Privacy Policy

m.fb001 ("the Platform", "we", "us", "our") is committed to protecting the privacy of all individuals who interact with the mfb001.net website, including registered account holders, visitors, and prospective players. This Privacy Policy ("Policy") has been prepared in compliance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012, its Implementing Rules and Regulations (IRR), and the applicable issuances of the National Privacy Commission of the Philippines (NPC).

This Policy applies to all personal data collected, processed, stored, and transmitted in connection with the operation of m.fb001, regardless of the medium or platform through which such data is provided. By creating an account, making a deposit, or continuing to use the m.fb001 Platform, you acknowledge that you have read this Policy in full and consent to the processing of your personal data as described herein.

For the purposes of the Philippine Data Privacy Act, m.fb001 acts as the Personal Information Controller (PIC) in respect of all personal data collected through the Platform. As PIC, m.fb001 determines the purposes and means of processing personal data and is accountable for the privacy and security of data under its custody.

m.fb001 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection laws. The DPO can be contacted through the customer support channels listed in Section 14 of this Policy. All data protection inquiries, rights exercise requests, and privacy complaints should be addressed to the DPO.

m.fb001 collects personal data through multiple touchpoints across the Platform. The categories of data collected, and the context in which each is collected, are described in the table below:

m.fb001 does not intentionally collect sensitive personal information (as defined under RA 10173) beyond that required for mandatory identity verification and anti-money laundering compliance.

m.fb001 processes personal data only for specific, legitimate purposes. The primary purposes for which your data is used are as follows:

4.1 Account Management and Service Delivery

To create, maintain, and operate your m.fb001 account; to authenticate your identity upon each login; to process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other integrated Philippine payment channels; to track your wallet balance and transaction history; and to provide access to the full game catalogue including slots, live dealer casino, bingo, and fishing games.

4.2 Regulatory Compliance and KYC

To verify that all registered players meet the 21+ age requirement mandated by PAGCOR and applicable Philippine regulations; to comply with Anti-Money Laundering Act (AMLA) obligations including customer due diligence and transaction monitoring; to fulfil reporting obligations to PAGCOR and other Philippine regulatory bodies as required by law; and to respond to lawful requests from law enforcement authorities.

4.3 Platform Security and Fraud Prevention

To detect and prevent account takeover attempts, unauthorised access, fraudulent transactions, bonus abuse, collusion, and other prohibited conduct described in the m.fb001 Terms & Conditions; to monitor login patterns and flag access from unrecognised devices or IP addresses; and to investigate security incidents and protect the integrity of the Platform.

4.4 Responsible Gaming

To monitor gaming activity for patterns indicating potential problem gambling; to enforce deposit limits, loss limits, session timers, and self-exclusion periods set by players; and to identify players who may benefit from responsible gaming interventions or support referrals. This processing is conducted in the genuine interest of player welfare and in compliance with PAGCOR responsible gaming requirements.

4.5 Marketing and Promotions

To send promotional offers, bonus notifications, and platform updates to players who have provided consent to receive marketing communications. m.fb001 uses contact data (mobile number and email) for this purpose only where valid consent has been obtained. You may withdraw marketing consent at any time through your account settings without affecting your access to the Platform.

4.6 Platform Improvement and Analytics

To analyse aggregate usage data (not individually identifiable) for the purpose of improving platform performance, game catalogue decisions, and user experience design. Technical data including device type, browser, and session duration is used to optimise m.fb001 for the range of devices and network conditions common among Filipino players across Metro Manila and the provinces.

m.fb001 processes personal data only where a lawful basis for doing so exists under the Philippine Data Privacy Act. The applicable legal bases for the processing described in Section 4 are as follows:

• Contractual Necessity: Processing required to fulfil the m.fb001 Terms & Conditions to which you are party — including account creation, payment processing, and game access — is conducted on the basis of contractual necessity.
• Legal Obligation: Processing required by Philippine law — including AMLA-mandated KYC, regulatory reporting to PAGCOR, and data retention obligations — is conducted on the basis of legal compliance.
• Legitimate Interests: Processing for Platform security, fraud prevention, and responsible gaming monitoring is conducted on the basis of m.fb001's legitimate interests, subject to a balancing assessment confirming these interests do not override your privacy rights.
• Consent: Processing for direct marketing is conducted solely on the basis of your explicit, freely given, and informed consent, which may be withdrawn at any time.

The m.fb001 Platform uses cookies and similar tracking technologies to operate core platform functions, maintain your login session, remember your preferences, and collect anonymised analytics data. The cookies used by m.fb001 fall into the following categories:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your m.fb001 session. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, responsible gaming limits you have set, and previously visited game sections. These improve your experience but are not essential.
• Analytics Cookies: Collect aggregated, anonymised data about how visitors use the Platform — pages visited, session duration, device type — to help m.fb001 improve its services. No individually identifiable data is processed through analytics cookies.
• Security Cookies: Assist in fraud detection and platform security by tracking session anomalies, unusual access patterns, and potential bot activity.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the m.fb001 Platform.

m.fb001 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Personal data is shared with third parties only in the following circumstances, and only to the extent necessary:

7.1 Payment Processors

Financial data necessary to process transactions is shared with regulated payment service providers including GCash (G-Xchange, Inc.), PayMaya Philippines Inc., Banco de Oro (BDO), Bank of the Philippine Islands (BPI), Metrobank, and other licensed Philippine financial institutions. These providers are subject to their own privacy obligations under Philippine banking and data privacy law.

7.2 Regulatory and Law Enforcement Authorities

m.fb001 is required by law to share certain player data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities upon lawful request. Disclosure to law enforcement is made only in response to valid court orders, subpoenas, or other legally binding instruments.

7.3 Technology Service Providers

Personal data may be processed by technology service providers engaged by m.fb001 to deliver platform infrastructure, game content, customer support tools, and security services. All such providers are contractually bound to process data solely as instructed by m.fb001 and to implement appropriate data protection measures consistent with this Policy.

7.4 Professional Advisors

In the context of legal proceedings, regulatory investigations, or corporate due diligence, personal data may be disclosed to legal counsel, auditors, or other professional advisors engaged by m.fb001, subject to professional confidentiality obligations.

m.fb001 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key security controls include:

• Encryption in Transit: All data transmitted between your device and m.fb001 servers is protected by TLS 1.3 with 256-bit AES encryption — the same standard used by major Philippine banks.
• Encryption at Rest: Sensitive personal data stored in m.fb001 databases is encrypted at rest using AES-256, ensuring that data cannot be read by unauthorised parties even in the event of physical storage media compromise.
• Access Controls: Access to personal data within m.fb001 systems is restricted on a strict need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication for all administrative access.
• Intrusion Detection: Real-time monitoring and intrusion detection systems are deployed across the m.fb001 infrastructure to identify and respond to security anomalies and potential attacks.
• Regular Security Audits: m.fb001 conducts periodic security assessments, penetration testing, and vulnerability scans to identify and remediate security weaknesses before they can be exploited.
• Data Breach Response: m.fb001 maintains a documented incident response plan. In the event of a personal data breach that poses a real risk to data subjects, affected players and the National Privacy Commission will be notified in accordance with the NPC's breach notification requirements.

While m.fb001 takes its data security obligations seriously, no internet-based system can guarantee absolute security. Players are encouraged to use strong, unique passwords for their m.fb001 account and to enable two-factor authentication as an additional layer of protection.

m.fb001 retains personal data for no longer than necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following retention periods apply to the primary categories of data held by m.fb001:

• Account and Identity Data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, in compliance with the Anti-Money Laundering Act and PAGCOR record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of ten (10) years following the date of each transaction, in accordance with AMLA obligations applicable to covered institutions.
• Gaming Activity Logs: Retained for a minimum of five (5) years from the date of each wagering session, subject to regulatory audit requirements.
• Customer Support Communications: Retained for three (3) years from the date of the final communication in each support case, to support dispute resolution and quality assurance.
• Marketing Consent Records: Retained for the duration of the consent and for three (3) years following withdrawal of consent, to demonstrate compliance with consent requirements.
• Technical and Log Data: Retained for a rolling period of 12 months, after which it is anonymised or deleted.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with m.fb001's data disposal procedures.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by m.fb001. These rights may be exercised by contacting the m.fb001 Data Protection Officer through the channels described in Section 14:

• Right to be Informed: The right to be informed whether m.fb001 holds personal data about you and to receive a copy of this Privacy Policy, which describes all data processing activities.
• Right of Access: The right to request a copy of the personal data m.fb001 holds about you, including the purposes for which it is processed, the categories of data held, and the third parties with whom it has been shared.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held by m.fb001 about you. Corrections to KYC-verified identity data may require submission of updated documentary evidence.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and no mandatory retention obligation applies. m.fb001 will assess erasure requests against applicable legal retention requirements before acting on them.
• Right to Object: The right to object to the processing of your personal data where such processing is based on legitimate interests, including the right to object to direct marketing at any time.
• Right to Data Portability: The right to receive the personal data you have provided to m.fb001 in a structured, commonly used, and machine-readable format, where processing is based on consent or contract and is carried out by automated means.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe m.fb001 has processed your personal data in violation of RA 10173.

m.fb001 will respond to verified rights exercise requests within thirty (30) days of receipt. Complex requests may require an extension of up to a further thirty (30) days, in which case you will be informed of the reason for the delay.

The m.fb001 Platform is strictly intended for adults aged 21 years and above, in compliance with PAGCOR regulations governing online gaming in the Philippines. m.fb001 does not knowingly collect personal data from individuals under the age of 21.

Age verification is a mandatory step in the m.fb001 account registration and KYC process. Where m.fb001 becomes aware or has reasonable grounds to believe that personal data has been collected from a person who does not meet the minimum age requirement, the associated account will be immediately suspended and the data will be securely deleted, subject to any mandatory retention obligations applicable under Philippine law.

Parents or guardians who believe that a minor has registered on m.fb001 are encouraged to contact the Platform immediately through the support channels in Section 14 so that the account can be reviewed and appropriate action taken without delay.

In the course of operating the m.fb001 Platform, personal data may be transferred to and processed by technology service providers located outside the Philippines, including providers of cloud computing infrastructure, game content delivery systems, and security services. Such transfers may involve jurisdictions that do not have data protection laws equivalent to those in the Philippines.

Where personal data is transferred outside the Philippines, m.fb001 takes appropriate safeguards to ensure that the data remains protected to a standard at least equivalent to the requirements of RA 10173. These safeguards include:

• Contractual data processing agreements incorporating data protection obligations consistent with Philippine law;
• Transfers to service providers in jurisdictions recognised by the NPC as providing adequate data protection;
• Implementation of supplementary technical measures (encryption, pseudonymisation) where the legal protection in the destination jurisdiction is assessed as insufficient without such measures.

m.fb001 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes to this Policy will be communicated to registered players via the mobile number or email address associated with their m.fb001 account prior to the changes taking effect.

The revised Policy will be published on this page with an updated effective date. Your continued use of the m.fb001 Platform following notification of any material change constitutes your acknowledgement of the revised Policy. Where a change requires fresh consent (for example, a new processing purpose relying on consent as its legal basis), m.fb001 will obtain that consent through a clear affirmative action before the new processing begins.

For all inquiries, requests, or complaints relating to this Privacy Policy or the processing of your personal data by m.fb001, please contact the m.fb001 Data Protection Officer through the following channels:

If you are not satisfied with m.fb001's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. Information about the NPC's complaint process is available through Philippine government channels.