Privacy Policy
999p Online Casino

01 Who We Are

999p is an online casino and sports betting platform operating at 999p.vu, primarily serving Filipino players across Manila, Cebu, Davao, Quezon City, Makati, and the rest of the Philippines. For the purposes of this Privacy Policy, 999p is the data controller responsible for your personal data — meaning we determine the purposes and means of processing your information.

We take our responsibilities under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations ("IRR") seriously. Our designated Data Protection Officer ("DPO") can be contacted through our customer support channels for any data privacy-related queries or requests.

02 Data We Collect

999p collects personal data across several categories depending on how you interact with our platform. The categories below outline what we collect and why each type is necessary:

03 How We Collect Your Data

999p collects personal data through the following means:

• Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or respond to a survey or promotion.
• Automated collection: Technical and usage data is collected automatically when you browse or use the 999p platform, including through cookies, session tracking, and server logs.
• Third-party sources: Where permitted by law, we may receive information from identity verification providers, payment processors, fraud detection services, and where applicable, publicly available sources such as sanctions lists and government databases.
• Device permissions: If you access 999p via a mobile browser, certain device-level data such as device identifiers may be collected subject to your device's operating system permissions.

We do not purchase personal data lists from third-party data brokers or conduct unsolicited data harvesting from social media platforms or other external sources beyond what is described above.

04 Why We Use Your Data

999p processes your personal data for the following specific purposes. We do not use your data for any purpose incompatible with those listed below without first obtaining your separate consent:

• Account creation and management: To register your account, verify your identity, and maintain your player profile throughout your relationship with 999p.
• Age verification: To confirm that you are at least 21 years of age as required under Philippine regulations governing online casino and gaming platforms.
• Transaction processing: To accept deposits and process withdrawal requests through your chosen payment method — GCash, PayMaya, BPI, BDO, Metrobank, or USDT.
• Regulatory compliance: To comply with PAGCOR licensing requirements, Anti-Money Laundering (AML) obligations under Republic Act No. 9160 as amended, and AMLC reporting requirements.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeovers, money laundering, and other prohibited conduct on the platform.
• Responsible gaming: To monitor gameplay patterns, identify potentially problematic behaviour, enforce self-exclusion requests, and deliver responsible gaming interventions where necessary.
• Customer support: To investigate and respond to complaints, disputes, and general inquiries submitted through live chat or email.
• Platform improvement: To analyse usage patterns, test new features, resolve technical issues, and enhance the overall 999p experience for Filipino players.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may opt out at any time.
• Legal proceedings: To establish, exercise, or defend legal claims where necessary, including cooperation with Philippine regulatory and law enforcement authorities.

05 Legal Basis for Processing

Under the Philippine Data Privacy Act and its IRR, 999p processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to upon registration — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable Philippine laws, including the Data Privacy Act, Anti-Money Laundering Act, and PAGCOR regulatory requirements.
• Legitimate interests: Processing conducted for 999p's legitimate business interests, including fraud prevention, platform security, and improving our services — where these interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications and optional data uses where we have obtained your prior, informed, and freely given consent. You retain the right to withdraw consent at any time without penalty.
• Vital interests: In limited circumstances, where processing is necessary to protect the vital interests of a data subject or another person, such as preventing harm.

06 Data Sharing & Disclosure

999p does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share data only in the following defined circumstances and only to the minimum extent necessary:

• Identity verification providers: Third-party KYC and age verification services that help us confirm player identities and prevent underage gambling in compliance with PAGCOR requirements.
• Payment processors: GCash, PayMaya, and banking partners (BPI, BDO, Metrobank) and cryptocurrency transaction processors as required to complete financial transactions.
• Game suppliers: Licensed third-party game providers who supply casino games and sports betting products on the 999p platform. These suppliers may receive technical session data necessary for game operation.
• Fraud detection services: Specialist providers who assist 999p in identifying and preventing fraudulent account activity, bonus abuse, and money laundering.
• Regulatory authorities: PAGCOR, AMLC, the National Privacy Commission (NPC), and other competent Philippine government authorities where disclosure is required by law or regulatory mandate.
• Legal and professional advisors: Lawyers, auditors, and other professional advisors engaged by 999p for legal or compliance purposes, subject to confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of assets involving 999p, your personal data may be transferred as part of that transaction. You will be notified of any such transfer in advance where legally required.

All third parties with whom 999p shares personal data are required to maintain the confidentiality of that data and to process it only for the purposes specified by 999p, consistent with this Privacy Policy and applicable data protection laws.

07 Cookies & Tracking Technologies

The 999p platform uses cookies and similar tracking technologies to deliver a smooth, personalised, and secure experience for Filipino players. The types of cookies we use are described in the table below:

You can manage or delete cookies through your browser settings at any time. Please note that disabling functional or analytics cookies may affect certain features of the 999p platform. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

08 Data Retention

999p retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine laws and regulations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status plus a mandatory post-closure period as required by PAGCOR and AMLC regulations.
• Financial transaction records: Retained for a minimum of five (5) years following the date of the transaction in compliance with anti-money laundering regulations under the AMLA.
• KYC and identity documents: Retained for a minimum of five (5) years after account closure or as otherwise required by applicable Philippine law.
• Customer support communications: Retained for up to three (3) years from the date of the last interaction for dispute resolution and quality assurance purposes.
• Marketing consent records: Retained for the duration of the marketing relationship plus one (1) year, to demonstrate lawful basis for communications sent.
• Technical and security logs: Retained for up to twelve (12) months for fraud detection and platform security purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of identifiable information. Where data is required to be retained for ongoing legal proceedings or regulatory investigations, it will be preserved for the duration of those proceedings regardless of standard retention schedules.

09 Data Security

The security of your personal data is a top priority at 999p. We implement a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in transit: All data transmitted between your browser or device and our servers is protected using TLS (Transport Layer Security) encryption.
• Encryption at rest: Sensitive personal data including identity documents and financial records is stored using AES-256 encryption on secured servers.
• Access controls: Personal data is accessible only to authorised 999p personnel whose job function requires it, enforced through role-based access controls and multi-factor authentication for internal systems.
• Regular security audits: 999p conducts periodic vulnerability assessments and penetration testing of our platform infrastructure.
• Incident response: We maintain a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, we will notify the National Privacy Commission (NPC) within 72 hours of discovery, and affected players will be informed without undue delay as required by the Data Privacy Act.

While we take all reasonable steps to safeguard your data, no online platform can guarantee absolute security. You are also responsible for maintaining the confidentiality of your 999p account credentials. If you suspect your account has been compromised, contact our support team immediately via live chat.

10 Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 999p. These rights may be exercised by contacting our Data Protection Officer through live chat or email:

• Right to be Informed: You have the right to be told what personal data we collect, how we use it, who we share it with, and how long we keep it — all of which is covered in this Policy.
• Right to Access: You may request a copy of the personal data 999p holds about you, along with details of how that data is being processed. We will respond to verified access requests within thirty (30) days.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request correction. Some data fields (such as your registered name and date of birth after verification) cannot be changed without documentary evidence.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, where you withdraw consent (where consent is the legal basis), or where processing is unlawful. This right is subject to our legal retention obligations under Philippine law.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to other types of processing where we rely on legitimate interests as our legal basis.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Lodge a Complaint: If you believe 999p has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11 Children & Minors

The 999p platform is strictly intended for adults aged 21 years and above, in line with Philippine regulations governing casino-style online gambling. We do not knowingly collect personal data from individuals under the age of 21.

During the registration process, all users are required to confirm their date of birth and consent to age verification. Where 999p discovers or is made aware that a registered account is held by a person under 21 years of age, we will immediately suspend the account, void all transactions, return any deposited funds to the original payment source, and permanently delete the personal data associated with that account to the extent permitted by law.

If you are a parent or guardian and believe that your child has registered an account on 999p, please contact our support team immediately via live chat so we can take prompt action. We recommend using parental control software to restrict access to gambling websites on devices accessible to minors.

12 International Data Transfers

As an online platform, certain aspects of 999p's technical infrastructure, third-party service providers, and game suppliers may be located outside of the Philippines. Where your personal data is transferred to a country outside the Philippines, 999p will ensure that appropriate safeguards are in place to protect your information to a standard consistent with the Philippine Data Privacy Act.

Such safeguards may include contractual data processing agreements with the receiving entity that impose data protection obligations equivalent to those under Philippine law, or reliance on the National Privacy Commission's approved frameworks for cross-border data transfers.

By using the 999p platform, you acknowledge that your data may be processed in jurisdictions outside the Philippines. We take all reasonable steps to ensure that international transfers are conducted with appropriate protections in place. If you have questions about specific transfer safeguards applicable to your data, contact our DPO.

13 Changes to This Privacy Policy

999p reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform services. When we make material changes to this Policy, we will:

• Update the "Last Updated" date displayed at the top of this page.
• Send a notification to the email address registered on your 999p account where the changes are material and affect your rights.
• Display a prominent notice on the 999p website for a reasonable period following the update.

Your continued use of the 999p platform following the effective date of any update to this Policy constitutes your acceptance of the revised version. If you do not agree with the updated Policy, you must stop using the platform and may close your account in accordance with the Terms & Conditions. We recommend reviewing this page periodically to stay informed of how we are protecting your information.

14 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the way 999p handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 on any page of the 999p platform. This is the fastest way to reach our Data Protection Officer for urgent privacy matters.
• Email: [email protected] — for formal written requests, rights exercises, or detailed privacy inquiries requiring a documented response.

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent body responsible for administering and enforcing the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is available through the Commission's official channels.