p799 Casino — Privacy Policy

1. Introduction

p799 Casino ("p799," "we," "us," or "our") operates the online casino and sports betting platform accessible at p799.asia and all associated digital interfaces (collectively, the "Platform"). The protection of your personal data is a matter of the highest priority for p799.

This Privacy Policy ("Policy") describes the personal data we collect from you, how we collect it, the purposes for which we process it, with whom we share it, how long we retain it, the security measures we apply, and the rights you hold as a data subject under Philippine law.

By registering an account on the Platform or otherwise using the Services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform and request account closure.

This Policy should be read in conjunction with the p799 Terms & Conditions, which also governs your use of the Platform.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and its implementing rules, p799 Casino is the personal information controller in respect of your personal data. p799 determines the purposes and means of processing personal data collected through the Platform.

p799 has designated a Data Protection Officer ("DPO") responsible for overseeing data privacy compliance. Contact details for the DPO are provided in Section 14 of this Policy.

3. Personal Data We Collect

p799 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include:

p799 does not collect sensitive personal information (as defined under the DPA, such as racial origin, political opinions, health information, or religious beliefs) unless specifically required for responsible gaming self-exclusion procedures or mandated by applicable law.

4. How We Collect Your Data

p799 collects personal data through the following means:

• Direct provision: Information you submit during account registration, KYC verification, payment setup, support requests, and form submissions on the Platform.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, session logs, and server records.
• Third-party sources: Identity verification and fraud prevention data received from KYC service providers; payment data received from payment processors including GCash, PayMaya, BPI, BDO, and Visa networks in connection with your transactions.
• Regulatory sources: Information provided or required by PAGCOR or other competent Philippine government agencies in the course of regulatory compliance.

5. Legal Basis for Processing

p799 processes your personal data on the following legal grounds as recognized under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you, including account management, gameplay facilitation, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including anti-money-laundering (AML) obligations under R.A. 9160 as amended, PAGCOR compliance requirements, and tax reporting obligations.
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by your rights and freedoms.
• Consent: Processing based on your specific, informed consent, including for marketing communications where you have opted in.

6. How We Use Your Personal Data

p799 uses your personal data for the following purposes:

• To create and manage your p799 Casino account;
• To verify your identity and age (21+ requirement) in accordance with KYC obligations;
• To process deposits and withdrawals via GCash, PayMaya, bank transfer, and other approved payment channels;
• To administer gameplay, calculate winnings, and maintain game integrity;
• To detect and prevent fraud, money laundering, and other prohibited activity on the Platform;
• To provide customer support and respond to your enquiries and complaints;
• To enforce the p799 Terms & Conditions and other applicable policies;
• To send you account notifications, security alerts, and, where you have consented, promotional communications;
• To operate responsible gaming tools, including deposit limit management and self-exclusion processing;
• To comply with reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other competent Philippine authorities;
• To improve the Platform, diagnose technical issues, and conduct internal analytics.

7. Data Sharing and Disclosure

7.1 Service Providers

p799 shares personal data with trusted third-party service providers who process data on our behalf for specific operational purposes, including identity verification providers, payment processors, cloud hosting providers, customer support platform operators, and cybersecurity service providers. All such providers are contractually bound to process your data only on p799's instructions and to maintain appropriate security standards.

7.2 Regulatory and Law Enforcement Disclosure

p799 may disclose your personal data to PAGCOR, the AMLC, the NPC, the BIR, the National Bureau of Investigation (NBI), Philippine National Police (PNP), or other competent authorities where required by law, court order, or regulatory direction. p799 is committed to fulfilling all mandatory disclosure obligations under Philippine law.

7.3 No Sale of Personal Data

p799 does not sell, rent, or trade your personal data to any third party for their own independent marketing or commercial purposes. Any data sharing is strictly limited to the operational and legal purposes described in this Policy.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of p799's assets, your personal data may be transferred as part of that transaction. You will be notified of any such transfer and the identity of the new data controller via email or in-platform notification.

8. Data Retention

p799 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and KYC records: Retained for a minimum of five (5) years following account closure, as required under AML regulations;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required for tax and AML reporting purposes;
• Support and complaint records: Retained for three (3) years from closure of the relevant case;
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year for compliance documentation.

Upon expiry of the applicable retention period, personal data will be securely destroyed or anonymized in accordance with p799's data disposal procedures.

9. Data Security

p799 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data at rest, including financial account details and KYC document images;
• Role-based access controls limiting internal access to personal data to authorized personnel on a need-to-know basis;
• Multi-factor authentication requirements for internal systems that process personal data;
• Regular security audits, penetration testing, and vulnerability assessments;
• Incident response procedures for the detection, reporting, and remediation of personal data breaches.

In the event of a personal data breach that is likely to result in a real risk of serious harm to affected data subjects, p799 will notify the National Privacy Commission and affected individuals in accordance with the timelines and requirements prescribed by the DPA and NPC Circular No. 16-03.

10. Cookies and Tracking Technologies

p799 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and analyze Platform usage. The following types of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled without preventing you from using core features such as login and account access.
• Functional cookies: Used to remember your preferences, such as language settings and session continuity.
• Analytics cookies: Used to collect aggregated, anonymized data about how players use the Platform, helping p799 improve the service.
• Security cookies: Used to detect fraudulent activity and protect the Platform from unauthorized access.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. p799 does not use third-party advertising cookies or cross-site tracking for external marketing purposes.

11. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights in respect of your personal data held by p799:

• Right to be informed: The right to be informed of how your data is collected and processed — which this Policy fulfils.
• Right of access: The right to obtain a copy of your personal data held by p799 and information about how it is being processed.
• Right to rectification: The right to have inaccurate or incomplete personal data corrected without undue delay.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to object: The right to object to the processing of your personal data on grounds of legitimate interest or for direct marketing purposes.
• Right to data portability: The right to receive your personal data in a structured, commonly used format for transfer to another controller.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission if you believe p799 has violated your data privacy rights.

To exercise any of these rights, please contact the p799 Data Protection Officer using the contact details in Section 14. p799 will respond to all verified requests within the timeframes prescribed by applicable law.

12. Children's Privacy

The p799 Platform is not directed to, and does not knowingly collect personal data from, individuals under the age of 21. Access to p799 Casino is strictly restricted to adults aged 21 and above in accordance with Philippine gaming law.

If p799 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, the personal data will be deleted or anonymized as promptly as practicable, and any deposits will be returned to the originating payment account.

If you are a parent or guardian and believe that a minor has accessed the p799 Platform, please contact us immediately at the details provided in Section 14.

13. Changes to This Privacy Policy

p799 reserves the right to amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or regulatory guidance. When we make material changes to this Policy, we will notify registered players via email and/or in-platform notification at least seven (7) days before the amended Policy takes effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised terms, you must close your account before the effective date.

14. Contact & Data Protection Officer

For questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the p799 Data Protection Officer:

• Email: [email protected] (subject line: "Privacy / Data Request")
• Response Time: Within 15 business days for data subject rights requests; within 72 hours for breach notifications
• Support Hours: 24 hours a day, 7 days a week

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe p799 has not handled your personal data in accordance with the Data Privacy Act of 2012.