phi99 Privacy Policy

1. Overview

phi99 ("phi99", "we", "us", "our", "the Company") operates the online gaming platform accessible at phi99.cam, including all associated subdomains, mobile interfaces, and customer service channels. This Privacy Policy applies to all personal data processed by phi99 in connection with your use of the platform, whether you are a registered account holder, a prospective player browsing the site, or a visitor who contacts our support team.

For the purposes of this policy and applicable Philippine data protection law, phi99 is the Personal Information Controller ("PIC") in respect of the personal data you provide or that is generated by your use of the phi99 platform. phi99 has designated a Data Protection Officer ("DPO") who oversees compliance with data protection obligations and serves as your primary point of contact for privacy-related queries.

By registering an account on phi99 or by continuing to use the phi99 platform after this policy has been made available to you, you acknowledge that you have read and understood how phi99 processes your personal data as described herein. If you do not agree with this Privacy Policy, you should discontinue use of the phi99 platform.

2. Personal Data We Collect

phi99 collects personal data that is adequate, relevant, and limited to what is necessary for the purposes described in this policy. The categories of personal data we collect include:

2.1 Identity & Contact Information

• Full legal name as it appears on your government-issued identification;
• Date of birth (to verify that you meet the 21-year age requirement);
• Residential address, including barangay, city or municipality, province, and postal code;
• Philippine mobile number (Globe, Smart, DITO, or MVNO);
• Email address;
• Government-issued identification documents (national ID, passport, driver's licence, SSS/UMID card, or equivalent).

2.2 Financial & Transaction Data

• GCash mobile number or PayMaya account details used for deposits and withdrawals;
• Bank account details (account name, bank name, account number) for BPI, BDO, Metrobank, or UnionBank transactions;
• Deposit and withdrawal history, transaction amounts, and timestamps;
• Account balance, bonus balances, and loyalty point records.

2.3 Account & Gaming Activity Data

• phi99 username and hashed password (your actual password is never stored in readable form);
• Game session records, bet history, win/loss records, and game preferences;
• Login and logout timestamps, session duration data;
• Responsible gaming settings you have activated, including deposit limits, session reminders, and self-exclusion records.

2.4 Technical & Device Data

• IP address at the time of registration and subsequent logins;
• Device type, operating system, and browser version;
• Approximate geolocation derived from IP address (country and city level only — phi99 does not access GPS or precise device location);
• Cookies, session tokens, and analytics identifiers (see Section 7).

2.5 Communications Data

• Records of live chat interactions, emails, and any other communications you send to phi99 support;
• Complaint and dispute records;
• Marketing preference settings and records of consent for promotional communications.

3. How We Collect Your Data

phi99 collects personal data through the following channels and mechanisms:

phi99 does not purchase personal data from data brokers or third-party list providers. All data we hold is either provided directly by you or generated by your interaction with the phi99 platform.

4. How We Use Your Personal Data

phi99 uses your personal data only for specified, explicit, and legitimate purposes. The primary purposes for which we process your data are:

4.1 Account Management and Service Delivery

To create and maintain your phi99 account, verify your identity and eligibility, process deposits and withdrawals, provide access to games, manage bonus entitlements, and operate the phi99 VIP loyalty program.

4.2 Legal and Regulatory Compliance

To comply with applicable Philippine laws and regulatory obligations, including age verification (21+ requirement), anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and any reporting obligations to relevant Philippine regulatory authorities. phi99 is required by law to retain certain transaction and identity records for prescribed minimum periods.

4.3 Fraud Prevention and Security

To detect, investigate, and prevent fraudulent activity, collusive behaviour, money laundering, multi-accounting, and other conduct prohibited under the phi99 Terms & Conditions. This includes automated risk scoring and pattern analysis on account activity.

4.4 Responsible Gaming

To enforce responsible gaming measures you have activated — including deposit limits, session reminders, cooling-off periods, and self-exclusion — and to identify accounts that may benefit from responsible gaming intervention based on behavioural patterns.

4.5 Customer Support

To respond to your queries, resolve disputes, process complaints, and maintain records of support interactions for quality assurance and training purposes.

4.6 Marketing and Promotional Communications

To send you promotional offers, bonus notifications, and platform updates by SMS, email, or in-platform notification — but only where you have provided your consent or where phi99 has a legitimate interest in communicating with existing account holders. You may withdraw consent for marketing communications at any time by updating your notification preferences in your account settings or by contacting phi99 support.

4.7 Platform Improvement and Analytics

To analyse aggregated, anonymised usage data to improve platform performance, game availability, user interface design, and overall service quality. Aggregated analytics do not identify individual players.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, phi99 processes your personal data on the following legal bases:

6. Sharing Your Personal Data

phi99 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with third parties only in the following circumstances:

6.1 Service Providers and Data Processors

phi99 engages third-party service providers who process personal data on phi99's behalf and strictly under phi99's instructions. These include identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank, UnionBank), KYC and AML screening services, IT infrastructure and hosting providers, and customer communications platforms. All such providers are contractually bound to process your data only for the purposes specified by phi99, to implement appropriate security measures, and not to disclose your data to any further third party without phi99's written consent.

6.2 Game Providers

phi99 works with licensed game software providers whose games are integrated into the phi99 platform. Minimal technical data (such as a unique player token and session identifier) may be shared with game providers to enable gameplay. Game providers do not receive your full identity or financial details.

6.3 Legal and Regulatory Authorities

phi99 may disclose personal data to Philippine regulatory authorities, law enforcement agencies, courts, or other government bodies where required to do so by applicable law, court order, or lawful regulatory request. phi99 will, where legally permissible, notify you of such disclosures.

6.4 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of phi99's assets, your personal data may be transferred to the acquiring entity as part of that transaction. phi99 will take reasonable steps to ensure that the acquiring entity provides equivalent privacy protections and will notify you of any such transfer.

7. Cookies & Tracking Technologies

phi99 uses cookies and similar tracking technologies on the phi99.cam website and platform to enable core functionality, improve user experience, and gather analytics data. A cookie is a small text file placed on your device by a website you visit. phi99 uses the following categories of cookies:

7.1 Strictly Necessary Cookies

These cookies are essential for the phi99 platform to function correctly. They enable you to log in, navigate between game categories, maintain your session, and process transactions. These cookies cannot be disabled without significantly impairing your ability to use phi99, and they do not require your consent under applicable law.

7.2 Performance and Analytics Cookies

These cookies collect anonymised information about how visitors use phi99.cam — which pages are most visited, how long sessions last, and what errors are encountered. This data is used solely to improve the platform. It does not identify you personally.

7.3 Functional Cookies

These cookies remember your platform preferences — such as your preferred language, game display settings, and notification preferences — so you do not need to re-enter them each time you visit. Disabling these cookies may result in reduced functionality.

7.4 Managing Cookies

You can control or delete cookies through your browser settings. Most modern browsers — Chrome, Firefox, Safari, Edge — allow you to block all cookies, block third-party cookies only, or delete cookies after each session. Note that disabling strictly necessary cookies will prevent you from logging in to your phi99 account. Detailed instructions for managing cookies in your browser are available in each browser's help documentation.

8. Data Retention

phi99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for such longer periods as are required or permitted by applicable Philippine law. Our general retention guidelines are as follows:

Upon expiry of the applicable retention period, phi99 will securely delete or anonymise your personal data. Where anonymisation is used, the resulting data cannot be used to re-identify you and may be retained indefinitely for analytics purposes.

9. Data Security

phi99 implements a comprehensive set of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• SSL/TLS encryption: All data transmitted between your device and phi99 servers is encrypted using industry-standard SSL/TLS protocols, protecting your login credentials, payment details, and personal information in transit;
• Password hashing: Your phi99 account password is stored as a one-way cryptographic hash using bcrypt or equivalent. phi99 staff cannot view your actual password, and even a security breach of the password database would not expose readable passwords;
• Access controls: Access to personal data within phi99's systems is strictly limited on a need-to-know basis. Administrative access requires multi-factor authentication and is logged for audit purposes;
• Intrusion detection and monitoring: phi99 operates continuous monitoring of its systems for anomalous activity, potential intrusions, and policy violations;
• Physical security: phi99's server infrastructure is hosted in ISO 27001-certified data centres with appropriate physical access controls, environmental protections, and redundancy measures;
• Staff training: All phi99 personnel with access to personal data undergo regular data protection and security training.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phi99 will notify the National Privacy Commission (NPC) and, where required, affected players within the timeframes prescribed by Philippine data protection law.

10. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to the personal data phi99 holds about you:

Right to Be Informed

You have the right to be informed that your personal data is being or will be processed, including the purposes and scope of processing — which is the primary function of this Privacy Policy.

Right to Access

You have the right to request a copy of the personal data phi99 holds about you, as well as information about the sources, recipients, purposes, and processing methods associated with that data.

Right to Rectification

You have the right to request correction of any inaccurate, incomplete, or outdated personal data phi99 holds about you. You can update many details directly through your phi99 account settings; for data that cannot be self-corrected (such as verified identity documents), please contact phi99 support.

Right to Erasure or Blocking

You have the right to request the deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, where consent has been withdrawn, or where processing is otherwise unlawful. Note that phi99 may be legally required to retain certain data (such as transaction records) for prescribed periods even after an erasure request, in which case phi99 will explain the applicable retention obligation.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest where your personal situation provides grounds for doing so.

Right to Data Portability

You have the right to receive a structured, commonly used, machine-readable copy of the personal data you have provided to phi99, to the extent that processing is carried out by automated means.

Right to Lodge a Complaint

If you believe that phi99 has processed your personal data in a manner that violates your rights or applicable law, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act.

To exercise any of the above rights, please contact phi99's Data Protection Officer using the contact details in Section 14. phi99 will respond to verified data subject requests within thirty (30) days of receipt.

11. Minors & Age Policy

If phi99 becomes aware that personal data has been collected from an individual who is under 21 years of age, that account will be immediately closed, all personal data associated with the account will be deleted except where retention is required by law, and any deposited funds will be returned to the originating payment method to the extent practicable.

If you are a parent or guardian and believe your child has provided personal data to phi99 without your knowledge, please contact phi99's Data Protection Officer immediately using the contact details in Section 14, and phi99 will take prompt remedial action.

12. Cross-Border Data Transfers

Some of the third-party service providers phi99 uses — including game providers and technology infrastructure partners — may process or store data on servers located outside the Philippines. Where such cross-border transfers occur, phi99 takes steps to ensure that the receiving entity implements appropriate safeguards equivalent to those required under Philippine data protection law, including contractual data processing agreements that impose obligations on the recipient consistent with the requirements of the National Privacy Commission.

phi99 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing the safeguards described above. By using the phi99 platform, you acknowledge that your personal data may be transferred internationally as described in this section.

13. Changes to This Privacy Policy

phi99 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or operational requirements. When we make material changes to this policy, we will notify registered phi99 players by email or SMS to the contact details on file, and will update the "Effective Date" at the top of this page.

Your continued use of the phi99 platform after the updated Effective Date constitutes your acknowledgement of and, where required by law, consent to the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how phi99 protects your personal data.

14. Contact Us & Data Protection Officer

phi99 has appointed a Data Protection Officer (DPO) who is responsible for overseeing this Privacy Policy, managing data subject rights requests, and acting as phi99's primary point of contact with the National Privacy Commission.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or wish to report a privacy concern or suspected data breach, please contact us through the following channels:

If you are not satisfied with phi99's response to a data subject rights request or privacy complaint, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines, which can be reached through the NPC's official government channels.