999pub Privacy Policy

This Privacy Policy ("Policy") describes how 999pub, operating the online gaming platform at 999pub.cam ("the Platform," "we," "us," or "our"), collects, processes, stores, and protects personal data about individuals who register for or use our services ("Users" or "you").

999pub is a PAGCOR-registered online casino and sports betting platform serving Filipino players across the Philippines — from Metro Manila and Cebu City to Davao, Iloilo, and beyond. As a data controller operating within the Republic of the Philippines, 999pub is subject to and fully complies with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission (NPC).

This Policy applies to all personal data processed by 999pub in connection with your use of the Platform, including through our website, mobile browser experience, customer support channels, and marketing communications.

999pub collects the minimum personal data necessary to deliver our services, fulfil our regulatory obligations, and maintain the security and integrity of the Platform. The categories of personal data we collect include:

999pub collects personal data through the following methods:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated Technical Collection: Data generated automatically through your use of the Platform, including IP addresses, device identifiers, session logs, and cookies placed on your browser or device.
• Payment Processors: Transaction confirmation and reference data received from GCash, Maya, BPI, BDO, Metrobank, and other payment partners when you conduct financial transactions on the Platform.
• Identity Verification Services: Data received from third-party KYC and document verification providers engaged to assist with identity and age verification as required by PAGCOR.
• Third-Party Game Providers: Aggregated gaming activity data from game providers (JILI, PG Soft, Pragmatic Play, Evolution Gaming, and others) integrated into the 999pub platform.

999pub uses your personal data only for the purposes set out below. We do not use your data for any purpose that is incompatible with those for which it was originally collected without obtaining your additional consent.

• Creating, managing, and maintaining your 999pub account
• Processing deposits, wagers, and withdrawals to your registered payment method
• Delivering games and platform features you access
• Providing customer support in English and Filipino, 24/7

• Verifying your identity and age (21+) as required by PAGCOR
• Complying with Anti-Money Laundering Act (AMLA) obligations, including suspicious transaction reporting
• Responding to lawful requests from PAGCOR, the NPC, or other competent Philippine government authorities

• Detecting and preventing account fraud, identity theft, and unauthorised access
• Monitoring gaming activity for signs of collusion, system abuse, or money laundering
• Maintaining audit logs for security incident investigation

• Monitoring gaming patterns to identify potential problem gambling behaviours
• Applying and enforcing self-exclusion, deposit limits, and cooling-off periods requested by players
• Communicating responsible gaming resources and support information

• Sending promotional offers, bonus notifications, and platform updates where you have opted in to receive them
• Personalising game and promotion recommendations based on your preferences and activity

Under the Data Privacy Act of 2012, 999pub processes your personal data on the following lawful bases:

• Contractual Necessity: Processing required to enter into and perform the contract with you (i.e., to operate your 999pub account and deliver the services you have requested).
• Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate Interest: Processing necessary for 999pub's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your data protection rights.
• Consent: Where we rely on your explicit consent — particularly for optional marketing communications — you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting our support team.

999pub does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

• Service Providers: Third-party vendors engaged to support Platform operations, including payment processors (GCash, Maya, BPI, BDO), KYC verification providers, IT hosting and security providers, and customer support platform operators. All service providers are contractually bound to process data only on 999pub's instructions and in accordance with applicable privacy law.
• Game Providers: Limited gaming activity data shared with integrated game providers (JILI, PG Soft, Evolution Gaming, etc.) to deliver game sessions. These providers are not permitted to use your data for their own marketing purposes.
• Regulatory Authorities: PAGCOR, the NPC, the Anti-Money Laundering Council (AMLC), or other competent Philippine government bodies, where disclosure is required by law, court order, or regulatory directive.
• Law Enforcement: Philippine law enforcement agencies where disclosure is required in connection with a lawful investigation.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of 999pub's assets, your personal data may be transferred to the successor entity, which will be required to honour this Privacy Policy.

999pub retains your personal data for as long as necessary to fulfil the purposes for which it was collected, and in accordance with minimum retention periods prescribed by Philippine law:

• Active Account Data: Retained for the duration of your account relationship with 999pub plus a minimum of five (5) years after account closure, as required by PAGCOR licensing conditions and AMLA obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act.
• KYC and Identity Verification Documents: Retained for a minimum of five (5) years from account closure, or longer if required by applicable law or ongoing regulatory inquiry.
• Support and Communications Records: Retained for three (3) years from the date of the last communication.
• Marketing Consent Records: Retained until consent is withdrawn plus an additional period for legal compliance documentation purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with 999pub's data disposal procedures.

The 999pub platform uses cookies and similar tracking technologies to operate effectively, maintain your session, and improve your experience. The categories of cookies we use include:

• Strictly Necessary Cookies: Essential to the operation of the Platform. These enable session management, login functionality, security token handling, and fraud prevention features. These cookies cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences — such as language settings, display preferences, and responsible gaming limit settings — to personalise your 999pub experience across sessions.
• Analytical Cookies: Collect aggregated, anonymised data about how users navigate the Platform, enabling 999pub to identify and resolve technical issues and improve the overall user experience. No personally identifiable data is included in analytics reports.
• Security Cookies: Support authentication and help detect and prevent fraudulent account access attempts.

You may manage cookie preferences through your browser settings. Disabling certain cookie categories may affect your ability to use specific Platform features. 999pub does not use third-party advertising cookies or place tracking cookies for external advertising networks.

Under the Data Privacy Act of 2012, you hold the following rights with respect to your personal data held by 999pub. To exercise any of these rights, please contact our Data Protection Officer at [email protected]. 999pub will respond to all valid requests within fifteen (15) business days.

999pub implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and the 999pub platform is encrypted using 256-bit SSL/TLS protocols.
• Encryption at Rest: Sensitive personal data stored in 999pub databases is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Personal data is accessible only to authorised 999pub personnel and service providers with a documented legitimate business need. Access is logged and audited.
• Two-Factor Authentication: Administrative access to data processing systems requires multi-factor authentication. Players are also encouraged to enable 2FA on their 999pub accounts.
• Regular Security Audits: 999pub engages independent cybersecurity specialists to conduct periodic penetration testing and security reviews of the Platform infrastructure.
• Staff Training: All 999pub personnel with access to personal data receive mandatory data privacy and security training upon engagement and annually thereafter.

Despite these measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own device and 999pub login credentials. If you suspect your account has been compromised, contact our support team immediately via live chat.

The 999pub platform is strictly restricted to individuals who are at least 21 years of age, as required by PAGCOR regulations governing online gaming in the Philippines. 999pub does not knowingly collect personal data from individuals under the age of 21.

If 999pub discovers or is notified that personal data has been collected from an individual under the age of 21, we will immediately close the associated account, return any deposited funds, and permanently delete all personal data relating to that individual, unless retention is required by applicable law.

999pub reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. When material changes are made, we will notify registered users by:

• Sending a notification to your registered mobile number or email address; and/or
• Displaying a prominent notice within the Platform upon your next login; and/or
• Updating the "Effective Date" displayed at the top of this page.

Your continued use of the 999pub platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a material change, you may close your account as described in our Terms & Conditions.

999pub has designated a Data Protection Officer (DPO) responsible for overseeing our compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have questions, concerns, or requests relating to the processing of your personal data, or wish to exercise any of your data subject rights, please contact us through the following channels:

• Live Chat: Available 24/7 through the 999pub Platform — the fastest way to reach our team
• Email (DPO): [email protected] — mark your subject line "Data Privacy Request"
• Languages: Privacy inquiries are handled in English and Filipino
• Response Time: Initial acknowledgement within 48 hours; substantive response within 15 business days

For escalated or unresolved privacy complaints, you may also contact the National Privacy Commission of the Philippines through its official government portal and complaint mechanisms.