999phl Privacy Policy
At 999phl, your privacy matters as much as your gaming experience. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use it, and the rights you have as a player under Philippine law.
This Privacy Policy ("Policy") describes how 999phl ("Company," "we," "us," or "our"), the operator of the online gaming platform at 999phl.one, collects, uses, stores, shares, and protects the personal information of users ("you," "Player," or "Data Subject") who access or use the 999phl platform. This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines. By using the 999phl platform, you consent to the data practices described in this Policy.
1 Overview and Scope
This Policy applies to all personal information collected by 999phl in connection with your use of the 999phl website, mobile-optimized platform, customer support channels, and any other services operated by 999phl. It covers information collected from players located in the Philippines, including those accessing the platform from Metro Manila, Cebu, Davao, Quezon City, Makati, and all other regions of the country.
This Policy should be read together with our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated herein by reference. If you do not agree with the terms of this Policy, you must discontinue use of the 999phl platform immediately.
2 Data Controller
For the purposes of the Philippine Data Privacy Act of 2012, 999phl acts as the Personal Information Controller (PIC) with respect to the personal data you provide when using the 999phl platform. As PIC, 999phl determines the purposes and means of processing your personal information and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.
999phl has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data privacy laws. You may contact the DPO at any time regarding data privacy concerns using the contact details provided in Section 15 of this Policy.
3 Personal Data We Collect
999phl collects the following categories of personal data from players and platform visitors. The specific data collected depends on how you interact with the 999phl platform:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government-issued ID number | Registration & KYC verification |
| Contact Data | Email address, mobile number, residential address | Registration & account updates |
| Financial Data | GCash number, PayMaya account, BPI/BDO/Metrobank account details, transaction history | Deposits & withdrawals |
| Gaming Data | Game history, wager amounts, win/loss records, session duration, bonus usage | During platform use |
| Technical Data | IP address, device type, browser type, operating system, cookies, session tokens | Automatically on site visit |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | When you contact support |
| Verification Documents | Scanned copies of passport, SSS ID, driver's license, proof of address | KYC verification process |
4 How We Collect Your Data
999phl collects personal data through the following means:
- Direct interactions: Information you provide when registering a 999phl account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
- Automated technologies: Technical data collected automatically when you visit the 999phl website, including cookies, web beacons, server logs, and similar tracking technologies. See Section 10 for full details on our cookie practices.
- Third-party payment providers: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors when you make deposits or request withdrawals.
- Identity verification services: Data received from third-party KYC and identity verification providers engaged by 999phl to confirm the identity and age of players.
- Fraud prevention and AML services: Data received from third-party anti-fraud and anti-money laundering screening services used to protect the integrity of the 999phl platform.
- Publicly available sources: In limited circumstances, 999phl may supplement your profile with information from publicly available sources, such as government databases, where permitted by law.
5 Purpose of Processing Your Data
999phl processes your personal data for the following specific, legitimate purposes:
- Account creation and management: To register your 999phl account, verify your identity and age (21+ requirement), and maintain your account in good standing.
- Service delivery: To provide you with access to 999phl games, process your deposits and withdrawals, and deliver the full range of platform features.
- KYC and regulatory compliance: To fulfill our obligations under PAGCOR regulations, Philippine anti-money laundering laws (AMLA), and the Data Privacy Act of 2012.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other illegal conduct on the 999phl platform.
- Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
- Promotions and bonuses: To administer bonuses, free credits, cashback offers, and other promotional campaigns available to 999phl players.
- Platform improvement: To analyze usage patterns, conduct research, and improve the features, performance, and user experience of the 999phl platform.
- Responsible gaming: To monitor gaming behavior, identify signs of problem gambling, and administer responsible gaming tools such as deposit limits and self-exclusion.
- Marketing communications: To send you relevant promotional offers and platform updates, where you have provided consent to receive such communications. You may opt out at any time.
- Legal proceedings: To establish, exercise, or defend legal claims involving 999phl.
6 Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012, 999phl processes your personal data on the following legal bases:
- Contractual necessity: Processing is necessary to perform our contract with you – specifically, to operate your 999phl account, process transactions, and deliver gaming services.
- Legal obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012.
- Legitimate interests: Processing is necessary for 999phl's legitimate interests in fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and freedoms.
- Consent: For certain processing activities, such as marketing communications and non-essential cookies, 999phl relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
7 Sharing Your Personal Data
999phl does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:
- Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely to process your deposits and withdrawals.
- Game software providers: Third-party game developers and platform providers whose games are available on 999phl, to the extent necessary to deliver gaming services and maintain game integrity.
- KYC and identity verification providers: Third-party services engaged to verify your identity, age, and the authenticity of documents submitted during the KYC process.
- Fraud prevention and AML service providers: Third-party screening services used to detect and prevent fraud, money laundering, and other illegal activity.
- Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where required by law or regulatory obligation.
- Legal and professional advisors: Lawyers, auditors, and other professional advisors engaged by 999phl in connection with legal proceedings or compliance activities.
- Business successors: In the event of a merger, acquisition, or sale of all or part of 999phl's business, your data may be transferred to the acquiring entity, subject to equivalent privacy protections.
8 Data Retention
999phl retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:
- Account data: Retained for the duration of your active account relationship with 999phl, plus a minimum of five (5) years following account closure, as required by PAGCOR and AMLA regulations.
- Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with Philippine anti-money laundering requirements.
- KYC documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
- Customer support records: Retained for up to three (3) years from the date of the last interaction, unless a longer period is required for legal proceedings.
- Marketing data: Retained until you withdraw your consent to receive marketing communications, after which it will be deleted or anonymized within a reasonable period.
- Technical and log data: Retained for up to twelve (12) months for security and fraud prevention purposes.
Upon expiry of the applicable retention period, 999phl will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.
9 Data Security
999phl implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the 999phl platform.
- Encryption of sensitive data at rest, including financial account details and government ID information.
- Role-based access controls ensuring that only authorized 999phl personnel can access personal data, and only to the extent required for their specific job functions.
- Regular security audits, vulnerability assessments, and penetration testing of the 999phl platform infrastructure.
- Multi-factor authentication requirements for administrative access to systems containing personal data.
- Comprehensive staff training on data privacy obligations and secure data handling practices.
- Incident response procedures to detect, contain, and report personal data breaches in accordance with NPC notification requirements.
10 Cookies and Tracking Technologies
The 999phl platform uses cookies and similar tracking technologies to enhance your browsing experience, analyze platform usage, and support security functions. A cookie is a small text file placed on your device when you visit a website.
999phl uses the following types of cookies:
- Strictly necessary cookies: Essential for the operation of the 999phl platform, including maintaining your login session and enabling core security features. These cookies cannot be disabled.
- Performance and analytics cookies: Used to collect anonymized information about how players use the 999phl platform, helping us identify areas for improvement. These cookies do not identify you personally.
- Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalized experience.
- Security cookies: Used to detect and prevent fraudulent activity, unauthorized access attempts, and other security threats on the 999phl platform.
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 999phl platform. For strictly necessary and security cookies, disabling them may prevent you from accessing your account or using certain features.
11 Your Data Privacy Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 999phl. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15.
Your Rights Under RA 10173
As a 999phl player, the Philippine Data Privacy Act gives you meaningful control over your personal information.
Right to Access
Request a copy of the personal data 999phl holds about you, along with information on how it is being processed.
Right to Rectification
Request correction of any inaccurate or incomplete personal data we hold about you without undue delay.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Right to Object
Object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
Right to Data Portability
Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller where technically feasible.
Right to Lodge a Complaint
File a complaint with the National Privacy Commission (NPC) of the Philippines if you believe 999phl has violated your data privacy rights.
12 Minors and Age Restriction
The 999phl platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling regulations. 999phl does not knowingly collect personal data from individuals under the age of 21.
If 999phl discovers or has reason to believe that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the associated personal data, and forfeit any funds held in the account. Parents and guardians who believe their child has registered on the 999phl platform are encouraged to contact us immediately using the details in Section 15.
13 Cross-Border Data Transfers
In certain circumstances, 999phl may transfer your personal data to recipients located outside the Philippines – for example, to third-party game software providers or technology infrastructure providers whose servers are located in other countries.
Where such transfers occur, 999phl ensures that appropriate safeguards are in place to protect your personal data in accordance with the requirements of the Philippine Data Privacy Act of 2012. These safeguards may include:
- Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under Philippine law.
- Transfers to countries that have been assessed as providing an adequate level of data protection.
- Other legally recognized transfer mechanisms as approved by the National Privacy Commission.
You may request further information about the safeguards applicable to cross-border transfers of your personal data by contacting our Data Protection Officer.
14 Updates to This Privacy Policy
999phl reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via email or an in-platform notification.
We encourage you to review this Policy periodically to stay informed about how 999phl protects your personal data. Your continued use of the 999phl platform following the posting of any changes constitutes your acceptance of the revised Policy.
15 Contact Our Data Protection Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 999phl, please contact our Data Protection Officer. We aim to respond to all data privacy inquiries within five (5) business days.
Data Protection Officer – 999phl
Email: [email protected]
Support Email: [email protected]
Response Time: Within 5 business days for data privacy requests
How 999phl Keeps Your Data Safe
Privacy at 999phl isn't just a legal requirement – it's a core part of how we operate and earn your trust as a player.
256-Bit SSL Encryption
Every piece of data transmitted between your device and the 999phl platform is protected by bank-grade 256-bit SSL encryption. Your login credentials, financial details, and personal information are always secured in transit.
Strict KYC Verification
999phl's KYC process protects all players by ensuring every account belongs to a verified, eligible individual. This prevents identity theft, unauthorized account use, and underage gambling on the platform.
RA 10173 Compliant
999phl's data practices are fully aligned with the Philippine Data Privacy Act of 2012. We work closely with our Data Protection Officer to ensure ongoing compliance with NPC regulations and guidelines.
No Data Selling
999phl never sells, rents, or trades your personal information to third parties for marketing purposes. Your data stays within the 999phl ecosystem and is shared only where strictly necessary for service delivery.
You're in Control
999phl gives you meaningful control over your data. Access, correct, delete, or port your information at any time by contacting our Data Protection Officer. Opt out of marketing communications with a single request.
Breach Notification
In the unlikely event of a data breach, 999phl follows strict NPC-mandated notification procedures. Affected players and the National Privacy Commission are notified promptly and transparently.
Play Safely and Privately at 999phl
Your data is protected, your identity is verified, and your gaming experience is secure. Join thousands of Filipino players who trust 999phl every day.
21+ only. Please play responsibly. PAGCOR regulated. Your data is protected under RA 10173.