9php Privacy Policy

1. Introduction and Scope

This Privacy Policy (the "Policy") is issued by 9php Casino (the "Platform", "9php", "we", "us", or "our") and applies to all personal information collected, processed, stored, or otherwise handled by 9php in connection with your use of the 9php website at 9php.cam and all associated services, including online casino games, sports betting, live dealer services, e-wallet transactions, customer support interactions, and promotional activities.

9php is a PAGCOR-regulated online gaming platform operating under the laws of the Republic of the Philippines. This Policy is drafted in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC). By registering an account with 9php or using any of our services, you acknowledge that you have read and understood this Policy, and you consent to the collection and processing of your personal data as described herein.

This Policy applies to all Users of the 9php Platform, regardless of whether they access the Platform through a desktop browser, mobile browser, or any other device. It does not apply to the privacy practices of third-party websites, services, or platforms that may be linked to or from 9php — those are governed by their own privacy policies.

2. Data Controller Information

For the purposes of the Philippine Data Privacy Act of 2012, 9php acts as the Personal Information Controller (PIC) in respect of personal data collected from Users of the Platform. Our designated Data Protection Officer (DPO) can be contacted for all privacy-related queries, requests, and complaints at the following:

• Email: [email protected] (attn: Data Protection Officer)
• Response Time: Within 15 business days of receiving your request
• Support Hours: 24 hours a day, 7 days a week (Philippine Standard Time)

3. What Personal Data We Collect

9php collects personal data from you in several ways — directly when you provide it to us, automatically when you use the Platform, and from third parties in connection with identity verification and payment processing. The categories of personal data we collect include:

3.1 Registration and Account Data

When you create a 9php account, we collect:

• Full legal name (as it appears on your government-issued ID);
• Date of birth (to verify the 21+ age requirement);
• Residential address in the Philippines;
• Email address;
• Mobile phone number (Philippine mobile number preferred);
• Username and encrypted password;
• Security questions and answers.

3.2 Identity Verification (KYC) Data

To comply with PAGCOR regulations and Philippine Anti-Money Laundering (AML) laws, we collect:

• Copies of government-issued identification documents (e.g., Philippine National ID, passport, driver's license, SSS UMID, PRC ID);
• Proof of address documents (e.g., utility bills, bank statements issued in the Philippines);
• Selfie or live photo for liveness verification, where applicable;
• Source of funds declaration, where required by PAGCOR or AML regulations.

3.3 Financial Transaction Data

When you make deposits or withdrawals through 9php, we collect:

• Payment method details (e.g., GCash mobile number, PayMaya account reference, bank account details for BPI, BDO, or Metrobank);
• Transaction amounts, dates, and reference numbers;
• Partial card numbers (we do not store full card numbers — these are tokenized by our payment processor).

3.4 Gaming and Betting Activity Data

• Game session records, including games played, bet amounts, outcomes, and winnings;
• Sports betting slips, selections, odds, and settlement records;
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status);
• Account balance history and transaction logs.

3.5 Technical and Usage Data

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Session timestamps, page views, and navigation patterns;
• Cookies and similar tracking technologies (see Section 8 for details).

3.6 Communications Data

• Customer support chat transcripts and email correspondence;
• Survey responses and feedback submissions;
• Promotional opt-in and opt-out records.

4. How We Use Your Personal Data

9php processes your personal data for the following purposes, each of which has a lawful basis under RA 10173:

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, contact details	Contract performance
Age and identity verification (KYC)	KYC documents, date of birth	Legal obligation (PAGCOR, RA 9160)
Processing deposits and withdrawals	Financial transaction data	Contract performance
Fraud prevention and AML monitoring	Transaction data, IP address, KYC data	Legal obligation, legitimate interest
Responsible gaming monitoring	Gaming activity, account settings	Legal obligation (PAGCOR RG requirements)
Customer support	Communications data, account data	Contract performance, legitimate interest
Marketing communications (opt-in only)	Contact details, gaming preferences	Consent
Platform analytics and improvement	Technical and usage data	Legitimate interest
Regulatory reporting to PAGCOR and NPC	Account data, transaction records	Legal obligation

5. Disclosure of Personal Data to Third Parties

9php does not sell, rent, or trade your personal data. We may disclose your personal data to the following categories of third parties only to the extent necessary for the purposes outlined in Section 4:

• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies, where disclosure is required by law or regulation;
• Payment Processors: GCash (Mynt), PayMaya (Voyager Innovations), BancNet, and Visa/Mastercard networks, solely to process your financial transactions;
• Identity Verification Providers: Third-party KYC and liveness verification service providers engaged by 9php to assist with account verification, operating under strict data processing agreements;
• Game Providers: Licensed game software providers whose games are integrated into the 9php platform may receive limited technical session data for the purpose of game operation and anti-fraud monitoring;
• IT and Infrastructure Providers: Cloud hosting and cybersecurity service providers who process data on our behalf under binding confidentiality and data processing agreements;
• Legal and Professional Advisors: Law firms, auditors, and compliance consultants, where disclosure is necessary to obtain professional advice or defend legal claims.

All third parties who receive your personal data from 9php are required to handle it in accordance with RA 10173 and in a manner consistent with this Policy. We do not authorize any third party to use your personal data for their own marketing purposes.

6. International Data Transfers

Some of the third-party service providers engaged by 9php (including certain game providers and cloud infrastructure partners) may be located outside the Philippines. Where personal data is transferred to a country that does not provide an adequate level of data protection equivalent to Philippine standards, 9php ensures that appropriate safeguards are in place — including contractual data processing agreements incorporating the NPC's standard contractual clauses — before any transfer occurs. You may request information about the specific safeguards applied to international transfers by contacting our Data Protection Officer.

7. Data Retention

9php retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulation. The following retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, in accordance with PAGCOR licensing requirements and the Anti-Money Laundering Act (RA 9160, as amended);
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• Gaming activity logs: Retained for a minimum of two (2) years from the date of each session;
• Customer support records: Retained for two (2) years from the date of each interaction;
• Marketing consent records: Retained until you withdraw consent, plus one (1) year.

After the applicable retention period expires, personal data is securely deleted or anonymized in accordance with NPC guidelines, unless further retention is required to resolve a pending dispute or legal proceeding.

8. Cookies and Tracking Technologies

9php uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Required for the Platform to function, including maintaining your login session and security tokens. These cannot be disabled without affecting your ability to use 9php;
• Analytics Cookies: Used to collect aggregated, anonymized information about how Users navigate the Platform, enabling us to identify performance issues and improve the user experience;
• Preference Cookies: Used to remember your language, display, and notification preferences between sessions;
• Anti-Fraud Cookies: Used to detect suspicious activity, unusual login patterns, and potential account fraud.

We do not use third-party advertising or retargeting cookies on the 9php Platform. You can manage your cookie preferences through your browser settings; however, disabling essential cookies may prevent certain platform features from working correctly.

9. Your Rights Under the Data Privacy Act of 2012

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by 9php:

• Right to be Informed: The right to know that your personal data is being collected, the purposes for which it is being processed, and your rights as a data subject — which is the primary purpose of this Policy;
• Right of Access: The right to request a copy of your personal data held by 9php, along with information about how it is being processed;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held on your account;
• Right to Erasure (Right to be Forgotten): The right to request deletion of your personal data, subject to our legal retention obligations under PAGCOR regulations and AML laws;
• Right to Object: The right to object to certain types of processing, including direct marketing and processing based on legitimate interest;
• Right to Data Portability: The right to request your personal data in a structured, commonly used, and machine-readable format;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer at [email protected]. We will respond to your request within fifteen (15) business days. In some cases, we may need to verify your identity before processing your request.

10. Data Security

9php implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• AES-256 encryption for sensitive personal data stored in our databases;
• Multi-factor authentication for internal system access by 9php staff;
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity firms;
• Strict role-based access controls limiting employee access to personal data on a need-to-know basis;
• 24/7 security monitoring and intrusion detection systems;
• Regular staff training on data privacy obligations and cybersecurity best practices.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that poses a real risk to your rights and freedoms, 9php will notify affected Users and the National Privacy Commission within the timeframes required by RA 10173 and its IRR.

11. Children and Minors

The 9php Platform is strictly prohibited for use by individuals under the age of twenty-one (21). We do not knowingly collect personal data from minors. All accounts are subject to mandatory age verification during the KYC process. If we become aware that a minor has registered an account or provided personal data, we will immediately close the account, delete all associated personal data (except where retention is required by law), and report the matter to PAGCOR as required by our licensing conditions. If you believe a minor has created a 9php account, please contact us immediately at [email protected].

12. Marketing Communications

9php will only send you promotional communications (including bonus offers, tournament announcements, and platform updates) if you have expressly opted in during registration or through your account settings. Each marketing communication will include a clear and functional opt-out mechanism. You may also withdraw your marketing consent at any time by:

• Updating your notification preferences in your 9php account settings;
• Contacting our Customer Support team at [email protected].

Please note that withdrawing marketing consent does not affect your ability to use the Platform or receive important transactional communications (such as deposit confirmations, withdrawal notifications, and account security alerts), which are sent as part of our contractual obligations to you.

13. Changes to This Privacy Policy

9php reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When we make material changes to this Policy, we will notify you by posting a prominent notice on the Platform and/or sending an email notification to your registered email address at least fourteen (14) days before the changes take effect. Your continued use of the 9php Platform after the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree to the revised Policy, you should stop using the Platform and may request account closure.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 9php, please contact our Data Protection Officer:

• Email: [email protected] (attn: Data Protection Officer)
• Live Chat: Available 24/7 through your 9php account dashboard
• Response Time: Within 15 business days of receiving your request

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) if you believe your data privacy rights have not been respected. Information on how to file a complaint with the NPC is available on their official government website.

Last Updated: October 8, 2026
Effective Date: October 8, 2026
Version: 2.4
Governing Law: Republic Act No. 10173 (Data Privacy Act of 2012), Republic of the Philippines