Your privacy matters to 9aph. This Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what your rights are as a Filipino data subject under Republic Act No. 10173 — the Data Privacy Act of 2012.
These six principles summarize our data practice. The full legal detail for each is in the sections below.
9aph collects personal data that is necessary, adequate, and not excessive relative to the purpose for which it is collected — in line with the data minimization principle under RA 10173. We do not collect data speculatively for undefined future use.
Personal data collected by 9aph is used exclusively for the purposes described in this Policy — account management, payment processing, regulatory compliance, responsible gaming, and service improvement. We do not repurpose your data without your consent.
All data transmitted between your device and 9aph is protected by 256-bit TLS encryption — the same standard used by Philippine online banking platforms. Your account credentials, payment details, and personal information are never transmitted in plain text.
9aph does not sell, rent, or trade your personal data to third-party marketing companies, data brokers, or advertisers. Your information stays within the 9aph platform ecosystem and its regulated service partners — full stop.
Under RA 10173, you have the right to access, correct, object to, erase, and port your personal data. 9aph provides a clear, documented process for exercising these rights — explained in full in Section 10 of this Policy.
9aph's data processing activities are conducted in compliance with RA 10173 and its Implementing Rules and Regulations, under the supervisory jurisdiction of the National Privacy Commission (NPC) of the Philippines and within the PAGCOR regulatory framework.
This Privacy Policy ("Policy") is issued by the operator of the 9aph platform ("9aph," "we," "us," or "our") accessible at 9aph.app. It describes how 9aph collects, uses, stores, discloses, and protects the personal information of individuals ("you" or "Data Subject") who access or use the 9aph platform, including the website, game lobby, sportsbook, customer support services, and related digital channels.
This Policy is issued in compliance with Republic Act No. 10173 (Data Privacy Act of 2012) of the Republic of the Philippines and its Implementing Rules and Regulations ("IRR"), as enforced by the National Privacy Commission ("NPC"). Where 9aph's operations involve data subjects residing outside the Philippines, applicable data protection principles under relevant international frameworks are also observed.
By accessing the 9aph platform, registering an account, or providing your personal information to 9aph in any form, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. If you do not agree to this Policy, please discontinue use of the Platform.
This Policy tells you what information 9aph collects about you, what we do with it, who we share it with, how we keep it safe, and what rights you have over it. We've written it in legal terms because that's required — but we've also included summaries throughout to make it practical. If anything is unclear, contact our Data Protection Officer at the details in Section 15.
For the purposes of RA 10173, 9aph is the Personal Information Controller (PIC) in respect of all personal data processed through the Platform. This means 9aph determines the purposes and means of processing your personal information.
9aph operates the Platform under the PAGCOR licensing framework and is subject to Philippine regulatory oversight. The Platform is designed for and directed at Filipino players aged 21 years and above. 9aph has appointed a Data Protection Officer (DPO) whose contact details are provided in Section 15 of this Policy.
Certain data processing activities are carried out on behalf of 9aph by third-party service providers acting as Personal Information Processors (PIPs). These providers process data only on 9aph's documented instructions and are bound by data processing agreements requiring compliance with RA 10173 standards.
When you create a 9aph account, we collect your Philippine mobile number and the password you choose. During Know Your Customer (KYC) verification — required before processing withdrawal requests — we collect your full legal name as it appears on your government-issued ID, date of birth, residential address, nationality, and a copy of your valid Philippine government-issued identification document (such as PhilSys, driver's license, passport, UMID, or PRC ID), together with a recent selfie photograph for identity matching purposes.
9aph processes transaction records for all deposits and withdrawals, including the payment method used (GCash, Maya, BPI, BDO, Metrobank, etc.), transaction amounts in Philippine Peso, timestamps, and transaction reference numbers. We do not store full e-wallet account credentials or bank account numbers on our servers — payment data is handled through our regulated payment processing partners.
We maintain records of all gaming activity conducted through your account, including game titles accessed, bet amounts, game outcomes, session start and end times, balance changes, and bonus redemption history. This data is retained for regulatory compliance, dispute resolution, responsible gaming monitoring, and platform improvement purposes.
When you access the Platform, we automatically collect certain technical information, including your IP address, browser type and version, operating system, device type and identifiers, screen resolution, time zone, and the pages or game titles you access within the Platform. This data is collected through server logs and cookies as described in Section 8.
When you contact 9aph through live chat, email, or any other support channel, we retain records of those communications, including the content of messages, timestamps, and the resolution of any issues raised. This data is used for service improvement, staff training, and dispute resolution.
Where you activate responsible gaming tools — such as deposit limits, cool-off periods, or self-exclusion — we record the settings applied, the dates of activation, and (where applicable) any modifications made. This data is processed for the specific purpose of giving effect to your responsible gaming elections and for regulatory reporting purposes.
9aph collects personal data through the following channels and methods:
Under RA 10173, all processing of personal data requires a lawful basis. 9aph processes personal data on the following legal grounds:
9aph uses your personal data to create and maintain your account, authenticate your identity at login, process deposits and withdrawals, resolve technical issues, and provide customer support. These activities constitute contract performance and are essential to the service 9aph provides.
9aph is required by law to perform identity verification, maintain transaction records, file reports with relevant Philippine authorities as required under the AMLA and applicable PAGCOR regulations, and retain certain data for specified minimum periods. This processing is non-optional and constitutes a legal obligation.
9aph uses technical data, transaction data, and identity data to detect and prevent fraudulent activity, money laundering, bonus abuse, collusion, and unauthorized access to accounts. Risk scoring and fraud detection systems may process your data automatically as part of this function. Where automated processing results in a significant decision affecting your account, you have the right to request human review as described in Section 10.
Gaming activity data is monitored for indicators of problem gambling behavior. Where such indicators are detected, 9aph may use this data to apply responsible gaming interventions in accordance with its obligations under PAGCOR regulations and its Responsible Gaming Policy. This processing is based on 9aph's legitimate interests and legal obligations in the responsible gaming domain.
With your prior consent, 9aph may use your contact details to send promotional communications about bonuses, game releases, seasonal promotions, and platform updates. You may withdraw your consent to marketing communications at any time through your account settings or by contacting support. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.
Aggregated and anonymized usage data is analyzed to understand how players interact with the Platform, identify performance issues, optimize game loading times, and improve the overall player experience. This analysis does not identify individual players and is conducted on a statistical basis.
9aph does not sell your personal data to third parties. We do not use your data for automated profiling for credit or insurance purposes. We do not share your data with social media platforms for advertising retargeting. We do not disclose your data to third parties for their own independent marketing purposes.
9aph engages regulated third-party service providers to support the Platform's operations. These providers process personal data on 9aph's behalf under documented data processing agreements. Categories of service providers include payment processors (GCash, Maya, and partner banks), KYC and identity verification services, game software providers, cloud infrastructure providers, fraud detection services, and customer support platform providers.
9aph is required to disclose personal data and transaction records to PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other competent Philippine authorities where such disclosure is required by law, court order, or regulatory directive. 9aph will disclose the minimum data necessary to comply with each such requirement.
In the event of a merger, acquisition, or sale of the business or assets of 9aph, personal data held by 9aph may be transferred to the acquiring entity as part of the transaction. In such circumstances, 9aph will notify affected data subjects prior to data transfer and will ensure that the acquiring entity is bound by privacy obligations no less protective than those in this Policy.
9aph will not share your personal data with any third party other than as described above without your prior written consent, except where disclosure is required by applicable law.
9aph uses the following categories of cookies and similar tracking technologies on the Platform:
Non-essential cookies require your consent at first access. You may adjust your cookie preferences at any time through the cookie settings accessible in the Platform footer. Note that disabling certain functional cookies may affect the quality of your experience on the Platform. Essential and security cookies cannot be disabled.
Your web browser may also allow you to block or delete cookies generally. Please refer to your browser's documentation for instructions. 9aph is not responsible for the functionality impact of browser-level cookie blocking on your use of the Platform.
9aph retains personal data for the periods necessary to fulfill the purposes for which it was collected, or for the minimum periods required by applicable Philippine law, whichever is longer. The following retention schedule applies:
| Data Category | Retention Period | Legal Basis for Retention |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AMLA, PAGCOR regulatory requirements |
| KYC identity documents | 5 years from account closure | Philippine AMLA (RA 9160 as amended) |
| Transaction records | 5 years from transaction date | AMLA, BIR tax record requirements |
| Gaming activity logs | 3 years from date of activity | PAGCOR regulations, dispute resolution |
| Support communications | 2 years from case resolution | Legitimate interest (service quality) |
| Responsible gaming records | 5 years from account closure | PAGCOR responsible gaming obligations |
| Marketing consent records | Until consent withdrawn + 3 years | RA 10173 accountability principle |
| Analytics/technical logs | 13 months (rolling) | Legitimate interest (platform security) |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with 9aph's data disposal procedures.
Under the Philippine Data Privacy Act (RA 10173), you have the following rights with respect to your personal data held by 9aph. These rights are exercisable by submitting a written request to the 9aph Data Protection Officer as described in Section 15.
| Right | What It Means | How to Exercise |
|---|---|---|
| Right to be Informed | You have the right to know what data we hold about you, how it is used, and with whom it is shared — the purpose of this Policy. | Available through this Policy and account dashboard |
| Right of Access | You may request a copy of the personal data 9aph holds about you, in a commonly used format. | Submit written request to DPO |
| Right to Rectification | You may request correction of inaccurate or incomplete personal data held by 9aph. | Account settings or DPO request |
| Right to Erasure | You may request deletion of personal data that is no longer necessary for the purpose for which it was collected, subject to legal retention obligations. | Submit written request to DPO |
| Right to Object | You may object to processing based on legitimate interests or for direct marketing purposes. Marketing objections are honored immediately. | Account settings (marketing) or DPO request |
| Right to Data Portability | You may request your personal data in a structured, machine-readable format for transfer to another service provider, where technically feasible. | Submit written request to DPO |
| Right to Complain | You may lodge a complaint with the National Privacy Commission (NPC) if you believe 9aph has violated your data privacy rights. | NPC official channels |
9aph will respond to data subject rights requests within fifteen (15) business days of receipt of a valid written request. Where additional time is required due to the complexity of the request, 9aph will notify you of the extended timeframe within the initial fifteen-day period.
The right to erasure is subject to 9aph's legal retention obligations. Data we are required to retain under the Philippine AMLA, PAGCOR regulations, or tax laws cannot be erased upon request until the applicable legal retention period has expired, regardless of whether your account is closed. 9aph will inform you of any such limitation when processing your erasure request.
9aph implements and maintains appropriate technical and organizational security measures designed to protect personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:
Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You use the Platform at your own risk with respect to events beyond 9aph's reasonable control. If you suspect that your account has been compromised, please contact 9aph support immediately.
The 9aph Platform is strictly for persons aged 21 years and above. 9aph does not knowingly collect personal data from individuals under the age of 21. Registration requires confirmation of age, and KYC verification requires documentary proof of age through a valid Philippine government-issued ID.
If 9aph becomes aware that it has collected personal data from a person under the age of 21, the affected account will be suspended immediately, all personal data associated with that account will be deleted to the extent permitted by legal retention requirements, and the matter will be escalated in accordance with applicable PAGCOR regulations.
Parents and guardians who believe that a minor under their care has registered on the Platform should contact 9aph immediately using the contact details in Section 15. 9aph will investigate and take appropriate action promptly.
9aph's primary operations and data storage are based in the Philippines. In certain circumstances, personal data may be processed by service providers whose infrastructure is located outside the Philippines — for example, game software providers or cloud infrastructure partners operating regionally.
Where personal data is transferred outside the Philippines, 9aph ensures that appropriate safeguards are in place to protect your data to a standard equivalent to RA 10173 requirements. These safeguards include contractual data processing agreements imposing RA 10173-equivalent obligations on receiving parties, and where applicable, transfer to jurisdictions that have been assessed as providing an adequate level of data protection.
9aph does not transfer personal data to jurisdictions that do not provide adequate data protection safeguards without implementing appropriate contractual protections and, where required, obtaining prior approval from the National Privacy Commission.
9aph reserves the right to amend this Privacy Policy at any time to reflect changes in legal requirements, regulatory guidance from the NPC or PAGCOR, business practices, or Platform functionality. Material amendments will be communicated to registered players via the contact details on their account, with a minimum of fifteen (15) days' advance notice prior to the effective date of the amended Policy, except where immediate amendment is required for legal compliance reasons.
The current version of this Policy is always accessible on the Platform at 9aph.app/privacy-policy. The "Last Updated" date at the top of this Policy reflects the date of the most recent amendment. Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgment of the amended Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or 9aph's personal data processing practices, or if you wish to exercise any of your data subject rights under RA 10173, please contact the 9aph Data Protection Officer (DPO) using the following details:
Platform: 9aph.app
Email (plain text): [email protected]
Contact Channel: Live chat (24/7) via the 9aph Platform
Subject Line for DPO Requests: "Data Privacy Request – [Your Full Name]"
Response Time: Within 15 business days of receipt
If you are not satisfied with 9aph's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines through its official complaint channels.
This Privacy Policy was last updated on 1 January 2026 and is effective from that date for all new and existing 9aph accounts.
Register on the only Philippines-first online casino that treats your privacy as seriously as your gaming experience.