At php899, we take your privacy seriously. This Privacy Policy explains exactly what personal information we collect, why we collect it, how we use and protect it, and what rights you have under the Philippine Data Privacy Act of 2012. We're committed to being transparent about data — no fine print designed to hide what we're doing.
Before the legal text, here are the six core privacy commitments php899 makes to every Filipino player on the platform.
php899 does not sell, rent, or trade your personal information to third-party advertisers or data brokers. Your data is used to provide you with gaming services — nothing else. That's the deal.
php899 collects only the personal data we actually need to provide our services and meet PAGCOR compliance obligations. We don't collect information "just in case." If we don't need it, we don't ask for it.
All personal data stored by php899 is protected by AES-256 encryption at rest and TLS 1.3 in transit. Access is restricted to authorized personnel on a strict need-to-know basis, with full audit logging.
You have the right to access, correct, export, and request deletion of your personal data held by php899, subject to legal and regulatory retention requirements. We provide a clear process for exercising these rights.
This Privacy Policy tells you plainly what we collect, why, and who we share it with. We don't hide disclosures in footnotes. If php899's data practices change materially, we will notify you directly before the change takes effect.
php899 processes personal data in full compliance with Republic Act 10173 (Philippine Data Privacy Act of 2012) and all PAGCOR-mandated Know Your Customer (KYC) and Anti-Money Laundering (AML) data obligations.
This Privacy Policy governs the collection, use, storage, and disclosure of personal data by php899 in connection with the operation of the php899 online gaming platform at php899.org. This Policy applies to:
This Policy does not apply to third-party websites or services that may be linked from php899.org. php899 is not responsible for the privacy practices of third-party game providers, payment processors, or other external services, even where links to or integrations with those services appear on the Platform.
For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act 10173), php899 is the Personal Information Controller (PIC) responsible for personal data collected through the php899 platform. php899 determines the purposes and means of processing your personal data.
php899 has appointed a Data Protection Officer (DPO) who is responsible for overseeing data protection compliance and serving as the point of contact for data subject inquiries. Contact details for the DPO are provided in Section 17 of this Policy.
php899 operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR). All data processing activities on the Platform are subject to applicable PAGCOR regulatory requirements in addition to the Data Privacy Act.
php899 collects the following categories of personal data in connection with the provision of gaming services and fulfillment of regulatory obligations:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government ID number | KYC / age verification, PAGCOR compliance |
| Contact Data | Mobile number, email address, home address | Account creation, OTP delivery, support |
| Financial Data | GCash number, bank account details, transaction history | Deposits, withdrawals, AML compliance |
| Account Data | Username, password hash, account balance, bonus history | Account management, gaming services |
| Gaming Activity | Games played, bet amounts, win/loss records, session durations | Responsible gaming, dispute resolution |
| Device & Technical Data | IP address, device type, browser, operating system, cookies | Security, fraud prevention, platform optimization |
| KYC Documents | Scans of government-issued IDs, selfie photographs, proof of address | PAGCOR-mandated identity verification |
| Communications Data | Support chat transcripts, email correspondence | Support quality, dispute resolution, training |
php899 collects personal data through the following channels:
php899 processes your personal data only where a valid legal basis exists under Republic Act 10173. The legal bases applicable to php899's data processing activities are:
php899 uses the personal data we collect for the following specific purposes:
php899 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances and only to the extent necessary:
php899 uses cookies and similar tracking technologies on php899.org to enhance your user experience, maintain session security, and analyze Platform usage. The following categories of cookies are used:
You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the php899 platform, including the ability to maintain a login session.
php899 implements technical and organizational security measures designed to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
php899 retains personal data for as long as necessary to fulfill the purposes described in this Policy, subject to the following retention principles:
Following the applicable retention period, php899 will securely delete or anonymize your personal data such that it can no longer be linked to you as an individual.
As a data subject under the Philippine Data Privacy Act of 2012 (Republic Act 10173), you have the following rights with respect to your personal data held by php899:
To exercise any of these rights, please contact php899's Data Protection Officer using the contact information in Section 17. php899 will respond to all data subject rights requests within 15 business days of receipt of a complete request.
php899 employs age verification measures at registration and during KYC to prevent underage access to the Platform. If php899 discovers or has reasonable grounds to believe that personal data has been collected from an individual under 21 years of age, the associated Account will be suspended immediately, the data will be deleted or returned as appropriate, and any winnings will be forfeited.
If you are a parent or guardian and believe that a minor has accessed php899 or provided personal data to the Platform without your knowledge, please contact our support team immediately. We will investigate and take appropriate action within 48 hours of receiving your report.
php899 primarily stores and processes personal data within the Philippines. Where personal data is transferred to service providers located outside the Philippines — for example, certain cloud infrastructure providers or international game software suppliers — php899 ensures that such transfers are protected by contractual safeguards, including Data Processing Agreements that require the recipient to apply equivalent data protection standards.
php899 will not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate safeguards as required by RA 10173 and its implementing rules.
The php899 Platform integrates with third-party game providers, payment processors, and technology services to deliver its gaming experience. These third parties may have access to limited personal data necessary for their specific function and are contractually required to process such data only for the agreed purpose and in compliance with applicable data protection laws.
php899 conducts due diligence on all third-party data processors before engagement and requires them to maintain appropriate technical and organizational security measures. However, php899 is not responsible for the independent privacy practices of third-party service providers operating outside the scope of their data processing agreements with php899.
php899 reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, legal requirements, or Platform services. Where changes are material, php899 will notify registered Players by email and/or prominent notice on the Platform at least 7 days before the amended Policy takes effect.
The effective date at the top of this Policy indicates when it was last updated. Your continued use of the php899 Platform following the effective date of any amendment constitutes your acknowledgment of the updated Policy. We encourage you to review this Policy periodically.
To exercise any of your rights under RA 10173 as described in Section 11, or to raise any data privacy concern, you may:
All requests must include sufficient information to identify your Account (such as your registered mobile number or username) and a clear description of the right you wish to exercise. php899 may request additional information to verify your identity before processing your request.
If you are not satisfied with php899's response to your data rights request, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.
For all data privacy inquiries, rights requests, or concerns regarding php899's handling of your personal data, please contact:
The Philippine Data Privacy Act gives you real power over your personal data. Here's a quick summary of what you can ask php899 to do.
Request a complete copy of all personal data php899 holds about you, along with a full description of how it's being used. We'll respond within 15 business days.
If any personal data php899 holds about you is inaccurate or outdated, you have the right to have it corrected. Basic contact details can be updated directly in Account settings.
Ask php899 to delete your personal data where it's no longer necessary for the purpose collected, subject to our legal obligations under PAGCOR and AML regulations.
You can object to php899 processing your data for direct marketing at any time. You can also object to processing based on legitimate interests, subject to our legal obligations.
Receive a copy of your personal data in a structured, machine-readable format so you can transfer it to another service. This covers data you actively provided to php899.
If you're not satisfied with how php899 handles your data rights request, you have the right to file a complaint directly with the National Privacy Commission of the Philippines.
Now that you know exactly how php899 handles your personal information, you can play knowing your data is protected under Philippine law. Join hundreds of thousands of Filipino players who trust php899 for safe, fair, and responsible online gaming. Strictly 21+ only. Sumugal nang may responsibilidad.