ppg99 Privacy Policy

This Privacy Policy ("Policy") describes how ppg99 ("ppg99," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you," "your," or "Player") who access or use the ppg99 online gaming platform available at ppg99.app and all associated services, mobile applications, and features (collectively, the "Platform").

ppg99 is committed to protecting the privacy and personal data of every Filipino player who trusts us with their information. This Policy has been prepared in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

By registering for a ppg99 account, accessing the Platform, or otherwise providing your personal information to ppg99, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.

This Policy should be read together with the ppg99 Terms & Conditions, which are incorporated herein by reference. Capitalised terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

For the purposes of the Data Privacy Act of 2012 and this Policy, ppg99 acts as the personal information controller ("PIC") in respect of the personal data it collects and processes in connection with the operation of the Platform.

As a personal information controller, ppg99 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with applicable Philippine data protection law.

ppg99 has appointed a Data Protection Officer ("DPO") who is responsible for overseeing the implementation of this Policy, handling data subject requests, and serving as the primary point of contact with the National Privacy Commission. Contact details for the ppg99 DPO are provided in Section 15 of this Policy.

ppg99 collects the following categories of personal data from players and prospective players. The specific data collected in each category depends on the nature of your interaction with the Platform.

3.1 Identity and Registration Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 21+ age requirement under Philippine gaming regulations).
• Gender (optional, collected for personalisation purposes).
• Nationality and country of residence.
• Government-issued identification number (e.g., Philippine National ID, passport, driver's licence, SSS/GSIS number).

3.2 Contact Data

• Email address (used for account communications, transaction notifications, and promotional messages where consented).
• Mobile phone number (used for two-factor authentication and account security alerts).
• Residential address (used for KYC verification and regulatory compliance).

3.3 Financial and Transaction Data

• GCash mobile number and account reference details.
• PayMaya account reference details.
• Bank account details for BPI, BDO, and Metrobank transfers (account name and number only — ppg99 does not store full bank login credentials).
• Deposit and withdrawal transaction history, including amounts in Philippine Peso (PHP), timestamps, and payment method used.
• Bonus and promotional credit history.

3.4 Gaming Activity Data

• Game session logs, including games played, wager amounts, win/loss outcomes, and session duration.
• Betting history across all ppg99 game categories including slots, bingo, live casino, and sports betting.
• Responsible gaming tool settings, including deposit limits, loss limits, and self-exclusion status.

3.5 Technical and Device Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, and browser type and version.
• Unique device identifiers.
• Session timestamps and Platform navigation logs.

3.6 Summary Table

ppg99 collects personal data through the following channels and methods:

4.1 Directly From You

The majority of the personal data ppg99 holds about you is provided directly by you during the following interactions:

• Account Registration: When you create a ppg99 account, you provide your name, date of birth, email address, mobile number, and residential address.
• KYC Verification: When you submit identity documents to complete Know Your Customer verification, ppg99 collects copies of your government-issued identification and proof of address.
• Deposits and Withdrawals: When you initiate a financial transaction, you provide payment method details such as your GCash number or bank account information.
• Customer Support: When you contact ppg99 via live chat or email, the content of your communications is collected and stored for quality assurance and dispute resolution purposes.
• Responsible Gaming Tools: When you set deposit limits, loss limits, or request self-exclusion, ppg99 records your preferences and the date they were applied.

4.2 Automatically Through the Platform

When you access and use the ppg99 Platform, certain technical data is collected automatically through cookies, web beacons, and server logs. This includes your IP address, device identifiers, session timestamps, and navigation behaviour within the Platform. See Section 8 for full details of ppg99's cookie practices.

4.3 From Third Parties

ppg99 may receive personal data about you from the following third-party sources:

• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank may share transaction confirmation data with ppg99 to facilitate deposit and withdrawal processing.
• Identity Verification Providers: ppg99 uses third-party KYC service providers to verify the authenticity of identity documents submitted by players. These providers may return verification results and risk scores to ppg99.
• Fraud Prevention Services: ppg99 may receive risk signals and fraud indicators from third-party fraud detection services to protect the integrity of the Platform.
• Regulatory Authorities: PAGCOR and other Philippine regulatory bodies may share information with ppg99 in connection with licensing compliance, self-exclusion registers, and regulatory investigations.

ppg99 uses the personal data it collects for the following specific purposes. We will not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your consent or as otherwise permitted by law.

5.1 Account Management and Service Delivery

• Creating and maintaining your ppg99 player account.
• Verifying your identity and age (21+) in accordance with Philippine gaming regulations.
• Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank.
• Providing access to ppg99 games including slots, bingo, live casino, and sports betting.
• Delivering customer support and resolving disputes.

5.2 Legal and Regulatory Compliance

• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under Philippine law.
• Maintaining records required by PAGCOR and other applicable regulatory authorities.
• Responding to lawful requests from law enforcement agencies and courts.
• Enforcing the ppg99 Terms & Conditions and this Privacy Policy.

5.3 Security and Fraud Prevention

• Detecting, investigating, and preventing fraudulent transactions, bonus abuse, and other prohibited conduct.
• Monitoring for multiple account creation and other violations of the ppg99 one-account policy.
• Protecting the security and integrity of the Platform and its users.

5.4 Responsible Gaming

• Monitoring gaming activity to identify patterns that may indicate problem gambling behaviour.
• Administering responsible gaming tools including deposit limits, loss limits, session reminders, and self-exclusion.
• Complying with self-exclusion registers maintained by PAGCOR and other relevant bodies.

5.5 Marketing and Personalisation

Where you have provided your consent, ppg99 may use your personal data to:

• Send you promotional offers, bonus notifications, and news about new ppg99 games and features via email or SMS.
• Personalise your ppg99 experience based on your gaming preferences and activity history.
• Conduct player satisfaction surveys and research to improve the Platform.

Under the Data Privacy Act of 2012, ppg99 must have a lawful basis for each processing activity involving your personal data. The following table summarises the legal bases ppg99 relies upon:

ppg99 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. ppg99 shares your personal data only in the following limited circumstances:

7.1 Service Providers and Processors

ppg99 engages third-party service providers who process personal data on ppg99's behalf as personal information processors. These include:

• Payment processors: GCash, PayMaya, BPI, BDO, and Metrobank, for the purpose of processing deposits and withdrawals.
• KYC and identity verification providers: For the purpose of verifying player identity documents and age.
• Cloud hosting and infrastructure providers: For the purpose of storing and processing Platform data securely.
• Customer support platform providers: For the purpose of delivering live chat and email support services.
• Fraud detection and cybersecurity providers: For the purpose of protecting the Platform and its users from fraudulent activity.

All third-party processors engaged by ppg99 are bound by data processing agreements that require them to process personal data only on ppg99's documented instructions and to implement appropriate technical and organisational security measures.

7.2 Regulatory and Law Enforcement Authorities

ppg99 may disclose your personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), the Philippine National Police, the National Bureau of Investigation, or any other competent authority where such disclosure is required by law, court order, or regulatory directive.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of ppg99's assets, your personal data may be transferred to the acquiring entity as part of that transaction. ppg99 will notify affected players of any such transfer and the privacy practices of the acquiring entity prior to the transfer taking effect.

ppg99 uses cookies and similar tracking technologies to operate the Platform, improve user experience, and gather analytics data. A cookie is a small text file placed on your device when you visit the ppg99 Platform.

8.1 Types of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as account login, session management, and security. These cookies cannot be disabled without affecting Platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised information about how players use the ppg99 Platform, such as which pages are visited most frequently and how long sessions last. This data helps ppg99 improve the Platform experience.
• Functional Cookies: These cookies remember your preferences, such as your preferred language and responsible gaming settings, to provide a more personalised experience.
• Marketing Cookies: Where you have consented, these cookies track your activity on the Platform to enable ppg99 to deliver relevant promotional content. You may withdraw this consent at any time through your account settings.

8.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling strictly necessary cookies will impair your ability to use the ppg99 Platform. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

ppg99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following retention periods apply:

Upon expiry of the applicable retention period, ppg99 will securely delete or anonymise your personal data in accordance with its data disposal procedures. Anonymised data that can no longer be linked to an identifiable individual may be retained indefinitely for statistical and analytical purposes.

ppg99 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the ppg99 Platform is encrypted using TLS 1.3 / 256-bit SSL encryption.
• Encryption at Rest: Sensitive personal data stored on ppg99 servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to ppg99 personnel and authorised processors who have a legitimate need to access it. All access is logged and audited.
• Two-Factor Authentication: ppg99 offers two-factor authentication (2FA) for player accounts to provide an additional layer of security against unauthorised access.
• Penetration Testing: ppg99 conducts regular security assessments and penetration tests to identify and remediate vulnerabilities in the Platform.
• Incident Response: ppg99 maintains a documented data breach response plan and will notify affected players and the National Privacy Commission within 72 hours of becoming aware of a qualifying personal data breach.

Under the Data Privacy Act of 2012, you have the following rights in relation to the personal data ppg99 holds about you. ppg99 is committed to honouring all valid data subject requests promptly and in accordance with the timeframes prescribed by law.

11.1 Right to Be Informed

You have the right to be informed of the personal data ppg99 collects about you, the purposes for which it is processed, and the identity of any third parties with whom it is shared. This Privacy Policy fulfils ppg99's obligation to inform you.

11.2 Right of Access

You have the right to request a copy of the personal data ppg99 holds about you. ppg99 will provide this information within fifteen (15) working days of receiving a valid access request, subject to verification of your identity.

11.3 Right to Rectification

You have the right to request the correction of any inaccurate or incomplete personal data ppg99 holds about you. You may update certain account information directly through your ppg99 account settings. For corrections that cannot be made through the Platform, please contact the ppg99 DPO.

11.4 Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Please note that ppg99 may be required to retain certain data for regulatory compliance purposes even after an erasure request is received.

11.5 Right to Data Portability

You have the right to receive a copy of the personal data you have provided to ppg99 in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.

11.6 Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on ppg99's legitimate interests, in which case ppg99 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.

11.7 How to Exercise Your Rights

To exercise any of the rights described in this section, please contact the ppg99 Data Protection Officer using the contact details provided in Section 15. ppg99 will respond to all valid data subject requests within fifteen (15) working days of receipt. ppg99 reserves the right to request proof of identity before processing any data subject request to protect against unauthorised access to personal data.

The ppg99 Platform is strictly intended for individuals who are at least twenty-one (21) years of age, in accordance with Philippine gaming regulations applicable to online casino and gaming services. ppg99 does not knowingly collect personal data from individuals under the age of 21.

As part of the account registration process, ppg99 requires all prospective players to confirm that they are at least 21 years of age and to submit valid government-issued identification for age verification purposes. Any account found to belong to a person under 21 years of age will be immediately suspended, all funds will be returned, and the account will be permanently closed.

ppg99 primarily stores and processes personal data within the Republic of the Philippines. However, certain third-party service providers engaged by ppg99 — including cloud infrastructure providers, KYC verification services, and fraud detection platforms — may process personal data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, ppg99 ensures that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012 and the rules of the National Privacy Commission. These safeguards may include:

• Standard contractual clauses approved by the National Privacy Commission.
• Binding corporate rules where the recipient is part of the same corporate group as ppg99.
• Transfers to jurisdictions that the NPC has determined provide an adequate level of data protection.
• Your explicit consent to the specific transfer, where required.

You may request further information about the specific safeguards in place for any cross-border transfer of your personal data by contacting the ppg99 DPO.

ppg99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or ppg99's data processing practices. The current version of this Policy, together with its effective date, will always be available on the ppg99 Platform at ppg99.app/privacy-policy.

Where ppg99 makes a material change to this Policy — meaning a change that significantly affects your rights or the way ppg99 processes your personal data — ppg99 will notify you by email to the address registered on your ppg99 account and by displaying a prominent notice on the Platform at least fourteen (14) days before the change takes effect.

Your continued use of the ppg99 Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should close your ppg99 account and cease using the Platform before the effective date of the changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ppg99 processes your personal data, please contact the ppg99 Data Protection Officer using the details below. All data subject requests and privacy complaints will be acknowledged within three (3) working days and resolved within fifteen (15) working days of receipt.

If you are not satisfied with ppg99's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012 in the Philippines.