phl999 Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") describes how phl999 ("phl999," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you," "Player," or "User") who access or use the phl999 website, mobile application, and all associated gaming and support services (collectively, the "Platform").

This Policy applies to all personal data collected through the Platform, whether provided directly by you during registration, generated through your use of our services, or obtained from third parties in connection with identity verification and fraud prevention activities.

This Policy should be read alongside the phl999 Terms & Conditions, which govern your use of the Platform and are incorporated herein by reference.

2. Data Controller

phl999 is the data controller responsible for the personal data collected through the Platform. As data controller, phl999 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

3. Personal Data We Collect

phl999 collects personal data through several channels. The categories of data we collect and the circumstances in which they are collected are set out below.

3.1 Registration Data

When you create a phl999 account, we collect the following information:

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Mobile phone number (Philippine number)
• Residential address
• Username and password (password stored in encrypted form only)

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) obligations and Philippine gaming regulations, we may collect:

• Copies of government-issued identification documents (e.g., PhilSys National ID, passport, driver's license, SSS/GSIS card, PRC ID, voter's ID)
• Proof of address documents (e.g., utility bill, bank statement)
• Selfie or facial image for liveness verification purposes
• Source of funds documentation where required by regulation

3.3 Transaction Data

We collect records of all financial transactions conducted through your phl999 account, including:

• Deposit and withdrawal amounts, dates, and payment methods used
• GCash or PayMaya account references (partial, not full credentials)
• Bank account details used for transfers (partial, masked where possible)
• Bonus and promotional credit history

3.4 Gaming Activity Data

We collect data about your gaming activity on the Platform, including game sessions played, wagers placed, wins and losses, game preferences, and session duration. This data is used for account management, responsible gaming monitoring, and regulatory reporting.

3.5 Technical and Device Data

When you access the Platform, we automatically collect certain technical information, including:

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session timestamps and page interaction data
• Cookie identifiers and similar tracking technologies (see Section 7)

3.6 Communications Data

We retain records of communications between you and phl999, including live chat transcripts, email correspondence, and support ticket history. This data is used to resolve disputes, improve our services, and maintain a record of commitments made.

4. How We Use Your Personal Data

phl999 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your phl999 account, including processing your registration, verifying your identity, and managing your account settings.
• Service Delivery: To provide access to games, process deposits and withdrawals, apply bonuses and promotions, and deliver customer support.
• Regulatory Compliance: To comply with applicable Philippine laws and regulations, including age verification (21+), anti-money laundering obligations, and reporting requirements to relevant authorities.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other security threats to the Platform and its users.
• Responsible Gaming: To monitor gaming patterns, identify players who may be at risk of gambling-related harm, and administer responsible gaming tools such as deposit limits and self-exclusion.
• Marketing Communications: Where you have provided consent, to send you promotional offers, bonus notifications, and updates about new games and features on phl999. You may opt out at any time.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the functionality, performance, and user experience of the phl999 Platform.
• Dispute Resolution: To investigate and resolve disputes, process complaints, and enforce our Terms & Conditions.

5. Legal Basis for Processing

phl999 processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual Necessity: Processing is necessary to perform the contract between you and phl999 — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including AML regulations, gaming regulatory requirements, and tax reporting obligations.
• Legitimate Interests: Processing is necessary for phl999's legitimate interests in preventing fraud, ensuring platform security, and improving our services, provided those interests are not overridden by your rights and freedoms.
• Consent: Where phl999 relies on your consent — for example, for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing and Disclosure

phl999 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

6.1 Service Providers

We engage trusted third-party service providers to assist in operating the Platform, including payment processors (GCash, PayMaya, and partner banks), identity verification providers, cloud hosting and infrastructure providers, customer support platform providers, and analytics service providers. These providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection law.

6.2 Regulatory and Law Enforcement Authorities

phl999 may disclose personal data to Philippine government agencies, regulatory bodies, law enforcement authorities, or courts where required to do so by law, court order, or regulatory direction. This includes disclosures required under AML legislation and gaming regulatory frameworks.

6.3 Game Suppliers

Third-party game providers integrated into the phl999 Platform may receive limited technical data (such as a pseudonymous player identifier and session data) necessary to deliver their games. These providers do not receive your full personal profile.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of phl999's business, your personal data may be transferred to the relevant successor entity, subject to equivalent data protection obligations.

7. Cookies and Tracking Technologies

phl999 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without affecting core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game display options, and responsible gaming tool configurations.
• Analytics Cookies: Help us understand how players use the Platform — which pages are visited most, where users drop off, and how performance can be improved. Data collected is aggregated and anonymised where possible.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and account takeover attempts.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the phl999 Platform. phl999 does not use cookies to serve third-party advertising.

8. Data Retention

phl999 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and KYC Data: Retained for a minimum of five (5) years following account closure, in accordance with AML regulatory requirements applicable in the Philippines.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming Activity Data: Retained for a minimum of three (3) years from the date of each session, or longer where required by regulation.
• Communications Data: Retained for a minimum of two (2) years from the date of the last communication, or longer where relevant to an ongoing dispute or investigation.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of the consent given.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with phl999's data disposal procedures.

9. Data Security

phl999 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data fields (including passwords and payment references) at rest.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular security assessments and vulnerability testing of Platform infrastructure.
• Multi-factor authentication requirements for administrative access to data systems.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

While phl999 takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the security of your phl999 login credentials and for notifying us immediately if you suspect unauthorised access to your account.

10. Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phl999:

• Right to be Informed: The right to be told how your personal data is being collected and processed — which this Policy fulfils.
• Right of Access: The right to request a copy of the personal data phl999 holds about you, along with information about how it is being used.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update basic account information directly through your phl999 account settings.
• Right to Erasure: The right to request deletion of your personal data in certain circumstances, such as where the data is no longer necessary for the purpose for which it was collected. Note that this right may be limited where retention is required by law.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting prior processing.

To exercise any of these rights, please contact the phl999 support team via live chat or email at [email protected]. phl999 will respond to verified requests within thirty (30) days. We may need to verify your identity before processing your request.

11. Children's Privacy and Age Restriction

The phl999 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. phl999 does not knowingly collect personal data from individuals under the age of 21.

If phl999 becomes aware that personal data has been collected from a person under 21 years of age, the relevant account will be immediately closed, all associated data will be deleted or anonymised, and any deposits will be returned to the payment source where technically feasible.

12. Marketing Communications

With your consent, phl999 may send you promotional communications about new games, bonuses, special offers, and Platform updates via email, SMS, or in-app notification. You can manage your marketing preferences at any time through your phl999 account settings or by contacting our support team.

Withdrawing your consent to marketing communications will not affect your ability to use the Platform or receive essential service-related communications such as transaction confirmations, security alerts, and account notifications.

phl999 does not share your contact details with third-party marketers. All promotional communications you receive will originate from phl999 directly.

13. Third-Party Links

The phl999 Platform may contain links to third-party websites or services, such as payment provider portals. phl999 is not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you access in connection with your use of phl999.

14. Changes to This Privacy Policy

phl999 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform features. When we make material changes, we will update the "Last Updated" date at the top of this Policy and, where appropriate, notify you via email or an in-platform notification.

Your continued use of the phl999 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how we protect your data.

15. Contact Us and Filing a Complaint

If you have any questions, concerns, or requests regarding this Privacy Policy or the way phl999 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the phl999 Platform — the fastest way to reach us.
• Email: [email protected] — we aim to respond within two (2) business days.

If you believe that phl999 has not handled your personal data in accordance with the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information about how to file a complaint with the NPC is available on the NPC's official website.