Privacy Policy

1. Introduction

899ph ("we," "us," "our," or "the Company") is committed to protecting the privacy and personal data of all individuals who access or use the 899ph online gaming platform at 899ph.net and any associated mobile applications (collectively, the "Platform").

This Privacy Policy describes how 899ph collects, uses, stores, discloses, and protects your personal information when you register for an account, make deposits or withdrawals, play games, contact our support team, or otherwise interact with the Platform. It also explains your rights as a data subject under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

By creating a 899ph account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, please discontinue use of the Platform and contact us to close your account.

This Privacy Policy should be read together with the 899ph Terms & Conditions and Responsible Gaming Policy, which are incorporated by reference.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, 899ph is the Personal Information Controller (PIC) in respect of the personal data you provide when using the Platform. This means 899ph determines the purposes and means of processing your personal information.

Where 899ph engages third-party service providers to process personal data on its behalf (for example, payment processors, identity verification providers, or cloud hosting services), those parties act as Personal Information Processors (PIPs) and are contractually bound to process your data only on 899ph's instructions and in accordance with applicable Philippine data protection law.

899ph has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. Contact details for the DPO are provided in Section 15 of this policy.

3. Personal Data We Collect

899ph collects the following categories of personal data from members and Platform users:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification number (e.g., Philippine National ID, passport, driver's license, SSS/GSIS number).
• Contact Data: Residential address (including barangay, city/municipality, province), Philippine mobile number, and email address.
• Financial Data: Bank account details, e-wallet account information (GCash, PayMaya), card details (Visa/Mastercard), transaction history, deposit and withdrawal records, and account balance information.
• Account Data: Username, encrypted password, account preferences, communication preferences, and responsible gaming settings (deposit limits, session limits, self-exclusion status).
• Gaming Data: Game history, wagering records, bonus usage, session duration, and game preferences across all 899ph products including live casino, slots, bingo, and fishing games.
• Technical Data: IP address, device type and identifier, browser type and version, operating system, time zone, and referring URL.
• Usage Data: Pages visited on the Platform, features used, links clicked, search queries, and session timestamps.
• Communications Data: Records of your correspondence with 899ph customer support, including live chat transcripts, email exchanges, and support ticket history.
• Verification Data: Copies of identity documents, selfies or photographs submitted for KYC (Know Your Customer) verification, and source-of-funds documentation where required.

899ph does not intentionally collect sensitive personal information (as defined under RA 10173) such as health data, religious beliefs, or political affiliations, except where strictly required by law (for example, certain responsible gaming assessments).

4. How We Collect Your Data

899ph collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically through cookies, web beacons, pixel tags, and server logs when you access and interact with the Platform.
• Third-Party Sources: Identity verification data from licensed KYC/AML service providers; fraud prevention data from risk management partners; payment data from payment processors such as GCash, PayMaya, BPI, BDO, Metrobank, and card networks.
• Regulatory Sources: Information received from PAGCOR or other Philippine regulatory authorities in connection with licensing, compliance, or investigation requirements.

5. How We Use Your Personal Data

899ph uses your personal data for the following purposes:

• To create, verify, and manage your 899ph account.
• To process deposits, withdrawals, and other financial transactions in Philippine Peso (PHP).
• To verify your identity and age (21+) in compliance with PAGCOR regulations and Philippine anti-money laundering laws.
• To provide, maintain, and improve the 899ph Platform and its games and features.
• To detect, investigate, and prevent fraud, cheating, money laundering, and other prohibited activities.
• To send you transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts.
• To send you promotional communications about 899ph bonuses, new games, and special offers — where you have consented to receive such communications.
• To administer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion.
• To comply with our legal and regulatory obligations under Philippine law, including PAGCOR licensing requirements and the Anti-Money Laundering Act (AMLA).
• To respond to your customer support enquiries and resolve disputes.
• To conduct internal analytics and improve the overall user experience on the Platform.

6. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 899ph processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your account, process transactions, and provide gaming services.
• Legal Obligation: Processing required to comply with Philippine laws and regulations, including PAGCOR licensing conditions, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate Interests: Processing necessary for 899ph's legitimate business interests, including fraud prevention, platform security, and service improvement — provided these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. You may withdraw consent at any time by contacting our support team or updating your account preferences.

7. Data Sharing & Disclosure

899ph does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard — to process your financial transactions.
• KYC/AML Providers: Licensed identity verification and anti-money laundering screening service providers.
• Cloud & Hosting Providers: Secure cloud infrastructure providers who host the 899ph Platform under strict data processing agreements.
• Customer Support Tools: Live chat and ticketing platform providers used to manage your support interactions.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities — where required by law or court order.
• Professional Advisors: Lawyers, auditors, and accountants bound by professional confidentiality obligations.

All third-party processors engaged by 899ph are contractually required to implement appropriate technical and organizational security measures and to process personal data only in accordance with 899ph's instructions and applicable Philippine law.

8. Cookies & Tracking Technologies

899ph uses cookies and similar tracking technologies (web beacons, pixel tags, local storage) on the Platform for the following purposes:

• Essential Cookies: Required for the Platform to function correctly — including session management, login authentication, and security features. These cannot be disabled.
• Preference Cookies: Store your language, display, and notification preferences so you don't have to re-enter them each visit.
• Analytics Cookies: Help us understand how members use the Platform — which games are most popular, where users encounter difficulties, and how to improve the overall experience. Data collected is aggregated and anonymized where possible.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and unauthorized login attempts.

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the 899ph Platform, including your ability to stay logged in or access certain features.

9. Data Retention

899ph retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

• Active Account Data: Retained for the duration of your account's existence on the Platform.
• Transaction & Gaming Records: Retained for a minimum of five (5) years following the date of the transaction or game session, as required by PAGCOR regulations and the Anti-Money Laundering Act.
• KYC & Identity Verification Documents: Retained for a minimum of five (5) years following account closure or the last transaction, whichever is later.
• Customer Support Records: Retained for three (3) years following the resolution of the relevant support interaction.
• Marketing Consent Records: Retained until you withdraw consent, plus an additional two (2) years for compliance documentation purposes.

Upon expiry of the applicable retention period, 899ph will securely delete or anonymize your personal data in accordance with its data disposal procedures.

10. Data Security

899ph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• AES-256 encryption for data at rest and TLS 1.3 encryption for data in transit.
• Multi-factor authentication (MFA) for all internal staff access to systems containing personal data.
• Role-based access controls ensuring that only authorized personnel can access personal data on a need-to-know basis.
• Regular penetration testing and vulnerability assessments conducted by independent security firms.
• 24/7 security monitoring and intrusion detection systems.
• Regular staff training on data protection and information security best practices.

While 899ph takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. In the event of a personal data breach that poses a risk to your rights and freedoms, 899ph will notify you and the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required under RA 10173.

11. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 899ph:

• Right to be Informed: The right to be informed of how your personal data is being collected and processed — which this Privacy Policy fulfils.
• Right of Access: The right to request a copy of the personal data 899ph holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact the 899ph Data Protection Officer using the details in Section 15. We will respond to all verified requests within fifteen (15) business days as required by the NPC's guidelines.

12. Children's Privacy

The 899ph Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine law and PAGCOR regulations. 899ph does not knowingly collect personal data from individuals under the age of 21.

If 899ph becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the associated personal data, and report the matter to the appropriate regulatory authorities where required.

If you are a parent or guardian and believe that your child has registered on the 899ph Platform, please contact our support team immediately at [email protected] so that we can take prompt action.

13. International Data Transfers

899ph primarily stores and processes personal data within the Philippines. In certain circumstances, personal data may be transferred to or accessed from servers or service providers located outside the Philippines — for example, where 899ph uses internationally hosted cloud infrastructure or software-as-a-service platforms.

Where such transfers occur, 899ph ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require the recipient to apply data protection standards equivalent to those required under Philippine law. 899ph will not transfer your personal data to a jurisdiction that does not provide an adequate level of data protection without your explicit consent or a lawful basis under RA 10173.

14. Updates to This Privacy Policy

899ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. When material changes are made, we will notify registered members by email to their registered address and/or by posting a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this policy indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how 899ph protects your personal data. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised policy.

15. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 899ph, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: Please include "Data Privacy Request" or "DPO Enquiry" in your subject line for faster routing.
• Response Time: We aim to acknowledge all data privacy requests within 3 business days and resolve them within 15 business days.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.