9piso Privacy Policy

1 Introduction

9piso ("we," "us," "our," or the "Operator") is committed to protecting the privacy and personal data of all individuals who use the 9piso Platform at https://9piso.vip or interact with 9piso in any capacity. This Privacy Policy (the "Policy") describes how 9piso collects, uses, stores, discloses, and safeguards your personal data in connection with the 9piso online gaming platform (the "Platform").

This Policy is issued in compliance with the Data Privacy Act of 2012 of the Republic of the Philippines (Republic Act No. 10173, as amended, the "DPA"), its Implementing Rules and Regulations, the issuances of the National Privacy Commission ("NPC"), and applicable regulations of the Philippine Amusement and Gaming Corporation ("PAGCOR") governing licensed online gaming operators.

2 Scope & Application

This Policy applies to all personal data collected by 9piso through the following channels and in connection with the following activities:

• Registration and management of a 9piso account;
• Access to and use of games, betting markets, and any other feature on the 9piso Platform;
• Deposits, withdrawals, and all payment transactions conducted through 9piso;
• Communications between you and 9piso's customer support team;
• Participation in promotions, bonuses, loyalty programs, or surveys offered by 9piso;
• Any other interaction with the 9piso website, mobile interface, or associated digital services.

This Policy applies to Players (registered account holders), prospective Players who browse the Platform without registering, and any individual who contacts 9piso for any purpose. It does not apply to third-party websites or services that may be referenced on the Platform — those parties' own privacy policies govern their data practices.

3 Personal Data We Collect

9piso collects only the personal data that is necessary and proportionate to the purposes described in this Policy. The categories of personal data we collect include:

3.1 Identity & Registration Data

• Full legal name (first name, middle name where provided, last name);
• Date of birth (for mandatory age verification — players must be 21 or older);
• Gender (where voluntarily provided);
• Philippine government-issued ID number, type, and expiry date (KYC verification);
• Username chosen during registration.

3.2 Contact Data

• Philippine mobile number (primary contact and OTP delivery);
• Email address;
• Residential address in the Philippines (required for certain KYC verifications and where PAGCOR regulations mandate address collection).

3.3 Financial & Payment Data

• GCash account number or registered mobile number;
• Maya account details;
• Bank account details (for BPI, BDO, Metrobank, or other Philippine bank transfers), where applicable;
• Transaction history — deposit amounts, withdrawal amounts, dates, and payment method references;
• Account balance information.

3.4 Gaming & Activity Data

• Game play history — games played, bet amounts, outcomes, and session durations;
• Bonus and promotion participation and wagering activity;
• Login timestamps and session activity;
• Responsible gaming limits and self-exclusion status where applicable.

3.5 Technical & Device Data

• IP address and approximate geolocation (derived from IP for regulatory compliance);
• Device type, model, and operating system;
• Browser type and version;
• Cookie identifiers and session tokens (see Section 10).

3.6 Communications Data

• Records of support conversations via live chat or email;
• Feedback and survey responses;
• Promotional communication preferences.

4 How We Collect Your Data

9piso collects your personal data through the following means:

• Directly from you: Information you provide during account registration, KYC verification, payment setup, support interactions, promotions, or surveys;
• Automatically: Technical and gaming data generated when you use the Platform — collected via server logs, cookies, session tracking, and game system records;
• From third-party payment providers: Transaction confirmation data from GCash, Maya, Philippine banks, and other payment processors when you make deposits or withdrawals;
• From KYC and identity verification partners: Confirmation of identity and age from document verification services used to fulfil our PAGCOR compliance obligations;
• From PAGCOR and regulatory authorities: Where required by licensing conditions, 9piso may receive information from PAGCOR or other Philippine government bodies in connection with regulatory oversight.

5 How We Use Your Personal Data

9piso processes your personal data for the following purposes:

• Account creation and management: To register, verify, and maintain your 9piso account, including authentication and security;
• Age and identity verification: To confirm that you meet the minimum age requirement of 21 years as mandated by PAGCOR regulations;
• Payment processing: To process deposits, withdrawals, and transaction records in Philippine Peso via your registered payment method;
• Regulatory compliance: To fulfil obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (R.A. 9160), the Data Privacy Act (R.A. 10173), and other applicable Philippine law;
• Game delivery and support: To operate games, record outcomes, manage bonus wagering, and provide customer support;
• Responsible gaming: To monitor gaming activity, enforce player-set limits, identify at-risk behaviour, and administer self-exclusion programs;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, and unauthorized account access;
• Promotions and loyalty: To administer bonus offers, cashback, VIP programs, and other promotions where you have opted in;
• Platform improvement: To analyze usage patterns, test features, and improve the performance and user experience of the 9piso Platform;
• Marketing communications: To send promotional updates via SMS and email where you have provided consent, and to withdraw that consent at any time.

6 Legal Basis for Processing

9piso processes your personal data on one or more of the following legal grounds under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract between you and 9piso — including account operations, payment processing, and game delivery;
• Legal obligation: Processing required to comply with PAGCOR regulations, anti-money laundering law, tax obligations, and other applicable Philippine legal requirements;
• Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring, where these interests do not override your privacy rights;
• Consent: Processing for marketing communications, optional survey participation, and any other purpose for which we have obtained your specific, informed consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Disclosure

9piso does not sell your personal data to any third party. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other Philippine payment providers — to process deposits and withdrawals;
• KYC and identity verification providers: Third-party services used to verify your identity and age in compliance with PAGCOR KYC requirements;
• Game software providers: Licensed game studios (such as Pragmatic Play, PG Soft, and Jili) that supply game content — these providers receive only the technical data necessary to deliver games and record outcomes;
• Regulatory authorities: PAGCOR and other Philippine government agencies where required by law, license conditions, or regulatory request;
• Law enforcement: Philippine law enforcement, the Anti-Money Laundering Council (AMLC), or courts where legally required or in response to a lawful order;
• IT and infrastructure providers: Hosting, cloud storage, and cybersecurity vendors engaged under data processing agreements that require compliance with the DPA;
• Professional advisers: Lawyers, auditors, and accountants bound by professional confidentiality obligations.

8 Data Retention

9piso retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and PAGCOR regulatory obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required under Philippine anti-money laundering regulations;
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction;
• KYC and identity documents: Retained for a minimum of five (5) years following account closure or the last regulated transaction;
• Gaming activity logs: Retained for a minimum of three (3) years for dispute resolution, responsible gaming monitoring, and regulatory audit purposes;
• Support communications: Retained for a minimum of two (2) years;
• Marketing consent records: Retained until withdrawn and for a reasonable period thereafter as evidence of consent management.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized such that it can no longer be attributed to you as an identifiable individual.

9 Data Security

9piso implements technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and 9piso's servers;
• Tokenization of sensitive payment details — 9piso does not store full GCash or bank account numbers; only tokenized references are retained;
• Access controls restricting personal data access to authorized 9piso personnel who require it for their role;
• OTP-based authentication for account login from new devices, reducing the risk of unauthorized access;
• Regular security assessments and vulnerability testing of the 9piso Platform infrastructure;
• Data breach response procedures including notification to the National Privacy Commission and affected individuals as required under the DPA.

While 9piso takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your own Account credentials, and 9piso recommends using a unique, strong password and never sharing your login details with anyone.

10 Cookies & Tracking Technologies

The 9piso Platform uses cookies and similar tracking technologies to operate essential platform functions, remember your preferences, and analyze usage. The following categories of cookies may be used:

• Essential cookies: Required for the Platform to function, including session management, login authentication, and security features. These cannot be disabled without impacting Platform functionality;
• Functional cookies: Store your preferences such as language settings and responsible gaming limit configurations to improve your experience;
• Analytics cookies: Collect aggregated, anonymized data about how users interact with the Platform — used to improve performance and user experience;
• Security cookies: Detect and prevent fraudulent activity, bot behavior, and unauthorized access attempts.

9piso does not use cookies to track your activity across unrelated third-party websites or to build profiles for sale to third-party advertisers. You may manage cookie preferences through your browser settings; however, disabling essential cookies will affect your ability to use the 9piso Platform.

11 Your Privacy Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by 9piso:

To exercise any of the above rights, please contact 9piso's Data Protection Officer at [email protected] with the subject line "Privacy Rights Request." We will respond within fifteen (15) working days. You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

12 Minors & Age Restriction

The 9piso Platform is strictly restricted to individuals aged 21 years or older as required by PAGCOR. 9piso does not knowingly collect personal data from individuals under 21 years of age.

If you are a parent or guardian and have reason to believe a minor has registered an account on 9piso, please contact us immediately at [email protected].

13 Changes to This Privacy Policy

9piso reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, PAGCOR regulatory requirements, or Platform operations. Material changes will be communicated to registered Players via email or through a prominent notice on the Platform prior to the effective date of the change.

We encourage you to review this Policy periodically. The effective date at the top of this Policy indicates when it was last revised. Your continued use of the 9piso Platform after any revision constitutes your acceptance of the updated Policy.

14 Contact & Data Protection Officer

9piso has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. For any privacy-related inquiries, data rights requests, or complaints, please contact:

• Role: Data Protection Officer, 9piso
• Email: [email protected] (subject line: "Privacy Rights Request" or "DPO Inquiry")
• Response Time: Within fifteen (15) working days for formal data rights requests; within two (2) working days for urgent security or breach-related inquiries
• Regulatory Authority: National Privacy Commission of the Philippines (NPC) — players also have the right to file complaints directly with the NPC if they believe their data privacy rights have been violated

For account-related support, game queries, or responsible gaming assistance, please visit our FAQ page or contact general support. For responsible gaming tools and self-exclusion, see our Responsible Gaming page. For full platform terms, see our Terms & Conditions.