php899 Privacy Policy

1Introduction & Identity of the Controller

php899 ("php899," "we," "us," "the Company") is the data controller responsible for personal data collected and processed through the php899 platform. php899 is a PAGCOR-regulated online gaming operator serving Filipino players across the Philippines, operating under applicable Philippine law including Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations.

As the data controller, php899 determines the purposes for which and the means by which personal data about our players and platform users is processed. This Privacy Policy describes those purposes and means, and explains the rights available to you as a data subject under Philippine law.

If you have any questions about how php899 handles your personal information, or wish to exercise your rights under the DPA, please refer to Section 13 of this Privacy Policy for contact details.

2Personal Data We Collect

php899 collects the following categories of personal data from players and platform users:

php899 does not knowingly collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where a Philippine government-issued ID is collected, the document is used solely for identity verification purposes and is stored in accordance with the security measures described in Section 9.

3How We Collect Your Personal Data

php899 collects personal data through the following means:

3.1 Directly From You

• When you register a php899 account, including provision of your mobile number, name, and date of birth.
• When you complete KYC verification, including uploading a copy of your Philippine government-issued ID.
• When you make a deposit or withdrawal, including your GCash or bank account details.
• When you contact php899 customer support via Live Chat or email.
• When you respond to surveys, promotions, or provide feedback.

3.2 Automatically During Platform Use

• Technical data such as your IP address, device identifiers, and browser information are collected automatically when you access php899.app.
• Gaming activity data including session timestamps, game results, and betting history is automatically recorded as part of platform operation.
• Cookies and similar tracking technologies, as described in Section 8.

3.3 From Third Parties

• Identity verification and KYC service providers may provide verification results to php899.
• Payment processors (GCash, PayMaya, bank partners) provide transaction confirmation data.
• PAGCOR and other regulatory bodies may share information with php899 as required for regulatory compliance.

4How php899 Uses Your Personal Data

php899 uses the personal data collected for the following purposes:

• Account Management: Creating and maintaining your php899 account, verifying your identity, and managing your account settings and preferences.
• Service Delivery: Processing your deposits and withdrawals, delivering gaming services, crediting bonuses, and settling bets and game results.
• Regulatory Compliance: Meeting php899's obligations under PAGCOR regulations, the Anti-Money Laundering Act (Republic Act No. 9160, as amended), and other applicable Philippine law, including mandatory record-keeping and reporting obligations.
• Security & Fraud Prevention: Detecting and preventing fraud, money laundering, unauthorised account access, and other prohibited conduct on the php899 platform.
• Responsible Gaming: Monitoring gaming activity patterns to identify signs of problem gambling and providing appropriate interventions or support tools, in accordance with php899's Responsible Gaming obligations.
• Customer Support: Responding to your queries, complaints, and support requests through Live Chat and email.
• Communications: Sending you account-related communications including transaction confirmations, security alerts, OTP codes, and material policy updates. With your consent, sending promotional communications about php899 offers and new features.
• Platform Improvement: Analysing aggregated usage data to improve the php899 platform, optimise mobile performance for Filipino users, and develop new features.

5Legal Bases for Processing Personal Data

Under the Philippine Data Privacy Act of 2012, php899 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to provide you with the services described in the php899 Terms & Conditions, including account creation, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with php899's obligations under PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine legislation.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, and the responsible gaming monitoring functions of php899, where these interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications and non-essential analytics, where you have given express consent. You may withdraw consent at any time by contacting php899 support.

6Sharing Your Personal Data

php899 does not sell, rent, or trade your personal information to third-party marketers. php899 shares personal data only in the following limited circumstances:

6.1 Service Providers

php899 engages third-party service providers who process personal data on our behalf, strictly under data processing agreements that require them to handle your data only in accordance with php899's instructions and this Privacy Policy. These include identity verification providers, payment processors (GCash, PayMaya, banking partners), game software providers, and cloud infrastructure providers.

6.2 Regulatory & Law Enforcement

php899 is legally required to disclose certain personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine regulatory or law enforcement authorities upon lawful request or as required by applicable Philippine law.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial part of php899's business, personal data held by php899 may be transferred to the acquiring entity, subject to equivalent privacy protections and notice to affected players.

7Data Retention

php899 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following specific retention periods:

• Account Data: Retained for the duration of your php899 account, and for a minimum of five (5) years following account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act.
• Transaction Records: Retained for a minimum of ten (10) years from the date of each transaction, in compliance with AMLC record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from account closure or the date of the last transaction, whichever is later.
• Support Communications: Retained for three (3) years to support dispute resolution and quality assurance purposes.
• Technical & Log Data: Retained for up to twelve (12) months for security and fraud detection purposes.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with php899's data disposal procedures.

8Cookies & Tracking Technologies

php899 uses cookies and similar technologies on the php899.app platform. Cookies are small data files stored on your device that help php899 recognise you, maintain your session, and improve your experience on the platform.

8.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the php899 platform to function, including session cookies that maintain your login state. These cannot be disabled.
• Security Cookies: Used to detect and prevent fraudulent activity and unauthorised access to php899 accounts.
• Performance Cookies: Used to analyse how players use the php899 platform so we can improve performance, particularly for mobile users on Philippine mobile networks.
• Preference Cookies: Used to remember your language and display preferences across sessions.

You may manage non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the php899 platform. Clearing your browser cookies will log you out of your current php899 session.

9Security Measures

php899 implements technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption of all data in transit between your device and php899 servers.
• Encryption of sensitive data at rest, including payment account details and government ID documents.
• Access controls ensuring that only authorised php899 personnel with a legitimate business need can access player personal data.
• Regular security assessments and penetration testing of the php899 platform infrastructure.
• Two-factor authentication (OTP) available to all php899 account holders to protect against unauthorised login.
• Automated systems monitoring for unusual account activity, including suspicious login patterns and abnormal transaction behaviour.

In the event of a personal data breach that is likely to prejudice your rights and freedoms, php899 will notify the National Privacy Commission and affected players in accordance with the timeframes and procedures required under the Data Privacy Act.

10Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by php899:

• Right to be Informed: The right to be informed of the personal data being collected and processed, the purposes of processing, and the identity of the data controller — as set out in this Privacy Policy.
• Right of Access: The right to obtain a copy of your personal data held by php899 and information about how it is being processed.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected. You may update most account information directly through your php899 account settings.
• Right to Erasure: The right to request deletion of your personal data, subject to php899's legal obligations to retain certain records (see Section 7).
• Right to Object: The right to object to processing based on legitimate interests, including profiling, or to processing for direct marketing purposes.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format.
• Right to File a Complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact php899's Data Protection Officer using the details provided in Section 13. php899 will respond to verified requests within thirty (30) calendar days.

11Children's Privacy

If php899 becomes aware that personal data has been collected from a person under the age of 21 without the requisite verification, we will take immediate steps to delete such data and close the associated account. If you believe a minor has registered a php899 account, please contact php899 support immediately.

12Amendments to This Privacy Policy

php899 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. The date of the most recent revision will always be indicated at the top of this page.

Where changes are material, php899 will provide advance notice to registered players via email notification or in-platform alert. Your continued use of the php899 platform following the effective date of a revised Privacy Policy constitutes your acknowledgment of the updated terms.

13Contact & Data Protection Officer

php899 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. To exercise your data subject rights, raise a privacy concern, or inquire about php899's data processing practices, please contact us through the following channels:

• Data Protection Officer — php899
• Email: [email protected] (subject line: "Data Privacy Request")
• Live Chat: Available 24/7 via your php899 account dashboard — English and Tagalog supported

php899 will acknowledge receipt of your request within five (5) business days and provide a substantive response within thirty (30) calendar days. For complex requests, this period may be extended by an additional thirty (30) days, with notice to you of the extension and the reasons therefor.