9apeso Privacy Policy

1. Data Controller

9apeso (operating at 9apeso.one) is the Data Controller responsible for the personal data you provide when using our platform. 9apeso operates as a PAGCOR-licensed online gaming platform and processes personal data in accordance with Republic Act No. 10173 (the Philippine Data Privacy Act of 2012), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC).

For all privacy-related inquiries, you may contact our designated Data Protection Officer (DPO) at: [email protected]

2. Personal Data We Collect

9apeso collects the following categories of personal data in the course of providing its services:

3. How We Collect Your Data

9apeso collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the 9apeso platform, including through cookies, log files, and session tracking systems.
• Third-party providers: Payment processors (such as GCash, PayMaya, or banking partners) may transmit transaction-related data to 9apeso. Identity verification service providers may share KYC verification results.
• PAGCOR and regulatory authorities: In compliance with our licensing obligations, we may receive or be required to share data with PAGCOR and other relevant Philippine government agencies.

4. Purposes of Processing

9apeso processes your personal data for the following purposes:

• To create, verify, and manage your 9apeso account
• To process deposits, withdrawals, and other financial transactions in Philippine Peso
• To comply with PAGCOR licensing requirements, including KYC and AML (Anti-Money Laundering) obligations
• To deliver, personalize, and improve the 9apeso gaming experience
• To administer bonuses, promotions, and loyalty programs
• To provide customer support and respond to inquiries
• To send service-related communications (account alerts, security notifications, transaction confirmations)
• To send marketing communications where you have consented or where a legitimate interest applies
• To detect, investigate, and prevent fraudulent activity, money laundering, and unauthorized access
• To enforce our Terms & Conditions and protect the rights of 9apeso and its players
• To comply with applicable Philippine laws and respond to lawful requests from government authorities
• To monitor responsible gaming indicators and provide player protection interventions where appropriate

5. Legal Basis for Processing

Under the Philippine Data Privacy Act, 9apeso processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfill the 9apeso Terms & Conditions you agreed to upon registration (e.g., account management, transaction processing).
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, Philippine AML law (Republic Act No. 9160 as amended), and other applicable Philippine statutes.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and improving 9apeso services, where such interests are not overridden by your privacy rights.
• Consent: Where you have given explicit consent, such as for optional marketing communications. You may withdraw consent at any time by contacting [email protected]

6. Data Sharing and Disclosure

9apeso does not sell your personal data to third parties. We may share your data in the following circumstances:

• PAGCOR and government authorities: As required by our operating license and applicable Philippine law, including mandatory reporting of suspicious transactions to the Anti-Money Laundering Council (AMLC).
• Payment processors: Financial data is shared with GCash, PayMaya, BPI, BDO, Metrobank, and other payment partners solely to process transactions you initiate.
• KYC and identity verification providers: Identity documents and verification data are shared with certified verification service providers to fulfill PAGCOR KYC requirements.
• Technology and infrastructure providers: Hosting, security, and platform technology providers who process data solely under 9apeso's instruction and are bound by data processing agreements.
• Legal proceedings: Where required by court order, subpoena, or lawful request from Philippine law enforcement or regulatory agencies.

All third-party processors engaged by 9apeso are required to implement security measures consistent with the Data Privacy Act and handle personal data only as directed by 9apeso.

7. International Data Transfers

Some of 9apeso's technology partners and infrastructure providers may be located outside of the Philippines. Where personal data is transferred internationally, 9apeso ensures that adequate safeguards are in place in accordance with the Data Privacy Act and NPC guidelines — including data processing agreements that impose equivalent data protection standards on the receiving entity. 9apeso will not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate contractual protections.

8. Data Retention

9apeso retains personal data for as long as is necessary for the purposes for which it was collected and to comply with applicable legal obligations. Specific retention periods include:

• Account and KYC data: Retained for a minimum of five (5) years from account closure, as required by PAGCOR and Philippine AML regulations.
• Financial transaction records: Retained for a minimum of five (5) years in compliance with the AMLC Implementing Rules.
• Support communications: Retained for two (2) years from the date of the communication or resolution of the related issue, whichever is later.
• Marketing preferences: Retained until withdrawal of consent or account closure, plus a reasonable period to process the request.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents reconstruction of the individual's identity.

9. Security Measures

9apeso implements technical and organizational measures designed to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 9apeso servers
• Encrypted storage of sensitive account and financial data at rest
• Access controls restricting personal data access to authorized 9apeso personnel on a need-to-know basis
• Regular security audits and vulnerability assessments of platform systems
• Two-factor authentication (2FA) available to all account holders
• Incident response procedures and mandatory breach notification protocols per NPC requirements

While 9apeso takes security seriously, no digital platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their 9apeso account and to enable 2FA for maximum protection.

10. Cookies and Tracking Technologies

9apeso uses cookies and similar tracking technologies to operate the platform effectively. The types of cookies used include:

• Strictly necessary cookies: Required for the platform to function — including maintaining your login session, processing transactions, and preventing cross-site request forgery (CSRF). These cannot be disabled.
• Performance and analytics cookies: Collect anonymized data about how players use the platform to help 9apeso improve performance, fix errors, and optimize the user experience.
• Functional cookies: Remember your preferences (such as language settings) to provide a more personalized experience.

You may manage non-essential cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of some platform features. 9apeso does not use third-party advertising cookies or sell cookie data to advertisers.

11. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by 9apeso:

• Right to be informed: You have the right to know how 9apeso collects and processes your data — as set out in this Privacy Policy.
• Right of access: You may request a copy of the personal data 9apeso holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data in your account.
• Right to erasure / right to be forgotten: You may request deletion of your personal data, subject to 9apeso's legal retention obligations under PAGCOR and AML regulations, which take precedence.
• Right to data portability: You may request your personal data in a structured, commonly used format where technically feasible.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to lodge a complaint: You may file a complaint with the National Privacy Commission (NPC) if you believe 9apeso has violated your data privacy rights.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Privacy Request." 9apeso will respond within fifteen (15) business days of receiving a complete, verified request.

12. Children's and Minors' Privacy

9apeso's services are strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under 21 years of age. If 9apeso discovers that an account was created by or personal data was collected from an individual under 21, the account will be immediately suspended, personal data will be deleted to the extent permitted by law, and the matter will be handled in accordance with PAGCOR guidelines on underage access.

Parents and guardians who believe a minor has accessed or registered on 9apeso should contact us immediately at [email protected]

13. Updates to This Privacy Policy

9apeso may update this Privacy Policy periodically to reflect changes in our data practices, regulatory requirements, or platform features. Material changes will be communicated to registered players via email to their registered address or through a prominent notice on the 9apeso platform. The date of the most recent revision is displayed at the top of this page. Continued use of the 9apeso platform following the effective date of any revision constitutes acceptance of the updated Privacy Policy.

14. Contact and Complaints

For any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data by 9apeso, please contact our Data Protection Officer:

Email: [email protected]
Subject line: "Privacy Policy Inquiry" or "Data Privacy Request"

If you are not satisfied with 9apeso's response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) through their official website and complaint channels.