y9game Privacy Policy

1. Overview

This Privacy Policy ("Policy") describes how y9game ("we," "us," or "our") collects, processes, stores, and protects the personal information of users ("Player," "you," or "your") who access or use the y9game online gaming platform, including all associated websites, mobile interfaces, and support channels (collectively, the "Platform").

By registering an account on y9game or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

This Policy should be read together with the y9game Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Data Controller

y9game acts as the data controller for all personal information collected through the Platform. As data controller, y9game determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data privacy laws.

For all data privacy inquiries, requests, and complaints, you may contact our designated Data Protection Officer (DPO) at the contact details provided in Section 14 of this Policy.

3. Data We Collect

y9game collects personal data through several channels, including account registration, platform usage, payment transactions, and customer support interactions. The categories of personal data we collect include:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, government-issued ID number, selfie/photo for KYC	Registration & KYC verification
Contact Data	Email address, Philippine mobile number, residential address	Registration & account updates
Financial Data	GCash number, PayMaya account, BPI/BDO/Metrobank account details, transaction history	Deposits & withdrawals
Technical Data	IP address, device type, browser type, operating system, session logs	Platform access & usage
Usage Data	Games played, wager amounts, session duration, bonus usage, login timestamps	Ongoing platform use
Communications Data	Live chat transcripts, support ticket content, email correspondence	Customer support interactions
Preference Data	Marketing preferences, responsible gaming settings, notification preferences	Account settings & opt-ins

We collect only the personal data that is necessary for the purposes described in this Policy. We do not collect sensitive personal information beyond what is required for identity verification and regulatory compliance.

4. How We Use Your Data

y9game processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your y9game player account, including identity verification and age confirmation (21+ requirement).
• Service Delivery: To provide access to games, process deposits and withdrawals in Philippine Peso, and deliver the core features of the y9game Platform.
• Payment Processing: To facilitate transactions via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods, and to maintain accurate financial records.
• Regulatory Compliance: To comply with PAGCOR licensing requirements, anti-money laundering (AML) obligations, and other applicable Philippine laws and regulations.
• Responsible Gaming: To monitor gaming activity, enforce deposit and loss limits, process self-exclusion requests, and identify players who may be at risk of problem gambling.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats.
• Customer Support: To respond to your inquiries, resolve disputes, and provide assistance through our 24/7 Philippine Standard Time support team.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent. You may opt out at any time through your account settings.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the y9game Platform experience for Filipino players.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, y9game processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions, including account management, game provision, and payment processing.
• Legal Obligation: Processing required to comply with PAGCOR regulations, AML laws, tax obligations, and other applicable Philippine legal requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

y9game does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely for the purpose of processing your transactions.
• Identity Verification Providers: Third-party KYC service providers engaged to verify your identity and age in compliance with PAGCOR requirements.
• Game Software Providers: Licensed game developers and content providers whose games are available on the y9game Platform, to the extent necessary for game delivery and fairness auditing.
• Regulatory Authorities: PAGCOR, the National Privacy Commission (NPC), and other government agencies, where disclosure is required by law or regulatory order.
• IT Service Providers: Cloud hosting, data storage, and cybersecurity vendors engaged to operate and secure the Platform infrastructure, bound by data processing agreements.
• Professional Advisers: Legal counsel, auditors, and compliance consultants, where necessary for the conduct of y9game's business.

All third parties with whom y9game shares personal data are required to process such data in accordance with applicable Philippine privacy laws and are prohibited from using it for any purpose other than that for which it was shared.

7. Cookies & Tracking Technologies

y9game uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyze usage patterns. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled and do not require your consent.
• Functional Cookies: Remember your language preferences, login state, and responsible gaming settings to improve your experience.
• Analytics Cookies: Collect aggregated, anonymized data about how players use the Platform, helping us identify areas for improvement. Used only with your consent.
• Marketing Cookies: Used to deliver relevant promotional content. Used only with your explicit consent and may be withdrawn at any time.

You can manage your cookie preferences through your browser settings or the y9game cookie preference center accessible from the Platform footer. Disabling certain cookies may affect the functionality of the Platform.

8. Data Retention

y9game retains your personal data for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your active account, plus five (5) years following account closure, in compliance with PAGCOR record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AML regulations.
• KYC Documents: Retained for five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Support Communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required for dispute resolution.
• Marketing Preferences: Retained until you withdraw consent or close your account.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with y9game's data disposal procedures.

9. Data Security

y9game implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the y9game Platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing.
• Multi-factor authentication (MFA) for account access and administrative systems.
• Incident response procedures for the detection, reporting, and remediation of data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, y9game will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012.

10. Your Data Privacy Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by y9game:

• Right to be Informed: The right to be informed of how your personal data is collected and processed, as set out in this Policy.
• Right of Access: The right to request a copy of the personal data y9game holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to y9game's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 14. We will respond to all verified requests within thirty (30) days, in accordance with NPC guidelines.

11. Minors

The y9game Platform is strictly intended for persons aged 21 years and above, in accordance with PAGCOR regulations governing online gaming in the Philippines. y9game does not knowingly collect personal data from persons under 21 years of age. If we become aware that personal data has been collected from a person under 21, we will immediately close the associated account, delete the data, and forfeit any associated balances in accordance with our Terms & Conditions.

If you believe a minor has registered on the y9game Platform, please contact our support team immediately so that we can take appropriate action.

12. International Data Transfers

y9game primarily processes and stores personal data within the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines (for example, international game software providers or cloud infrastructure vendors), y9game ensures that such transfers are subject to appropriate safeguards, including contractual data protection clauses that provide a level of protection equivalent to that required under Philippine law.

y9game will not transfer your personal data to any jurisdiction that does not provide an adequate level of data protection without first obtaining your consent or implementing appropriate contractual safeguards.

13. Changes to This Policy

y9game reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is indicated at the top of this page. Where changes are material, we will notify registered players via email or an in-platform notification prior to the changes taking effect. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

14. Contact & Complaints

For all data privacy inquiries, access requests, rectification requests, or complaints, please contact the y9game Data Protection Officer:

Email: [email protected]

Our DPO will acknowledge your request within three (3) Philippine business days and provide a substantive response within thirty (30) days. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.

For general support inquiries, contact: [email protected]