Privacy Policy — How 999php Protects Your Information

1. Introduction and Scope

This Privacy Policy applies to all users (the "User," "Player," "Member," or "you") of the 999php online casino platform. It governs the collection, processing, storage, and disclosure of personal information provided by you or collected through your use of our services, including:

• Account registration and verification processes;
• Deposits, withdrawals, and payment transactions;
• Gameplay activity across slots, live dealer games, sports betting, and other gaming products;
• Communications with customer support and marketing interactions;
• Website usage data collected through cookies, analytics, and tracking technologies;
• Compliance with anti-money laundering (AML), know-your-customer (KYC), and regulatory obligations.

999php operates under Philippine gaming regulations and is subject to oversight by the Philippine Amusement and Gaming Corporation (PAGCOR). We comply with applicable Philippine data protection laws, including the Data Privacy Act of 2012 (Republic Act No. 10173), and adhere to international best practices for data security and privacy protection.

This Privacy Policy should be read in conjunction with our Terms & Conditions, Responsible Gaming Policy, Cookie Policy, and any other legal notices posted on the Platform. By creating an account or using our services, you acknowledge that you have read, understood, and agree to the data practices outlined in this Privacy Policy.

2. Information We Collect

999php collects several categories of personal information to provide our services, comply with legal obligations, and enhance user experience. The types of information we collect include:

2.1 Information You Provide Directly

When you register for a 999php account, verify your identity, make deposits or withdrawals, or contact customer support, you provide us with personal information, including:

• Account Registration Data: Full legal name, date of birth, gender, email address, mobile phone number, residential address, postal code, country of residence, citizenship, preferred currency, chosen username, and account password;
• Identity Verification Documents: Copies of government-issued identification (Philippine passport, driver's license, national ID, voter registration card), proof of address documents (utility bills, bank statements, government correspondence), selfies or photographs for identity verification, and video verification footage if requested for enhanced due diligence;
• Financial Information: Payment method details including bank account numbers, GCash or PayMaya account information, cryptocurrency wallet addresses, payment card details (credit/debit card number, expiration date, CVV for one-time verification only — we do not store full card details), transaction history, deposit and withdrawal records, and source of funds documentation;
• Communications: Correspondence with customer support via live chat, email, or phone, including chat transcripts, email messages, support tickets, feedback forms, and any other voluntary communications you send to us;
• Marketing Preferences: Opt-in consent for promotional emails, SMS messages, push notifications, and marketing communications, as well as preferences for bonus offers and personalized promotions.

2.2 Information Collected Automatically

When you access the 999php Platform, we automatically collect technical and usage information through cookies, web beacons, and similar tracking technologies:

• Device Information: Device type (desktop, mobile, tablet), operating system and version, browser type and version, screen resolution, device identifiers (IMEI, advertising ID), IP address, and hardware specifications;
• Usage Data: Pages visited, games played, time spent on each page or game, click-through rates, navigation paths, referring URLs, exit pages, session duration, frequency of visits, search queries entered on the Platform, and interaction with promotional banners or offers;
• Gameplay Information: Bets placed, bet amounts, game outcomes, win/loss records, bonus usage, wagering progress, game preferences, favorite games, and statistical gameplay patterns used for fraud detection and responsible gaming monitoring;
• Location Data: Approximate geolocation derived from IP address to verify compliance with jurisdictional restrictions and ensure you are accessing the Platform from a permitted location. We do not collect precise GPS location data unless explicitly authorized by you through mobile device permissions;
• Transaction Data: Automated logging of all financial transactions including deposits, withdrawals, bonus credits, bet settlements, and account balance changes, along with timestamps, transaction amounts, payment methods used, and processing status.

2.3 Information from Third Parties

999php may receive personal information from third-party service providers and business partners:

• Payment Processors: Transaction confirmation, payment verification, fraud screening results, and chargeback notifications from GCash, PayMaya, banks, cryptocurrency exchanges, and other payment service providers;
• Identity Verification Services: Verification results, fraud risk scores, and identity validation data from KYC/AML service providers and identity verification platforms;
• Game Providers: Gameplay data, game outcomes, jackpot wins, and technical event logs from third-party game suppliers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and other licensed providers;
• Marketing Partners: If you arrive at 999php through an affiliate link or marketing campaign, we may receive referral information, campaign source data, and attribution tracking parameters;
• Public Databases: Information from publicly accessible sources, government databases, sanctions lists, and politically exposed persons (PEP) registries for compliance screening purposes.

3. How We Use Your Information

999php uses your personal information for the following purposes:

3.1 Account Management and Service Provision

• Creating and maintaining your user account;
• Verifying your identity and age to comply with legal requirements and prevent underage gambling;
• Processing deposits, withdrawals, and payment transactions;
• Providing access to games, sports betting, and other gaming products;
• Tracking gameplay activity, bet history, and account balances;
• Administering bonuses, promotions, loyalty rewards, and tournaments;
• Calculating and distributing winnings;
• Resolving disputes, investigating complaints, and providing customer support.

3.2 Legal Compliance and Regulatory Obligations

• Complying with Philippine gaming regulations and PAGCOR licensing requirements;
• Conducting know-your-customer (KYC) verification and anti-money laundering (AML) screening;
• Detecting and preventing fraud, money laundering, terrorist financing, and other financial crimes;
• Screening against sanctions lists, politically exposed persons (PEP) databases, and law enforcement watchlists;
• Verifying source of funds for large deposits or withdrawals;
• Responding to legal requests, court orders, subpoenas, and government investigations;
• Reporting suspicious transactions to regulatory authorities and law enforcement agencies when required by law;
• Maintaining records for audit purposes and regulatory inspections;
• Enforcing our Terms & Conditions and investigating violations.

3.3 Security and Fraud Prevention

• Monitoring accounts for unusual activity, suspicious betting patterns, or signs of account compromise;
• Detecting collusion, bonus abuse, multiple account creation, and other forms of fraud;
• Implementing security measures such as two-factor authentication, session monitoring, and IP tracking;
• Preventing unauthorized access to user accounts;
• Protecting the Platform from cyberattacks, denial-of-service attacks, hacking attempts, and malware;
• Conducting investigations when fraud or security breaches are suspected;
• Cooperating with law enforcement in cases of criminal activity.

3.4 Responsible Gaming and Player Protection

• Monitoring gameplay behavior for signs of problem gambling;
• Implementing deposit limits, loss limits, session time limits, and cooling-off periods;
• Facilitating self-exclusion requests and voluntary account closures;
• Providing information about responsible gaming resources and support organizations;
• Preventing minors from accessing the Platform through age verification;
• Restricting access for self-excluded players and individuals on exclusion registries.

3.5 Marketing and Personalization

• Sending promotional emails, SMS messages, and push notifications about bonuses, new games, tournaments, and special offers (only if you have opted in to marketing communications);
• Personalizing your experience on the Platform by recommending games based on your preferences and gameplay history;
• Analyzing user behavior to improve our products, services, and Platform functionality;
• Conducting market research, surveys, and customer satisfaction studies;
• Displaying targeted advertisements and promotional banners on the Platform;
• Managing loyalty programs, VIP tiers, and personalized rewards.

3.6 Platform Improvement and Analytics

• Analyzing website traffic, user behavior, and engagement metrics to improve Platform design and functionality;
• Identifying technical issues, bugs, and performance bottlenecks;
• Testing new features, games, and promotional campaigns;
• Conducting A/B testing to optimize user experience;
• Generating anonymized and aggregated statistics for business intelligence purposes;
• Improving customer support processes and response times.

4. Legal Basis for Processing

Under Philippine data protection law and international privacy standards, 999php processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms & Conditions) and to provide the gaming services you requested. This includes account creation, payment processing, gameplay activity, and customer support;
• Legal Obligation: Processing is required to comply with legal and regulatory obligations imposed by Philippine law, PAGCOR regulations, anti-money laundering laws, tax reporting requirements, and law enforcement requests;
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security monitoring, platform improvement, and internal analytics, provided these interests do not override your fundamental privacy rights;
• Consent: For marketing communications, cookies, personalized advertising, and other optional processing activities, we rely on your explicit consent. You may withdraw consent at any time through your account settings or by contacting our Data Protection Officer;
• Vital Interests: In rare cases, processing may be necessary to protect your vital interests or those of another person (e.g., if we need to report suspected criminal activity to law enforcement to prevent harm).

5. Data Sharing and Disclosure

999php does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients:

5.1 Service Providers and Business Partners

• Payment Processors: GCash, PayMaya, banks, cryptocurrency exchanges, and other payment service providers that process deposits and withdrawals on your behalf;
• Identity Verification Services: KYC/AML service providers that verify your identity, screen against sanctions lists, and conduct fraud checks;
• Game Providers: Third-party game suppliers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, etc.) that deliver casino games, live dealer tables, and sports betting platforms. Game providers may receive limited information such as username, gameplay activity, and bet history;
• Cloud Hosting Providers: Data centers and cloud infrastructure providers that host our servers and databases;
• Customer Support Platforms: Live chat software, ticketing systems, and communication tools used to provide customer support;
• Marketing and Analytics Services: Email marketing platforms, SMS gateways, analytics tools (Google Analytics, tracking pixels), and advertising networks (only for users who have consented to marketing);
• Cybersecurity and Fraud Prevention Services: Security monitoring tools, fraud detection platforms, and risk assessment services that help protect the Platform and users from fraudulent activity.

All third-party service providers are contractually obligated to protect your personal information, use it only for the purposes specified by 999php, and comply with applicable data protection laws.

5.2 Regulatory Authorities and Law Enforcement

We may disclose your personal information to regulatory bodies, law enforcement agencies, and government authorities when required by law or when we have a good-faith belief that disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or government requests;
• Report suspicious transactions or potential money laundering activity to PAGCOR or the Anti-Money Laundering Council (AMLC);
• Respond to law enforcement investigations related to fraud, cybercrime, or other illegal activity;
• Enforce our Terms & Conditions and protect the rights, property, or safety of 999php, our users, or the public;
• Prevent or investigate security threats, illegal gambling, underage gambling, or other violations of law.

5.3 Business Transfers and Corporate Transactions

If 999php undergoes a merger, acquisition, sale of assets, bankruptcy, or other corporate restructuring, your personal information may be transferred to the acquiring entity or successor company. In such cases, we will notify you via email or prominent notice on the Platform, and the acquiring entity will be bound by the privacy commitments outlined in this Privacy Policy unless you consent to a new policy.

5.4 With Your Consent

We may share your information with third parties not described in this Privacy Policy if you provide explicit consent for such disclosure. For example, if you authorize us to share your information with a specific partner for a promotional campaign or third-party service integration, we will do so only with your informed consent.

6. Data Security Measures

999php takes data security seriously and implements industry-standard technical, administrative, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS encryption. Sensitive personal information stored in our databases is encrypted at rest using AES-256 encryption;
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis. Employees and contractors with access to personal information are subject to confidentiality agreements and data protection training;
• Secure Authentication: User accounts are protected by strong password requirements and optional two-factor authentication (2FA). We monitor login attempts for suspicious activity and implement account lockout mechanisms to prevent brute-force attacks;
• Firewall and Intrusion Detection: Our servers are protected by enterprise-grade firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) to defend against cyberattacks;
• Regular Security Audits: We conduct regular security audits, penetration testing, and vulnerability assessments performed by independent security firms to identify and remediate potential weaknesses;
• Data Backup and Disaster Recovery: Regular backups of user data are stored in secure, geographically distributed data centers with disaster recovery protocols to prevent data loss;
• Payment Security: Payment card information is processed through PCI-DSS compliant payment gateways. We do not store full credit card numbers or CVV codes on our servers;
• Monitoring and Logging: All system activity, data access, and security events are logged and monitored in real-time. Anomalies and suspicious activity trigger automatic alerts for investigation.

Despite our best efforts, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information using commercially reasonable means, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

7. Data Retention

999php retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, and contractual obligations:

• Active Accounts: While your account is active, we retain your personal information to provide services, process transactions, and maintain your account history;
• Closed Accounts: If you close your account or request account deletion, we will retain certain personal information for a period of five (5) years (or longer if required by law) to comply with regulatory obligations, resolve disputes, prevent fraud, and enforce our Terms & Conditions;
• Transaction Records: Financial transaction records, including deposits, withdrawals, and bet history, are retained for a minimum of seven (7) years as required by Philippine anti-money laundering regulations and tax laws;
• Identity Verification Documents: Copies of government-issued IDs and verification documents are retained for the duration of the business relationship and for seven (7) years after account closure for compliance purposes;
• Marketing Data: If you opt out of marketing communications, we will retain your email address or phone number on a suppression list to ensure you do not receive future marketing messages. This data is retained indefinitely unless you request complete deletion;
• Legal and Regulatory Requirements: Where we are required by law to retain data for longer periods (e.g., for tax audits, ongoing litigation, or regulatory investigations), we will retain your information for the duration required by law.

After the applicable retention period expires, personal information will be securely deleted or anonymized so that it can no longer be associated with an individual user. Anonymized data may be retained indefinitely for statistical analysis and research purposes.

8. Cookies and Tracking Technologies

999php uses cookies, web beacons, pixels, and similar tracking technologies to enhance user experience, analyze Platform performance, and deliver personalized content. A cookie is a small text file stored on your device by your web browser when you visit our Platform.

8.1 Types of Cookies We Use

• Essential Cookies: These cookies are necessary for the Platform to function properly. They enable core features such as account login, session management, payment processing, and security measures. Essential cookies cannot be disabled without affecting Platform functionality;
• Performance and Analytics Cookies: These cookies collect information about how you use the Platform, such as pages visited, time spent on pages, and navigation patterns. We use this data to analyze Platform performance and improve user experience. Examples include Google Analytics, Hotjar, and internal analytics tools;
• Functionality Cookies: These cookies remember your preferences and settings, such as language selection, currency preferences, and game favorites, to provide a more personalized experience;
• Marketing and Advertising Cookies: These cookies track your browsing activity across websites to deliver targeted advertisements and measure the effectiveness of marketing campaigns. We may use cookies from third-party advertising networks (e.g., Google Ads, Facebook Pixel) to retarget users who visited the Platform. You can opt out of personalized advertising through your account settings or browser settings.

8.2 Managing Cookies

You can control cookie settings through your web browser. Most browsers allow you to block or delete cookies, but this may affect Platform functionality. You can also opt out of third-party advertising cookies through the following tools:

• Google Ads Settings: https://adssettings.google.com
• Facebook Ad Preferences: https://www.facebook.com/ads/preferences
• Digital Advertising Alliance Opt-Out: https://optout.aboutads.info

For more information about our use of cookies, please refer to our separate Cookie Policy available on the Platform.

9. Your Privacy Rights

Under Philippine data protection law (Data Privacy Act of 2012), you have the following rights regarding your personal information:

9.1 Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within thirty (30) days of your request, subject to identity verification.

9.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information. You can update your account information directly through your account dashboard or by contacting our Data Protection Officer.

9.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal information, subject to legal and regulatory retention requirements. We will honor deletion requests where we are not legally obligated to retain data (e.g., for AML compliance, tax records, or ongoing disputes).

9.4 Right to Restriction of Processing

You have the right to request that we limit how we use your personal information in certain circumstances, such as when you contest the accuracy of data or object to processing for legitimate interests.

9.5 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes. You can opt out of marketing communications at any time by clicking the "unsubscribe" link in emails or adjusting preferences in your account settings.

9.6 Right to Data Portability

You have the right to receive your personal information in a portable format and to request that we transfer it to another service provider, where technically feasible.

9.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., for marketing or cookies), you have the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

9.8 How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection Officer using the contact information provided in Section 13. We will respond to your request within thirty (30) days. If we cannot fulfill your request, we will explain why and provide information about your right to lodge a complaint with the Philippine National Privacy Commission (NPC).

10. Protection of Minors

999php strictly prohibits individuals under the age of twenty-one (21) from creating accounts, depositing funds, or participating in gambling activities. We do not knowingly collect personal information from minors. If we discover that a minor has provided personal information or created an account, we will immediately close the account, void all transactions, and delete all associated personal information.

Parents and guardians are encouraged to monitor their children's online activities. If you believe a minor has accessed the Platform or provided personal information to 999php, please contact us immediately at our Data Protection Officer email so we can take appropriate action.

11. International Data Transfers

999php primarily operates in the Philippines and stores user data on servers located within the Philippines or in secure data centers in jurisdictions with robust data protection laws. However, some of our service providers (e.g., cloud hosting providers, payment processors, game suppliers) may be located outside the Philippines.

When we transfer personal information to countries that do not provide an adequate level of data protection under Philippine law, we implement appropriate safeguards such as:

• Standard contractual clauses approved by data protection authorities;
• Data processing agreements that require third parties to protect personal information in accordance with Philippine and international standards;
• Certification under recognized privacy frameworks (e.g., ISO 27001, SOC 2 compliance);
• Ensuring that service providers maintain equivalent data security measures.

By using the Platform, you consent to the transfer of your personal information to these third countries under the safeguards described above.

12. Changes to This Privacy Policy

999php reserves the right to modify, update, or revise this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will notify you by:

• Posting the updated Privacy Policy on the Platform with a revised "Last Updated" date;
• Sending an email notification to your registered email address;
• Displaying a notification banner or pop-up on the Platform upon your next login.

Your continued use of the Platform after changes are posted constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you must discontinue use of the Platform and may request account closure. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Information and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy, your personal information, or how we process your data, please contact our Data Protection Officer:

• Data Protection Officer: 999php Privacy Team
• Email: [email protected]
• Customer Support (General Inquiries): [email protected]
• Live Chat: Available 24/7 on the Platform

For complaints or concerns about how we handle your personal information, you may also lodge a complaint with the National Privacy Commission (NPC) of the Philippines:

• Website: https://www.privacy.gov.ph
• Email: [email protected]
• Address: 5th Floor, Philippine International Convention Center (PICC), Vicente Sotto St., Pasay City, Philippines