999phil Privacy Policy
At 999phil, your personal data is treated with the same care as your account balance. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used, and the rights you have over your data as a player in the Philippines.
Our Privacy Commitments
Six core principles that govern how 999phil handles your personal information every single day.
Your Data Is Secure
All personal data stored and transmitted by 999phil is protected using industry-standard TLS/SSL encryption. Account credentials are hashed using modern cryptographic protocols. We do not store raw passwords under any circumstances.
We Do Not Sell Your Data
999phil does not sell, rent, or trade your personal information to unaffiliated third parties for their own marketing purposes. Your data is shared only with trusted service providers who process it strictly on our behalf and under contractual data protection obligations.
NPC Compliance
999phil operates in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and the regulations issued by the National Privacy Commission (NPC). Your rights as a data subject under Philippine law are fully respected by this platform.
You Control Your Data
Registered 999phil players have the right to access, correct, and request deletion of their personal data. You may also withdraw consent for marketing communications at any time via your account settings or by contacting our support team via Live Chat.
Minimal Data Collection
We collect only the personal data necessary to deliver our services, verify your identity, process payments, and comply with regulatory obligations. We do not collect data that has no legitimate purpose in the operation of the 999phil platform.
Transparent Communications
If you opt in to marketing communications from 999phil, you will only receive messages relevant to your account, promotions, and platform updates. Every marketing email includes a clear unsubscribe option. We do not send unsolicited communications.
Contents
1. Introduction
This Privacy Policy ("Policy") describes how 999phil ("999phil," "the Platform," "we," "us," or "our") collects, uses, stores, discloses, and otherwise processes the personal data of individuals (" you," "Player," or "User") who visit, register on, or otherwise interact with the 999phil website and associated services.
999phil is committed to protecting your privacy and handling your personal data with transparency, care, and in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the regulations and issuances of the National Privacy Commission (NPC).
By registering a 999phil account, accessing the platform, or otherwise providing us with your personal data, you acknowledge that you have read and understood this Policy. This Policy forms part of, and should be read together with, the 999phil Terms and Conditions.
2. Data Controller
For the purposes of applicable Philippine data privacy law, 999phil acts as the personal information controller in respect of the personal data it collects from registered players and website visitors. This means that 999phil determines the purposes for which, and the manner in which, your personal data is processed.
Where 999phil engages third-party service providers to process personal data on its behalf — for example, payment processors, KYC verification providers, and customer support platform providers — those third parties act as personal information processors operating under contractual instructions from 999phil and subject to appropriate data protection safeguards.
For all data privacy enquiries, access requests, correction requests, or complaints, please contact our Data Protection Officer (DPO) via the contact details set out in Section 15 of this Policy.
3. Personal Data We Collect
999phil collects the following categories of personal data from players and website visitors:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government-issued ID number | Registration and KYC verification |
| Contact Data | Mobile number, email address, residential address (including city, province, postal code) | Registration and account updates |
| Financial Data | GCash number, Maya account, bank account details (BPI, BDO, UnionBank), deposit and withdrawal history | Payment processing and KYC |
| Gaming Data | Bet history, game session logs, sports betting selections, win/loss records, bonus usage | During platform use |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps, referral URL | Automatically on site visit |
| Communications Data | Live Chat transcripts, email correspondence, support ticket content | When you contact support |
| Verification Documents | Scanned copies of government-issued IDs (passport, driver's licence, SSS/UMID), selfie verification images, proof of address documents | KYC and withdrawal verification |
We do not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where sensitive data is collected (for example, a copy of your government-issued ID), it is handled with heightened care and access is restricted to authorised personnel only.
4. How We Collect Your Data
999phil collects personal data through the following means:
- Directly from you — when you register a 999phil account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions.
- Automatically — through our website's technical infrastructure, including server logs, cookies, and similar tracking technologies, when you visit or interact with the 999phil platform.
- From third-party service providers — including identity verification providers, payment processors (such as GCash, Maya, and Philippine banks), and fraud detection services that may provide us with additional data about you in connection with our KYC and anti-fraud obligations.
- From publicly available sources — where required for compliance purposes, such as checking watchlists, sanctions lists, or politically exposed persons (PEP) databases as required under Philippine anti-money laundering regulations.
5. Purposes of Processing
999phil processes your personal data for the following purposes:
- Account registration and management — creating and maintaining your 999phil player account, verifying your identity, and enabling you to access our services.
- Payment processing — processing deposits and withdrawals via GCash, Maya, BPI, BDO, UnionBank, 7-Eleven CLiQQ, GrabPay, and USDT TRC20, and reconciling financial records.
- KYC and regulatory compliance — verifying your identity and age (21+), complying with Philippine anti-money laundering laws, and fulfilling our obligations to relevant gaming and financial regulatory authorities.
- Platform operation and service delivery — operating our casino games, sports betting markets, live dealer tables, and all other platform features.
- Fraud prevention and security — detecting, investigating, and preventing fraudulent activity, money laundering, and other illegal or prohibited conduct on the platform.
- Responsible gaming — monitoring gaming behaviour to identify potential problem gambling indicators, implementing player-requested limits and self-exclusions, and fulfilling responsible gaming obligations.
- Customer support — responding to your enquiries, resolving disputes, and maintaining records of communications.
- Marketing communications — sending you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications.
- Platform improvement and analytics — analysing aggregated and anonymised usage data to improve the 999phil platform, user experience, and product offerings.
- Legal and regulatory obligations — complying with court orders, regulatory requests, and applicable Philippine law.
6. Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012, 999phil processes your personal data on the following lawful bases:
- Contractual necessity — processing required to perform the contract between you and 999phil (i.e., the Terms and Conditions), including account creation, payment processing, and service delivery.
- Legal obligation — processing required to comply with applicable Philippine law, including anti-money laundering regulations (AMLA), gaming regulations, and tax laws.
- Legitimate interests — processing carried out for the legitimate interests of 999phil, including fraud prevention, platform security, responsible gaming monitoring, and service analytics, where such interests are not overridden by your rights and interests.
- Consent — processing based on your freely given, specific, and informed consent, particularly in relation to optional marketing communications. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
8. Data Retention
999phil retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.
As a general guide, our retention periods are as follows:
- Active account data — retained for the full duration of your account relationship with 999phil and for a minimum of five (5) years following account closure, in compliance with Philippine anti-money laundering record-keeping requirements.
- KYC and identity verification documents — retained for a minimum of five (5) years following the end of the customer relationship, or longer if required by applicable law or regulatory directive.
- Financial transaction records — retained for a minimum of five (5) years following each transaction, in compliance with AMLA and BIR requirements.
- Customer support communications — retained for a minimum of two (2) years following resolution of the relevant enquiry.
- Marketing consent records — retained for as long as you remain opted in, plus a reasonable period following opt-out to evidence compliance.
When personal data is no longer required for any lawful purpose, 999phil will securely delete or anonymise it in accordance with our data deletion procedures.
9. Data Security
999phil implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security measures include, but are not limited to:
- TLS/SSL encryption for all data transmitted between your browser and the 999phil platform.
- Encrypted storage of sensitive personal data, including identity documents and financial information, using industry-standard encryption algorithms.
- Cryptographic hashing of account passwords — raw passwords are never stored.
- Access controls restricting access to personal data to authorised 999phil personnel and contractors with a legitimate need to access such data.
- Regular security assessments, penetration testing, and vulnerability scanning of the 999phil platform infrastructure.
- Staff training on data privacy obligations and information security best practices.
- Incident response procedures for detecting, reporting, and managing personal data breaches.
While 999phil takes data security seriously and employs robust security measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 999phil will notify the National Privacy Commission and, where required, affected players in accordance with applicable Philippine law and NPC regulations.
11. Your Data Subject Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 999phil:
- Right to be informed — the right to be informed of how your personal data is being collected and processed, as set out in this Policy.
- Right of access — the right to request a copy of the personal data 999phil holds about you, along with information about how it is being processed.
- Right to rectification — the right to request correction of inaccurate or incomplete personal data held about you. You may update certain personal details directly in your account settings.
- Right to erasure — the right to request deletion of your personal data in certain circumstances, subject to our legal and regulatory retention obligations (see Section 8).
- Right to data portability — the right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
- Right to object — the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests in certain circumstances.
- Right to lodge a complaint — the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that 999phil has processed your personal data in violation of applicable law.
To exercise any of the above rights, please contact our Data Protection Officer via Live Chat or email as set out in Section 15. We will respond to verified data subject requests within thirty (30) calendar days of receipt, in accordance with NPC guidelines. We may need to verify your identity before processing your request.
12. Protection of Minors
999phil is strictly an adults-only platform. Access to the 999phil platform is limited to individuals who are 21 years of age or older, in compliance with the minimum age requirements applicable to online gambling in the Philippines.
999phil does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the 999phil registration and KYC process. Where 999phil discovers or has reason to believe that a registered account belongs to a person under the age of 21, the account will be suspended immediately, any balance will be returned to the original payment method, and all associated personal data will be securely deleted without undue delay.
If you are a parent or guardian and believe that your child under the age of 21 has registered a 999phil account, please contact our support team via Live Chat immediately so that we can take appropriate action.
13. International Data Transfers
999phil's primary operations are based in the Philippines and your personal data is processed principally within the Philippines. However, certain third-party service providers engaged by 999phil — including cloud infrastructure providers, gaming software developers, and cybersecurity service providers — may process personal data in other jurisdictions.
Where personal data is transferred outside the Philippines, 999phil takes appropriate steps to ensure that such transfers are carried out in compliance with the Philippine Data Privacy Act, including by ensuring that the recipient country provides an adequate level of data protection or by implementing appropriate contractual safeguards (such as data processing agreements) with the recipient service providers.
For more information about the safeguards in place for international data transfers, please contact our Data Protection Officer using the details in Section 15.
14. Policy Amendments
999phil reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or NPC guidance. When we make material changes to this Policy, we will notify you by posting a prominent notice on the 999phil platform and, where appropriate, by sending an email to your registered address prior to the changes taking effect.
The most current version of this Privacy Policy is always available on this page, together with the effective date. We encourage you to review this Policy periodically. Your continued use of the 999phil platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy.
If you do not agree with the changes to this Policy, you should cease using the platform and contact our support team to request account closure and erasure of your personal data, subject to our legal retention obligations.
15. Contact Our Data Protection Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 999phil, please contact our Data Protection Officer (DPO) through the following channels:
- Live Chat: Available 24/7 directly from the 999phil platform. This is the fastest channel for urgent data privacy enquiries, including suspected unauthorised account access.
- Email: [email protected] — Please include "Data Privacy Request" in the subject line, along with your registered username and a clear description of your request. We aim to respond to all data privacy correspondence within five (5) business days.
For formal complaints regarding 999phil's handling of your personal data that have not been resolved to your satisfaction through our internal process, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines.
This Privacy Policy was last reviewed and updated in January 2026. 999phil is committed to keeping this Policy current and accurate. Version: 2026.01.
Play Safe and Play Smart at 999phil
Your data is protected. Your account is secure. Now enjoy hundreds of casino games, live sports betting on PBA and NBA, and instant GCash withdrawals — all on 999phil.
🔞 21+ only | Please gamble responsibly | 999phil serves adult players across the Philippines