Privacy Policy

1. Introduction

php999 ("php999", "we", "us", "our") is committed to protecting the privacy and personal data of every player who uses the php999 platform at php999.club. This Privacy Policy describes what personal data we collect, how we use it, who we share it with, how we protect it, how long we keep it, and what rights you have under applicable Philippine privacy law.

This Policy is issued in compliance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. By registering an account or using the php999 platform, you acknowledge that you have read, understood, and consented to the data practices described in this Policy.

This Privacy Policy should be read alongside the php999 Terms and Conditions. In the event of any inconsistency between this Policy and the Terms regarding data handling, this Privacy Policy prevails.

2. Data Controller

php999 is the personal information controller for the data processed through the php999.club platform. For the purposes of the Philippine Data Privacy Act of 2012, php999 determines the purpose and means of processing your personal data and bears the obligations of a personal information controller as defined under that Act.

Our designated Data Protection Officer (DPO) can be reached via the contact details set out in Section 13 of this Policy. All data subject requests, privacy complaints, and data breach notifications should be directed to the DPO.

3. Personal Data We Collect

php999 collects personal data through the following channels: account registration, identity verification (KYC), deposits and withdrawals, gameplay activity, customer support interactions, and your use of the php999 website and platform.

3.1 Data We Do Not Collect

php999 does not collect full payment card numbers, CVV codes, or full online banking credentials. Payment processing is handled by regulated payment service providers (PSPs) under their own data security standards. php999 receives only a tokenized reference for each payment method.

4. How We Use Your Personal Data

php999 uses the personal data described above for the following purposes:

• Account Creation and Management: To register your account, verify your identity, maintain your profile, and manage your player wallet in Philippine Peso.
• Transaction Processing: To process deposits and withdrawal requests via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods.
• Regulatory Compliance: To satisfy PAGCOR regulatory requirements, including Know Your Customer (KYC) verification, anti-money laundering (AML) checks, and age verification. php999 is required by law to verify that all players are at least 21 years of age.
• Fraud Prevention and Security: To detect and prevent fraudulent account activity, multi-accounting, bonus abuse, unauthorized access, and financial crime.
• Responsible Gaming: To monitor gameplay patterns and proactively identify signs of problem gambling behaviour. Player data is used to enforce deposit limits, self-exclusion orders, and cooling-off periods set by the player or mandated by regulation.
• Customer Support: To respond to your enquiries, resolve disputes, and process complaints through our support channels.
• Platform Improvement: To analyse aggregated and anonymised usage data to improve platform performance, game selection, user experience, and payment processing.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may withdraw consent for marketing at any time by contacting support or via your account notification settings.

5. Legal Bases for Processing

Under the Philippine Data Privacy Act of 2012, php999 processes your personal data on the following legal bases:

• Consent: For marketing communications and optional cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Contractual Necessity: For account management, transaction processing, and customer support — processing necessary to perform the contract between you and php999 (the Terms and Conditions).
• Legal Obligation: For KYC verification, AML screening, PAGCOR reporting, and age verification — processing required by Philippine law and PAGCOR regulations.
• Legitimate Interests: For fraud detection, security monitoring, and platform improvement — where php999's legitimate interests are not overridden by your rights and freedoms.

6. Data Sharing and Disclosure

php999 does not sell your personal data to third parties. We share personal data only in the following limited circumstances:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, and Metrobank receive the minimum necessary data to process your transactions. Each PSP is bound by its own privacy policy and data security obligations.
• Game Software Providers: Game studios may receive anonymised session data (e.g., device type, game round IDs) for technical support and audit purposes. No identifiable personal data is shared with game providers.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government bodies may receive personal data where legally required or in response to a valid official request.
• Identity Verification Services: Third-party KYC providers may process identity document data solely for the purpose of verifying your age and identity. These providers are contracted data processors operating under strict data processing agreements.
• Law Enforcement: php999 may disclose personal data to law enforcement agencies where required by a valid court order, subpoena, or legal directive under Philippine law.

php999 does not transfer personal data outside the Philippines except where technically necessary for the operation of contracted services (e.g., cloud infrastructure), in which case adequate data protection safeguards are contractually ensured.

7. Cookies and Tracking Technologies

The php999 platform uses cookies and similar tracking technologies to operate the website, maintain your session, and analyse platform usage. The categories of cookies used are:

• Strictly Necessary Cookies: Required for core platform functionality, including login session management, wallet access, and security features. These cannot be disabled without impairing platform function.
• Performance / Analytics Cookies: Collect anonymised data about how players use the platform — which pages are visited most, where errors occur, and how fast the platform loads — to help php999 improve the user experience.
• Preference Cookies: Remember your language, display settings, and other customisation choices.
• Marketing Cookies: Used only with your consent to personalise promotional content shown on the php999 platform. You may withdraw consent for marketing cookies at any time.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair your ability to log in and use the platform.

8. Data Retention

php999 retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following retention periods:

• Active Account Data: Retained for the duration of your account relationship with php999.
• KYC and Identity Verification Records: Retained for a minimum of five (5) years from account closure, as required by PAGCOR regulations and Philippine AML law.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by AMLC reporting obligations.
• Gameplay Records: Retained for three (3) years from account closure for dispute resolution and regulatory audit purposes.
• Support Communications: Retained for two (2) years from the date of each communication.
• Marketing Consent Records: Retained until consent is withdrawn and for one (1) year thereafter as proof of consent history.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any individual.

9. Data Security

php999 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and php999.club.
• Encrypted storage of sensitive personal data at rest, including identity documents and financial references.
• Role-based access controls limiting php999 staff access to personal data on a strict need-to-know basis.
• Two-factor authentication (2FA) available to all players and mandatory for administrative account access.
• Regular penetration testing, vulnerability scanning, and security audits conducted by independent third parties.
• Automated monitoring for suspicious login activity, with account lockout triggered after five (5) consecutive failed authentication attempts.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, php999 will notify the National Privacy Commission within 72 hours of becoming aware of the breach and will notify affected data subjects without undue delay, as required by the Philippine Data Privacy Act.

10. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by php999:

• Right to be Informed: The right to know whether php999 holds personal data about you, and to receive information about how that data is being processed — as described in this Policy.
• Right of Access: The right to request a copy of the personal data php999 holds about you.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected. You may update most of your profile information directly through your php999 account dashboard.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to php999's legal retention obligations under PAGCOR and AML regulations.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: The right to object to the processing of your personal data for marketing purposes. To opt out of marketing communications, contact php999 support or use your account notification settings.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission of the Philippines if you believe php999 has violated your data privacy rights.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13. php999 will respond to all verified data subject requests within thirty (30) days. We may request identity verification before processing any request to protect against unauthorized access to personal data.

11. Children and Minors

The php999 platform is strictly for adults aged 21 years and above. php999 does not knowingly collect personal data from any person under 21 years of age. If php999 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all data associated with it will be securely deleted, and any balance will be forfeited in accordance with the php999 Terms and Conditions.

If you believe a person under 21 has registered an account on php999, please notify us immediately at the contact address in Section 13.

12. Changes to This Privacy Policy

php999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulations, platform functionality, or data processing practices. When material changes are made, php999 will update the "Last Updated" date at the top of this document and, where appropriate, notify registered players by email or via an in-platform notice.

Your continued use of the php999 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically. If you do not agree with any change to this Policy, you must discontinue use of the platform and may request account closure by contacting php999 support.

13. Contact Us

For all data privacy enquiries, data subject access requests, consent withdrawals, or to contact our Data Protection Officer, please use the following:

• Email: [email protected] — subject line: "Data Privacy Request"
• Live Chat: Available on the php999 platform, 8AM – 12AM PHT, 7 days a week
• Response Time: Data subject requests are acknowledged within 3 business days and resolved within 30 days

For complaints that cannot be resolved through php999 directly, you may contact the National Privacy Commission of the Philippines through official NPC channels.