p799 Privacy Policy

1. Data Controller

The data controller responsible for your personal information collected through the p799 platform (p799.one) is p799, a PAGCOR-licensed online gaming operator incorporated and operating in the Philippines ("p799," "we," "our," or "us"). As data controller, p799 determines the purposes and means by which your personal data is processed and is responsible for ensuring that such processing complies with the Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations, and all relevant issuances of the National Privacy Commission (NPC).

For all data privacy concerns, requests, and complaints, you may contact the p799 Data Protection Officer (DPO) at [email protected].

2. Personal Data We Collect

p799 collects personal data that is necessary for the lawful operation of its gambling platform, fulfillment of regulatory requirements, and delivery of services to Filipino players. The categories of personal data p799 collects include:

2.1 Registration & Identity Data

• Full legal name as it appears on government-issued identification
• Date of birth (for age verification — you must be 21 or older)
• Philippine mobile number used for account registration and OTP authentication
• Email address (where provided)
• Username and encrypted password
• Residential address in the Philippines

2.2 Know Your Customer (KYC) & Verification Data

• Government-issued photo ID (SSS, UMID, PhilSys National ID, passport, driver's license, PRC card)
• Selfie or liveness check images for identity matching
• Proof of address documentation (utility bill, bank statement)
• Source-of-funds declarations where required by PAGCOR AML guidelines

2.3 Financial & Transaction Data

• GCash mobile number and transaction reference numbers
• PayMaya account information where used
• Bank account details (account name, bank, account number) for withdrawal purposes
• Deposit amounts, withdrawal amounts, transaction timestamps, and payment method identifiers
• Account wallet balance history

2.4 Gameplay & Betting Data

• Game sessions, wager amounts, game outcomes, bonus usage, and promotional activity
• Sports betting selections, odds accepted, and settlement records
• Responsible gaming limit settings and self-exclusion records

2.5 Technical & Device Data

• IP address, device type, operating system, and browser information
• Session logs, login timestamps, and geographic location data derived from IP
• Cookies and similar tracking technology data (see Section 6)

2.6 Communications Data

• Customer support chat transcripts, emails, and call records (where applicable)
• Survey responses and feedback submissions
• Marketing preference settings and communication opt-in/opt-out records

3. How p799 Uses Your Personal Data

p799 processes your personal data for the following purposes:

• Account creation and management: Creating and maintaining your p799 player account, verifying your identity, and providing access to platform features.
• Age and identity verification: Confirming that you meet the 21+ minimum age requirement and are a legally eligible player as required by PAGCOR.
• Payment processing: Processing deposits and withdrawals via GCash, PayMaya, and partner banks; reconciling transactions; and resolving payment disputes.
• Anti-money laundering (AML) compliance: Monitoring transactions for suspicious activity in compliance with the Anti-Money Laundering Act (RA 9160, as amended) and PAGCOR AML requirements, including filing Suspicious Transaction Reports (STRs) with the AMLC where legally required.
• Regulatory compliance: Fulfilling reporting obligations to PAGCOR, the NPC, the AMLC, and other Philippine government authorities as required by law.
• Platform security: Detecting and preventing fraud, account takeovers, collusion, bonus abuse, and other prohibited conduct.
• Responsible gaming: Enforcing self-exclusion, deposit limits, and session limits; monitoring for problem gambling indicators; and providing responsible gaming interventions.
• Customer support: Responding to inquiries, resolving disputes, and providing technical assistance.
• Marketing and promotions: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time.
• Platform improvement: Analysing aggregated and anonymised usage data to improve the p799 platform, game selection, and user experience.
• Legal obligations: Complying with lawful orders, subpoenas, court orders, and regulatory directions from competent Philippine authorities.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, p799 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between p799 and the player (account registration, gameplay, payment processing).
• Legal obligation: Processing necessary to comply with PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming enforcement where such interests are not overridden by your fundamental rights.
• Consent: Processing for direct marketing communications, where you have provided opt-in consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

p799 does not sell your personal data to third parties. p799 may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• PAGCOR and regulatory authorities: As required under p799's operating licence and applicable Philippine law.
• Anti-Money Laundering Council (AMLC): In compliance with RA 9160 and related issuances, including the filing of Covered Transaction Reports and Suspicious Transaction Reports.
• National Privacy Commission (NPC): In response to official NPC orders, investigations, or complaint proceedings.
• Payment service providers: GCash (G-Xchange, Inc.), PayMaya (Voyager Innovations), and licensed Philippine banking institutions for the sole purpose of processing your deposits and withdrawals.
• Identity verification and KYC service providers: Third-party KYC technology providers engaged by p799 to assist in identity verification, solely for that purpose and subject to data processing agreements.
• Game content providers: Licensed game studios (such as JILI, Pragmatic Play, PG Soft) receive session and gameplay identifiers necessary for game operation and RNG certification. These providers do not receive your full personal profile.
• Law enforcement and courts: Where p799 is lawfully required to disclose personal data in response to a valid legal process issued by a competent Philippine authority.
• IT and hosting providers: Contracted infrastructure and security providers who process data on p799's behalf under binding data processing agreements and are required to maintain confidentiality.

All third-party data processors engaged by p799 are bound by contractual obligations requiring them to protect your personal data in accordance with RA 10173 and to process it only for the specific purposes for which they are engaged.

6. Cookies & Tracking Technologies

p799 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing Platform functionality.
• Analytics cookies: Aggregate and anonymised data used to understand how players navigate and use the Platform, which pages are most visited, and where technical issues occur. This information helps p799 improve the user experience for all Filipino players.
• Preference cookies: Store your language, display, and notification preferences so you do not need to reconfigure them on each visit.
• Security cookies: Used for fraud detection, bot prevention, and identification of suspicious access patterns.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent access to the Platform but may affect certain personalisation features. p799 does not use third-party advertising cookies or cross-site tracking cookies for ad targeting.

7. Data Retention

p799 retains your personal data for as long as your account remains active and for such additional periods as are required by law or regulation. Specific retention periods include:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR and AMLC regulations for anti-money laundering compliance and potential regulatory audit.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with AMLC record-keeping requirements.
• Gameplay records: Retained for a minimum of two (2) years following the relevant game session, for dispute resolution and regulatory purposes.
• Communication records: Customer support records retained for three (3) years following resolution of the relevant inquiry or complaint.
• Marketing consent records: Retained for the duration of your account and for three (3) years following account closure or withdrawal of consent, whichever is later, as evidence of consent status.

Upon expiration of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with p799's data disposal procedures.

8. Data Security

p799 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the p799 Platform
• Encryption of sensitive data fields (passwords, payment credentials) at rest using industry-standard algorithms
• Role-based access controls limiting internal access to personal data on a need-to-know basis
• Multi-factor authentication requirements for staff accessing production systems
• Regular security assessments, penetration testing, and vulnerability scanning
• Incident response procedures compliant with NPC breach notification requirements under RA 10173

In the event of a personal data breach that is likely to adversely affect your rights and freedoms, p799 will notify the NPC within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay in accordance with Section 20(f) of RA 10173.

9. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by p799:

• Right to be informed: The right to be informed of how your personal data is collected and processed, as detailed in this Privacy Policy.
• Right of access: The right to request a copy of the personal data p799 holds about you.
• Right to rectification: The right to request correction of inaccurate, incomplete, or outdated personal data.
• Right to erasure or blocking: The right to request deletion or blocking of personal data that is unlawfully processed, no longer necessary for the purpose for which it was collected, or where you have withdrawn consent (subject to overriding legal retention obligations).
• Right to object: The right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to damages: The right to claim compensation for damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data.
• Right to complain: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, submit a written request to the p799 Data Protection Officer at [email protected]. p799 will respond within thirty (30) days of receipt of a valid, complete request. Requests may be subject to identity verification before processing.

10. Children's Privacy & Age Restriction

The p799 Platform is strictly for adults aged twenty-one (21) years and above. p799 does not knowingly collect personal data from persons under 21 years of age. During registration and KYC, p799 verifies that all players meet the minimum age requirement. If p799 becomes aware that an account was created by a person under 21, the account will be immediately closed, all funds will be returned to the depositing payment method, and all associated personal data will be deleted in accordance with applicable law.

If you believe that p799 has inadvertently collected personal data from a person under 21, please contact the DPO immediately at [email protected] and p799 will take prompt remedial action.

11. Changes to This Privacy Policy

p799 may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory guidance, or p799's data processing practices. When material changes are made, p799 will notify registered players via the Platform or by email to their registered address, and will update the "Last updated" date at the top of this page. The current version of the Privacy Policy will always be available at p799.one/privacy-policy. Your continued use of the Platform following notification of changes constitutes your acceptance of the revised Privacy Policy.

12. Contact & Data Protection Officer

For all data privacy inquiries, access requests, correction requests, complaints, or other matters relating to this Privacy Policy or p799's data processing practices, please contact:

For additional information on your data privacy rights under Philippine law, you may also consult the National Privacy Commission (NPC), the government body responsible for administering and implementing the Data Privacy Act of 2012.