ph99 Privacy Policy – How We Collect, Use, and Protect Your Personal Data in the Philippines

This Privacy Policy describes how ph99 ("ph99", "we", "us", "our") collects, processes, stores, uses, and protects the personal information of Filipino members and visitors who access the ph99 website at ph99.org, the ph99 mobile application ("ph99 App"), and any related ph99 services (collectively, the "ph99 Platform").

ph99 is committed to handling all personal data entrusted to it by Filipino players with the highest standards of care, transparency, and security. ph99 processes personal data only for the purposes outlined in this Privacy Policy and only to the extent necessary to deliver and improve the ph99 gaming and entertainment experience for Filipino members aged 21 and above.

By registering an account on ph99, using the ph99 App, or otherwise accessing the ph99 Platform, you acknowledge that you have read, understood, and consent to the data processing practices described in this Privacy Policy. If you do not agree to the terms of this Privacy Policy, you must not use the ph99 Platform.

ph99 is the personal information controller (as defined under the Data Privacy Act of 2012) responsible for the personal data of Filipino members collected and processed through the ph99 Platform. ph99 operates the ph99 online gaming and entertainment platform at ph99.org, providing bingo, online slots, esports betting, and related gaming services to eligible Filipino players aged 21 and above.

ph99 has designated a Data Protection Officer (DPO) responsible for overseeing ph99's compliance with the Data Privacy Act of 2012 and related NPC issuances. Filipino members may contact the ph99 DPO for privacy-related queries and data rights requests via the ph99 live support channel. Contact details are also provided in Section 15 of this Privacy Policy.

ph99 collects the following categories of personal data from Filipino members and, where applicable, from visitors to the ph99 Platform:

3.1 Registration and Identity Data

• Full legal name as it appears on your Philippine government-issued identification
• Date of birth (for age verification — ph99 is strictly for players aged 21 and above)
• Gender
• Registered email address
• Philippine mobile number
• Residential address in the Philippines
• Username and encrypted password

3.2 Identity Verification (KYC) Documents

• Copies of valid Philippine government-issued photo identification (e.g., Philippine National ID, Passport, Driver's Licence, UMID, SSS ID, PRC ID)
• Selfie or live photo for document verification purposes where required
• Proof of address documents where additional verification is required by ph99

3.3 Financial and Payment Data

• GCash registered mobile number and transaction reference numbers related to ph99 deposits and withdrawals
• Maya account reference details related to ph99 transactions
• Philippine bank account name, bank name, and account number for bank transfer deposits and withdrawals to and from ph99
• Transaction history for all PHP deposits to and withdrawals from your ph99 account

3.4 Gaming and Activity Data

• Game play history across all ph99 game categories including slots, bingo, esports betting
• Wager amounts, game outcomes, and session durations on ph99
• Bonus and promotion activity and wagering requirement progress on ph99
• Responsible gaming tool settings including deposit limits and self-exclusion records

3.5 Technical and Device Data

• IP address and geolocation data at the time of access to the ph99 Platform
• Device type, operating system, browser type and version
• ph99 App version and device identifiers where the ph99 App is used
• Session timestamps, click-stream data, and feature usage data on ph99

3.6 Communications Data

• Records of all communications between you and the ph99 support team, including live chat transcripts, support ticket content, and any information you provide when contacting ph99
• Email and push notification preferences and interaction records

ph99 collects personal data about Filipino members through the following channels and methods:

• Direct provision by the member: When you register a ph99 account, complete KYC verification, make a deposit or withdrawal using GCash, Maya, or Philippine bank transfer, contact ph99 live support, or interact with any ph99 feature that requires you to input information.
• Automated data collection: Through cookies, web analytics tools, and the ph99 App's technical logging systems, which automatically record technical and device data as described in Section 3.5 above when you access the ph99 Platform.
• Payment service providers: When you transact via GCash or Maya, ph99 receives transaction confirmation data from these Philippine e-wallet providers to verify that your ph99 deposit or withdrawal has been processed.
• Identity verification service providers: ph99 may use third-party KYC verification technology providers to assist in verifying the identity of Filipino members. These providers process only the data necessary for verification and are bound by strict data processing agreements with ph99.
• Third-party game providers: Game providers whose content is available on the ph99 Platform may provide ph99 with game session and outcome data related to your play on ph99.

ph99 uses the personal data of Filipino members for the following purposes:

ph99 does not use the personal data of Filipino members for purposes incompatible with those listed above without first obtaining your explicit consent or establishing a separate lawful basis under the Data Privacy Act of 2012.

ph99 processes the personal data of Filipino members on the following legal bases as provided under the Data Privacy Act of 2012:

• Contractual necessity: Processing that is necessary to perform the ph99 Member Agreement with you — including account registration, KYC verification, game delivery, and payment processing for PHP deposits and withdrawals via GCash, Maya, or Philippine bank transfer.
• Legitimate interests: Processing carried out for ph99's legitimate interests where these interests are not overridden by the rights and freedoms of Filipino members — including fraud detection, platform security, anti-money laundering monitoring, and platform analytics and improvement.
• Consent: Processing for which you have given explicit consent — primarily, sending you marketing and promotional communications from ph99. You may withdraw this consent at any time through your ph99 account settings or by contacting ph99 live support.
• Legal obligation: Processing required to comply with ph99's obligations under Philippine law, including anti-money laundering (AMLA) obligations, data breach notification requirements, and cooperation with lawful orders from Philippine government authorities.

ph99 does not sell the personal data of Filipino members. ph99 may share member personal data with the following categories of third parties, strictly on a need-to-know basis and subject to data processing agreements or other appropriate safeguards:

• Philippine payment service providers: GCash, Maya, and Philippine banks receive only the transaction data necessary to process your ph99 deposits and withdrawals in PHP.
• KYC and identity verification service providers: Third-party technology partners that assist ph99 in verifying the identity and age of Filipino members as required for regulatory compliance and fraud prevention.
• Game content providers: Third-party game providers whose content is hosted on the ph99 Platform receive limited game session data for the purpose of delivering and operating game content on ph99.
• Cloud hosting and IT infrastructure providers: ph99 uses secure cloud infrastructure services to host the ph99 Platform and store member data. These providers are contractually bound to process ph99 member data only as directed by ph99 and in accordance with applicable data protection law.
• Philippine government and law enforcement authorities: ph99 will disclose member personal data to Philippine government agencies, law enforcement, or regulatory bodies where lawfully required to do so — including compliance with Anti-Money Laundering Act (AMLA) obligations and court orders issued by Philippine courts.
• Professional advisers: ph99's legal, financial, and compliance advisers may have access to member data where necessary for the provision of professional services, subject to confidentiality obligations.

When you make a PHP deposit to your ph99 account via GCash or Maya, or request a PHP withdrawal from ph99 to your GCash wallet, Maya account, or Philippine bank account, the following data handling practices apply:

• ph99 receives confirmation of successful transactions from GCash, Maya, or your Philippine bank, including the transaction reference number and the PHP amount transacted. ph99 does not store your full GCash PIN, Maya password, or online banking login credentials.
• The mobile number registered to your GCash or Maya account is collected by ph99 for the purpose of verifying that your ph99 payment account is registered in your own name, in accordance with ph99's matched deposit-withdrawal policy.
• Philippine bank account details provided for bank transfer withdrawals from ph99 are stored securely and used only for processing your withdrawal requests.
• All ph99 payment data is subject to the same encryption and security standards as other member personal data on the ph99 Platform.

The ph99 website and ph99 App use cookies and similar tracking technologies to deliver and improve the ph99 Platform experience for Filipino members. A cookie is a small data file placed on your device when you visit the ph99 website.

Types of Cookies Used by ph99

• Essential cookies: Required for the ph99 website to function correctly — including session management, login state persistence, and security features. These cookies cannot be disabled without affecting Platform functionality.
• Analytics cookies: Used by ph99 to understand how Filipino members interact with the ph99 Platform — including which game categories are most popular, how members navigate between pages, and where technical issues may be occurring. Analytics data is aggregated and not used to identify individual members.
• Preference cookies: Store your ph99 platform preferences — such as language settings and display configurations — so that your ph99 experience is consistent across sessions and devices.
• Marketing cookies: Used with your consent to deliver relevant ph99 promotional information to you. You can opt out of marketing cookies through your ph99 account preferences or browser settings.

You may manage your cookie preferences through your browser settings. Note that disabling essential cookies may affect your ability to access and use certain features of the ph99 Platform.

ph99 retains the personal data of Filipino members for as long as necessary to fulfil the purposes described in this Privacy Policy and to comply with applicable Philippine legal obligations. The following general data retention periods apply:

• Active account data: Retained for the duration of your active ph99 membership and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations under Philippine law.
• KYC documents: Retained for a minimum of five (5) years following the completion of identity verification or the closure of the ph99 account, whichever is later, as required by AMLA and related Philippine regulations.
• Financial transaction records: PHP deposit and withdrawal records, including GCash, Maya, and bank transfer transactions on ph99, are retained for a minimum of five (5) years in accordance with Philippine financial record-keeping requirements.
• Gaming activity records: Game history, wagering records, and responsible gaming tool activity on ph99 are retained for a minimum of three (3) years following the last recorded session.
• Communications records: Live chat transcripts and support ticket records are retained for a minimum of two (2) years to assist in complaint and dispute resolution.

When personal data is no longer required for retention, ph99 will securely delete or anonymise the data in a manner that prevents its reconstruction or identification.

ph99 implements a comprehensive set of technical and organisational security measures to protect the personal data of Filipino members against unauthorised access, disclosure, alteration, loss, or destruction. Key measures include:

• SSL/TLS encryption for all data transmitted between Filipino members' devices and ph99 servers.
• Encrypted storage of sensitive member data, including passwords (stored as hashed values) and KYC documents.
• Access controls limiting internal ph99 staff access to member personal data on a strict need-to-know basis, with role-based access permissions.
• Two-factor authentication (2FA) available to all ph99 members to protect account access.
• Transaction monitoring to detect and flag unusual account activity patterns that may indicate unauthorised access or fraud.
• Regular security assessments of the ph99 Platform to identify and remediate potential vulnerabilities.
• Staff training on data protection obligations and security practices for all ph99 personnel who handle member personal data.

Under the Data Privacy Act of 2012, Filipino members of ph99 have the following data privacy rights, which can be exercised by contacting ph99 live support or the ph99 Data Protection Officer at any time:

The ph99 Platform is strictly restricted to Filipino players who are at least 21 years of age. ph99 does not knowingly collect or process the personal data of any person under the age of 21. The ph99 registration process requires all members to declare their date of birth, and ph99 applies mandatory KYC identity verification to confirm that all members meet the minimum age requirement of 21 years.

If ph99 discovers or has reason to believe that personal data has been submitted by or collected from a person under the age of 21, ph99 will immediately close the relevant account, delete the personal data collected, and void any transactions processed through that account. Parents or guardians who believe their child under 21 may have registered on ph99 are encouraged to contact ph99 live support immediately so that appropriate action can be taken without delay.

ph99 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in ph99's data processing practices, updates to Philippine data privacy law, or changes in the ph99 Platform's features and services. When material changes are made to this Privacy Policy, ph99 will:

• Post the updated Privacy Policy on the ph99 website at ph99.org/privacy-policy with a revised effective date.
• Where practicable, send a notification to Filipino members' registered email addresses summarising the key changes.
• Where required by Philippine law, obtain fresh consent from Filipino members for any new data processing activities introduced by the updated Privacy Policy.

Your continued use of the ph99 Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree to the changes, please discontinue your use of the ph99 Platform and request account closure through ph99 live support.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph99, Filipino members may contact the ph99 Data Protection Officer through the following channels:

• ph99 Live Chat: Available 24/7 via the in-platform chat feature on the ph99 website and ph99 App. This is the fastest way to reach the ph99 support team for privacy-related queries.
• Email (plain text — not a clickable link): [email protected]
• Subject line: When emailing, please use "Data Privacy Request – [Your Registered ph99 Email]" in the subject line to ensure your request is directed to the correct team.

ph99 aims to acknowledge all data privacy requests from Filipino members within five (5) business days and to fully respond within thirty (30) calendar days, in accordance with the timelines specified by the National Privacy Commission (NPC) of the Philippines.