mbet999 Privacy Policy

1 Introduction

mbet999 ("we," "us," "our," or "the Platform") is the operator of the online casino and sports betting platform accessible at mbet999.bio. We are committed to safeguarding the privacy and personal data of all users — from first-time visitors browsing our slots and bingo offerings to registered players conducting GCash deposits and withdrawals through their accounts.

This Privacy Policy ("Policy") describes in detail what personal data mbet999 collects, the purposes for which it is processed, who we may share it with, how long we retain it, and what rights you hold as a data subject under Philippine law. It is drafted in compliance with:

• Republic Act No. 10173 — the Data Privacy Act of 2012 (DPA) and its Implementing Rules and Regulations;
• National Privacy Commission (NPC) issuances and circulars applicable to online platforms;
• Republic Act No. 9160 (as amended by RA 10167 and RA 10365) — the Anti-Money Laundering Act, which mandates certain data collection and retention obligations;
• PAGCOR regulations governing licensed online gaming operators in the Philippines.

This Policy should be read together with the mbet999 Terms & Conditions, which govern your overall use of the platform.

2 Data Controller

For the purposes of the Data Privacy Act of 2012, mbet999 acts as the personal information controller in respect of all personal data collected through the mbet999 platform. This means mbet999 determines the purposes for which, and the manner in which, personal data is processed.

mbet999 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection laws. The DPO can be contacted via the details provided in Section 16 of this Policy.

Where mbet999 engages third-party service providers to process personal data on its behalf (for example, payment processors handling GCash or BPI transactions, or identity verification partners supporting KYC), those parties act as personal information processors and are contractually bound to process data only as instructed by mbet999, in accordance with this Policy and applicable law.

3 Data We Collect

mbet999 collects only the personal data necessary for the purposes described in this Policy. The categories of data we collect are set out in the table below:

mbet999 does not intentionally collect sensitive personal information (as defined under Section 3(l) of the DPA) such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where government-issued IDs presented during KYC incidentally contain such information. In those cases, the data is used solely for identity verification and stored securely with restricted access.

4 How We Collect Your Data

mbet999 collects personal data through the following channels:

4.1 Direct Collection

Data you provide directly when you register for an mbet999 account, complete KYC verification, make a deposit or withdrawal request, contact our support team via live chat or email, respond to a survey or promotion, or update your account settings.

4.2 Automated Collection

Technical and usage data collected automatically when you visit or use the mbet999 platform, including through cookies, web beacons, pixel tags, and server log files. This data helps us understand how the platform is used, detect and prevent fraud, and improve the overall player experience. For more detail on cookies, see Section 8.

4.3 Third-Party Sources

mbet999 may receive personal data about you from third parties in limited circumstances, including:

• Payment providers (e.g., GCash, PayMaya, BPI, BDO, Metrobank) confirming transaction completion or flagging suspected fraud;
• Identity verification partners assisting with KYC document validation;
• PAGCOR or government agencies providing regulatory notifications or exclusion list data;
• Fraud detection services sharing signals regarding suspicious account activity or device fingerprints.

5 How We Use Your Data

mbet999 uses your personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your mbet999 account; processing your mbet999 login authentication; managing your account preferences and responsible gaming settings.
• KYC & Identity Verification: Verifying your identity and age (21+ requirement) in compliance with PAGCOR regulations and anti-money laundering obligations under RA 9160.
• Payments Processing: Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank; reconciling transaction records; investigating disputed transactions.
• Platform Provision: Delivering the games, sports betting markets, promotions, and other features of the mbet999 platform; personalising the gaming experience based on your game preferences and history.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, bonus abuse, money laundering, and other prohibited conduct as described in the Terms & Conditions.
• Customer Support: Responding to your enquiries, resolving disputes, and providing technical assistance via live chat and email.
• Regulatory Compliance: Meeting reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities.
• Marketing & Promotions: Sending you information about mbet999 bonuses, promotions, new games, and platform updates — only where you have consented to receive such communications.
• Analytics & Improvement: Analysing aggregate platform usage patterns to improve game offerings, site performance, and the overall player experience.
• Legal Claims: Establishing, exercising, or defending legal claims in connection with disputes arising from platform use.

6 Legal Bases for Processing

Under the Data Privacy Act of 2012, mbet999 must have a lawful basis for processing your personal data. The legal bases we rely on are:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and mbet999 — specifically, to operate your account, process deposits and withdrawals, and provide the gaming services you have requested.
• Legal Obligation: Processing is required to comply with a legal obligation to which mbet999 is subject, including KYC obligations under PAGCOR regulations, transaction reporting under the Anti-Money Laundering Act, and data retention requirements under Philippine law.
• Legitimate Interests: Processing is necessary for mbet999's legitimate interests — specifically, fraud prevention, platform security, and improving the quality of the gaming experience — where those interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and non-essential cookies, mbet999 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7 Data Sharing & Disclosure

mbet999 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank receive the minimum data necessary to process your deposit or withdrawal transaction.
• KYC & Identity Verification Partners: Third-party identity verification service providers who validate government-issued IDs and perform age verification checks on behalf of mbet999.
• IT Infrastructure & Security Providers: Cloud hosting, cybersecurity, and fraud detection service providers who process data as personal information processors under written agreements with mbet999.
• Regulatory & Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Philippine National Police (PNP), and other government agencies, where disclosure is required by law, court order, or regulatory direction.
• Professional Advisors: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of mbet999's business or assets, your personal data may be transferred as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data post-transfer.

All third-party processors engaged by mbet999 are required to implement appropriate technical and organisational security measures and to process your data only in accordance with mbet999's documented instructions.

8 Cookies & Tracking Technologies

mbet999 uses cookies and similar tracking technologies (web beacons, pixel tags, local storage) to enhance platform functionality, maintain your login session, and gather analytics data. The types of cookies used on the mbet999 platform are:

You can manage your cookie preferences through your browser settings or through the cookie consent banner displayed on your first visit to the mbet999 platform. Disabling strictly necessary cookies will impair or prevent your ability to use the platform, including the mbet999 login function.

9 Data Retention

mbet999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account Data & KYC Records: Retained for a minimum of 5 years from the date of account closure, as required under the Anti-Money Laundering Act (RA 9160, as amended) and PAGCOR regulations.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction, consistent with AMLC reporting obligations and applicable tax record-keeping requirements.
• Customer Support Communications: Retained for 3 years from the date of the interaction, to support dispute resolution and service quality review.
• Marketing Consent Records: Retained for the duration of your account and for 2 years following account closure, to evidence the basis for any marketing communications sent.
• Technical / Log Data: Retained for up to 12 months, after which it is anonymised or deleted, unless required for an active security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identified or identifiable individual. Where anonymisation is not technically feasible, data is securely destroyed.

10 Data Security

mbet999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption: All data in transit is protected by 256-bit TLS/SSL encryption. All data at rest is encrypted using AES-256. Passwords are stored as salted cryptographic hashes — never in plain text.
• Access Controls: Personal data is accessible only to mbet999 personnel and authorised processors who have a legitimate business need. All internal access is logged and subject to periodic review.
• Two-Factor Authentication (2FA): Available and recommended for all registered player accounts. Mandatory for administrative access to platform backend systems.
• Intrusion Detection: Continuous network monitoring, anomaly detection, and web application firewall (WAF) protection are in place to detect and respond to security threats in real time.
• Penetration Testing: Regular third-party security assessments are conducted to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: mbet999 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, mbet999 will notify the National Privacy Commission and affected individuals within the timeframes mandated by the DPA.

While mbet999 takes data security seriously and applies industry-standard protections, no online system is entirely immune to security risks. You are encouraged to use a strong, unique password for your mbet999 account and to enable two-factor authentication to further protect your account.

11 Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you are entitled to the following rights in respect of your personal data held by mbet999:

To exercise any of these rights, please contact the mbet999 Data Protection Officer using the details in Section 16. mbet999 will respond to all valid data subject requests within 15 business days of receipt, in accordance with NPC guidelines. Some rights are subject to limitations under Philippine law — for example, data that must be retained for regulatory compliance cannot be deleted before the mandatory retention period expires.

If you believe mbet999 has not adequately addressed your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

12 Children & Minors

mbet999 enforces mandatory age verification for all new account registrations. Where mbet999 discovers or has reasonable grounds to suspect that personal data has been collected from an individual under 21 years of age, the account will be immediately suspended, all personal data associated with the account will be securely deleted (subject to any mandatory regulatory retention requirements), and the matter will be reported to PAGCOR as required.

If you are a parent or guardian and believe your child has provided personal data to mbet999 without your consent, please contact our Data Protection Officer immediately using the contact details in Section 16 so that we can investigate and take appropriate action.

13 Cross-Border Data Transfers

mbet999's primary data processing operations are located within the Philippines. In some cases, personal data may be transferred to or accessed from locations outside the Philippines — for example, where mbet999 uses cloud infrastructure or third-party service providers whose servers are located abroad.

Any cross-border transfer of personal data is carried out in compliance with Section 21 of the Data Privacy Act and relevant NPC guidelines. mbet999 ensures that adequate safeguards are in place before any transfer occurs, including:

• Transferring data only to countries or organisations that provide an adequate level of data protection as assessed by the NPC;
• Entering into data processing agreements containing standard contractual clauses that impose data protection obligations on the recipient;
• Obtaining your explicit consent for transfers in cases where neither of the above mechanisms is applicable.

14 Third-Party Links

The mbet999 platform may contain references to third-party services — for example, payment provider platforms such as GCash or PayMaya, which you will access through their own interfaces when making deposits or withdrawals. Once you navigate away from the mbet999 platform, this Privacy Policy no longer applies.

mbet999 is not responsible for the privacy practices or the content of any third-party website or service. We encourage you to review the privacy policies of any third-party services you use in connection with your mbet999 account before providing them with your personal data.

15 Policy Updates

mbet999 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable law, PAGCOR regulatory requirements, or our internal data processing practices. When we make material changes to this Policy, we will:

• Post the updated Policy on this page with a revised "Last Updated" date at the top;
• Display a prominent notice on the mbet999 platform informing registered players of the update; and
• Where the changes are significant and affect your rights, send a direct notification to your registered email address with a summary of what has changed.

Your continued use of the mbet999 platform following the posting of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should discontinue use of the platform and may request closure of your account by contacting our support team.

We recommend that you review this Privacy Policy periodically to stay informed about how mbet999 is protecting your personal data.

16 Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the way mbet999 handles your personal data, you may contact our Data Protection Officer through the following channels:

When submitting a data subject request, please provide your full name, registered email address, and a clear description of your request so that we can verify your identity and process your request efficiently. mbet999 may ask for additional information to confirm your identity before disclosing or modifying personal data.