p998 Privacy Policy

1. Who We Are (Data Controller)

p998 (operating at p998.club) is the Data Controller responsible for your personal information collected through the p998 platform. As Data Controller, p998 determines the purposes and means of processing your personal data in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR) as administered by the National Privacy Commission (NPC) of the Philippines.

For all privacy-related enquiries, our Data Protection Officer (DPO) can be reached at: [email protected] (plain text — not a clickable link).

2. Personal Data We Collect

p998 collects personal data across three main categories. The data collected depends on the nature of your interaction with the platform:

Category	Data Types	When Collected
Identity Data	Full legal name, date of birth, government-issued ID details (UMID, PhilSys, passport, driver's licence)	Registration, KYC verification
Contact Data	Philippine mobile number, email address (optional)	Registration, account updates
Financial Data	GCash/Maya account number, bank account details (BPI, BDO, Metrobank), transaction history, deposit and withdrawal records	Deposits, withdrawals, AML compliance
Technical Data	IP address, device type, operating system, browser type, session timestamps, login location data	Automatically on platform access
Gaming Data	Game history, bet amounts, session duration, bonus usage, responsible gaming limit settings	During gameplay and account use
Communications Data	Live chat transcripts, support ticket records, SMS verification logs	When contacting p998 support

p998 does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required for responsible gaming compliance (e.g., self-exclusion medical declarations).

3. How We Use Your Personal Data

p998 processes your personal data for the following purposes:

• Account Management: To create, maintain, verify, and secure your p998 account throughout the account lifecycle.
• Identity Verification (KYC): To verify your identity and age (21+) in compliance with PAGCOR requirements and applicable anti-money laundering regulations under RA 9160.
• Payment Processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and other supported Philippine payment channels.
• Legal and Regulatory Compliance: To meet obligations under the DPA, Anti-Money Laundering Act, PAGCOR directives, and other applicable Philippine laws and regulations.
• Security and Fraud Prevention: To detect and prevent unauthorised account access, multi-accounting, money laundering, and other prohibited activities on the p998 platform.
• Responsible Gaming: To monitor gaming patterns, enforce deposit and session limits, and administer self-exclusion requests in accordance with PAGCOR's responsible gaming framework.
• Customer Support: To respond to queries, investigate complaints, and resolve disputes submitted through p998's live chat and support channels.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve platform performance, game selection, and user experience.
• Promotional Communications: To send relevant offers and promotions via SMS to your registered Philippine number, where you have not opted out. You may opt out at any time through your Account settings.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act and its IRR, p998 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and p998 (i.e., providing gaming and payment services as agreed in the Terms and Conditions).
• Legal Obligation: Processing required to comply with applicable Philippine laws including RA 9160 (AMLA), RA 10173 (DPA), and PAGCOR directives.
• Legitimate Interest: Processing for fraud prevention, platform security, and responsible gaming monitoring — where such interests are not overridden by your privacy rights.
• Consent: Processing for non-essential marketing communications, where your explicit opt-in consent has been obtained. You may withdraw consent at any time.

5. Data Sharing and Disclosure

p998 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. We share your data only in the following limited circumstances:

• Payment Processors: GCash (GXI), Maya (PayMaya Philippines), BancNet, and other licensed Philippine payment service providers, solely to process your transactions.
• Game Providers: Licensed game studios (e.g., PG Soft, Jili, Pragmatic Play, Fa Chai) receive technical session data necessary to operate game titles. These providers are contractually prohibited from using this data beyond service delivery.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies where required by Philippine law or valid legal process.
• Security and Fraud Partners: Third-party identity verification and fraud detection services used to verify KYC documents and detect suspicious activity, operating under strict data processing agreements.
• Corporate Transactions: In the event of a merger, acquisition, or sale of p998 assets, your data may be transferred to the successor entity, subject to equivalent privacy protections.

6. Cookies and Tracking Technologies

The p998 platform uses the following types of cookies and tracking technologies:

• Essential Cookies: Required for core platform functionality including session management, login authentication, and security features. These cannot be disabled without impairing platform access.
• Analytics Cookies: Used to collect anonymised data about how players interact with the p998 platform — which pages are visited, how long sessions last, and which games are played most. This data is used in aggregate form to improve platform performance.
• Preference Cookies: Store your settings such as language preferences and responsible gaming limit configurations between sessions.

You may manage non-essential cookies through your browser settings. Note that disabling essential cookies will affect your ability to log in and use the p998 platform. p998 does not use third-party advertising cookies or cross-site tracking technologies.

7. Data Retention

p998 retains your personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal obligations:

• Active Account Data: Retained for the duration of your account plus 5 years following account closure, in compliance with PAGCOR record-keeping requirements and RA 9160 (AMLA).
• Financial Transaction Records: Retained for a minimum of 5 years from the date of transaction, as required by AMLA regulations and BIR compliance requirements.
• KYC and Identity Documents: Retained for 5 years following account closure, or longer where required by applicable law.
• Support and Communications Data: Retained for 3 years from the date of last interaction, or until resolution of any related dispute or regulatory matter.
• Technical and Usage Data: Retained in anonymised or aggregated form indefinitely for platform analytics purposes.

Upon expiry of the applicable retention period, p998 will securely delete or anonymise your personal data in accordance with NPC-prescribed data disposal standards.

8. Data Security

p998 implements technical and organisational measures appropriate to the risk level of personal data processed on the platform. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and the p998 platform;
• AES-256 encryption for personal data stored at rest on p998 servers;
• Password hashing using industry-standard algorithms (bcrypt) — p998 does not store plaintext passwords;
• Role-based access controls limiting internal employee access to personal data on a strict need-to-know basis;
• Regular security audits and vulnerability assessments of the p998 platform infrastructure;
• Incident response procedures aligned with NPC breach notification requirements under the DPA IRR.

In the event of a personal data breach that is likely to result in serious harm to affected players, p998 will notify the NPC within 72 hours of becoming aware of the breach, and will notify affected players without undue delay via their registered mobile number.

9. Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data processed by p998:

• Right to be Informed: The right to know what personal data p998 holds about you and how it is being processed.
• Right of Access: The right to request a copy of the personal data p998 holds about you.
• Right to Rectification: The right to correct inaccurate or incomplete personal data held by p998.
• Right to Erasure: The right to request deletion of your personal data where retention is no longer necessary, subject to overriding legal obligations.
• Right to Object: The right to object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interest.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Damages: The right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data.
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact the p998 Data Protection Officer at [email protected]. p998 will respond to verified requests within 15 business days in accordance with NPC guidelines.

10. Children's Privacy

The p998 platform is strictly for individuals aged 21 and above. p998 does not knowingly collect or process personal data from persons under 21 years of age. If p998 becomes aware that personal data has been collected from an underage individual, that data will be permanently deleted and the associated Account will be closed immediately.

If you believe an underage person has registered at p998, please contact our support team immediately at [email protected].

11. Changes to This Privacy Policy

p998 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or NPC guidance. Material changes will be communicated to registered players via their registered Philippine mobile number with at least 7 days' advance notice before the revised Policy takes effect.

The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. Your continued use of the p998 platform after the effective date of any revision constitutes your acceptance of the updated Policy.

12. Contact and Data Protection Officer

For all privacy-related requests, complaints, or enquiries — including requests to exercise your data subject rights — please contact:

• Data Protection Officer, p998
• Email: [email protected] (plain text — not a clickable link)
• Platform: 24/7 live chat available after logging in to your p998 account

If you are not satisfied with p998's response to a privacy complaint, you may escalate your concern to the National Privacy Commission of the Philippines at www.privacy.gov.ph (reference only — not a hyperlink).