989ph Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 989ph ("989ph," "we," "us," or "our") — the operator of the online gaming platform at 989ph.club — collects, processes, stores, shares, and protects personal data relating to individuals who visit, register with, or use the 989ph Platform ("you" or "Player").

989ph is committed to handling all personal data responsibly, transparently, and in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), its implementing rules and regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines. This Policy forms part of your agreement with 989ph and should be read alongside our Terms & Conditions.

By registering an account on 989ph, completing the KYC process, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, 989ph is the personal information controller in respect of the personal data you provide when using the Platform. All data processing activities conducted by 989ph are overseen by a designated Data Protection Officer ("DPO"). Inquiries regarding this Policy and requests relating to your personal data rights may be submitted to:

3. Categories of Personal Data We Collect

989ph collects the following categories of personal data from Players, depending on the context in which data is provided:

989ph does not collect sensitive personal information (as defined under the DPA) beyond what is strictly necessary for KYC and regulatory compliance purposes. 989ph does not collect biometric data, health data, or data relating to minors.

4. How We Collect Your Personal Data

4.1 Data You Provide Directly

The majority of personal data 989ph holds is provided directly by you during: account registration (mobile number, date of birth); KYC verification (government ID upload, name, identity number); payment transactions (e-wallet details, bank account references); and communications with 989ph support staff.

4.2 Data Collected Automatically

When you access the 989ph Platform, technical data is collected automatically through server logs, cookies, and similar tracking technologies. This includes your IP address, device identifiers, browser information, pages visited, session duration, and in-game activity. This data is used primarily for security, fraud prevention, and platform performance monitoring.

4.3 Data from Third Parties

989ph may receive personal data about you from third-party sources, including: payment service providers (GCash, Maya, BPI, BDO, Metrobank) who confirm transaction status; identity verification services used to cross-check KYC documents; and government or regulatory databases accessed for AML screening purposes.

5. Purposes of Processing & Legal Basis

6. Sharing Your Personal Data

989ph does not sell your personal data to any third party. Your data may be shared with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: GCash (GXI), Maya (PayMaya Philippines), and banking partners (BPI, BDO, Metrobank, UnionBank) solely to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party services that assist 989ph in verifying the authenticity of government-issued identification documents.
• IT and infrastructure providers: Cloud hosting, content delivery, and security service providers who process data on behalf of 989ph under strict data processing agreements.
• Game content providers: JILI, Pragmatic Play, PG Soft, MG Live, and other licensed game studios receive limited technical session data necessary to deliver game content and resolve technical disputes.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and Philippine law enforcement agencies, where disclosure is required by law or court order.

All third-party service providers with whom 989ph shares personal data are required to maintain confidentiality, implement appropriate security measures, and process data only in accordance with 989ph's documented instructions.

7. International Data Transfers

Some of 989ph's technology partners and game providers operate infrastructure outside the Philippines. Where personal data is transferred to a jurisdiction not recognized by the NPC as providing adequate data protection, 989ph implements appropriate safeguards including contractual clauses that impose equivalent data protection obligations on the recipient, consistent with the requirements of the Data Privacy Act of 2012 and its implementing rules.

Players who require further information about specific international transfer mechanisms applicable to their data may submit a written request to the 989ph DPO at the contact details provided in Section 2.

8. Data Retention

989ph retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods mandated by applicable law:

• KYC and identity documents: Five (5) years from account closure, as required under Philippine AML regulations.
• Transaction records (deposits, withdrawals, bets): Five (5) years from the date of the transaction, or longer if required by a regulatory authority.
• Account data (registration information, gaming history): Duration of account activity plus five (5) years following permanent account closure.
• Support and communications records: Three (3) years from the date of the interaction.
• Self-exclusion records: Retained indefinitely to prevent re-registration during the exclusion period and to comply with responsible gaming obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification.

9. Cookies & Similar Tracking Technologies

989ph uses cookies and similar technologies (local storage, session tokens, pixel tags) on the Platform for the following purposes:

• Essential cookies: Required for Platform functionality — including maintaining your login session, remembering your responsible gaming settings, and processing transactions securely. These cannot be disabled without impairing Platform functionality.
• Analytics cookies: Used to understand aggregate patterns of Platform usage — which games are most popular, how players navigate between sections, session lengths — to guide product improvements. Data collected is aggregated and anonymized.
• Security cookies: Used to detect and prevent fraud, bot activity, and unauthorized access attempts.

989ph does not use third-party advertising cookies or cross-site tracking cookies. You may manage cookie preferences through your browser settings; however, disabling essential cookies will affect your ability to use the 989ph Platform normally.

10. Children & Minors

The 989ph Platform is strictly intended for individuals who are at least 21 years of age, in compliance with Philippine gambling laws. 989ph does not knowingly collect personal data from any person under 21. If 989ph determines that an account was registered by, or personal data was inadvertently collected from, an individual under 21, 989ph will immediately suspend the account, delete or anonymize the associated personal data, and take appropriate remedial action.

If you believe that a minor may have created an account on 989ph, please contact support immediately at the email address provided in Section 2.

11. Security Measures

989ph implements a multi-layered approach to personal data security, including the following technical and organisational measures:

• All data transmitted between your device and 989ph servers is encrypted using TLS 1.2 or higher.
• Player passwords are stored using one-way cryptographic hashing — 989ph cannot retrieve your plain-text password.
• Access to personal data within 989ph's infrastructure is restricted on a strict need-to-know basis, with access logs maintained and regularly reviewed.
• Regular vulnerability assessments and penetration testing are conducted on the Platform infrastructure.
• Incident response procedures are in place to detect, contain, and report personal data breaches to the NPC within 72 hours of discovery, where required by the DPA.

While 989ph takes all reasonable steps to protect your personal data, no system is completely immune to security threats. You share responsibility for account security by maintaining a strong, unique password and enabling two-factor authentication on your 989ph account.

12. Your Rights Under the Data Privacy Act

As a data subject under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by 989ph:

• Right to be Informed: The right to be notified of the processing of your personal data — this Policy fulfils that obligation.
• Right of Access: The right to request a copy of the personal data 989ph holds about you, together with information on how it is processed.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected.
• Right to Erasure / Blocking: The right to request deletion or blocking of your personal data where processing is no longer necessary, was unlawfully processed, or you have withdrawn consent — subject to legal retention obligations that override this right.
• Right to Object: The right to object to processing based on legitimate interest, in particular for direct marketing purposes.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to have it transmitted to another data controller where technically feasible.
• Right to Damages: The right to claim compensation for any damage suffered as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data.

To exercise any of the above rights, submit a written request to the 989ph DPO at the email address in Section 2, identifying yourself and specifying the right you wish to exercise. 989ph will respond within fifteen (15) business days. Responses to access, portability, and rectification requests are provided free of charge for one request per calendar year; subsequent requests within the same year may incur a reasonable administrative fee.

13. Marketing Communications

989ph may send you promotional communications — bonus offers, game launch announcements, tournament invitations — via SMS to your registered Philippine mobile number, subject to your having provided valid consent during registration or at any subsequent point through your account settings.

You may withdraw consent to marketing communications at any time by: updating your notification preferences in your 989ph account settings panel; or submitting an opt-out request to the DPO contact in Section 2. Withdrawal of marketing consent does not affect the lawfulness of processing that occurred prior to withdrawal, and does not affect service-related communications (such as transaction confirmations, security alerts, and account status updates) which are sent on the basis of contractual necessity rather than consent.

14. Amendments to This Policy

989ph reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance from the NPC or PAGCOR, changes to our data processing activities, or improvements to our data governance practices. When material changes are made, 989ph will notify registered Players via a prominent notice on the Platform and, where practicable, by SMS to the registered mobile number. The "Last Updated" date at the top of this Policy indicates the effective date of the current version. Continued use of the Platform after the effective date of any revision constitutes acknowledgement of the updated Policy.

15. Contact & Complaints

For all privacy-related enquiries, data subject rights requests, or complaints regarding 989ph's data processing practices, please contact:

If you believe that 989ph has not adequately addressed your privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC). The NPC is the supervisory authority responsible for enforcing the Data Privacy Act of 2012. NPC contact details are publicly available on the official NPC website.