bongoplus Privacy Policy

This Privacy Policy ("Policy") describes how bongoplus ("we," "us," "our," or "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you," "the Player," or "the User") who access or use the bongoplus website at bongoplus.org and all associated services, features, and content.

bongoplus is committed to protecting the privacy and personal data of all players, particularly those based in the Philippines. This Policy is drafted in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC) of the Philippines.

By registering a bongoplus account, accessing the bongoplus platform, or otherwise providing your personal data to bongoplus, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the bongoplus platform and contact our support team to request account closure.

This Policy should be read together with the bongoplus Terms and Conditions, which govern your overall use of the platform.

bongoplus collects personal data through several channels: directly from you when you register or use the platform, automatically through your use of the platform, and in limited cases from third-party service providers. The categories of personal data we collect include:

bongoplus does not intentionally collect sensitive personal information as defined under the DPA (such as health data, religious beliefs, or political affiliations) unless specifically required for regulatory compliance purposes, in which case your explicit consent will be obtained separately.

bongoplus uses the personal data we collect for the following specific purposes:

• Account Registration and Management: To create and maintain your bongoplus account, verify your identity and age eligibility (21+), and manage your account settings and preferences.
• Service Delivery: To provide access to bongoplus games, betting markets, live dealer tables, bingo rooms, and all other platform features and services.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods, and to maintain accurate transaction records.
• Identity Verification and KYC: To comply with Know Your Customer (KYC) obligations under applicable Philippine anti-money laundering (AML) regulations and gaming licensing requirements.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other illegal or prohibited conduct on the bongoplus platform.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, enforce responsible gaming limits and self-exclusion requests, and provide appropriate support to players who may be experiencing gambling-related difficulties.
• Customer Support: To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance through our live chat and email support channels.
• Legal and Regulatory Compliance: To comply with applicable Philippine laws and regulations, including the DPA, AML regulations, PAGCOR requirements, and any lawful orders from Philippine courts or regulatory authorities.
• Platform Improvement: To analyze aggregate, anonymized usage data to improve the bongoplus platform, optimize game performance, and enhance the overall player experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. You may opt out at any time via your account settings.

bongoplus will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

Under the Data Privacy Act of 2012, bongoplus processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and bongoplus — specifically, to provide the gaming and betting services you have registered to use, process your financial transactions, and manage your account.
• Legal Obligation: Processing is necessary for bongoplus to comply with applicable Philippine laws and regulations, including AML obligations, PAGCOR licensing requirements, and tax reporting obligations.
• Legitimate Interests: Processing is necessary for bongoplus's legitimate interests in operating a secure, fair, and commercially viable gaming platform — including fraud prevention, platform security, and aggregate analytics — provided that these interests are not overridden by your privacy rights.
• Consent: For processing activities that are not covered by the above bases — particularly the sending of direct marketing communications — bongoplus relies on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bongoplus does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share your personal data only in the following limited circumstances:

• Payment Service Providers: We share necessary financial data with certified payment processors (including GCash, PayMaya, and banking partners) solely to facilitate your deposits and withdrawals. These providers are contractually bound to process your data only for payment purposes and in compliance with applicable data protection law.
• Identity Verification Providers: We may share identity data with third-party KYC and identity verification service providers to fulfill our regulatory obligations. These providers operate under strict data processing agreements with bongoplus.
• Game Technology Providers: bongoplus works with licensed game software providers to deliver casino games, live dealer experiences, and sports betting markets. These providers may receive limited technical data (such as session tokens) necessary to deliver their services. They do not receive your full personal profile.
• Regulatory and Law Enforcement Authorities: bongoplus may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, Philippine law enforcement agencies, or other competent authorities where required by law, court order, or regulatory directive.
• Professional Advisors: bongoplus may share personal data with legal counsel, auditors, and other professional advisors where necessary for the conduct of bongoplus's business, subject to strict confidentiality obligations.

bongoplus uses cookies and similar tracking technologies on the bongoplus platform. A cookie is a small text file placed on your device when you visit a website. bongoplus uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the bongoplus platform to function. They enable core features such as account login sessions, security tokens, and platform navigation. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: These cookies remember your preferences and settings on the bongoplus platform — such as your preferred language, game display settings, and responsible gaming configurations — to provide a more personalized experience.
• Analytics Cookies: bongoplus uses aggregate, anonymized analytics data to understand how players use the platform, identify technical issues, and improve platform performance. This data does not identify individual players.

bongoplus does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking technologies on the bongoplus platform. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may affect your ability to use certain bongoplus features.

bongoplus retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account Data: Retained for the duration of your active bongoplus account, plus a minimum of five (5) years following account closure, in compliance with Philippine AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and its implementing regulations.
• KYC and Identity Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Gaming Activity Records: Retained for a minimum of three (3) years from the date of each gaming session, for regulatory compliance and dispute resolution purposes.
• Customer Support Communications: Retained for a minimum of two (2) years from the date of the last communication, for quality assurance and dispute resolution purposes.
• Marketing Preferences: Retained until you withdraw your consent or close your bongoplus account, whichever occurs first.

Upon expiry of the applicable retention period, bongoplus will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

bongoplus implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All personal data stored on bongoplus servers is encrypted using AES-256 encryption. All data transmitted between your device and the bongoplus platform is protected using TLS 1.2 or higher (HTTPS).
• Access Controls: Access to personal data is restricted to bongoplus personnel and contractors who have a legitimate need to access it for their job functions. All access is subject to role-based access controls and is logged and audited.
• Two-Factor Authentication: bongoplus offers two-factor authentication (2FA) for player accounts to provide an additional layer of protection against unauthorized access.
• Regular Security Audits: bongoplus conducts regular internal and third-party security audits and penetration tests to identify and remediate vulnerabilities in the platform.
• Incident Response: bongoplus maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, bongoplus will notify the National Privacy Commission and affected players in accordance with the timelines prescribed by the DPA and its IRR.

Under the Data Privacy Act of 2012, bongoplus players in the Philippines have the following rights with respect to their personal data:

To exercise any of the above rights, please contact the bongoplus Data Protection Officer (DPO) via the contact details provided in Section 13 of this Policy. bongoplus will respond to all valid data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case bongoplus will notify you of the extension and the reasons for it.

The bongoplus platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. bongoplus does not knowingly collect personal data from individuals under the age of 21.

If bongoplus becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the relevant account, delete the associated personal data, and — where applicable — return any deposited funds to the payment method used, subject to identity verification. bongoplus may report such incidents to PAGCOR and relevant Philippine authorities as required by law.

If you are a parent or guardian and believe that a minor in your care has registered on the bongoplus platform or provided personal data to bongoplus, please contact our support team immediately via live chat or email so that we can take prompt action.

bongoplus primarily stores and processes player personal data within the Philippines. In limited circumstances — for example, where bongoplus uses game technology providers or cloud infrastructure services with data centers located outside the Philippines — your personal data may be transferred to and processed in other countries.

Where such international transfers occur, bongoplus ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under the Data Privacy Act of 2012. These safeguards may include:

• Data processing agreements incorporating standard contractual clauses approved by the National Privacy Commission.
• Transfers to countries or organizations that the NPC has determined provide an adequate level of data protection.
• Other legally recognized transfer mechanisms under the DPA and its IRR.

You may request further information about the specific safeguards applicable to any international transfer of your personal data by contacting the bongoplus DPO.

bongoplus may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered bongoplus players via the email address associated with their account.
• Display a prominent notice on the bongoplus platform for a reasonable period following the update.

Your continued use of the bongoplus platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the updated Policy, you must stop using the bongoplus platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how bongoplus protects your personal data.

bongoplus has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to this Policy or the processing of your personal data by bongoplus, please contact our DPO using the details below:

• Data Protection Officer: bongoplus Privacy Office
• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 from your bongoplus account dashboard — select "Privacy & Data" from the support menu.
• Response Time: bongoplus will acknowledge all privacy-related inquiries within 5 business days and provide a substantive response within 30 calendar days.

If you are not satisfied with bongoplus's response to your privacy inquiry or data rights request, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which is the competent supervisory authority for data protection matters in the Philippines.