kbl99 is committed to protecting the personal data of every Filipino player on our platform. This Policy explains what we collect, how we use it, and the rights you hold over your own information.
Last Updated: January 2026These highlights summarize our key privacy practices. They do not replace the full Policy below, which all kbl99 players should read in its entirety.
kbl99 processes personal data in compliance with Republic Act No. 10173, the Data Privacy Act of 2012, and the regulations issued by the National Privacy Commission (NPC).
All personal data held by kbl99 is stored using industry-standard encryption. Passwords are never stored in plain text. Access to player data within our systems is restricted on a need-to-know basis.
kbl99 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Data sharing with third parties occurs only where required for platform operations or by law.
Filipino players have meaningful rights over their personal data under the DPA, including the right to access, correct, delete, and object to processing. kbl99 provides clear channels to exercise every one of these rights.
kbl99 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Retention schedules are published in this Policy.
In the event of a personal data breach that poses a real risk to affected players, kbl99 will notify the National Privacy Commission and affected individuals within the timeframes prescribed by the DPA and its implementing rules.
This Privacy Policy ("Policy") describes how kbl99 ("kbl99," "we," "us," "our") collects, uses, stores, shares, and protects the personal data of individuals ("Players," "Users," "you") who access or use the kbl99 online gaming platform available at kbl99.net and any associated browser-based interfaces (the "Platform").
This Policy applies to all personal data processed by kbl99 in connection with the registration and operation of kbl99 Player Accounts, the provision of gaming services, and all communications between kbl99 and its players. It applies regardless of whether you access the Platform from Metro Manila, Cebu, Davao, or any other location in the Philippines.
This Policy should be read alongside kbl99's Terms and Conditions and Responsible Gaming Policy, both of which are available on the Platform. By registering a kbl99 account or using the Platform, you acknowledge that you have read and understood this Policy.
For the purposes of the Data Privacy Act of 2012 and this Policy, kbl99 is the personal information controller with respect to the personal data of its registered Players and Platform users.
kbl99 determines the purposes and means of processing personal data collected through the Platform. Where kbl99 engages third-party service providers to process personal data on its behalf, those providers act as personal information processors under the DPA and are bound by contractual obligations to process data only on kbl99's instructions and in accordance with applicable law.
kbl99 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection law. Contact details for the DPO are provided in Section 15 of this Policy.
kbl99 collects the following categories of personal data in connection with the operation of its Platform:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, government-issued ID number, photograph | Account registration, KYC verification, age verification (21+) |
| Contact Data | Email address, Philippine mobile number, residential address | Account communication, OTP delivery, transaction notifications |
| Financial Data | GCash account number, Maya account details, bank account details (BPI, BDO, Metrobank, UnionBank), transaction history | Processing deposits and withdrawals, AML compliance |
| Gaming Data | Game session logs, bet history, win/loss records, bonus activity | Platform operation, dispute resolution, responsible gaming monitoring |
| Technical Data | IP address, device identifiers, browser type and version, operating system, login timestamps | Security, fraud prevention, platform performance optimization |
| Communication Data | Live chat transcripts, email correspondence, support ticket records | Customer support, dispute resolution, service improvement |
| Marketing Preferences | Promotional opt-in/opt-out status, communication channel preferences | Sending relevant offers and updates where consented |
kbl99 does not intentionally collect sensitive personal information as defined under the DPA (such as health information, political affiliations, or religious beliefs) except where strictly required by law or regulation and with appropriate safeguards in place.
kbl99 collects personal data through the following means:
kbl99 uses the personal data it collects for the following purposes:
Under the Data Privacy Act of 2012, kbl99 processes personal data on the following lawful bases:
kbl99 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. kbl99 may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:
Where kbl99 shares personal data with third-party processors, it does so under written data processing agreements that require those processors to protect the data in accordance with applicable law and to use it only for the specified purpose.
kbl99 retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account plus 5 years after closure | Regulatory compliance, AML obligations |
| KYC verification documents | Duration of account plus 5 years after closure | AMLC, DPA, PAGCOR requirements |
| Transaction and betting records | 5 years from the date of transaction | AML compliance, dispute resolution |
| Customer support communications | 3 years from the date of last communication | Dispute resolution, service quality |
| Marketing preference data | Until consent is withdrawn, plus 1 year | Consent management, audit trail |
| Technical / log data | 13 months from collection | Security monitoring, fraud detection |
| Self-exclusion records | Indefinitely (or until formal reinstatement request) | Responsible gaming, regulatory obligation |
Upon expiry of the applicable retention period, kbl99 will securely delete or anonymize personal data in accordance with its internal data destruction procedures. Anonymized data — from which no individual can be identified — may be retained indefinitely for statistical and analytical purposes.
kbl99 implements appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:
In the event of a personal data breach that is likely to pose a real risk to affected Players, kbl99 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected Players without undue delay, in accordance with Section 20(f) of the DPA and NPC Circular No. 16-03.
kbl99 uses cookies and similar tracking technologies on the Platform to support essential functionality, improve performance, and — where you have consented — to deliver relevant content and measure the effectiveness of our communications.
The following categories of cookies are used on the kbl99 Platform:
You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the kbl99 Platform. For detailed instructions on managing cookies in common browsers, refer to your browser's help documentation.
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by kbl99. These are not theoretical — kbl99 provides clear mechanisms to exercise each of them.
You have the right to request a copy of the personal data kbl99 holds about you, along with information about how it is being used and with whom it has been shared.
You have the right to request correction of any inaccurate or incomplete personal data kbl99 holds about you. You may update certain account details directly from your account settings.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to kbl99's legal retention obligations.
You have the right to object to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests in certain circumstances.
You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe kbl99 has processed your personal data in a manner that violates the DPA.
To exercise any of the above rights, submit a written request to kbl99's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." kbl99 will acknowledge your request within five (5) business days and will respond substantively within thirty (30) calendar days, or within such other period as permitted under the DPA. Verification of your identity will be required before any request is processed.
kbl99 employs mandatory age verification procedures at the point of registration and prior to the processing of withdrawals. Any Player Account found to belong to a person under 21 years of age will be immediately suspended, all associated balances will be forfeited, and any personal data collected will be deleted in accordance with kbl99's data retention procedures, subject to any obligations under Philippine law.
If you believe that kbl99 has inadvertently collected personal data from an individual under the age of 21, please contact the Data Protection Officer immediately at [email protected]. kbl99 will take prompt steps to delete such data.
Some of kbl99's third-party service providers — including game software providers, cloud infrastructure providers, and fraud prevention services — may be located outside the Philippines. Where personal data is transferred to recipients in other countries, kbl99 ensures that appropriate safeguards are in place to protect the data in accordance with the requirements of the DPA and NPC regulations on cross-border data flows.
Such safeguards may include:
You may request further information about the specific safeguards applied to any international transfer of your personal data by contacting the Data Protection Officer.
kbl99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.
Where changes are material — meaning they significantly affect your rights or the way kbl99 uses your personal data — kbl99 will notify you by email to your registered address or by prominent notice on the Platform at least fourteen (14) days before the changes take effect.
For non-material amendments (such as typographical corrections, clarifications, or minor structural updates), changes may take effect immediately upon publication. Your continued use of the kbl99 Platform following any amendment constitutes your acknowledgment of the updated Policy. If you do not agree with the changes, you must close your account before the amended Policy takes effect.
kbl99 recommends that Players review this Policy periodically to stay informed about how their personal data is being handled.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way kbl99 handles your personal data, you may contact kbl99's Data Protection Officer using the details below.
Data Protection Officer — kbl99
Email (plain text only — not a clickable link): [email protected]
Please include "Privacy / DPO Request" in your subject line. kbl99 will acknowledge receipt within five (5) business days and respond substantively within thirty (30) calendar days of receiving a complete request.
If you are not satisfied with kbl99's response to your privacy concern, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines, which is the regulatory body responsible for enforcing the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is available on their official website.
kbl99 takes all privacy concerns seriously and is committed to resolving them promptly and transparently. Sumugal nang may responsibilidad — and that commitment extends to how we handle the personal data you trust us with.
We protect your personal information so you can focus on what matters — enjoying the best online gaming experience available to Filipino players.
Must be 21 years or older. Please gamble responsibly. Sumugal nang may responsibilidad.