Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how 999abb ("we," "us," "our," or "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you," "the Player," or "the User") who access or use the 999abb online gaming platform available at 999abb.net and any associated mobile applications or services.

999abb is committed to protecting your privacy and handling your personal data responsibly, transparently, and in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its implementing rules and regulations, as administered by the National Privacy Commission (NPC).

By registering a 999abb account, accessing the platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read together with our Terms and Conditions and our Responsible Gaming Policy.

If you do not agree with any part of this Privacy Policy, you should not use the 999abb platform. If you have already registered and wish to withdraw your consent, please contact our support team to discuss your options, including account closure.

2 Data We Collect

999abb collects personal data that is necessary to provide you with a safe, secure, and compliant gaming experience. The categories of personal data we collect include:

2.1 Identity and Contact Data

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Email address
• Mobile phone number
• Residential address (city, province, postal code)
• Nationality and country of residence

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., Philippine passport, driver's licence, SSS/UMID card, PhilSys National ID)
• Proof of address documents (e.g., utility bills, bank statements)
• Selfie or live photo for identity verification purposes
• Source of funds documentation where required by anti-money laundering regulations

2.3 Financial Data

• GCash mobile number or account reference
• PayMaya account reference
• Bank account details (BPI, BDO, Metrobank) where used for deposits or withdrawals
• Transaction history, including deposit amounts, withdrawal amounts, and dates

2.4 Gaming Activity Data

• Games played, bet amounts, win/loss records, and session durations
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, self-exclusion status)

2.5 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type
• Unique device identifiers
• Session logs, access timestamps, and platform interaction data

2.6 Communications Data

• Records of your communications with 999abb support, including live chat transcripts and email correspondence
• Survey responses and feedback you voluntarily provide

3 How We Collect Your Data

999abb collects your personal data through the following means:

• Direct collection: Data you provide when registering your 999abb account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Data collected automatically when you use the 999abb platform, including through cookies, log files, and similar tracking technologies. See Section 9 for more details on cookies.
• Third-party sources: Data received from payment processors (GCash, PayMaya, BPI, BDO, Metrobank) to verify and process your transactions, and from identity verification service providers used to complete KYC checks.
• Publicly available sources: In limited circumstances, 999abb may verify information against publicly available records to comply with anti-money laundering or fraud prevention obligations.

4 How We Use Your Data

999abb uses your personal data for the following purposes:

Purpose	Data Used
Account registration and management	Identity, contact, and KYC data
Age and identity verification (21+ compliance)	Date of birth, KYC documents
Processing deposits and withdrawals	Financial data, identity data
Providing gaming services	Gaming activity data, technical data
Anti-money laundering (AML) compliance	Identity, financial, and transaction data
Fraud detection and prevention	Technical, financial, and gaming data
Responsible gaming monitoring	Gaming activity, responsible gaming settings
Customer support	Identity, contact, and communications data
Marketing communications (with consent)	Contact data, gaming preferences
Platform improvement and analytics	Technical and gaming activity data (aggregated)
Legal and regulatory compliance	All categories as required by law

999abb will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable law.

5 Legal Basis for Processing

Under the Data Privacy Act of 2012 (RA 10173), 999abb processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the 999abb Terms and Conditions, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine law, including anti-money laundering regulations, PAGCOR regulatory requirements, and tax obligations.
• Legitimate interests: Processing necessary for 999abb's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including for marketing communications and certain cookie uses. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Disclosure

999abb does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, and Metrobank, to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable financial regulations.
• Identity verification providers: Third-party KYC service providers used to verify your identity and age in compliance with regulatory requirements.
• Technology and infrastructure providers: Cloud hosting, data storage, and platform technology providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where disclosure is required by law, court order, or regulatory obligation.
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

7 Data Retention

999abb retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

As a general rule, 999abb retains player account data for a minimum of five (5) years from the date of account closure or last activity, in accordance with Philippine anti-money laundering regulations and PAGCOR requirements. KYC documents and transaction records are retained for the same minimum period.

Gaming activity logs and session data are retained for a minimum of two (2) years for responsible gaming monitoring and dispute resolution purposes. Marketing communication preferences and consent records are retained for the duration of your account and for one year following account closure.

When personal data is no longer required for any of the purposes described in this Policy and no legal obligation requires its continued retention, 999abb will securely delete or anonymise the data in accordance with our internal data retention and disposal procedures.

8 Data Security

999abb implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and the 999abb platform is encrypted using TLS (Transport Layer Security) 1.2 or higher.
• Encryption at rest: Sensitive personal data stored on 999abb servers is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorised 999abb personnel and service providers on a strict need-to-know basis. All access is logged and audited.
• Two-factor authentication: 999abb supports and encourages the use of two-factor authentication (2FA) for player accounts to provide an additional layer of security.
• Regular security audits: 999abb conducts regular internal and third-party security assessments, including penetration testing and vulnerability scanning.
• Incident response: 999abb maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the NPC and affected players in accordance with applicable law.

9 Cookies & Tracking Technologies

999abb uses cookies and similar tracking technologies to enhance your experience on the platform, maintain your session, and collect analytical data to improve our services. A cookie is a small text file placed on your device when you visit the 999abb platform.

9.1 Types of Cookies We Use

• Essential cookies: Required for the 999abb platform to function correctly. These include session cookies that keep you logged in and security cookies that help protect your account. These cookies cannot be disabled without affecting platform functionality.
• Preference cookies: Used to remember your settings and preferences, such as your preferred language and display settings, so you do not have to re-enter them each time you visit.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the 999abb platform, including which pages are visited most frequently and how long sessions last. This data helps us improve the platform experience.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification.

9.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling essential cookies may affect the functionality of the 999abb platform, including your ability to log in and play games.

999abb does not use cookies to track your browsing activity on websites other than 999abb.net. We do not use third-party advertising cookies or cross-site tracking technologies.

10 Your Data Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by 999abb:

• Right to be informed: You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfils that obligation.
• Right of access: You have the right to request a copy of the personal data that 999abb holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data that 999abb holds about you. You can update basic account information directly from your account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 999abb's legal retention obligations.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to 999abb's overriding legitimate grounds.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe that 999abb has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of your data rights, please contact the 999abb Data Protection Officer at [email protected]. We will respond to all verified data rights requests within 30 calendar days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

11 Children's Privacy

The 999abb platform is strictly intended for adults aged 21 years and older, in accordance with Philippine gambling regulations. 999abb does not knowingly collect personal data from individuals under the age of 21.

If 999abb becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage player will be handled in accordance with applicable law and our Terms and Conditions.

If you are a parent or guardian and believe that your child has registered a 999abb account or provided personal data to 999abb, please contact our support team immediately at [email protected] so we can investigate and take appropriate action.

12 Third-Party Links

The 999abb platform may contain links to third-party websites or services, including payment provider portals (GCash, PayMaya, BPI, BDO, Metrobank). These third-party sites operate independently of 999abb and are governed by their own privacy policies. 999abb is not responsible for the privacy practices or content of any third-party website.

We encourage you to review the privacy policies of any third-party services you use in connection with your 999abb account, particularly your chosen payment provider, before submitting any personal data to those services.

13 Policy Updates

999abb reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this Policy, we will notify registered players via email or via a prominent notice on the 999abb platform at least 7 days before the changes take effect.

The most current version of this Privacy Policy is always available at 999abb.net/privacy-policy. The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. We encourage you to review this Policy periodically to stay informed about how 999abb protects your personal data.

Your continued use of the 999abb platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the updated Policy, you must stop using the platform and contact our support team to close your account.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 999abb handles your personal data, please contact our Data Protection Officer (DPO) through any of the following channels:

• Privacy enquiries: [email protected]
• General support: [email protected]
• Live chat: Available 24/7 directly on the 999abb platform — log in to your account and tap the live chat icon.

Our DPO is responsible for overseeing 999abb's compliance with the Data Privacy Act of 2012 and this Privacy Policy. All privacy-related enquiries are handled with strict confidentiality and will receive a response within 5 business days.

If you are not satisfied with our response to your privacy enquiry, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for enforcing the Data Privacy Act of 2012.