09ph Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by 09ph through our website (09ph.cam), mobile-optimized platforms, customer support channels, and any other services we provide (collectively, the "Service"). This policy covers information collected directly from you, automatically through your use of our Service, and from third-party sources where legally permitted.

09ph acts as the data controller for all personal information collected through our Service. We determine the purposes and means of processing your personal data and are responsible for ensuring compliance with applicable data protection laws. Our registered business address and data protection officer contact information are available at the end of this policy.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, which contain additional provisions governing your use of the Service. Where conflicts arise between these documents, the terms most protective of your privacy shall prevail to the extent permitted by law.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a 09ph account, we collect the following personal information:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (passport, driver's license, or national ID numbers)
• Contact Information: Email address, mobile phone number, residential address, and postal code
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers
• Financial Information: Payment method details including e-wallet account information (GCash, Maya), bank account numbers, cryptocurrency wallet addresses, and transaction history
• Verification Documents: Copies of government-issued identification, proof of address documents, and source of funds documentation required for KYC/AML compliance
• Communication Records: Content of your communications with our customer support team via live chat, email, or other channels
• Preferences: Communication preferences, favorite games, language settings, and responsible gaming limits

2.2 Information Collected Automatically

When you access and use the 09ph Service, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, and unique device identifiers
• Connection Information: IP address, internet service provider, connection type (mobile data or WiFi), and approximate geographic location derived from IP address
• Usage Data: Pages visited, features used, games played, time spent on each page, click patterns, and navigation paths through our Service
• Gaming Activity: Bets placed, games played, win/loss records, bonus usage, and gameplay patterns
• Transaction History: Deposits, withdrawals, balances, payment methods used, and transaction timestamps
• Cookies and Similar Technologies: Data collected through cookies, web beacons, and similar tracking technologies as detailed in Section 8

2.3 Information from Third-Party Sources

We may receive information about you from third-party sources including:

• Payment Processors: Transaction verification data from GCash, Maya, banks, and other payment service providers
• Identity Verification Services: Verification results from third-party KYC/AML service providers
• Game Providers: Gameplay data and statistics from third-party game developers integrated into our platform
• Fraud Prevention Services: Risk assessment data from fraud detection and prevention services
• Public Databases: Information from publicly available sources to verify your identity and comply with AML regulations

3. How We Use Your Information

09ph processes your personal information for the following purposes, each grounded in a valid legal basis under Philippine data protection law:

3.1 Service Provision (Contractual Necessity)

• Creating and managing your player account
• Processing deposits, withdrawals, and other financial transactions
• Enabling gameplay and access to casino games, sports betting, and other services
• Calculating and crediting winnings to your account
• Providing customer support and responding to inquiries
• Communicating important account-related information and service updates

3.2 Legal and Regulatory Compliance (Legal Obligation)

• Verifying your identity and age to comply with Philippine gambling laws requiring 21+ age restriction
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks as mandated by PAGCOR and Philippine law
• Preventing fraud, money laundering, terrorism financing, and other illegal activities
• Complying with tax reporting obligations under Philippine tax law
• Responding to lawful requests from government authorities, law enforcement, and regulators
• Maintaining records required by PAGCOR and other regulatory bodies
• Implementing responsible gaming measures including self-exclusion programs

3.3 Security and Fraud Prevention (Legitimate Interest)

• Detecting and preventing fraudulent activities, collusion, and bonus abuse
• Monitoring for suspicious betting patterns and account activity
• Protecting against unauthorized access to your account
• Investigating disputes and resolving customer complaints
• Enforcing our Terms & Conditions and other policies

3.4 Service Improvement (Legitimate Interest)

• Analyzing user behavior to improve website functionality and user experience
• Conducting research and analytics to enhance game offerings
• Testing new features and optimizing platform performance
• Personalizing content and game recommendations based on your preferences

3.5 Marketing and Promotions (Consent)

• Sending promotional offers, bonuses, and special deals via email and SMS
• Providing personalized marketing based on your gaming preferences
• Inviting you to participate in tournaments and special events
• Conducting surveys to gather feedback on our services

Note: You can opt out of marketing communications at any time by adjusting your account preferences or clicking unsubscribe links in promotional emails. Opting out will not affect transactional communications necessary for service provision.

4. Legal Bases for Processing

Under the Philippine Data Privacy Act, we must have a lawful basis to process your personal information. 09ph relies on the following legal bases:

Legal Basis	Description	Examples
Consent	You have given clear, specific consent for us to process your personal data for a specific purpose	Marketing emails, cookies for analytics, personalized promotions
Contract Performance	Processing is necessary to fulfill our contractual obligations to you or to take steps at your request before entering a contract	Account registration, processing transactions, providing games
Legal Obligation	Processing is necessary for compliance with Philippine law or PAGCOR regulations	Age verification, KYC/AML checks, tax reporting, responding to court orders
Legitimate Interest	Processing is necessary for our legitimate business interests or those of third parties, provided such interests do not override your fundamental rights	Fraud prevention, security measures, service improvement, analytics

5. How We Share Your Information

09ph does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your information only in the following limited circumstances:

5.1 Service Providers and Business Partners

We share personal information with trusted third-party service providers who assist us in operating the Service, including:

• Payment Processors: GCash, Maya, banks, and other payment service providers to process deposits and withdrawals
• Game Providers: Pragmatic Play, JILI, Evolution Gaming, NetEnt, and other licensed game developers to facilitate gameplay
• Identity Verification Services: KYC/AML verification providers to confirm your identity and comply with regulatory requirements
• Cloud Service Providers: Hosting and data storage services to maintain our platform infrastructure
• Customer Support Tools: Live chat and ticketing systems to provide customer assistance
• Marketing Services: Email service providers and analytics platforms (only if you've consented to marketing)

All service providers are contractually obligated to protect your information, use it only for specified purposes, and maintain confidentiality in accordance with data protection laws.

5.2 Regulatory Authorities and Law Enforcement

We may disclose your information to government authorities, regulators, and law enforcement when:

• Required by Philippine law, court order, or legal process
• Requested by PAGCOR or other gaming regulators in connection with licensing compliance
• Necessary to report suspected money laundering or terrorism financing to the Anti-Money Laundering Council (AMLC)
• Required to cooperate with criminal investigations or legal proceedings
• Necessary to comply with tax reporting obligations to the Bureau of Internal Revenue (BIR)

5.3 Business Transfers

If 09ph undergoes a merger, acquisition, bankruptcy, dissolution, reorganization, or similar transaction or proceeding involving the transfer of business assets, your personal information may be transferred to the successor entity. We will notify you via email and prominent website notice before your information becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information with third parties when you have given explicit consent for such sharing, such as when you participate in co-branded promotions or third-party loyalty programs.

6. Data Security Measures

09ph implements comprehensive technical, organizational, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

6.1 Technical Safeguards

• Encryption: All data transmissions between your device and our servers use 256-bit SSL/TLS encryption. Passwords are hashed using industry-standard bcrypt algorithms before storage
• Firewalls and Intrusion Detection: Multi-layered firewall protection and real-time intrusion detection systems monitor for unauthorized access attempts
• Access Controls: Role-based access controls ensure employees can only access information necessary for their job functions
• Secure Infrastructure: Servers are hosted in secure data centers with physical security measures and redundant backups
• Regular Security Audits: Independent third-party security audits and penetration testing to identify and address vulnerabilities

6.2 Organizational Measures

• Mandatory data protection training for all employees handling personal information
• Strict confidentiality agreements binding all employees and contractors
• Incident response procedures to quickly address any data breaches
• Regular review and updating of security policies and procedures

6.3 Your Security Responsibilities

While we implement robust security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and never share it with anyone
• Enable two-factor authentication if available
• Log out after each session, especially on shared devices
• Keep your contact information current so we can reach you about security concerns
• Report suspected unauthorized access immediately
• Beware of phishing attempts—09ph will never ask for your password via email

Data Breach Notification: In the event of a data breach that compromises your personal information, we will notify you and the National Privacy Commission within 72 hours of becoming aware of the breach, as required by the Philippine Data Privacy Act.

7. Data Retention

09ph retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law:

7.1 Active Accounts

While your account remains active, we retain all personal information necessary to provide the Service, including your profile information, transaction history, and gaming records.

7.2 Closed Accounts

After you close your account, we retain certain information to comply with legal obligations:

• Financial Records: Transaction history, deposits, withdrawals, and tax-related information retained for 10 years as required by Philippine tax and AML laws
• Identity Verification Documents: Copies of government IDs and verification documents retained for 5 years to comply with PAGCOR record-keeping requirements
• Dispute Records: Records related to disputes, complaints, or investigations retained until resolution plus applicable statute of limitations period
• Self-Exclusion Data: Information related to responsible gaming restrictions retained for the duration of the exclusion period plus 1 year

7.3 Marketing Data

If you opt out of marketing communications, we will retain a record of your opt-out preference indefinitely to ensure we do not send you unwanted communications.

7.4 Automatic Deletion

Personal information not subject to legal retention requirements is automatically deleted according to our data retention schedule. You may request early deletion of certain data subject to the limitations described in Section 9.

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website. They help us recognize your browser, remember your preferences, and improve your user experience. 09ph uses cookies and similar technologies including web beacons, pixels, and local storage.

8.2 Types of Cookies We Use

• Essential Cookies: Necessary for the Service to function properly. These enable basic features like account login, secure transactions, and navigation. Essential cookies cannot be disabled without significantly impairing functionality.
• Performance Cookies: Collect anonymous information about how visitors use our website, including pages visited, time spent, and error messages encountered. This helps us improve website performance.
• Functionality Cookies: Remember your preferences such as language settings, favorite games, and display options to provide a more personalized experience.
• Marketing Cookies: Track your browsing activity to display relevant advertisements and measure campaign effectiveness. These require your consent and can be disabled through your browser settings.

8.3 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. However, disabling essential cookies may prevent you from using certain features of the Service. Instructions for managing cookies in popular browsers are available through your browser's help menu.

9. Your Privacy Rights

Under the Philippine Data Privacy Act, you have the following rights regarding your personal information:

9.1 Right to Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of your personal information in our possession. You can access most of your information through your account dashboard. For additional data, contact our Data Protection Officer.

9.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal information. You can update most information through your account settings. For information you cannot update yourself, contact customer support.

9.3 Right to Erasure

You have the right to request deletion of your personal information, subject to legal limitations. We may retain certain data to comply with legal obligations, resolve disputes, or enforce our agreements. Information subject to regulatory retention requirements cannot be deleted until the retention period expires.

9.4 Right to Object

You have the right to object to processing of your personal data for certain purposes, particularly marketing. You can opt out of marketing communications at any time. However, you cannot object to processing necessary for contract performance or legal compliance.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another service provider where technically feasible.

9.6 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

9.7 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer at the email address provided in Section 12. We will respond to your request within 30 days. We may request additional information to verify your identity before fulfilling requests involving access to or deletion of personal data.

10. Children's Privacy

09ph services are strictly intended for individuals 21 years of age or older. We do not knowingly collect personal information from individuals under 21. If we become aware that we have collected information from someone under 21, we will immediately delete such information and terminate the associated account. If you believe a minor has provided us with personal information, please contact us immediately.

11. International Data Transfers

Your personal information is primarily stored and processed in the Philippines. However, some of our service providers may process data in other countries. When we transfer personal data outside the Philippines, we ensure appropriate safeguards are in place through:

• Contractual clauses requiring service providers to protect data according to Philippine standards
• Verification that the receiving country has adequate data protection laws
• Implementation of technical security measures during transmission and storage

12. Changes to This Privacy Policy

09ph reserves the right to modify this Privacy Policy at any time. Material changes will be communicated through:

• Email notification to your registered email address
• Prominent notice on our website homepage
• In-account notification when you next log in

Changes become effective 30 days after notification unless you object, in which case you must close your account. Continued use of the Service after the effective date constitutes acceptance of the revised policy. We encourage you to review this policy periodically.

13. Contact Information and Complaints

13.1 Data Protection Officer

For questions, concerns, or requests regarding this Privacy Policy or your personal information, contact our Data Protection Officer:

• Email: [email protected] (mark subject line: "Privacy Inquiry")
• Response Time: We strive to respond within 5 business days

13.2 Filing a Complaint

If you believe we have violated your privacy rights or mishandled your personal information, you may file a complaint with:

• National Privacy Commission (NPC)
• 5th Floor, Philippines Veterans Building, Espana Boulevard corner Josefa Llanes Escoda Street, Sampaloc, Manila 1000
• Email: [email protected]
• Website: www.privacy.gov.ph