Privacy Policy for 999aq Online Gaming
Your privacy matters to us. This Privacy Policy explains exactly what personal data 999aq collects from Filipino players, how that data is used, how it is protected, and what rights you hold under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173). We are committed to handling your information with transparency, security, and respect.
Our Core Privacy Commitments to Every 999aq Player
End-to-End Encryption
All data transmitted between your browser and the 999aq platform is encrypted using TLS (Transport Layer Security). Your personal details, payment information, and gaming history are never sent over unencrypted connections — full stop.
Strict Data Minimization
999aq only collects the personal data that is strictly necessary to provide our gaming and sportsbook services, process your transactions in Philippine Peso, and comply with PAGCOR and AMLC regulatory requirements. We do not collect data for its own sake.
RA 10173 Compliance
999aq's data handling practices are designed to comply with the Philippine Data Privacy Act of 2012. We maintain a designated Data Protection Officer (DP O) who oversees all personal data processing activities on the platform.
No Unauthorized Sharing
999aq does not sell, rent, or trade your personal data to third parties for marketing purposes. Data is only shared with regulated partners — such as payment processors like GCash and PayMaya — strictly to fulfill your transactions.
Defined Retention Periods
We do not retain your personal data indefinitely. 999aq maintains clear data retention schedules aligned with PAGCOR and AMLC regulatory requirements. When data is no longer needed, it is securely deleted or anonymized.
Your Rights Are Real
Under RA 10173, you have clear rights over your personal data — including the right to access, correct, and request deletion of your information. 999aq provides straightforward channels for you to exercise all of these rights without friction.
Contents
Summary: This Privacy Policy ("Policy") governs how 999aq ("999aq", "we", "us", "our") collects, processes, stores, shares, and protects the personal data of all users ("Player", "you", "your") who access or use the 999aq online gaming and sportsbook platform. By registering an account on 999aq or continuing to use the platform, you acknowledge that you have read and understood this Policy. This Policy forms part of the 999aq Terms and Conditions.
1 Scope & Application
This Privacy Policy applies to all personal data collected by 999aq in connection with your use of the 999aq online casino and sportsbook platform, accessible at 999aq.app and its subdomains. It applies to all Filipino players and any other individuals who interact with the 999aq platform, regardless of the device or browser used to access it.
This Policy covers personal data collected through:
- The 999aq website and mobile browser interface.
- The account registration and KYC verification process.
- Deposits, withdrawals, and payment transactions in Philippine Peso (PHP) via GCash, PayMaya, BPI, BDO, and Metrobank.
- Gaming and betting activities conducted on the platform — including slots, live casino, sports betting, sabong, bingo, and blackjack.
- Customer support interactions, including live chat sessions.
- Promotional and bonus program participation.
- Cookies and similar tracking technologies used on the 999aq website.
This Policy does not apply to third-party websites or services that may be referenced or linked from the 999aq platform. 999aq is not responsible for the privacy practices of any third-party platforms.
2 Data We Collect
999aq collects personal data through two primary means: information you provide directly to us, and information we collect automatically when you use the platform.
2.1 Data You Provide Directly
| Data Category | Specific Data Points | When Collected |
|---|---|---|
| Registration Data | Full legal name, date of birth, residential address, email address, mobile number, username | Account registration |
| KYC / Identity Data | Government-issued photo ID (PhilSys, Passport, LTO License, UMID, Voter's ID, PRC ID), selfie with ID, proof of address | KYC verification before withdrawal activation |
| Financial Data | GCash number, PayMaya account, BPI / BDO / Metrobank account details (account name only, no full account numbers stored), deposit and withdrawal amounts in PHP | Deposit and withdrawal transactions |
| Support Data | Live chat transcripts, support ticket content, screenshots submitted for dispute resolution | Customer support interactions |
| Responsible Gaming Data | Deposit limit settings, cooling-off preferences, self-exclusion requests | When responsible gaming tools are used |
2.2 Data Collected Automatically
When you access the 999aq platform, our systems automatically collect certain technical and behavioral data, including:
- Device & Browser Data: IP address, device type, operating system, browser type and version, screen resolution.
- Session Data: Pages visited, time spent on each page, game sessions played, betting history, login and logout timestamps.
- Geolocation Data: General geographic location inferred from IP address, used to verify that you are accessing the platform from the Philippines and not from a Prohibited Territory.
- Cookie Data: Preference cookies, session tokens, and analytics data as described in Section 6 of this Policy.
3 How We Use Your Data
999aq processes your personal data only for specific, legitimate purposes directly related to the provision of our online gaming and sportsbook services to Filipino players. The primary purposes for which we use your data are:
- Account Management: Creating, verifying, and maintaining your 999aq player account, including identity verification, password recovery, and account security.
- Service Delivery: Enabling you to access and use all 999aq platform features — including live casino games, slots, sports betting (PBA, NBA, UFC, football), sabong, and bingo — and to process your bets, game results, and winnings accurately.
- Payment Processing: Processing deposits to and withdrawals from your 999aq PHP wallet via GCash, PayMaya, BPI, BDO, and Metrobank. Verifying that withdrawal requests are made to accounts registered in your own name.
- Regulatory Compliance: Fulfilling our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), and the Data Privacy Act (RA 10173). This includes monitoring for suspicious transaction activity and filing reports to AMLC where legally required.
- KYC Verification: Verifying your age (21+), identity, and residential address as required by PAGCOR and Philippine law before activating withdrawal functionality on your account.
- Responsible Gaming: Monitoring gaming activity patterns to identify signs of problem gambling behavior, enforcing deposit limits and self-exclusion settings you have applied to your account, and complying with PAGCOR responsible gaming program requirements.
- Fraud Prevention & Security: Detecting, investigating, and preventing fraud, account takeover attempts, bonus abuse, multi-accounting, and other prohibited activities on the 999aq platform.
- Customer Support: Responding to your queries, resolving disputes, and improving our support services based on interaction history.
- Platform Improvement: Using aggregated and anonymized analytics data to improve 999aq platform performance, user experience, and game offerings for Filipino players.
- Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates by email or SMS — but only where you have provided your consent and only to the contact details registered on your account. You may opt out at any time.
4 Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, 999aq processes your personal data on the following legal bases:
- Contractual Necessity: Processing is necessary to perform our contract with you — i.e., to provide the 999aq gaming and sportsbook services you have registered for, process your transactions in PHP, and manage your account.
- Legal Obligation: Processing is required to comply with our legal obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act, and other applicable Philippine laws and regulations.
- Legitimate Interests: Processing is necessary for 999aq's legitimate interests — including fraud prevention, platform security, responsible gaming monitoring, and improving our services — where these interests are not overridden by your privacy rights.
- Consent: For marketing communications and non-essential cookies, 999aq processes your data on the basis of your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Note on Sensitive Personal Information: Where 999aq processes sensitive personal information as defined under RA 10173 — such as government-issued ID numbers submitted during KYC verification — this processing is conducted strictly to the extent required by law and PAGCOR regulatory requirements, and is subject to enhanced security controls as described in Section 7 of this Policy.
5 Data Sharing & Disclosure
999aq does not sell your personal data. We do not share your personal data with third parties for their own marketing purposes. Your data is shared only in the following limited circumstances:
5.1 Regulated Service Providers
To deliver the 999aq platform, we share necessary data with regulated third-party service providers who process data on our behalf under strict data processing agreements. These include:
- Payment Processors: GCash (Mynt — Globe Fintech Innovations), PayMaya Philippines, BPI, BDO, and Metrobank — to process deposit and withdrawal transactions in PHP.
- KYC Verification Providers: Regulated identity verification service providers used to validate government-issued Philippine IDs and perform age verification.
- Cloud Infrastructure Providers: Server and data storage providers hosting 999aq platform infrastructure, operating under data processing agreements that comply with RA 10173.
- Fraud Prevention & Risk Services: Third-party fraud detection and AML screening tools used to identify suspicious activity and prohibited accounts.
5.2 Regulatory Authorities
999aq is legally required to share certain data with Philippine regulatory and law enforcement authorities, including:
- PAGCOR — the Philippine Amusement and Gaming Corporation — as required by our operating license conditions.
- AMLC — the Anti-Money Laundering Council — where transaction activity triggers mandatory reporting thresholds under RA 9160 as amended.
- National Privacy Commission (NPC) — in the event of a personal data breach, as required by RA 10173 and NPC Circular 16-03.
- Philippine law enforcement agencies, where disclosure is required by a valid court order, subpoena, or lawful request under Philippine law.
5.3 No Third-Party Marketing Sharing
999aq does not share, sell, rent, or license your personal data to any third party for marketing, advertising, data brokerage, or profiling purposes. Any aggregated and fully anonymized data used for industry analytics does not constitute personal data and cannot be used to identify you individually.
6 Cookies & Tracking Technologies
The 999aq platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalized experience for Filipino players. The following categories of cookies are used on the 999aq platform:
| Cookie Type | Purpose | Consent Required? |
|---|---|---|
| Strictly Necessary | Maintain your login session, secure your account, prevent cross-site request forgery (CSRF), and enable core platform functionality. These cannot be disabled without breaking the platform. | No — essential to service |
| Functional / Preference | Remember your language preferences, display settings, and responsible gaming limit configurations between sessions. | No — legitimate interest |
| Analytics | Collect anonymized data on platform usage patterns, page performance, and feature engagement to improve the 999aq experience for Filipino players. | Yes — consent required |
| Marketing / Retargeting | Track promotional campaign effectiveness and support targeted bonus communications sent to your registered account contact details. | Yes — consent required |
You can manage your cookie preferences through the cookie settings panel available on the 999aq platform. Note that disabling strictly necessary cookies will prevent you from logging in or using the platform's real-money features. Withdrawing consent for analytics or marketing cookies will not affect your ability to play.
7 Data Security
999aq implements a layered, defense-in-depth approach to personal data security. Our technical and organizational security measures include:
- TLS Encryption in Transit: All data transmitted between your browser and 999aq servers is encrypted using TLS 1.2 or higher. No personal data is transmitted over unencrypted HTTP connections.
- Encryption at Rest: Sensitive personal data stored in 999aq databases — including KYC documents, government ID numbers, and financial records — is encrypted at rest using AES-256 encryption.
- Access Controls: Access to personal data within 999aq's systems is restricted to authorized personnel on a strict need-to-know basis. All internal access is logged and auditable.
- Secure KYC Document Handling: Identity documents submitted during the KYC verification process are stored in an isolated, access-controlled secure document vault separate from the main platform database.
- Intrusion Detection & Monitoring: 999aq's infrastructure is monitored 24/7 for unauthorized access attempts, unusual data access patterns, and potential security incidents.
- Regular Security Assessments: The 999aq platform undergoes regular security assessments, including vulnerability scanning and penetration testing, conducted by qualified security professionals.
- Staff Training: All 999aq personnel who handle personal data receive mandatory data privacy and security training aligned with RA 10173 requirements.
Data Breach Notification: In the event of a personal data breach that poses a real risk to your rights and freedoms, 999aq will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required by RA 10173 and NPC Circular 16-03. Affected Players will be notified directly as soon as practicable after the breach has been assessed and contained.
8 Data Retention
999aq does not retain your personal data for longer than is necessary for the purposes for which it was collected, subject to any longer retention periods required by Philippine law or regulatory obligation. Our standard data retention periods are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | PAGCOR licensing requirement |
| KYC / identity documents | Duration of account + 5 years after closure | AMLC / RA 9160 requirement |
| Financial transaction records | 5 years from transaction date | AMLC / RA 9160 requirement |
| Gaming / betting history | 3 years from date of activity | PAGCOR audit requirement |
| Customer support records | 2 years from last interaction | Legitimate interest / dispute resolution |
| Marketing consent records | Until consent is withdrawn + 1 year | RA 10173 accountability requirement |
| Cookie / analytics data | Up to 13 months from collection | Legitimate interest |
When the applicable retention period expires, personal data is securely deleted from 999aq's systems using industry-standard data destruction methods, or anonymized in a manner that permanently prevents re-identification.
9 Your Rights Under RA 10173
As a data subject under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights in relation to your personal data held by 999aq. You may exercise any of these rights by contacting 999aq's Data Protection Officer (DPO) as described in Section 13 of this Policy.
Rights Every 999aq Player Holds Over Their Data
Under the Philippine Data Privacy Act, you are not a passive subject of data collection — you hold active rights that 999aq is legally obligated to respect and facilitate. Here is what you can do.
Right to Access
Request a copy of all personal data 999aq holds about you, including the purposes for which it is being processed and the categories of data involved.
Right to Rectification
Request correction of any inaccurate or incomplete personal data 999aq holds about you. Name corrections and address updates can be processed via live chat with supporting documentation.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to 999aq's legal retention obligations under PAGCOR and AMLC regulations.
Right to Object
Object to 999aq processing your personal data for direct marketing purposes at any time. Once an objection for marketing is received, processing for that purpose will cease immediately.
Right to Block or Suspend
Request that 999aq temporarily restricts the processing of your personal data while a complaint or correction request is being resolved — without requiring full deletion of your account.
Right to File a Complaint
If you believe 999aq has violated your data privacy rights under RA 10173, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.
10 Children & Minors
The 999aq platform is strictly intended for individuals aged 21 years and above, in compliance with PAGCOR regulations and Philippine law governing online gaming. 999aq does not knowingly collect personal data from any person under the age of 21.
As part of the registration process, all prospective Players are required to confirm their age by checking an age declaration. Before any withdrawal is processed, full KYC verification — including submission of a valid Philippine government-issued photo ID confirming date of birth — is mandatory.
If 999aq becomes aware that personal data has been collected from a person under the age of 21, all data associated with that person will be immediately and permanently deleted, and the relevant account will be suspended and closed. If you are a parent or guardian and believe that a minor has registered an account on 999aq, please contact the 999aq support team immediately via live chat. 999aq treats all such reports as urgent and will act within 24 hours of a confirmed report.
Age Restriction Reminder: Real-money gaming and sports betting on 999aq is exclusively for players aged 21 and above. This is not a guideline — it is a strict legal requirement under PAGCOR rules and Philippine law. No exceptions are made.
11 Cross-Border Data Transfers
999aq is a Philippines-focused platform. The majority of personal data collected from Filipino players is processed and stored on servers located within or serving the Philippine market. However, certain service providers engaged by 999aq — including cloud infrastructure providers, fraud prevention services, and game content suppliers — may process data in jurisdictions outside the Philippines.
Where personal data is transferred outside the Philippines, 999aq ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under RA 10173. These safeguards include:
- Contractual data processing agreements with all third-party processors that include RA 10173-equivalent data protection obligations.
- Transfer only to jurisdictions or processors that provide an adequate level of data protection as assessed by 999aq's Data Protection Officer.
- Limiting the scope of any cross-border data transfer to the minimum data necessary to fulfill the specific service purpose.
Upon written request to the 999aq DPO, you may obtain further information about the specific safeguards applied to any cross-border transfer of your personal data.
12 Updates to This Privacy Policy
999aq reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or platform features. When material changes are made, 999aq will notify registered Players via the on-site notification system and/or by email to the address registered on your account, at least seven (7) days before the updated Policy takes effect.
The updated Privacy Policy will be published on this page at 999aq.app/privacy-policy with a revised effective date at the top of the document. Your continued use of the 999aq platform after the effective date of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should cease using the platform and may request account closure by contacting the 999aq support team via live chat.
999aq encourages all Players to review this Privacy Policy periodically to stay informed about how we protect your personal data. The date at the top of this Policy reflects when it was last updated.
13 Contact & Data Protection Officer
If you have any questions, concerns, or requests relating to this Privacy Policy or 999aq's handling of your personal data, you may contact our Data Protection Officer (DPO) through the following channels:
- Email: [email protected]
- Live Chat: Available 24/7 directly on the 999aq platform
- Support Hours: 24 hours a day, 7 days a week
- Languages: English and Filipino
When submitting a data subject rights request, please include your registered account username and a clear description of the request or concern. 999aq will acknowledge your request within five (5) business days and aim to resolve all data subject rights requests within thirty (30) days, in accordance with RA 10173 and NPC guidelines.
If you are not satisfied with 999aq's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the regulatory body responsible for administering and enforcing RA 10173.
Responsible Gaming & Data: If your privacy request relates to responsible gaming data — such as self-exclusion records or deposit limit settings — please flag this clearly in your request. 999aq treats responsible gaming data with the highest level of confidentiality and will prioritize processing of these requests.
Ready to Play at 999aq? Your Data Is Safe With Us.
Join thousands of Filipino players who trust 999aq for slots, live casino, sports betting, and more — knowing their personal data is protected by the strongest security standards and full RA 10173 compliance.