phl99 Privacy Policy

phl99 is the operator of the online gaming platform located at phl99.org, offering casino games, live dealer services, sports betting, online bingo, slot games, and sabong to players in the Philippines. phl99 operates within the regulatory framework established by PAGCOR (Philippine Amusement and Gaming Corporation).

As the data controller, phl99 determines the purposes for which and the means by which personal data of our members and visitors is processed. All data processing activities described in this Privacy Policy are carried out in accordance with Republic Act No. 10173 (the Philippine Data Privacy Act of 2012) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines.

By registering a phl99 account or otherwise using our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein.

phl99 collects personal data in the following categories:

phl99 does not collect sensitive personal information such as racial or ethnic origin, religious beliefs, health data, or political opinions, except where such information is voluntarily provided by you in the context of a responsible gaming or self-exclusion request.

phl99 collects personal data through the following channels:

• Direct Submission: Information you provide when registering a phl99 account, completing KYC verification, making a deposit, requesting a withdrawal, submitting a support request, or participating in a promotion.
• Automated Collection: Technical data collected automatically when you access the phl99 platform, including your IP address, device identifiers, browser fingerprint, and session activity logs.
• Payment Processors: Transaction references and confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, and cryptocurrency networks in connection with your deposits and withdrawals.
• Identity Verification Services: Data received from third-party KYC and identity verification providers engaged by phl99 to assist with document authentication and age verification as required by PAGCOR.
• Cookies and Similar Technologies: Data collected through cookies, pixel tags, and local storage as described in Section 7 of this Privacy Policy.

phl99 uses your personal data for the following purposes:

• Account Creation and Management: To create, maintain, and administer your phl99 account, including your wallet, gaming history, VIP status, and bonus eligibility.
• Identity Verification: To verify that you meet the 21+ age requirement and to fulfill KYC obligations imposed by PAGCOR and Philippine AML regulations.
• Payment Processing: To process GCash and PayMaya deposits and withdrawals, bank transfers, and cryptocurrency transactions associated with your phl99 account.
• Game Service Delivery: To provide access to casino games, sports betting markets, bingo rooms, slot titles, and sabong content on the phl99 platform.
• Responsible Gaming: To monitor gaming patterns for indicators of problem gambling, to administer self-exclusion requests, and to enforce deposit and session limits set by you or required by regulation.
• Fraud and Security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, money laundering, and other prohibited conduct.
• Customer Support: To respond to your support queries, resolve disputes, and communicate important account or platform updates.
• Legal Compliance: To fulfill obligations under PAGCOR licensing conditions, the Philippine Data Privacy Act, anti-money laundering laws, and any other applicable Philippine legislation.
• Platform Improvement: To analyze aggregated and anonymized usage data to improve phl99's features, user interface, and overall gaming experience.

phl99 processes your personal data under the following legal bases as recognized by the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform the contract between you and phl99 — including account registration, payment processing, and game service delivery — is necessary to fulfill phl99's obligations to you as a member.
• Consent: Where phl99 relies on your consent as the legal basis for processing (e.g., for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted before the withdrawal.
• Legal Obligation: Processing required to comply with applicable law, including PAGCOR licensing conditions, KYC regulations, AML obligations under Republic Act No. 9160 (Anti-Money Laundering Act), and data breach notification requirements under the Data Privacy Act.
• Legitimate Interests: Processing for fraud prevention, platform security, and service quality improvement, where such interests are not overridden by your fundamental rights and freedoms as a data subject.

phl99 does not sell your personal data. We share personal data only in the following limited circumstances:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, and cryptocurrency processing partners receive the minimum data necessary to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• Identity Verification Providers: Third-party KYC providers engaged by phl99 may receive copies of your government-issued identification and facial verification data for the sole purpose of fulfilling regulatory identity verification requirements.
• Game Software Providers: Licensed game studios (e.g., Pragmatic Play, PG Soft, Jili, Evolution) may receive a pseudonymous player identifier to facilitate game session management. These providers do not receive your full identity or financial data.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities may receive data where legally required, including for regulatory audits, AML investigations, or court orders.
• Legal and Fraud Prevention: Law enforcement agencies, fraud prevention networks, and legal representatives may receive data where necessary to investigate criminal activity, enforce phl99's Terms & Conditions, or protect the rights of phl99 and its members.
• Corporate Transactions: In the event of a merger, acquisition, or reorganization, your personal data may be transferred to the acquiring entity, subject to the same or equivalent privacy protections as those described in this policy.

All third parties with whom phl99 shares personal data are required to handle that data in a manner consistent with this Privacy Policy and applicable Philippine law. Where phl99 engages third-party processors, appropriate data processing agreements are in place.

phl99 uses cookies and similar tracking technologies on the phl99 platform. Cookies are small text files stored on your device that allow the platform to recognize you and remember your preferences across sessions.

phl99 uses the following types of cookies:

• Essential Cookies: Strictly necessary for the phl99 platform to function. These cookies maintain your login session, preserve your wallet state between pages, and enable core security features. They cannot be disabled without preventing you from using phl99.
• Functional Cookies: Remember your preferences such as language settings, game lobby display options, and notification choices.
• Analytics Cookies: Used to collect aggregated, anonymized data about how Members navigate and interact with the phl99 platform. This data is used solely to improve platform performance and usability. No individually identifiable data is extracted from analytics cookies.
• Security Cookies: Used to detect fraud, unusual login patterns, and automated bot activity that could compromise the integrity of phl99's platform or the accounts of our members.

phl99 retains personal data for the following periods, unless a longer retention period is required or permitted by law:

• Account and Identity Data: Retained for the duration of your phl99 account and for a period of five (5) years following account closure, as required for AML compliance and PAGCOR regulatory obligations.
• Financial Transaction Data: Retained for a minimum of five (5) years following the date of each transaction, as required under the Anti-Money Laundering Act and related regulations.
• KYC Documentation: Retained for five (5) years from the date of verification or account closure, whichever is later.
• Gaming Activity Logs: Retained for three (3) years following account closure or the date of each gaming session, for the purpose of dispute resolution and responsible gaming monitoring.
• Customer Support Records: Retained for two (2) years following the resolution of each support interaction.
• Technical and Security Logs: Retained for ninety (90) days for routine security monitoring, and for up to two (2) years where an investigation is ongoing.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents identification of the data subject.

phl99 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Encryption in Transit: All data transmitted between your device and phl99's servers is protected using TLS 1.3 encryption. The phl99 platform enforces HTTPS exclusively.
• Encryption at Rest: Sensitive personal data stored on phl99's servers — including KYC documents and financial information — is encrypted using AES-256 or equivalent standards.
• Access Controls: Access to personal data within phl99 is restricted on a strict need-to-know basis. Employee access is logged, monitored, and subject to regular review.
• Two-Factor Authentication: phl99 Members are encouraged to enable two-factor authentication (2FA) for their accounts as an additional security layer against unauthorized phl99 login attempts.
• Incident Response: phl99 maintains a data breach response procedure. In the event of a personal data breach that poses a risk to affected Members, phl99 will notify the National Privacy Commission within 72 hours and notify affected Members as required by the Data Privacy Act.

Under the Philippine Data Privacy Act of 2012, phl99 members have the following rights regarding their personal data. To exercise any of these rights, contact phl99 support via live chat or email at [email protected].

phl99 will respond to all verified data subject requests within thirty (30) calendar days. Where a request is complex or phl99 receives a high volume of requests, this period may be extended by an additional thirty (30) days, with prior notice to the requesting Member.

Please note that certain rights are subject to limitations under the Data Privacy Act and other applicable Philippine law — for example, where data must be retained to comply with PAGCOR or AML obligations, or where processing is necessary to establish or defend a legal claim.

phl99 employs age verification checks during the registration process and during KYC to confirm that all members meet the 21-year minimum age requirement. If phl99 discovers or reasonably suspects that personal data has been collected from a person under the age of 21, phl99 will:

• Immediately suspend the associated account.
• Refund any net deposits to the payment method used, subject to verification.
• Permanently delete all personal data associated with the underage account.
• Report the matter to PAGCOR if required by applicable regulation.

If you are a parent or guardian and believe that your child may have accessed or registered on the phl99 platform, please contact phl99 support immediately at [email protected].

Some of phl99's third-party service providers — particularly game software studios, cloud infrastructure providers, and identity verification services — may be located outside the Philippines. Where personal data is transferred to a third country, phl99 ensures that appropriate safeguards are in place as required by the Philippine Data Privacy Act and NPC regulations.

Such safeguards may include:

• Data processing agreements incorporating standard contractual clauses approved by the NPC.
• Transfers to countries recognized by the NPC as providing an adequate level of data protection.
• Transfer impact assessments where required, with supplementary technical measures to address any identified risks.

Your personal data is never transferred to jurisdictions for the purpose of circumventing Philippine data protection law.

phl99 reserves the right to update or amend this Privacy Policy at any time. When material changes are made to the way phl99 processes your personal data, we will notify active Members via SMS to their registered Philippine mobile number and post a prominent notice on the phl99 platform, with a minimum of fourteen (14) days' notice before the changes take effect.

The effective date at the top of this Privacy Policy reflects when the current version came into force. Continued use of the phl99 platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms.

phl99 recommends that Members review this Privacy Policy periodically to remain informed about how their personal data is being protected and used.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phl99, please contact our Data Protection Officer through the following channels:

• Live Chat: Available 24/7 directly through the phl99 platform. This is the fastest way to reach phl99 support for urgent matters.
• Email: [email protected] — Include "Privacy Request" in the subject line for data subject requests.
• Response Time: phl99 aims to acknowledge all privacy-related enquiries within two (2) business days and resolve them within thirty (30) calendar days.

If you are not satisfied with phl99's response to your privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines (NPC). Information on how to file a complaint with the NPC is available through the NPC's official channels.