phi999 Privacy Policy

1. Who We Are

phi999 ("phi999," "we," "us," "our") is an online gaming platform operated in the Philippines under the regulatory oversight of PAGCOR — the Philippine Amusement and Gaming Corporation. phi999 is the data controller responsible for the personal information collected through the phi999 website and platform, including all game services, account features, payment processing, and customer support interactions.

This Privacy Policy applies to all individuals who access or use the phi999 platform, including registered players, visitors to the phi999 website, and individuals who contact phi999 customer support. By using phi999, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

phi999 is committed to processing your personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

2. Data We Collect

phi999 collects personal data from you in the following categories, depending on how you interact with the platform:

2.1 Registration & Account Data

When you register a phi999 account, we collect: your full legal name, date of birth, gender, nationality, residential address (including city and province in the Philippines), email address, and mobile number. This information is required to create and maintain your phi999 account and to verify your identity.

2.2 Identity Verification (KYC) Data

To comply with Philippine gaming regulations and anti-money laundering laws, phi999 may collect copies of government-issued identification documents (such as a Philippine passport, driver's licence, SSS ID, UMID, or PhilSys National ID), proof of address documents, and proof of payment method ownership. KYC documents are treated as sensitive personal information and are subject to enhanced security controls.

2.3 Financial & Transaction Data

phi999 collects records of all deposits, withdrawals, and gaming transactions associated with your account, including transaction amounts in Philippine Peso (PHP), timestamps, payment method identifiers (e.g., GCash account reference, bank account last four digits), and transaction status. phi999 does not store full payment card numbers or full bank account numbers.

2.4 Gaming Activity Data

phi999 collects data about your gaming activity on the platform, including games played, bet amounts, game outcomes, session durations, and responsible gaming tool usage (e.g., deposit limits set, self-exclusion requests). This data is used to provide the gaming service, detect problem gambling patterns, and comply with regulatory reporting requirements.

2.5 Technical & Device Data

When you access phi999, we automatically collect certain technical data, including: your IP address, device type and operating system, browser type and version, screen resolution, referring URL, pages visited on phi999, and session timestamps. This data is used for security monitoring, fraud detection, and platform performance optimisation.

2.6 Communications Data

If you contact phi999 customer support via live chat, email, or any other channel, we retain records of those communications, including the content of your messages and any attachments you provide. This data is used to resolve your query and to improve our support services.

3. How We Use Your Data

phi999 uses your personal data for the following purposes:

Purpose	Data Used
Account creation and management	Registration data, KYC data
Identity verification and age verification (21+)	KYC data, registration data
Processing deposits and withdrawals	Financial data, KYC data
Providing gaming services	Gaming activity data, account data
Fraud detection and prevention	Technical data, financial data, gaming activity data
Anti-money laundering compliance	Financial data, KYC data, gaming activity data
Responsible gaming monitoring	Gaming activity data, account data
Customer support	Communications data, account data
Platform security and technical operations	Technical data, device data
Regulatory reporting to PAGCOR and AMLC	Financial data, KYC data, gaming activity data
Service improvement and analytics	Technical data, gaming activity data (aggregated/anonymised)
Sending account notifications and service updates	Registration data (email, mobile number)

phi999 will not use your personal data for purposes incompatible with those listed above without first obtaining your consent or establishing another lawful basis for processing.

4. Legal Basis for Processing

phi999 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform the contract between you and phi999 — specifically, to provide you with access to the phi999 gaming platform, process your transactions, and manage your account.
• Legal Obligation: Processing is necessary for phi999 to comply with its legal obligations under Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012.
• Legitimate Interests: Processing is necessary for phi999's legitimate interests in operating a secure, fair, and commercially viable gaming platform — including fraud detection, security monitoring, and platform analytics — provided those interests are not overridden by your rights and interests.
• Consent: For certain processing activities — such as sending you promotional communications about phi999 offers and new games — phi999 relies on your consent. You may withdraw your consent at any time by updating your communication preferences in your phi999 account settings or by contacting phi999 support.

5. Data Sharing

phi999 does not sell, rent, or trade your personal data. phi999 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

5.1 Payment Service Providers

phi999 shares necessary financial and identity data with payment service providers — including GCash, PayMaya/Maya, and Philippine banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) — to process your deposits and withdrawals. These providers are contractually bound to process your data only for the purpose of completing your transactions.

5.2 KYC and Identity Verification Providers

phi999 may use third-party KYC verification service providers to assist with identity verification and document authentication. These providers process your KYC data under strict data processing agreements and are not permitted to use your data for any other purpose.

5.3 Regulatory Authorities

phi999 is required by Philippine law to share certain data with regulatory and law enforcement authorities, including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government agencies, where required by law or court order.

5.4 Technology and Infrastructure Providers

phi999 uses third-party technology providers for cloud hosting, data storage, cybersecurity, and platform analytics. These providers act as data processors on phi999's behalf and are contractually prohibited from using your data for their own purposes.

5.5 Game Content Providers

Certain games on the phi999 platform are provided by third-party game studios. These providers may receive limited technical data (such as session tokens and game result data) necessary to deliver the game experience. They do not receive your full personal profile.

6. Cookies & Tracking Technologies

phi999 uses cookies and similar tracking technologies (such as local storage and session tokens) to operate and improve the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the phi999 platform to function. They maintain your phi999 login session, remember your security preferences, and enable core platform features. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies : These cookies remember your preferences — such as your preferred language, display settings, and responsible gaming tool configurations — so you do not have to re-enter them each time you use phi999.
• Analytics Cookies: phi999 uses first-party analytics cookies to understand how players use the platform — which games are most popular, where players encounter difficulties, and how platform performance can be improved. Analytics data is aggregated and anonymised wherever possible.
• Security Cookies: phi999 uses cookies to support fraud detection and account security monitoring, including detecting unusual login patterns and preventing unauthorised access to your phi999 account.

phi999 does not use third-party advertising cookies or cross-site tracking technologies. You can manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies may affect your ability to use the phi999 platform, including the phi999 login process.

7. Data Retention

phi999 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

Data Category	Retention Period
Account registration data	Duration of account + 5 years after closure
KYC / identity verification documents	Duration of account + 5 years after closure (AMLA requirement)
Financial transaction records	10 years (AMLA requirement)
Gaming activity logs	5 years after last activity
Customer support communications	3 years after resolution
Technical / device logs	12 months on a rolling basis
Self-exclusion records	Duration of exclusion + 7 years

Upon expiry of the applicable retention period, phi999 will securely delete or anonymise your personal data. Where data is anonymised rather than deleted, the anonymised data may be retained indefinitely for statistical and analytical purposes, as it can no longer be used to identify you.

8. Data Security

phi999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• TLS encryption for all data transmitted between your device and the phi999 platform.
• AES-256 encryption for sensitive personal data stored at rest, including KYC documents and financial records.
• Role-based access controls ensuring that phi999 personnel can only access personal data necessary for their specific job functions.
• Multi-factor authentication requirements for phi999 staff accessing systems that contain personal data.
• Regular security audits, vulnerability assessments, and penetration testing conducted by independent security specialists.
• 24/7 security monitoring and intrusion detection systems.
• Formal data breach response procedures, including NPC notification within 72 hours of a qualifying breach.

While phi999 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your phi999 login credentials and for notifying phi999 immediately if you suspect any unauthorised access to your account.

9. Your Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phi999:

• Right to be Informed: You have the right to be informed about how phi999 collects and processes your personal data. This Privacy Policy fulfils that obligation.
• Right of Access: You have the right to request a copy of the personal data phi999 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data phi999 holds about you. You can update most account information directly through your phi999 account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phi999's legal retention obligations under Philippine law.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that phi999 transmit that data to another data controller where technically feasible.
• Right to Object: You have the right to object to phi999's processing of your personal data where that processing is based on legitimate interests or where your data is being used for direct marketing purposes.
• Right to Lodge a Complaint: If you believe phi999 has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, please contact phi999's Data Protection Officer using the contact details in Section 13. phi999 will respond to all data rights requests within fifteen (15) business days of receipt. phi999 may request proof of identity before processing your request to protect against unauthorised access to your data.

10. Children's Privacy

The phi999 platform is strictly intended for adults aged 21 years and older, in accordance with Philippine gaming law. phi999 does not knowingly collect personal data from individuals under the age of 21. If phi999 becomes aware that personal data has been collected from an individual under 21, that account will be immediately suspended, all associated data will be deleted, and any balances or winnings will be forfeited.

If you are a parent or guardian and believe that your child has registered a phi999 account or provided personal data to phi999, please contact phi999 support immediately so that we can take appropriate action.

11. International Data Transfers

phi999 primarily stores and processes your personal data within the Philippines. In certain circumstances — for example, where phi999 uses cloud infrastructure or technology service providers with data centres located outside the Philippines — your personal data may be transferred to and processed in other countries.

Where such international transfers occur, phi999 ensures that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses that meet the standards required by the Philippine Data Privacy Act and the National Privacy Commission. phi999 will not transfer your personal data to countries that do not provide an adequate level of data protection without first implementing appropriate safeguards.

12. Policy Updates

phi999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or regulatory guidance from the National Privacy Commission. When we make material changes to this policy, we will notify registered phi999 players by email or via an in-platform notification, and we will update the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how phi999 protects your personal data. Your continued use of the phi999 platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree to the updated policy, you must cease using phi999 and may request account closure by contacting phi999 support.

13. Contact & Data Protection Officer

phi999 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or phi999's data processing practices, please contact our DPO:

• Data Protection Officer: phi999 DPO Office
• Email: [email protected]
• Support Email: [email protected]
• Live Chat: Available 24/7 via the phi999 platform (Filipino and English)

If you are not satisfied with phi999's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) at [email protected] or through the NPC's official website.

For concerns related to responsible gaming or self-exclusion, please visit our Responsible Gaming page or contact phi999 support directly. For general platform terms, please refer to our Terms & Conditions.