m.fb001 Privacy Policy

This Privacy Policy ("Policy") describes how m.fb001 ("we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "player") who access or use the m.fb001 online gaming platform, including all associated websites, mobile interfaces, and services (collectively, the "Platform").

m.fb001 is committed to protecting the privacy and personal data of all players, particularly in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC). We also adhere to data handling standards required under PAGCOR's regulatory framework.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

If you have questions about how m.fb001 handles your personal data, please refer to Section 13 (Contact Us) for details on how to reach our Data Protection Officer.

m.fb001 collects personal data that is necessary for the lawful operation of the Platform, compliance with regulatory obligations, and the delivery of a safe and personalised gaming experience. The categories of personal data we collect include:

m.fb001 collects personal data through the following means:

• Direct Interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Technologies: Data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device identifiers, and browsing behaviour on the Platform.
• Third-Party Sources: Data received from identity verification providers, payment processors (such as GCash, PayMaya, and partner banks), fraud prevention services, and PAGCOR or other regulatory bodies where required by law.
• Publicly Available Sources: In limited circumstances, m.fb001 may supplement your data with information from publicly available sources for the purposes of fraud prevention or regulatory compliance.

m.fb001 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your player account, including verifying your identity and age (21+ requirement) in accordance with PAGCOR regulations.
• Service Delivery: To provide you with access to the Platform's games, features, and services, including processing deposits and withdrawals via GCash, PayMaya, and Philippine bank transfers.
• Regulatory Compliance: To fulfil our obligations under the Philippine Data Privacy Act, the Anti-Money Laundering Act (AMLA), PAGCOR licensing conditions, and other applicable Philippine laws and regulations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, and other illegal or prohibited conduct on the Platform.
• Responsible Gaming: To monitor gaming behaviour and identify players who may be at risk of gambling-related harm, and to apply responsible gaming tools where appropriate.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Marketing and Promotions: To send you information about m.fb001 promotions, bonuses, and platform updates, where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the functionality, performance, and user experience of the Platform.
• Legal Proceedings: To establish, exercise, or defend legal claims in connection with the Platform or your account.

Under the Philippine Data Privacy Act of 2012, m.fb001 processes your personal data on the following legal bases:

• Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose, such as receiving marketing communications or the processing of sensitive personal information.
• Contractual Necessity: Where processing is necessary for the performance of the contract between you and m.fb001 – specifically, the Terms & Conditions governing your use of the Platform.
• Legal Obligation: Where processing is required to comply with a legal obligation applicable to m.fb001, including obligations under the AMLA, PAGCOR regulations, and the Data Privacy Act itself.
• Legitimate Interests: Where processing is necessary for the legitimate interests of m.fb001 or a third party, provided that such interests are not overridden by your rights and interests. This includes fraud prevention, platform security, and business analytics.

m.fb001 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya / Maya, and partner Philippine banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for the purpose of processing deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML compliance service providers engaged to verify player identities and screen against sanctions lists.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law or regulatory obligation.
• Technology and Infrastructure Providers: Cloud hosting providers, cybersecurity firms, and software vendors who process data on our behalf under strict data processing agreements.
• Professional Advisers: Lawyers, auditors, and accountants engaged by m.fb001 in connection with legal, compliance, or financial matters, subject to professional confidentiality obligations.
• Law Enforcement: Where required by a valid court order, subpoena, or other lawful process issued by a competent Philippine authority.

All third parties with whom m.fb001 shares personal data are required to handle such data in accordance with the Philippine Data Privacy Act and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

m.fb001 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements and AMLA obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required under the Anti-Money Laundering Act.
• Gaming History: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Customer Support Records: Retained for two (2) years from the date of the last interaction.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, after which it will be deleted or anonymised within thirty (30) days.
• Technical and Usage Data: Retained for up to twelve (12) months for security and analytics purposes, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

m.fb001 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data undergo regular data privacy training.
• Two-Factor Authentication: m.fb001 supports and encourages the use of two-factor authentication (2FA) for player accounts to reduce the risk of unauthorised access.
• Penetration Testing: The Platform undergoes regular security assessments and penetration testing by independent cybersecurity professionals.
• Incident Response: m.fb001 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission and affected players within the timeframes prescribed by the Data Privacy Act.
• Vendor Security: All third-party service providers who process personal data on our behalf are subject to security assessments and are required to maintain security standards equivalent to our own.

m.fb001 uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and gather analytics data. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Performance and Analytics Cookies: Used to collect anonymised data about how players use the Platform, which pages are visited most frequently, and where errors occur. This data helps us improve the Platform.
• Functionality Cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalised experience.
• Marketing Cookies: Used to track your interactions with m.fb001 promotional content and to measure the effectiveness of our marketing campaigns. These are only placed with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For more information on managing cookies in the Philippines, you may refer to guidance published by the National Privacy Commission.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by m.fb001. To exercise any of these rights, please contact our Data Protection Officer as described in Section 13.

m.fb001 will respond to all data privacy rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it.

The m.fb001 Platform is strictly intended for adults aged 21 years and above. m.fb001 does not knowingly collect personal data from individuals under the age of 21. The minimum legal age for casino-style gambling in the Philippines is 21 years, as prescribed under applicable Philippine law and PAGCOR regulations.

If m.fb001 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account on the Platform, please contact us immediately using the details in Section 13.

m.fb001 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players by email or through a prominent notice on the Platform prior to the changes taking effect.

The "Last updated" date at the top of this page indicates when the Policy was most recently revised. We encourage you to review this Policy periodically to stay informed about how m.fb001 protects your personal data. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.

If any amendment to this Policy requires your renewed consent under the Data Privacy Act, m.fb001 will seek that consent before the amended Policy takes effect with respect to your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by m.fb001, please contact our Data Protection Officer (DPO):

• Data Protection Officer: m.fb001 Privacy Team
• Email: [email protected]
• General Support: [email protected]
• Response Time: We aim to acknowledge all privacy-related requests within five (5) business days and to resolve them within thirty (30) days.

If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012.