y9game Privacy Policy

1 Data Controller

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and applicable data protection regulations, the data controller responsible for your personal data is the operating entity of the y9game platform, accessible at y9game.one.

As data controller, y9game determines the purposes and means of processing your personal data. We are committed to processing your data lawfully, fairly, and transparently, and to implementing appropriate technical and organizational measures to protect it.

2 Personal Data We Collect

2.1 Registration Data

When you create a y9game account, we collect the following information: full legal name; date of birth; residential address in the Philippines; mobile number; email address; and username and password (stored in hashed form — we never store your password in plain text).

2.2 Identity Verification Data (KYC)

To comply with PAGCOR regulations and anti-money laundering (AML) requirements, y9game may collect copies of government-issued identification documents (e.g., Philippine passport, SSS ID, PhilHealth ID, UMID, or driver's license); proof of address documents (e.g., utility bills or bank statements); and proof of payment method ownership.

2.3 Financial Data

y9game collects transaction records including deposit amounts, withdrawal requests, wager history, and bonus activity. We do not store full payment card numbers. Payment processing is handled by our regulated payment partners, who maintain their own data security standards.

2.4 Gaming Activity Data

We collect records of your gaming activity on the y9game platform, including games played, session duration, bet amounts, win/loss records, and responsible gaming tool usage. This data is used to operate the platform, detect problem gambling patterns, and comply with regulatory reporting requirements.

2.5 Technical and Device Data

When you access y9game, we automatically collect certain technical data, including: IP address; device type, operating system, and browser version; session timestamps and duration; pages visited and features used; and referral source. This data is used for security monitoring, fraud detection, and platform optimization.

2.6 Communications Data

If you contact y9game's customer support team, we retain records of those communications, including chat transcripts, email correspondence, and support ticket history. This data is used to resolve your queries and improve our support services.

3 How We Collect Your Data

y9game collects personal data through the following means:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact support, or participate in promotions;
• Automatically — through cookies, web beacons, and similar tracking technologies when you access and use the y9game platform (see Section 6 for details);
• From third parties — including identity verification providers, payment processors, fraud detection services, and regulatory databases, where necessary to verify your identity or comply with legal obligations.

4 Purpose and Legal Basis for Processing

y9game processes your personal data for the following purposes, each supported by a lawful basis under the Data Privacy Act of 2012:

Where y9game relies on your consent as the legal basis for processing (e.g., for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent, contact y9game support or update your communication preferences in your account settings.

5 Data Sharing and Disclosure

5.1 Third-Party Service Providers

y9game shares personal data with carefully selected third-party service providers who assist us in operating the platform. These include: payment processors (GCash, PayMaya, and banking partners) for the purpose of processing deposits and withdrawals; identity verification and KYC providers; fraud detection and cybersecurity service providers; cloud hosting and infrastructure providers; and customer support platform providers. All third-party processors are bound by data processing agreements that require them to handle your data securely and only for the purposes specified by y9game.

5.2 Regulatory and Legal Disclosure

y9game is required by Philippine law to share certain player data with regulatory and law enforcement authorities. This includes disclosures to the Philippine Amusement and Gaming Corporation (PAGCOR) as part of our licensing obligations; the Anti-Money Laundering Council (AMLC) where transactions trigger mandatory reporting thresholds under the Anti-Money Laundering Act; and any competent court, tribunal, or government authority where disclosure is required by a valid legal order.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of y9game's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to how your data is processed as a result.

5.4 No Sale of Personal Data

y9game does not sell, rent, or otherwise commercially exploit your personal data to third-party advertisers, data brokers, or marketing companies. Any sharing of data is strictly limited to the purposes described in this Privacy Policy.

6 Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit the y9game website. They allow the platform to recognize your device, remember your preferences, and collect information about how you use the site. y9game uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period).

6.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function. These include authentication cookies that keep you logged in to your y9game account and security cookies that help detect fraudulent activity. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations to provide a more personalized experience on y9game.
• Analytics Cookies: Help us understand how players use the y9game platform — which pages are visited most, where players encounter difficulties, and how the platform can be improved. Data collected is aggregated and anonymized.
• Performance Cookies: Monitor platform performance, load times, and error rates to ensure y9game operates reliably for all players across the Philippines.

6.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is set. Please note that disabling strictly necessary cookies will impair the functionality of the y9game platform and may prevent you from logging in or accessing certain features.

7 Data Retention

y9game retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, subject to the following retention periods:

• Account and registration data: Retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with PAGCOR licensing requirements and AML regulations.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later, as required by the Anti-Money Laundering Act.
• Transaction and gaming activity records: Retained for a minimum of 5 years from the date of each transaction, as required by applicable financial regulations.
• Customer support communications: Retained for 2 years from the date of the last interaction, unless a longer retention period is required for dispute resolution or legal proceedings.
• Technical and device data: Retained for up to 12 months from collection, unless required for longer periods for security investigations.
• Marketing consent records: Retained for the duration of your consent and for 1 year following withdrawal of consent, as evidence of compliance.

Upon expiry of the applicable retention period, y9game will securely delete or anonymize your personal data in accordance with our data disposal procedures.

8 Data Security

8.1 Technical Measures

y9game implements a comprehensive set of technical security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These include: 256-bit SSL/TLS encryption for all data in transit; AES-256 encryption for sensitive data at rest; bcrypt hashing for all stored passwords; multi-factor authentication options for player accounts; regular penetration testing and vulnerability assessments; and real-time intrusion detection and monitoring systems.

8.2 Organizational Measures

Access to personal data within y9game is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training. y9game maintains a formal information security policy and conducts periodic internal audits to ensure compliance.

8.3 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, y9game will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required by the Data Privacy Act. Affected players will be notified without undue delay where the breach is likely to result in a high risk to their rights.

9 Your Data Subject Rights

Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights with respect to your personal data held by y9game:

• Right to be Informed: You have the right to be informed about how y9game collects and processes your personal data. This Privacy Policy fulfills that obligation.
• Right of Access: You may request a copy of the personal data y9game holds about you, along with information about how it is being processed.
• Right to Rectification: If any personal data y9game holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to y9game's legal retention obligations.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to y9game's overriding legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: If you believe y9game has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, please contact y9game's Data Protection Officer using the contact details in Section 13. We will respond to all verified requests within 15 business days. We may need to verify your identity before processing your request.

10 Children's Privacy

The y9game platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine law. y9game does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from an individual under 21, we will immediately close the associated account, delete the data, and forfeit any associated balances.

If you are a parent or guardian and believe that a minor has registered on y9game, please contact our support team immediately so that we can take appropriate action. y9game encourages parents and guardians to use parental control software to prevent minors from accessing online gambling platforms.

11 Cross-Border Data Transfers

y9game's primary operations and data storage are based in the Philippines. However, some of our third-party service providers — including cloud infrastructure providers and certain technology partners — may process data in other jurisdictions. Where personal data is transferred outside the Philippines, y9game ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under Philippine law.

Such safeguards may include: contractual clauses that impose data protection obligations on the recipient; transfers to jurisdictions that have been assessed as providing an adequate level of data protection; and binding corporate rules where applicable. y9game will not transfer your personal data to a jurisdiction that does not provide adequate protections without your explicit consent or a valid legal basis.

12 Changes to This Privacy Policy

y9game reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will notify registered players via email or a prominent notice on the y9game platform at least 7 days before the changes take effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how y9game protects your personal data. Your continued use of the platform after the effective date of any revision constitutes your acceptance of the updated policy.

13 Contact and Data Protection Officer

y9game has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data, or if you wish to exercise any of your data subject rights, please contact our DPO:

If you are not satisfied with y9game's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.