reference numbers, and account name information shared by GCash, Maya, BPI, BDO, UnionBank, Metrobank, Coins.ph, 7-Eleven Cliqq, and USDT TRC20 processors in connection with your deposit and withdrawal requests.
- Fraud and AML screening: Risk-related data received from third-party fraud prevention and anti-money laundering screening services, used exclusively for compliance and security purposes.
5 Legal Basis for Processing
bmy99 processes your Personal Data on one or more of the following legal grounds, consistent with the Data Privacy Act of 2012:
- Contractual necessity: Processing required to perform our obligations under the Player Account Agreement — including account creation, game access, payment processing, and customer support.
- Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including anti-money laundering (AML) requirements, age verification obligations, and responses to lawful requests from regulatory authorities such as PAGCOR.
- Legitimate interests: Processing carried out for bmy99's legitimate business interests, including fraud detection, security monitoring, platform improvement, and responsible gaming programme administration, provided these interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing based on your freely given, specific, and informed consent — in particular for the receipt of promotional communications. You may withdraw this consent at any time through your account settings or by contacting support, without affecting the lawfulness of prior processing.
6 How We Use Your Personal Data
bmy99 uses the Personal Data it collects for the following clearly defined purposes:
- To create and manage your bmy99 account, authenticate your identity at login, and maintain accurate account records.
- To verify your age and identity through KYC procedures to ensure compliance with the 21+ age restriction applicable to casino-style gaming in the Philippines.
- To process deposits and withdrawals in Philippine Peso (PHP) through your chosen payment channel and to resolve any transaction disputes.
- To administer bonuses and promotions and verify that eligibility conditions have been met before crediting promotional funds.
- To provide customer support through live chat and email, and to maintain records of your support interactions for quality assurance purposes.
- To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other prohibited conduct as defined in the Terms and Conditions.
- To monitor gameplay patterns for responsible gaming purposes, including triggering interventions where usage patterns suggest potential gambling harm.
- To send transactional communications such as deposit confirmations, withdrawal notifications, password reset emails, and important account alerts.
- To send promotional communications where you have given explicit consent to receive them. You may opt out at any time.
- To analyse aggregated, anonymised usage data to improve the bmy99 Platform, optimise game offerings, and enhance the overall player experience.
- To comply with applicable Philippine laws, respond to lawful regulatory requests, and enforce the bmy99 Terms and Conditions.
No Automated Decision-Making: bmy99 does not make any decisions that significantly affect your legal rights or account status based solely on automated processing without human review. Where automated systems flag an account for investigation (e.g., fraud or AML screening), a qualified bmy99 compliance team member reviews the case before any consequential action is taken.
7 Data Sharing and Disclosure
bmy99 shares Personal Data only in the limited circumstances described below. We do not sell your data to third parties under any circumstances.
- KYC and identity verification providers: Licensed third-party identity verification services that check your details against Philippine government records to confirm your identity and age. These providers are contractually bound to use your data solely for verification purposes on our behalf.
- Payment processors: GCash, Maya, BPI, BDO, UnionBank, Metrobank, Coins.ph, 7-Eleven Cliqq, and USDT TRC20 processors receive only the data necessary to process your specific transaction. Each processor operates under its own regulatory framework and privacy obligations.
- Fraud prevention and AML screening services: Specialised compliance vendors that screen transactions and account activity against watchlists and risk databases to fulfil bmy99's anti-money laundering obligations.
- Game providers and software licensors: Where technically necessary, limited technical identifiers (not full personal profiles) may be shared with game studios such as JILI, Pragmatic Play, or PG Soft to authenticate sessions and resolve game disputes.
- Regulatory and law enforcement authorities: bmy99 will disclose Personal Data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), or other competent Philippine authorities when required by law, court order, or lawful regulatory directive.
- Business transfers: In the event of a merger, acquisition, or sale of bmy99's business or assets, Player data may be transferred to the acquiring entity, subject to equivalent privacy protections and prior notification to affected Players.
All third-party Data Processors engaged by bmy99 are subject to binding data processing agreements that prohibit them from using Player data for any purpose other than the specific service they provide to bmy99.
8 Cookies and Tracking Technologies
bmy99 uses cookies and similar tracking technologies to enable Platform functionality, remember your preferences, and collect aggregated analytics data. The categories of cookies used on bmy99 are as follows:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, authentication, security tokens. Required for the Platform to function correctly. | No — essential for operation |
| Functional | Language preferences, remembered login state, display settings. | Yes — disabling may reduce functionality |
| Analytics | Aggregated, anonymised data on page views, game sessions, and navigation patterns used to improve the Platform. | Yes — via browser settings |
| Fraud Prevention | Device fingerprinting and session risk scoring to detect suspicious activity and protect accounts. | No — required for security |
You can manage or disable non-essential cookies through your browser's settings. Please note that disabling certain cookies may affect the performance or availability of some bmy99 features. bmy99 does not use third-party advertising cookies or serve targeted advertising based on your browsing behaviour outside the Platform.
9 Data Retention
bmy99 retains Personal Data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply as a general guide:
- Account data and KYC documents: Retained for the lifetime of your active account plus a minimum of five (5) years after account closure, in accordance with AML record-keeping requirements under Philippine law.
- Transaction records: Retained for a minimum of five (5) years from the date of each transaction to satisfy financial record-keeping and AML compliance obligations.
- Customer support communications: Retained for two (2) years from the date of the last interaction, after which records are securely deleted unless required for an ongoing dispute or legal matter.
- Responsible gaming records: Retained for the duration of any active self-exclusion or restriction period, plus three (3) years after its expiry, to ensure integrity of responsible gaming interventions.
- Website analytics data: Aggregated and anonymised after 13 months. Anonymised data may be retained indefinitely as it can no longer be linked to an individual.
When the applicable retention period expires and no legal obligation requires further retention, bmy99 will securely delete or irreversibly anonymise the relevant Personal Data. Deletion requests submitted by Players will be assessed against applicable legal retention obligations before any data is removed.
10 Data Security
bmy99 implements a multi-layered technical and organisational security framework to protect Personal Data against unauthorised access, accidental loss, alteration, or disclosure. Key security measures in place include:
- Encryption in transit: All data transmitted between your device and the bmy99 Platform is encrypted using TLS 1.2 or higher, providing 256-bit encryption protection equivalent to the standard used by major Philippine banks.
- Encryption at rest: Personal Data and sensitive account records stored on bmy99 servers are encrypted at rest using AES-256 encryption.
- Access controls: Access to Personal Data is restricted on a strict need-to-know basis. All internal access events are logged, and access rights are reviewed regularly.
- Two-factor authentication: bmy99 supports and strongly recommends 2FA for all Player accounts to prevent unauthorised access even in the event of password compromise.
- Vulnerability management: The bmy99 platform undergoes regular security assessments and penetration testing by qualified security professionals to identify and remediate vulnerabilities.
- Incident response: bmy99 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission and affected Players within the timeframes required by Philippine law.
While bmy99 takes all reasonable and commercially practicable measures to protect your data, no internet-based system can guarantee absolute security. You also bear responsibility for securing your own account credentials — see our Terms and Conditions for your account security obligations.
11 Your Data Rights
Under the Data Privacy Act of 2012 (RA 10173) and applicable Philippine data protection regulations, you have the following rights with respect to your Personal Data held by bmy99:
Right to Access
Request a copy of the Personal Data bmy99 holds about you, including the categories of data, purposes of processing, and any third parties it has been shared with.
Right to Rectification
Request the correction of any inaccurate or incomplete Personal Data we hold about you. Most contact details can be updated directly in your account settings.
Right to Erasure
Request the deletion of your Personal Data where it is no longer necessary for the purpose it was collected and where no legal retention obligation applies.
Right to Object
Object to the processing of your Personal Data based on legitimate interests — including opting out of promotional communications — at any time without penalty.
Right to Portability
Request a copy of the Personal Data you have provided to bmy99 in a structured, commonly used, machine-readable format for transfer to another service.
Right to Complain
Lodge a complaint with bmy99's Data Protection Officer or, if unsatisfied with our response, escalate to the National Privacy Commission of the Philippines.
To exercise any of the above rights, please contact our Data Protection Officer via email at [email protected] with the subject line "Data Rights Request" and provide your registered account username and a description of your request. bmy99 will acknowledge your request within 5 business days and provide a substantive response within 30 days, or advise you of any lawful reason for an extension of that timeframe.
Please note that certain data rights may be limited where bmy99 is required to retain data by law — for example, AML transaction records — or where deletion would prevent us from honouring a self-exclusion commitment. We will always explain the specific reason if we are unable to fully fulfil a data rights request.
12 Children's Privacy and Underage Access
The bmy99 Platform is strictly intended for individuals who are 21 years of age or older, consistent with Philippine regulations governing casino-style online gaming. bmy99 does not knowingly collect Personal Data from individuals under the age of 21.
All new account registrations are subject to age verification as part of the KYC process. Where bmy99 has reasonable grounds to believe that a registered Player is under 21 years of age, the account will be immediately suspended pending investigation. If the underage status is confirmed:
- The account will be permanently closed.
- All associated Personal Data collected will be deleted, except where retention is required for regulatory reporting purposes.
- Any deposits made will be returned in accordance with applicable regulations.
- The matter may be reported to relevant Philippine authorities.
If you are a parent or guardian and believe that a minor in your household has registered an account on bmy99, please contact our support team immediately at [email protected]. We will investigate and act on your report within 24 hours.
Age Restriction: 21+ bmy99 enforces a strict minimum age requirement of 21 years for all real-money gaming activities. This is non-negotiable and is backed by mandatory ID verification. The protection of minors is one of bmy99's highest priorities as a responsible gaming operator serving Filipino players.
13 Cross-Border Data Transfers
bmy99 primarily stores and processes Player data on servers located within Southeast Asia. In limited circumstances — such as when engaging with global KYC verification providers, fraud screening platforms, or game studio technical integrations — Personal Data may be transferred to or accessible from systems located outside the Philippines.
Where any such cross-border transfer occurs, bmy99 ensures that appropriate safeguards are in place to provide a level of data protection equivalent to that afforded under Philippine law, including:
- Contractual data processing agreements that incorporate the data protection standards required by RA 10173;
- Transfer only to jurisdictions or recipients that bmy99 has assessed as providing adequate data protection;
- Minimisation of data transferred to only what is strictly necessary for the specific processing purpose.
You may request further details about the specific safeguards in place for any cross-border transfer by contacting our Data Protection Officer at the address provided in Section 15.
14 Updates to This Privacy Policy
bmy99 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory guidance, or Platform services. The date at the top of this Policy indicates when it was last reviewed.
Where changes to this Policy are material — meaning they meaningfully alter your rights or the way we handle your Personal Data — bmy99 will provide advance notice to registered Players via email or an on-Platform notification at least fourteen (14) days before the updated Policy takes effect.
Your continued use of the bmy99 Platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with a material change, you may close your account and request deletion of your Personal Data by contacting our support team before the change takes effect.
We encourage all Players to review this Policy periodically to stay informed about how bmy99 protects your personal information.
15 Contact Our Data Protection Officer
If you have any questions, concerns, or requests relating to this Privacy Policy or bmy99's data practices, please contact our Data Protection Officer through the following channels:
- Email: [email protected] — use the subject line "Privacy / Data Rights" to ensure your message reaches the correct team. Average response time: 4–8 hours.
- Live Chat: Available 24 hours a day, 7 days a week from any page on the bmy99 Platform. Average first response time: 3–5 minutes. Please state that your query relates to a privacy or data rights matter so we can route it appropriately.
When submitting a privacy-related enquiry, please include your registered account username, a clear description of your request or concern, and — for data rights requests — a copy of a valid government-issued ID to allow us to verify your identity before disclosing or acting on any Personal Data.
If you are not satisfied with bmy99's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which serves as the independent supervisory authority for data protection matters under RA 10173.
This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all previous versions of the bmy99 Privacy Policy. bmy99 reserves all rights not expressly granted herein.
Your Data Is Safe With bmy99
Now that you understand how we protect your information, explore the full bmy99 gaming experience — JILI slots, live casino, bingo, and more — all secured with bank-grade encryption and Philippine Peso payments.