bonusok Privacy Policy — How We Handle Your Data

1Introduction

bonusok ("we," "us," or "our") is committed to protecting the privacy of every player who accesses, registers with, or uses the bonusok online gaming platform at bonusok.net (the "Platform"). This Privacy Policy describes how bonusok collects, uses, stores, discloses, and protects the personal data of our users in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), the regulations of the Philippine Amusement and Gaming Corporation (PAGCOR), and all other applicable Philippine data protection laws.

This Policy applies to all personal data collected through:

• The bonusok website and all subdomains;
• The bonusok mobile application (where available);
• Communications between you and bonusok's customer support team via live chat or email;
• Any other interaction you have with bonusok's products or services.

This Privacy Policy should be read together with bonusok's Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your use of the Platform.

2Data Controller

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, bonusok is the data controller responsible for your personal data. As data controller, bonusok determines the purposes and means by which your personal data is processed.

bonusok has appointed a Data Protection Officer (DPO) in accordance with the requirements of the National Privacy Commission. If you wish to contact our DPO in connection with any matter relating to this Privacy Policy or the processing of your personal data, please reach out via the contact details provided in Section 14 of this Policy.

bonusok operates the Platform under PAGCOR licensing conditions, which impose specific data collection, verification, and reporting obligations that form part of our legal basis for processing certain categories of personal data.

3Personal Data We Collect

bonusok collects the following categories of personal data, grouped by type:

3.1 Identity & Registration Data

• Full legal name as it appears on a government-issued Philippine ID;
• Date of birth (to verify the mandatory 21+ age requirement);
• Gender;
• Nationality;
• Government-issued ID number (e.g., PhilSys National ID, passport, UMID, SSS, PRC, driver's licence);
• Copies of identity documents submitted for KYC verification.

3.2 Contact Data

• Email address;
• Philippine mobile number;
• Residential address (city, province, region).

3.3 Financial & Transaction Data

• GCash account number or registered mobile number;
• Maya wallet identifier;
• Bank account name, number, and branch (BPI, BDO, Metrobank, UnionBank, or other supported banks);
• USDT TRC20 wallet address (where applicable);
• Complete deposit, withdrawal, wagering, and bonus transaction history in Philippine Peso;
• Source of funds documentation submitted for AML compliance.

3.4 Gaming & Behavioural Data

• Game history, wager amounts, win/loss records, and session durations;
• Responsible gaming tool selections (deposit limits, self-exclusion status, cooling-off periods);
• Bonus and promotion participation history;
• Customer support interaction records.

3.5 Technical & Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Unique device identifiers;
• Session timestamps and login history;
• Cookie and tracking technology data (see Section 8).

4How We Collect Your Data

bonusok collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, participating in promotions, or contacting customer support;
• Automated collection: Technical and device data collected automatically when you access the Platform, including through cookies, log files, and similar tracking technologies;
• Third-party payment providers: Transaction confirmation data received from GCash, Maya, BPI, BDO, and other payment processors when you complete a deposit or withdrawal;
• Identity verification services: Data received from licensed KYC and identity verification service providers used to validate the authenticity of documents you submit;
• Regulatory sources: Data received from PAGCOR or other Philippine government agencies in connection with licensing compliance, responsible gaming obligations, or law enforcement requests.

5How We Use Your Personal Data

bonusok uses the personal data we collect for the following purposes:

bonusok will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by Philippine law.

6Legal Basis for Processing

Under the Data Privacy Act of 2012, bonusok processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the bonusok Terms & Conditions, including account management, payment processing, and delivery of gaming services;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (Republic Act No. 9160, as amended), the Data Privacy Act, and other applicable Philippine statutes;
• Legitimate interests: Processing carried out for bonusok's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights and freedoms;
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — including direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7Data Sharing & Disclosure

bonusok does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• PAGCOR and Philippine regulatory authorities: As required under bonusok's operating licence and applicable gaming regulations;
• Anti-Money Laundering Council (AMLC): As mandated under the Anti-Money Laundering Act where transaction reporting thresholds are met or suspicious activity is identified;
• Payment processors: GCash, Maya, BPI, BDO, Metrobank, UnionBank, 7-Eleven Cliqq, Coins.ph, and USDT TRC20 network providers, solely to facilitate your deposit and withdrawal transactions;
• KYC and identity verification service providers: Licensed third-party providers engaged to assist with identity document authentication;
• IT infrastructure and security providers: Cloud hosting, data centre, and cybersecurity service providers operating under strict data processing agreements;
• Customer support platforms: Live chat and ticketing software providers used to deliver bonusok's 24/7 support service;
• Law enforcement and courts: Where bonusok is legally compelled to disclose data pursuant to a valid court order, subpoena, or official law enforcement request under Philippine law.

All third-party service providers with whom bonusok shares personal data are required to process such data only in accordance with bonusok's instructions and applicable data protection law, and are prohibited from using it for any other purpose.

8Cookies & Tracking Technologies

bonusok uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Strictly necessary for the operation of the Platform, including maintaining your login session, enforcing security controls, and enabling core gaming functionality. These cookies cannot be disabled.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and use the Platform, enabling bonusok to identify areas for improvement. No personally identifiable information is shared with analytics providers.
• Preference cookies: Used to remember your language, display, and notification preferences between sessions.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and account takeover attempts.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. bonusok does not use third-party advertising or retargeting cookies.

9Data Security

bonusok implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• Transport encryption: All data transmitted between your device and bonusok's servers is protected by 256-bit SSL/TLS encryption;
• Data-at-rest encryption: Sensitive personal data, including identity documents and financial records, is encrypted at rest using AES-256;
• Access controls: Access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular data protection training;
• Two-factor authentication (2FA): Available to all registered Players and mandatory for all bonusok staff with access to personal data systems;
• Penetration testing: bonusok's systems undergo regular third-party security audits and penetration testing;
• Incident response: bonusok maintains a documented data breach response procedure and will notify affected players and the National Privacy Commission in the event of a qualifying personal data breach within the timeframes prescribed by the Data Privacy Act.

While bonusok takes every reasonable precaution to protect your data, no internet-based system is completely impervious to attack. Players are encouraged to use a strong, unique password for their bonusok account and to enable two-factor authentication.

10Data Retention

bonusok retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law and PAGCOR regulations:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identified or identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

11Your Rights as a Data Subject

Under the Data Privacy Act of 2012, as a Filipino data subject, you hold the following rights in relation to your personal data held by bonusok:

• Right to be informed: The right to be notified of the fact that your personal data is being or has been collected and processed, including the purpose of processing — as fulfilled by this Privacy Policy;
• Right of access: The right to request a copy of the personal data bonusok holds about you, along with information about how it is being processed;
• Right to correction: The right to request the correction of inaccurate, outdated, incomplete, or misleading personal data we hold about you;
• Right to erasure: The right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation where processing is based on legitimate interests;
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that bonusok has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, please contact bonusok's Data Protection Officer via the details in Section 14. bonusok will respond to all valid data subject requests within thirty (30) days of receipt, as required by the National Privacy Commission. We may request proof of identity before processing your request to protect against unauthorised access to another person's data.

12Minors and Age Restriction

The bonusok Platform is strictly restricted to individuals aged 21 years and above, in accordance with Philippine gaming law and PAGCOR regulations. bonusok does not knowingly collect, store, or process the personal data of individuals under the age of 21.

As part of the account registration process, all prospective Players are required to confirm that they are aged 21 or above and to submit valid government-issued Philippine identification for age verification. Any account found to belong to an individual under the age of 21 will be immediately suspended, all balances forfeited, and the matter reported to PAGCOR as required.

If you are a parent or guardian and have reason to believe that a minor has registered on the bonusok Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

13Updates to This Privacy Policy

bonusok reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, PAGCOR regulatory requirements, or the National Privacy Commission's guidelines. The date of the most recent revision is displayed at the top of this page.

Where changes to this Policy are material — meaning they affect how your data is processed in a way that may impact your rights — bonusok will notify registered Players via email or a prominent in-platform notification prior to the changes taking effect.

Your continued use of the bonusok Platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the revised Policy. If you do not agree to the updated terms, you should cease using the Platform and may request account closure as set out in the bonusok Terms & Conditions.

14Contact — Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bonusok, please contact our Data Protection Officer through the following channels:

• Email: [email protected] — please include "Data Privacy Request" in the subject line for prioritised handling by our DPO;
• 24/7 Live Chat: Available within your bonusok account dashboard — our support agents can log and escalate data subject requests to the DPO on your behalf.

bonusok aims to acknowledge all data subject requests within three (3) business days and to resolve them within thirty (30) days. Where a request is complex or involves a large volume of data, bonusok may extend the resolution period by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it.

If you are not satisfied with bonusok's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines at privacy.gov.ph (please visit their official website directly — bonusok does not include external links in this document).