Your privacy matters to us. This Privacy Policy explains exactly what personal data 99ph collects, why we collect it, how we use it, and the rights you have under Philippine law.
Last Updated: May 2026Summary: 99ph collects personal data to operate your account, verify your identity, process transactions, and keep the platform safe. We do not sell your personal data to third parties. We comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. This policy applies to all users of the 99ph platform at 99ph.org.
99ph ("the Platform," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses the 99ph online gaming platform. This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, disclosure, and protection of personal information in connection with your use of 99ph.org and any related services, features, or communications.
By registering an account on 99ph or otherwise using the platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the 99ph platform.
This Policy should be read together with the 99ph Terms & Conditions, which govern your use of the platform generally. Capitalised terms not defined in this Policy have the meanings given to them in the Terms & Conditions.
For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, 99ph is the personal information controller responsible for the personal data collected through the 99ph platform.
If you have any questions about how 99ph handles your personal data, or if you wish to exercise any of your data subject rights described in Section 10 of this Policy, you may contact our Data Protection Officer (DPO) using the contact details provided in Section 13.
99ph collects personal data from you in the following ways: directly from you when you register or use the platform, automatically through your use of the platform, and from third parties such as payment providers and identity verification services.
| Category | Examples |
|---|---|
| Identity Data | Full name, date of birth, nationality, government-issued ID number (e.g., PhilSys National ID, passport, driver's licence) |
| Contact Data | Email address, mobile number, residential address (city, province, postal code) |
| Account Data | Username, encrypted password, account preferences, communication preferences |
| Financial Data | GCash account reference, PayMaya / Maya account reference, bank account details (for withdrawal purposes), transaction history |
| KYC Documents | Copies of government-issued ID, proof of address documents, selfie or liveness verification images |
| Support Data | Records of communications with 99ph support, including live chat transcripts and any information you provide when raising a complaint or query |
When you access and use the 99ph platform, we automatically collect certain technical and behavioural data, including:
99ph may receive personal data about you from third-party sources, including:
99ph uses your personal data only for the purposes described below. We do not use your data for any purpose that is incompatible with the original purpose for which it was collected without first obtaining your consent or establishing another lawful basis.
| Purpose | Data Used |
|---|---|
| Account registration and management | Identity, contact, account data |
| Identity and age verification (KYC) | Identity data, KYC documents |
| Processing deposits and withdrawals | Financial data, identity data |
| Providing gaming services and platform features | Account data, usage data |
| Customer support and complaint resolution | Identity, contact, support data |
| Fraud prevention and security monitoring | All categories as necessary |
| Anti-money laundering compliance | Identity, financial, transaction data |
| Responsible gaming monitoring and intervention | Account data, usage data, financial data |
| Platform analytics and improvement | Usage data, cookie data (aggregated/anonymised where possible) |
| Marketing communications (with consent) | Contact data, account preferences |
| Legal and regulatory compliance | All categories as required by law |
Marketing: 99ph will only send you promotional communications if you have opted in to receive them. You may withdraw your consent to marketing communications at any time by updating your account preferences or contacting support.
Under the Philippine Data Privacy Act of 2012 (RA 10173), 99ph processes your personal data on the following legal bases:
99ph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:
Cross-Border Transfers: Some of our third-party service providers may be located outside the Philippines. Where personal data is transferred internationally, 99ph ensures that appropriate safeguards are in place in accordance with the requirements of RA 10173 and the National Privacy Commission's guidelines on cross-border data transfers.
99ph retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account and identity data | Duration of account plus 5 years after closure (AML compliance) |
| Transaction and financial records | 10 years from the date of transaction (RA 9160 requirement) |
| KYC documents | 5 years after account closure or last transaction |
| Support communications | 3 years from the date of the interaction |
| Marketing preferences and consent records | Until consent is withdrawn, plus 1 year for record-keeping |
| Technical and usage logs | Up to 12 months, then anonymised or deleted |
When personal data is no longer required, 99ph will securely delete or anonymise it in accordance with our data disposal procedures.
99ph implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
Data Breach Notification: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 99ph will notify the National Privacy Commission (NPC) and affected individuals in accordance with the requirements of RA 10173 and NPC Circular 16-03.
While 99ph takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. You are responsible for keeping your 99ph login credentials confidential and for notifying us immediately if you suspect unauthorised access to your account.
99ph uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. Cookies help us recognise your device, maintain your session, and understand how you use the platform.
| Cookie Type | Purpose | Consent Required? |
|---|---|---|
| Strictly Necessary | Essential for platform operation — session management, login authentication, security tokens | No (essential) |
| Functional | Remember your preferences such as language, display settings, and responsible gaming limits | No (legitimate interest) |
| Analytics | Understand how players use the platform to improve features and performance (aggregated data) | Yes |
| Marketing | Deliver relevant promotional content based on your interests and platform activity | Yes |
You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may affect the functionality of the 99ph platform. For analytics and marketing cookies, you may withdraw consent at any time through your account settings.
Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by 99ph:
Exercising Your Rights: To exercise any of the rights listed above, please contact the 99ph Data Protection Officer using the contact details in Section 13. We will respond to your request within 15 business days. We may need to verify your identity before processing your request.
The 99ph platform is strictly for users who are 21 years of age or older. 99ph does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not use the 99ph platform or provide any personal data to us.
If you believe a minor has registered on 99ph, please contact us immediately at support@99ph.org. We will investigate and, if confirmed, delete the account and all associated personal data without delay.
99ph may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, we will notify registered players via the email address associated with their account and/or by displaying a prominent notice on the platform prior to the changes taking effect.
The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. Your continued use of the 99ph platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way 99ph handles your personal data, please contact our Data Protection Officer:
99ph Data Protection Officer
Available via live chat on the 99ph platform, 24 hours a day, 7 days a week.
Email: privacy@99ph.org
Please include "Data Privacy Request" in the subject line of your email. Do not include sensitive account credentials in any correspondence.
If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the government body responsible for administering and implementing RA 10173 and for ensuring compliance with data privacy laws in the Philippines.
Six core commitments that underpin the 99ph approach to data privacy.
All data transmitted between your device and the 99ph platform is encrypted using TLS. Passwords are stored as salted hashes — never in plain text.
99ph does not sell, rent, or trade your personal information to third parties for marketing purposes — ever. Your data is used only to operate and improve your 99ph experience.
99ph operates in full compliance with the Philippine Data Privacy Act of 2012. Our practices are aligned with NPC guidelines and regularly reviewed by our Data Protection Officer.
Access, correct, or request deletion of your personal data at any time. Manage your marketing preferences and cookie consent directly from your 99ph account settings.
99ph keeps your data only as long as legally required or operationally necessary. Transaction records are retained for 10 years per AML law; other data is deleted or anonymised sooner.
In the unlikely event of a data breach affecting your information, 99ph will notify you and the National Privacy Commission promptly, in line with NPC Circular 16-03 requirements.
Log in to your 99ph account and enjoy a secure, fair, and responsible gaming experience. Must be 21 or older to participate.
Must be 21 or older. Please gamble responsibly. Gambling is addictive — know when to stop.