9phl Privacy Policy
Your Data. Your Rights. Our Responsibility.

This Privacy Policy applies to 9phl ("9phl," "we," "us," or "our"), the operator of the online casino and sports betting platform accessible at 9phl.org. 9phl operates as a PAGCOR (Philippine Amusement and Gaming Corporation)-regulated online gambling platform serving Filipino players across the Philippines, including users in Metro Manila, Cebu City, Davao, Quezon City, and all other regions.

9phl is the data controller for the personal information collected through this platform. As a Philippine-facing online gaming operator, 9phl is subject to the Data Privacy Act of 2012 (Republic Act No. 10173, or "DPA"), its Implementing Rules and Regulations, and the standards set by the National Privacy Commission (NPC) of the Philippines. We take these obligations seriously and design our data handling practices around full compliance with Philippine law.

9phl collects personal data only where it is necessary to provide our regulated gaming services, meet our legal obligations, or improve the player experience. The categories of data we collect include:

9phl does not knowingly collect sensitive personal information beyond what is required for identity verification and AML compliance. We do not collect biometric data, health information, or political or religious beliefs. Where government-issued ID documents are submitted for KYC, these are stored in encrypted form and accessed only by authorized compliance personnel.

9phl processes personal data for the following purposes:

• Account Registration and Management: To create and maintain your 9phl player account, verify your identity, and provide you with access to the platform's games and features.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, Visa, and Mastercard in Philippine Peso, and to maintain accurate financial records of all transactions.
• Regulatory Compliance: To comply with PAGCOR licensing conditions, Anti-Money Laundering (AMLA) requirements, and the Data Privacy Act of 2012. This includes KYC verification, transaction monitoring, and reporting obligations.
• Security and Fraud Prevention: To protect your account, detect unauthorized access, prevent fraudulent transactions, and investigate security incidents affecting the 9phl platform.
• Responsible Gaming: To administer deposit limits, self-exclusion requests, session time controls, and cooling-off periods as part of 9phl's PAGCOR-mandated responsible gaming obligations.
• Customer Support: To respond to your inquiries, resolve disputes, and provide assistance through live chat and email support.
• Platform Improvement: To analyze aggregate usage patterns, improve game offerings, and optimize the 9phl mobile browser experience for Philippine users.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided consent and only through channels you have opted into.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, 9phl processes personal data on the following lawful bases:

• Contractual Necessity: Processing required to fulfill our obligations under the player account agreement — including account management, payment processing, and game service delivery.
• Legal Obligation: Processing required to comply with PAGCOR regulations, AMLA requirements, NPC directives, and applicable Philippine law.
• Legitimate Interest: Processing for fraud detection, platform security, and aggregate analytics — where such processing does not override your fundamental privacy rights.
• Consent: Processing for optional marketing communications and non-essential analytics features — where you have provided clear, informed, and freely given consent. Consent may be withdrawn at any time from your account settings.

9phl does not sell, trade, or rent your personal data to third parties. Data is shared only in the following limited and controlled circumstances:

• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine regulatory bodies where disclosure is legally required.
• Payment Service Providers: GCash (Mynt), PayMaya (Voyager Innovations), BancNet, InstaPay, and card networks (Visa, Mastercard) — strictly for processing your deposits and withdrawals.
• KYC and Identity Verification Providers: Third-party services used for identity document verification — operating under data processing agreements that bind them to equivalent data protection standards.
• Game Software Providers: The developers whose game titles appear on 9phl may receive anonymized session and performance data for game quality auditing purposes. No personally identifiable player data is shared with game providers.
• Law Enforcement and Courts: Where 9phl is legally compelled to disclose data by a valid court order, law enforcement request, or other binding legal process under Philippine law.

9phl uses cookies and similar technologies on our platform for the following purposes:

• Strictly Necessary Cookies: Required for the platform to function — including session authentication, security tokens, and language preferences. These cannot be disabled without affecting platform functionality.
• Functional Cookies: Store your preferences such as game lobby filters, responsible gaming settings, and last-visited sections to improve your experience on repeat visits.
• Analytics Cookies: Used in aggregate, anonymized form to understand how Filipino players use the platform — which game categories are most visited, which pages load slowly on Philippine mobile networks, and where the user journey can be improved.
• Security Cookies: Support fraud detection and security monitoring functions, including session integrity verification and bot detection.

You can manage cookie preferences through your browser settings. Most modern browsers (Chrome, Safari, Firefox) allow you to view, delete, and block cookies. Note that disabling strictly necessary cookies will impair your ability to log in and use the 9phl platform. 9phl does not use third-party advertising cookies or cross-site tracking cookies.

9phl retains personal data for as long as necessary to fulfill the purposes described in this Policy and to comply with legal retention obligations under Philippine law:

• Active Account Data: Retained for the lifetime of your active 9phl account plus a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AMLA obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years under AMLA (Republic Act 9160 as amended) reporting requirements.
• KYC Documents: Retained for the duration of the account relationship plus five (5) years post-closure. Stored in encrypted format with restricted access.
• Support Communications: Retained for three (3) years from the date of the interaction, or longer if related to an unresolved dispute or regulatory inquiry.
• Marketing Consent Records: Retained for the duration of the consent plus three (3) years, to demonstrate consent was properly obtained.
• Technical/Log Data: Retained for twelve (12) months for security monitoring purposes, then deleted or anonymized.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with an identified individual.

9phl implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption on all data transmissions between your device and 9phl servers
• Enterprise-grade firewall protection and intrusion detection systems on all server infrastructure
• Role-based access controls limiting data access to authorized personnel with a verified business need
• Encrypted storage of sensitive data including KYC documents and financial account references
• Regular security audits and vulnerability assessments of the platform
• Multi-factor authentication requirements for administrative access to systems holding personal data
• Employee training on data privacy obligations under the Data Privacy Act of 2012

In the event of a personal data breach that is likely to result in harm to 9phl players, we will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected individuals without undue delay, consistent with our obligations under the DPA and its Implementing Rules.

Under the Data Privacy Act of 2012 and applicable NPC issuances, you have the following rights with respect to your personal data held by 9phl:

The 9phl platform is strictly prohibited for individuals under the age of 21, as required by PAGCOR for all licensed online gambling operators in the Philippines. 9phl does not knowingly collect personal data from individuals below the age of 21.

During the registration process, 9phl requires age confirmation and, for accounts exceeding PAGCOR-mandated thresholds, identity document verification to confirm date of birth. Where 9phl discovers that a registered account belongs to a person under 21, the account will be immediately suspended, all real-money gaming activity will be reversed where technically possible, and any funds held will be handled in accordance with PAGCOR's directives on underage gambling incidents.

9phl may update this Privacy Policy from time to time to reflect changes in applicable Philippine law, PAGCOR regulatory requirements, our data processing practices, or the services we offer. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Policy
• Display a prominent notice on the 9phl platform for a minimum of 30 days following the update
• Send a notification to your registered email address or Philippine mobile number for changes that materially affect your rights or the way we process your data

Continued use of the 9phl platform after a Privacy Policy update constitutes acknowledgment of the revised Policy. If you do not agree with a material change, you may close your account by contacting 9phl support. We will process any closure request in accordance with our account termination and data retention procedures.

If you have any questions, concerns, or requests regarding this Privacy Policy or how 9phl handles your personal data, please contact our Data Privacy Officer through the following channels. All communications regarding personal data are treated as confidential.