9piso Privacy Policy

1 Data Controller

9piso, the operator of the online gaming platform accessible at 9piso.one, is the data controller responsible for the personal information collected through the 9piso Platform. As data controller, 9piso determines the purposes and means by which personal data is processed.

9piso operates in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, the National Privacy Commission's (NPC) issuances, and applicable PAGCOR data governance requirements. Questions regarding this Privacy Policy or data processing by 9piso may be directed to our Data Protection Officer (DPO) — contact details are provided in Section 13.

2 Information We Collect

9piso collects personal information from players and visitors through several channels. The categories of information collected include:

2.1 Registration & Identity Information

• Full legal name as it appears on a valid Philippine government-issued ID
• Date of birth (used to verify compliance with the 21+ age requirement)
• Residential address in the Philippines
• Philippine mobile number (+63 format)
• Email address
• Username and encrypted password

2.2 Identity Verification (KYC) Documents

• Copies of government-issued identification documents (PhilSys National ID, Driver's License, UMID, SSS ID, Passport, or equivalent)
• Selfie photographs submitted for liveness verification
• Proof of address documents where required
• Source-of-funds documentation in cases where required under AML obligations

2.3 Financial & Transaction Data

• GCash account numbers, Maya account details, or bank account information linked to your 9piso Account for deposits and withdrawals
• Deposit and withdrawal transaction history, including amounts, timestamps, and payment method used
• Gaming activity records including bets placed, games played, wins, and losses

2.4 Technical & Usage Data

• IP address and approximate geographic location at the time of login and gameplay
• Device type, operating system, and browser type
• Session duration, pages visited, and features used on the 9piso Platform
• Cookies and similar tracking technologies (see Section 5)

2.5 Communications Data

• Records of live chat interactions with 9piso support agents
• Email correspondence sent to or from 9piso support
• Feedback, complaints, and dispute records

3 How We Use Your Data

9piso processes your personal data for the following purposes:

• Account Management: To create, maintain, and secure your 9piso Account, including authentication, password recovery, and session management.
• Service Delivery: To provide access to games, process deposits and withdrawals, credit bonuses, and deliver all platform features to you as a registered 9piso player.
• Identity & Age Verification: To verify that you meet the 21+ age requirement and to confirm your identity in accordance with PAGCOR licensing requirements and Philippine AML regulations.
• Financial Compliance: To conduct anti-money laundering (AML) checks, monitor for suspicious transaction patterns, and report to the Anti-Money Laundering Council (AMLC) where required by law.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behavior, to enforce player-set deposit and loss limits, and to manage self-exclusion requests in accordance with 9piso's responsible gaming commitments.
• Customer Support: To respond to queries, complaints, and disputes submitted via live chat, email, or other support channels.
• Platform Security: To detect, prevent, and investigate fraud, unauthorized account access, bonus abuse, and other prohibited conduct as defined in the 9piso Terms and Conditions.
• Marketing Communications: To send promotional offers, bonus notifications, and product updates to players who have consented to receive such communications. Players may opt out at any time.
• Platform Improvement: To analyze aggregated, anonymized usage data to improve the 9piso platform's functionality, game selection, and user experience.
• Legal Compliance: To meet obligations under Philippine law, PAGCOR regulatory requirements, court orders, or other lawful government directives.

4 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 9piso processes personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfill the contract between 9piso and a Player — including account creation, game access, payment processing, and withdrawal handling — is necessary for the performance of the Player Agreement.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AML obligations under the Anti-Money Laundering Act (Republic Act No. 9160, as amended), the Tax Code, and other applicable Philippine law.
• Consent: Processing for direct marketing communications, optional personalization features, and certain analytics activities is conducted on the basis of your explicit consent provided during registration or through account settings. You may withdraw consent at any time.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and general platform improvement, where these interests are not overridden by the Player's fundamental rights and freedoms.

5 Cookies & Tracking Technologies

9piso uses cookies and similar technologies to enhance your experience on the platform. Cookies are small data files placed on your device when you visit the 9piso website.

5.1 Essential Cookies

These cookies are strictly necessary for the operation of the 9piso Platform. They enable login sessions, maintain your Account state across pages, and ensure the secure functioning of the cashier and game lobby. Essential cookies cannot be disabled without preventing use of the platform.

5.2 Analytical Cookies

9piso uses analytical cookies to understand how players navigate the platform — which games are most popular, where players encounter difficulties, and how features are used. This data is aggregated and anonymized. You may opt out of analytical cookies via your browser settings or the 9piso cookie preference centre.

5.3 Marketing Cookies

Where you have consented, 9piso may use marketing cookies to personalize promotional content displayed on the platform. These cookies do not track your activity outside of the 9piso Platform. Consent for marketing cookies can be withdrawn at any time.

6 Sharing of Personal Data

9piso does not sell, rent, or trade your personal information to third parties for their own commercial purposes. Personal data may be shared with the following categories of third parties strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Game Software Providers: Licensed providers whose games are offered on the 9piso Platform may receive anonymized or pseudonymized session data for game integrity and certification purposes.
• Payment Processors: GCash (Globe Fintech Innovations, Inc.), Maya (PayMaya Philippines, Inc.), BPI, BDO, Metrobank, and other approved payment partners receive the minimum data required to process your deposit or withdrawal transactions.
• KYC & AML Service Providers: Third-party identity verification and AML screening services used to verify player identities and screen for sanctions or politically exposed persons (PEPs) as required by Philippine law.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities may receive data where 9piso is legally required to disclose it.
• Customer Support Platforms: Live chat and ticketing infrastructure providers who process support communications on 9piso's behalf under data processing agreements.
• Analytics Providers: Providers of anonymized platform analytics who receive no personally identifiable information.

All third-party service providers with access to personal data are subject to contractual data protection obligations that prohibit them from using the data for any purpose other than providing services to 9piso.

7 Data Retention

9piso retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to the following minimum retention requirements:

• Account and KYC Records: Retained for a minimum of five (5) years following account closure, as required by PAGCOR and Philippine AML legislation.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with the Anti-Money Laundering Act requirements.
• Responsible Gaming Records: Self-exclusion records and responsible gaming interventions are retained for the duration of the exclusion period plus three (3) years.
• Support Communications: Retained for two (2) years from the date of last contact, unless required for longer periods in connection with an unresolved dispute.
• Marketing Consent Records: Retained for the duration of the player relationship and for three (3) years following account closure or withdrawal of consent.

After applicable retention periods have lapsed and there are no ongoing legal, regulatory, or dispute-resolution reasons to retain data, 9piso will securely delete or anonymize the relevant personal data.

8 Data Security

9piso implements technical and organizational security measures designed to protect personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between players and the 9piso platform
• Encrypted storage of passwords using industry-standard one-way hashing with salting
• Access controls limiting employee access to personal data on a strict need-to-know basis
• Regular security assessments and penetration testing of the platform infrastructure
• Two-factor authentication (2FA) available to all players for enhanced Account security
• Automated monitoring for unusual account activity, including login attempts from unrecognized devices or locations

In the event of a personal data breach that poses a risk to players' rights and freedoms, 9piso will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the requirements of the Data Privacy Act of 2012.

9 Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, registered 9piso players have the following rights with respect to their personal data:

• Right to Be Informed: The right to be informed about how your personal data is collected, used, and processed — as set out in this Privacy Policy.
• Right to Access: The right to request a copy of the personal data 9piso holds about you. Requests will be fulfilled within 30 days.
• Right to Correction: The right to request correction of inaccurate or incomplete personal data in your 9piso Account. Many fields can be updated directly in your account settings; others require identity verification.
• Right to Erasure: The right to request deletion of your personal data, subject to 9piso's legal retention obligations. Data required for AML compliance cannot be deleted before the mandatory retention period expires.
• Right to Object: The right to object to processing of your personal data for direct marketing or profiling purposes. Objection to marketing can be exercised via account settings at any time.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format for transfer to another controller, where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your personal data rights have been violated.

To exercise any of the above rights, contact 9piso's Data Protection Officer via the details in Section 13. 9piso will respond to all data subject requests within 30 calendar days.

10 Children & Minors

The 9piso Platform is strictly prohibited for use by persons under 21 years of age. 9piso does not knowingly collect personal data from individuals under 21. Where 9piso becomes aware that personal data has been collected from a person under 21, such data will be immediately deleted and the associated account permanently closed.

If you believe a person under 21 has registered an account on 9piso using false information, please contact our support team immediately via live chat. 9piso takes all reports of underage access seriously and acts on them without delay.

11 International Data Transfers

Where personal data is transferred outside the Philippines — for example, to game software providers or technology vendors based in other countries — 9piso ensures that such transfers are subject to appropriate safeguards, including data processing agreements that impose obligations equivalent to those required under the Philippine Data Privacy Act of 2012.

9piso does not transfer personal data to countries that do not offer an adequate level of data protection without first implementing appropriate contractual safeguards, in accordance with NPC guidelines on cross-border data flows.

12 Changes to This Privacy Policy

9piso may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, 9piso will notify registered players via their registered email address or mobile number, or via a prominent notice on the Platform. The revised Policy will display an updated "Last updated" date at the top of this page.

Continued use of the 9piso Platform following the posting of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you may request account closure as described in the 9piso Terms and Conditions.

13 Contact & Data Protection Officer

For questions, concerns, or to exercise your data subject rights under the Philippine Data Privacy Act of 2012, please contact the 9piso Data Protection Officer:

• Live Chat: Available 24/7 via the 9piso Platform — the fastest channel for urgent privacy concerns.
• Email: [email protected] (plain text — not a clickable link; please mark your message "Attn: DPO / Privacy Request")

9piso will acknowledge all data privacy requests within 3 business days and provide a substantive response within 30 calendar days. If you are not satisfied with 9piso's handling of your privacy concern, you have the right to escalate to the National Privacy Commission of the Philippines.