9aph Privacy Policy

9aph ("9aph," "we," "us," or "our") operates the online casino and sports betting platform available at 9aph.vip. For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, 9aph acts as the Personal Information Controller in respect of the personal data it collects from players and website visitors in the Philippines and internationally.

9aph is committed to handling personal data with transparency, integrity, and in full compliance with applicable Philippine data protection law. This Privacy Policy describes our practices in plain language so that every Filipino player — whether accessing the platform from Quezon City, Davao, Cebu, Iloilo, or anywhere else in the archipelago — can understand exactly how their information is handled.

9aph collects personal data in the following categories, depending on how you interact with the platform:

9aph does not collect sensitive personal information beyond what is necessary for identity verification (such as government ID), which is required by PAGCOR-context compliance and AMLC regulations. Biometric data is not collected or processed by 9aph.

9aph collects personal data through the following channels and mechanisms:

• Direct submission: Information you provide voluntarily when registering an account, completing KYC verification, submitting payment details, contacting support, or filling in any 9aph form.
• Automated collection: Technical data (IP address, device information, session data) collected automatically through cookies, log files, and similar technologies when you visit or interact with 9aph.vip. See Section 7 (Cookies & Tracking) for full details.
• Transaction records: Financial data generated when you deposit, wager, or withdraw through integrated payment providers such as GCash, Maya, BPI, BDO, UnionBank, and Coins.ph.
• Third-party verification: Identity and age verification data may be cross-checked against records held by payment processors or identity verification services in accordance with PAGCOR-context KYC requirements. These services are bound by data processing agreements requiring them to handle your data in accordance with Philippine law.
• Support interactions: Records of your communications with the 9aph support team, including live chat logs, are retained for quality assurance and dispute resolution purposes.

9aph processes your personal data only for specific, legitimate purposes. The following table sets out those purposes and the data categories used for each:

1. Account registration and management: Creating, maintaining, and operating your 9aph player account, including authentication, password resets, and account settings management.
2. Identity verification (KYC): Verifying your identity and confirming that you are at least 21 years of age, as required by applicable Philippine regulations.
3. Payment processing: Processing deposits and withdrawals through GCash, Maya, BPI, BDO, and other supported payment channels in Philippine Peso.
4. Game provision and history: Delivering game services, recording game results, calculating winnings, and maintaining your transaction history for account accuracy and dispute resolution.
5. Responsible gaming: Operating deposit limits, session timers, loss limits, cool-off periods, and self-exclusion tools activated on your account.
6. Anti-fraud and security: Detecting and preventing fraud, money laundering, collusion, bonus abuse, and other prohibited conduct as defined in the 9aph Terms and Conditions.
7. Regulatory compliance: Meeting obligations under PAGCOR-applicable regulations, the Anti-Money Laundering Act (AMLA), the Philippine Data Privacy Act, and other applicable Philippine laws.
8. Customer support: Responding to your support queries, resolving disputes, and maintaining records of support interactions.
9. Platform improvement: Analysing aggregated usage data (in anonymised form where possible) to improve the performance, stability, and features of the 9aph platform.
10. Marketing communications: Sending you information about 9aph promotions, bonuses, and new games — only where you have expressly opted in to receive such communications. You may opt out at any time by contacting 9aph support.

Under the Philippine Data Privacy Act of 2012, 9aph processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the 9aph Terms and Conditions — including running your account, processing payments, and providing games.
• Consent: Processing for optional purposes such as marketing communications and enhanced personalisation, where you have given clear, informed, and freely given consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
• Legal obligation: Processing required to comply with applicable Philippine laws including the Data Privacy Act, AMLA, and PAGCOR-context regulatory requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming enforcement, and internal analytics — where these interests are not overridden by your privacy rights.

9aph may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to confidentiality or data processing agreements:

• Payment processors: GCash, Maya, BPI, BDO, UnionBank, 7-Eleven CLiQQ, USDT payment rails, and Coins.ph — to process your deposits and withdrawals. Each processor is subject to their own privacy policy and applicable Philippine financial regulations.
• Identity verification services: Third-party KYC providers used to verify government ID documents submitted during account verification. These providers are contractually prohibited from using your data for any other purpose.
• Game providers: Pragmatic Play, PG Soft, JILI, Evolution Gaming, and other certified suppliers — who may receive technical session data necessary to deliver live and RNG games. Game providers do not receive your full identity or financial data.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement bodies where 9aph is legally compelled to disclose information or where disclosure is necessary to prevent fraud or criminal activity.
• IT and infrastructure service providers: Cloud hosting, database management, cybersecurity, and platform support providers operating under strict data processing agreements that restrict use of your data to service delivery only.

9aph uses cookies and similar technologies (local storage, session tokens) on 9aph.vip for the following purposes:

• Strictly necessary cookies: Required for the platform to function — maintaining your login session, preserving your account settings, and enabling secure authentication. These cannot be disabled without breaking platform functionality.
• Analytics cookies: Aggregate, anonymised data about how players navigate 9aph.vip — page load times, error rates, feature usage patterns. Used to improve platform performance. No personally identifiable information is transmitted through analytics tools.
• Functional cookies: Remember your preferences such as language settings, display choices, and last-used payment method to improve your experience on return visits to 9aph.

9aph does not use third-party advertising or behavioural tracking cookies. We do not participate in cross-site tracking networks or retargeting programmes. You may manage cookie preferences through your browser settings; note that disabling strictly necessary cookies will impair or prevent your ability to log in and use 9aph services.

9aph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• Transport encryption: All data exchanged between your device and 9aph servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption.
• Password security: Account passwords are stored using industry-standard one-way cryptographic hashing with salting. Plain-text passwords are never stored or transmitted by 9aph.
• Two-factor authentication: SMS-based 2FA is available to all 9aph players and is strongly recommended. When enabled, account access requires both your password and a time-limited SMS code.
• Data storage security: Personal and financial data is stored on access-controlled, encrypted database servers. Access is restricted to 9aph personnel with a documented operational need, and all access is logged and audited.
• Penetration testing: 9aph conducts regular security assessments including vulnerability scanning and penetration testing by independent security professionals to identify and address potential weaknesses.
• Staff training: All 9aph personnel with access to personal data complete mandatory data privacy training and are bound by confidentiality obligations as a condition of engagement.

While 9aph takes all reasonable measures to protect your data, no internet-based platform can guarantee absolute security. You also have a role to play — please keep your 9aph login credentials confidential and report any suspicious activity on your account to 9aph support immediately.

9aph retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual. Where deletion is not technically immediately possible (e.g., backup systems), data is isolated from active processing and scheduled for deletion at the next available cycle.

• Right to be Informed: You have the right to be informed of how your personal data is collected, used, and processed — which is the purpose of this Privacy Policy.
• Right of Access: You may request a copy of the personal data 9aph holds about you, along with information about how it is being processed. We will respond within 15 working days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For most account data, you can update it directly in your 9aph account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent on which processing was based — subject to 9aph's legal obligations to retain certain data (see Section 9).
• Right to Object: You may object to processing of your personal data for marketing purposes at any time. You may also object to processing based on legitimate interests where you have grounds relating to your particular situation.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and carried out by automated means, you may request your personal data in a structured, machine-readable format.
• Right to Lodge a Complaint: If you believe your data privacy rights have been violated, you have the right to lodge a complaint with the Philippine National Privacy Commission (NPC) at privacy.gov.ph. We encourage you to contact 9aph first so we have the opportunity to address your concern directly.

Requests to exercise your rights should be submitted to the 9aph Data Protection Officer as described in Section 14. 9aph will verify your identity before processing any data subject request to prevent unauthorised access to another person's data.

9aph is an online gambling platform and is strictly prohibited from being accessed by persons under 21 years of age. This is a non-negotiable requirement under PAGCOR regulations applicable to the Philippine online gaming sector.

9aph does not knowingly collect personal data from any person under 21 years of age. Age is verified at the point of registration and again at KYC verification prior to first withdrawal. If 9aph becomes aware that personal data has been collected from a person who was under 21 at the time of collection, that account will be closed, the data will be deleted as soon as practicable consistent with legal obligations, and any remaining balance of real money will be returned through the original deposit method.

If you believe that a minor has registered or used a 9aph account, please contact 9aph support immediately so the matter can be investigated and resolved promptly.

Some of 9aph's service providers and technology partners may process personal data in jurisdictions outside the Philippines — for example, cloud infrastructure providers and game studios operating in Asia, Europe, or North America. Where such transfers occur, 9aph ensures that appropriate safeguards are in place to protect your data at a standard equivalent to that required by the Philippine Data Privacy Act, including:

• Data processing agreements incorporating standard contractual clauses or equivalent protections binding the receiving party to comply with DPA-equivalent obligations.
• Transfers to countries or organisations recognised by the National Privacy Commission as providing an adequate level of data protection.
• Technical safeguards including encryption of data in transit and at rest in the destination environment.

You may request further information about specific international transfers of your personal data by contacting the 9aph Data Protection Officer as described in Section 14.

9aph reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform features. The revised policy will be published at 9aph.vip/privacy-policy with an updated "Last Updated" date at the top.

Where changes are material — meaning they significantly affect the way your personal data is used or your rights in relation to it — 9aph will provide notice to registered players via SMS or through a notice displayed on the platform, with a minimum of 7 days before the revised policy takes effect. For non-material changes (such as clarifications or formatting updates), the revised policy takes effect on publication.

Your continued use of the 9aph platform after any revision takes effect constitutes your acceptance of the updated Privacy Policy. We recommend reviewing this page periodically to stay informed of how your data is protected.

For any privacy-related queries, requests to exercise your data subject rights, or concerns about how 9aph handles your personal data, please contact the 9aph Data Protection Officer:

When contacting the DPO, please include your registered 9aph mobile number or username so that we can verify your identity before processing your request. Do not include sensitive documents in your initial contact message — the DPO team will advise on the appropriate secure channel for submitting any required documentation.