99piso Privacy Policy

01 About This Policy

This Privacy Policy ("Policy") is issued by 99piso ("we," "us," or "our"), the operator of the online casino and sports betting platform available at 99piso.net (the "Platform"). This Policy applies to all personal data collected from users ("you," "User," or "Player") who register for, access, or use any feature of the 99piso Platform, including all games, account management tools, payment services, promotions, and customer support channels.

This Policy is designed to comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission (NPC) of the Philippines. It should be read together with our Terms and Conditions, which govern your use of the Platform more broadly.

02 Personal Data We Collect

99piso collects personal data in the categories described below. We collect only data that is necessary, adequate, and relevant to the purposes identified in this Policy.

03 How We Collect Your Data

99piso collects personal data through the following methods:

• Direct Submission: Data you provide when registering an account, completing KYC, making a deposit or withdrawal request, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically through cookies, session identifiers, server logs, and similar tracking technologies when you access and use the Platform.
• Third-Party Payment Processors: Transaction reference data and payment confirmation signals received from GCash, PayMaya, and Philippine banking partners when you conduct financial transactions on the Platform.
• Regulatory Sources: Where required, data received from PAGCOR, the Anti-Money Laundering Council (AMLC), or other Philippine government bodies in connection with regulatory compliance obligations.

04 Legal Basis and Purpose of Processing

99piso processes personal data on one or more of the following lawful bases recognised under the Philippine Data Privacy Act:

• Contractual Necessity: Processing required to perform our obligations under our Terms and Conditions, including account creation, payment processing, game delivery, and customer support.
• Legal Obligation: Processing necessary to comply with applicable Philippine laws, including PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), the Data Privacy Act (RA 10173), and any regulatory directive.
• Legitimate Interests: Processing required for fraud prevention, platform security, responsible gaming enforcement, and improvement of our services, where these interests are not overridden by your fundamental rights.
• Consent: Where consent is the lawful basis for processing (such as for marketing communications), you will be given a clear opt-in mechanism. You may withdraw consent at any time by contacting our Data Protection Officer (see Section 13).

05 Sharing and Disclosure of Your Data

99piso does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data in the following limited circumstances:

• PAGCOR and Regulatory Bodies: We are legally required to report certain gaming transaction data and player information to PAGCOR. Additionally, data may be disclosed to the Anti-Money Laundering Council (AMLC), the National Bureau of Investigation (NBI), or other Philippine government agencies where required by law.
• Payment Service Providers: Necessary financial data is shared with GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors solely to process your deposits and withdrawals.
• KYC and Identity Verification Partners: Identity document data may be shared with accredited third-party KYC verification service providers operating under contractual data processing agreements with 99piso.
• Game Software Providers: Gameplay data (but not financial or identity data) may be shared with certified game software providers (such as PG Soft, Pragmatic Play, and Jili Games) solely for the purposes of game operation, fairness auditing, and technical support.
• Legal Proceedings: Where required by a valid court order, subpoena, or other legally binding demand from a Philippine authority with proper jurisdiction.

All third parties with whom data is shared are required to process such data in accordance with the Philippine Data Privacy Act and are subject to appropriate contractual data processing obligations.

06 Cookies and Tracking Technologies

99piso uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device when you visit the Platform. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for Platform functionality including login session management, security token validation, and payment process continuity. These cookies cannot be disabled without rendering core Platform features inoperable.
• Performance Cookies: Used to collect anonymised analytics data on how players interact with the Platform, which pages load most frequently, and where technical errors occur. This data is used solely to improve Platform performance.
• Functionality Cookies: Enable personalisation features such as language preferences, lobby layout settings, and game history.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the 99piso Platform.

07 Data Security

99piso implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• One-way cryptographic hashing of account passwords — no 99piso employee can read your raw password;
• Access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular third-party penetration testing and security audits of Platform infrastructure;
• Segregated storage of KYC documents with restricted access logs;
• Two-factor authentication (2FA) available to all 99piso account holders to protect account access.

In the event of a personal data breach that poses a real risk to your rights and freedoms, 99piso will notify affected Users and the National Privacy Commission (NPC) within the timeframes prescribed under the Data Privacy Act and its Implementing Rules.

08 Data Retention

99piso retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods prescribed by applicable Philippine law. The following general retention guidelines apply:

• Account and Identity Data: Retained for the duration of your active account relationship with 99piso, plus a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AML regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with Philippine AML reporting obligations.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the completion of the last regulated transaction, whichever is later.
• Gaming History: Retained for a minimum of three (3) years to support dispute resolution and regulatory reporting obligations.
• Technical and Log Data: Retained for a maximum of twelve (12) months, unless a longer retention period is required for active fraud investigations or legal proceedings.

Upon expiry of applicable retention periods, personal data will be securely deleted or anonymised using methods that prevent recovery or re-identification.

09 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 99piso:

• Right to Be Informed: The right to know whether we hold personal data about you and how it is processed. This Policy fulfils our primary disclosure obligation.
• Right to Access: The right to request a copy of the personal data we hold about you, including information on how it has been processed.
• Right to Rectification: The right to request correction of any inaccurate, incomplete, or outdated personal data held by 99piso.
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where processing is no longer necessary or lawful, subject to our legal retention obligations under PAGCOR and AML regulations.
• Right to Object: The right to object to the processing of your personal data on the basis of legitimate interests, including for direct marketing purposes.
• Right to Data Portability: The right to receive a structured, machine-readable copy of personal data you have provided to us, where technically feasible.
• Right to Damages: The right to be indemnified for any damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data.

To exercise any of these rights, please submit a written request to our Data Protection Officer using the contact details in Section 13. We will respond to all verified requests within fifteen (15) business days of receipt, as required by NPC guidelines. Some requests may be subject to identity verification prior to fulfilment.

10 Children's Privacy and Age Restriction

The 99piso Platform is strictly intended for individuals aged 21 years and older, in accordance with PAGCOR regulations and Philippine law. We do not knowingly collect personal data from any person under the age of 21. If we discover that personal data has been collected from a person under the age of 21, the relevant account will be immediately suspended, all associated data will be deleted, and any funds held in the account will be handled in accordance with our Terms and Conditions and applicable Philippine regulations.

If you have reason to believe that a person under the age of 21 has registered with 99piso, please notify us immediately via our Live Chat or at the contact details provided in Section 13.

11 Cross-Border Data Transfers

Certain personal data may be transferred to, or accessed from, locations outside the Philippines in connection with our use of internationally-hosted game software platforms, cloud infrastructure, or KYC verification services. Any such cross-border transfer is conducted only:

• Where the receiving country or organisation provides an adequate level of data protection as determined by the NPC; or
• Subject to appropriate contractual safeguards, including standard contractual clauses approved by the NPC, binding the receiving party to data protection standards equivalent to those required under Philippine law.

99piso does not transfer personal data to countries or entities that do not provide adequate protections for the rights of Filipino data subjects.

12 Updates to This Privacy Policy

99piso reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. Material changes will be communicated to registered Users via email notification or prominent in-platform notice at least seven (7) days prior to the effective date. The "Last Updated" date at the top of this Policy will be revised accordingly. Your continued use of the Platform following any update constitutes acceptance of the revised Policy.

13 Contact Us & Data Protection Officer

99piso has designated a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act. For any queries relating to this Privacy Policy, to exercise your data subject rights, or to report a privacy concern, please contact:

If you are not satisfied with how 99piso handles your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.