Privacy Policy

999xcom ("we", "us", "our", or the "Company") operates the online gaming platform accessible at 999xcom.net (the "Platform"). We are a licensed online gaming operator serving Filipino players across the Philippines, including Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond.

For purposes of the Republic Act No. 10173 (Data Privacy Act of 2012 of the Philippines), 999xcom is the Personal Information Controller in respect of the personal data of players and visitors collected through this Platform.

We are committed to processing your personal data lawfully, fairly, and transparently in accordance with the Data Privacy Act, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

999xcom collects the following categories of personal data from players and Platform visitors. The specific data collected depends on how you interact with the Platform.

We do not intentionally collect sensitive personal information as defined under the Data Privacy Act (such as health data, political affiliations, or racial/ethnic origin) unless you voluntarily provide such information in a support communication. Where sensitive data is inadvertently received, it will be deleted promptly unless retention is required by law.

999xcom collects your personal data through the following channels:

• Direct Registration: When you create a 999xcom account, you provide identity, contact, and financial data directly through the registration form.
• Identity Verification (KYC): When you submit documents to verify your identity as required by anti-money laundering regulations and PAGCOR guidelines, those documents and the information contained in them are collected and processed.
• Deposits and Withdrawals: When you perform financial transactions on the Platform, payment-related data is transmitted to us or to our payment processing partners.
• Platform Usage: As you navigate and use the Platform, technical and usage data is collected automatically through server logs, cookies, and similar tracking technologies.
• Customer Support: When you contact our support team via live chat or email, the content of those communications, including any personal data you share, is collected and stored.
• Responsible Gaming Tools: When you set deposit limits, session reminders, or request self-exclusion, data related to those preferences is recorded against your account.
• Third-Party Sources: In limited circumstances, 999xcom may receive data about you from third-party fraud prevention services, payment processors, or identity verification providers to supplement the information you have provided directly.

999xcom uses the personal data we collect for the following purposes:

• Account Creation and Management: To register your player account, verify your identity, manage your account settings, and provide access to the Platform's features and games.
• Service Delivery: To process bets, settle winnings, process deposits and withdrawals in Philippine Peso (PHP) via GCash, PayMaya, BPI, BDO, Metrobank, and card methods, and to provide live dealer games, slots, bingo, volleyball betting, and other gaming services.
• Legal and Regulatory Compliance: To fulfil our obligations under the Data Privacy Act, PAGCOR regulations, anti-money laundering laws, and other applicable Philippine laws — including Know Your Customer (KYC) obligations and suspicious transaction reporting.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, unauthorised account access, and other forms of prohibited conduct on the Platform.
• Responsible Gaming: To monitor player activity for signs of problem gambling, to enforce responsible gaming limits and self-exclusion requests, and to comply with PAGCOR responsible gaming obligations.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance.
• Communications: To send you transactional notifications (deposit confirmations, withdrawal updates, account alerts), and where you have opted in, promotional communications about 999xcom bonuses and offers.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, test new features, and improve the overall quality and performance of the 999xcom Platform.
• Legal Claims: To establish, exercise, or defend legal claims in connection with the Platform.

Under the Data Privacy Act of 2012, 999xcom processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary for the performance of the contract between you and 999xcom (i.e., the Terms & Conditions you agreed to upon registration), including account management, payment processing, and service delivery.
• Legal Obligation: Processing that is required to comply with a legal obligation under Philippine law, including KYC obligations under the Anti-Money Laundering Act, PAGCOR regulatory requirements, and data reporting obligations.
• Legitimate Interests: Processing for purposes that serve 999xcom's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. This includes fraud prevention, platform security, analytics, and improvement of our services.
• Consent: Where we rely on your consent as the legal basis for processing — primarily for optional marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Where processing is based on legitimate interests, 999xcom has conducted a balancing assessment to ensure that our interests do not disproportionately override your privacy rights.

999xcom does not sell your personal data. We share your data only with the categories of recipients described below, and only to the extent necessary for the stated purpose:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and card processing partners receive the payment data necessary to process your deposits and withdrawals. These partners are bound by their own privacy policies and applicable financial regulations.
• Identity Verification Providers: Third-party KYC and liveness verification services receive identity documents and biometric data (such as a selfie) solely for the purpose of verifying your identity in compliance with AML obligations.
• Fraud Prevention Services: We may share device, behavioural, and transaction data with fraud detection partners to identify and prevent fraudulent activity on the Platform.
• IT and Infrastructure Providers: Cloud hosting, database, and content delivery providers who process data on our behalf under data processing agreements that require them to maintain appropriate security standards.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and law enforcement agencies where disclosure is required by law or by a valid legal process.
• Professional Advisers: Lawyers, auditors, and insurers who provide professional services to 999xcom, subject to confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of 999xcom's assets, player data may be transferred to the acquiring entity, subject to equivalent privacy protections.

999xcom uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and analyse usage. A cookie is a small text file stored on your device when you visit the Platform.

The categories of cookies we use are:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They manage your session login state, security tokens, and navigation. You cannot opt out of strictly necessary cookies without disabling the Platform entirely.
• Performance & Analytics Cookies: These cookies collect aggregated, anonymised data about how players use the Platform — such as which pages are visited most frequently and how long sessions last. This data helps us improve the Platform experience.
• Functional Cookies: These cookies remember your preferences, such as language settings, preferred game categories, and responsible gaming limit configurations, so that you do not need to re-enter them on each visit.
• Security Cookies: Used to detect and prevent fraudulent logins, suspicious account access, and bot activity on the Platform.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the 999xcom Platform. For players on mobile devices, equivalent device identifiers may be used in place of cookies.

999xcom implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• AES-256 encryption for all personal and financial data stored at rest
• TLS 1.2 / 1.3 encryption for all data transmitted between your device and our servers
• Tokenisation of payment card and e-wallet details — raw financial credentials are never stored on 999xcom servers
• Bcrypt or equivalent hashing of all account passwords — plain-text passwords are never stored
• Multi-factor authentication (MFA) options for player accounts
• Regular penetration testing and security audits conducted by independent security professionals
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their role
• Incident response procedures with defined notification timelines in compliance with NPC breach notification requirements

While 999xcom employs robust security measures, no system is entirely immune to security threats. You are also responsible for maintaining the security of your account credentials. Please refer to the Account Security section of our Terms & Conditions for your obligations in this regard.

999xcom retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable Philippine law and regulatory obligations.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data (from which you can no longer be identified) may be retained indefinitely for statistical and analytical purposes.

Under the Data Privacy Act of 2012 and applicable NPC regulations, you have the following rights in relation to your personal data held by 999xcom:

• Right to be Informed: The right to be told what personal data we hold about you, why we hold it, and how it is processed — which this Privacy Policy addresses.
• Right to Access: The right to obtain a copy of the personal data we hold about you and information about how it is being processed.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected. You may update certain account details directly through your account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal and regulatory retention obligations.
• Right to Data Portability: The right to receive a structured, machine-readable copy of the personal data you have provided to us, where technically feasible.
• Right to Object: The right to object to the processing of your personal data where that processing is based on legitimate interests, including profiling for direct marketing purposes.
• Right to Restrict Processing: The right to request that we limit the processing of your personal data in certain circumstances, such as while we investigate a rectification request.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe that 999xcom has processed your personal data in violation of the Data Privacy Act.

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 15. We will respond to verifiable data subject requests within fifteen (15) working days of receipt, or within such extended period as permitted under applicable NPC rules for complex requests.

The 999xcom Platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR guidelines governing online casino gaming in the Philippines. We do not knowingly collect personal data from anyone under 21 years of age.

If you are a parent or guardian and believe that your minor child has provided personal data to 999xcom or has registered an account on the Platform, please contact us immediately at the details provided in Section 15. Upon verification, we will promptly delete the minor's account and all associated personal data.

999xcom employs age verification controls as part of its KYC process to prevent minors from accessing the Platform. If a registered account is found to belong to a person under 21 years of age, the account will be immediately and permanently closed and all associated funds will be handled in accordance with applicable law.

As an online platform, some of the third-party service providers engaged by 999xcom (such as cloud hosting providers or fraud detection services) may process your personal data on servers located outside of the Philippines.

Where personal data is transferred outside the Philippines, 999xcom ensures that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act and NPC guidelines on cross-border data flows. Such safeguards may include:

• Standard contractual clauses approved by the NPC or equivalent data protection authority
• Transferring data only to countries or organisations that the NPC has recognised as providing adequate levels of data protection
• Binding corporate rules where applicable within our group of companies

You may request details of the specific safeguards applicable to any particular international transfer of your personal data by contacting our Data Protection Officer.

The 999xcom Platform integrates with third-party services — such as game content providers, payment gateways, and customer support tools — that may independently collect data when you use their services through our Platform. These third parties operate under their own privacy policies, and 999xcom is not responsible for their data practices beyond the contractual protections we require through our data processing agreements.

Specifically:

• Game Providers: Some live dealer and slot games on 999xcom are provided by third-party game studios. When you play these games, limited gameplay data may be processed by the game provider for the purpose of delivering and auditing the game. Game providers are contractually required to handle this data in compliance with applicable law.
• Payment Partners: GCash, PayMaya, BPI, BDO, Metrobank, and card networks have their own privacy policies governing how they handle your payment data. 999xcom does not control and is not responsible for the privacy practices of these payment providers.
• Customer Support Tools: Our live chat support platform may be operated by a third-party provider. Chat transcripts and support data are processed in accordance with that provider's data processing agreement with 999xcom.

999xcom selects third-party service providers carefully and requires all processors to implement adequate technical and organisational security measures consistent with the Data Privacy Act.

999xcom reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or NPC guidance. The "Last updated" date at the top of this page indicates when the most recent revision was made.

When we make material changes to this Privacy Policy — changes that significantly affect your rights or how we process your personal data — we will notify you by:

• Sending a notification to the email address registered to your 999xcom account, and/or
• Displaying a prominent notice on the Platform upon your next login

Your continued use of the 999xcom Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree with the changes, you should cease using the Platform and may close your account in accordance with our Terms & Conditions.

We encourage you to review this Privacy Policy periodically. The current version is always available at this URL.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 999xcom, you may contact us through the following channels:

• Live Chat: Available 24/7 via the live chat widget on the Platform — the fastest channel for urgent account-related privacy concerns
• Email: [email protected] (plain text — not a clickable link)

For formal data subject rights requests (access, rectification, erasure, portability, objection), please submit your request in writing to the email address above with the subject line "Data Subject Request". Please include your full name, registered email address, and a clear description of the right you wish to exercise. We will verify your identity before processing the request.

For complaints regarding 999xcom's data processing practices that are not resolved to your satisfaction after contacting us, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the competent supervisory authority for data privacy matters in the Philippines.