ph9 Privacy Policy

ph9 takes the privacy of its players seriously. We understand that when you register for a ph9 account and play on our platform, you are trusting us with personal information — including identity documents, financial data, and details about your gaming activity. That trust is something ph9 does not take lightly.

This Privacy Policy is designed to be straightforward and transparent. It explains in plain language what personal data ph9 collects from you, why we collect it, how we use it, who we share it with, how long we keep it, and what rights you have in relation to your data under Philippine law. If you have questions that are not answered here, you are welcome to contact ph9's data privacy team directly through the contact details in Section 13.

This Privacy Policy applies to all data processing activities carried out by ph9 in connection with your use of the ph9 platform at ph9.lat, including account registration, gameplay, payment processing, customer support interactions, and marketing communications (where you have consented to receive them).

For the purposes of the Philippine Data Privacy Act of 2012, ph9 — operating through the ph9.lat platform — acts as the Personal Information Controller (PIC) in respect of the personal data of its registered players and platform visitors.

As Personal Information Controller, ph9 determines the purposes and means by which your personal data is processed. Where ph9 engages third-party service providers to process personal data on its behalf — for example, payment processors or identity verification providers — those providers act as Personal Information Processors (PIPs) under the DPA and are bound by data processing agreements that require them to process your data only on ph9's instructions and in accordance with this Privacy Policy.

ph9 collects the following categories of personal data in the course of providing the ph9 platform and associated services:

ph9 does not collect sensitive personal information as defined under the DPA (such as health information, political affiliations, or biometric data) unless strictly required for identity verification purposes, in which case it is collected with your explicit consent and processed only for that specified purpose.

ph9 uses the personal data we collect for the following specific purposes:

• Account registration and management: To create and maintain your ph9 account, authenticate your identity at login, and provide access to the platform's features;
• Identity and age verification (KYC): To confirm that you are at least 21 years of age and to verify your identity in accordance with PAGCOR-aligned requirements before processing withdrawals or granting full account access;
• Payment processing: To facilitate deposits through GCash, PayMaya, BDO, BPI, Metrobank, InstaPay, PESONet, and other supported payment channels, and to process your withdrawal requests to verified payment methods;
• Platform operation and game delivery: To provide the games, live casino streams, and other features available on ph9, record bet outcomes, calculate winnings, and credit Wallet balances;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other prohibited conduct on the ph9 platform;
• Regulatory compliance: To fulfill ph9's obligations under applicable Philippine law, including anti-money laundering (AML) and counter-terrorism financing (CTF) requirements, and to respond to lawful requests from regulatory authorities;
• Responsible gaming: To monitor gaming patterns, apply responsible gaming limits you have set, identify potential problem gambling behavior, and administer self-exclusion requests;
• Customer support: To respond to your enquiries, resolve complaints, and provide assistance through ph9's live chat and other support channels;
• Platform improvement: To analyze aggregated and anonymized usage data to improve ph9's platform performance, game library, and user experience;
• Communications: To send you transactional notifications related to your account activity, and — where you have explicitly opted in — promotional communications about ph9 offers and new games.

ph9 processes your personal data on the following legal bases as recognized under the Philippine Data Privacy Act of 2012:

• Contract performance: Processing necessary to fulfill ph9's obligations to you under the Terms and Conditions you accepted upon registration — including account management, payment processing, and game delivery;
• Legal obligation: Processing necessary for ph9 to comply with applicable Philippine law and regulatory requirements, including AML/CTF obligations, KYC requirements, and lawful regulatory requests;
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where ph9's legitimate interests in protecting the platform and improving the player experience are not overridden by your privacy interests;
• Consent: Processing for marketing communications, where you have explicitly opted in to receive such communications. Consent-based processing is voluntary and may be withdrawn at any time.

ph9 does not sell or rent your personal data to third parties. ph9 shares your personal data only in the following limited circumstances:

• Payment service providers: ph9 shares necessary financial data with GCash, PayMaya, BDO, BPI, Metrobank, and other payment channel partners solely for the purpose of processing your deposits and withdrawals. These providers operate under their own privacy policies and data protection obligations;
• Identity verification providers: KYC data, including identity documents, may be shared with third-party identity verification services engaged by ph9 to perform automated and manual ID verification on ph9's behalf;
• Game providers: Technical session data necessary to deliver games is shared with ph9's licensed game content providers (such as Pragmatic Play, PG Soft, Jili, and similar providers). Game providers receive the minimum data necessary for game delivery and do not receive your financial or full identity data;
• Regulatory and law enforcement authorities: ph9 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where required by law or where ph9 reasonably believes disclosure is necessary to comply with a legal obligation or protect the rights, property, or safety of ph9, its players, or the public;
• Professional advisers: ph9 may share data with its legal advisers, auditors, and other professional service providers on a strictly need-to-know basis and subject to confidentiality obligations.

ph9 uses cookies and similar tracking technologies on the ph9.lat platform to support platform functionality, maintain your session, analyze platform usage, and — where you have consented — deliver relevant communications.

The following categories of cookies are used on ph9:

• Strictly necessary cookies: Essential to the operation of the platform. These cookies enable core functions such as session authentication, account access, and game loading. They cannot be disabled without impairing your ability to use ph9;
• Functional cookies: Used to remember your preferences — such as your preferred language, display settings, and responsible gaming configurations — so that these are retained across sessions without requiring re-entry each time;
• Analytics cookies: Used by ph9 to collect anonymized and aggregated data about how players navigate and use the platform. This data is used to identify performance issues and improve the ph9 user experience. These cookies do not identify you personally;
• Security cookies: Used to support ph9's fraud detection and account security measures, including identifying unusual login patterns and potential account compromise events.

Most browsers allow you to control cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of the ph9 platform and your ability to access some features. ph9 does not use third-party advertising or behavioral targeting cookies.

ph9 implements technical and organizational security measures appropriate to the nature and sensitivity of the personal data it processes. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph9's servers;
• Encryption of sensitive data at rest in ph9's database systems;
• Role-based access controls limiting access to personal data to ph9 personnel who require it to perform their job functions;
• Regular security assessments and vulnerability reviews of ph9's platform infrastructure;
• Secure password hashing — ph9 never stores your password in plain text and ph9 staff cannot retrieve your password, only reset it;
• Multi-factor authentication options for player accounts, including SMS OTP verification for sensitive account actions such as withdrawal requests.

While ph9 takes its security obligations seriously, no online platform can guarantee absolute security against all possible threats. You are also responsible for maintaining the security of your own account credentials and for notifying ph9 immediately if you suspect unauthorized access to your account.

ph9 retains personal data for the periods set out below, or for longer periods where required by applicable Philippine law or regulation:

Upon expiry of the applicable retention period, ph9 will securely delete or irreversibly anonymize the relevant personal data, unless a longer retention period is required by a specific legal obligation that applies to ph9 at that time.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ph9. To exercise any of these rights, contact ph9's data privacy team at [email protected] with "Data Privacy Request" in your message. ph9 will respond within the timeframes required by the DPA.

ph9 enforces age restrictions through its KYC verification process, which requires submission of a valid, government-issued Philippine identification document confirming date of birth before full account access or withdrawal capability is granted. Any attempt by an individual under 21 to register for a ph9 account or circumvent age verification constitutes a breach of ph9's Terms and Conditions.

If you are a parent or guardian and believe that your child has registered for a ph9 account, please contact ph9 customer support immediately at [email protected]. ph9 will investigate and take appropriate action promptly.

ph9 may update this Privacy Policy from time to time to reflect changes in our data practices, operational updates, or amendments to applicable Philippine law or NPC guidance. When changes are made, ph9 will update the "Last Updated" date at the top of this document and publish the revised Policy on the ph9 platform.

For material changes — those that significantly affect how ph9 collects or uses your personal data — ph9 will notify registered players through on-platform notifications or by message to the contact details associated with your account. Where required by law, ph9 will seek your consent to the revised processing activities before they take effect.

Your continued use of the ph9 platform after any revised Privacy Policy has been published constitutes your acknowledgment of the updated policy. We encourage you to review this page periodically to stay informed about how ph9 protects your data.

If you have any questions about this Privacy Policy, wish to exercise your data privacy rights, or need to report a concern about how ph9 handles your personal data, you may contact ph9's Data Privacy Officer through the following channels:

• Email: [email protected] — please include "Data Privacy" in the subject line
• Live Chat: Available 24 hours a day, 7 days a week through the ph9 platform at ph9.lat

ph9 will acknowledge data privacy enquiries promptly and respond fully within the timeframes required by the Philippine Data Privacy Act and any relevant NPC guidance. If you are not satisfied with ph9's response to a data privacy complaint, you have the right to escalate your concern to the National Privacy Commission (NPC) of the Philippines.