phil999 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how phil999 ("phil999," "we," "us," "our") collects, uses, stores, shares, and protects the personal information of registered players and visitors to the phil999 platform at https://phil999.net.

Phil999 is committed to protecting the privacy of all users in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the rules and issuances of the National Privacy Commission (NPC) of the Philippines. By accessing or using the phil999 platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy applies to all information collected through the phil999 website, customer support channels, and any related services, promotions, or communications.

2. Data Controller

Phil999 is the data controller responsible for the personal information processed in connection with the phil999 platform. The data controller determines the purposes and means by which personal data is processed. For all data privacy inquiries, requests, and complaints, please contact our Data Protection Officer using the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

Phil999 collects the following categories of personal data in connection with the operation of the platform:

3.1 Registration & Identity Data

• Full legal name as it appears on a government-issued Philippine ID;
• Date of birth (used to verify the 21+ age requirement);
• Residential address;
• Philippine mobile number;
• Email address;
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

• Scanned or photographed copies of government-issued Philippine identification documents (e.g., Philippine Passport, SSS ID, PhilSys National ID, Driver's License, UMID);
• Proof of residential address documents;
• Payment method verification documents (e.g., GCash account screenshot).

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction history;
• Payment method details (GCash account reference, PayMaya reference, bank account numbers — stored only to the extent required for transaction processing and AML compliance);
• Account balance history;
• Bonus and promotion redemption records.

3.4 Gaming Activity Data

• Game session logs (game type, duration, wagers placed, outcomes);
• Sports betting selections and results;
• Responsible gaming tool settings (deposit limits, self-exclusion status).

3.5 Technical & Usage Data

• IP address and geolocation data (country/region level);
• Device type, operating system, and browser type;
• Session timestamps and login history;
• Pages visited and features used on the platform.

3.6 Communications Data

• Customer support chat transcripts and email correspondence;
• Complaint and dispute records;
• Marketing communication preferences.

4. How We Collect Your Data

Phil999 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey;
• Automatically — through cookies, web beacons, and similar tracking technologies when you visit and interact with the phil999 platform;
• From third parties — from payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification service providers, and fraud prevention partners where permitted by law.

5. Legal Basis for Processing

Phil999 processes personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity — processing required to fulfil our obligations under the player account agreement (e.g., processing deposits, withdrawals, and game sessions);
• Legal obligation — processing required to comply with PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA) reporting obligations, and NPC data privacy requirements;
• Legitimate interests — processing for fraud prevention, security monitoring, and platform improvement, where such interests are not overridden by your privacy rights;
• Consent — for marketing communications and non-essential cookies, where your explicit opt-in consent has been obtained.

6. How We Use Your Personal Data

Phil999 uses collected personal data for the following purposes:

• To create, verify, and maintain your phil999 player account;
• To process deposits, withdrawals, and bonus transactions;
• To verify your identity and age (21+) in compliance with PAGCOR requirements;
• To detect and prevent fraud, money laundering, and prohibited conduct;
• To comply with Anti-Money Laundering Act (AMLA) reporting obligations;
• To provide customer support and resolve disputes;
• To operate and enforce responsible gaming tools including self-exclusion;
• To communicate account-related notices, security alerts, and policy updates;
• To send promotional communications where you have consented to receive them (you may opt out at any time);
• To analyse platform usage and improve user experience;
• To comply with lawful orders from PAGCOR, the NPC, or other competent Philippine government authorities.

7. Sharing Your Personal Data

Phil999 does not sell, rent, or trade your personal information to any third party for their own commercial purposes. Personal data may be shared with the following categories of recipients only to the extent strictly necessary:

• Payment processors (GCash/Mynt, PayMaya/Voyager, BPI, BDO, Metrobank, and 7-Eleven payment network) — to process your deposits and withdrawals;
• Licensed game providers — game studios that supply the software for games available on the phil999 platform may receive session data necessary to operate those games;
• Identity verification providers — third-party KYC service providers that assist with document verification, subject to data processing agreements;
• Fraud prevention and security providers — services that analyse transaction and session data to detect fraudulent activity;
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government bodies where disclosure is required by law or regulatory order;
• Legal advisors and auditors — where required for legal proceedings, compliance audits, or dispute resolution.

All third-party service providers who process personal data on phil999's behalf are required to maintain appropriate security standards and are bound by data processing agreements consistent with the Data Privacy Act of 2012.

8. Cookies and Tracking Technologies

Phil999 uses cookies and similar tracking technologies to operate the platform, maintain session security, and analyse usage patterns. The following types of cookies are used:

• Essential cookies — required for platform operation, login session management, and security. These cannot be disabled without affecting core functionality.
• Analytics cookies — used to understand how players navigate and use the platform, helping us improve the experience. These are anonymised where possible.
• Preference cookies — used to remember your platform settings and preferences across sessions.
• Marketing cookies — used to deliver relevant promotional content on the phil999 platform. These are only activated with your consent.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to log in and use the platform.

9. Data Retention

Phil999 retains personal data for as long as your account remains active and for a period thereafter as required by applicable law and regulation. Specific retention periods include:

• Account and KYC records: minimum five (5) years after account closure, in compliance with AMLA requirements;
• Transaction records: minimum five (5) years from the date of each transaction;
• Customer support records: three (3) years from the date of resolution;
• Marketing consent records: retained until consent is withdrawn and for two (2) years thereafter.

After the applicable retention period, personal data is securely deleted or anonymised in accordance with NPC guidelines.

10. Data Security

Phil999 implements technical, administrative, and physical security measures designed to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phil999 platform;
• Encrypted storage of passwords (hashed using industry-standard algorithms — plain-text passwords are never stored);
• Access controls restricting personal data access to authorized personnel on a need-to-know basis;
• Regular security assessments and penetration testing;
• Intrusion detection and monitoring systems operating 24/7.

While phil999 takes all reasonable steps to protect your data, no internet transmission or storage system is completely secure. In the event of a data breach that poses a risk to your rights and freedoms, phil999 will notify you and the NPC in accordance with the requirements of the Data Privacy Act of 2012.

11. Your Data Privacy Rights

Under the Data Privacy Act of 2012, as a Philippine data subject you have the following rights with respect to your personal data held by phil999:

• Right to be informed — the right to know what personal data phil999 collects and how it is used, as described in this Policy;
• Right of access — the right to request a copy of the personal data phil999 holds about you;
• Right to rectification — the right to request correction of inaccurate or incomplete personal data;
• Right to erasure — the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations;
• Right to object — the right to object to processing based on legitimate interests, in particular direct marketing processing;
• Right to data portability — the right to receive your personal data in a structured, commonly used format where technically feasible;
• Right to lodge a complaint — the right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please submit a written request to phil999's Data Protection Officer using the contact details in Section 15. Phil999 will respond within thirty (30) days of receiving a verifiable request.

12. Children's Privacy

The phil999 platform is strictly intended for persons aged 21 years and older. Phil999 does not knowingly collect personal data from individuals under 21 years of age. If phil999 becomes aware that personal data has been collected from a minor, that data will be promptly deleted and the account closed. If you believe a minor has registered on the phil999 platform, please contact our support team immediately.

13. International Data Transfers

Phil999 primarily processes personal data within the Philippines. In cases where data is transferred to or processed by service providers outside the Philippines (for example, certain licensed game providers or cloud infrastructure providers), phil999 ensures that such transfers are made only to recipients that provide an adequate level of data protection consistent with the Data Privacy Act of 2012, including through the use of appropriate contractual safeguards approved by the NPC.

14. Changes to This Privacy Policy

Phil999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform features. Material changes will be communicated to registered players via the email address on file or via a prominent notice on the phil999 platform. The "Last Updated" date at the top of this Policy will reflect the date of the most recent revision. Continued use of the phil999 platform after the effective date of any revision constitutes acceptance of the updated Policy.

15. Contact Our Data Protection Officer

For any data privacy questions, requests to exercise your rights, or complaints regarding phil999's handling of your personal data, please contact our Data Protection Officer:

This Privacy Policy was last reviewed and updated in June 2026 and is written in compliance with Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations.