9phl Casino Privacy Policy – How We Handle Your Personal Data

1 Introduction

This Privacy Policy ("Policy") describes how 9phl ("9phl," "we," "us," or "our"), the operator of the online gaming platform accessible at https://9phl.cam ("the Platform"), collects, processes, stores, and protects the personal data of individuals who register for, access, or use the Platform ("you," "Player," or "User").

9phl operates under a license issued by the Philippine Amusement and Gaming Corporation ("PAGCOR") and is committed to the responsible handling of personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission ("NPC").

This Policy should be read alongside 9phl's Terms and Conditions and Responsible Gaming Policy, which are available on this website.

2 Data Controller

For the purposes of the Data Privacy Act of 2012, 9phl is the Personal Information Controller ("PIC") in respect of the personal data processed through the Platform. As PIC, 9phl determines the purposes and means by which personal data is collected and processed, and is responsible for ensuring that all processing activities comply with applicable Philippine data privacy law.

Where 9phl engages third-party service providers (such as payment processors, identity verification services, or game software providers) to process personal data on its behalf, those parties act as Personal Information Processors ("PIPs") and are contractually bound to process data only as instructed by 9phl and in accordance with applicable law.

3 Personal Data We Collect

9phl collects personal data that is necessary to provide its services, meet regulatory obligations, and maintain account security. The categories of personal data collected include:

3.1 Registration and Identity Data

• Full legal name as it appears on a valid Philippine government-issued ID;
• Date of birth (used to verify the 21+ age requirement);
• Registered mobile number (Philippine network);
• Username and encrypted account credentials.

3.2 Identity Verification (KYC) Data

• Scanned copies or photographs of government-issued IDs (Philippine Passport, SSS Card, PhilHealth ID, Voter's ID, Driver's License, or equivalent);
• Selfie or liveness verification images, where required;
• Proof of address documentation, where applicable.

3.3 Financial and Transaction Data

• Registered GCash or Maya account numbers linked to your 9phl account;
• Bank account details (BPI, BDO, Metrobank) where bank transfer is used;
• Deposit and withdrawal transaction records, amounts, and timestamps;
• Cryptocurrency wallet addresses where USDT TRC20 or Coins.ph transactions are made.

3.4 Gameplay and Activity Data

• Game session records, bet history, win and loss records;
• Bonus and promotion participation history;
• Login timestamps, session durations, and device information;
• Responsible gaming tool settings (deposit limits, session timers, self-exclusion status).

3.5 Technical and Device Data

• IP address and approximate geographic location derived therefrom;
• Device type, operating system, and browser version;
• Cookie identifiers and session tokens (see Section 9).

3.6 Communications Data

• Records of customer support interactions (live chat transcripts, support ticket contents);
• SMS and email communication records relating to account activity.

4 How We Collect Your Data

9phl collects personal data through the following channels:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or update your account settings;
• Automatically — through cookies, session tracking, and server logs when you access and use the Platform (see Section 9 for full cookie details);
• From third parties — where identity verification is conducted by a licensed KYC service provider, or where fraud and AML screening is performed by a compliance technology partner acting as a PIP under contract with 9phl;
• From payment providers — transaction confirmation data from GCash, Maya, BPI, BDO, Metrobank, and other integrated payment partners, limited to information necessary to process and reconcile transactions.

5 Purpose & Legal Basis for Processing

9phl processes personal data on the following legal bases under the Data Privacy Act of 2012:

5.1 Performance of a Contract

The majority of data processing at 9phl is necessary for the performance of the contract between 9phl and the Player — that is, the delivery of online gaming services, processing of financial transactions, and management of the Player account as described in the Terms and Conditions.

5.2 Legal Obligation

Certain data processing is required to comply with legal obligations imposed on 9phl by PAGCOR, the Anti-Money Laundering Council ("AMLC"), and the National Privacy Commission. This includes identity verification (KYC), transaction monitoring, and suspicious activity reporting.

5.3 Legitimate Interests

9phl processes technical and device data, gameplay analytics, and security logs on the basis of its legitimate interests in operating a secure, fraud-free gaming platform and improving service quality for all players. These legitimate interests are balanced against your rights and do not override them.

5.4 Consent

Where 9phl sends promotional SMS or email communications, this is done only on the basis of your explicit opt-in consent at the time of registration or subsequently through account settings. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Third-Party Disclosure

9phl does not sell your personal data. Personal data is shared with third parties only in the following circumstances and only to the extent necessary:

• Payment processors — GCash, Maya, BPI, BDO, Metrobank, 7-Eleven, and cryptocurrency processors receive the transaction data necessary to execute and confirm deposits and withdrawals;
• KYC and identity verification partners — accredited third-party providers who perform document verification and liveness checks as part of the account verification process, acting as PIPs under contract;
• Game software providers — licensed game studios whose software is integrated into the 9phl Platform may receive anonymized or pseudonymized gameplay session data for technical operation of their games;
• Regulatory authorities — PAGCOR, the AMLC, and the NPC may receive personal data in response to lawful requests, regulatory reporting obligations, or where 9phl is required by law to disclose;
• Law enforcement — where required by a valid court order or lawful directive from a Philippine law enforcement authority.

7 Data Retention

9phl retains personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable law, whichever is longer:

• Active account data — retained for the duration of the account's active status;
• Transaction and financial records — retained for a minimum of five (5) years following the transaction date, in compliance with AML reporting obligations under Philippine law;
• KYC documents — retained for a minimum of five (5) years from the date of account closure or the date of the most recent transaction, whichever is later;
• Responsible gaming records — self-exclusion records are retained for the full exclusion period plus a minimum of five (5) years to prevent re-registration during the exclusion window;
• Support communications — retained for a minimum of two (2) years from the date of the last interaction.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that renders re-identification impossible.

8 Security Measures

9phl implements appropriate technical and organizational security measures to protect personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between the Platform and the user's device;
• Encryption at rest for stored personal data and financial records;
• Role-based access controls ensuring that personal data is accessible only to personnel with a legitimate operational need;
• Multi-factor authentication requirements for internal systems containing personal data;
• Regular third-party penetration testing and security audits;
• Incident response procedures aligned with NPC breach notification requirements.

9 Cookies & Tracking Technologies

9phl uses cookies and similar tracking technologies to operate the Platform, maintain session security, and analyze usage patterns. The following cookie categories are used:

• Strictly necessary cookies — required for the Platform to function, including session authentication tokens and security cookies. These cannot be disabled without affecting core functionality;
• Functional cookies — store your preferences such as language settings, remembered login state (where "Remember Me" is selected), and display preferences;
• Analytics cookies — used to understand how Players navigate the Platform (e.g., pages visited, session duration), enabling 9phl to improve the user experience. Analytics data is aggregated and pseudonymized;
• Security and fraud prevention cookies — detect and prevent fraudulent logins, bot activity, and account takeover attempts.

9phl does not use third-party advertising or behavioral tracking cookies. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair the functionality of the Platform.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 9phl. You may exercise these rights by contacting our Data Protection Officer (see Section 14).

9phl will respond to all valid data subject rights requests within fifteen (15) calendar days of receipt. Where a request requires additional verification or involves a complex matter, 9phl may extend this period by a further thirty (30) days with written notice. All requests must be submitted with sufficient information to verify the identity of the requesting party.

If you believe that 9phl has not handled your personal data in accordance with the DPA, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11 Minors & Age Policy

The 9phl Platform is strictly restricted to individuals who are twenty-one (21) years of age or older. 9phl does not knowingly collect personal data from individuals under this age. Date of birth is collected at registration and verified as part of the KYC process for this purpose.

Parents and guardians are encouraged to monitor minor children's internet activity and to use parental control software to restrict access to gaming and gambling-related content.

12 International Data Transfers

Where personal data is transferred outside the Philippines — for example, to a game software provider or technology infrastructure partner whose servers are located abroad — 9phl ensures that such transfers are subject to appropriate safeguards in accordance with the DPA and NPC regulations. These safeguards include:

• Binding contractual data processing agreements with all overseas PIPs that impose standards equivalent to those required under Philippine data privacy law;
• Transfer impact assessments where required by the nature of the data or the destination jurisdiction;
• Restriction of transferred data to the minimum scope necessary for the service being provided.

13 Updates to This Privacy Policy

9phl reserves the right to update this Privacy Policy at any time to reflect changes in its data processing practices, applicable law, or regulatory guidance. Material changes will be communicated to registered Players via SMS to their registered Philippine mobile number and/or by prominent notice on the Platform, with a minimum of seven (7) days' notice before the revised Policy takes effect.

The "Effective Date" at the top of this Policy indicates when the current version came into force. Continued use of the 9phl Platform after the effective date of any revision constitutes acceptance of the updated Policy.

14 Contact & Data Protection Officer

9phl has designated a Data Protection Officer ("DPO") in accordance with the requirements of the Data Privacy Act of 2012. If you wish to exercise any of your data subject rights, have a question about how 9phl handles your personal data, or wish to raise a privacy concern, please contact the 9phl DPO:

This Privacy Policy was last updated on 1 January 2026. The version published at https://9phl.cam/privacy-policy is the current operative version.