Privacy Policy — 99phl

99phl is committed to protecting the privacy and personal data of all Filipino players who use our platform. We understand that trust is the foundation of any good relationship — and that trust starts with being completely transparent about how we handle your information.

This Policy applies to all personal data collected through the 99phl website at 99phl.app, the 99phl mobile application, and any other digital touchpoints operated by 99phl. It covers data collected during registration, during gameplay, during financial transactions, and through your general use of the platform.

99phl operates in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations. We are registered with the National Privacy Commission (NPC) of the Philippines as required by law.

If you have any questions about this Policy or about how 99phl handles your personal data, please refer to Section 13 for our contact details. We are always happy to clarify.

99phl collects the following categories of personal data from players. We only collect what is necessary for the purposes described in this Policy:

99phl does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where required by law (for example, where a player discloses a gambling-related health concern through our responsible gaming tools).

99phl collects personal data through the following means:

• Direct collection: Data you provide when you register a 99phl account, complete identity verification, make a deposit or withdrawal, contact our support team, or participate in a promotion.
• Automated collection: Data collected automatically when you use the 99phl platform, including technical data (IP address, device information) and usage data (pages visited, features used), collected via cookies, server logs, and similar technologies.
• Third-party sources: Data received from identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), and fraud prevention services, where necessary to verify your identity or process a transaction.
• Publicly available sources: In limited circumstances, 99phl may verify information against publicly available records, such as government databases, where required for regulatory compliance.

99phl uses your personal data for the following purposes:

• Account management: To create, maintain, and manage your 99phl player account, including processing your registration, verifying your identity, and managing your account settings.
• Age verification: To confirm that you are at least 21 years of age, as required under Philippine gaming regulations. This is a mandatory process and cannot be waived.
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods, and to maintain accurate financial records.
• Platform operation: To deliver the games, features, and services available on 99phl, including live dealer games, slots, bingo, circle games, and new games.
• Regulatory compliance: To comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and PAGCOR licensing conditions.
• Responsible gaming: To monitor gaming patterns and identify players who may be at risk of problem gambling, and to administer responsible gaming tools such as deposit limits and self-exclusion.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and other security threats.
• Customer support: To respond to your queries, complaints, and requests, and to maintain records of our communications with you.
• Platform improvement: To analyse usage patterns and player feedback in order to improve the 99phl platform, fix bugs, and develop new features.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time.

Under the Data Privacy Act of 2012 (Republic Act No. 10173), 99phl processes your personal data on the following legal bases:

• Contractual necessity: Processing that is necessary to perform our contract with you — i.e., to operate your 99phl account, process your transactions, and deliver the gaming services you have signed up for.
• Legal obligation: Processing that is required to comply with applicable Philippine laws, including AML regulations, KYC requirements, tax obligations, and PAGCOR licensing conditions.
• Legitimate interests: Processing that is necessary for 99phl's legitimate business interests, such as fraud prevention, platform security, and improving our services — provided that these interests are not overridden by your rights and interests.
• Consent: Processing that is based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

99phl does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification services used to confirm your identity and age (21+) as required by Philippine gaming regulations.
• Fraud prevention services: Third-party providers that help 99phl detect and prevent fraudulent activity, money laundering, and other illegal conduct on the platform.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where disclosure is required by law or by a valid legal order.
• Technology service providers: Cloud hosting providers, software vendors, and IT support services that process data on 99phl's behalf under strict data processing agreements.
• Professional advisers: Lawyers, auditors, and accountants, where necessary for legal, compliance, or financial purposes, subject to professional confidentiality obligations.

All third parties with whom 99phl shares personal data are required to handle that data in accordance with applicable Philippine data protection laws and are prohibited from using it for any purpose other than the one for which it was shared.

99phl uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the platform. Cookies are small text files stored on your device when you visit 99phl.app. They help us keep you logged in, remember your preferences, and understand how players use the platform.

99phl uses the following types of cookies:

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that keep you logged in during your visit. These cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences (such as language settings and game display options) to provide a more personalised experience.
• Analytics cookies: Collect anonymised data about how players use the platform — which pages are visited most, where players encounter errors, and how long sessions last. This data is used to improve the platform.
• Security cookies: Help detect and prevent fraudulent activity, including bot traffic and account takeover attempts.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will affect your ability to use the 99phl platform. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

99phl retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account data: Retained for the duration of your active 99phl account, plus a minimum of five (5) years after account closure, as required by Philippine AML regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with AMLC reporting requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years after the end of the business relationship, as required by the AMLA and its implementing rules.
• Customer support communications: Retained for three (3) years from the date of the last communication, for dispute resolution and quality assurance purposes.
• Marketing consent records: Retained for the duration of your consent, plus three (3) years after withdrawal, to demonstrate compliance.
• Technical and usage data: Retained for up to twelve (12) months, after which it is anonymised or deleted.

When personal data is no longer required, 99phl will securely delete or anonymise it in accordance with our internal data destruction procedures. Anonymised data (which can no longer identify you) may be retained indefinitely for statistical and analytical purposes.

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal data held by 99phl:

• Right to be informed: The right to know what personal data 99phl collects about you, how it is used, and with whom it is shared — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data 99phl holds about you, along with information about how it is processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you. You can update most of your account information directly through your 99phl account settings.
• Right to erasure: The right to request deletion of your personal data, subject to 99phl's legal obligations to retain certain data (e.g., AML and KYC records).
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that 99phl has violated your data privacy rights.

To exercise any of these rights, please contact 99phl using the details provided in Section 13. We will respond to all valid requests within thirty (30) days. In complex cases, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

99phl implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption: All data in transit is protected by 256-bit SSL/TLS encryption. Sensitive data at rest (including payment information and identity documents) is encrypted using AES-256.
• Access controls: Access to personal data is restricted to 99phl staff and contractors who have a legitimate need to access it for their job functions. All access is logged and audited.
• Two-factor authentication: 99phl's internal systems require multi-factor authentication for all staff accessing player data. Players are also encouraged to enable 2FA on their own accounts.
• Regular security audits: 99phl conducts regular penetration testing and security audits of its platform and infrastructure to identify and remediate vulnerabilities.
• Incident response: 99phl maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission (NPC) within 72 hours and affected players without undue delay, as required by the Data Privacy Act.

While 99phl takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You also play a role in keeping your account secure — please use a strong, unique password for your 99phl account and enable two-factor authentication.

If you are a parent or guardian and believe that your child (under 21) has registered on 99phl or provided personal data to us, please contact us immediately using the details in Section 13. We will investigate and take appropriate action without delay.

99phl employs age verification procedures during the registration process to prevent underage access. However, if you are aware of any minor attempting to use the 99phl platform, please report it to us so we can take immediate action.

99phl reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable Philippine law, or improvements to the 99phl platform. When material changes are made, we will notify registered players via email or through a prominent notice on the platform.

The updated Policy will take effect from the date specified in the notice. The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how 99phl protects your personal data.

Your continued use of the 99phl platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should stop using the platform and contact us to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or to 99phl's handling of your personal data, please contact our Data Protection Officer (DPO) or our support team using the details below:

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that 99phl has not handled your personal data in accordance with the Data Privacy Act of 2012. The NPC can be reached through their official government channels.