ph09 is committed to protecting the personal data of every player. This Privacy Policy explains what data ph09 collects, how it is used, and the rights you hold as a data subject under Philippine law.
Summary: ph09 collects personal data only as necessary to operate the Platform, verify player identity, process payments, and comply with Philippine law. ph09 does not sell your personal data to third parties. You have the right to access, correct, and request deletion of your data as provided under the Data Privacy Act of 2012 (Republic Act No. 10173).
This Privacy Policy ("Policy") is issued by ph09 ("ph09," "we," "us," "our") and applies to all personal data collected through the ph09 website at ph09.org, all associated subdomains, mobile-optimised interfaces, and any other digital channels through which ph09 delivers its Services to players in the Philippines and other jurisdictions.
This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Republic of the Philippines ("DPA"), and the implementing rules and regulations issued by the National Privacy Commission ("NPC"). Where applicable, ph09 also observes relevant international data protection standards including the General Data Protection Regulation ("GDPR") for players who may be located in European jurisdictions.
By registering a ph09 Account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection, processing, and use of your personal data as described herein. If you do not agree with this Policy, you must not use the ph09 Platform.
ph09 acts as the Data Controller for all personal data collected through the Platform. As Data Controller, ph09 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with the DPA and this Policy.
ph09 has appointed a Data Protection Officer ("DPO") who oversees the Platform's data privacy compliance program. Contact details for the DPO are provided in Section 13 of this Policy.
ph09 collects personal data through the following channels: account registration, KYC verification, financial transactions, customer support interactions, Platform usage, and cookies/tracking technologies. The categories of personal data collected are as follows:
| Data Category | Specific Data Points | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number, ID document scans (PhilSys, passport, driver's license, UMID) | Registration, KYC verification |
| Contact Data | Email address, Philippine mobile number, residential address | Registration |
| Financial Data | GCash number, PayMaya account, bank account details (BPI/BDO/Metrobank), cryptocurrency wallet addresses, deposit/withdrawal history | Cashier/payments processing |
| Gaming Data | Wagering history, game session data, win/loss records, bonus usage, responsible gaming limit settings | Platform activity |
| Technical Data | IP address, device type, browser type/version, operating system, session timestamps, geolocation data | Automatic collection via Platform |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
ph09 does not collect sensitive personal information (as defined under the DPA) beyond what is strictly necessary for identity verification and AML compliance — specifically, government ID details and facial recognition data used solely for KYC purposes.
ph09 processes your personal data for the following purposes:
ph09 does not engage in fully automated decision-making that produces legal effects concerning players without human review, except for preliminary fraud detection flags which are always subject to human verification before any account action is taken.
ph09 processes your personal data on the following legal bases under the DPA and applicable law:
ph09 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Personal data is shared only in the following limited circumstances:
All third parties with whom ph09 shares personal data are required to process that data only for specified purposes and in accordance with ph09's instructions and applicable Philippine data privacy law.
ph09 uses cookies and similar tracking technologies (web beacons, local storage) to operate the Platform, maintain your login session, prevent fraud, and improve Platform performance. The following categories of cookies are used:
You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to log in and use the ph09 Platform.
ph09 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by law:
After applicable retention periods expire, personal data is securely deleted or anonymised. ph09 may retain data beyond these periods where required by ongoing legal proceedings, regulatory investigations, or dispute resolution processes.
ph09 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key technical and organisational measures include:
In the event of a personal data breach that is reasonably likely to result in serious harm to any affected player, ph09 will notify the National Privacy Commission within 72 hours of discovery and will notify affected players as required by law and NPC guidelines.
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph09:
To exercise any of these rights, contact ph09's Data Protection Officer as described in Section 13. ph09 will respond to all verified data subject requests within thirty (30) days as required by the DPA's implementing rules.
ph09 does not knowingly collect or process personal data of persons under 21 years of age. The ph09 Platform is strictly restricted to adults aged 21 years or older, consistent with Philippine gaming regulations. Age verification via government-issued ID is mandatory for all new accounts and required before any withdrawal is processed.
If ph09 discovers or is notified that personal data of a person under 21 has been collected, that data will be immediately deleted and the account closed. Any parent or guardian who believes their child's data may have been processed by ph09 should contact ph09's DPO immediately using the contact details in Section 13.
ph09 reserves the right to update this Privacy Policy at any time. Material amendments will be communicated to registered players by email and/or by a prominent notice on the Platform at least seven (7) days before the changes take effect, except where immediate changes are required by law or NPC directive.
The current version of this Policy, with its effective date, is always accessible at ph09.org/privacy-policy. Continued use of the ph09 Platform after any amendment's effective date constitutes acceptance of the updated Policy.
For all data privacy enquiries — including data subject rights requests, breach notifications, or complaints — contact ph09's Data Protection Officer:
For complaints that cannot be resolved directly with ph09, you may contact the National Privacy Commission of the Philippines. Email addresses above are displayed as plain text and are not clickable links.
Every byte of data transmitted between your device and ph09's servers is protected by 256-bit SSL encryption. Look for the padlock icon in your browser's address bar whenever you access ph09.org.
ph09 does not sell, rent, or trade your personal data to marketing companies or data brokers. Your information is used only to operate your account, process payments, and comply with Philippine law.
ph09's identity verification process is designed to collect only the minimum data required under PAGCOR-aligned AML regulations. Government ID data is stored encrypted and accessed only by authorised KYC personnel.
You have the right to access, correct, delete, and port your ph09 personal data under Republic Act 10173. ph09 responds to all verified data subject requests within 30 days as required by the NPC's implementing rules.
In the event of a data breach likely to cause harm, ph09 will notify the National Privacy Commission within 72 hours and will inform affected players as required by Philippine law and NPC guidelines.
ph09 will not knowingly hold personal data of persons under 21 years of age. Any account found to belong to an underage person is immediately closed and their data deleted in accordance with our data minimisation principles.
Your personal data is protected. Your payments are secure. Your rights are respected. Join over 500,000 Filipino players who trust ph09 across Manila, Cebu, Davao, and beyond.
21+ only | Play responsibly | PAGCOR-compliant | DPA-compliant