Privacy Policy

1 About This Policy

This Privacy Policy ("Policy") describes how phil99 ("Company," "we," "us," "our"), the operator of the online gaming platform at phil99.net, collects, uses, stores, shares, and protects the personal information of individuals ("you," "Player," "User") who access or use our platform, website, mobile interface, or any related services.

This Policy is issued in compliance with Republic Act No. 10173, known as the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations, as administered by the National Privacy Commission ("NPC") of the Philippines. Phil99 acts as the personal information controller in respect of the data described in this Policy.

By registering an account on phil99, depositing funds, or otherwise using our services, you acknowledge that you have read, understood, and consent to the collection and processing of your personal data as described in this Policy. If you do not agree, please discontinue use of the phil99 platform and close your account.

This Policy should be read in conjunction with our Terms & Conditions, which govern your overall use of the phil99 platform.

2 Personal Data We Collect

Phil99 collects personal data that is necessary to provide our services, comply with legal obligations, and maintain the security and integrity of the platform. The categories of data we collect include:

2.1 Identity and Registration Data

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify you are 21 years of age or older)
• Gender
• Nationality and country of residence
• Government-issued ID number and ID document images (e.g., Philippine National ID, UMID, SSS ID, PhilHealth ID, driver's license, or passport)

2.2 Contact Data

• Email address
• Philippine mobile number
• Residential address (barangay, city/municipality, province, ZIP code)

2.3 Financial and Transaction Data

• GCash or Maya account number used for deposits and withdrawals
• Bank account details for bank transfer transactions (BPI, BDO, Metrobank)
• Deposit and withdrawal history
• Wagering and gaming transaction history
• Bonus and promotion redemption history
• Account balance and statement history

2.4 Technical and Usage Data

• IP address and approximate geolocation
• Device type, model, and operating system
• Browser type and version
• Session timestamps and duration
• Pages and games accessed, and navigation patterns
• Referring URLs and search terms leading to the platform

2.5 Communications Data

• Records of your communications with phil99 customer support (live chat transcripts, email correspondence)
• Feedback, complaint, and dispute records
• Marketing preference settings

2.6 Responsible Gaming Data

• Self-exclusion requests and status
• Deposit limit and session time limit configurations set by you
• Problem gambling flags generated by our monitoring systems

3 How We Collect Your Data

Phil99 collects personal data through the following methods:

4 How We Use Your Personal Data

Phil99 uses your personal data for the following purposes:

4.1 Account and Service Delivery

To create and manage your player account; to process deposits, withdrawals, and in-platform transactions; to provide access to casino games, sports betting, bingo, e-sports, and video poker titles; and to deliver customer support services.

4.2 Identity Verification and Compliance

To verify that you meet the 21-years-of-age requirement and to comply with Know Your Customer (KYC) obligations under PAGCOR regulations and Philippine anti-money laundering laws, including Republic Act No. 9160 (Anti-Money Laundering Act) and its amendments.

4.3 Security and Fraud Prevention

To detect, investigate, and prevent fraudulent transactions, multiple account creation, bonus abuse, money laundering, and other activities that violate our Terms & Conditions or applicable law. Phil99 employs automated monitoring tools alongside manual review processes for this purpose.

4.4 Responsible Gaming

To operate responsible gaming tools including deposit limits, session reminders, and self-exclusion features; to identify players who may be exhibiting signs of problem gambling; and to comply with responsible gaming obligations under the PAGCOR regulatory framework.

4.5 Marketing and Promotions

To send you promotional offers, bonus notifications, and platform updates by email or SMS, where you have consented to receive such communications. You may withdraw this consent at any time by adjusting your notification preferences in your account settings or by contacting [email protected].

4.6 Platform Improvement

To analyze aggregated usage data in order to improve the phil99 platform's performance, game selection, payment flows, and overall user experience. Where possible, such analysis uses anonymized or pseudonymized data.

4.7 Legal Obligations

To comply with applicable Philippine laws and regulations, respond to lawful requests from government authorities including PAGCOR and the Anti-Money Laundering Council (AMLC), and to establish, exercise, or defend legal claims.

5 Legal Bases for Processing

Under the Data Privacy Act of 2012, phil99 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our agreement with you, including account registration, transaction processing, and service delivery.
• Legal obligation: Processing required to comply with applicable Philippine laws including AML regulations, PAGCOR licensing requirements, and tax obligations.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and business analytics — where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential analytics cookies, which you may withdraw at any time.

6 Data Sharing and Disclosure

Phil99 does not sell, rent, or trade your personal data to third parties for their own commercial marketing purposes. We may share your data with the following categories of recipients only to the extent necessary and for the purposes described in this Policy:

6.1 Service Providers and Processors

Third-party companies that process data on phil99's behalf, including KYC and identity verification providers, payment processors (GCash, Maya, BPI, BDO, Metrobank), customer support platform providers, and cloud hosting services. These parties are contractually bound to process your data only on phil99's instructions and to maintain appropriate security standards.

6.2 Regulatory and Law Enforcement Authorities

Philippine government bodies including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies, where disclosure is required by law, court order, or regulatory directive.

6.3 Game Content Providers

Third-party game studios and content aggregators whose games are available on the phil99 platform may receive limited technical data (such as player session tokens) necessary to operate the game. These providers do not receive your full identity or financial data.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of phil99's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change via email or a prominent notice on the platform prior to the transfer.

7 Cookies and Tracking Technologies

Phil99 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the platform. Cookies are small text files stored on your device when you visit the phil99 website.

You can control cookie settings through your browser preferences. Note that disabling essential cookies may impair your ability to log in or use certain platform features. Phil99 does not use cookies to track your activity on third-party websites unrelated to our platform.

8 Data Retention

Phil99 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by Philippine AML regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction in accordance with AMLC and PAGCOR record-keeping requirements.
• Customer support communications: Retained for three (3) years from the date of the interaction, unless a longer period is required for dispute resolution.
• Marketing consent records: Retained for the duration of your consent or until you withdraw it, plus one (1) year thereafter as evidence of consent.
• Technical and usage logs: Retained for up to twelve (12) months for security monitoring and platform analytics purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Where data is anonymized, it may be retained indefinitely for aggregate statistical analysis.

9 Data Security

Phil99 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the phil99 platform is encrypted using industry-standard SSL/TLS protocols.
• Data encryption at rest: Sensitive personal data including ID document images and payment details are encrypted when stored on our servers.
• Access controls: Access to personal data within phil99 is restricted on a strict need-to-know basis. Staff with data access undergo regular privacy and security training.
• Two-factor authentication (2FA): Phil99 supports 2FA for player account logins to reduce the risk of unauthorized access.
• Penetration testing and audits: The phil99 platform undergoes periodic security assessments by qualified third-party professionals.
• Incident response procedures: Phil99 maintains documented procedures for detecting, containing, and reporting personal data breaches in accordance with the NPC's breach notification requirements under the DPA.

While phil99 applies robust security practices, no online platform can guarantee absolute security. You are responsible for keeping your own login credentials confidential and for logging out of your account when using shared devices.

10 Your Data Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phil99. To exercise any of these rights, contact our Data Protection Officer at [email protected] with the subject line "Data Rights Request."

Phil99 will respond to verified data rights requests within thirty (30) calendar days of receipt. We may request proof of identity before fulfilling any request to protect against unauthorized disclosure.

11 Children's Privacy

The phil99 platform is strictly intended for individuals who are 21 years of age or older, consistent with PAGCOR regulations governing online gaming in the Philippines. Phil99 does not knowingly collect personal data from persons under the age of 21.

If phil99 discovers or is notified that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the collected data, and take appropriate corrective action. If you believe a minor has registered on phil99, please contact us at [email protected] immediately.

12 Third-Party Links

The phil99 platform may contain references or links to third-party websites or services (such as payment processor portals). Phil99 is not responsible for the privacy practices of any third-party website. Once you leave the phil99 platform, this Privacy Policy no longer applies. We encourage you to review the privacy policies of any third-party services you access in connection with your use of phil99.

13 Updates to This Policy

Phil99 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. Where a material change is made, we will notify registered players via email or a prominent in-platform notice at least seven (7) calendar days before the change takes effect.

The "Effective Date" at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the phil99 platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

14 Contact and Data Protection Officer

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact phil99's Data Protection Officer using the details below:

• Email: [email protected] (subject line: "Privacy Policy Inquiry" or "Data Rights Request")
• Platform: phil99.net
• Live Chat: Available within your account dashboard, 24 hours a day, seven days a week

If you are not satisfied with phil99's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines at www.privacy.gov.ph.