9ph1 Privacy Policy
At 9ph1, your personal data belongs to you. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used, who we share it with, and what rights you have under Philippine data protection law.
How 9ph1 Treats Your Personal Data
These six principles guide every data decision at 9ph1. They are not aspirations — they are operational standards applied across every system that handles player data.
Purpose Limitation
9ph1 collects personal data only for specific, legitimate purposes — account management, regulatory compliance, payment processing, and service improvement. Your data is never sold to third parties or used for purposes unrelated to your 9ph1 account and the services you use.
Security by Default
All personal data held by 9ph1 is protected by bank-grade TLS encryption in transit and AES-256 encryption at rest. Access to player data within 9ph1's systems is restricted on a strict need-to-know basis and subject to regular internal security audits.
Your Rights Are Real
Under the Philippine Data Privacy Act of 2012, you have enforceable rights over your personal data — including the right to access, correct, erase, and object to its processing. 9ph1 provides a clear process for exercising all of these rights without unnecessary friction.
Data Minimisation
9ph1 does not collect more personal data than is necessary for the stated purpose. We regularly review what data we hold and delete data that is no longer required, in accordance with our internal retention schedules and PAGCOR's record-keeping requirements.
Full Transparency
This Privacy Policy is written to be understood, not to obscure what 9ph1 does with your data. If we change our data practices materially, we will notify all registered players before those changes take effect, not after.
Regulatory Compliance
9ph1 operates in full compliance with the Philippine Data Privacy Act (R.A. 10173), PAGCOR's data governance requirements, and the National Privacy Commission's implementing regulations. Data protection is a legal obligation that 9ph1 takes seriously — not an afterthought.
Introduction
This Privacy Policy ("Policy") describes how 9ph1 ("9ph1", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("Player", "User", "you") who register for or use the 9ph1 online gaming platform accessible at https://9ph1.cam and all associated services (collectively, the "Platform").
9ph1 is committed to protecting your privacy in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission ("NPC"). This Policy satisfies the transparency obligations imposed on personal information controllers under Philippine law.
By creating a 9ph1 Account or using the Platform in any capacity, you acknowledge that you have read this Policy in full, understood its contents, and consented to the processing of your personal data as described herein. This Policy should be read together with 9ph1's Terms & Conditions and Responsible Gaming Policy.
Who We Are
9ph1 is the operator of the online gaming platform at https://9ph1.cam, licensed and regulated by the Philippine Amusement and Gaming Corporation (PAGCOR) to offer online casino games and sports betting services to eligible Filipino players aged 21 and over.
For the purposes of the Philippine Data Privacy Act, 9ph1 acts as the Personal Information Controller in respect of personal data collected directly through the Platform. Where 9ph1 shares data with third-party service providers who process data on our behalf, those parties act as Personal Information Processors and are bound by contractual data processing agreements that require them to comply with applicable Philippine data protection law.
Personal Data We Collect
9ph1 collects the following categories of personal data in connection with your use of the Platform:
- Full legal name
- Date of birth (for age verification)
- Gender
- Philippine mobile number
- Email address
- Username and encrypted password hash
- Residential address (required for KYC above certain withdrawal thresholds)
- Government-issued identification number and document type (e.g., PhilSys ID, passport, UMID, driver's licence)
- Photograph of government-issued ID document
- Selfie or liveness check image (where required by KYC verification provider)
- Tax Identification Number (TIN), where applicable to reporting obligations
- Deposit and withdrawal transaction records
- Payment method identifiers (GCash reference numbers, bank account numbers masked to the last four digits, PayMaya reference numbers)
- Transaction amounts, timestamps, and processing status
- Bonus and promotion redemption history
- Game session history (games played, bets placed, outcomes, duration)
- Sports betting history (markets, stake amounts, odds, settlement outcomes)
- Account balance snapshots at session start and end
- Responsible gaming settings and activation history (deposit limits, self-exclusion periods)
- IP address at time of login and each session
- Device type, operating system, and browser version
- Device fingerprint identifiers
- Cookie identifiers and session tokens (see Section 7)
- Approximate geolocation derived from IP address
- Content of live chat support conversations
- Email correspondence with 9ph1 support teams
- Survey responses and feedback submissions
How We Collect Your Data
9ph1 collects personal data through the following channels:
- Directly from you — when you register an Account, submit KYC documents, make a deposit, contact support, respond to a survey, or interact with any part of the Platform that requires you to provide information.
- Automatically through the Platform — when you visit or use the Platform, our servers and analytics systems automatically record technical data including IP addresses, session durations, pages visited, and device information. See Section 7 for details on cookies.
- From third-party service providers — where KYC verification services, payment processors, fraud detection systems, or responsible gaming tools provide 9ph1 with data relevant to your Account as part of their contracted service delivery.
- From PAGCOR or other regulatory bodies — where required by regulation, 9ph1 may receive information from PAGCOR, the NPC, or other government agencies relevant to your Account or gaming activity.
Purpose of Processing & Legal Basis
9ph1 processes your personal data for the purposes described below. Each purpose is supported by a lawful basis under the Philippine Data Privacy Act.
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account creation and management | Identity, contact data | Contract performance |
| Age and identity verification (KYC) | KYC documents, identity data | Legal obligation (PAGCOR) |
| Payment processing | Financial, transaction data | Contract performance |
| Fraud prevention and AML compliance | Transaction, technical, identity data | Legal obligation; legitimate interest |
| Providing gaming and betting services | Gaming data, account data | Contract performance |
| Responsible gaming monitoring | Gaming data, financial data, RG settings | Legal obligation; consent |
| Customer support | Communications, identity, account data | Contract performance; legitimate interest |
| Marketing communications (opted-in players) | Contact data, gaming preferences | Consent |
| Platform security and abuse prevention | Technical, device data | Legitimate interest |
| Regulatory reporting to PAGCOR / NPC | Identity, financial, gaming data | Legal obligation |
| Analytics and service improvement | Anonymised / aggregated usage data | Legitimate interest |
Sharing Your Personal Data
9ph1 may share your personal data with the following categories of recipients, strictly as necessary for the stated purposes and subject to appropriate data protection agreements:
- PAGCOR and Philippine Government Agencies: 9ph1 is legally required to report certain data to PAGCOR and, where applicable, to the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and the National Privacy Commission. Such reporting is mandatory and not discretionary.
- KYC Verification Providers: Accredited identity verification service providers process your submitted identity documents on 9ph1's behalf for age and identity verification purposes only.
- Payment Processors: GCash, PayMaya, BDO, BPI, Metrobank, and other payment channel operators receive the minimum data necessary to process your deposit or withdrawal transactions. 9ph1 does not transmit your full financial details to game providers.
- Game Software Providers: Third-party game providers may receive anonymised or pseudonymised player session data necessary to deliver their games and maintain game integrity. 9ph1 does not share your full identity data with game software providers.
- Fraud and Security Service Providers: Contracted fraud prevention and cybersecurity service providers may access technical and transactional data to detect and prevent fraud, account takeover, and money laundering.
- Responsible Gaming Partners: Where you activate responsible gaming tools, data relevant to those settings may be shared with third-party responsible gaming management systems.
- Professional Advisors: Legal counsel, auditors, and insurance providers may access personal data where strictly necessary to provide their professional services to 9ph1, subject to professional confidentiality obligations.
All third-party processors engaged by 9ph1 are required to maintain data processing agreements that impose obligations equivalent to 9ph1's own under Philippine data protection law.
Cookies & Tracking Technologies
9ph1 uses cookies and similar tracking technologies to operate and improve the Platform. A "cookie" is a small text file placed on your device by a website. The following categories of cookies are used on the 9ph1 Platform:
- Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without preventing Platform functionality.
- Functional Cookies: Remember your preferences, such as preferred language, login method, and responsible gaming settings, to improve your experience across sessions.
- Analytics Cookies: Used to understand how Players interact with the Platform — which pages are visited, where sessions end, and how features are used. Data is aggregated and anonymised before analysis. 9ph1 uses first-party analytics tools for this purpose.
- Security and Fraud Detection Cookies: Help identify and prevent fraud, unauthorised access, and account takeover attempts by tracking device consistency across sessions.
9ph1 does not use third-party advertising or cross-site tracking cookies. You may manage your cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair or prevent your ability to use the Platform.
Data Retention
9ph1 retains personal data only for as long as necessary for the purpose for which it was collected, subject to applicable legal, regulatory, and contractual retention requirements. The following retention periods apply:
- Account and KYC Data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLC record-keeping requirements.
- Transaction and Financial Records: Retained for a minimum of five (5) years following the date of the transaction, consistent with Philippine tax and AML legislation.
- Gaming Session Logs: Retained for a minimum of three (3) years from the date of the session, required for dispute resolution and regulatory audit purposes.
- Customer Support Communications: Retained for three (3) years from the date of the last interaction, to support dispute resolution and service quality monitoring.
- Marketing Preferences: Retained until you withdraw consent or for two (2) years of inactivity, whichever is earlier.
- Technical Logs: Typically retained for ninety (90) days, except where longer retention is required for ongoing security investigations.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with 9ph1's internal data deletion procedures.
Data Security
9ph1 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we process. These measures include but are not limited to:
- TLS 1.2/1.3 encryption for all data in transit between your device and 9ph1's servers
- AES-256 encryption for sensitive data stored at rest
- One-way cryptographic password hashing — plain-text passwords are never stored
- Role-based access controls — staff access to player data is restricted to roles that require it
- Two-factor authentication required for all 9ph1 staff accessing internal systems containing player data
- Regular third-party penetration testing and security audits
- Intrusion detection and 24/7 system monitoring
- Documented data breach response procedures with NPC notification timelines
Your Data Rights
Under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by 9ph1. All rights requests can be submitted by contacting 9ph1's Data Protection Officer as described in Section 15.
9ph1 will respond to all verified data rights requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further thirty (30) days, provided we notify you of the extension and the reason within the initial thirty-day period. Identity verification will be required before any data rights request is processed, to prevent unauthorised access to your data.
Children's Data
The 9ph1 Platform is strictly restricted to individuals aged 21 years and over, in compliance with PAGCOR's online gaming regulations for the Philippines. 9ph1 does not knowingly collect or process personal data from persons under the age of 21.
If 9ph1 discovers that personal data has been collected from a person under the age of 21, that Account will be immediately suspended and the personal data will be deleted, except where retention is required by law. If you believe that a minor has created a 9ph1 Account, please contact our support team or Data Protection Officer immediately.
Cross-Border Data Transfers
Certain third-party service providers engaged by 9ph1 — including game software providers, payment processors, and KYC verification services — may be located outside the Philippines. Where personal data is transferred to a country outside the Philippines, 9ph1 ensures that such transfers are made subject to appropriate safeguards, including:
- Standard contractual clauses that impose data protection obligations on the recipient equivalent to those under Philippine law;
- Transfers only to jurisdictions that the NPC has determined provide adequate data protection standards; or
- Your explicit consent to the transfer, where required.
9ph1 maintains a current record of all cross-border data transfers and the safeguards applied to each, as required by NPC regulations.
Marketing Communications
9ph1 may send you marketing communications about promotions, new games, and platform features where you have provided explicit consent to receive such communications at the time of registration or through your Account settings.
You may withdraw your consent to marketing communications at any time by: (a) adjusting your communication preferences in your 9ph1 Account settings; (b) clicking the "unsubscribe" link in any marketing email; or (c) contacting 9ph1 support via live chat or email.
Withdrawal of consent for marketing communications does not affect your ability to use the Platform, nor does it affect communications that are necessary for account management, security, or regulatory compliance purposes — those will continue regardless of marketing preferences.
Changes to This Privacy Policy
9ph1 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform features. Where changes are material — meaning they affect your rights or how your data is used in a significant way — 9ph1 will notify all registered Players by email before the changes take effect. Minor updates that do not affect your rights may be published without individual notification, but the "Last Updated" date on this Policy will always be revised.
We encourage you to review this Policy periodically. The current version of the Privacy Policy is always accessible at https://9ph1.cam/privacy-policy. Continued use of the Platform following publication of a revised Policy constitutes your acceptance of those revisions.
Contact Information & Data Protection Officer
9ph1 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Philippine Data Privacy Act. If you have any questions, concerns, or complaints regarding data privacy, or wish to exercise any of your rights under Section 10, please contact:
If you are not satisfied with 9ph1's response to a privacy complaint, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines. The NPC's contact details and complaints process are available on the NPC's official website.
This Privacy Policy was last reviewed and updated on 1 January 2026. 9ph1 thanks you for taking the time to understand how your personal data is handled. Your privacy matters to us — genuinely, not just on paper.
Your Data Is Safe at 9ph1
PAGCOR-regulated, DPA-compliant, and built to protect Filipino players. Create your 9ph1 account and enjoy games with full confidence in your privacy.
21+ only · PAGCOR regulated · DPA compliant · Play responsibly