At phl999, your privacy is not an afterthought — it is a core part of how we operate. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use it, and the rights you have over your information as a player on the phl999 platform.
Your Privacy Rights
phl999 is committed to handling your personal data with transparency, security, and respect — in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).
All data transmitted between your device and the phl999 platform is protected using 256-bit SSL/TLS encryption — the same standard used by major Philippine banks like BPI and BDO. Your personal and financial information is never transmitted in plain text.
phl999 only collects the personal data that is strictly necessary for account registration, identity verification, payment processing, and regulatory compliance. We do not collect data for its own sake — every data point we hold serves a specific, documented purpose.
phl999 does not sell, rent, or trade your personal data to third parties for marketing purposes. Data is shared only with trusted service providers who are contractually bound to protect it, and with regulatory authorities as required by Philippine law.
phl999 operates in full compliance with the Philippine Data Privacy Act of 2012 (RA 10173) and the implementing rules and regulations issued by the National Privacy Commission (NPC). Your rights as a data subject are fully recognized and upheld on the phl999 platform.
You have the right to access, correct, and request deletion of your personal data held by phl999, subject to our legal retention obligations. You can also withdraw consent for marketing communications at any time through your account settings or by contacting our support team.
phl999 does not retain your personal data indefinitely. Retention periods are defined based on the purpose of collection and applicable legal requirements. Account data is retained for a minimum of five (5) years following account closure to comply with PAGCOR and anti-money laundering regulations.
PHL999 ("phl999," "we," "us," or "our") is committed to protecting the privacy and personal data of all individuals who interact with the phl999 platform, including registered players, visitors to the phl999 website, and users of the phl999 mobile application.
This Privacy Policy has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). It sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by phl999.
Please read this Privacy Policy carefully to understand our practices regarding your personal data. This policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your use of the phl999 platform.
For the purposes of the Philippine Data Privacy Act of 2012, phl999 is the personal information controller in respect of the personal data collected through the p hl999 platform.
phl999 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. If you have any questions about this Privacy Policy or wish to exercise your data subject rights, you may contact our DPO through the contact details provided in Section 14 of this policy.
phl999 is registered with the National Privacy Commission as required under the Data Privacy Act of 2012 and its Implementing Rules and Regulations.
phl999 collects the following categories of personal data from players and platform users:
3.1 Identity Data
3.2 Contact Data
3.3 Financial Data
3.4 Technical Data
3.5 Usage Data
3.6 Sensitive Personal Information
In limited circumstances, phl999 may collect sensitive personal information as defined under the Data Privacy Act of 2012, including information about a player's health or financial situation where this is relevant to a responsible gaming assessment or a regulatory compliance obligation. Such sensitive personal information is collected only with your explicit consent or where required by law, and is subject to heightened security and access controls.
phl999 collects personal data through the following means:
Direct Collection: You provide personal data directly to phl999 when you register for an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in a promotion, or use any feature of the phl999 platform that requires you to submit information.
Automated Collection: When you access and use the phl999 platform, we automatically collect technical data and usage data through cookies, web beacons, server logs, and similar technologies. This data is collected automatically as part of the normal operation of the platform and does not require any action on your part beyond accessing the platform.
Third-Party Sources: phl999 may receive personal data about you from third parties in the following circumstances:
phl999 processes your personal data only for specific, legitimate purposes and on a recognized legal basis under the Data Privacy Act of 2012. The table below summarizes the primary purposes for which we process your personal data and the corresponding legal basis:
| Purpose of Processing | Legal Basis |
|---|---|
| Account registration and management | Performance of contract |
| Identity verification (KYC) | Legal obligation; performance of contract |
| Processing deposits and withdrawals | Performance of contract |
| Fraud prevention and anti-money laundering compliance | Legal obligation; legitimate interest |
| Responsible gaming monitoring and intervention | Legal obligation; legitimate interest; consent |
| Customer support | Performance of contract; legitimate interest |
| Platform security and fraud detection | Legitimate interest |
| Regulatory reporting to PAGCOR and other authorities | Legal obligation |
| Marketing communications (where opted in) | Consent |
| Platform analytics and improvement | Legitimate interest |
Where phl999 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To withdraw consent for marketing communications, you may use the unsubscribe link in any marketing email or update your preferences in your account settings.
phl999 uses cookies and similar tracking technologies to operate and improve the platform, personalize your experience, and analyze platform usage. A cookie is a small text file placed on your device when you visit the phl999 website or use the phl999 application.
Types of Cookies Used by phl999:
You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the phl999 platform. Strictly necessary cookies cannot be disabled through browser settings without impairing platform functionality.
phl999 does not sell, rent, or trade your personal data to any third party. We share your personal data only in the following limited circumstances:
7.1 Service Providers
phl999 engages trusted third-party service providers to assist in operating the platform. These providers may process your personal data on our behalf and are contractually required to protect it in accordance with the Data Privacy Act of 2012 and this Privacy Policy. Categories of service providers include:
7.2 Regulatory Authorities
phl999 is required by law to share certain personal data with regulatory and law enforcement authorities, including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government agencies, where required by applicable law or a valid legal order.
7.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of phl999's assets, your personal data may be transferred to the acquiring entity as part of that transaction. phl999 will notify you of any such transfer and the privacy practices of the acquiring entity before your data is transferred and becomes subject to a different privacy policy.
phl999 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
Upon expiry of the applicable retention period, phl999 will securely delete or anonymize your personal data in accordance with our data disposal procedures.
phl999 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phl999 will notify the National Privacy Commission and affected data subjects in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular No. 16-03.
Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phl999:
To exercise any of the above rights, please contact phl999's Data Protection Officer using the contact details in Section 14. phl999 will respond to all data subject rights requests within fifteen (15) business days of receipt. In complex cases, this period may be extended by a further fifteen (15) business days, and you will be notified of any such extension.
phl999 takes the protection of minors extremely seriously. During the registration process, all applicants are required to confirm that they are at least 21 years of age and to provide a date of birth. phl999 verifies age as part of the KYC process and will immediately close any account found to belong to a person under 21 years of age.
If phl999 becomes aware that it has inadvertently collected personal data from an individual under the age of 21, it will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage player will be returned to the payment source, net of any winnings, which will be forfeited.
If you are a parent or guardian and believe that your child has registered on the phl999 platform, please contact us immediately at [email protected] so that we can take appropriate action.
phl999 primarily processes and stores personal data within the Philippines. However, some of our third-party service providers — including cloud infrastructure providers and certain technology vendors — may process or store data in other countries.
Where personal data is transferred outside the Philippines, phl999 ensures that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012. These safeguards may include:
By using the phl999 platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines, subject to the safeguards described above.
phl999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made to this policy, phl999 will notify registered players by email or through a prominent notice on the platform at least seven (7) days before the changes take effect, where reasonably practicable.
The effective date at the top of this Privacy Policy indicates when the current version came into force. The most current version of this Privacy Policy will always be accessible on the phl999 platform at phl999.net/privacy-policy.
Your continued use of the phl999 platform after any amendment has taken effect constitutes your acknowledgment of the revised Privacy Policy. If you do not agree with any amendment, you must stop using the platform and may request account closure in accordance with our Terms & Conditions.
If you have any questions, concerns, or complaints about this Privacy Policy or phl999's data processing practices, or if you wish to exercise any of your data subject rights, please contact our Data Protection Officer:
Data Protection Officer — PHL999
Email: [email protected]
Subject Line: "Privacy / DPO Inquiry"
phl999 will acknowledge receipt of your inquiry within three (3) business days and will endeavor to resolve your concern within fifteen (15) business days.
If you are not satisfied with phl999's response to your complaint, you have the right to lodge a complaint with the National Privacy Commission of the Philippines:
National Privacy Commission (NPC)
3rd Floor, Core G, GSIS Headquarters, Financial Center, Roxas Boulevard, Pasay City, Metro Manila, Philippines
Now that you know how phl999 protects your personal data, you can play with confidence. Create your free account in under two minutes, deposit from ₱100 via GCash or PayMaya, and enjoy hundreds of games on a platform that takes your privacy seriously. Strictly for players aged 21 and above.