999aqq Casino — Privacy Policy & Data Notice

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, the data controller responsible for your personal data is 999aqq Casino, the operator of the online gaming platform accessible at https://999aqq.club ("Platform," "999aqq," "we," "us").

999aqq Casino operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR). All personal data processing activities described in this Privacy Policy are carried out in accordance with 999aqq's PAGCOR licensing obligations, the Data Privacy Act of 2012, and all applicable Philippine legislation including the Anti-Money Laundering Act (AMLA).

999aqq collects personal data in several categories depending on your level of interaction with the Platform. The following table outlines the main categories of personal data 999aqq collects and processes:

999aqq does not collect sensitive personal information as defined under Section 3(l) of RA 10173 (such as racial or ethnic origin, political opinions, or health data) unless expressly required by PAGCOR or AMLA compliance obligations — for example, source-of-funds declarations in connection with transactions above regulatory thresholds.

999aqq collects personal data through the following channels and mechanisms:

• Account registration form — name, mobile number, date of birth, and password;
• KYC verification process — government ID documents, selfie image, address details;
• Payment and withdrawal transactions — GCash, Maya, bank transfer details;
• Support communications — live chat conversations, email correspondence;
• Responsible gaming tool configuration — deposit limits, self-exclusion requests.

• Platform analytics — pages visited, session duration, game play patterns;
• Device and browser fingerprinting for fraud detection and security purposes;
• Cookies and similar tracking technologies as described in Section 9;
• Server logs — IP addresses, login timestamps, geographic access indicators.

• Payment processors (GCash, Maya, BPI, BDO, Metrobank) — transaction confirmation data;
• Identity verification partners — KYC document authentication results;
• PAGCOR exclusion registers — self-exclusion status verification;
• Fraud prevention databases — where applicable to AMLA compliance.

999aqq processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your 999aqq player account, including authentication, password management, and account security.
• KYC & Identity Verification: Verifying your identity and age (21+) as required by PAGCOR licensing conditions and the Anti-Money Laundering Act.
• Payment Processing: Processing deposits and withdrawals via GCash, Maya, and other supported Philippine payment channels.
• Game Operation: Delivering real-money casino games, maintaining accurate game records, and calculating wagering outcomes.
• Regulatory Compliance: Fulfilling mandatory reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory bodies.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, account takeover, multi-accounting, and money laundering.
• Responsible Gaming: Operating deposit limit tools, session timers, self-exclusion registers, and problem gambling detection systems.
• Customer Support: Responding to your support inquiries, resolving disputes, and processing responsible gaming requests.
• Marketing Communications (with consent): Sending promotional offers, bonus notifications, and platform updates where you have consented to receive such communications.
• Platform Improvement: Analysing usage data to improve game selection, platform performance, and user experience.

Under the Data Privacy Act of 2012, 999aqq processes your personal data on the following lawful bases:

• Contractual Necessity: Processing your identity data, contact data, financial data, and gaming data is necessary to perform the contract constituted by the 999aqq Terms and Conditions when you create an account and use the Platform.
• Legal Obligation: KYC verification, AML reporting, PAGCOR regulatory submissions, and responsible gaming compliance are mandatory legal obligations that 999aqq must fulfill as a licensed Philippine online gaming operator.
• Legitimate Interest: Fraud prevention, security monitoring, and platform analytics are processed on the basis of legitimate interests where they do not override your fundamental privacy rights.
• Consent: Marketing communications and optional analytics cookies are processed only where you have provided explicit, informed, and freely withdrawable consent.

999aqq does not sell your personal data. We share personal data only with the following categories of recipients, strictly for the purposes described in this Policy:

• PAGCOR and Philippine Regulatory Bodies: As required by our operating license and applicable Philippine law, including mandatory reports to PAGCOR and the AMLC.
• Payment Processors: GCash (G-Xchange Inc.), Maya (PayMaya Philippines Inc.), BPI, BDO, Metrobank, and other payment service providers — solely to process your deposit and withdrawal transactions.
• Game Providers: Certified game software providers are provided with session data necessary to deliver the games you play. Game providers operate under contractual data processing agreements that restrict their use of your data.
• Identity Verification Partners: Third-party KYC service providers who authenticate government ID documents as part of the PAGCOR-mandated verification process.
• Fraud Prevention Services: Specialist fraud detection providers who help 999aqq identify suspicious activity, multi-accounting, and AML risks.
• Law Enforcement and Courts: Where required by a valid court order, subpoena, or mandatory legal process under Philippine law.

999aqq retains your personal data for as long as is necessary for the purposes for which it was collected, subject to mandatory retention periods imposed by Philippine law:

• Account and KYC Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, as required under PAGCOR licensing conditions and the AMLA.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years following the transaction date, in compliance with AMLA and BIR record-keeping requirements.
• Gaming Records: Individual game session data is retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Support Communications: Live chat transcripts and support ticket records are retained for two (2) years from the date of the interaction.
• Marketing Consent Records: Records of marketing consent and withdrawal of consent are retained for five (5) years as evidence of compliance.

When data is no longer required for the purposes for which it was collected and the applicable mandatory retention period has expired, 999aqq will securely delete or anonymize the data in accordance with recognized data destruction standards.

999aqq implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and 999aqq's servers;
• Encryption of sensitive data at rest, including government ID documents and financial records;
• Role-based access controls limiting internal access to personal data to authorized personnel only;
• Comprehensive audit logging of all internal access to personal data systems;
• Regular security assessments and penetration testing of the 999aqq platform and infrastructure;
• Two-factor authentication (OTP) for player account access on new devices;
• Automatic session timeouts to prevent unauthorized access from unattended devices.

999aqq uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that help the Platform function correctly and allow us to understand how players use 999aqq.

Essential cookies are strictly necessary to operate the 999aqq platform. They maintain your login session, enable the game lobby to function, process your transactions, and apply your responsible gaming settings. Essential cookies cannot be disabled without impairing platform functionality.

With your consent, 999aqq uses analytics cookies to understand how players navigate the platform — which games are most popular, where players encounter difficulties, and how long sessions typically last. This information is used to improve the 999aqq player experience. Analytics cookies are opt-in and can be declined or withdrawn at any time through the cookie preference settings accessible from the Platform.

Marketing or targeting cookies may be used, with your consent, to deliver promotional offers and bonus notifications that are relevant to your game preferences and activity. Marketing cookies are opt-in only. Declining marketing cookies does not affect your ability to access promotions through the 999aqq promotions page.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by 999aqq:

• Right to Be Informed: The right to be informed about how your personal data is collected, used, and shared — which is the primary purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data 999aqq holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request the correction of inaccurate or incomplete personal data. You can update most contact and account details directly through your account settings.
• Right to Erasure: The right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to 999aqq's legal retention obligations under PAGCOR licensing and AMLA requirements.
• Right to Object: The right to object to the processing of your personal data for marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive a copy of the personal data you have provided to 999aqq in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of your rights, please submit a request through the 999aqq live chat support or via email to [email protected]. Include your registered mobile number (not your password) and a description of the right you wish to exercise. 999aqq will respond to verifiable rights requests within thirty (30) days, or within a further thirty (30) days where the complexity of the request requires additional processing time.

If you are not satisfied with how 999aqq has handled your personal data or responded to your rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority for the Data Privacy Act of 2012.

999aqq Casino is strictly intended for use by adults who are twenty-one (21) years of age or older. This age threshold is mandated by PAGCOR regulations applicable to Philippine online gaming operators. 999aqq does not knowingly collect personal data from individuals under the age of 21.

Age verification is conducted as a mandatory step in the KYC process. Accounts where the account holder's age cannot be verified as meeting the 21+ threshold will be suspended pending resolution. If 999aqq determines that personal data has been collected from a person under 21 due to misrepresentation at registration, the account will be permanently closed and all data collected will be deleted, except where retention is required for PAGCOR or AMLA compliance purposes.

Some of 999aqq's third-party service providers — including game software providers and identity verification partners — may process personal data on servers located outside the Philippines. Where personal data is transferred outside the Philippines, 999aqq ensures that such transfers are carried out in compliance with the Data Privacy Act of 2012 and its Implementing Rules, including the requirement that receiving parties provide an adequate level of protection for the transferred data through contractual safeguards.

All cross-border data transfers involving your personal data are subject to data processing agreements that require the receiving party to maintain confidentiality, implement security measures equivalent to those required under Philippine law, and use the data only for the purposes for which it was disclosed.

999aqq may update this Privacy Policy from time to time to reflect changes in our data practices, changes to the Platform, or changes in applicable Philippine law or PAGCOR regulatory requirements. Where material changes are made to this Policy, 999aqq will notify registered players by publishing the updated Policy on the Platform and, where practicable, by sending a notification to your registered mobile number or email address.

The "Effective" date at the top of this Policy indicates when the current version took effect. We encourage you to review this Policy periodically. Your continued use of the 999aqq Platform following the publication of a revised Policy constitutes your acceptance of the changes, to the extent permitted by applicable law.

If you have any questions, concerns, or requests relating to this Privacy Policy or 999aqq's handling of your personal data, please contact us through the following channels:

• Live Chat (Fastest): Available 24/7 through the 999aqq platform interface. Our support team can handle most privacy and data inquiries in real time. For formal rights requests, live chat agents will escalate to the Data Protection Officer.
• Email: [email protected] — For formal privacy requests, data rights exercises, and correspondence directed to the Data Protection Officer. Please mark the subject line "Privacy / Data Request" and include your registered mobile number for account identification purposes.

For complaints that cannot be resolved through 999aqq's internal process, you may contact the National Privacy Commission (NPC) of the Philippines. The NPC's contact information is publicly available through official Philippine government channels.