9ph10 Privacy Policy

This Privacy Policy is published by 9ph10 ("9ph10," "we," "us," "our") and applies to all personal data collected, processed, and stored in connection with your use of the 9ph10 website at 9ph10.org and all associated services, features, and products (collectively, "the Platform").

9ph10 is committed to protecting the privacy of every Filipino player and visitor who interacts with our platform. This Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and what rights you have regarding your data.

By accessing the 9ph10 platform, creating an account, or using any of our services, you acknowledge that you have read and understood this Privacy Policy. This Policy forms part of the broader agreement between you and 9ph10 and should be read alongside our Terms & Conditions.

9ph10 collects personal data through various touchpoints across your interaction with the platform. The categories of data we collect are described below:

2.1 Registration Data

When you create a 9ph10 account, we collect: full legal name, date of birth, Philippine mobile number, and a chosen password (stored in hashed form — we never store plaintext passwords). This data is required to create and identify your account.

2.2 Identity Verification (KYC) Data

To comply with Philippine financial regulations and to enable withdrawal functionality, we collect: copies of government-issued Philippine photo identification (e.g., PhilSys National ID, UMID, driver's licence, passport, voter's ID), proof of address where required, and a contemporaneous selfie photograph for identity matching. Source-of-funds documentation may be requested in connection with higher-volume transaction activity.

2.3 Financial Transaction Data

Records of all deposits and withdrawals, including: transaction amounts, dates and times, payment method identifiers (e.g., GCash account reference, BPI/BDO account details in masked form), transaction status, and transaction reference numbers. Full financial account numbers are not stored by 9ph10 — they are processed directly by our regulated payment processing partners.

2.4 Gaming Activity Data

Records of your gaming activity on the platform, including: games played, bet amounts, outcomes, session timestamps, bonus usage, and VIP tier progression. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting obligations.

2.5 Technical and Device Data

When you access the 9ph10 platform, our systems automatically collect technical information including: IP address, device type, operating system, browser type and version, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud detection, and platform performance optimisation.

2.6 Communications Data

Records of communications between you and 9ph10, including live chat transcripts, support ticket content, and any correspondence submitted via email. These records are retained for quality assurance, training, and dispute resolution purposes.

2.7 Responsible Gaming Data

Where you use 9ph10's responsible gaming tools — setting limits, activating cool-off periods, or requesting self-exclusion — we record these interactions and the settings you have applied. This data is treated with additional sensitivity and used solely for the purpose of giving effect to your responsible gaming choices.

9ph10 uses the personal data we collect for the following purposes:

9ph10 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Algorithmic fraud and AML screening flags are always reviewed by trained compliance staff before any account action is taken.

Under the Data Privacy Act of 2012 (RA 10173), 9ph10 processes personal data on the following legal bases:

• Contractual necessity: Processing necessary to perform the contract between you and 9ph10 — including account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing necessary to comply with applicable Philippine law, including PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) obligations, and the Data Privacy Act itself.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming oversight — where such interests are not overridden by your privacy rights.
• Consent: For processing activities not covered by the above bases — such as certain marketing communications — we will seek your explicit consent and provide you with a clear mechanism to withdraw it at any time.

9ph10 does not sell your personal data. We share personal data only in the following limited circumstances:

• Payment processors: GCash, Maya, BPI, BDO, and other payment service providers receive the transaction and identification data necessary to process your deposits and withdrawals. These providers process data under their own privacy policies and applicable Philippine payment regulations.
• Gaming software providers: Game content providers receive pseudonymised player identifiers and game session data to deliver game content and calculate outcomes. Full personal identity data is not shared with game providers.
• KYC and fraud detection service providers: Third-party identity verification services receive KYC document data to perform identity checks on our behalf. These providers are contractually bound to process data solely for the purposes of identity verification.
• Regulatory authorities: 9ph10 is required by law to report certain transaction types and suspicious activity to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other relevant Philippine government bodies. We comply fully with all such reporting obligations.
• Legal proceedings: Where required by a valid court order, subpoena, or other lawful legal process, 9ph10 may disclose personal data to law enforcement or judicial authorities.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of 9ph10's assets, player data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections.

In all cases where data is shared with third-party processors, 9ph10 requires those parties to maintain appropriate data security standards and to process personal data only for the specified purpose.

The 9ph10 platform uses cookies and similar technologies to support platform functionality, enhance security, and improve the player experience. The types of cookies we use are:

• Strictly necessary cookies: Essential for the platform to function — managing your login session, maintaining your account state, and enabling secure transactions. These cannot be disabled without impairing platform functionality.
• Functional cookies: Remember your preferences such as language settings, display preferences, and lobby customisation choices.
• Analytics cookies: Help us understand how players navigate and use the platform — page visit frequency, feature usage, and session duration — in aggregated, anonymised form to guide platform improvements.
• Security cookies: Support fraud detection and bot prevention systems. These monitor session anomalies and unusual access patterns to protect your account.

9ph10 does not use third-party advertising or behavioural targeting cookies. We do not allow third-party advertising networks to place cookies on the 9ph10 platform.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the platform, including logging in and playing games.

9ph10 retains personal data for the periods set out below, after which data is securely deleted or anonymised unless a longer retention period is required by applicable law:

• Account and KYC data: Retained for the duration of your active account relationship with 9ph10, plus a minimum of 5 years following account closure, as required by AMLA and PAGCOR regulations.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, in accordance with Philippine financial record-keeping requirements.
• Gaming activity records: Retained for a minimum of 3 years, used for dispute resolution, regulatory reporting, and responsible gaming monitoring.
• Communications records: Support communications are retained for 2 years from the date of the interaction, or longer where relevant to an unresolved dispute.
• Technical and device data (logs): System logs are retained for 90 days for security monitoring purposes, after which they are automatically purged.
• Responsible gaming records: Self-exclusion and limit records are retained indefinitely to prevent circumvention of self-exclusion orders.

9ph10 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• SSL/TLS encryption for all data in transit between your device and the 9ph10 platform;
• Encryption at rest for sensitive stored data, including KYC documents and payment references;
• Hashed password storage — your password is never stored in plaintext under any circumstances;
• Two-factor authentication (2FA) available for all player accounts to add a second layer of login security;
• Role-based access controls limiting 9ph10 staff access to personal data to those with a legitimate operational need;
• Intrusion detection systems monitoring platform traffic for anomalous patterns indicative of breach attempts;
• Regular security audits and penetration testing by qualified security professionals.

No data security system is entirely immune from breach. In the event of a personal data breach that presents a risk to your rights and freedoms, 9ph10 will comply with its notification obligations under the Data Privacy Act of 2012, including notifying the National Privacy Commission and affected individuals within the prescribed timeframes.

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by 9ph10:

• Right to be informed: The right to be informed of how your personal data is collected, used, and processed — fulfilled by this Privacy Policy.
• Right of access: The right to request a copy of the personal data 9ph10 holds about you. We will provide this within 15 business days of a verified request.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. Some data elements (e.g., verified KYC data) may require supporting documentation to amend.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to object: The right to object to the processing of your personal data for purposes not strictly necessary for the performance of your contract with 9ph10.
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to lodge a complaint: If you believe 9ph10 has mishandled your personal data, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of these rights, please contact 9ph10's Data Protection Officer at [email protected] with the subject line "Data Privacy Request." We may require verification of your identity before processing your request.

The 9ph10 platform is strictly for adults aged 21 years and above, consistent with PAGCOR's online gaming age requirements. 9ph10 does not knowingly collect personal data from individuals below the age of 21.

9ph10 applies mandatory age verification procedures during account registration and KYC verification. Any account found to have been registered by an individual below 21 years of age will be immediately closed and any associated balance forfeited.

If you have reason to believe that a minor has registered an account on the 9ph10 platform, please contact us immediately at [email protected]. 9ph10 will investigate and take appropriate action promptly, including reporting the matter to PAGCOR as required.

The 9ph10 platform may contain links to third-party websites or services — for example, links to game provider information pages or payment processor portals. These third-party sites operate under their own privacy policies, which are independent of and not controlled by 9ph10.

9ph10 is not responsible for the privacy practices, content, or security of any third-party website. We recommend that you review the privacy policy of any third-party site you visit before submitting any personal information to that site.

9ph10 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made:

• The "Effective Date" at the top of this Policy will be updated;
• A notification will be displayed to logged-in users when they next access the platform;
• Where the changes materially affect your rights, we will send a notification to your registered mobile number before the changes take effect.

Continued use of the 9ph10 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not accept the revised Policy, you may request account closure by contacting support.

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please contact 9ph10's designated Data Protection Officer:

• Email: [email protected] (subject: "Data Privacy Request")
• Live Chat: Available 24/7 via the platform after login
• Response time: We aim to acknowledge all privacy enquiries within 2 business days and resolve them within 15 business days

For formal complaints regarding 9ph10's data privacy practices that are not resolved to your satisfaction, you may escalate to the National Privacy Commission (NPC) of the Philippines via the NPC's official website and complaint channels.