x999 Casino – Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") applies to all personal data processed by x999 Casino ("x999," "we," "us," or "our") in connection with the operation of the x999 platform, accessible at x999.one, including all associated games, services, promotions, customer support channels, and mobile applications.

x999 is committed to protecting the privacy and personal data of all users, including registered players, prospective players, and visitors to the x999 website. This Policy is designed to comply with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations, as administered by the National Privacy Commission ("NPC").

By registering an account on x999, accessing the platform, or otherwise providing your personal data to x999, you acknowledge that you have read, understood, and agree to the collection and use of your information as described in this Policy. If you do not agree, please discontinue use of the x999 platform immediately.

2. Data Controller Information

x999 Casino acts as the data controller for all personal data collected through the x999 platform. As data controller, x999 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection laws, including the Philippine Data Privacy Act of 2012.

x999 has designated a Data Protection Officer ("DPO") who is responsible for overseeing data protection strategy and implementation, and for ensuring compliance with the DPA. You may contact the x999 DPO at any time using the contact details provided in Section 14 of this Policy.

3. Personal Data We Collect

x999 collects the following categories of personal data from players and platform users:

x999 does not intentionally collect sensitive personal information as defined under the DPA (such as health data, religious beliefs, or political affiliations) unless specifically required by law or regulatory obligation.

4. How We Collect Your Data

x999 collects personal data through the following means:

• Direct interactions: Data you provide when registering an x999 account, completing KYC verification, making deposits or withdrawals, contacting x999 support, or participating in promotions.
• Automated technologies: Technical data collected automatically when you access the x999 platform, including cookies, server logs, and similar tracking technologies (see Section 8).
• Third-party sources: Identity verification data from KYC service providers; fraud detection signals from anti-fraud partners; payment confirmation data from GCash, PayMaya, BPI, BDO, and Metrobank.
• Publicly available sources: Information from public records or databases where permitted by applicable law, used for fraud prevention and regulatory compliance purposes.

5. Legal Basis for Processing

x999 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to register your x999 account, process transactions, and deliver gaming services you have requested.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, PAGCOR regulatory requirements, and tax reporting obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improvement of x999 services, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. How We Use Your Personal Data

x999 uses your personal data for the following purposes:

• To create, verify, and manage your x999 account, including identity verification and age verification (21+ requirement).
• To process deposits, withdrawals, and other financial transactions on the x999 platform.
• To provide customer support and respond to your inquiries, complaints, and dispute resolution requests.
• To detect, investigate, and prevent fraud, money laundering, and other illegal or prohibited activities on x999.
• To comply with PAGCOR regulatory requirements, AML obligations, and other applicable Philippine laws.
• To administer bonuses, promotions, and loyalty programs available on x999.
• To monitor and enforce responsible gaming commitments, including self-exclusion requests and deposit limit settings.
• To send you transactional communications (e.g., deposit confirmations, withdrawal notifications, security alerts) that are necessary for your use of x999.
• To send you marketing communications about x999 promotions and new games, where you have consented to receive such communications.
• To analyze platform usage and improve the x999 gaming experience.

7. Data Sharing and Third Parties

x999 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. x999 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your financial transactions.
• KYC and identity verification providers: Third-party services engaged by x999 to verify your identity and age in compliance with regulatory requirements.
• Fraud prevention and AML service providers: Specialist third parties that assist x999 in detecting and preventing fraudulent activity and money laundering.
• Game software providers: Licensed game developers and studios whose games are available on the x999 platform, to the extent necessary for game delivery and technical support.
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities, where disclosure is required by law or regulatory directive.
• IT and cloud service providers: Third-party technology providers that host, maintain, and support the x999 platform infrastructure, subject to strict data processing agreements.

All third parties with whom x999 shares personal data are required to process such data only for the specified purpose, in accordance with x999's instructions, and subject to appropriate technical and organizational security measures.

8. Cookies and Tracking Technologies

x999 uses cookies and similar tracking technologies to operate and improve the platform. The following types of cookies are used on x999:

• Strictly necessary cookies: Essential for the operation of the x999 platform, including session management, login authentication, and security functions. These cannot be disabled.
• Performance and analytics cookies: Used to collect anonymized data about how players use x999, helping us identify areas for improvement. These are only set with your consent.
• Functional cookies: Used to remember your preferences (e.g., language, display settings) to provide a more personalized x999 experience.
• Marketing cookies: Used to deliver relevant promotional content about x999 games and offers. These are only set with your explicit consent.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies may affect the functionality of the x999 platform.

9. Data Retention

x999 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your active x999 account, plus a minimum of five (5) years following account closure, in compliance with AML and regulatory record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations.
• KYC verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Customer support communications: Retained for three (3) years from the date of the interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, x999 will securely delete or anonymize your personal data in accordance with its data disposal procedures.

10. Data Security

x999 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the x999 platform.
• Encryption of sensitive data at rest, including financial data and identity documents.
• Role-based access controls limiting x999 staff access to personal data on a strict need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of the x999 platform.
• Two-factor authentication (2FA) options for player accounts.
• Comprehensive staff training on data protection and information security obligations.

While x999 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, x999 will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012.

11. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by x999:

• Right to be informed: The right to know what personal data x999 collects about you and how it is used — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data x999 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to x999's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe x999 has processed your personal data in violation of the DPA.

To exercise any of these rights, please contact the x999 Data Protection Officer using the details in Section 14. x999 will respond to all verified data subject requests within fifteen (15) business days of receipt.

12. Children and Minors

The x999 platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. x999 does not knowingly collect personal data from individuals under the age of 21. If x999 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all associated data will be deleted, and any deposits will be returned in accordance with applicable regulations.

If you are a parent or guardian and believe that a minor has registered on x999 or provided personal data to x999, please contact x999 support immediately so that appropriate action can be taken.

13. Changes to This Privacy Policy

x999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via email or a prominent notice on the x999 platform at least seven (7) days before the changes take effect. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. Your continued use of x999 following the effective date of any changes constitutes your acceptance of the revised Policy.

14. Contact and Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or x999's handling of your personal data, please contact the x999 Data Protection Officer:

• Live Chat: Available 24/7 on every page of the x999 platform.
• Email: [email protected]

If you are not satisfied with x999's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the government authority responsible for administering and implementing the Data Privacy Act of 2012.