99piso Privacy Policy — How We Handle Your Personal Data

This Privacy Policy is issued by 99piso ("99piso," "we," "us," or "our"), the operator of the online gaming platform accessible at https://99piso.club. For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), 99piso is the data controller responsible for the personal data of players registered on the Platform.

This Policy applies to all personal data collected through the 99piso website, mobile browser experience, player account registration process, payment processing interactions, customer support communications, and any other touchpoint through which a player interacts with 99piso.

99piso collects personal data through several channels. The categories of personal data we process are described below:

99piso does not collect sensitive personal information (as defined under the Philippine Data Privacy Act) beyond what is strictly required for identity verification and age verification (21+ compliance). We do not collect biometric data, political opinions, religious beliefs, or health information.

99piso processes your personal data only for specific, legitimate purposes. We do not use your data in ways you would not reasonably expect given the nature of an online casino platform. The primary purposes for which 99piso uses your personal data are:

• Account Management: To create, maintain, and administer your 99piso player account, including processing your deposits and withdrawals in Philippine Peso via GCash, PayMaya, BPI, BDO, Metrobank, and other approved Philippine payment methods;
• Identity & Age Verification: To verify that you are who you claim to be and that you are at least 21 years of age, as required by PAGCOR's guidelines for online gaming in the Philippines;
• Platform Operations: To deliver the games, live casino streams, sabong broadcasts, bingo rooms, and sports betting services that constitute the 99piso Platform;
• Responsible Gaming Compliance: To enforce deposit limits, loss limits, self-exclusion requests, and other responsible gaming tools you activate on your account;
• Anti-Fraud & Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other illegal activities on the Platform;
• Legal & Regulatory Compliance: To meet 99piso's obligations under the Philippine Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, PAGCOR regulatory requirements, and other applicable Philippine laws;
• Customer Support: To respond to your support inquiries and resolve account issues;
• Platform Improvement: To analyze usage patterns and improve the 99piso experience for Filipino players, using aggregated and anonymized data where possible.

Under the Philippine Data Privacy Act of 2012, 99piso processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions you accept when registering a 99piso account — including account management, payment processing, and game delivery;
• Legal Obligation: Processing required to comply with applicable Philippine law, including AMLA reporting obligations, PAGCOR regulatory compliance, age verification requirements, and tax reporting;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming enforcement, and general Platform improvement, where these interests are not overridden by your privacy rights;
• Consent: For marketing communications (promotional emails, SMS offers relating to 99piso games and bonuses) where consent has been explicitly given at registration or subsequently. You may withdraw marketing consent at any time by contacting customer support.

99piso does not sell, rent, or trade your personal data to third-party marketers or data brokers. We share your data only in the following limited circumstances:

• Payment Processors: GCash (G-Xchange Inc.), PayMaya, BPI, BDO, Metrobank, and other Philippine financial institutions, to the extent necessary to process your deposits and withdrawals;
• Game Content Providers: Third-party game studios and live casino operators who provide games available on 99piso, where game session data is necessary for game delivery and fairness auditing;
• Identity Verification Services: Third-party KYC providers used to verify your identity and age (21+) in connection with your 99piso registration;
• Philippine Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other relevant Philippine government bodies, where disclosure is required by law or valid legal process;
• Professional Advisors: Legal counsel, auditors, and accountants, under obligations of confidentiality, in connection with 99piso's business operations.

All third parties with whom 99piso shares personal data are required to handle that data in a manner consistent with this Privacy Policy and applicable Philippine law. 99piso does not authorize third parties to use your data for their own marketing purposes.

99piso retains your personal data for as long as your account is active and for a period thereafter as required by applicable Philippine law and regulatory obligations. Specific retention periods are as follows:

• Account and transaction records: Retained for a minimum of 5 years after account closure, in compliance with AMLA record-keeping requirements;
• Identity verification documents: Retained for the duration of the account relationship and for 5 years following account closure;
• Customer support communications: Retained for 2 years following the resolution of the relevant support interaction;
• Technical and usage logs: Retained for up to 12 months for security and fraud prevention purposes, then deleted or anonymized.

When personal data is no longer required for the purposes for which it was collected and there is no legal obligation requiring its retention, 99piso will securely delete or anonymize that data.

99piso uses cookies and similar tracking technologies on the Platform. A cookie is a small text file stored on your device by your browser when you visit 99piso. We use the following categories of cookies:

• Essential Cookies: Required for the Platform to function. These include session cookies that keep you logged in to your 99piso account during a browser session, and security cookies that support our fraud detection systems. These cannot be disabled without preventing Platform use;
• Functional Cookies: These remember your preferences such as your preferred language setting and your last-viewed game category, to improve your 99piso experience across sessions;
• Analytics Cookies: These collect aggregated, anonymized information about how players use the Platform — which game categories are most visited, how players navigate the lobby, average session lengths. This data is used to improve 99piso for Filipino players. No individual player is identified through analytics data.

99piso does not use third-party advertising cookies or cross-site tracking pixels. You may control cookie preferences through your browser settings, with the exception of essential cookies required for Platform functionality.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 99piso:

• Right to be Informed: The right to be informed that your personal data is being collected and processed, including the purposes and legal basis for processing — which this Privacy Policy provides;
• Right to Access: The right to request a copy of the personal data 99piso holds about you, including information on how it is being used;
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data in your 99piso account;
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, subject to applicable legal retention obligations;
• Right to Data Portability: The right to receive a copy of certain personal data you have provided to 99piso in a structured, commonly used, machine-readable format;
• Right to Object: The right to object to processing of your personal data based on legitimate interests, including for marketing purposes;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe 99piso has not complied with its data protection obligations.

To exercise any of these rights, contact 99piso customer support. We will respond to verified requests within 15 working days in accordance with NPC guidelines. Identity verification will be required before any data is disclosed or modified.

99piso implements technical and organizational measures designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• TLS/HTTPS encryption for all data transmitted between your browser and the 99piso Platform;
• Bcrypt password hashing ensuring that stored passwords cannot be reverse-engineered even in the event of a database breach;
• Role-based access controls limiting 99piso staff access to player data strictly to what is required for their job function;
• Two-factor authentication (2FA) available for all player accounts to reduce the risk of unauthorized account access;
• Automated fraud detection and anomaly detection systems monitoring for unauthorized access attempts, unusual transaction patterns, and other security events.

The 99piso Platform is strictly intended for adults aged 21 years and older. 99piso does not knowingly collect personal data from individuals under the age of 21. Registration by anyone under 21 is a violation of 99piso's Terms & Conditions and is prohibited under PAGCOR's guidelines governing online gaming in the Philippines.

If 99piso becomes aware that personal data has been collected from a player under the age of 21, that account will be immediately suspended, the personal data will be reviewed and handled in accordance with applicable law, and any deposits will be returned to the source payment method following verification. If you believe a minor has registered a 99piso account, please contact customer support immediately.

99piso may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When material changes are made, we will notify registered players by email to the address registered on their 99piso account and by displaying a notice on the Platform.

The "Last Updated" date at the top of this Policy reflects when the most recent changes were made. Continued use of the 99piso Platform following notification of a Policy update constitutes your acknowledgment of the updated Policy. If you do not agree to a material change, you may close your 99piso account by contacting customer support.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights under the Philippine Data Privacy Act, or want to raise a data privacy concern about 99piso's practices, please contact us:

99piso aims to respond to all data privacy requests within 15 working days. For urgent security concerns — such as suspected unauthorized access to your 99piso account — please use the 24/7 live chat for immediate assistance.