90ph Privacy Policy

1.1 90ph is the data controller for personal information processed in connection with your use of the 90ph platform. As data controller, 90ph determines the purposes and means of processing your personal data.

1.2 If you have any questions, concerns, or requests relating to this Policy or the processing of your personal data, please contact our Data Protection Officer via the 90ph Live Chat (available 24/7) or by email at [email protected] (plain text — this is not a clickable link).

1.3 90ph operates under the supervisory framework of the Philippine Amusement and Gaming Corporation (PAGCOR), which imposes its own data handling standards on licensed operators. Our data practices comply with both PAGCOR requirements and the Data Privacy Act.

2.1 90ph collects the following categories of personal data from players, depending on the stage of your interaction with the platform:

2.2 You are not required to provide all of the above data to use the platform. However, failure to provide Identity Data and Financial Data will prevent us from processing withdrawals, as KYC verification is a PAGCOR and anti-money laundering compliance requirement.

3.1 Direct Collection. Most personal data is provided directly by you when you complete the 90ph registration form, use the 90ph Login, submit KYC documents, make a deposit, contact support, or respond to surveys and promotions.

3.2 Automatic Collection. When you access the 90ph platform, our servers and analytics tools automatically collect Technical Data including your IP address, browser details, device identifiers, and session behaviour. This data is used to ensure platform security and improve the user experience.

3.3 Third-Party Sources. Where necessary for KYC compliance or fraud prevention, 90ph may receive data about you from identity verification service providers, payment processors (including GCash and Maya), and PAGCOR's regulatory systems. Data received from these sources is treated with the same protections as directly-collected data.

90ph uses your personal data for the following purposes:

• Account management — to create, maintain, and secure your 90ph account, including processing your 90ph Login credentials and session tokens;
• Identity verification (KYC) — to confirm your age (21+) and identity in compliance with PAGCOR requirements and Philippine anti-money laundering laws;
• Payment processing — to execute deposits and withdrawals via GCash, Maya, BPI, BDO, UnionBank, and other accepted payment channels;
• Game service delivery — to provide access to casino games, sports betting, slots, bingo, and racing on the 90ph platform;
• Fraud and security monitoring — to detect, investigate, and prevent unauthorised account access, bonus abuse, money laundering, and other prohibited conduct;
• Responsible gaming — to monitor gaming behaviour patterns, enforce self-imposed limits, honour self-exclusion requests, and comply with PAGCOR player protection requirements;
• Regulatory compliance — to fulfil reporting obligations to PAGCOR and other applicable Philippine regulatory authorities;
• Customer support — to respond to your inquiries, resolve disputes, and process complaints;
• Platform improvement — to analyse usage patterns, optimise game performance, and develop new features based on aggregated, anonymised analytics;
• Marketing communications — to send you promotional offers and bonus notifications via SMS, where you have consented or where we have a legitimate interest. You may opt out at any time by contacting Live Chat.

Under the Philippine Data Privacy Act of 2012, 90ph relies on the following legal bases for processing your personal data:

• Contractual necessity — processing required to perform our obligations under the 90ph Terms & Conditions, including account management and payment processing;
• Legal obligation — processing required to comply with PAGCOR regulations, Anti-Money Laundering Act (AMLA) requirements, and other applicable Philippine law;
• Legitimate interests — processing for fraud prevention, platform security, and aggregated analytics, where these interests do not override your fundamental rights;
• Consent — processing for marketing communications, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6.1 90ph does not sell your personal data to third parties. We share your data only in the following limited circumstances:

• Payment processors — GCash (Mynt), Maya (Paymaya Philippines), BPI, BDO, UnionBank, and other payment service providers receive the financial data necessary to process your transactions;
• Game providers — third-party studios (including JILI, PG Soft, Pragmatic Play, Evolution Gaming, and others) may receive your player ID and gaming session data for game delivery and integrity purposes. They are contractually prohibited from using this data for any other purpose;
• Identity verification services — KYC and anti-fraud service providers receive identity documents for verification purposes and are subject to strict confidentiality agreements;
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine authorities may receive data as required by law or regulatory directive;
• Legal proceedings — courts, law enforcement, or legal advisers where required by a valid legal order or to protect 90ph's legal rights;
• Business transfers — in the event of a merger, acquisition, or sale of 90ph's business, your data may be transferred to the successor entity, subject to the same privacy protections as this Policy.

6.2 All third parties with whom 90ph shares personal data are required to implement appropriate technical and organisational security measures and to process data only for the purposes for which it was shared.

7.1 The 90ph platform uses cookies and similar tracking technologies (including browser local storage and session tokens) to enable core platform functionality, maintain your login session, and collect analytics data.

7.2 The following types of cookies are used on 90ph:

• Strictly necessary cookies — required for the platform to function, including session management and security tokens. These cannot be disabled;
• Functional cookies — remember your preferences such as language settings and lobby layout configurations;
• Analytics cookies — collect anonymised data about how players use the platform to help us identify performance issues and improve the user experience. No personally identifiable information is included in analytics reports.

7.3 You may manage non-essential cookies through your browser settings. Please note that disabling cookies may affect the functionality of the 90ph platform, including the stability of your login session. 90ph does not use advertising or third-party tracking cookies for behavioural advertising purposes.

8.1 90ph retains your personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by law. The primary retention periods are:

• Active account data — retained for the duration of your 90ph account plus five (5) years after account closure;
• Financial transaction records — retained for ten (10) years from the date of each transaction, in compliance with the Philippine AMLA and its implementing regulations;
• KYC documents — retained for five (5) years after account closure or longer if required by PAGCOR or AMLC directives;
• Support communications — retained for three (3) years from the date of the last interaction;
• Technical logs and cookies — retained for a rolling period not exceeding thirteen (13) months.

8.2 After the applicable retention period, data is securely deleted or anonymised so that it can no longer be associated with you. Data subject to an active legal or regulatory hold will not be deleted until the hold is lifted.

9.1 90ph implements industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the 90ph platform;
• Encryption of sensitive data at rest, including financial information and KYC documents;
• Session token-based authentication that does not store your password in any readable format;
• Two-factor authentication available to all account holders via OTP SMS;
• Role-based access controls limiting which 90ph staff may access personal data;
• Regular security assessments and penetration testing of the platform infrastructure.

9.2 While 90ph takes all reasonable steps to secure your data, no internet-based system is completely immune to security risks. You are responsible for keeping your 90ph Login credentials confidential and for promptly reporting any suspected unauthorised access to your account via Live Chat.

9.3 In the event of a personal data breach that poses a risk to your rights and freedoms, 90ph will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will inform affected players as required by the Data Privacy Act and NPC regulations.

10.1 Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 90ph:

• Right to be informed — to know what personal data we collect about you, the purposes for processing, and how long we retain it;
• Right of access — to request a copy of the personal data 90ph holds about you;
• Right to rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure ("right to be forgotten") — to request deletion of your personal data, subject to our legal retention obligations under PAGCOR and AMLA requirements;
• Right to restrict processing — to request that we limit how we use your data in certain circumstances;
• Right to data portability — to receive a copy of your personal data in a structured, machine-readable format;
• Right to object — to object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent — to withdraw consent for processing at any time without affecting prior lawful processing.

10.2 To exercise any of the above rights, contact the 90ph Data Protection Officer via Live Chat or at [email protected]. We will respond within thirty (30) calendar days. Complex requests may require an extension of up to an additional thirty (30) days, and we will notify you of any such extension.

10.3 If you are unsatisfied with our response, you may lodge a complaint with the Philippine National Privacy Commission (NPC) through NPC's official channels.

11.1 The 90ph platform is strictly for persons aged 21 years and older in compliance with PAGCOR regulations. 90ph does not knowingly collect personal data from persons under 21 years of age.

11.2 If we become aware that an account holder is under 21 years of age, we will immediately suspend the account, purge the associated personal data to the extent legally permissible, and report the matter to PAGCOR as required. If you believe that a minor has registered on 90ph, please contact our support team immediately via Live Chat.

12.1 90ph may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform features. The updated Policy will be published on this page with a revised "Last Updated" date.

12.2 For material changes that significantly affect how we process your personal data, we will provide advance notice via the 90ph platform and, where possible, by SMS to your registered Philippine mobile number.

12.3 Your continued use of 90ph following the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. If you disagree with the changes, your remedy is to close your account before the effective date.

For all data privacy matters, including rights requests, complaints, or general questions about this Policy, contact the 90ph Data Protection Officer:

• Live Chat: Available 24/7 from within the 90ph platform (fastest response)
• Email: [email protected] — plain text, not a clickable link

Please mark your message "Data Privacy Request" to ensure it is routed directly to the Data Protection Officer. 90ph will acknowledge receipt within five (5) business days.