999ph Privacy Policy

1 Introduction

999ph is an online gaming platform that serves players in the Philippines. As part of operating this platform, we necessarily collect and process certain personal data about the players who register accounts and use our services. We take this responsibility seriously and are committed to handling your personal information with transparency, integrity, and care.

This Policy has been prepared with reference to the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations. Our goal is to be fully transparent about what data we collect, why we collect it, how long we keep it, and who may have access to it. We aim to collect only the data that is genuinely necessary for us to provide and improve our services to you as a Filipino player.

If you have questions about any part of this Policy that are not answered here, you can contact the 999ph support team via live chat or through the contact details available inside your logged-in account dashboard. We are happy to explain our data practices in plain language.

2 Data Controller

999ph is the data controller responsible for the personal data collected and processed through the 999ph platform. As data controller, 999ph determines the purposes and means by which your personal data is processed and is accountable for ensuring that processing activities comply with applicable Philippine data protection laws.

999ph has designated a Data Protection Officer (DPO) who is responsible for overseeing our data privacy programme and handling enquiries or complaints from players about our data practices. Contact details for the DPO are available inside your logged-in 999ph account dashboard. All data protection enquiries addressed to the DPO are handled confidentially and within the timeframes required by Philippine law.

3 Data We Collect

The categories of personal data that 999ph collects from players include the following:

999ph does not collect sensitive personal information — such as health data, biometric data used for identification, or political affiliations — except where this is strictly necessary for compliance with a legal obligation, such as verifying that a self-excluded player does not re-register under a different identity.

4 How We Collect Your Data

999ph collects your personal data through several methods, all of which are described below. We do not collect personal data through deceptive means or without a lawful basis for doing so.

• Direct submission by you — When you register a 999ph account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or update your account details, you directly provide us with personal data.
• Automated collection during platform use — When you access and use the 999ph platform, our systems automatically collect technical data such as your IP address, device identifiers, browser information, and gameplay activity logs. This data is collected using server logs, cookies, and similar tracking technologies.
• Payment providers — When you make a deposit or withdrawal using GCash, Maya, or a Philippine bank transfer, the relevant payment provider may share transaction confirmation data with 999ph for the purpose of crediting or debiting your account balance.
• Identity verification services — During the KYC process, 999ph may use third-party identity verification services to verify the authenticity of the documents you submit. These services process your identity documents on our behalf and return a verification result to 999ph.
• Fraud prevention services — 999ph uses third-party fraud detection systems that may collect and analyse technical data about your device and behaviour on the platform in order to detect and prevent fraudulent activity.

5 How We Use Your Data

999ph uses the personal data we collect for the following specific purposes, each of which has a defined lawful basis under the Philippine Data Privacy Act:

• Account registration and management — To create and maintain your 999ph account, verify your identity, and ensure that only eligible players aged 21 and above in the Philippines can access our services.
• Payment processing — To process deposits and withdrawals in Philippine Peso (₱) via GCash, Maya, or Philippine bank transfer, and to maintain accurate records of all financial transactions on your account.
• KYC and regulatory compliance — To verify your identity and age before processing your first withdrawal and whenever required by applicable law, and to meet our anti-money laundering obligations.
• Platform security and fraud prevention — To detect, investigate, and prevent fraudulent transactions, account abuse, money laundering, and other prohibited conduct as described in the 999ph Terms and Conditions.
• Responsible gaming monitoring — To monitor player gaming patterns and identify players who may be at risk of problem gambling, in order to offer appropriate support tools such as deposit limits, session reminders, and self-exclusion.
• Customer support — To respond to your enquiries, resolve disputes, and maintain records of communications for quality assurance purposes.
• Platform improvement — To analyse aggregated and anonymised usage data to understand how Filipino players use the 999ph platform and to improve our products, features, and user experience.
• Marketing communications — Where you have given your consent, to send you information about 999ph promotions, bonuses, and new features that may be of interest to you. You may withdraw this consent at any time through your account settings.

999ph does not use automated decision-making or profiling that produces legal or similarly significant effects on players without human review. Our responsible gaming monitoring tools flag accounts for human review by our team, rather than automatically restricting accounts without human oversight.

6 Data Sharing

999ph does not sell your personal data to unaffiliated third parties for their own marketing or commercial purposes. We share personal data only in the following limited and defined circumstances:

• Payment service providers — We share the minimum necessary financial data with GCash, Maya, and Philippine banking partners strictly to process your deposit and withdrawal transactions. These providers are contractually bound to use your data only for this purpose.
• Identity verification providers — We share your KYC documents with regulated identity verification service providers to confirm the authenticity of the documents and verify your identity and age. These providers process your data as our data processors under strict contractual controls.
• Fraud detection and security providers — Technical data about your device and platform activity may be shared with fraud prevention technology providers who assist 999ph in detecting and preventing prohibited conduct on the platform.
• Legal and regulatory authorities — 999ph may disclose your personal data to Philippine law enforcement agencies, courts, or regulatory authorities where we are legally required or compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of 999ph, our players, or the public.
• Professional advisers — We may share personal data with our lawyers, accountants, and other professional advisers where strictly necessary for them to provide services to 999ph. All such advisers are bound by professional confidentiality obligations.

7 Data Retention

999ph retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, and to resolve any disputes or enforce our agreements. The specific retention periods applicable to different categories of data are as follows:

• Account and identity data — Retained for the duration of your active 999ph account and for a minimum of five years following account closure, to comply with our anti-money laundering and record-keeping obligations under Philippine law.
• Financial transaction records — All records of deposits and withdrawals in Philippine Peso are retained for a minimum of five years following the date of the transaction, in compliance with applicable Philippine financial regulations.
• KYC verification documents — Retained for the duration of your account and for five years following account closure. Where an account is closed due to confirmed fraudulent activity, KYC records may be retained for a longer period as required by law or regulatory instruction.
• Gaming activity logs — Retained for a minimum of two years for responsible gaming monitoring purposes and for a minimum of five years for compliance and dispute resolution purposes.
• Support communications — Live chat transcripts and email correspondence are retained for two years from the date of the last communication in a given thread.
• Technical and cookie data — Session logs and technical access data are retained for up to 12 months. Cookie data is retained in accordance with the individual cookie lifespans described in Section 9 of this Policy.

When your personal data is no longer required for any of the purposes described above, 999ph will securely delete or anonymise it in accordance with our internal data retention and disposal procedures.

8 Data Security

999ph implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, alteration, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the 999ph platform.
• Encryption of sensitive data fields — including passwords and financial account references — at rest using industry-standard cryptographic algorithms.
• Role-based access controls that restrict access to personal data to only those 999ph staff members who need it to perform their specific job functions.
• Regular internal security audits and penetration testing of the 999ph platform to identify and address potential vulnerabilities before they can be exploited.
• Secure, access-controlled data storage systems with audit logging to detect and investigate any unauthorised access attempts.
• Staff training on data protection obligations and secure data handling practices, conducted on a regular basis.

While 999ph takes all reasonable and practicable steps to protect your personal data, no system connected to the internet can be guaranteed to be completely secure. You also have an important role to play in protecting your account: use a strong, unique password for your 999ph account, never share your login credentials with anyone, and contact 999ph live chat support immediately if you suspect any unauthorised access to your account.

9 Cookies and Tracking Technologies

The 999ph platform uses cookies and similar tracking technologies to operate the platform, improve user experience, and analyse how Filipino players interact with our services. A cookie is a small text file placed on your device by a website. The cookies used by 999ph fall into the following categories:

• Strictly necessary cookies — These cookies are essential for the 999ph platform to function. They enable core features such as keeping you logged in during your session, remembering your responsible gaming settings, and securing your account. These cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies — We use analytics cookies to collect aggregated and anonymised data about how players navigate and use the 999ph platform. This helps us understand which features are most popular among Filipino players and where we can make improvements. Analytics data does not identify you personally.
• Functional cookies — These cookies remember your preferences — such as your preferred language and display settings — so that you do not need to reset them each time you visit 999ph.
• Security and fraud prevention cookies — Used by our fraud detection systems to identify suspicious activity and protect your account from unauthorised access.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will affect your ability to use core features of the 999ph platform, including remaining logged in during your session.

10 Your Rights as a Philippine Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 999ph. You may exercise any of these rights by contacting the 999ph Data Protection Officer through your logged-in account dashboard.

999ph will respond to all verified data subject requests within 15 business days of receipt. We may need to verify your identity before fulfilling a request to ensure we do not disclose or modify personal data in response to an unauthorised request.

11 Minors

The 999ph platform is strictly for adults. The minimum age to register and play on 999ph is 21 years old. 999ph does not knowingly collect personal data from anyone under the age of 21. Our registration process and KYC verification procedures are designed to detect and prevent underage registration.

If you are a parent or guardian and you believe that a person under 21 in your care has provided personal data to 999ph or accessed the platform, please contact our support team via live chat immediately. Upon confirmation, 999ph will close the underage account and securely delete all associated personal data as promptly as practicable.

12 Changes to This Policy

999ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, updates to Philippine data protection law, or improvements to our platform and services. When we make material changes to this Policy, we will update the "Last updated" date shown at the top of this page and, where appropriate, notify registered players via in-platform notification or email.

We encourage you to review this Privacy Policy periodically to stay informed of how 999ph handles your personal data. Your continued use of the 999ph platform after any changes to this Policy have been published constitutes your acknowledgement of the updated version.

If a proposed change to this Policy requires your fresh consent under applicable Philippine law, we will obtain that consent before the change takes effect in relation to your personal data.

13 Contact and Data Protection Officer

If you have questions, concerns, or requests relating to this Privacy Policy or the way 999ph handles your personal data, please contact us through any of the following channels:

• Live Chat — Available 24 hours a day, 7 days a week inside the 999ph platform. This is the fastest way to reach the support team for urgent data-related matters.
• Data Protection Officer (DPO) — Contact details for the 999ph DPO are available inside your logged-in account dashboard. The DPO handles all formal data subject rights requests and privacy complaints.
• Email — You may contact 999ph via email using the address listed in your logged-in account dashboard. Please use the subject line "Data Privacy Request" for all privacy-related enquiries to ensure prompt routing to the DPO.

If you are not satisfied with 999ph's response to a privacy complaint or data subject rights request, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which is the national authority responsible for data privacy oversight in the Philippines.