p989 Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") describes how p989 ("p989", "we", "us", or "our") collects, uses, discloses, retains, and protects personal data relating to individuals ("you" or "Player") who access or use the p989 online gaming platform at p989.vip ("Platform").

This Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission ("NPC") of the Philippines. It should be read alongside our Terms & Conditions, available at /terms-conditions.

By registering for a p989 account, accessing the Platform, or continuing to use our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

2. Data Controller

p989 is the personal information controller responsible for your data processed through the Platform. For all data privacy matters, our designated Data Protection Officer (DPO) can be reached at the contact details provided in Section 14 of this Policy.

3. Personal Data We Collect

p989 collects the following categories of personal data, depending on how you interact with the Platform:

Category	Examples	When Collected
Identity Data	Full name, date of birth, government-issued ID number, selfie/liveness photo	Registration and KYC verification
Contact Data	Email address, Philippine mobile number, residential address	Registration and account updates
Financial Data	GCash or PayMaya mobile number, bank account name, masked card numbers, transaction history	Deposits, withdrawals, KYC
Gaming Data	Bet history, game session logs, wager amounts, win/loss records	During active play
Technical Data	IP address, device type, browser, operating system, session timestamps	Automatically on Platform access
Communications Data	Live chat transcripts, support emails, feedback submissions	When you contact p989 support
Responsible Gaming Data	Deposit limit settings, self-exclusion requests, cooling-off period records	When you use responsible gaming tools

4. How We Collect Your Data

p989 collects personal data through the following means:

• Direct Submission: Data you provide when registering, completing KYC, making a deposit or withdrawal, contacting support, or updating your account profile.
• Automated Collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar technologies when you access the Platform.
• Third-Party Sources: Identity verification data from KYC service providers; fraud and sanctions screening data from compliance databases; payment confirmation data from GCash, PayMaya, BPI, BDO, and other payment processors.

5. Purposes and Legal Basis for Processing

p989 processes your personal data for the following purposes and on the following legal bases under RA 10173:

• Account Creation and Management — necessary for the performance of our contract with you as a registered p989 Player.
• Identity Verification (KYC) — required by our legal obligations under Philippine anti-money laundering laws (Republic Act No. 9160, as amended) and PAGCOR regulatory requirements.
• Payment Processing — necessary for the performance of our contract; processing your deposits and withdrawals via GCash, PayMaya, and other accepted methods.
• Customer Support — legitimate interest in providing effective and efficient support to Filipino players and other account holders.
• Responsible Gaming Compliance — legal obligation to enforce age restrictions (21+), honour self-exclusion requests, and maintain player protection records as required by applicable regulation.
• Fraud Prevention and Security — legitimate interest in detecting and preventing fraudulent activity, money laundering, and unauthorised account access.
• Service Improvement and Analytics — legitimate interest in understanding how the Platform is used to improve game selection, performance, and user experience.
• Marketing Communications — where you have provided explicit consent, p989 may send promotional offers, bonus notifications, and gaming updates to your registered email or mobile number. You may withdraw consent at any time.
• Legal Compliance and Dispute Resolution — compliance with applicable Philippine laws, NPC orders, court orders, or regulatory requirements.

6. Sharing Your Personal Data

p989 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard, and other payment processors, to execute financial transactions.
• KYC and Identity Verification Providers: Third-party identity verification services used to confirm age and identity during account registration.
• Game Content Providers: JILI Gaming, PG Soft, Pragmatic Play, Evolution, and other licensed game studios, to the extent required for game delivery and fairness auditing.
• IT Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity service providers operating the technical infrastructure of the Platform.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government bodies where required by law.
• Professional Advisers: Legal counsel, auditors, and compliance consultants bound by professional confidentiality obligations.

p989 does not sell, rent, or licence your personal data to third parties for their independent marketing purposes.

7. International Data Transfers

Some of p989's service providers — including cloud infrastructure and game content providers — may process data outside the Philippines. Where such transfers occur, p989 ensures that adequate safeguards are in place, including data processing agreements that require the recipient to provide a standard of protection equivalent to that required by RA 10173. You may request information about specific transfer safeguards by contacting our DPO.

8. Data Retention

p989 retains personal data for as long as necessary to fulfil the purposes outlined in this Policy, subject to the following minimum retention periods:

• Account and KYC records: Retained for a minimum of five (5) years from account closure, as required by Philippine anti-money laundering regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Gaming session logs: Retained for a minimum of two (2) years.
• Self-exclusion records: Retained for the duration of the exclusion period plus five (5) years to prevent re-registration in violation of the exclusion.
• Support communications: Retained for two (2) years from the date of the communication.

After the applicable retention period, data is securely deleted or anonymised in accordance with NPC guidelines.

9. Cookies and Tracking Technologies

p989 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used are:

• Strictly Necessary Cookies: Essential for Platform functionality, including maintaining your logged-in session after p989 login. These cannot be disabled.
• Performance Cookies: Collect anonymised data about how Players use the Platform, which pages are visited most often, and where technical errors occur. This helps us improve the Platform.
• Functional Cookies: Remember your preferences, such as language settings and preferred payment method, to personalise your experience.
• Analytics Cookies: Used to understand aggregate patterns of Platform usage. Data collected is anonymised and not used to identify individual Players.

You may configure your browser to block or delete cookies; however, disabling strictly necessary cookies will impair Platform functionality and may prevent you from accessing your p989 account.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by p989:

• Right to be Informed: The right to know that your data is being collected and processed, and for what purposes.
• Right of Access: The right to request a copy of the personal data p989 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data where processing is no longer necessary, subject to overriding legal retention obligations.
• Right to Object: The right to object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interest.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, submit a written request to our Data Protection Officer using the contact details in Section 14. We will respond within fifteen (15) business days of receiving a valid, complete request.

11. Security Measures

p989 implements technical and organisational security measures appropriate to the risk of processing personal data, including:

• 256-bit SSL/TLS encryption for all data in transit between Players and p989 servers.
• Encryption at rest for sensitive personal and financial data stored on p989 infrastructure.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Multi-factor authentication for administrative access to systems holding personal data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Automated intrusion detection systems and 24/7 security monitoring.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, p989 will notify the NPC within seventy-two (72) hours of discovery and will inform affected Players without undue delay in accordance with NPC Circular No. 16-03.

12. Minors

p989 strictly prohibits access by persons under 21 years of age. We do not knowingly collect personal data from minors. If p989 discovers that personal data has been collected from a person below the age of 21, we will immediately close the associated account, delete all related data, and return any deposited funds to the source payment method. If you believe a minor has registered on the Platform, please contact our support team immediately.

13. Amendments to This Policy

p989 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to you via your registered email address or through a prominent notice on the Platform at least fifteen (15) days prior to the change taking effect. The updated Policy will display a revised "Last Updated" date at the top of this page. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the updated Policy.

14. Contact & Data Protection Officer

For questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by p989, please contact our Data Protection Officer:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: Within 15 business days for formal data subject rights requests; within 3 business days for general privacy inquiries.
• Live Support: Available 24/7 in English and Tagalog via the live chat feature inside the Platform after signing in at /p989-login.

If you are not satisfied with p989's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines through their official channels.