Privacy Policy — 999ph Casino

1Who We Are and How to Contact Us

999ph Casino ("999ph," "we," "us," or "our") operates the online gaming platform accessible at https://999ph.club. 999ph acts as the personal information controller in respect of the personal data collected through the Platform, as defined under the Philippine Data Privacy Act of 2012 (RA 10173).

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, you may contact our Data Protection Officer (DPO) at:

Email: [email protected]
Website: https://999ph.club

Please include "Data Privacy Request" in the subject line of your email and provide your registered username to help us locate your account and respond promptly.

2Information We Collect

999ph collects the following categories of personal information from registered players and visitors to the Platform:

We do not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where sensitive personal information is collected (such as government ID numbers), it is handled with the heightened protections required under RA 10173.

3How We Collect Your Information

999ph collects personal information through the following means:

• Direct interactions: Information you provide when registering for a 999ph account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs. See Section 7 for more details on cookies.
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from anti-money laundering screening services; payment data from GCash, PayMaya, and banking partners as part of transaction processing.
• Regulatory sources: Information received from PAGCOR or other Philippine government agencies in connection with our regulatory compliance obligations.

4How We Use Your Information

999ph uses your personal information for the following purposes:

• Account management: To create, maintain, and administer your 999ph account, including processing your 999ph login and verifying your identity.
• Service delivery: To provide access to games, process deposits and withdrawals in Philippine Peso, and deliver the features of the Platform.
• KYC and regulatory compliance: To verify your age (21+), identity, and source of funds as required by PAGCOR regulations and Philippine anti-money laundering laws.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct on the Platform.
• Responsible gaming: To monitor gaming behaviour, apply responsible gaming tools (deposit limits, self-exclusion), and identify players who may be at risk of gambling-related harm.
• Customer support: To respond to your queries, complaints, and requests submitted to the 999ph support team.
• Marketing and promotions: To send you information about 999ph bonuses, promotions, and new games, where you have consented to receive such communications. You may opt out at any time.
• Platform improvement: To analyse usage patterns, conduct research, and improve the features, performance, and user experience of the 999ph Platform.
• Legal obligations: To comply with applicable Philippine laws, regulations, court orders, and PAGCOR directives.

5Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 999ph processes your personal information on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms and Conditions you agreed to upon registration — including account management, game delivery, and payment processing.
• Legal obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where you have given your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6Sharing and Disclosure of Your Information

999ph does not sell your personal information to third parties. We may share your information with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya/Maya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for the purpose of processing deposits and withdrawals.
• KYC and identity verification providers: Third-party services engaged to verify your identity and age in compliance with PAGCOR requirements.
• Anti-fraud and AML screening services: Providers engaged to screen transactions and player activity for money laundering and fraud indicators.
• Game software providers: Licensed game studios whose titles are available on the 999ph Platform, to the extent necessary for game delivery and fairness auditing.
• IT and hosting providers: Cloud infrastructure and technical service providers who host and maintain the 999ph Platform under strict data processing agreements.
• Regulatory authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other Philippine government agencies, where disclosure is required by law or regulatory directive.
• Legal and professional advisers: Lawyers, auditors, and compliance consultants engaged by 999ph, subject to professional confidentiality obligations.

All third-party service providers engaged by 999ph are required to handle your personal information in accordance with the Data Privacy Act and are bound by contractual data processing agreements that restrict their use of your data to the specified purpose.

7Cookies and Tracking Technologies

999ph uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the 999ph website.

• Strictly necessary cookies: Required for the Platform to function, including maintaining your 999ph login session and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and responsible gaming limits.
• Analytics cookies: Help us understand how players use the Platform so we can improve performance and user experience. Data collected is aggregated and anonymised where possible.
• Marketing cookies: Used to deliver relevant promotions and track the effectiveness of our campaigns. These are only set with your consent.

You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use the core features of the 999ph Platform, but some personalisation features may be limited.

8Data Retention

999ph retains your personal information for as long as your account is active and for a period thereafter as required by applicable law and regulatory obligations. Specifically:

• Account and transaction records: Retained for a minimum of five (5) years after account closure, as required under the Anti-Money Laundering Act and PAGCOR regulations.
• KYC verification documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the interaction.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter for compliance documentation purposes.
• Technical and usage logs: Retained for up to twelve (12) months, unless required for longer periods for fraud investigation or legal proceedings.

When personal information is no longer required for the purposes for which it was collected and no legal retention obligation applies, 999ph will securely delete or anonymise the data.

9Data Security

999ph implements appropriate technical and organisational security measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 999ph Platform;
• Encryption of sensitive data at rest, including financial information and KYC documents;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability scanning;
• Multi-factor authentication for administrative access to systems containing personal data;
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

While 999ph takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your 999ph login credentials and for notifying us immediately if you suspect unauthorised access to your account.

10Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal information held by 999ph:

• Right to be informed: The right to know what personal information we collect, how we use it, and with whom we share it — as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal information we hold about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal information.
• Right to erasure or blocking: The right to request deletion or blocking of your personal information where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to object: The right to object to the processing of your personal information for direct marketing purposes or on grounds relating to your particular situation.
• Right to data portability: The right to receive your personal information in a structured, commonly used format where technically feasible.
• Right to damages: The right to claim compensation for damages suffered as a result of inaccurate, incomplete, outdated, or unlawfully obtained personal information.
• Right to file a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Privacy Request." We will respond within the timeframe required by the Data Privacy Act.

11Cross-Border Data Transfers

Some of 999ph's service providers — including cloud hosting, KYC verification, and game software providers — may be located outside the Philippines. Where personal information is transferred to recipients in other countries, 999ph ensures that appropriate safeguards are in place, including contractual data processing agreements that require the recipient to provide a level of data protection equivalent to that required under Philippine law.

By using the 999ph Platform, you acknowledge that your personal information may be transferred to and processed in countries outside the Philippines, subject to the safeguards described above.

12Children's Privacy

The 999ph Platform is strictly intended for individuals who are twenty-one (21) years of age or older, in accordance with Philippine gaming regulations. 999ph does not knowingly collect personal information from individuals under the age of 21. If we become aware that personal information has been collected from a person under 21, we will take immediate steps to delete that information and close the associated account. If you believe a minor has registered on the Platform, please contact us immediately at [email protected].

13Changes to This Privacy Policy

999ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this page will be revised accordingly.

Your continued use of the 999ph Platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed of how we protect your personal information.

14Complaints and the National Privacy Commission

If you have a concern about how 999ph handles your personal information, we encourage you to contact our Data Protection Officer in the first instance at [email protected]. We are committed to resolving all data privacy concerns promptly and fairly.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the independent regulatory body responsible for enforcing the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is available through official Philippine government channels.

999ph is registered with the National Privacy Commission as required under RA 10173 and its implementing rules and regulations.