phil999 Privacy Policy

Phil999 ("phil999", "we", "us", "our") operates an online gaming platform accessible at phil999.com, licensed by the Philippine Amusement and Gaming Corporation (PAGCOR). We are committed to protecting the personal data of every player who registers and interacts with our Platform.

This Privacy Policy ("Policy") explains how phil999 collects, uses, stores, shares, and protects your personal information. It applies to all personal data processed by phil999 in connection with your use of the Platform, including data collected during account registration, identity verification (KYC), deposits, gameplay, withdrawals, and customer support interactions.

This Policy is issued in compliance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and all relevant issuances of the National Privacy Commission ("NPC"). By registering a phil999 account, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

For the purposes of this Privacy Policy:

• "Personal Data" means any information from which you can be identified directly or indirectly, including name, contact details, identification numbers, financial data, and online identifiers.
• "Sensitive Personal Information" has the meaning assigned under the DPA and includes government-issued identification numbers, financial account details, and health-related data.
• "Processing" means any operation performed on personal data — collection, storage, use, disclosure, or deletion.
• "Data Subject" means you — the individual whose personal data is being processed.
• "Data Controller" means phil999, which determines the purposes and means of processing your personal data.
• "Data Processor" means a third party that processes personal data on phil999's behalf under a binding data processing agreement.
• "KYC" means Know Your Customer — identity verification procedures required under PAGCOR licensing and Philippine AMLA regulations.
• "Platform" means the phil999 website and all associated gaming services.

Phil999 collects the following categories of personal data from registered players and visitors:

Phil999 collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, or contacting support.
• Automated technical collection: IP addresses, device identifiers, and session data collected automatically when you access the Platform. This is standard for all online platforms and is necessary for security monitoring and fraud prevention.
• Third-party KYC providers: Identity verification data received from licensed KYC verification partners when processing your government ID documents.
• Payment processors: Transaction confirmation and status data received from GCash, Maya, BPI, BDO, Metrobank, and other payment providers when processing your transactions.
• Cookies and similar technologies: Session and functional data collected via cookies as described in Section 10 of this Policy.

Phil999 processes your personal data for the following specific, declared purposes:

1. Account creation and management: Creating, maintaining, and administering your phil999 account, including enabling login, managing your Wallet, and applying your account preferences.
2. Identity verification (KYC): Verifying your identity as required by PAGCOR licensing conditions and Philippine AMLA regulations, including confirming you are at least 21 years of age.
3. Payment processing: Processing your deposits and withdrawal requests, including verification against your linked GCash, Maya, or bank account.
4. Regulatory compliance: Fulfilling phil999's obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act, including mandatory reporting to PAGCOR and the Anti-Money Laundering Council (AMLC).
5. Fraud prevention and security: Monitoring for unauthorized account access, suspicious betting patterns, multiple account abuse, and other prohibited activities under the Terms and Conditions.
6. Responsible gaming: Monitoring player activity to support responsible gaming tools, including identifying patterns that may indicate problem gambling and enabling self-exclusion and deposit limit features.
7. Customer support: Responding to your queries, resolving disputes, and providing technical assistance.
8. Platform improvement: Analysing anonymised and aggregated gameplay and usage data to improve phil999's games, features, and user experience.
9. Direct communications: Sending transactional notifications (deposit confirmations, withdrawal status, security alerts) and, where you have consented, promotional communications about phil999 offers and new games.

Phil999 does not process your personal data for any purpose incompatible with the above without first obtaining your explicit consent.

Phil999 processes your personal data on the following legal bases under the Philippine Data Privacy Act:

• Contractual necessity: Processing required to fulfil the agreement between you and phil999 — primarily account management, payment processing, and game access.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AMLA obligations, NPC regulations, and other applicable Philippine laws.
• Legitimate interests: Processing necessary for phil999's legitimate interests in fraud prevention, platform security, and service improvement — provided these interests are not overridden by your fundamental rights.
• Consent: Processing for purposes such as promotional communications, where you have provided clear and specific consent. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

Phil999 shares your personal data only in the circumstances described below. We do not sell, rent, or otherwise disclose your data to third parties for their own commercial or marketing purposes.

Authorised sharing scenarios:

• Payment providers: GCash, Maya, BPI, BDO, Metrobank, and other payment processors receive transaction data necessary to execute your deposits and withdrawals.
• Game providers: Licensed game suppliers (JILI, PG Soft, Pragmatic Play, and others) receive a pseudonymised player identifier to deliver games and manage your game sessions. They do not receive your full identity data.
• KYC and identity verification partners: Licensed third-party identity verification providers receive your ID document images and selfie photographs to conduct verification checks on phil999's behalf, under binding data processing agreements.
• PAGCOR: Phil999 is required to share player account, transaction, and gaming data with PAGCOR as a condition of its online gaming license.
• Anti-Money Laundering Council (AMLC): Phil999 is a covered person under the Anti-Money Laundering Act and is required to file Covered Transaction Reports (CTRs) and Suspicious Transaction Reports (STRs) with the AMLC as mandated by Philippine law.
• Law enforcement and courts: Phil999 will disclose personal data in response to valid legal process — court orders, subpoenas, or law enforcement requests issued under Philippine law.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all assets of phil999, player data may be transferred to a successor entity, subject to equivalent privacy protections.

Phil999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following minimum retention periods apply:

• Account and identity data: Retained for a minimum of five (5) years following the date of account closure, as required by PAGCOR licensing conditions and AMLA regulations.
• Transaction records: All deposit, withdrawal, and bet transaction records are retained for a minimum of five (5) years in compliance with AMLA obligations.
• KYC documents: Identity verification documents are retained for a minimum of five (5) years following account closure and may be retained longer where required by regulatory direction.
• Customer support records: Support ticket and communication records are retained for three (3) years following resolution of the relevant matter.
• Technical and session data: Server logs and session data are typically retained for thirteen (13) months for security monitoring purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised such that it can no longer be associated with you as an individual.

Phil999 implements a comprehensive set of technical, organisational, and administrative security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction.

Key security measures include:

• Encryption in transit: All data transmitted between your device and the phil999 platform is encrypted using TLS 1.2 or higher (HTTPS).
• Encryption at rest: Sensitive personal data and financial data stored in phil999's systems is encrypted using AES-256 encryption.
• Access controls: Strict role-based access controls limit which phil999 staff can access player personal data. Access is logged and regularly reviewed.
• Two-factor authentication: Phil999 offers and encourages SMS-based two-factor authentication for all player accounts to prevent unauthorized login.
• Regular security assessments: Phil999 conducts periodic security audits and vulnerability assessments of its platform and data systems.
• Staff training: All phil999 personnel with access to personal data undergo data privacy and security awareness training.
• Breach response procedures: Phil999 maintains a data breach response plan aligned with NPC notification requirements under the Data Privacy Act.

Phil999 uses cookies and similar browser technologies to enable essential platform functionality, maintain your login session, and analyse aggregate usage patterns. Cookies are small text files stored on your device by your browser.

Phil999 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Store your language preferences, game preferences, and other customisation settings to personalise your experience.
• Analytics cookies: Collect anonymised, aggregated data about how visitors use the Platform — pages visited, session duration, and navigation paths — to help phil999 improve the site.

Phil999 does not use third-party advertising or behavioural tracking cookies. You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phil999:

To exercise any of the rights below, submit a written request to phil999's Data Protection Officer at [email protected] (plain text — not a clickable link). Phil999 will respond within fifteen (15) business days of receiving a valid request, as required by the DPA.

Phil999 is strictly an adult gaming platform. Persons under 21 years of age are prohibited from registering or using phil999 under PAGCOR's online gaming licensing requirements. Phil999 does not knowingly collect personal data from individuals under 21 years of age.

All account registrations are subject to mandatory age verification as part of the KYC process. Where phil999 discovers or has reasonable cause to believe that an account has been registered by a person under 21, the account will be suspended immediately, all associated personal data will be retained only as required by law and then deleted, and the matter may be referred to PAGCOR.

Some of phil999's third-party service providers — including certain game providers and technical infrastructure partners — may process personal data outside the Philippines. Where such transfers occur, phil999 ensures that appropriate safeguards are in place as required by the Data Privacy Act, including:

• Binding contractual clauses requiring the recipient to apply equivalent data protection standards;
• Verification that the recipient jurisdiction provides an adequate level of data protection; or
• Other transfer mechanisms recognised by the National Privacy Commission.

Phil999 does not transfer your personal data to jurisdictions with inadequate data protection frameworks without implementing the safeguards described above.

Phil999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform functionality. Material changes will be communicated to registered players via the contact details on record — email or SMS — at least seven (7) days before the updated Policy takes effect.

The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of the phil999 Platform following notification of a material Policy change constitutes your acceptance of the updated terms. If you do not accept the changes, you must cease using the Platform and request account closure before the effective date.

Phil999 has designated a Data Protection Officer (DPO) as required under the Philippine Data Privacy Act. If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or want to raise a privacy concern, please contact the DPO through the following channels:

• Email (plain text — not a clickable link): [email protected] — mark your message "Attn: Data Protection Officer"
• Live Chat: Available on the Platform from 8:00 AM to 2:00 AM Philippine Time (PHT), daily.

Phil999 aims to acknowledge all data privacy inquiries within two (2) business days and to resolve them within fifteen (15) business days, or such longer period as may be required for complex requests, not exceeding thirty (30) days total.

If you are not satisfied with phil999's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the competent supervisory authority for data protection matters under the DPA.