ph1999 Privacy Policy

This Privacy Policy ("Policy") is issued by ph1999 ("ph1999," "we," "us," or "our"), the operator of the online gaming platform accessible at ph1999.co. This Policy explains how we collect, use, store, disclose, and protect personal information relating to individuals who access or use our platform, including registered players, visitors to our website, and persons who contact our customer support team.

ph1999 is committed to protecting the privacy and personal data of all users in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations ("IRR"), as administered by the National Privacy Commission of the Philippines ("NPC"). ph1999 also processes personal data in compliance with applicable PAGCOR regulatory requirements relating to player identification, anti-money-laundering, and responsible gaming.

By accessing ph1999, registering an account, or providing personal information to us in any context, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the ph1999 platform.

This Policy applies to all personal data collected through: (a) the ph1999 website at ph1999.co; (b) the ph1999 account registration and management processes; (c) payment transactions conducted through the platform; (d) communications with ph1999 customer support; and (e) ph1999's marketing and promotional activities directed at registered players.

For the purposes of the Philippine Data Privacy Act of 2012, ph1999 acts as the Personal Information Controller in respect of the personal data processed under this Policy. ph1999 determines the purposes and means of processing personal data collected through the platform and is responsible for ensuring that such processing is conducted in accordance with applicable Philippine data protection law.

ph1999 has designated a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data protection legislation. The DPO may be contacted using the contact details provided in Section 15 of this Policy.

Where ph1999 engages third-party service providers to process personal data on its behalf (such as payment processors, KYC verification providers, and customer support platform operators), those providers act as Personal Information Processors under the Data Privacy Act. ph1999 enters into appropriate data processing agreements with all such processors to ensure that personal data is handled in accordance with this Policy and applicable law.

ph1999 collects the following categories of personal data from users of the platform. The specific data collected varies depending on the nature of the interaction and the services accessed:

ph1999 does not collect sensitive personal information (as defined under the Data Privacy Act) unless it is strictly necessary for compliance purposes, such as the collection of government-issued identification documents for KYC and AML purposes. Where sensitive personal information is collected, additional safeguards are applied to its storage and processing.

ph1999 collects personal data through the following channels and methods:

• Direct Interaction: Information you provide when creating your ph1999 account, completing the KYC verification process, submitting deposit or withdrawal requests, contacting customer support, or participating in promotions;
• Automated Technologies: Technical and usage data collected automatically when you access the ph1999 platform, including through cookies, web beacons, pixel tags, and server logs (see Section 8 for full details);
• Payment Service Providers: Transaction confirmation data received from GCash, Maya, BPI, BDO, Metrobank, InstaPay, and other payment service providers when you deposit or withdraw funds;
• Identity Verification Providers: Data received from third-party KYC and identity verification services engaged by ph1999 to fulfill its PAGCOR licensing obligations and AML compliance requirements;
• Fraud Detection Systems: Device fingerprinting and behavioral analytics data generated by fraud detection tools used to protect the integrity of the ph1999 platform;
• Publicly Available Sources: In limited circumstances, data from Philippine government databases or publicly available sources may be accessed to verify player identity or for AML screening purposes, consistent with applicable law.

ph1999 processes personal data only where a lawful basis for processing exists under the Philippine Data Privacy Act of 2012. The applicable lawful basis for each category of processing is set out below:

• Performance of Contract: Processing necessary to perform the gaming services contract between ph1999 and you as a registered player — including account management, game access, deposit processing, and withdrawal fulfillment;
• Compliance with Legal Obligation: Processing necessary to comply with ph1999's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act of 2001 (as amended by Republic Act No. 10365), the Philippine Data Privacy Act, and all other applicable Philippine laws and regulations;
• Legitimate Interests: Processing necessary for ph1999's legitimate interests in preventing fraud, ensuring platform security, improving services, and conducting responsible gaming monitoring — provided that such interests are not overridden by your fundamental rights and freedoms;
• Consent: Processing of your data for direct marketing communications, where such consent has been obtained separately and may be withdrawn at any time in accordance with Section 12 of this Policy.

ph1999 uses personal data collected from players for the following purposes:

• Account Management: Creating, maintaining, and managing your ph1999 account, including processing your registration, verifying your identity, and administering your ph1999 login credentials;
• Service Delivery: Providing access to casino games, sports betting, bingo, fishing games, and all other platform features; processing deposits and withdrawals; and administering bonuses and promotional credits;
• Regulatory Compliance: Verifying player age (21+ requirement), conducting KYC identity verification, fulfilling PAGCOR reporting obligations, and complying with AML screening and suspicious transaction reporting requirements;
• Responsible Gaming: Monitoring gaming activity to identify potential problem gambling patterns; administering deposit limits, session alerts, and self-exclusion requests; and fulfilling ph1999's responsible gaming obligations under PAGCOR conditions;
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, account takeover attempts, bonus abuse, and other prohibited conduct on the platform;
• Customer Support: Responding to your inquiries, resolving disputes, processing complaints, and providing technical assistance;
• Platform Improvement: Analyzing usage patterns and player behavior (in aggregated and anonymized form) to improve game offerings, platform performance, and the overall player experience;
• Direct Marketing: Sending promotional communications about bonuses, new games, and platform features — subject to your marketing preferences and applicable opt-out rights (see Section 12).

ph1999 does not sell, rent, or trade personal data to third parties for commercial purposes. Personal data is shared only in the following limited circumstances:

• Payment Service Providers: Transaction data is shared with GCash, Maya, BPI, BDO, Metrobank, and other payment processors solely for the purpose of processing your deposit and withdrawal requests. These providers process data under their own privacy policies and are bound by contractual obligations with ph1999;
• KYC and Identity Verification Providers: Identity documents and related data may be shared with accredited third-party KYC service providers engaged to perform identity verification on ph1999's behalf, as required by PAGCOR licensing conditions;
• Game Technology Providers: Aggregated and pseudonymized gaming activity data may be shared with game providers for technical support, RNG audit, and game performance purposes;
• Regulatory Authorities: ph1999 is required to disclose player information to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine regulatory and law enforcement authorities where required by law or legal process;
• Fraud Prevention Services: Device and behavioral data may be shared with third-party fraud detection and prevention services under appropriate data processing agreements;
• Professional Advisors: Personal data may be shared with legal, accounting, or audit advisors engaged by ph1999, subject to applicable professional confidentiality obligations.

ph1999 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files stored on your device that help us recognize you, remember your preferences, and analyze platform usage patterns.

8.1 Types of Cookies Used by ph1999:

• Strictly Necessary Cookies: Essential for the operation of the ph1999 platform, including maintaining your login session, processing transactions, and ensuring platform security. These cookies cannot be disabled without affecting core platform functionality;
• Performance Cookies: Collect aggregated, anonymized information about how players interact with the ph1999 platform — including pages visited, time spent, and errors encountered — to help us improve the user experience;
• Functional Cookies: Remember your preferences such as game lobby filters, language settings, and display options to provide a more personalized experience;
• Analytics Cookies: Used to analyze usage patterns and platform performance in aggregate form for internal reporting and improvement purposes.

8.2 Managing Cookies. You may control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the ph1999 platform, including your ability to log in and access games. Most browsers provide settings to manage, block, or delete cookies; instructions are typically available in the browser's help section.

ph1999 retains personal data for the periods necessary to fulfill the purposes outlined in this Policy, subject to the following minimum retention periods mandated by applicable Philippine law:

• Account and Identity Data: Retained for a minimum of five (5) years following account closure, as required under PAGCOR conditions and AML regulations;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required under the Anti-Money Laundering Act and BSP regulations;
• Gaming Activity Records: Retained for a minimum of three (3) years following the relevant gaming session or promotional activity;
• Customer Support Records: Retained for three (3) years from the date of the interaction, or longer where records relate to an unresolved dispute;
• Responsible Gaming Records: Self-exclusion and cooling-off records retained for the duration of the restriction period plus five (5) years to prevent circumvention.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymized in a manner that prevents re-identification, unless continued retention is required for ongoing legal proceedings, regulatory investigations, or other legitimate purposes.

ph1999 implements a comprehensive set of technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, destruction, or loss. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and ph1999's servers;
• AES-256 encryption for sensitive personal data stored at rest;
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need;
• Multi-factor authentication requirements for internal systems containing player data;
• Regular penetration testing and vulnerability assessments of platform infrastructure;
• 24/7 security monitoring and anomaly detection systems;
• Mandatory data protection training for all ph1999 staff with access to personal data;
• Vendor due diligence processes for all third-party processors engaged by ph1999.

While ph1999 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. In the event of a personal data security incident that poses a risk to your rights and freedoms, ph1999 will notify you and the National Privacy Commission in accordance with the requirements of the Philippine Data Privacy Act and its IRR.

Under the Philippine Data Privacy Act of 2012, you are entitled to exercise the following rights in respect of your personal data held by ph1999:

• Right to Be Informed: The right to receive clear information about how ph1999 collects and processes your personal data — fulfilled through this Policy;
• Right to Access: The right to obtain a copy of the personal data ph1999 holds about you, together with information about how it is processed;
• Right to Rectification: The right to request the correction of inaccurate or incomplete personal data. Many data elements can be updated directly through your ph1999 account settings;
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to applicable legal and regulatory retention requirements;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. See Section 12 for how to exercise this right;
• Right to Data Portability: The right to receive a structured, commonly used, and machine-readable copy of personal data you have provided to ph1999 where processing is based on consent or contract;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe ph1999 has processed your personal data in violation of the Data Privacy Act.

To exercise any of the above rights, please contact ph1999's Data Protection Officer using the contact details in Section 15. ph1999 will respond to all verified data subject requests within thirty (30) calendar days of receipt, subject to the verification of your identity.

ph1999 may send you marketing communications about bonuses, promotions, new games, and platform features via SMS, email, or in-platform notifications, where you have provided consent to receive such communications.

12.1 Opt-Out. You may withdraw your consent to receive marketing communications at any time by: (a) updating your communication preferences in your ph1999 account settings; (b) clicking the "unsubscribe" link included in any marketing email from ph1999; or (c) contacting customer support with a request to opt out of marketing communications.

12.2 Service Communications. Withdrawal of marketing consent does not affect ph1999's right to send you essential service communications relating to your account, including transaction confirmations, security alerts, responsible gaming notifications, and other communications necessary for the performance of the gaming services contract.

12.3 Processing Time. ph1999 will process opt-out requests within five (5) business days. Please note that you may continue to receive marketing communications for a short period following your opt-out request while your preferences are updated across ph1999's systems.

ph1999 is an online gambling platform intended exclusively for adult players who are at least 21 years of age, as required by PAGCOR regulations for online gaming in the Philippines. ph1999 does not knowingly collect personal data from persons under the age of 21.

ph1999 implements age verification procedures during the registration process to prevent underage individuals from accessing the platform. Where ph1999 becomes aware that it has inadvertently collected personal data from a person under the age of 21, that data will be promptly deleted and the associated account will be closed in accordance with the account suspension procedures described in ph1999's Terms and Conditions.

ph1999 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. Material changes to this Policy will be communicated to registered players via email to their registered address or through a prominent notice on the ph1999 platform, no less than seven (7) calendar days before the updated Policy takes effect.

The effective date displayed at the top of this Policy indicates when the current version entered into force. The most current version of this Policy is always accessible at ph1999.co/privacy-policy. Your continued use of the ph1999 platform following the effective date of any update constitutes your acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how ph1999 handles your personal data. If you have questions about any changes, please contact our Data Protection Officer using the details in Section 15.

If you have any questions, concerns, or requests relating to this Privacy Policy or ph1999's handling of your personal data, please contact our Data Protection Officer through the following channels:

Complaints to the National Privacy Commission. If you are not satisfied with ph1999's response to your data privacy inquiry or request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines ("NPC"). The NPC is the independent regulatory authority responsible for enforcing the Philippine Data Privacy Act. Information on filing a complaint with the NPC is available at their official website.

ph1999 takes all data privacy complaints seriously and will cooperate fully with any NPC investigation relating to its data processing activities. We encourage players to contact ph1999's DPO in the first instance, as many concerns can be resolved efficiently through direct communication without the need for formal regulatory escalation.