This Privacy Policy explains how ph09 Casino collects, uses, stores, shares, and protects your personal information. It also sets out the rights you hold over your data under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and related PAGCOR compliance obligations.
Every data transmission between your device and ph09's servers is protected by 256-bit SSL encryption. Your personal and financial information is never transmitted in plain text over any ph09 connection.
ph09 processes personal data in compliance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012, and its Implementing Rules and Regulations. A registered Data Protection Officer oversees all personal data processing activities.
ph09 does not sell, rent, or license your personal data to advertising networks, data brokers, or unaffiliated third-party marketers. Your information is used solely for the purposes described in this Privacy Policy.
Under the Philippine DPA, you have enforceable rights to access, correct, delete, and port your personal data held by ph09. You also have the right to object to certain processing activities. These rights are exercisable by contacting ph09's Data Protection Officer.
ph09 stores personal data on secured servers with access restricted to authorised personnel on a need-to-know basis. Physical and logical access controls, audit logging, and regular security assessments are standard components of ph09's data security programme.
ph09 will only send you promotional communications where you have consented or where a legitimate interest applies. You may withdraw marketing consent or unsubscribe from all promotional messages at any time through your account settings or by contacting ph09 support.
ph09 Casino, operated at the domain ph09.vip (hereinafter "ph09," "we," "us," or "our"), is committed to protecting the personal information of every individual who interacts with our platform. This Privacy Policy ("Policy") describes our data processing practices in full transparency, in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations ("IRR"), the National Privacy Commission ("NPC") issuances, and applicable PAGCOR compliance obligations.
This Policy applies to all personal data collected, processed, stored, or shared by ph09 in connection with the ph09 platform, including:
By registering an account on ph09 or otherwise using the ph09 platform, you acknowledge that you have read and understood this Policy and consent to the data processing activities described herein to the extent that consent is the applicable legal basis. Where processing is carried out on other legal bases (as detailed in Section 6), your use of the platform does not constitute a waiver of the rights afforded to you under the DPA.
Age Restriction: ph09 is strictly a 21+ platform. We do not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been submitted by an individual under 21, we will take steps to delete that data and close the associated account in accordance with our Terms and Conditions and PAGCOR requirements.
For the purposes of the Philippine Data Privacy Act of 2012, ph09 Casino (operating through ph09.vip) is the personal information controller in respect of all personal data collected and processed in connection with the ph09 platform. ph09 has appointed a Data Protection Officer ("DPO") who is responsible for overseeing the organisation's compliance with the DPA and this Policy.
All data subject rights requests, privacy inquiries, and complaints should be directed to ph09's Data Protection Officer using the contact details set out in Section 15 of this Policy.
Third-Party Processors: ph09 engages certain third-party personal information processors — including payment service providers, KYC verification providers, live game studios, and cloud infrastructure providers — to process personal data on our behalf under written data processing agreements. These arrangements are described in Section 7 of this Policy.
ph09 collects personal data that is necessary and proportionate to the purposes for which it is processed. The categories of personal data we collect include the following:
Sensitive Personal Information: Identification document images that reveal a player's nationality or national identification number may constitute sensitive personal information under the DPA. ph09 processes such data only to the extent required for KYC compliance and applies heightened security and access controls to sensitive personal information categories in accordance with DPA Section 13.
ph09 collects personal data through the following means:
| Collection Method | Data Collected | Trigger |
|---|---|---|
| Account Registration | Mobile number, password, age confirmation | When you create a ph09 account |
| KYC Submission | Government ID images, selfie, address, source of funds | When you submit KYC documents for withdrawal activation |
| Payment Transactions | GCash/PayMaya account details, bank details, transaction amounts | When you make a deposit or request a withdrawal |
| Platform Usage | IP address, device info, session logs, game history | Automatically during all platform use sessions |
| Customer Support | Communications content, account details shared in support context | When you contact ph09 via live chat or email |
| Cookies & Analytics | Browser identifiers, navigation patterns, session data | Automatically via cookies on ph09.vip |
ph09 does not purchase personal data from third-party data brokers or acquire personal data about you from unrelated third-party sources other than those described above. Third-party KYC verification providers may independently verify identity data against government and financial databases as part of the verification process; this is conducted on ph09's behalf under a data processing agreement.
ph09 uses personal data collected from players for the following purposes:
ph09 processes personal data only where a valid legal basis exists under the Philippine Data Privacy Act. The legal bases on which ph09 relies are as follows:
| Processing Activity | Legal Basis (DPA) |
|---|---|
| Account registration and platform access | Performance of a contract (Section 12(b)) |
| KYC identity verification | Compliance with a legal obligation (Section 12(c)); Contract (Section 12(b)) |
| Payment processing and transaction records | Performance of a contract (Section 12(b)); Legal obligation (Section 12(c)) |
| AML monitoring and regulatory reporting | Compliance with a legal obligation (Section 12(c)) |
| Fraud detection and security | Legitimate interests (Section 12(f)); Legal obligation (Section 12(c)) |
| Responsible gaming monitoring | Legal obligation (Section 12(c)); Legitimate interests (Section 12(f)) |
| Marketing communications | Consent (Section 12(a)) |
| Platform analytics (anonymised) | Legitimate interests (Section 12(f)) |
Where ph09 relies on legitimate interests as a legal basis for processing, we have conducted a balancing assessment to confirm that our interests are not overridden by your interests, rights, or freedoms. You have the right to object to processing carried out on legitimate interests grounds; please refer to Section 11 for details on how to exercise this right.
ph09 does not sell or otherwise transfer your personal data to unaffiliated third parties for their own commercial purposes. ph09 shares personal data only in the following circumstances:
ph09 engages trusted third-party service providers to process personal data on our behalf for purposes directly connected to platform operation. These include:
ph09 may disclose personal data to:
No Advertising Data Sales: ph09 does not share your personal data with advertising networks, social media platforms, data brokers, or any third party for the purpose of targeted advertising or commercial profiling. This practice is prohibited under ph09's internal data governance policies.
ph09 uses cookies and similar tracking technologies on the ph09.vip website to support platform functionality, maintain secure login sessions, and analyse aggregate usage patterns. The categories of cookies used are as follows:
| Cookie Type | Purpose | Can Be Disabled |
|---|---|---|
| Strictly Necessary | Session management, authentication tokens, CSRF protection. Required for the platform to function securely. | No — disabling will prevent platform use |
| Functional | User preference storage (language, display settings), "Remember me" login functionality. | Yes — with reduced convenience |
| Analytics | Aggregate, anonymised traffic analysis to understand how players navigate ph09 and to identify usability improvements. | Yes — via cookie consent settings |
ph09 does not use third-party advertising cookies or cross-site tracking cookies. Analytics data collected on ph09.vip is used exclusively for internal platform improvement purposes.
You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your ph09 account. For detailed browser-specific cookie management instructions, refer to your browser's help documentation.
ph09 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data (active accounts) | Duration of account plus 5 years post-closure | PAGCOR & AMLA compliance |
| KYC documents | 5 years from account closure | AMLA IRR, NPC RR 2022-01 |
| Transaction records | 5 years from transaction date | AMLA; tax and financial record requirements |
| Game session logs | 2 years from session date | Dispute resolution; PAGCOR audit requirements |
| Customer support records | 3 years from last interaction | Dispute resolution; quality assurance |
| Marketing consent records | Until withdrawal of consent plus 1 year | DPA compliance; proof of consent |
| Analytics data (anonymised) | Indefinite (no personal identifier) | Legitimate interests — platform improvement |
Upon expiry of the applicable retention period, ph09 will securely delete or anonymise personal data in a manner that prevents reconstruction of the data subject's identity. Secure deletion procedures are applied to both digital and physical records containing personal data.
ph09 implements a comprehensive set of technical and organisational security measures designed to protect personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. Key security measures include:
Your Responsibility: The security of your ph09 account also depends on actions you take. Use a strong, unique password, enable two-factor authentication, and do not share your login credentials with anyone. ph09 is not responsible for account compromises resulting from a player's failure to maintain adequate personal credential security.
Under the Philippine Data Privacy Act of 2012, you hold the following rights with respect to your personal data held by ph09. These rights are enforceable and ph09 will respond to all valid rights requests within thirty (30) calendar days of receipt, unless a reasonable extension is required due to the complexity or volume of the request.
You have the right to know that ph09 is processing your personal data, the purposes of that processing, and the identity of any third parties with whom your data is shared. This Policy fulfils ph09's primary obligation to inform you. You may request more specific information about processing activities at any time.
You have the right to obtain a copy of the personal data that ph09 holds about you, together with information about how it is processed. Access requests can be submitted to ph09's Data Protection Officer. ph09 will provide a copy of the requested data in a commonly used electronic format within thirty (30) days.
You have the right to request correction of inaccurate or incomplete personal data held by ph09. For most account details, corrections can be initiated directly through your ph09 account settings. Changes to identity information that affects KYC records will require submission of updated documentation and re-verification.
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Note that ph09 may be required to retain certain data for regulatory compliance periods as set out in Section 9, which takes precedence over erasure requests in those specific circumstances.
You have the right to object to the processing of your personal data where ph09 relies on legitimate interests as the legal basis, and where your particular circumstances justify the objection. You also have an unconditional right to object to processing for direct marketing purposes at any time.
You have the right to receive a copy of personal data that you have provided to ph09 in a structured, commonly used, and machine-readable format, and to transmit that data to another service provider where technically feasible. Portability applies to data processed on the basis of consent or contract performance.
If you believe that ph09 has processed your personal data in violation of the Philippine Data Privacy Act, you have the right to file a complaint with the National Privacy Commission (NPC). ph09 encourages you to contact our DPO in the first instance to attempt resolution, but your right to approach the NPC directly is unconditional.
To exercise any of the above rights, please contact ph09's Data Protection Officer using the details provided in Section 15. ph09 may need to verify your identity before processing a rights request to ensure that data is not disclosed to or modified by an unauthorised person.
ph09 is a real-money online casino platform that is strictly restricted to individuals who are 21 years of age or older, in compliance with the minimum age requirements established by PAGCOR for online casino gaming in the Philippines. ph09 does not knowingly collect, process, or retain personal data from any individual under the age of 21.
If ph09 becomes aware that an account has been registered by an individual under the age of 21, or that personal data of an individual under 21 has been collected, ph09 will:
Parental Notice: If you are the parent or guardian of a minor and believe your child has registered on ph09, please contact ph09 support immediately via the live chat function or by emailing the Data Protection Officer at the contact details in Section 15. ph09 will treat such reports with the highest priority.
ph09's primary data processing infrastructure is based within the Philippines. However, certain service providers — including cloud infrastructure providers and live game studio operators — may process data outside of the Philippines. Where such cross-border transfers occur, ph09 ensures that appropriate safeguards are in place in accordance with NPC Circular 2023-05 (Rules on Cross-Border Transfer of Personal Data) and DPA Section 21.
Safeguards for cross-border transfers employed by ph09 include:
You may request information about specific international transfers of your personal data by contacting ph09's Data Protection Officer.
ph09 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes to this Policy will be communicated to registered players through a notice on the ph09 platform and, where practicable, by SMS or email to registered contact details.
The effective date displayed at the top of this Policy will be updated to reflect the date on which the revised Policy takes effect. We encourage you to review this Policy periodically. Your continued use of the ph09 platform following the effective date of a revised Policy constitutes your acknowledgment of the changes.
Where a proposed change to this Policy requires your fresh consent (for example, where a new processing activity is proposed for which consent is the applicable legal basis), ph09 will seek your consent before the change takes effect with respect to your personal data.
For all data privacy inquiries, rights requests, complaints, or concerns, please contact ph09's Data Protection Officer through the following official channels. ph09's DPO is responsible for overseeing this Policy and ph09's compliance with the Philippine Data Privacy Act.
ph09 will acknowledge receipt of a privacy inquiry or rights request within five (5) business days and will provide a substantive response within thirty (30) calendar days. Where a rights request requires additional time due to its complexity, ph09 will notify you of the extension and the reason for it within the initial thirty-day period.
NPC Complaint Right: If you are not satisfied with ph09's response to a privacy concern, you have the right to file a complaint directly with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory authority responsible for administering and enforcing the Philippine Data Privacy Act of 2012. Information on filing a complaint is available through the NPC's official government channels.
ph09 Casino — PAGCOR-regulated, DPA-compliant, GCash banking, 500+ games. Filipino players aged 21 and above only.