9999phl Privacy Policy — Your Data, Your Rights, Our Responsibilities

This Privacy Policy ("Policy") describes how 9999phl collects, uses, stores, shares, and protects the personal information of players and visitors who use the 9999phl platform at https://9999phl.app (the "Platform"). It applies to all users of 9999phl, whether you are a registered player, a visitor browsing the website, or someone who contacts our support team.

9999phl is committed to protecting your privacy and handling your personal data in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines. Our data handling practices also comply with PAGCOR's licensing requirements for responsible data management by regulated online gaming operators.

By registering an account on 9999phl or continuing to use the platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy. Please read it carefully. If you do not agree with how your data is processed as described here, you should not use the 9999phl platform.

This Policy must be read together with our Terms and Conditions and Responsible Gaming Policy.

For the purposes of the Data Privacy Act and this Policy, 9999phl is the data controller responsible for your personal information collected through the platform. As data controller, 9999phl determines the purposes for which your personal data is processed and the means by which that processing takes place.

9999phl operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to PAGCOR's regulatory oversight, including data-related compliance requirements applicable to licensed online gaming operators in the Philippines.

For data privacy enquiries, rights requests, or complaints, you can contact our Data Protection Officer at: privacy@9999phl.app. All formal data subject requests are acknowledged within 5 business days and resolved within 30 days in accordance with NPC guidelines.

9999phl collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include:

3.1 Registration and Identity Data

• Full legal name
• Date of birth
• Mobile number and email address
• Username and encrypted password
• Residential address (province, city, barangay)

3.2 Identity Verification (KYC) Data

• Government-issued photo ID (e.g., PhilSys ID, Passport, UMID, Driver's Licence) — image and extracted data
• Selfie or facial image submitted for liveness verification where required
• Proof of payment method ownership (e.g., screenshot of GCash account under your name)

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction history including amounts, dates, and payment method references
• Payment method identifiers (e.g., GCash mobile number, last four digits of bank card) — full card or account numbers are not stored by 9999phl
• Bonus and promotional credit history
• Account balance history

3.4 Betting and Gaming Activity Data

• Bets placed including sport, event, market, selection, odds, and stake
• Casino game sessions including game type, duration, bets, and outcomes
• Sabong betting history including arena, fight reference, bet side, and result
• Live streaming session data

3.5 Technical and Device Data

• IP address at login and during active sessions
• Device type, operating system, and browser type
• Session timestamps and duration
• Platform feature usage patterns (used in aggregate, anonymised form for product analytics)

3.6 Communications Data

• Content of support chat conversations, emails, and other communications with the 9999phl team
• Feedback and survey responses where voluntarily submitted

9999phl collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the platform, including IP address, device data, and session information through server logs and standard web analytics tools.
• Cookies and similar technologies: Data collected through cookies, pixel tags, and local storage as described in Section 8 of this Policy.
• Third-party verification providers: Identity and fraud verification data received from authorised KYC service providers when we use automated identity checking tools.
• Payment processors: Transaction confirmation data from GCash, Maya, and other payment processing partners when you make deposits or withdrawals.

9999phl processes your personal data for the following purposes:

Under the Data Privacy Act of 2012, 9999phl processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations under the 9999phl Terms and Conditions — including account management, payment processing, and bet settlement.
• Legal obligation: Processing required to comply with Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act itself.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate product analytics — where these interests are balanced against your privacy rights and do not override them.
• Consent: Processing for direct marketing communications where you have opted in to receive such messages. You may withdraw marketing consent at any time through your account settings or by contacting support.

9999phl does not sell your personal data to any third party. We share your data only in the following limited circumstances:

• Service providers: Companies that help us operate the platform — including payment processors (GCash, Maya), KYC verification providers, cloud hosting providers, customer support tools, and fraud detection services. These providers are contractually bound to process your data only as instructed by 9999phl and to maintain appropriate security standards.
• PAGCOR: 9999phl is required to report certain player and transaction data to PAGCOR under the terms of our gaming licence. This includes data relevant to responsible gaming oversight and licensing compliance.
• Philippine law enforcement and government agencies: Where 9999phl is required by law, court order, or legitimate government request to disclose information — for example, in connection with AML investigations, fraud investigations, or tax reporting obligations.
• Professional advisers: Legal, accounting, or audit firms engaged by 9999phl in connection with the operation of the platform, subject to professional confidentiality obligations.
• Business transactions: In the event of a merger, acquisition, or sale of 9999phl's business or assets, player data may be transferred to the acquiring entity. You will be notified of any such transfer that materially affects your rights under this Policy.

9999phl uses cookies and similar technologies to operate and improve the platform experience. Cookies are small data files stored on your device when you access a website. They help us recognise you between sessions, maintain your login state, and understand how the platform is used.

We use the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings and display preferences to improve your experience on return visits.
• Analytics cookies: Used to collect aggregate, anonymised data about how players use the platform — which sections are visited, how long sessions last, and which features are used most. This data helps us improve the product. We use anonymised analytics and do not build individual behavioural profiles from this data.
• Marketing cookies: Used with your consent to help us understand the effectiveness of promotional campaigns and to avoid showing you the same promotional content repeatedly. Marketing cookies can be disabled through your browser settings or the cookie preference centre available on the platform.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the platform from functioning correctly. For a full list of cookies used by 9999phl and guidance on managing them, contact our support team.

9999phl applies multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, and loss. These measures include:

• Encryption in transit: All data exchanged between your device and the 9999phl platform is transmitted over HTTPS using TLS 1.2 or higher. This protects your data from interception during transmission.
• Encryption at rest: Sensitive personal data stored in 9999phl databases — including identity documents, financial details, and account credentials — is encrypted using AES-256 or equivalent standards.
• Password security: Account passwords are stored as salted cryptographic hashes. 9999phl support staff cannot view your password in plain text. If you forget your password, a reset is required rather than retrieval.
• Access controls: Internal access to personal data is restricted on a need-to-know basis. Staff accessing sensitive data are subject to background checks and regular security training. All data access is logged.
• Regular security audits: 9999phl conducts regular vulnerability assessments and penetration testing of the platform infrastructure. Critical findings are remediated on a priority basis.
• Incident response: 9999phl maintains an incident response plan for data breaches. In the event of a breach that poses a risk to your rights, we will notify affected players and the National Privacy Commission in accordance with the timelines required by the Data Privacy Act.

9999phl retains personal data only for as long as necessary for the purposes for which it was collected, or as required by Philippine law. The following retention periods apply:

• Account and registration data: Retained for the duration of your active account and for 5 years after account closure, consistent with PAGCOR licensing requirements and the Anti-Money Laundering Act.
• KYC and identity documents: Retained for 5 years after account closure or last transaction, as required by AML regulations applicable to PAGCOR licensees.
• Financial and transaction records: Retained for 5 years after the transaction date.
• Betting and gaming history: Retained for 3 years after the relevant bet or session, with aggregate statistical records retained indefinitely in anonymised form.
• Support communications: Retained for 2 years after the conversation is closed, or longer if the communication relates to an unresolved dispute or legal matter.
• Marketing consent records: Retained for the period of your registration plus 1 year, to demonstrate compliance with consent requirements.

After applicable retention periods expire, personal data is securely deleted or irreversibly anonymised. If you request account closure, your data will be retained only for the minimum period required by law and will not be used for any active marketing or product purposes after closure.

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by 9999phl:

To exercise any of these rights, submit a written request to privacy@9999phl.app. Please include your registered email address and a description of your request. We will acknowledge your request within 5 business days and provide a substantive response within 30 days. We may request proof of identity before processing your request to protect against unauthorised data access.

9999phl is strictly prohibited to persons under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age. If we discover that an account has been created by or is being used by a person under 21, we will immediately close the account, void any activity associated with it, and delete the associated personal data except to the extent required by PAGCOR compliance obligations.

If you believe a person under 21 has registered an account on 9999phl, please contact us immediately at support@9999phl.app so we can investigate and take appropriate action.

9999phl may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform operations. The "Last Updated" date at the top of this page reflects the most recent revision.

Where changes are material — for example, where we introduce a new category of data processing or a new data sharing arrangement — we will notify you by email to your registered address and/or by a prominent notice on the 9999phl platform at least 7 days before the changes take effect.

Minor updates that do not materially affect your rights — such as clarifications of existing provisions or corrections of typographical errors — may take effect without advance individual notice. Continuing to use 9999phl after the effective date of any update constitutes acceptance of the updated Policy.

We encourage you to review this Policy periodically. The current version is always available at https://9999phl.app/privacy-policy.

For any questions, concerns, or requests related to this Privacy Policy or your personal data held by 9999phl, please contact our Data Protection Officer:

• Privacy enquiries email: privacy@9999phl.app
• General support email: support@9999phl.app
• Live chat: Available 24/7 inside the 9999phl platform after logging in

We will acknowledge all formal privacy requests within 5 business days and aim to resolve them fully within 30 days. Complex requests involving large volumes of data or requiring legal review may take longer — in which case we will inform you of the expected timeline.

If you are not satisfied with our response to your privacy request or complaint, you have the right to escalate to the National Privacy Commission of the Philippines at privacy.gov.ph.