phi999 Privacy Policy

1 Introduction & Scope

1.1 phi999 is committed to protecting the privacy and personal data of all players who use our platform. This Policy is intended to inform you clearly and transparently about our data processing practices in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, hereinafter "DPA") and its Implementing Rules and Regulations.

1.2 This Policy applies to all personal data phi999 processes in connection with:

• The phi999.cam website and all pages, features, and services accessible through it;
• Registration and management of phi999 player accounts;
• Deposits, withdrawals, and all financial transactions processed through the phi999 cashier;
• Participation in games, promotions, bonuses, the spin wheel, bingo, and all other gaming features;
• Communications between players and the phi999 customer support team;
• Compliance with phi999's legal and regulatory obligations under PAGCOR and the DPA.

1.3 This Policy should be read together with the phi999 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2 Data Controller Details

2.1 For the purposes of the Philippine Data Privacy Act, phi999 is the personal information controller ("PIC") in respect of all personal data processed in connection with the Platform. phi999 is responsible for ensuring that personal data is processed lawfully, transparently, and in accordance with the principles of the DPA.

2.2 phi999 has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and applicable data protection law. The DPO may be contacted via the email address listed in Section 15 of this Policy.

3 What Data We Collect

3.1 phi999 collects the following categories of personal data from registered players and platform users:

3.2 phi999 does not knowingly collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where sensitive personal information is collected — such as government ID details — it is handled with heightened security measures and access controls.

4 How We Collect Your Data

4.1 phi999 collects personal data through the following channels:

• Account Registration — Information you provide when creating your phi999 account, including name, mobile number, and date of birth;
• KYC Verification — Identity documents you submit when completing identity verification, including government-issued IDs;
• Financial Transactions — Payment details captured during deposit and withdrawal processes through our integrated Philippine payment channels;
• Platform Usage — Data generated automatically when you use the Platform, including game activity, session data, and click behaviour;
• Customer Support — Information you provide during live chat sessions, email correspondence, or other support interactions with phi999 staff;
• Cookies and Tracking Technologies — Technical data collected automatically when you access phi999.cam, as described further in Section 8.

5 How We Use Your Data

5.1 phi999 uses your personal data for the following purposes:

• Account Management — To create, maintain, and manage your phi999 player account, including authentication and session management;
• Identity & Age Verification — To verify that you are at least 21 years of age and to confirm your identity in accordance with PAGCOR regulations;
• Payment Processing — To process deposits and withdrawals through GCash, PayMaya, BPI, BDO, Metrobank, and DragonPay in Philippine Peso;
• Game Operation — To operate, deliver, and record the outcomes of all games you participate in on the Platform;
• Regulatory Compliance — To meet phi999's obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act, and the Data Privacy Act;
• Fraud Prevention & Security — To detect and prevent unauthorised account access, fraudulent transactions, and prohibited conduct as defined in phi999's Terms and Conditions;
• Responsible Gaming — To monitor gaming activity for signs of problem gambling behaviour and to administer responsible gaming tools applied to your account;
• Customer Support — To respond to your support queries, resolve disputes, and improve the quality of the phi999 customer experience;
• Marketing Communications — To send promotional offers and platform updates to players who have consented to marketing communications, in accordance with Section 6.

5.2 phi999 does not use automated decision-making processes — including profiling — that produce legal effects or similarly significant consequences for players, except where required by fraud detection systems or regulatory screening tools, in which case human review is available on request.

6 Legal Bases for Processing

6.1 phi999 processes your personal data on the following legal bases under the Philippine Data Privacy Act:

• Contractual Necessity — Processing required to perform phi999's obligations under the Terms and Conditions you agreed to upon registration, including account operation, payment processing, and game delivery;
• Legal Obligation — Processing required to comply with Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act, and the Data Privacy Act's mandatory reporting requirements;
• Legitimate Interests — Processing carried out for phi999's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests do not override your fundamental privacy rights;
• Consent — Processing for purposes that require your explicit consent, including marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Sharing Your Data

7.1 phi999 may share your personal data with the following categories of third parties, strictly for the purposes described and under appropriate data processing agreements:

• Payment Service Providers — GCash, PayMaya, BPI, BDO, Metrobank, and DragonPay, solely for the purpose of processing your deposits and withdrawals in Philippine Peso;
• Identity Verification Providers — Third-party KYC and document verification services used to confirm your identity and age in accordance with regulatory requirements;
• Game Software Providers — Licensed game studios and providers whose games are available in the phi999 lobby, to the extent necessary to operate game sessions and record outcomes;
• Regulatory Authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where disclosure is required by law or regulatory direction;
• Technology and Infrastructure Providers — Cloud hosting, cybersecurity, and platform infrastructure providers operating under strict confidentiality obligations and data processing agreements with phi999;
• Professional Advisers — Legal counsel, auditors, and compliance consultants, where disclosure is necessary for the conduct of phi999's business operations.

7.2 All third parties with whom phi999 shares personal data are required to maintain appropriate technical and organisational security measures and to use your data only for the specified purpose for which it was shared.

8 Cookies & Tracking Technologies

8.1 phi999.cam uses cookies and similar tracking technologies to operate the Platform, improve user experience, and support fraud detection and security monitoring. The following categories of cookies may be set when you visit phi999.cam:

• Strictly Necessary Cookies — Essential for the Platform to function. These include session cookies that keep you logged in during a visit and security tokens that protect your account from cross-site request forgery. These cannot be disabled without affecting core Platform functionality;
• Functional Cookies — Remember your preferences such as language settings, game lobby layout, and notification preferences to personalise your phi999 experience;
• Analytics Cookies — Collect anonymised data about how players navigate phi999.cam to help us improve Platform performance and user experience. These are only set with your consent;
• Security and Fraud Detection Cookies — Used to detect unusual account activity, prevent fraudulent transactions, and identify prohibited conduct as defined in phi999's Terms and Conditions.

8.2 You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to access and use the phi999 Platform, including account login and payment processing.

9 Data Retention

9.1 phi999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected or to comply with applicable legal retention obligations, whichever is longer.

9.2 The following retention periods apply to the main categories of personal data phi999 processes:

• Account and Identity Data — Retained for the duration of the active account relationship plus a minimum of five (5) years following account closure, in accordance with PAGCOR and AMLC record-keeping requirements;
• Financial Transaction Records — Retained for a minimum of five (5) years from the date of the transaction, consistent with Philippine AML obligations;
• Gaming Activity Logs — Retained for a minimum of three (3) years for regulatory reporting and dispute resolution purposes;
• Customer Support Records — Retained for two (2) years following the closure of the relevant support interaction;
• Marketing Consent Records — Retained for the duration of the marketing relationship plus three (3) years, to evidence consent in the event of a complaint.

9.3 Upon the expiry of the applicable retention period, phi999 will securely delete or anonymise your personal data in a manner that prevents its reconstruction or reuse.

10 Data Security

10.1 phi999 implements and maintains appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption on all connections between your device and phi999.cam;
• Industry-standard password hashing — phi999 staff cannot read your account password;
• Access controls limiting internal staff access to personal data on a strict need-to-know basis;
• Multi-factor authentication requirements for all phi999 administrative systems;
• Regular security assessments, penetration testing, and vulnerability management;
• Secure data centre infrastructure with physical access controls.

10.2 Despite these measures, no internet transmission or digital storage system is guaranteed to be 100% secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phi999 will notify you and the National Privacy Commission in accordance with the notification requirements of the Philippine Data Privacy Act.

10.3 If you believe your phi999 account has been accessed without your authorisation, you must contact phi999 support immediately via live chat so that your account can be secured and an investigation initiated.

11 Your Rights

11.1 Under the Philippine Data Privacy Act, you have the following rights in respect of the personal data phi999 holds about you:

11.2 To exercise any of the rights above, contact the phi999 Data Protection Officer at [email protected] with the subject line "Data Rights Request". Please include your registered username and a clear description of the right you wish to exercise. phi999 may request identity verification before processing your request.

12 Children & Minors

12.1 phi999 employs age verification measures during account registration and KYC processes to prevent minors from accessing the Platform. If phi999 becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all personal data relating to the minor will be deleted (or where regulatory retention applies, segregated and secured), and any deposits will be returned to the originating payment method.

12.2 If you are a parent or guardian who believes your child has created a phi999 account, please contact support immediately at [email protected] so that the account can be closed and data appropriately handled without delay.

13 Cross-Border Data Transfers

13.1 phi999 may transfer personal data to third-party service providers — including cloud infrastructure providers, game studios, and KYC verification services — whose servers or operations are located outside the Philippines.

13.2 Where personal data is transferred outside the Philippines, phi999 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required under the Philippine Data Privacy Act. These safeguards include contractual data processing agreements incorporating the standard data protection clauses approved by the National Privacy Commission.

13.3 phi999 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing additional contractual or technical safeguards.

14 Policy Updates

14.1 phi999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. The most current version of this Policy will always be accessible at phi999.cam/privacy-policy with the effective date displayed at the top of the document.

14.2 Where changes to this Policy are material — meaning they significantly affect your rights or the way phi999 uses your personal data — phi999 will notify registered players via their registered contact details at least seven (7) days before the change takes effect.

14.3 Continued use of the phi999 Platform after the effective date of any policy update constitutes acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you must cease using the Platform and may request account closure in accordance with the phi999 Terms and Conditions.

15 Contact & Complaints

15.1 For all privacy-related enquiries, data rights requests, or concerns about how phi999 handles your personal data, please contact our Data Protection Officer:

15.2 phi999 targets an initial response to privacy enquiries and data rights requests within five (5) business days, and aims to resolve all requests within fifteen (15) business days of receipt.

15.3 If you are not satisfied with phi999's response to a privacy complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines (NPC). Information on how to file a complaint with the NPC is available through official Philippine government channels.

15.4 Nothing in this Privacy Policy limits or excludes any rights you have under the Philippine Data Privacy Act of 2012 or any other applicable Philippine law.