9p999 Privacy Policy

This Privacy Policy governs the collection, use, storage, disclosure, and protection of personal information that 9p999 ("we," "us," or "our") processes in connection with the operation of our online casino and sports betting platform accessible at 9p999.vip, including our mobile application and all related services (collectively, the "Platform").

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, hereinafter "DPA"), its Implementing Rules and Regulations ("IRR"), and the applicable issuances of the National Privacy Commission of the Philippines ("NPC"). It also reflects applicable PAGCOR regulations governing the protection of player information on licensed Philippine online gaming platforms.

We understand that Filipino players — whether they're logging in from Makati, Cebu City, Davao, or anywhere else in the archipelago — deserve to know exactly what happens to their personal information when they use 9p999. This Policy is written to be as clear and readable as possible while maintaining the legal precision required by the DPA.

For the purposes of the Philippine Data Privacy Act of 2012, the Data Controller responsible for your personal information is the operator of the 9p999 platform. The Data Protection Officer ("DPO") designated by 9p999 is responsible for overseeing compliance with this Policy and the DPA. Contact details for the DPO are provided in Section 16 of this Policy.

9p999 is registered with the National Privacy Commission of the Philippines as required under the DPA and its IRR. Our personal information processing activities are governed by our Registration of Data Processing Systems filed with the NPC.

9p999 collects only the personal data that is necessary for the purposes described in this Policy. We do not collect categories of personal data beyond what is required for account operation, regulatory compliance, and service delivery.

The following table summarises the categories of personal data we collect and the primary purpose for collecting each:

9p999 collects personal data through the following channels:

• Direct Collection. Information you provide when registering an account, completing KYC, making a deposit, requesting a withdrawal, contacting support, or updating your account profile.
• Automated Technical Collection. Data automatically collected when you access and use the 9p999 Platform, including IP address, device information, session logs, and game activity data — collected via server logs, cookies, and analytics tools.
• Payment Processors. Transaction confirmation and payment method details provided by GCash, PayMaya, BPI, BDO, Metrobank, Coins.ph, and USDT network processors when you conduct financial transactions on 9p999.
• Identity Verification Services. Information received from third-party KYC and identity verification providers used to confirm the accuracy of the identity documents you submit.
• Fraud Prevention & AML Providers. Risk signals and watchlist check results from third-party fraud detection and anti-money laundering compliance services.

Under the Philippine DPA, 9p999 is required to have a lawful basis for processing your personal data. We rely on the following legal bases, which correspond to specific processing activities:

9p999 uses your personal data for the following specific purposes:

• Creating, verifying, and maintaining your 9p999 account, including age and identity verification in compliance with PAGCOR requirements.
• Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, Coins.ph, and USDT, and settling PHP balances to your registered payment accounts.
• Delivering casino games, slot games, sports betting markets, bingo, sabong, and all other gaming services available on the 9p999 Platform.
• Detecting, investigating, and preventing fraud, money laundering, identity theft, and other illegal or prohibited activities on the Platform.
• Monitoring gaming activity to identify potential signs of problem gambling and facilitating responsible gaming tools and interventions.
• Responding to your customer support requests via live chat, email, or messaging applications.
• Complying with applicable Philippine laws, PAGCOR regulations, NPC requirements, and responding to lawful requests from Philippine government authorities.
• Sending transactional communications — including deposit confirmations, withdrawal notifications, OTP messages, and security alerts — that are necessary to operate your 9p999 account.
• Sending promotional communications about bonuses, new games, and offers on 9p999, where you have provided consent or where permitted under applicable law. You may opt out at any time.
• Improving, testing, and developing 9p999 Platform features, user experience, and technical performance.

9p999 does not sell your personal data to third parties. We share personal data with external parties only in the circumstances set out below, and only to the extent necessary for the stated purpose.

The 9p999 Platform uses cookies and similar tracking technologies to operate core platform functions, analyse usage, and improve the user experience. A "cookie" is a small data file stored on your device by your browser or the 9p999 application when you access the Platform.

• Strictly Necessary Cookies. Required for the Platform to function. These include session management cookies that keep you logged in to your 9p999 account and security tokens. These cannot be disabled without breaking Platform functionality.
• Analytics Cookies. Used to understand how players use the 9p999 Platform — which game sections are most visited, how long sessions last, and where users encounter errors. Data collected is aggregated and anonymised.
• Functional Cookies. Remember your preferences (e.g., language settings, display preferences) to personalise your 9p999 experience.
• Fraud & Security Cookies. Help detect suspicious activity, bot behaviour, and account takeover attempts on the 9p999 Platform.

You may control non-essential cookies through your browser settings or mobile device privacy controls. Note that disabling certain cookies may affect the functionality of your 9p999 account. Strictly necessary and security cookies cannot be disabled.

9p999 implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Given that your 9p999 account is connected to your Philippine Peso wallet and financial accounts such as GCash and PayMaya, security is a foundational platform requirement — not an afterthought.

• All data transmitted between your device and 9p999 servers is encrypted using 256-bit SSL/TLS protocol.
• Passwords are stored in salted and hashed form. 9p999 employees cannot view your raw password.
• Access to personal data within 9p999's systems is restricted on a strict need-to-know basis, with role-based access controls and audit logging.
• 9p999 conducts regular security assessments of its Platform infrastructure and engages independent security professionals for periodic penetration testing.
• New device logins trigger OTP verification to the mobile number registered to your 9p999 account, preventing unauthorised access even if your password is compromised.
• Anomalous login patterns — including unusual locations or rapid credential attempts — trigger automated account security alerts and temporary lockdowns.

9p999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable Philippine law, including retention requirements under the Anti-Money Laundering Act (AMLA), PAGCOR regulations, and tax laws administered by the Bureau of Internal Revenue.

• Active Account Data. Retained for the duration of your active account relationship with 9p999, plus a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements.
• Financial Transaction Records. Retained for a minimum of five (5) years as required by the AMLA and applicable BIR regulations.
• KYC/Identity Documents. Retained for a minimum of five (5) years following the end of the account relationship, or longer where required by law or ongoing legal proceedings.
• Support and Communications Data. Retained for three (3) years following resolution of the relevant support matter, or longer where relevant to a legal dispute.
• Technical and Analytics Data. Retained for up to two (2) years for analytics purposes; security and fraud detection logs retained for up to five (5) years.

Following the expiry of applicable retention periods, personal data is securely deleted from 9p999 systems or anonymised such that it can no longer be attributed to an identified or identifiable individual.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data processed by 9p999. You may exercise these rights by contacting us using the details in Section 16.

9p999 will respond to verified data subject rights requests within 15 business days of receipt, as required by NPC Advisory Opinion No. 2018-031 and related NPC guidance. We may extend this period where the request is complex, and will notify you of any extension.

9p999 does not knowingly collect, use, or store personal data of individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process. Where 9p999 discovers that a user account has been created by or for a person under 21, the account will be immediately suspended, all balances returned (where applicable), and all personal data associated with the account deleted from our systems.

If you believe that a minor has created a 9p999 account or that we have inadvertently collected personal data of a minor, please contact our support team or Data Protection Officer immediately using the details in Section 16.

Some of 9p999's service providers — including game software providers, cloud hosting infrastructure providers, and fraud detection platforms — may process personal data outside the Philippines. Where personal data is transferred internationally, 9p999 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that required by the Philippine DPA.

Safeguards used for international transfers include: contractual clauses approved by the National Privacy Commission of the Philippines (or substantially equivalent data processing agreements), transfers to jurisdictions recognised by the NPC as having an adequate level of data protection, or transfers based on the binding corporate rules of the relevant group entity.

The 9p999 Platform may contain references to third-party services, including payment service providers (GCash, PayMaya, BPI, BDO, Metrobank) and game software providers. When you interact with a third-party service through the 9p999 Platform — for example, when initiating a GCash transfer — you are also subject to that third party's own privacy policy.

9p999 is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party services you interact with in connection with your 9p999 account.

9p999 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable Philippine law, NPC guidance, PAGCOR regulations, or our data processing practices. The "Effective Date" at the top of this Policy will be updated to reflect any material changes.

Where changes are material — meaning they significantly affect how we process your personal data or your rights — we will notify registered 9p999 players via in-platform notification or to the email address or mobile number registered on your account, prior to the changes taking effect where reasonably practicable.

Your continued use of the 9p999 Platform following the effective date of any revised Policy constitutes acceptance of the amended terms. If you do not accept any amendment, you must stop using the Platform and close your account by contacting the 9p999 support team.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights under the Philippine DPA, or wish to raise a privacy concern or complaint relating to 9p999's data processing practices, please contact our Data Protection Officer using the following channels:

9p999 will acknowledge privacy requests within 48 hours and provide a substantive response within 15 business days. For complex requests, this period may be extended with prior notification.