989ph Casino
Privacy Policy

989ph ("we," "us," "our," "the Platform") is committed to protecting the privacy and personal data of every player and visitor who interacts with the 989ph online casino and sports betting platform at 989ph.app. This Privacy Policy ("Policy") describes our information practices in detail and is intended to give you a clear, honest account of exactly how your data is handled — not a document designed to obscure that information in dense legal language.

This Policy applies to all personal data processed by 989ph in connection with its online gaming services, including data collected through the website at 989ph.app, live chat support interactions, payment transactions, marketing communications, and KYC verification procedures. It should be read alongside the 989ph Terms & Conditions.

For the purposes of the Data Privacy Act of 2012 and this Policy, the data controller responsible for personal data processed in connection with the 989ph platform is 989ph, the operator of the website at 989ph.app. 989ph operates within the PAGCOR (Philippine Amusement and Gaming Corporation) regulatory framework and provides online casino and sports betting services to eligible players in the Philippines.

989ph has designated a Data Protection Officer (DPO) responsible for overseeing data protection compliance and handling data subject requests. Contact details for the DPO are provided in Section 13 of this Policy.

989ph collects personal data in the categories described in the table below. We collect only what is necessary for the stated purpose. You are not required to provide optional information, but doing so may improve your experience on the platform.

989ph collects personal data through the following means:

• Direct submission: Information you voluntarily provide during account registration, KYC verification, payment processing, support interactions, or when updating your Account profile.
• Automated collection: Technical and usage data collected automatically via server logs, cookies, and similar tracking technologies when you access the 989ph website (see Section 6).
• Third-party sources: Identity verification data from KYC service providers, fraud prevention data from risk management partners, and payment confirmation data from payment processors — all engaged to operate and protect the Platform.
• PAGCOR and regulatory sources: In limited circumstances required by law, 989ph may receive or verify information through PAGCOR's systems or government identity databases to fulfil regulatory obligations.

989ph processes personal data only where there is a lawful basis for doing so under the Data Privacy Act of 2012. The following table sets out the primary purposes of processing and the corresponding lawful basis for each.

• Contract performance: Processing necessary to create and manage your Account, process deposits and withdrawals, provide access to games, and fulfil bonus entitlements under the 989ph Terms & Conditions.
• Legal obligation: Processing required to comply with PAGCOR regulatory requirements, Anti-Money Laundering Council (AMLC) obligations, age verification mandates, and tax reporting requirements under Philippine law.
• Legitimate interests: Processing to detect and prevent fraud, bonus abuse, and multi-accounting; to maintain platform security; to improve 989ph products and services; and to conduct anonymised analytics.
• Consent: Processing for optional marketing communications (SMS, email, in-app notifications) about 989ph promotions, new games, and relevant offers — where you have explicitly opted in. You may withdraw consent at any time from Account Settings.
• Vital interests: In exceptional circumstances, sharing data with emergency services or mental health support providers where there is a credible risk to a player's wellbeing.

989ph does not sell, rent, or trade personal data to third parties for their own marketing purposes. Personal data is shared only in the following circumstances, and only to the extent necessary:

• Payment processors: GCash (Mynt), Maya (PayMaya Philippines Inc.), GrabPay, BPI, BDO, Metrobank, and other payment service providers receive the minimum data necessary to authenticate and process your transactions.
• KYC and identity verification providers: Third-party identity verification services engaged by 989ph to fulfil PAGCOR-mandated age and identity verification obligations before withdrawal approval.
• Game software providers: JILI, Pragmatic Play, PG Soft, and other licensed game suppliers may receive a pseudonymous player identifier and game session data necessary to operate their games within the 989ph platform.
• Fraud prevention and risk management: Third-party fraud detection services that analyse account behaviour and transaction patterns to protect the Platform from financial crime.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council, the National Privacy Commission, and other Philippine government agencies where disclosure is required by law, court order, or regulatory direction.
• Professional advisers: Lawyers, auditors, and accountants bound by legal professional privilege and confidentiality obligations, in connection with legal proceedings or compliance reviews.

989ph uses cookies and similar tracking technologies (including browser local storage and session storage) to operate the platform, remember your preferences, maintain your login session, and analyse how the website is used.

• Strictly necessary cookies: Essential for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. They cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences such as language settings, game history, and responsible gaming limit configurations between sessions.
• Analytics cookies: Collect anonymised data about how players navigate the 989ph website — pages visited, time on site, error events — to help 989ph improve its product. No individually identifiable data is processed for analytics purposes.
• Security cookies: Detect and prevent fraudulent account access, multi-account behaviour, and bot activity by analysing device fingerprint characteristics.

You may control non-essential cookies through your browser settings. Disabling all cookies may impair your ability to log in or use certain features of the 989ph platform. 989ph does not use third-party advertising cookies or behavioural retargeting technologies.

989ph retains personal data for as long as necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods imposed by Philippine law and PAGCOR regulatory requirements:

• Account registration and identity data: retained for a minimum of five (5) years after Account closure, in compliance with PAGCOR record-keeping requirements and AMLC obligations under Republic Act No. 9160.
• Financial transaction records: retained for a minimum of five (5) years from the date of each transaction, or longer if required by an ongoing regulatory investigation or legal proceeding.
• Support and communications data: retained for three (3) years from the date of the last interaction, unless related to an open dispute.
• Technical and usage data: retained in identifiable form for up to twelve (12) months, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

989ph implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure:

• 256-bit TLS/SSL encryption for all data transmitted between user devices and 989ph's servers.
• Encrypted storage for all sensitive personal data and financial records at rest, using AES-256 encryption.
• Multi-factor authentication (OTP via Philippine mobile number) for all account login events on unrecognised devices.
• Role-based access controls ensuring that 989ph staff access personal data only on a strict need-to-know basis.
• Regular third-party security penetration testing and vulnerability assessments of the 989ph platform.
• 24/7 automated monitoring for suspicious account activity, unusual transaction patterns, and potential security incidents.
• Staff training on data protection obligations and security protocols as required by the DPA 2012 and its IRR.

Notwithstanding the above measures, no internet-based system can guarantee absolute security. In the event of a personal data breach, 989ph will act in accordance with its breach response plan and notify affected parties as required by Section 8 of the Policy's commitments and the NPC's breach notification rules.

Under the Data Privacy Act of 2012, registered players and website visitors whose personal data is processed by 989ph have the following rights, which 989ph honours without charge and within thirty (30) days of a verified request:

989ph's services are strictly for adults. Persons under the age of twenty-one (21) are prohibited from registering an Account or accessing any gambling service on the Platform, in accordance with PAGCOR's minimum age requirement for online casino gaming in the Philippines.

989ph does not knowingly collect personal data from minors. If 989ph discovers that a registered Account is held by a person under 21 years of age, that Account will be immediately closed, any balance will be forfeited in accordance with the Terms & Conditions, and all associated personal data will be deleted to the extent permitted by law.

In certain operational circumstances, personal data processed by 989ph may be transferred to or accessed by service providers located outside the Philippines — for example, where a game software provider or fraud prevention partner operates servers in another jurisdiction.

989ph ensures that all cross-border transfers of personal data are conducted in compliance with Section 21 of the Data Privacy Act of 2012. Transfers occur only where:

• The recipient country has been assessed to provide an adequate level of data protection;
• Appropriate contractual safeguards (including standard data protection clauses) have been implemented between 989ph and the receiving party; or
• The transfer is necessary for the performance of a contract with the data subject or for the implementation of pre-contractual measures taken at the data subject's request.

989ph may update this Privacy Policy from time to time to reflect changes in our data practices, platform services, or applicable Philippine law. When material changes are made, 989ph will notify registered players by SMS to their registered Philippine mobile number at least seven (7) days before the updated Policy takes effect.

The "Last Updated" date at the top of this document will always reflect the date of the most recent revision. Non-material clarifications — such as correcting typographical errors or improving the readability of existing provisions without changing their substance — may be published without prior notice.

Your continued use of the 989ph platform after the effective date of an updated Privacy Policy constitutes your acknowledgment of the changes. If you disagree with any material change, you may close your Account by contacting 989ph support before the effective date.

For any questions, concerns, or requests related to this Privacy Policy or the personal data 989ph holds about you, please contact:

• Data Protection Officer (DPO): 989ph — reachable via the support channels below.
• Email: [email protected] — please include "Data Privacy Request" in your subject line, your registered mobile number, and a concise description of your query. Responses are issued within five (5) business days.
• Live Chat: Available 24/7 within your logged-in 989ph Account. For general privacy questions, the support team can answer immediately or escalate to the DPO where required.

If you are not satisfied with 989ph's response to a data privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines (privacy.gov.ph).