999php Casino
Privacy Policy

1 Who We Are

999php Casino ("999php", "we", "us", "our") operates the online gaming platform accessible at 999php.asia. 999php is licensed by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to Philippine law, including the Data Privacy Act of 2012 (Republic Act No. 10173).

For the purposes of this Privacy Policy, 999php Casino is the Personal Information Controller (PIC) responsible for the personal data of all registered users and visitors to 999php.asia.

This Privacy Policy applies to all personal data collected through the 999php website, mobile browser platform, customer support channels, and any other touchpoints through which you interact with 999php.

2 Personal Data We Collect

999php collects the following categories of personal data from users:

• Identity Data: Full legal name, date of birth, nationality, and government-issued ID details (e.g., Philippine passport number, driver's license number, UMID number).
• Contact Data: Email address, mobile number, and residential address (including city, province, and postal code).
• Account Data: Username, encrypted password, account registration date, and account status.
• Financial Data: GCash account details, PayMaya/Maya account details, bank account details (for withdrawal processing), transaction history, deposit and withdrawal records.
• Gaming Data: Game history, wagering activity, session duration, win/loss records, and bonus usage.
• Technical Data: IP address, device type, browser type and version, operating system, and session identifiers.
• Communications Data: Records of your interactions with 999php customer support, including live chat transcripts and email correspondence.
• Verification Data: Copies of identity documents and selfies submitted for KYC (Know Your Customer) verification.

3 How We Collect Your Data

999php collects personal data through the following means:

• Direct Collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access 999php.asia, including IP address, device identifiers, and browsing behavior, via cookies and similar tracking technologies.
• Third-Party Sources: Identity verification data from PAGCOR-approved KYC service providers; fraud prevention data from licensed anti-fraud service providers; payment data from GCash, PayMaya/Maya, and partner banks during transaction processing.

4 How We Use Your Personal Data

999php uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your 999php account, including processing your registration and verifying your identity.
• Service Delivery: To provide access to games, process deposits and withdrawals, and deliver the full range of 999php Casino services.
• Regulatory Compliance: To comply with PAGCOR licensing requirements, AMLA obligations, and other applicable Philippine laws, including mandatory reporting of suspicious transactions to the Anti-Money Laundering Council (AMLC).
• Fraud Prevention & Security: To detect and prevent fraud, money laundering, cheating, and other prohibited activities on the platform.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Responsible Gaming: To monitor gaming behavior and enforce responsible gaming tools such as deposit limits and self-exclusion requests.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided consent or where permitted by law. You may opt out at any time.
• Platform Improvement: To analyze usage patterns and improve the performance, security, and user experience of 999php.asia.

5 Legal Basis for Processing

999php processes your personal data on the following legal bases under the Data Privacy Act of 2012 (RA 10173):

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to upon registration, including account management and payment processing.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AMLA reporting requirements, and other mandatory Philippine regulatory obligations.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

999php does not sell your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where required by law or regulatory directive.
• Payment Processors: GCash, PayMaya/Maya, and partner Philippine banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for the purpose of processing deposits and withdrawals.
• KYC & Fraud Prevention Providers: PAGCOR-approved identity verification and anti-fraud service providers engaged to assist with KYC compliance and fraud detection.
• IT & Infrastructure Providers: Cloud hosting and data centre providers who process data on our behalf under strict data processing agreements that require them to maintain confidentiality and security standards equivalent to those of 999php.
• Legal & Professional Advisors: Lawyers, auditors, and compliance consultants engaged by 999php, subject to professional confidentiality obligations.

7 Cookies & Tracking Technologies

999php.asia uses cookies and similar tracking technologies to operate the platform and improve your experience. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Performance Cookies: Collect anonymized data about how users interact with 999php.asia to help us identify and fix performance issues. No personally identifiable information is collected by these cookies.
• Functional Cookies: Remember your preferences (such as language settings and game display options) to personalize your experience.
• Analytics Cookies: Used to understand aggregate user behavior on the platform, such as which games are most popular and how users navigate the site.

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the 999php platform.

8 Data Retention

999php retains your personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following retention periods:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by PAGCOR licensing conditions and AMLA regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA record-keeping requirements.
• KYC Verification Documents: Retained for a minimum of five (5) years after account closure or the completion of the relevant transaction, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of the last interaction.
• Marketing Consent Records: Retained until you withdraw consent, plus one (1) year thereafter for compliance documentation purposes.

After the applicable retention period, personal data is securely deleted or anonymized in accordance with 999php's data disposal procedures.

9 Data Security

999php implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• Encryption: All data transmitted between your device and 999php.asia is encrypted using TLS (Transport Layer Security). Sensitive data at rest, including financial account details and identity documents, is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized 999php personnel and service providers on a strict need-to-know basis. All access is logged and audited.
• Secure Infrastructure: 999php's platform is hosted in secure, PAGCOR-compliant data centres with physical access controls, redundant systems, and regular security audits.
• Penetration Testing: 999php conducts regular security assessments and penetration tests to identify and remediate vulnerabilities.
• Incident Response: In the event of a personal data breach, 999php will notify affected users and the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required by RA 10173.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by 999php:

• Right to Be Informed: The right to know what personal data 999php collects about you and how it is used — which is the purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data 999php holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to 999php's legal retention obligations under PAGCOR and AMLA regulations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15. We will respond to all verified data subject requests within fifteen (15) business days.

11 Children's Privacy

999php Casino is strictly for adults aged 21 years and above, in accordance with Philippine law and PAGCOR regulations. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data, and return any deposits to the payment source used. If you believe a minor has registered on 999php, please contact us immediately at the details provided in Section 15.

12 International Data Transfers

999php primarily stores and processes personal data within the Philippines. In limited circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or KYC technology vendors.

Where such transfers occur, 999php ensures that appropriate safeguards are in place to protect your personal data, including contractual data processing agreements that require the recipient to maintain data protection standards equivalent to those required under RA 10173. Such transfers are conducted only where necessary and are subject to prior notification to the National Privacy Commission where required by law.

13 Third-Party Links

999php.asia may contain links to third-party websites or services (for example, PAGCOR's official website or responsible gaming resources). This Privacy Policy applies only to 999php.asia and the 999php platform. 999php is not responsible for the privacy practices of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

14 Changes to This Privacy Policy

999php reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered users via email and/or a prominent notice on 999php.asia at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. Your continued use of the 999php platform after the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy.

15 Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our Data Protection Officer (DPO):

• Data Protection Officer: 999php Casino DPO
• Email: [email protected]
• Support Email: [email protected]
• Live Chat: Available 24/7 via 999php.asia
• Response Time: Within 15 business days for data subject requests

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights under RA 10173 have been violated.