php899 Casino
Privacy Policy

This Policy applies to all personal data processed by php899 in connection with the operation of the php899 platform, including data collected through the php899 website at php899.net, the php899 mobile platform, customer support interactions, marketing communications, and any other touchpoint between you and php899.

This Policy applies to all registered php899 players, prospective players who browse the platform without registering, and any individual who contacts php899 through its support channels. It does not apply to third-party websites or services that may be referenced on the php899 platform — those third parties operate under their own privacy policies.

php899 is committed to handling your personal data with the highest standards of care, transparency, and security. We collect only the data we genuinely need, we use it only for the purposes described in this Policy, and we retain it only for as long as necessary or required by law.

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, php899 is the personal information controller ("PIC") in respect of the personal data it collects and processes in connection with the php899 platform.

As the personal information controller, php899 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with the DPA, its IRR, and all applicable NPC issuances.

php899 has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data privacy laws. Contact details for the php899 DPO are provided in Section 14 of this Policy.

php899 collects personal data from you in the following categories, depending on how you interact with the platform:

3.1 Identity and Registration Data

When you create a php899 account, we collect information necessary to establish and verify your identity, including:

• Full legal name as it appears on your government-issued identification
• Date of birth (to verify you meet the 21+ age requirement)
• Gender
• Nationality and country of residence
• Government-issued identification number (e.g., Philippine passport number, driver's license number, PhilSys National ID number, SSS/GSIS ID number)
• Copies of identity documents submitted for KYC verification

3.2 Contact Data

• Philippine mobile number
• Email address
• Residential address (barangay, city/municipality, province)

3.3 Financial and Transaction Data

• GCash or Maya account details (registered mobile number only — php899 does not store full e-wallet credentials)
• Philippine bank account details for withdrawal processing (account name and account number)
• Deposit and withdrawal transaction history
• Account balance history
• Bonus and promotion redemption records

3.4 Gaming Activity Data

• Game session logs, including games played, wagers placed, and outcomes
• Session duration and login/logout timestamps
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)
• Bonus wagering progress

3.5 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type
• Unique device identifiers
• Cookie identifiers and session tokens (see Section 7)
• Platform access logs and error reports

3.6 Communications Data

• Records of your communications with php899 customer support, including chat transcripts and email correspondence
• Survey responses and feedback submitted through the platform
• Marketing communication preferences and consent records

php899 uses the personal data it collects for the following purposes:

php899 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by the DPA.

php899 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and php899 — specifically, to operate your account, process transactions, and provide access to games and platform features.
• Legal Obligation: Processing is required to comply with php899's legal obligations under Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), Republic Act No. 9160 as amended, and the Data Privacy Act of 2012.
• Legitimate Interests: Processing is necessary for php899's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services, provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and non-essential cookies, php899 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

php899 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

6.1 Service Providers and Processors

php899 engages trusted third-party service providers who process personal data on our behalf as personal information processors ("PIPs") under written agreements that require them to protect your data in accordance with the DPA. These include:

• Payment processors and e-wallet providers (GCash, Maya, and Philippine banking partners) for transaction processing
• Identity verification and KYC service providers
• Cloud hosting and data storage providers
• Customer support platform providers
• Fraud detection and cybersecurity service providers
• Game software providers whose titles are available on the php899 platform

6.2 Regulatory and Law Enforcement Authorities

php899 may disclose your personal data to the following authorities where required or permitted by Philippine law:

• The Philippine Amusement and Gaming Corporation (PAGCOR) in connection with php899's gaming license obligations
• The Anti-Money Laundering Council (AMLC) as required under the Anti-Money Laundering Act
• The National Privacy Commission (NPC) in connection with data privacy compliance and breach notifications
• Philippine law enforcement agencies (e.g., PNP, NBI) pursuant to a valid court order, subpoena, or other lawful process
• The Bureau of Internal Revenue (BIR) for tax compliance purposes

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of php899's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. php899 will notify affected players of any such transfer in advance where practicable.

php899 uses cookies and similar tracking technologies on the php899 platform to enhance your experience, maintain session security, and analyze platform usage. The following categories of cookies are used:

7.1 Strictly Necessary Cookies

These cookies are essential for the php899 platform to function correctly. They enable core features such as account login sessions, security token validation, and navigation between pages. These cookies cannot be disabled without significantly impairing your ability to use the platform.

7.2 Functional Cookies

These cookies remember your preferences and settings on the php899 platform, such as your preferred language, responsible gaming tool configurations, and display preferences. They improve your experience by personalizing the platform to your settings.

7.3 Analytics Cookies

With your consent, php899 uses analytics cookies to collect aggregated, anonymized data about how players use the platform. This data helps us understand which features are most popular, identify technical issues, and improve the overall quality of the php899 experience. No individually identifiable data is used for analytics purposes.

7.4 Managing Your Cookie Preferences

You can manage your cookie preferences through the cookie consent banner displayed when you first visit the php899 platform, or through your browser settings. Please note that disabling strictly necessary cookies may affect the functionality of your php899 account.

php899 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your php899 account and for a minimum of five (5) years following account closure, as required under PAGCOR licensing conditions and the Anti-Money Laundering Act.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA record-keeping requirements.
• Gaming Activity Logs: Retained for a minimum of three (3) years from the date of each session, for responsible gaming monitoring and dispute resolution purposes.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, as evidence of your consent history.
• Technical and Device Data: Retained for twelve (12) months from collection, unless required for longer retention in connection with a security investigation or legal proceeding.

Upon expiry of the applicable retention period, php899 will securely delete or anonymize your personal data in accordance with NPC-approved data disposal procedures.

php899 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmitted between your device and the php899 platform is encrypted using 256-bit SSL/TLS protocols. Sensitive data stored in php899's systems is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within php899's systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular data privacy training.
• Two-Factor Authentication: php899 supports and recommends two-factor authentication (2FA) for all player accounts to provide an additional layer of protection against unauthorized access.
• Intrusion Detection: php899 employs real-time intrusion detection and monitoring systems to identify and respond to potential security threats promptly.
• Regular Security Audits: php899's systems and security controls are subject to regular independent security audits and penetration testing.
• Data Breach Response: In the event of a personal data breach that is likely to result in serious harm to affected individuals, php899 will notify the NPC within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with NPC Circular No. 16-03.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in respect of your personal data held by php899:

To exercise any of the above rights, please contact the php899 Data Protection Officer using the contact details provided in Section 14. php899 will respond to all verified data privacy requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

The php899 platform is strictly intended for individuals aged 21 years and above. php899 does not knowingly collect personal data from individuals under the age of 21. The 21+ age requirement is a mandatory condition of PAGCOR's licensing framework and Philippine law governing casino-style online gaming.

If php899 discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21, php899 will immediately suspend the associated account, return any deposited funds to the payment source, forfeit any winnings, and permanently delete all personal data associated with that account.

If you are a parent or guardian and believe that your child under the age of 21 has registered a php899 account, please contact our Data Protection Officer immediately using the contact details in Section 14 so that we can take prompt action.

In the course of operating the php899 platform, it may be necessary to transfer your personal data to service providers or game software partners located outside the Philippines. php899 ensures that any such cross-border transfers are conducted in accordance with Section 21 of the Data Privacy Act of 2012 and the NPC's guidelines on cross-border data transfers.

Specifically, php899 will only transfer personal data outside the Philippines where:

• The recipient country has been recognized by the NPC as providing an adequate level of data protection; or
• php899 has entered into a data transfer agreement with the recipient that incorporates the NPC's standard contractual clauses or equivalent safeguards; or
• The transfer is necessary for the performance of your contract with php899 (e.g., processing a transaction through an international payment network); or
• You have given your explicit consent to the transfer after being informed of the risks.

php899 maintains a register of all cross-border data transfers and the safeguards applied to each, which is available for review by the NPC upon request.

php899 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC issuances, or PAGCOR regulatory requirements. The "Last Updated" date at the top of this Policy indicates when the most recent revision was made.

When material changes are made to this Policy, php899 will notify registered players via the email address associated with their account and/or by displaying a prominent notice on the php899 platform at least fourteen (14) days before the changes take effect, where practicable.

Your continued use of the php899 platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the updated Policy, you must cease using the platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how php899 is protecting your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by php899, please contact our Data Protection Officer through the following channel:

If you are not satisfied with php899's response to your data privacy request or complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the government body responsible for administering and enforcing the Data Privacy Act of 2012.

For responsible gaming concerns, self-exclusion requests, or gambling-related support, please visit our Responsible Gaming page or contact our support team directly. All responsible gaming requests are handled with the highest priority and full confidentiality.