Privacy Policy – How 99ph Collects, Uses, and Protects Your Personal Data

1. Data Controller

99ph ("99ph," "we," "us," or "our") is the data controller for personal information collected through the 99ph platform. 99ph operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines.

As data controller, 99ph determines the purposes and means by which personal data is processed. Our designated Data Protection Officer (DPO) can be contacted at the email address provided in Section 14 of this Policy.

2. Personal Data We Collect

99ph collects the following categories of personal data from players and platform users:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used for age verification — you must be 21+ to use 99ph)
• Philippine mobile number (used as primary account identifier and for OTP delivery)
• Email address
• Government-issued ID document details (type, number, issuing authority) — collected during KYC verification
• Selfie or liveness check photograph — collected during KYC verification
• Residential address

2.2 Financial Data

• GCash number or Maya account identifier linked to your 99ph Wallet
• Bank account details (account name, account number, bank name) for withdrawal processing
• Deposit and withdrawal transaction history
• Wallet balance and transaction records

2.3 Gaming Activity Data

• Game history (titles played, bet amounts, outcomes, timestamps)
• Sports betting selections, stake amounts, and settlement records
• Bonus and promotion usage records
• Responsible gaming settings and self-exclusion elections

2.4 Technical & Usage Data

• IP address and approximate geolocation (country/region level)
• Device type, operating system, and browser information
• Session duration, login timestamps, and page interaction data
• Cookie identifiers and similar tracking technologies (see Section 7)

2.5 Communications Data

• Records of live chat, email, and in-app support communications
• Survey responses and voluntary feedback submitted to 99ph
• Marketing preference settings (opt-in/opt-out status)

3. How We Collect Your Data

99ph collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey.
• Automatically — through cookies, web beacons, and server logs when you access the 99ph platform, as described in Section 7.
• From third-party payment providers — when you transact via GCash, Maya, or partner banks, 99ph receives confirmation data (transaction reference numbers, amounts, payer identity) necessary to reconcile your wallet.
• From identity verification providers — 99ph uses licensed KYC service providers to verify the authenticity of identity documents submitted during account verification. These providers process your document data and return a verification result to 99ph.
• From regulatory databases — PAGCOR's player exclusion register is checked during registration to identify self-excluded individuals.

4. How We Use Your Personal Data

99ph does not use personal data for automated decision-making that produces legal effects on players, except as required by our AML and fraud prevention systems, which are subject to human review upon player request.

5. Legal Basis for Processing

99ph processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the player account agreement and provide 99ph's gaming services to you.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160, as amended), the Data Privacy Act of 2012, and other applicable Philippine laws.
• Legitimate interest: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our interests do not override your privacy rights.
• Consent: Processing for marketing communications and optional analytics features, where you have freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

99ph does not sell, rent, or trade your personal data. We share personal data only in the following circumstances:

6.1 Licensed Service Providers

99ph engages licensed third-party service providers who process data on our behalf under written data processing agreements, including: KYC and identity verification providers; payment processing partners (GCash, Maya, partner banks); game content providers and live dealer studio operators; customer support platform providers; and IT hosting and infrastructure providers. All processors are contractually bound to process data only as instructed by 99ph and to implement appropriate security measures.

6.2 Regulatory Authorities

99ph discloses personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government authorities when required by law, court order, or regulatory directive. Such disclosures are made strictly within the scope of the applicable legal requirement.

6.3 Law Enforcement

Where 99ph is legally compelled to do so, or where there is a credible threat to the safety of individuals, personal data may be disclosed to law enforcement agencies. Where permitted by law, 99ph will notify you of such disclosures.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of 99ph's assets, personal data held by 99ph may be transferred to the acquiring entity, subject to the same protections described in this Policy. Affected players will be notified in advance of any such transfer.

7. Cookies & Tracking Technologies

99ph uses cookies and similar technologies on the platform. Cookies are small text files stored on your device that help us deliver and improve our services. The types of cookies used by 99ph include:

• Essential cookies: Required for the platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without disrupting platform functionality.
• Functional cookies: Store your preferences such as language settings, game lobby filters, and responsible gaming configuration.
• Analytics cookies: Collect anonymized data about how players navigate the platform, used to identify usability issues and improve the user experience. No personal data is transmitted to analytics providers.
• Security and fraud-detection cookies: Assist in identifying unusual device or behavior patterns that may indicate account compromise or fraudulent activity.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to log in and play on 99ph, but may affect certain preference and analytics features.

8. Data Security

99ph implements organizational and technical security measures appropriate to the sensitivity of the personal data we process, including:

• TLS 1.3 encryption for all data in transit between your device and 99ph servers
• AES-256 encryption for sensitive data at rest in our databases
• Role-based access controls limiting staff access to personal data strictly on a need-to-know basis
• Multi-factor authentication required for all 99ph staff accessing production systems
• Regular penetration testing and vulnerability assessments by independent third-party security firms
• 24/7 security monitoring and anomaly detection on all platform infrastructure
• Annual security training mandatory for all 99ph employees with data access

9. Data Retention

99ph retains personal data for the following periods, after which data is securely deleted or anonymized:

• Account and identity data: Retained for the duration of your account plus five (5) years following account closure, as required by PAGCOR licensing conditions and the Anti-Money Laundering Act.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with the AMLA and BSP record-keeping requirements applicable to 99ph's payment partners.
• Gaming activity records: Retained for three (3) years following the date of each session, used for dispute resolution and PAGCOR audit purposes.
• Support communications: Retained for two (2) years from the date of the interaction.
• Marketing preference records: Retained until you withdraw consent or request deletion, plus 90 days for system propagation.
• Self-exclusion records: Retained for the duration of the exclusion period plus five (5) years, for PAGCOR compliance purposes. Self-exclusion data cannot be deleted during the active exclusion period.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012 and its Implementing Rules, you have the following rights with respect to personal data held by 99ph:

• Right to be Informed: The right to know what personal data 99ph collects, how it is processed, and to whom it is disclosed — as set out in this Policy.
• Right to Access: The right to obtain a copy of your personal data held by 99ph and information about how it is processed.
• Right to Rectification: The right to correct inaccurate or incomplete personal data in your 99ph account.
• Right to Erasure (Right to be Forgotten): The right to request deletion of your personal data. Note that this right is subject to override by 99ph's legal retention obligations under PAGCOR and AMLA requirements.
• Right to Object: The right to object to processing based on legitimate interest, including direct marketing. Objections to marketing will be honored immediately.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format for transfer to another service.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission of the Philippines if you believe your data rights have been violated.

To exercise any of the above rights, contact 99ph's Data Protection Officer via the email address in Section 14. 99ph will respond to verified requests within fifteen (15) business days. Identity verification may be required before processing your request.

11. Children's Privacy

The 99ph platform is strictly intended for individuals aged 21 years and older. 99ph does not knowingly collect personal data from persons under 21 years of age. If we discover that personal data has been collected from an underage individual, we will immediately close the account, void all transactions, and delete the data in compliance with applicable law.

If you are a parent or guardian who believes your child has accessed the 99ph platform, please contact us immediately via support so we can take prompt remedial action.

12. Third-Party Links

The 99ph platform may contain links to third-party websites or services — for example, payment provider portals or responsible gaming information resources. 99ph is not responsible for the privacy practices of third-party websites. We recommend reviewing the privacy policy of any third-party site you visit. This Policy applies solely to data collected by 99ph through its own platform.

13. Changes to This Privacy Policy

99ph may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or PAGCOR requirements. Material changes will be notified to registered players via email or a prominent platform notice at least seven (7) days before taking effect. The effective date of the current version is displayed at the top of this page.

We encourage you to review this Policy periodically. Continued use of the 99ph platform following a Policy update constitutes your acknowledgment of the updated Policy.

14. Contact Our Data Protection Officer

For privacy-related queries, data subject rights requests, or to report a suspected data breach, please contact the 99ph Data Protection Officer:

Email: [email protected]

You may also contact 99ph's 24/7 live support team via the chat feature on the platform for general account and privacy queries. Our Filipino-English support team is available around the clock.

For complaints unresolved by 99ph, you may escalate to the National Privacy Commission of the Philippines at their official government portal.

This Privacy Policy was last updated in June 2026. Previous versions are available upon written request.