999if Privacy Policy

This Privacy Policy ("Policy") describes how 999if ("999if," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of individuals ("you," "your," or "Player") who access or use the 999if website at https://999if.app and all associated services, games, and features (collectively, the "Platform").

999if is committed to protecting the privacy and personal data of all its players, particularly those based in the Philippines. This Policy is drafted in compliance with Republic Act No. 10173, otherwise known as the Philippine Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC").

By registering an account on the 999if Platform or by continuing to use our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of the Philippine Data Privacy Act of 2012, 999if acts as the Personal Information Controller in respect of the personal data it collects and processes in connection with the operation of the Platform.

As Personal Information Controller, 999if determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with the DPA and all applicable data privacy regulations in the Philippines.

If you have any questions, concerns, or requests relating to the processing of your personal data by 999if, you may contact our Data Protection Officer at the details provided in Section 16 of this Policy.

999if collects the following categories of personal data from players and prospective players:

999if collects personal data through the following means:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated Technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, log files, and similar tracking technologies. See Section 8 for full details on our cookie practices.
• Third-Party Sources: Identity and fraud-screening data received from KYC verification providers, payment processors (such as GCash, PayMaya, BPI, BDO), and fraud prevention services, where you have authorized such sharing or where we are required to verify your identity by law.
• Regulatory Sources: Information received from PAGCOR or other competent Philippine authorities in connection with our regulatory compliance obligations, including self-exclusion register data.

999if does not collect personal data from third-party social media platforms or data brokers for marketing purposes.

999if processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your 999if player account, including processing your registration, verifying your identity, and managing your account settings.
• Service Delivery: To provide you with access to the games, features, and services available on the 999if Platform, including processing deposits, withdrawals, and bonus credits.
• Regulatory Compliance: To comply with our obligations under Philippine law, including anti-money laundering (AML) requirements under Republic Act No. 9160 (as amended), PAGCOR licensing conditions, and the Data Privacy Act of 2012.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, money laundering, and other illegal activities on the Platform.
• Responsible Gaming: To monitor player activity for signs of problem gambling, enforce deposit limits and self-exclusion requests, and comply with responsible gaming obligations.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Service Improvement: To analyze usage patterns, conduct internal research, and improve the functionality, security, and user experience of the 999if Platform.
• Communications: To send you transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts) and, where you have opted in, promotional communications about 999if offers and new games.

Under the Philippine Data Privacy Act of 2012, 999if processes your personal data on the following legal bases:

• Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose, such as receiving promotional communications or the processing of sensitive personal information for KYC purposes.
• Contractual Necessity: Where processing is necessary for the performance of the contract between you and 999if — specifically, the Terms & Conditions governing your use of the Platform. This includes processing required to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Where processing is required for 999if to comply with a legal obligation under Philippine law, including AML reporting obligations, PAGCOR regulatory requirements, and tax reporting obligations.
• Legitimate Interests: Where processing is necessary for the legitimate interests of 999if, provided that such interests are not overridden by your rights and interests. This includes fraud prevention, platform security, and service improvement activities.

Where 999if relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

999if does not sell, rent, or trade your personal data to any third party. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, InstaPay, PESONet, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• KYC and Identity Verification Providers: Third-party identity verification services engaged by 999if to verify your identity and age as required by Philippine law and PAGCOR regulations.
• Fraud Prevention Services: Third-party fraud detection and prevention providers who assist 999if in identifying and preventing fraudulent activity on the Platform.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and other competent Philippine government authorities, where disclosure is required by law or regulatory obligation.
• IT and Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers who process data on behalf of 999if under strict data processing agreements that require them to maintain the confidentiality and security of your data.
• Legal and Professional Advisors: Lawyers, auditors, and other professional advisors engaged by 999if, subject to professional confidentiality obligations.

The 999if Platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and collect analytical data about Platform usage. A cookie is a small text file placed on your device by a website when you visit it.

999if uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as user authentication, session management, and security. These cookies cannot be disabled.
• Functional Cookies: These cookies remember your preferences (such as language settings and game display options) to provide a more personalized experience. You may disable these, but doing so may affect Platform functionality.
• Analytical Cookies: These cookies collect anonymized data about how players use the Platform — such as which games are most popular and how long sessions last — to help 999if improve its services. This data is aggregated and does not identify individual players.
• Security Cookies: These cookies assist in fraud detection and prevention by identifying unusual patterns of behavior that may indicate unauthorized account access or other security threats.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may impair the functionality of the 999if Platform, including your ability to log in and play games.

999if retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations.

The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with 999if, and for a minimum of five (5) years following account closure, in compliance with PAGCOR licensing requirements and AML record-keeping obligations under Republic Act No. 9160.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine AML regulations and BIR record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, for dispute resolution and service improvement purposes.
• Technical and Usage Data: Retained for up to two (2) years from collection, after which it is anonymized or deleted.

Upon expiry of the applicable retention period, 999if will securely delete or anonymize your personal data in accordance with its data disposal procedures.

999if implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the 999if Platform is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Data Encryption at Rest: Sensitive personal and financial data stored in 999if systems is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized 999if personnel on a strict need-to-know basis. All access is logged and regularly audited.
• Two-Factor Authentication: 999if supports and encourages the use of two-factor authentication (2FA) for player accounts to provide an additional layer of security.
• Regular Security Audits: 999if conducts regular internal and third-party security audits and penetration testing to identify and remediate vulnerabilities in its systems.
• Incident Response: 999if maintains a documented data breach response plan. In the event of a personal data breach, 999if will notify affected players and the National Privacy Commission within 72 hours of becoming aware of the breach, where required by law.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 999if:

• Right to Be Informed: You have the right to be informed of how your personal data is being collected and processed. This Privacy Policy fulfills that obligation.
• Right to Access: You have the right to request a copy of the personal data that 999if holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data that 999if holds about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 999if's legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe that 999if has violated your data privacy rights.

To exercise any of the above rights, please contact our Data Protection Officer using the contact details in Section 16. 999if will respond to all data subject requests within fifteen (15) days of receipt, as required by the DPA.

The 999if Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming law. 999if does not knowingly collect personal data from individuals under the age of 21.

If 999if becomes aware that it has inadvertently collected personal data from an individual under 21 years of age, it will immediately suspend the relevant account, delete the personal data in question, and take appropriate steps to prevent recurrence.

If you are a parent or guardian and believe that your child has registered an account on the 999if Platform, please contact us immediately at the details provided in Section 16 so that we can take prompt action.

In the course of operating the 999if Platform, your personal data may be transferred to and processed in countries other than the Philippines — for example, where 999if's cloud infrastructure providers or game software suppliers are located.

Where such cross-border transfers occur, 999if ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under the Philippine Data Privacy Act of 2012. These safeguards may include:

• Contractual clauses in agreements with third-party processors that require them to maintain data protection standards equivalent to those required under Philippine law.
• Transfers to countries that have been assessed as providing an adequate level of data protection.
• Other legally recognized transfer mechanisms as approved by the National Privacy Commission.

By using the 999if Platform, you consent to the transfer of your personal data to other countries as described in this section, subject to the safeguards described above.

The 999if Platform may contain links to third-party websites or services, such as payment provider portals. This Privacy Policy applies solely to the 999if Platform and does not extend to any third-party websites or services that you may access via links on the Platform.

999if is not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party websites you visit before providing them with your personal information.

999if reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

When material changes are made to this Policy, 999if will notify registered players by email or by posting a prominent notice on the Platform prior to the changes taking effect. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how 999if is protecting your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 999if, please contact our Data Protection Officer:

Data Protection Officer — 999if
Email: privacy@999if.app

For general support inquiries, you may also reach our customer support team at: support@999if.app

Our support team is available 24 hours a day, 7 days a week. We aim to acknowledge all privacy-related requests within 48 hours and to resolve them within the 15-day period prescribed by the Philippine Data Privacy Act.

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines through their official channels.