ppg99 Privacy Policy

Scope and Controller Identity

1.1 Scope. This Privacy Policy applies to all personal data processed by ppg99 in connection with your use of the ppg99 online gaming platform accessible at ppg99.biz, including any mobile-optimised version of the platform. It applies to registered members, persons who browse the platform without registering, and any individual who contacts ppg99 support.

1.2 Data Controller. The data controller responsible for your personal data in connection with the ppg99 platform is the operating entity of ppg99. For all data privacy inquiries, requests to exercise your rights, or concerns regarding this policy, you may contact the ppg99 Data Protection Officer (DPO) by emailing [email protected] (plain text address — not a link). Please include "Data Privacy Request" in the subject line to ensure prompt routing to the DPO team.

1.3 Relationship to Terms & Conditions. This Privacy Policy should be read alongside the ppg99 Terms & Conditions, which govern the broader contractual relationship between ppg99 and its registered players. Where a conflict arises between these two documents on matters of data privacy, this Privacy Policy shall take precedence.

Data We Collect

2.1 Registration Data. When you create a ppg99 account, we collect: your full legal name; date of birth; Philippine mobile number or email address; a username chosen by you; and a password (stored in hashed form — we do not store plaintext passwords).

2.2 Identity Verification (KYC) Data. Before processing any withdrawal, ppg99 is required to verify your identity. KYC data includes: a copy of your Philippine government-issued ID (passport, SSS, UMID, Driver's License, or PhilSys National ID); a selfie or live photo for liveness verification; and, where required, proof of address documentation.

2.3 Financial Data. ppg99 collects data related to transactions on your account, including: deposit amounts and timestamps; withdrawal requests and destination payment method references (e.g., the last four digits of a GCash-registered number); bonus balance history; and bet and game history. ppg99 does not store full bank account numbers, card numbers, or complete GCash credentials — payment processing is handled by third-party payment gateways.

2.4 Technical and Device Data. When you access ppg99, our servers automatically collect: your IP address; device type and operating system; browser type and version; session timestamps; and page interaction data for platform performance monitoring.

2.5 Communications Data. If you contact ppg99 customer support via live chat, email, or any in-platform messaging tool, we retain a record of that communication including its content and timestamp for quality assurance and dispute resolution purposes.

2.6 Responsible Gaming Data. If you use ppg99's responsible gaming tools (deposit limits, self-exclusion, cooling-off), we record those settings and their activation history to enforce them accurately and maintain regulatory compliance.

How We Collect Your Data

ppg99 collects personal data through the following channels:

• Directly from you — through account registration forms, KYC document submissions, deposit and withdrawal requests, support communications, and preference settings.
• Automatically — through server logs, session cookies, and platform analytics tools when you access and interact with the ppg99 platform.
• From payment providers — GCash, PayMaya, and linked Philippine banks share transaction confirmation data with ppg99 to enable deposit crediting and withdrawal processing. ppg99 does not receive your full financial credentials from these providers.
• From identity verification services — third-party KYC and liveness verification providers process your submitted ID documents and return a verification result to ppg99. These providers are contractually bound to process your data only for this purpose.

Legal Basis for Processing

ppg99 processes your personal data on the following legal bases under the Data Privacy Act of 2012 (RA 10173):

How We Use Your Data

5.1 Service Delivery. ppg99 uses your personal data primarily to provide the gaming platform services you have registered for — creating and managing your account, processing deposits and withdrawals, crediting game winnings and bonuses, and maintaining your game history.

5.2 Identity Verification. KYC data is used to verify that you are who you say you are before significant funds are transferred out of your ppg99 account, and to ensure compliance with age verification requirements (minimum 21 years).

5.3 Fraud and Security. ppg99 analyses account activity, login patterns, device data, and transaction histories to detect and prevent fraudulent activity, money laundering, account takeover, and other security threats. This processing is performed using automated risk-scoring systems and, where indicators are elevated, manual review by the ppg99 security team.

5.4 Regulatory Compliance. ppg99 is required to maintain records of player identity, transaction histories, and gaming activity for anti-money laundering (AML) compliance purposes. This data may be disclosed to regulatory authorities where required by law.

5.5 Responsible Gaming. ppg99 uses gaming activity data and self-declared limit settings to enforce responsible gaming tools — including automatically blocking deposits once a player-set daily limit is reached, or preventing access during a self-exclusion period.

5.6 Platform Improvement. Aggregated and anonymised usage data helps ppg99 understand how Filipino players interact with the platform — which games are most popular, where navigation friction occurs, and how load performance affects player experience. No individually identifiable data is used for this purpose.

5.7 Marketing. Where you have consented to receive promotional communications, ppg99 may send you emails, SMS, or push notifications about new games, bonuses, and platform features. You may withdraw marketing consent at any time by contacting ppg99 support.

Data Sharing and Third Parties

6.1 Payment Processors. ppg99 shares transaction data with payment service providers — including GCash, PayMaya, BPI, BDO, and Metrobank — strictly for the purpose of processing your deposits and withdrawals. These providers have independent privacy policies and security frameworks.

6.2 KYC and Verification Providers. ppg99 engages certified identity verification service providers to process KYC document submissions. These third parties are bound by data processing agreements that limit their use of your data to identity verification services only.

6.3 Game Content Providers. Third-party game developers whose titles are hosted on the ppg99 platform may receive anonymised session data (e.g., game round IDs, bet amounts) for game performance and fairness auditing. Personally identifiable information is not shared with game providers except where required for live dealer game logging.

6.4 Regulatory and Law Enforcement Authorities. ppg99 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where required by law, court order, or regulatory instruction.

6.5 No Sale of Data. ppg99 does not sell, rent, license, or otherwise commercially transfer your personal data to any third party for their own marketing or commercial purposes. Full stop.

Data Retention

7.1 Active Account Data. Personal data associated with an active ppg99 account is retained for as long as the account remains open and for a period of five (5) years following account closure. This retention period is required for AML compliance and dispute resolution purposes.

7.2 KYC Documents. Identity verification documents (government IDs, selfies) are retained for a minimum of five (5) years following account closure or the date of the last transaction, in accordance with AML record-keeping requirements.

7.3 Transaction Records. Financial transaction records — deposits, withdrawals, bet histories — are retained for a minimum of five (5) years from the date of the transaction.

7.4 Support Communications. Customer support chat and email records are retained for two (2) years from the date of the last interaction in that thread.

7.5 Marketing Data. Where consent for marketing has been withdrawn, ppg99 will remove your data from active marketing lists within 14 business days. A suppression record (containing minimal identifying data) may be retained indefinitely to ensure you are not accidentally re-subscribed to marketing communications.

7.6 Technical Logs. Server logs and device/session data are retained for ninety (90) days from collection, after which they are automatically purged from active systems.

Cookies and Tracking Technologies

8.1 What Are Cookies. Cookies are small text files placed on your device when you visit a website. ppg99 uses cookies and similar technologies (such as session tokens and local storage) to maintain your login session, remember your platform preferences, and gather anonymised usage analytics.

8.2 Types of Cookies Used by ppg99:

8.3 Managing Cookies. You can control cookie behaviour through your browser settings. Disabling strictly necessary cookies may prevent you from logging in to your ppg99 account. Disabling analytics or marketing cookies does not affect core platform functionality.

Data Security

9.1 Technical Measures. ppg99 implements the following technical security controls to protect your personal data:

• TLS 1.2 / 1.3 encryption for all data in transit between your device and ppg99 servers.
• AES-256 encryption for sensitive personal data stored at rest, including KYC documents and payment references.
• Bcrypt hashing for all stored account passwords — plaintext passwords are never stored.
• Role-based access controls limiting ppg99 staff access to personal data on a need-to-know basis.
• Intrusion detection systems and regular vulnerability assessments of platform infrastructure.
• Two-factor authentication (2FA) for administrative access to ppg99 systems.

9.2 Organisational Measures. All ppg99 staff who handle personal data complete regular data privacy training. Access to sensitive player data is logged and audited. Third-party vendors with access to ppg99 systems are subject to security due diligence and contractual security obligations.

9.3 Data Breach Notification. In the event of a personal data breach that poses a real risk to the rights of affected players, ppg99 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach. Affected players will be notified directly without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

Your Rights as a Data Subject

Under the Data Privacy Act of 2012 (RA 10173), as a registered ppg99 player you have the following rights with respect to your personal data:

10.1 Right to Be Informed. You have the right to know what personal data ppg99 collects, why we collect it, how it is used, and with whom it is shared. This Privacy Policy fulfils that obligation.

10.2 Right of Access. You may request a copy of the personal data ppg99 holds about you at any time. Access requests will be fulfilled within thirty (30) calendar days of receipt, subject to identity verification.

10.3 Right to Rectification. If any personal data held by ppg99 is inaccurate or incomplete, you have the right to request correction. Minor corrections (e.g., contact details) can often be made directly in your account settings. Corrections to KYC identity data require re-submission through the verification process.

10.4 Right to Erasure (Right to be Forgotten). You may request deletion of your personal data where: the data is no longer necessary for the purpose it was collected; you withdraw consent and no other legal basis applies; or the data was processed unlawfully. Note that ppg99 may be required to retain certain data (transaction records, KYC documents) to comply with AML legal obligations regardless of erasure requests.

10.5 Exercising Your Rights. To exercise any of the above rights, contact the ppg99 Data Protection Officer at [email protected] (plain text — not a link) with the subject line "Data Subject Rights Request." ppg99 will respond within 30 calendar days. No fee is charged for the first request in any 12-month period.

Minors and Age Verification

11.1 Minimum Age. ppg99 does not knowingly collect or process the personal data of any person under the age of 21 years. The minimum age to register and use the ppg99 platform is 21 years, consistent with the minimum legal gambling age in the Philippines as set out in PAGCOR regulations.

11.2 Age Verification. ppg99 verifies the age of all players as part of the KYC process before any withdrawal is processed. Where ppg99 has reasonable grounds to believe an account is held by a person under the age of 21, the account will be suspended immediately pending verification review.

11.3 Parental Controls. ppg99 strongly encourages parents and guardians to use internet parental control software to prevent minors from accessing online gambling websites. Several free and commercial options are available for Philippine mobile devices and broadband connections.

Amendments and Contact

12.1 Policy Amendments. ppg99 reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, legal requirements, or platform functionality. Where amendments are material, registered players will be notified via the email address on record or via an in-platform notification at least 7 calendar days before the updated policy takes effect. Your continued use of the ppg99 platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms.

12.2 Historical Versions. Previous versions of this Privacy Policy are available on request from the ppg99 Data Protection Officer. Please include "Previous Privacy Policy Version Request" in your email subject line.

12.3 Complaints. If you believe ppg99 has handled your personal data in a manner inconsistent with this Privacy Policy or applicable Philippine data privacy law, you are encouraged to first raise the matter with the ppg99 Data Protection Officer. If the issue is not resolved to your satisfaction, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

12.4 Contact the ppg99 Data Protection Officer. All data privacy inquiries — access requests, rectification requests, erasure requests, and complaints — should be directed to the ppg99 DPO at [email protected] (plain text — not a link), with the appropriate subject line. The ppg99 support team is available 24/7 via live chat on Philippine Time (UTC+8).