999phl Privacy Policy

1. Introduction and Scope

This Privacy Policy (the "Policy") governs the collection, use, storage, disclosure, and protection of personal information by 999phl, a PAGCOR-licensed online gaming platform operating in the Philippines. This Policy applies to all users of the 999phl website, mobile applications, and related services (collectively, the "Platform"). By creating an account, depositing funds, or using any feature of the Platform, you acknowledge that you have read, understood, and consent to the practices described in this Policy.

999phl is committed to protecting your privacy and complying with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules and regulations, and all applicable PAGCOR directives regarding player data protection. We implement appropriate technical, organizational, and administrative measures to safeguard personal information against unauthorized access, disclosure, alteration, or destruction.

This Policy should be read in conjunction with our Terms and Conditions, which govern your overall relationship with 999phl. If you have questions or concerns about how we handle your personal information, please contact our Data Protection Officer using the contact details provided at the end of this Policy.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a 999phl account, we collect personal information that you provide directly to us, including but not limited to:

• Identity Information: Full legal name, date of birth, nationality, gender, and government-issued identification numbers (National ID, UMID, Driver's License, Passport)
• Contact Information: Email address, mobile phone number, residential address, postal code, and city/province
• Account Credentials: Username, password, security questions and answers, and account preferences
• Financial Information: Payment method details (GCash mobile number, Maya account, bank account numbers), transaction history, deposit and withdrawal records
• Verification Documents: Scanned copies or photographs of government-issued IDs, proof of address (utility bills, bank statements), selfie verification photos, and source of funds documentation
• Communication Records: Customer support inquiries, chat transcripts, emails, phone call recordings, and feedback submissions

2.2 Information Collected Automatically

When you access and use the 999phl Platform, we automatically collect certain technical and usage information, including:

• Device Information: IP address, device type and model, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address), and mobile network information
• Usage Data: Pages visited, games played, betting patterns, session duration, click behavior, navigation paths, referral sources, and feature interactions
• Location Data: Approximate geographic location derived from IP address to verify compliance with jurisdictional restrictions
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, pixel tags, and similar technologies to maintain sessions, remember preferences, and analyze Platform performance
• Transaction Metadata: Date and time of deposits and withdrawals, transaction amounts, payment method used, processing times, and transaction status

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: GCash, Maya, GrabPay, Philippine banks, and other payment service providers may share transaction confirmation data and fraud detection information
• Identity Verification Services: Third-party KYC and AML verification providers may provide identity authentication results and risk assessment scores
• Fraud Prevention Networks: Industry databases and consortiums that share information about fraudulent accounts, suspicious activity, and blacklisted individuals
• Game Providers: Software suppliers (Evolution Gaming, Pragmatic Play, Microgaming, BBIN) may share gameplay data, RTP statistics, and technical performance logs

3. How We Use Your Information

999phl uses your personal information for the following legitimate purposes:

3.1 Account Management and Service Provision

• Creating and maintaining your 999phl account
• Processing deposits, withdrawals, and other financial transactions
• Enabling gameplay across casino, sports betting, slots, bingo, and sabong categories
• Managing bonuses, promotions, and loyalty rewards
• Providing customer support and responding to inquiries
• Communicating account updates, transaction confirmations, and promotional offers

3.2 Regulatory Compliance and Legal Obligations

• Verifying your identity and age to prevent underage gambling
• Complying with PAGCOR licensing requirements and reporting obligations
• Conducting anti-money laundering (AML) and know-your-customer (KYC) checks
• Detecting and preventing fraud, collusion, and other prohibited activities
• Responding to lawful requests from government authorities, regulators, and law enforcement
• Maintaining records as required by applicable laws and regulations

3.3 Platform Improvement and Security

• Analyzing usage patterns to improve Platform functionality and user experience
• Conducting research and development for new features and services
• Monitoring and securing the Platform against cyber attacks, unauthorized access, and technical vulnerabilities
• Detecting and preventing system abuse, bot activity, and automated gameplay
• Generating aggregated, anonymized statistics for business analysis

3.4 Marketing and Communications

• Sending promotional emails, SMS messages, and push notifications about bonuses, tournaments, and special offers (with your consent)
• Personalizing content and recommendations based on your preferences and gaming history
• Conducting surveys and requesting feedback to improve our services
• Administering contests, sweepstakes, and loyalty programs

4. Legal Basis for Processing Personal Data

Under the Philippine Data Privacy Act and international data protection standards, 999phl processes your personal information based on the following legal grounds:

• Consent: You provide explicit consent during account registration and when accepting this Privacy Policy. You may withdraw consent at any time, subject to legal and contractual restrictions.
• Contractual Necessity: Processing is necessary to perform our obligations under the Terms and Conditions, including providing gaming services, processing transactions, and managing your account.
• Legal Obligation: Processing is required to comply with Philippine laws, PAGCOR regulations, AML requirements, tax obligations, and other legal mandates.
• Legitimate Interests: Processing serves our legitimate business interests, such as fraud prevention, security, Platform improvement, and customer service, provided such interests do not override your fundamental rights and freedoms.

5. Data Sharing and Disclosure

5.1 When We Share Your Information

999phl does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information in the following circumstances:

Recipient Category	Purpose of Sharing	Data Shared
Payment Processors	To process deposits and withdrawals	Name, payment method details, transaction amounts
Game Providers	To enable gameplay and record results	Username, gameplay data, betting history
KYC/AML Verification Services	To verify identity and prevent fraud	ID documents, name, date of birth, address
PAGCOR and Regulators	To comply with licensing and reporting requirements	All information as required by law
Law Enforcement	To respond to lawful requests and court orders	Information relevant to legal proceedings
IT Service Providers	To maintain Platform infrastructure and security	Technical data, usage logs, system information
Customer Support Tools	To provide efficient customer service	Contact information, support inquiries, chat transcripts

5.2 Third-Party Service Providers

We engage trusted third-party service providers to support our operations, including hosting providers, payment gateways, email service providers, analytics tools, and security consultants. These providers are contractually obligated to process personal information only as instructed by 999phl, implement appropriate security measures, and not use your data for their own purposes. We conduct due diligence on all service providers to ensure they meet our data protection standards.

5.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity. We will notify you via email and prominent notice on the Platform if your information becomes subject to a different privacy policy.

6. Data Security Measures

999phl implements comprehensive security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data stored in our databases is encrypted at rest.
• Access Controls: Personal information is accessible only to authorized personnel who require access to perform their job functions. Access is logged and monitored.
• Authentication: User accounts are protected by strong password requirements and optional two-factor authentication (2FA).
• Network Security: Our infrastructure is protected by firewalls, intrusion detection systems, DDoS mitigation, and regular vulnerability assessments.
• Secure Data Centers: Personal information is stored in ISO-certified data centers with physical security controls, redundant power supplies, and disaster recovery capabilities.
• Regular Audits: We conduct periodic security audits, penetration testing, and compliance reviews to identify and remediate vulnerabilities.
• Employee Training: All staff members handling personal data receive training on data protection principles, security best practices, and incident response procedures.

Despite our best efforts, no security system is impenetrable. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorized access to your account.

7. Data Retention and Deletion

7.1 Retention Periods

999phl retains your personal information for as long as necessary to fulfill the purposes outlined in this Policy and to comply with legal, regulatory, and contractual obligations. Specific retention periods include:

• Active Accounts: Personal information is retained for the duration of your account's active status and for a period thereafter to address potential disputes or regulatory inquiries.
• Transaction Records: Financial transaction data is retained for a minimum of five (5) years as required by Philippine AML regulations and tax laws.
• KYC Documents: Identification documents and verification records are retained for at least five (5) years after account closure as mandated by PAGCOR.
• Communication Records: Customer support interactions and correspondence are retained for two (2) years for quality assurance and dispute resolution purposes.
• Marketing Data: If you opt out of marketing communications, your contact information is retained on a suppression list to ensure we do not inadvertently contact you again.

7.2 Account Closure and Data Deletion

You may request account closure at any time by contacting customer support. Upon closure, your account will be deactivated, and you will no longer be able to access Platform services. However, certain information will be retained as required by law or for legitimate business purposes, including compliance with regulatory obligations, resolution of disputes, prevention of fraud, and enforcement of our Terms and Conditions.

After the applicable retention period expires, personal information will be securely deleted or anonymized such that it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical analysis and research purposes.

8. Your Privacy Rights

Under Philippine data protection law, you have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request a copy of the personal information we hold about you. You can view most of your account information by logging into your 999phl account. For a comprehensive data export, contact our Data Protection Officer.

8.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings. For changes to verified identity information, you may need to submit updated documentation.

8.3 Right to Erasure

You may request deletion of your personal information, subject to certain exceptions. We may be required to retain information to comply with legal obligations, resolve disputes, prevent fraud, or enforce our agreements.

8.4 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes. You may also object to processing based on legitimate interests, though we may continue processing if we have compelling grounds that override your interests.

8.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another service provider where technically feasible.

8.6 Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

8.7 Right to Lodge a Complaint

If you believe we have violated your privacy rights, you have the right to lodge a complaint with the Philippine National Privacy Commission (NPC). However, we encourage you to contact us first so we can address your concerns directly.

To exercise any of these rights, please contact our Data Protection Officer using the contact information provided in Section 12 of this Policy. We will respond to your request within the timeframes required by law, typically within fifteen (15) to thirty (30) days.

9. Cookies and Tracking Technologies

9.1 Types of Cookies We Use

999phl uses cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device that allow us to recognize you and remember your preferences. We use the following types of cookies:

• Essential Cookies: Required for the Platform to function properly. These cookies enable account login, session management, security features, and basic navigation. They cannot be disabled.
• Performance Cookies: Collect information about how you use the Platform, including pages visited, error messages encountered, and loading times. This helps us improve Platform performance.
• Functionality Cookies: Remember your preferences (language, currency, display settings) and enable personalized features.
• Analytics Cookies: Provide statistics on Platform usage, user demographics, and traffic sources. We use Google Analytics and similar services to analyze aggregated usage data.
• Advertising Cookies: Used to deliver relevant advertisements and measure campaign effectiveness. These cookies may track your browsing activity across multiple websites.

9.2 Managing Cookie Preferences

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though doing so may affect Platform functionality. You can also opt out of analytics cookies through your account settings or by using browser extensions like Google Analytics Opt-out Add-on.

Please note that if you disable essential cookies, you may not be able to access certain features of the Platform, including account login and gameplay.

10. Children's Privacy

The 999phl Platform is intended exclusively for individuals aged 21 years and older. We do not knowingly collect personal information from minors under the age of 21. If we discover that we have inadvertently collected information from a minor, we will immediately delete such information and close the associated account.

Parents or guardians who believe their child has provided personal information to 999phl should contact us immediately. We take underage gambling prevention seriously and implement strict age verification procedures, including ID document checks and database cross-referencing.

11. International Data Transfers

Your personal information is primarily stored and processed in data centers located in the Philippines. However, some of our service providers and technology partners may be located in other countries. When we transfer personal information outside the Philippines, we ensure that adequate safeguards are in place to protect your data, including:

• Standard contractual clauses approved by data protection authorities
• Verification that the recipient country has adequate data protection laws
• Implementation of technical and organizational security measures
• Obtaining your explicit consent where required by law

By using the 999phl Platform, you consent to the transfer of your information to countries outside the Philippines under the conditions described in this Policy.

12. Changes to This Privacy Policy

999phl reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. We will notify you of material changes by posting the updated Policy on the Platform with a new "Last Updated" date and by sending an email to the address associated with your account.

Your continued use of the Platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this Policy periodically to stay informed about how we protect your information.

13. Contact Information and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact our Data Protection Officer:

• Email: [email protected]
• Mailing Address: 999phl Data Protection Officer, [Business Address], Philippines
• Customer Support: Available 24/7 via live chat on the Platform

For regulatory complaints or concerns about our compliance with Philippine data protection laws, you may contact the National Privacy Commission:

• National Privacy Commission
• 5th Floor, Philippine International Convention Center, Vicente Sotto Street, Pasay City, Philippines
• Email: [email protected]
• Website: www.privacy.gov.ph