99ph Privacy Policy

This Policy applies to all personal data processed by 99ph in connection with the operation of the 99ph online gaming platform, including the website at 99ph.bio, all associated gaming services, customer support channels, promotional activities, and payment processing functions.

99ph is committed to processing personal data in a lawful, fair, and transparent manner, consistent with the requirements of Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

This Policy does not apply to the data practices of third-party game software providers, payment processors, or other external services that may be accessible through or in connection with the 99ph platform. Those entities maintain their own independent privacy policies, for which 99ph is not responsible.

For the avoidance of doubt, this Policy applies equally to Filipino players in Manila, Cebu, Davao, Quezon City, and all other regions of the Philippines, as well as to any other individuals who interact with the 99ph platform regardless of geographic location, to the extent that 99ph processes their personal data.

For the purposes of the Data Privacy Act of 2012 and this Policy, the personal data controller responsible for the processing of your personal data is:

The 99ph Data Protection Officer (DPO) is responsible for overseeing compliance with this Policy and applicable data privacy laws. The DPO may be contacted at any time using the email address above in relation to any privacy matter concerning the 99ph platform.

99ph collects the following categories of personal data from registered players and platform visitors:

99ph collects personal data through the following channels and methods:

• Direct Submission: Data you provide when registering a 99ph account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated Technical Collection: Data collected automatically when you access the 99ph platform, including IP addresses, device identifiers, browser fingerprints, cookie data, and session activity logs. This collection occurs through standard server-side logging, session management systems, and analytics tools.
• Payment Processors: Transaction reference data shared by payment processors such as GCash, PayMaya, BPI, BDO, and Metrobank when you initiate a deposit or withdrawal on the 99ph platform. Full payment credentials are never transmitted to or stored by 99ph directly — they are handled by the payment processor's own secure systems.
• Identity Verification Providers: Data confirmed or returned by third-party KYC verification providers engaged by 99ph to validate the authenticity of identification documents submitted during the account verification process.
• Gaming Activity: Game interaction data generated automatically as a result of your gaming activity on the 99ph platform, including wagers placed, game outcomes, session duration, and bonus activity.

99ph processes your personal data on the following legal bases as recognized under RA 10173 and its Implementing Rules and Regulations:

• Consent: Where you have given clear, freely given, specific, and informed consent to the processing of your personal data for one or more specific purposes — including, where applicable, consent to receive marketing communications from 99ph.
• Contractual Necessity: Processing necessary for the performance of the contract between you and 99ph — specifically, the creation and operation of your 99ph account and the delivery of all gaming and payment services described in the Terms & Conditions.
• Legal Obligation: Processing required to comply with applicable Philippine legal and regulatory obligations, including but not limited to anti-money laundering (AML) obligations under Republic Act No. 9160 (as amended), PAGCOR licensing requirements, KYC obligations, and mandatory record-keeping requirements.
• Legitimate Interests: Processing necessary for the legitimate interests of 99ph or a third party, where those interests are not overridden by your fundamental rights — including fraud detection, platform security, responsible gaming monitoring, and internal analytics for service improvement, provided such processing does not infringe on your rights as a data subject.

99ph uses the personal data collected from you for the following specific purposes:

• To create, operate, and maintain your 99ph account, including processing deposits, withdrawals, and gaming activity.
• To verify your identity, age (21+), and eligibility to use the 99ph platform in compliance with applicable Philippine gaming regulations.
• To process and reconcile payment transactions using GCash, PayMaya, BPI, BDO, Metrobank, and other supported Philippine payment channels.
• To detect, investigate, and prevent fraud, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in the 99ph Terms & Conditions.
• To provide customer support, including responding to account queries, resolving disputes, and processing responsible gaming requests such as self-exclusion and deposit limit settings.
• To fulfill 99ph's responsible gaming obligations, including monitoring gaming patterns for indicators of problem gambling and administering player protection tools.
• To send you transactional communications including deposit confirmations, withdrawal notifications, security alerts, and account status updates.
• To send you promotional communications, including bonus offers, tournament invitations, and platform updates — subject to your marketing communication preferences and applicable consent requirements.
• To conduct internal analytics aimed at improving the 99ph platform, personalizing your gaming experience, and optimizing product performance.
• To comply with applicable legal obligations, including responding to lawful requests from Philippine regulatory and law enforcement authorities.

99ph does not sell, rent, or trade your personal data to third parties for their own independent commercial or marketing purposes. Your personal data may be shared with third parties only in the following strictly limited circumstances:

• Payment Processors: Transaction reference data is shared with GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers solely to facilitate the processing of your deposit and withdrawal requests.
• KYC / Identity Verification Providers: Identity document data may be shared with licensed third-party identity verification providers engaged by 99ph to complete the KYC process required under applicable regulations.
• Game Software Providers: Gaming activity data (such as account tokens and wager data) is shared with licensed third-party game studios and live casino providers whose content is delivered through the 99ph platform, solely for the purpose of game functionality and fairness auditing.
• Regulatory and Law Enforcement Authorities: 99ph will disclose personal data to PAGCOR, the AMLC (Anti-Money Laundering Council), the NPC, the National Bureau of Investigation, or other competent Philippine authorities where required by law, court order, or regulatory instruction.
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all of 99ph's assets, your personal data may be transferred to the acquiring entity, provided that the acquiring entity assumes the privacy obligations set forth in this Policy.
• With Your Explicit Consent: In circumstances not described above, 99ph will share your personal data with third parties only with your explicit prior consent.

99ph uses cookies and similar tracking technologies on the 99ph platform for the purposes described below. A "cookie" is a small text file placed on your device by a web server that allows the server to recognize your device across sessions.

• Strictly Necessary Cookies: Required for the basic functioning of the 99ph platform, including maintaining your authenticated session, remembering your login state, and enabling core security features. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: Used to remember your preferences and settings on the 99ph platform, such as your preferred language, display settings, and responsible gaming configurations.
• Analytics Cookies: Used to collect aggregated, anonymized data about how players navigate and use the 99ph platform. This data is used internally to improve the platform's performance, usability, and game selection.
• Security Cookies: Used to support fraud detection, bot prevention, and login location monitoring functions that protect the security of your 99ph account.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the 99ph platform and may prevent you from logging in or completing transactions. 99ph does not deploy third-party advertising or retargeting cookies.

99ph retains personal data for no longer than is necessary to fulfill the purposes described in this Policy, or as required by applicable Philippine law. The following retention periods apply as a general guide:

When personal data is no longer required for any applicable purpose or retention obligation, 99ph will securely delete, destroy, or anonymize that data in accordance with 99ph's internal data disposal standards.

99ph implements a layered set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, destruction, or accidental loss:

• Encryption in Transit: All data transmitted between your device and the 99ph platform is encrypted using 256-bit SSL/TLS protocols. This includes all login flows, payment transactions, and API communications.
• Encryption at Rest: Sensitive data fields stored in 99ph's systems — including passwords (stored as salted hashes), financial data, and KYC document files — are encrypted at rest using industry-standard encryption standards.
• Access Controls: Access to personal data within 99ph's systems is restricted to authorized personnel who require that access for legitimate business purposes. Access is governed by role-based permissions and regularly reviewed.
• Two-Factor Authentication: 99ph supports 2FA for all player accounts and mandates 2FA for all staff accounts with access to systems containing personal data.
• Security Monitoring: 99ph operates continuous security monitoring systems that detect and alert on anomalous access patterns, potential intrusions, and data exfiltration attempts.
• Data Breach Response: In the event of a personal data breach that poses a real risk to data subjects, 99ph will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected data subjects without undue delay in accordance with NPC Circular No. 16-03.

As a data subject under the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to the personal data that 99ph processes about you:

• Right to Be Informed: The right to be informed of how your personal data is collected, used, stored, shared, and protected — as described in this Policy.
• Right to Access: The right to obtain confirmation of whether 99ph processes your personal data, and to request a copy of the personal data 99ph holds about you, along with information about how it is processed.
• Right to Correction: The right to request that 99ph correct any inaccurate or incomplete personal data it holds about you. You may update some data directly from your 99ph Account Settings; other corrections must be submitted to the DPO.
• Right to Erasure ("Right to Be Forgotten"): The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (subject to 99ph's overriding legal obligations to retain certain data under RA 9160 and applicable gaming regulations).
• Right to Object: The right to object to the processing of your personal data, including for direct marketing purposes. Where you object to marketing processing, 99ph will cease using your data for that purpose immediately.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another organization, where technically feasible.
• Right to Damages: The right to be indemnified for damages sustained due to any violation of RA 10173, subject to applicable legal processes.
• Right to File a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe 99ph has processed your personal data in violation of RA 10173.

To exercise any of the above rights, please submit a written request to 99ph's Data Protection Officer at [email protected]. All requests will be acknowledged within 72 hours and resolved within 30 calendar days from the date of receipt.

99ph may send you promotional communications — including bonus offers, tournament announcements, new game alerts, and platform updates — by email, SMS, or in-platform notification, subject to the following conditions:

• For new players, marketing communications are sent by default based on the legitimate interest of 99ph in informing you of relevant offers. You may opt out at any time.
• You may manage your marketing communication preferences from your 99ph Account Settings at any time, or by contacting [email protected].
• Opting out of marketing communications will not affect the delivery of transactional communications (such as deposit confirmations, withdrawal notifications, and account security alerts), which are essential to the operation of your 99ph account.
• 99ph does not share your contact information with third-party advertisers for their own independent marketing purposes.

The 99ph platform is strictly intended for use by individuals who are at least 21 years of age. 99ph does not knowingly collect personal data from any individual under the age of 21. This threshold reflects the minimum age for lawful participation in casino-style gaming under applicable Philippine regulations and exceeds the general minimum age of 18 for other online services.

If 99ph becomes aware that personal data has been submitted by or on behalf of an individual under 21 years of age, 99ph will immediately close the associated account and permanently delete all related personal data, including any gaming history and deposited funds (which will be returned to the relevant payment source).

The 99ph platform is operated primarily from and for the Philippines. However, certain technical service providers and game software partners engaged by 99ph may process data from servers located outside the Philippines. Where such cross-border data transfers occur, 99ph ensures that appropriate safeguards are in place as required by RA 10173 and NPC Circular No. 16-01, including:

• Transfer only to countries that provide an adequate level of protection for personal data, as determined by the NPC.
• Use of data processing agreements that include appropriate contractual protections for data subjects whose data is transferred.
• Requiring receiving entities to implement security standards at least equivalent to those applied by 99ph under this Policy.

99ph will not transfer personal data outside the Philippines in circumstances that would undermine the rights of Philippine data subjects under RA 10173.

The 99ph platform may reference or interact with third-party services such as game providers, payment processors, and live streaming studios. These third-party services operate under their own independent privacy policies, and 99ph has no control over their data collection practices.

99ph is not responsible for the privacy practices of any third-party service providers, game studios, or payment processors that you interact with in connection with the 99ph platform. 99ph recommends that you review the applicable privacy policy of any third-party service before submitting personal information to that service.

99ph reserves the right to update or amend this Privacy Policy at any time. The most current version of this Policy will always be available at 99ph.bio/privacy-policy and will bear the updated "Last Updated" date at the top of the page.

Where a material amendment is made to this Policy — for example, a change in the categories of personal data collected, the purposes for which data is used, or the categories of third parties with whom data is shared — 99ph will notify registered players by email at the address on file at least seven (7) days prior to the amendment taking effect, and will display a prominent notice on the 99ph platform.

Your continued use of the 99ph platform following the effective date of any amendment to this Policy constitutes your acceptance of the amended Policy. If you do not accept the amended Policy, you should cease using the platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to 99ph's processing of your personal data, please contact the 99ph Data Protection Officer:

If you are not satisfied with 99ph's response to a privacy concern, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for administering and implementing RA 10173 and has the authority to investigate privacy complaints and impose sanctions for violations of Philippine data privacy law.

This Privacy Policy was last reviewed and updated on 1 January 2026. The version published at 99ph.bio/privacy-policy at any given time is the version currently in force.