999ji Casino Privacy Policy — How We Handle Your Personal Data

This Privacy Policy (hereinafter referred to as the "Policy") is issued by 999ji Casino (hereinafter referred to as "999ji", "we", "us", or "our"), the operator of the online casino platform accessible at https://999ji.cam. This Policy applies to all personal information collected, processed, stored, and used by 999ji in connection with the operation of the platform and the provision of its services to registered players in the Philippines.

999ji is committed to protecting the privacy and personal data of all users of the platform. We process personal data in full compliance with the Republic Act No. 10173 — the Philippine Data Privacy Act of 2012 (hereinafter "DPA"), its implementing rules and regulations, and all applicable issuances of the National Privacy Commission (NPC).

By creating and maintaining a 999ji account, or by continuing to use the platform after any update to this Policy, you acknowledge that you have read, understood, and agreed to the collection and use of your personal data as described herein. This Policy should be read alongside the 999ji Terms & Conditions, which govern the overall player agreement.

For the purposes of the Philippine Data Privacy Act of 2012 and this Policy, the data controller responsible for your personal information is:

999ji operates under the PAGCOR regulatory framework, which imposes additional obligations with respect to the retention and processing of player data, including anti-money laundering (AML) record-keeping requirements under the Revised Implementing Rules and Regulations of Republic Act No. 9160, as amended (the Anti-Money Laundering Act).

999ji collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and in limited circumstances from third-party verification services. The following table sets out the categories of personal data we collect and the primary source of each:

999ji uses the personal data we collect for the following specific purposes. We process personal data only for purposes that are compatible with the reason it was originally collected:

• Account management and authentication — to create, maintain, verify, and secure your 999ji account; to process login requests and enforce account security measures including two-factor authentication;
• Payment processing — to process deposits and withdrawals via GCash, Maya, QR Ph, InstaPay, BPI, BDO, and Metrobank; to verify the ownership of payment instruments; and to reconcile transaction records;
• Identity and age verification (KYC) — to verify that all players are aged 21 or above as required by PAGCOR; to comply with the AMLA's customer due diligence requirements; and to prevent fraud and identity theft;
• Regulatory compliance — to meet 999ji's obligations under PAGCOR licensing conditions, the Philippine DPA, the AMLA, and any other applicable Philippine law or regulatory requirement;
• Customer support — to respond to your queries, complaints, and requests; to resolve disputes; and to maintain records of support interactions;
• Platform security and fraud prevention — to detect, investigate, and prevent fraudulent, abusive, or illegal activity on the platform, including multiple-account creation, bonus abuse, and money laundering;
• Game integrity and responsible gaming — to monitor gameplay patterns for responsible gaming indicators; to apply deposit limits, session timers, and self-exclusion as requested by players or mandated by PAGCOR;
• Platform improvement — to analyse aggregated, anonymised usage data to improve 999ji's game library, user interface, and service quality; and
• Direct marketing — to send promotional communications about bonuses, new games, and VIP programme updates, subject to your marketing preferences. You may opt out at any time.

Under the Philippine Data Privacy Act of 2012, 999ji processes your personal data on one or more of the following lawful bases:

• Contractual necessity — processing is necessary to perform the contract between you and 999ji (the player account agreement constituted by the Terms & Conditions), including account management, payment processing, and gameplay delivery;
• Legal obligation — processing is required to comply with 999ji's legal and regulatory obligations under PAGCOR licensing conditions, the AMLA, the DPA, and applicable Philippine laws;
• Legitimate interests — processing is necessary for 999ji's legitimate interests in operating a secure, fraud-free, and commercially viable online casino platform, provided such interests are not overridden by your privacy rights; and
• Consent — where 999ji processes personal data for direct marketing purposes, or for the use of non-essential cookies, we rely on your freely given, specific, and informed consent, which may be withdrawn at any time without detriment.

999ji does not sell, rent, or trade your personal data to any third party. We may share your personal information with the following categories of recipients only where necessary and under strict contractual data protection obligations:

• Payment processors and e-wallet providers — GCash (GXI Inc.), Maya (PayMaya Philippines Inc.), BancNet (for QR Ph and InstaPay), and partner banks, to the extent necessary to process your deposits and withdrawals;
• Game content providers — including JILI Gaming, PG Soft, Pragmatic Play, BetterLive, and other licensed providers, who receive session data necessary to deliver and audit game outcomes;
• Identity verification services — third-party KYC providers engaged to assist with document verification and liveness checks, operating under data processing agreements;
• Regulatory and law enforcement authorities — including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and Philippine law enforcement agencies, where disclosure is required by law, court order, or valid regulatory demand; and
• IT and platform infrastructure providers — cloud hosting, content delivery, and cybersecurity service providers who process data on 999ji's behalf under binding data processing agreements.

999ji uses cookies and similar tracking technologies on the platform to maintain session continuity, prevent fraud, and improve user experience. We use the following categories of cookies:

You may manage your cookie preferences at any time through the cookie settings panel accessible from the platform footer. Note that disabling strictly necessary or security cookies will impair your ability to use the 999ji platform.

999ji implements technical and organisational security measures appropriate to the risk level of the data we process. These measures include:

• 256-bit TLS/SSL encryption on all data transmissions between user devices and 999ji servers;
• Encryption at rest for all personal and financial data stored in 999ji's database systems;
• Access controls and role-based permissions limiting staff access to personal data to only those roles where access is operationally necessary;
• Two-factor authentication (2FA) for all administrative access to systems holding personal data;
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists;
• Incident response procedures aligned with the NPC's mandatory 72-hour breach notification requirement under the DPA; and
• Staff training on data privacy obligations and secure data handling practices.

999ji retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

• Active account data — retained for the duration of the account relationship and for a period of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AMLA transaction record obligations;
• KYC and identity verification documents — retained for a minimum of five (5) years from the date of verification or the date of last transaction, whichever is later, as required under the AMLA;
• Transaction and financial records — retained for five (5) years from the date of the transaction, in compliance with AMLC record-keeping requirements;
• Support communications — retained for three (3) years from the date of the communication, unless the communication relates to an ongoing dispute, in which case it is retained until the dispute is fully resolved; and
• Marketing preferences and consent records — retained for three (3) years from the date of the relevant consent or preference update.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with industry best practices and NPC guidelines.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 999ji. These rights may be exercised by contacting our Data Privacy Officer using the contact details in Section 13:

999ji will respond to all data subject rights requests within thirty (30) calendar days of receipt of a complete and verifiable request. Where a request is complex or numerous, we may extend this period by a further thirty (30) days, of which we will notify you. Exercising your rights will not result in any penalty to your account.

The 999ji Casino platform is strictly restricted to individuals aged 21 years and above in accordance with PAGCOR regulations governing online gambling in the Philippines. 999ji does not knowingly collect or process personal data from individuals under the age of 21.

If 999ji becomes aware that personal data has been collected from an individual who does not meet the minimum age requirement, we will immediately suspend the associated account, delete all personal data relating to that individual (except to the extent required for regulatory reporting), and report the incident to PAGCOR as required.

If you are a parent or guardian and have reason to believe your child or a minor in your care has created a 999ji account, please contact our Data Privacy Officer immediately using the contact details in Section 13.

999ji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material — particularly changes that expand the categories of data we collect or the purposes for which we process it — we will notify active account holders via email at least fourteen (14) calendar days before the updated Policy takes effect.

The date of the most recent revision is always displayed at the top of this page under "Last Updated." Your continued use of the 999ji platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you must cease using the platform and request account closure before the effective date.

We recommend reviewing this Policy periodically. Previous versions of this Policy may be requested from our Data Privacy Officer.

For any questions, concerns, or formal requests relating to this Privacy Policy or the exercise of your data privacy rights under the Philippine DPA, please contact the 999ji Data Privacy Officer through the following channels:

This Privacy Policy was last reviewed and updated on 1 January 2026 (Version 3.2). This version supersedes all prior versions of the 999ji Casino Privacy Policy.