9ph20 Privacy Policy

1 Introduction

9ph20 is an online gaming platform serving Filipino players with a wide range of entertainment including live casino games, slots, sports betting, sabong, bingo, color prediction, and specialty games. We understand that your personal data is valuable and that you place trust in us when you share it. That trust is something we take seriously.

This Privacy Policy ("Policy") describes in detail how 9ph20 collects, uses, stores, shares, and protects the personal information of players and visitors to the Platform located at https://9ph20.net. It also outlines the rights available to you under applicable Philippine data protection law and how you may exercise them.

This Policy applies to all personal data collected through:

• The 9ph20 website and any related mobile interface;
• The account registration and verification process;
• Ongoing gameplay, transaction history, and Platform interactions;
• Communications between you and our customer support team;
• Promotional activities, surveys, and bonus programs offered by 9ph20.

2 Data Controller

9ph20 acts as the Data Controller in respect of the personal data of all registered players and Platform visitors. As Data Controller, 9ph20 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

We have designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection legislation. You may contact our DPO directly at [email protected] for any privacy-related concerns, complaints, or requests.

3 Data We Collect

9ph20 collects the following categories of personal data. We collect only what is necessary for the stated purposes.

4 How We Collect Data

9ph20 collects personal data through the following methods:

4.1 Direct Collection

Information you provide directly to us when you register for an account, complete identity verification (KYC), make a deposit or withdrawal, contact customer support, or participate in promotions and surveys.

4.2 Automated Collection

Technical and usage data collected automatically as you interact with the Platform, including through cookies, web beacons, server logs, and similar technologies. See Section 8 for details on our cookie practices.

4.3 Third-Party Sources

In certain cases, 9ph20 may receive personal data about you from third-party sources, including:

• Payment service providers (e.g., GCash, PayMaya, BPI, BDO, Metrobank) to verify transaction authenticity;
• Identity verification and KYC service providers used to authenticate government-issued IDs;
• Fraud prevention and AML screening services;
• Regulatory authorities, where legally required or permitted.

5 How We Use Your Data

9ph20 uses your personal data for the following purposes:

• Account Management: Creating and maintaining your 9ph20 player account, authenticating your identity on each login, and managing your account settings;
• Service Delivery: Processing deposits and withdrawals, crediting winnings, applying bonuses, and providing access to all games and features on the Platform;
• Legal & Regulatory Compliance: Meeting our obligations under the Data Privacy Act of 2012, PAGCOR regulations, Anti-Money Laundering Act (AMLA), and other applicable Philippine laws;
• Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, money laundering, and other prohibited conduct;
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate interventions or tools;
• Customer Support: Responding to your inquiries, resolving disputes, and maintaining records of our communications;
• Platform Improvement: Analyzing aggregated usage data to improve game performance, user experience, and Platform features;
• Marketing Communications: Sending you promotional offers, bonus notifications, and updates about 9ph20 — but only where you have provided your consent to receive such communications.

6 Legal Basis for Processing

Under the Data Privacy Act of 2012, 9ph20 relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing required to perform the contract between you and 9ph20 — i.e., providing the gaming services you registered for;
• Legal Obligation: Processing necessary for compliance with applicable Philippine laws and regulatory requirements, including KYC, AML, and PAGCOR obligations;
• Legitimate Interests: Processing carried out for 9ph20's legitimate interests, such as fraud prevention, Platform security, and service improvement, where those interests are not overridden by your rights;
• Consent: Where required, processing based on your freely given, specific, informed, and unambiguous consent — particularly for direct marketing communications. You may withdraw consent at any time without affecting prior processing.

7 Sharing Your Data

9ph20 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data only in the following limited circumstances:

7.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf, strictly under written data processing agreements that require them to maintain appropriate security standards and to use data only for the specified purpose. These providers include payment processors, KYC verification platforms, cloud infrastructure providers, and customer support software vendors.

7.2 Regulatory & Legal Authorities

9ph20 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or courts of competent jurisdiction where disclosure is required by law, regulatory order, or valid legal process.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of 9ph20's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to how your data is handled as a result.

7.4 With Your Consent

9ph20 may share your data with third parties in circumstances not described above, where you have provided your explicit prior consent.

8 Cookies & Tracking Technologies

9ph20 uses cookies and similar tracking technologies to enhance your experience on the Platform. A cookie is a small text file placed on your device when you visit a website. We use the following types:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. You cannot opt out of these without ceasing to use the Platform.
• Functional Cookies: Remember your preferences such as language settings, display options, and logged-in state to provide a personalized experience.
• Analytics Cookies: Used to collect aggregated, anonymized data about how players use the Platform — including pages visited, session duration, and navigation paths — to help us improve the service.
• Security Cookies: Help detect and prevent fraudulent activity, unauthorized account access, and other security threats.

You can manage your cookie preferences through your browser settings. However, disabling strictly necessary cookies may prevent you from accessing certain features of the 9ph20 Platform.

9 Data Security

9ph20 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 9ph20 servers;
• Encryption at rest for sensitive stored data, including financial and identity information;
• Multi-factor authentication (MFA) options for player accounts;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security audits, penetration testing, and vulnerability assessments of Platform infrastructure;
• Documented incident response procedures to manage and notify affected players of any personal data breach in compliance with NPC notification requirements.

10 Data Retention

9ph20 retains your personal data for no longer than is necessary to fulfill the purposes for which it was collected, subject to the following retention guidelines:

• Account Data: Retained for the duration of your active account relationship with 9ph20, plus a minimum of five (5) years after account closure, as required by PAGCOR regulations and AML compliance obligations;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in line with the Anti-Money Laundering Act (AMLA) and AMLC regulations;
• KYC Documents: Retained for the duration of your account plus five (5) years post-closure, or longer if required by law;
• Support Communications: Retained for a period of three (3) years from the date of the last communication, for dispute resolution and quality assurance purposes;
• Marketing Preferences: Retained until you withdraw your consent or request erasure, whichever is earlier.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized so that it can no longer be associated with you as an identifiable individual.

11 Your Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 9ph20:

• Right to Be Informed: The right to know that your personal data is being collected and processed, and the details of such processing — which is what this Policy provides;
• Right to Access: The right to obtain a copy of the personal data we hold about you, and information about how it is being processed;
• Right to Correction: The right to request that inaccurate, incomplete, or outdated personal data held by 9ph20 be corrected;
• Right to Erasure (Right to be Forgotten): The right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Object: The right to object to the processing of your personal data, particularly for direct marketing purposes;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format and to have it transmitted to another controller where technically feasible;
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to verified requests within fifteen (15) business days in accordance with NPC guidelines. We may require you to verify your identity before processing your request.

12 Children & Minors

The 9ph20 Platform is strictly intended for adults aged 21 years and older, in compliance with Philippine gaming regulations. We do not knowingly collect personal data from any person under the age of 21.

If you are a parent or guardian and believe that a minor has registered for or accessed the 9ph20 Platform, please contact us immediately at [email protected]. Upon verification, we will take prompt action to close the account and delete all associated personal data.

13 Cross-Border Data Transfers

Where 9ph20 transfers your personal data to service providers or partners located outside the Philippines, we ensure that such transfers are carried out in compliance with the Data Privacy Act of 2012. Specifically, we implement one or more of the following safeguards:

• Standard contractual clauses that bind the receiving party to data protection standards equivalent to those applicable in the Philippines;
• Transfers only to countries or organizations that have been assessed as providing an adequate level of data protection;
• Your explicit consent to the transfer, where required by law.

If you would like further information about the specific safeguards applied to any particular cross-border data transfer, please contact our Data Protection Officer at [email protected].

14 Policy Updates

9ph20 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory guidance. The date of the most recent revision is displayed at the top of this page.

When we make material changes to this Policy, we will notify you by posting a prominent notice on the Platform and, where appropriate, by sending a notification to your registered mobile number or email address. Your continued use of the 9ph20 Platform following the publication of any revised Privacy Policy constitutes your acceptance of the changes.

We encourage you to review this Policy periodically to stay informed about how we are protecting your personal data.

15 Contact & Data Protection Officer

If you have any questions, concerns, or complaints about this Privacy Policy or 9ph20's personal data processing practices, or if you wish to exercise any of your data subject rights, please contact our Data Protection Officer:

• Email: [email protected]
• Response Time: Within 15 business days of receiving a verified request
• Support Hours: 24 hours a day, 7 days a week, Philippine Standard Time (PST, UTC+8)

If you are not satisfied with our response, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines, the independent regulatory authority responsible for administering and enforcing the Data Privacy Act of 2012.