bbgl Privacy Policy

🏢 1. Data Controller

bbgl ("we," "us," or "our") is the data controller responsible for the personal information collected through the bbgl online gaming platform accessible at bbgl.app. As a PAGCOR-regulated operator, bbgl is bound by both PAGCOR's data governance requirements and the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations issued by the National Privacy Commission (NPC) of the Philippines.

By registering an account on bbgl or by continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection, processing, and storage of your personal data as described herein.

📋 2. Personal Data We Collect

2.1 Data You Provide Directly

When you register, verify, or interact with your bbgl account, we collect the following categories of personal data:

2.2 Data Collected Automatically

When you access the bbgl platform, we automatically collect certain technical data to ensure platform security and performance:

• IP address and approximate geographic location (province/city level);
• Device type, operating system, and browser version;
• Pages visited, features used, and time spent on the platform;
• Session identifiers and authentication tokens;
• Referral source (how you arrived at bbgl.app).

This technical data is collected automatically via cookies and server logs. It is used for security monitoring, fraud detection, and platform optimization — not for building advertising profiles.

🎯 3. Purpose & Legal Basis for Processing

bbgl processes your personal data only for clearly defined, lawful purposes. The table below sets out the primary purposes for which we process your data and the legal basis under RA 10173 that applies to each:

bbgl will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or being required to do so by applicable Philippine law.

🤝 4. Sharing Your Personal Data

4.1 Who We Share With

bbgl does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your data only in the following circumstances:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, and InstaPay partners receive transaction data necessary to process your deposits and withdrawals;
• KYC and identity verification providers: Third-party verification services that assist us in confirming your identity in compliance with PAGCOR's KYC requirements;
• Game software providers: Third-party game studios whose games are hosted on the bbgl platform may receive anonymized session data for game performance purposes;
• PAGCOR and Philippine regulatory authorities: bbgl is required by law to report certain transaction data, suspicious activity, and player records to PAGCOR and, where applicable, the Anti-Money Laundering Council (AMLC);
• IT and security service providers: Cloud hosting, cybersecurity, and data analytics vendors who process data on our behalf under strict data processing agreements.

4.2 Data Processing Agreements

All third-party service providers who handle personal data on behalf of bbgl are required to sign data processing agreements that obligate them to process data only according to bbgl's instructions, maintain appropriate security measures, and comply with the Data Privacy Act of 2012 and its implementing rules.

🗓️ 5. Data Retention

bbgl retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting obligations. The following minimum retention periods apply:

• Account and identity data: Retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR's record-keeping rules and the Anti-Money Laundering Act;
• Transaction records: Retained for a minimum of five (5) years from the transaction date in accordance with AML compliance requirements;
• KYC documents: Retained for five (5) years from the date of verification or account closure, whichever is later;
• Support communications: Retained for two (2) years from the date of last contact;
• Platform analytics data: Retained in anonymized or aggregated form indefinitely for product development purposes.

When personal data is no longer required and no legal obligation mandates its further retention, bbgl will securely delete or anonymize it in accordance with our internal data disposal procedures.

🔐 6. Security Measures

bbgl implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption on all data transmissions between your device and our servers;
• Encrypted storage of all sensitive personal data and financial records at rest;
• Role-based access controls ensuring that bbgl staff can access personal data only to the extent required for their specific job functions;
• Multi-factor authentication for all bbgl administrative system access;
• Regular penetration testing and security audits conducted by independent cybersecurity professionals;
• 24/7 automated intrusion detection systems monitoring for suspicious activity;
• Staff training on data privacy and security best practices, conducted annually.

While bbgl takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bbgl will notify affected players and the National Privacy Commission within the timeframes required by RA 10173.

🍪 7. Cookies & Tracking Technologies

7.1 Types of Cookies We Use

bbgl uses the following categories of cookies when you access our platform:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. You cannot opt out of these while using bbgl;
• Functional cookies: Remember your preferences such as language settings, preferred payment method display, and responsible gaming limit settings;
• Analytical cookies: Help us understand how players navigate the platform so we can improve page load times and feature discovery. These are processed in aggregated, anonymized form.

7.2 What We Do Not Use

bbgl does not deploy third-party advertising cookies, retargeting pixels, social media tracking scripts, or any tracking technology that shares your individual browsing behavior with external advertising networks.

7.3 Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies may prevent you from logging in or using core platform features. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

📬 8. Marketing Communications

bbgl sends promotional communications — including bonus offers, free spin alerts, tournament notifications, and platform updates — only to players who have explicitly opted in to receive them. Your consent to receive marketing communications is obtained separately during the registration process and is entirely optional.

You may withdraw your marketing consent at any time by:

• Updating your notification preferences in your bbgl account settings;
• Using the unsubscribe link included in any marketing email from bbgl;
• Contacting our customer support team via live chat or email.

Withdrawal of marketing consent does not affect your receipt of transactional and account-related communications, such as deposit confirmations, withdrawal status updates, KYC verification requests, and security alerts. These operational communications are sent regardless of your marketing preferences as they are necessary for the proper functioning of your account.

⚖️ 9. Your Data Subject Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights regarding your personal data held by bbgl:

9.1 How to Exercise Your Rights

To exercise any of the above rights, please submit a written request to our Data Privacy Officer at [email protected] with the subject line "Data Privacy Request." Please include your full name, registered mobile number, the specific right you wish to exercise, and sufficient detail to allow us to locate and process your request.

bbgl will respond to verified data subject requests within fifteen (15) working days from receipt of a complete request, as prescribed by the NPC's guidelines. In complex cases, this period may be extended by a further fifteen (15) working days, and we will notify you of such extension and the reason for it.

🔞 10. Minors & Age Restriction

The bbgl platform is strictly intended for individuals who are 21 years of age or older, in compliance with PAGCOR's minimum age requirements for online gambling in the Philippines. bbgl does not knowingly collect or process personal data from individuals under the age of 21.

If we discover that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the collected personal data to the extent not required to be retained for legal or regulatory compliance purposes, and report the matter to PAGCOR as required. If you are a parent or guardian and believe that a minor in your care has registered on bbgl, please contact our support team immediately.

🌏 11. Cross-Border Data Transfers

Some of the third-party service providers that bbgl uses — including cloud infrastructure providers and game software studios — may be located outside the Philippines and may process your personal data in other countries. Where such transfers occur, bbgl ensures that appropriate safeguards are in place, including:

• Data processing agreements that incorporate the NPC's standard contractual clauses for cross-border data transfers;
• Transfers only to countries or organizations that provide an adequate level of data protection as recognized by the National Privacy Commission;
• Your explicit consent where required for transfers to countries without an NPC adequacy determination.

bbgl's primary data infrastructure is hosted on servers located within the Asia-Pacific region. Where data is transferred outside this region, we apply heightened due diligence to the receiving party's data protection practices.

🔗 12. Third-Party Links

The bbgl platform may contain links to third-party websites, including payment provider portals, game studio websites, or regulatory body pages. bbgl does not control these third-party websites and is not responsible for their privacy practices or content. We encourage you to read the privacy policies of any third-party websites you visit through links on the bbgl platform.

This Privacy Policy applies solely to data processed by bbgl through the bbgl.app platform and its associated mobile applications. It does not apply to any data you separately provide to third-party services, even where those services are accessed through the bbgl platform.

📝 13. Changes to This Privacy Policy

bbgl reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, Philippine regulatory requirements, or NPC guidance. When material changes are made, bbgl will notify registered players by email or in-platform notification at least seven (7) days before the revised policy takes effect.

The "Effective Date" at the top of this page indicates when the current version came into force. Continued use of the bbgl platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree to the revised policy, you may request account closure as described in our Terms and Conditions.

📬 14. Contact Us & Filing Complaints

14.1 Contact bbgl's Data Privacy Officer

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by bbgl, please contact our Data Privacy Officer:

14.2 Filing a Complaint with the NPC

If you believe that bbgl has not adequately addressed your data privacy concern, or if you believe your rights under RA 10173 have been violated, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for administering and enforcing the Data Privacy Act of 2012 and may be reached through their official government website and offices in Quezon City, Metro Manila.

bbgl encourages you to contact us first so that we have the opportunity to resolve your concern directly before a formal NPC complaint is filed.