Privacy Policy – p989 Casino Philippines

1 Data Controller

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, p989 acts as the Personal Information Controller (PIC) in respect of all personal data collected through the Platform. This means p989 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

Where p989 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, and cloud infrastructure partners — those parties act as Personal Information Processors (PIPs) and are bound by data processing agreements that require them to process your data only on p989's documented instructions and in compliance with applicable Philippine data protection law.

2 Personal Data We Collect

p989 collects the following categories of personal data from players and prospective players. We collect only what is necessary for the specific purposes described in Section 4 of this Policy.

Category	Examples	Required?
Identity Data	Full legal name, date of birth, nationality, government-issued ID number (e.g., Philippine National ID, passport, driver's licence, SSS/GSIS card)	Yes
Contact Data	Email address, mobile number, residential address (city, province, postal code)	Yes
Account Data	Username, hashed password, account preferences, communication preferences	Yes
Financial Data	GCash account reference, PayMaya reference, BPI/BDO/Metrobank account details (masked), transaction history, deposit and withdrawal records	Yes
Verification Data	Copies of government-issued ID documents, selfie photographs for liveness checks, source-of-funds documentation	Conditional
Technical Data	IP address, device type, browser type and version, operating system, session timestamps, login history	Automatic
Usage Data	Games played, bet amounts, session duration, game preferences, bonus usage history	Automatic
Communications Data	Support chat transcripts, email correspondence, feedback submissions	When applicable

              ℹ️ Sensitive Personal Information: Where p989 collects
              sensitive personal information as defined under the Data Privacy Act of 2012
              (such as government ID numbers), we apply heightened security controls and
              process such data only to the extent strictly necessary for identity
              verification and regulatory compliance purposes.
            

3 How We Collect Your Data

p989 collects personal data through the following means:

Direct collection: Data you provide when registering an Account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
Automated collection: Technical and usage data collected automatically when you access and interact with the Platform, including through cookies and similar tracking technologies (see Section 8).
Third-party sources: Identity and fraud-check data received from our licensed identity verification partners; payment confirmation data received from GCash, PayMaya, BPI, BDO, and Metrobank; and publicly available information used for enhanced due diligence where required by anti-money laundering regulations.

4 Purpose & Legal Basis for Processing

p989 processes your personal data only where a lawful basis exists under the Data Privacy Act of 2012. The following table sets out the primary purposes for which we process your data and the corresponding legal basis:

Purpose	Legal Basis
Account registration and management	Performance of contract
Age and identity verification (KYC)	Legal obligation; legitimate interest
Processing deposits and withdrawals	Performance of contract
Anti-money laundering (AML) and fraud prevention	Legal obligation; legitimate interest
Responsible gaming monitoring and intervention	Legal obligation; legitimate interest
Customer support and dispute resolution	Performance of contract; legitimate interest
Platform security and fraud detection	Legitimate interest
Personalisation of gaming experience	Consent; legitimate interest
Marketing communications (opt-in only)	Consent
Regulatory reporting to PAGCOR and other authorities	Legal obligation
Analytics and Platform improvement	Legitimate interest

              📣 Marketing Opt-Out: If you have consented to receive
              marketing communications from p989 (e.g., promotional emails, SMS alerts
              about bonuses), you may withdraw that consent at any time by updating your
              Account communication preferences or by contacting our support team.
              Withdrawal of marketing consent does not affect the lawfulness of processing
              carried out prior to withdrawal.
            

5 Data Sharing & Disclosure

p989 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share your personal data only in the following limited circumstances:

Service providers and processors: We share data with trusted third-party service providers who assist us in operating the Platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, cloud hosting providers, and customer support platform providers. All such providers are bound by data processing agreements.
Regulatory and law enforcement authorities: We may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities where required by law, court order, or regulatory direction.
Fraud prevention and security: We may share data with fraud prevention agencies and industry bodies where necessary to detect, prevent, or investigate fraud, money laundering, or other criminal activity.
Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of p989's assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.
With your consent: We may share your data with other parties where you have given your explicit prior consent to such sharing.

6 Data Retention

p989 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

Account and identity data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in compliance with PAGCOR and AMLC record-keeping requirements.
Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required under Philippine anti-money laundering regulations.
Support communications: Retained for three (3) years from the date of the last communication, or longer if related to an ongoing dispute or regulatory matter.
Marketing consent records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, as evidence of the consent given.
Technical and usage logs: Retained for up to twelve (12) months for security and fraud detection purposes, unless a longer period is required for an active investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with p989's data disposal procedures.

7 Data Security

p989 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

Encryption: All data transmitted between your device and the p989 Platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest, including financial records and identity documents, is encrypted using AES-256 encryption.
Access controls: Access to personal data within p989's systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular data protection training.
Password security: Account passwords are stored as salted cryptographic hashes. p989 never stores passwords in plain text and cannot retrieve your password — only reset it.
Fraud monitoring: p989 employs automated fraud detection systems that monitor Account activity for suspicious patterns, including unusual login locations, rapid transaction sequences, and other indicators of Account compromise.
Penetration testing: p989's Platform undergoes regular security assessments and penetration testing by independent security professionals.

              ⚠️ Your Responsibility: While p989 takes extensive measures
              to protect your data, the security of your Account also depends on you. Use
              a strong, unique password for your p989 Account, do not share your login
              credentials with anyone, and contact support immediately if you suspect
              unauthorised access to your Account.
            

8 Cookies & Tracking Technologies

p989 uses cookies and similar tracking technologies on the Platform to enhance your experience, maintain session security, and gather analytics data. The following types of cookies are used:

Strictly necessary cookies: Essential for the Platform to function correctly. These include session authentication cookies and security tokens. These cookies cannot be disabled without affecting Platform functionality.
Functional cookies: Remember your preferences such as language settings, game display preferences, and responsible gaming tool configurations.
Analytics cookies: Collect anonymised data about how players use the Platform — which games are most popular, how long sessions last, and where players encounter difficulties. This data helps us improve the Platform.
Marketing cookies: Used only where you have given explicit consent, to deliver relevant promotional content within the Platform. p989 does not use third-party advertising networks.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform. For more information on managing cookies in your browser, refer to your browser's help documentation.

9 Your Data Subject Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in respect of your personal data held by p989. To exercise any of these rights, please contact our Data Protection Officer (see Section 13):

👁️

Right to Be Informed

You have the right to be informed of how your personal data is being collected and processed — which is the primary purpose of this Policy.

📂

Right to Access

You may request a copy of the personal data p989 holds about you, along with information about how it is being processed.

✏️

Right to Rectification

You may request correction of any inaccurate or incomplete personal data held about you. Some corrections can be made directly in your Account settings.

🗑️

Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.

🚫

Right to Object

You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interest.

📦

Right to Data Portability

You may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.

⏸️

Right to Restrict Processing

You may request that p989 restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.

⚖️

Right to Lodge a Complaint

You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

              ⏱️ Response Timeframe: p989 will respond to all verified
              data subject rights requests within fifteen (15) business days
              of receipt. Complex requests may require up to thirty (30) business days,
              in which case we will notify you of the extension and the reason for it.
            

10 Minors & Age Policy

The p989 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. p989 does not knowingly collect personal data from individuals under the age of 21.

If p989 discovers or is notified that personal data has been collected from a person under 21 years of age, we will immediately close the associated Account, delete the personal data collected, and take appropriate action in accordance with our Terms and Conditions and applicable law.

🔞 21+ Only: If you are a parent or guardian and believe that a minor in your care has registered an Account on p989, please contact our support team immediately at [email protected]. We will investigate and take prompt action.

11 Cross-Border Data Transfers

In the course of operating the Platform, p989 may transfer your personal data to service providers located outside the Philippines — for example, cloud infrastructure providers or identity verification partners whose servers are located in other jurisdictions.

Where such transfers occur, p989 ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require the recipient to apply data protection standards equivalent to those required under Philippine law. p989 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate additional safeguards.

12 Changes to This Policy

p989 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where changes are material — meaning they significantly affect how we process your personal data or the rights available to you — p989 will provide advance notice via email to your registered address or via a prominent notice on the Platform, at least fourteen (14) days before the changes take effect.

Your continued use of the Platform following the effective date of any amended Policy constitutes your acknowledgement of the updated terms. If you do not agree to the amended Policy, you may close your Account in accordance with the Terms and Conditions.

13 Contact Us & Data Protection Officer

p989 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO using the details below:

📧 Data Protection Officer — p989
Email: [email protected]
Subject line: Data Privacy Request – [Your Full Name]
Response time: Within 15 business days

If you are not satisfied with p989's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012.

p989 Privacy Policy

Table of Contents