Privacy Policy
phi999 Online Casino — Philippines

phi999 ("phi999," "we," "us," "our") is committed to protecting the privacy and personal data of every player who uses our platform. We understand that trust is the foundation of a good gaming relationship, and that trust starts with being transparent about how we handle your information.

This Privacy Policy describes the types of personal data phi999 collects, the purposes for which that data is processed, the parties with whom it may be shared, and the rights available to you as a data subject under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, or "DPA") and its Implementing Rules and Regulations.

This policy should be read together with the phi999 Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference.

For the purposes of the Philippine Data Privacy Act of 2012, phi999 acts as the Personal Information Controller (PIC) in respect of the personal data collected through the phi999 platform. This means phi999 determines the purposes and means of processing your personal data.

Where phi999 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, and cloud hosting services — those parties act as Personal Information Processors (PIPs) and are contractually bound to process data only in accordance with phi999's instructions and applicable law.

phi999 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. Contact details for the DPO are provided in Section 15 of this policy.

phi999 collects the following categories of personal data, depending on how you interact with our platform:

3.1 Identity & Contact Data

• Full legal name, date of birth, and gender
• Residential address (including barangay, city, province, and postal code)
• Email address and mobile phone number
• Government-issued identification document type and number (e.g., Philippine passport, SSS/GSIS ID, PhilHealth ID, driver's license)
• Selfie or photograph submitted for identity verification purposes

3.2 Financial Data

• Payment method details (e.g., GCash account number, PayMaya account, BPI/BDO/Metrobank account details — stored only to the extent necessary for transaction processing)
• Transaction history, including deposits, withdrawals, and bonus credits
• Source of funds documentation where required for AML compliance

3.3 Gaming & Account Data

• Account username, password (stored in hashed form), and account preferences
• Gaming history, including games played, wagers placed, wins, and losses
• Bonus and promotion participation history
• Responsible gaming settings, including deposit limits and self-exclusion status
• Customer support communications and complaint records

3.4 Technical & Usage Data

• IP address, device type, operating system, and browser type
• Geolocation data (country and region level) used to verify jurisdictional eligibility
• Session logs, login timestamps, and platform navigation data
• Cookie identifiers and similar tracking technology data (see Section 8)

phi999 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically when you access the phi999 platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment verification data from payment processors such as GCash, PayMaya, BPI, BDO, and Metrobank.
• Publicly available sources: In limited circumstances, phi999 may verify information against publicly available records, such as government databases, where permitted by law.

phi999 uses your personal data for the following purposes:

5.1 Account Management & Service Delivery

To create and manage your phi999 account, verify your identity, process deposits and withdrawals, provide customer support, and deliver the gaming services you have requested.

5.2 Legal & Regulatory Compliance

To comply with our obligations under Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and any other applicable regulations. This includes conducting Know Your Customer (KYC) checks, monitoring transactions for suspicious activity, and reporting to relevant authorities where required.

5.3 Responsible Gaming

To monitor gaming activity for signs of problem gambling, enforce responsible gaming limits and self-exclusion requests, and comply with PAGCOR's responsible gaming requirements. phi999 takes its duty of care to players seriously, and data processing for this purpose is in your vital interest.

5.4 Fraud Prevention & Security

To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other security threats to the phi999 platform and its players.

5.5 Platform Improvement

To analyze usage patterns, troubleshoot technical issues, conduct A/B testing, and improve the features, performance, and user experience of the phi999 platform.

5.6 Marketing & Promotions

To send you information about phi999 promotions, bonuses, and new game releases — but only where you have opted in to receive such communications. You can withdraw your marketing consent at any time by updating your account preferences or contacting our support team.

Under the Philippine Data Privacy Act of 2012, phi999 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your phi999 account and deliver gaming services.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR requirements, AMLA obligations, and tax reporting duties.
• Legitimate interests: Processing necessary for phi999's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and optional data collection. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Vital interests: Processing necessary to protect your vital interests or those of another person, including responsible gaming interventions.

phi999 does not sell your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

7.1 Regulatory & Law Enforcement Authorities

phi999 is legally required to share certain player data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where required by law or court order. phi999 will notify you of such disclosures where legally permitted to do so.

7.2 Payment Service Providers

phi999 shares financial data with payment processors — including GCash, PayMaya, BPI, BDO, and Metrobank — to the extent necessary to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable financial regulations.

7.3 Identity Verification & KYC Providers

phi999 uses third-party KYC and identity verification services to confirm player identities and screen against sanctions lists. These providers process your identity documents and biometric data solely for verification purposes under strict contractual data processing agreements.

7.4 Technology & Infrastructure Providers

phi999 uses cloud hosting, data analytics, customer support software, and other technology services provided by third parties. These providers act as Personal Information Processors and are contractually prohibited from using your data for any purpose other than providing services to phi999.

7.5 Game Software Providers

Certain game providers may receive limited technical data (such as session tokens and game results) necessary to deliver their games on the phi999 platform. No personally identifiable information beyond what is technically necessary is shared with game providers.

phi999 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyze usage, and support security functions. The following types of cookies are used:

You can manage your cookie preferences at any time through your browser settings or the phi999 cookie preference center. Please note that disabling strictly necessary cookies will prevent you from using the phi999 platform.

phi999 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data: Retained for the duration of your active phi999 account, plus a minimum of 5 years following account closure, in accordance with PAGCOR and AMLA record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction, as required by the Anti-Money Laundering Act.
• KYC documents: Retained for a minimum of 5 years following the end of the business relationship, or longer if required by a regulatory authority.
• Customer support records: Retained for 3 years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing data: Retained until you withdraw your marketing consent, after which it will be deleted or anonymized within 30 days.
• Technical logs: Retained for up to 12 months for security and fraud prevention purposes, after which they are anonymized or deleted.

When personal data is no longer required, phi999 will securely delete or anonymize it in accordance with our data disposal procedures.

phi999 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the phi999 platform.
• Encrypted storage of sensitive data, including passwords (stored as salted hashes) and financial information.
• Access controls limiting access to personal data to authorized phi999 personnel on a strict need-to-know basis.
• Multi-factor authentication (MFA) available for player accounts and mandatory for internal administrative access.
• Regular security audits and penetration testing conducted by independent third-party security specialists.
• Incident response procedures to detect, contain, and report data breaches in accordance with NPC notification requirements.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phi999:

To exercise any of these rights, please contact phi999's Data Protection Officer using the details in Section 15. phi999 will respond to all data subject requests within 15 business days of receipt. In complex cases, this period may be extended by a further 15 business days, with prior notification to you.

If you are not satisfied with phi999's response to a data subject request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

The phi999 platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. phi999 does not knowingly collect personal data from individuals under the age of 21.

If phi999 becomes aware that personal data has been collected from a person under 21 years of age, that data will be deleted immediately and the associated account will be closed. Any funds deposited by an underage individual will be returned to the original payment source.

If you believe that phi999 may have inadvertently collected data from a minor, please contact our Data Protection Officer immediately using the details in Section 15.

phi999 primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to, or accessed from, servers or service providers located outside the Philippines — for example, where phi999 uses internationally hosted cloud infrastructure or game software providers.

Where such cross-border transfers occur, phi999 ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual data processing agreements incorporating the NPC's standard contractual clauses or equivalent protections;
• Transfers only to countries or organizations that provide an adequate level of data protection as recognized by the NPC; and
• Implementation of additional technical safeguards, such as encryption, where required.

You may request information about the specific safeguards applied to any cross-border transfer of your personal data by contacting our Data Protection Officer.

phi999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page will be revised accordingly.

Where changes are material — meaning they significantly affect how we process your personal data or your rights as a data subject — phi999 will notify registered players by email and/or a prominent notice on the platform at least 7 days before the changes take effect.

Your continued use of the phi999 platform after the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy. If you do not agree with the changes, you may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phi999, please contact our Data Protection Officer:

• Data Protection Officer: phi999 DPO
• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 via the phi999 platform
• Response Time: phi999 aims to acknowledge all privacy-related inquiries within 3 business days and resolve them within 15 business days.

If you are not satisfied with phi999's handling of your privacy concern, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official website.