Privacy Policy – 9aph

1 Introduction

9aph ("9aph," "we," "us," or "our") is committed to protecting the privacy and personal data of all users ("you," "Player," or "User") of the 9aph online casino and sports betting platform accessible at https://9aph.com (the "Platform"). This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of personal information in connection with your use of the Platform.

This Privacy Policy is governed by the applicable data protection laws of the Republic of the Philippines, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. By accessing or using the 9aph Platform, you consent to the data practices described in this Privacy Policy.

This Privacy Policy should be read together with our Terms & Conditions, which govern your use of the 9aph Platform. Capitalised terms not defined in this Privacy Policy have the meanings given to them in the Terms & Conditions.

2 Personal Data We Collect

9aph collects personal data that you provide directly to us, data generated through your use of the Platform, and data obtained from third parties where permitted by law. The categories of personal data we collect include:

Registration & Identity Data:

• Full legal name, date of birth, and gender
• Mobile number and email address
• Residential address (including city, province, and postal code)
• Government-issued identification documents (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's licence) submitted for KYC verification
• Selfie or facial image submitted for identity verification purposes

Financial Data:

• GCash mobile number, PayMaya account details, or bank account information (BPI, BDO, Metrobank) used for deposits and withdrawals
• Transaction history, including deposit amounts, withdrawal requests, and gaming activity records

Technical & Usage Data:

• IP address, device type, operating system, and browser type
• Login timestamps, session duration, and pages visited on the Platform
• Game participation records, betting history, and wagering patterns
• Cookies and similar tracking technologies (see Section 6)

Communications Data:

• Records of your communications with 9aph customer support, including live chat transcripts and email correspondence
• Feedback, survey responses, and promotional opt-in preferences

3 How We Use Your Personal Data

9aph uses the personal data we collect for the following purposes:

• Account Management: To create, verify, and manage your 9aph player account, including processing your registration and maintaining your account profile.
• Identity Verification (KYC): To verify your identity and age (21+) in compliance with applicable Philippine gaming regulations and anti-money laundering requirements.
• Transaction Processing: To process deposits, withdrawals, and other financial transactions on the Platform, including verification of payment methods.
• Platform Operation: To provide, maintain, and improve the 9aph Platform, including personalising your gaming experience and ensuring platform security.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Regulatory Compliance: To comply with applicable laws, regulations, and licensing requirements, including anti-money laundering (AML) obligations and reporting requirements to relevant Philippine authorities.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the Platform.
• Marketing Communications: To send you promotional offers, bonuses, and updates about 9aph — but only where you have provided your consent or where we have a legitimate interest in doing so. You may opt out at any time.
• Responsible Gaming: To monitor gaming activity and identify players who may be at risk of problem gambling, and to administer self-exclusion and responsible gaming tools.
• Analytics & Improvement: To analyse usage patterns, conduct research, and improve the features and performance of the 9aph Platform.

4 Legal Basis for Processing

9aph processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable Philippine law:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms & Conditions), including account management, transaction processing, and platform operation.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including KYC, AML, and gaming regulatory requirements.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, and improving our services, provided these interests are not overridden by your rights.
• Consent: Where we rely on your consent (e.g., for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing & Disclosure

9aph does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Privacy Policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely to process your financial transactions.
• Identity Verification Providers: Third-party KYC and age verification service providers engaged to assist with regulatory compliance.
• Game Software Providers: Licensed game developers and content providers whose games are available on the 9aph Platform, to the extent necessary to operate those games.
• IT & Security Service Providers: Cloud hosting, cybersecurity, and technical infrastructure providers engaged to support Platform operations.
• Regulatory Authorities: Philippine government agencies, including PAGCOR and the Anti-Money Laundering Council (AMLC), where disclosure is required by law or regulation.
• Law Enforcement: Where required by a valid court order, subpoena, or other legal process, or where disclosure is necessary to protect the rights, property, or safety of 9aph, our players, or the public.

All third-party service providers engaged by 9aph are contractually required to process personal data only in accordance with our instructions and to implement appropriate security measures to protect your data.

6 Cookies & Tracking Technologies

9aph uses cookies and similar tracking technologies (such as web beacons and pixel tags) on the Platform to enhance your user experience, maintain your session, and analyse Platform usage. The types of cookies we use include:

• Essential Cookies: Strictly necessary for the Platform to function, including session management and security cookies. These cannot be disabled.
• Performance Cookies: Used to collect anonymised information about how players use the Platform, helping us identify areas for improvement.
• Functional Cookies: Used to remember your preferences (such as language settings) and personalise your experience on 9aph.
• Analytics Cookies: Used to understand aggregate usage patterns and improve Platform features and content.

You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the 9aph Platform. By continuing to use the Platform, you consent to our use of cookies as described in this section.

7 Data Retention

9aph retains your personal data for as long as your account remains active and for such additional periods as are required by applicable law or regulation. Specifically:

• Account and identity data is retained for a minimum of five (5) years following account closure, as required by Philippine AML regulations.
• Transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications are retained for three (3) years from the date of the interaction.
• Marketing preference data is retained until you withdraw your consent or request deletion.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our data retention procedures.

8 Data Security

9aph implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 9aph Platform
• Encryption of sensitive data at rest, including financial information and identity documents
• Access controls limiting employee access to personal data on a need-to-know basis
• Regular security audits and vulnerability assessments of the Platform
• Two-factor authentication options for player accounts

9 Your Data Rights

Under the Data Privacy Act of 2012 and applicable Philippine law, you have the following rights with respect to your personal data held by 9aph:

• Right to Access: You have the right to request a copy of the personal data 9aph holds about you.
• Right to Correction: You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: You have the right to request deletion of your personal data, subject to our legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of the above rights, please contact our Data Privacy Officer at [email protected]. We will respond to all verified requests within thirty (30) days of receipt. We may require proof of identity before processing your request.

10 Children's Privacy

The 9aph Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. 9aph does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered on the 9aph Platform or provided us with personal data, please contact our support team immediately at [email protected] so that we can take appropriate action.

11 International Data Transfers

9aph primarily processes and stores personal data within the Republic of the Philippines. In certain circumstances, personal data may be transferred to and processed in other countries — for example, where we engage third-party service providers whose infrastructure is located outside the Philippines.

Where such transfers occur, 9aph ensures that appropriate safeguards are in place to protect your personal data in accordance with the Data Privacy Act of 2012 and the requirements of the National Privacy Commission. These safeguards may include contractual data protection clauses, adequacy decisions, or other legally recognised transfer mechanisms.

12 Third-Party Links

The 9aph Platform may contain links to third-party websites or services. This Privacy Policy applies solely to the 9aph Platform and does not cover the privacy practices of any third-party websites. 9aph is not responsible for the content, privacy policies, or data practices of any third-party sites. We encourage you to review the privacy policy of any third-party site you visit.

13 Updates to This Privacy Policy

9aph reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect.

The updated Privacy Policy will be effective from the date of publication on the Platform. Your continued use of 9aph following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 9aph handles your personal data, please contact our Data Privacy Officer:

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC can be reached through their official government channels.

This Privacy Policy was last reviewed and updated on 1 January 2026. All previous versions of this Privacy Policy are superseded by this document.