No Data Sold
tp999 does not sell, rent, or trade your personal information to third parties for advertising or marketing purposes, under any circumstances.
Encrypted Storage
All personal data stored on tp999 infrastructure is encrypted at rest and in transit using industry-standard protocols. Payment credentials are never stored in plain text.
You Control Your Data
Registered tp999 players have the right to access, correct, delete, or export their personal data. Submit a data rights request anytime through our support channels.
DPA Compliance
tp999's data practices are aligned with the Republic Act No. 10173 (Data Privacy Act of 2012) of the Philippines and the implementing rules of the National Privacy Commission.
Defined Retention Periods
tp999 does not retain personal data indefinitely. Retention periods are defined by regulatory requirements and the purpose for which data was collected, after which it is securely deleted.
Marketing Opt-Out
You may withdraw consent to receive marketing communications from tp999 at any time, free of charge, without affecting the lawfulness of processing before withdrawal.
Scope of This Policy: This Privacy Policy applies to all personal data collected by tp999 through the tp999.one website, its mobile interface, customer support channels, and any other interaction you have with tp999. It does not apply to third-party websites or services linked from or integrated into the tp999 platform, which are governed by their own privacy policies.
01 Introduction
tp999 ("we," "us," "our") operates the online gaming platform accessible at tp999.one (the "Platform"). In the course of providing our services to Filipino players, we necessarily collect and process certain personal information. We recognize that your privacy matters — not just as a legal obligation, but as a genuine commitment to the trust Filipino players place in tp999 every time they register, deposit, or play.
This Privacy Policy is intended to give you a clear, honest account of what personal data we collect, why we collect it, how we use and protect it, how long we keep it, and what rights you have over it. If you have questions not addressed in this Policy, you are welcome to contact our Data Protection Officer using the contact details in Section 15.
By registering an account or continuing to use the tp999 Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and may request account closure in accordance with our Terms and Conditions.
02 Data Controller
For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, tp999 is the Personal Information Controller in respect of personal data collected through the Platform. tp999 determines the purposes and means of processing your personal information as described in this Policy.
tp999 has designated a Data Protection Officer ("DPO") responsible for overseeing data protection compliance and serving as the point of contact for data subjects exercising their rights under Philippine law. Contact details for the DPO are provided in Section 15 of this Policy.
03 Personal Data We Collect
tp999 collects the following categories of personal data, depending on your interaction with the Platform:
3.1 Registration and Identity Data
| Data Element | Description |
|---|---|
| Username | The unique display name chosen by you at registration. |
| Date of Birth | Collected to verify that you are at least 21 years of age as required by PAGCOR regulations. |
| Philippine Mobile Number | Used for account authentication, OTP delivery, withdrawal verification, and support communications. |
| Email Address | Optional at registration; used for password recovery and promotional communications where consent is given. |
| City / Province | Optional; used to understand the geographic distribution of our player base across the Philippines. |
3.2 KYC Verification Data
| Data Element | Description |
|---|---|
| Government-Issued ID | Front and back image of a valid Philippine government ID (PhilSys, UMID, passport, LTO license, SSS/GSIS ID, or PRC ID). |
| ID Selfie | A photograph of you holding your submitted ID, used to verify that the ID belongs to you. |
| Full Legal Name | As appearing on your submitted government-issued identification document. |
| Address | Residential address as appearing on the submitted ID, where legible and applicable. |
3.3 Financial and Transaction Data
tp999 collects records of all financial transactions on your account, including deposits, withdrawals, wagers, winnings, bonus credits, and adjustments. We collect the payment channel used (e.g., GCash, BDO, Maya), transaction reference numbers, timestamps, and amounts. We do not store full GCash PINs, full bank account numbers, or payment card numbers.
3.4 Technical and Usage Data
When you access the tp999 Platform, we automatically collect certain technical information including: IP address, browser type and version, operating system, device type, session duration, pages visited, game sessions initiated, and clickstream data. This data is collected to ensure Platform security, diagnose technical issues, and improve user experience.
3.5 Communications Data
If you contact tp999 support via live chat, email, or any other channel, we retain records of those communications, including the content of messages, timestamps, and the resolution outcome. These records are maintained for quality assurance, training, and dispute resolution purposes.
04 How We Collect Personal Data
tp999 collects personal data through the following means:
- Direct Submission: Information you provide when you register an account, complete KYC verification, make a deposit or withdrawal request, contact support, or participate in any promotion;
- Automated Collection: Technical and usage data collected automatically through cookies, server logs, and session tracking technologies when you interact with the Platform;
- Payment Processors: Transaction confirmation and reference data shared by approved payment processors (GCash, Maya, BPI, BDO, Metrobank, etc.) when you conduct financial transactions on tp999;
- Identity Verification Services: Where tp999 uses third-party services to assist in verifying the authenticity of KYC documents submitted by players, limited identity data may be processed by those services under strict data processing agreements;
- Fraud Prevention Tools: Device fingerprinting, IP geolocation, and behavioral analytics tools used to identify and prevent fraudulent activity on the Platform.
05 Purposes of Data Processing
tp999 processes your personal data for the following specific purposes:
| Purpose | Details |
|---|---|
| Account Management | Creating and maintaining your tp999 account, authenticating your identity at login, and managing account settings and preferences. |
| Service Delivery | Processing deposits, withdrawals, wagers, game results, bonus credits, and all other core Platform services. |
| Identity Verification (KYC) | Verifying your identity and age (21+) in compliance with PAGCOR regulations and anti-money laundering requirements applicable in the Philippines. |
| Fraud Prevention & Security | Detecting and preventing unauthorized access, fraudulent transactions, bonus abuse, money laundering, and other prohibited conduct. |
| Legal Compliance | Meeting obligations under Philippine law, including the Data Privacy Act, Anti-Money Laundering Act, and applicable PAGCOR regulatory requirements. |
| Responsible Gaming | Monitoring account activity to identify problem gambling indicators, enforcing self-exclusion requests, and maintaining player protection tools. |
| Customer Support | Responding to queries, resolving disputes, and maintaining support communication records for quality assurance. |
| Platform Improvement | Analyzing aggregated usage patterns to improve Platform performance, game selection, and user experience. Individual player data is anonymized for this purpose where possible. |
| Marketing (with consent) | Sending promotional offers, bonus notifications, and relevant gaming communications to players who have provided consent. Consent may be withdrawn at any time. |
06 Legal Basis for Processing
tp999 processes your personal data on one or more of the following legal bases as recognized under the Data Privacy Act of 2012 and its Implementing Rules:
- Consent: Where you have given clear, freely-given, specific, and informed consent — for example, to receive marketing communications or to use optional Platform features;
- Contractual Necessity: Where processing is necessary to perform our obligations under the Terms and Conditions you accepted at registration — including account management, payment processing, and game service delivery;
- Legal Obligation: Where processing is required to comply with a legal or regulatory obligation imposed on tp999 under Philippine law, including KYC, anti-money laundering, and tax reporting obligations;
- Legitimate Interests: Where processing is necessary for tp999's legitimate interests in maintaining Platform security, preventing fraud, improving services, and protecting the interests of tp999 and its player community — provided such interests are not overridden by your own privacy rights.
07 Data Sharing and Disclosure
7.1 Third Parties We Share Data With
tp999 does not sell your personal data. We may share personal data with the following categories of third parties only to the extent strictly necessary for the stated purpose:
- Payment Processors: GCash, Maya, BPI, BDO, Metrobank, and other approved payment partners — to process your deposits and withdrawals;
- Identity Verification Services: Third-party KYC providers engaged to assist in verifying submitted identification documents;
- Game Providers: Licensed studios (Pragmatic Play, PG Soft, Evolution, JILI, etc.) that may receive session data necessary to deliver game services through their certified platforms;
- Fraud Prevention Providers: Technology providers that supply anti-fraud and cybersecurity tools to protect the Platform and its players;
- Legal and Regulatory Authorities: Philippine government authorities including the National Privacy Commission, PAGCOR, AMLC, and law enforcement agencies — where disclosure is required by law or court order;
- IT and Hosting Providers: Cloud infrastructure and data hosting providers who process data on behalf of tp999 under strict data processing agreements that prohibit independent use of player data.
7.2 No Sale of Data
tp999 does not and will not sell, rent, license, or otherwise commercially transfer your personal data to any third party for that party's own marketing or commercial purposes. This prohibition applies without exception, regardless of the commercial value of the data.
Data Processing Agreements: All third-party processors that handle personal data on behalf of tp999 are required to enter into formal Data Processing Agreements (DPAs) that bind them to process data only on tp999's instructions, apply equivalent security standards, and refrain from using player data for any purpose outside the scope of their engagement.
08 Data Retention
tp999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | For the duration of the account relationship and 5 years after account closure. |
| KYC documentation | 5 years after account closure, or longer if required by PAGCOR or AMLC regulations. |
| Financial transaction records | 10 years from the date of transaction, in compliance with Philippine AML record-keeping obligations. |
| Support communication records | 3 years from the date of last communication, or longer if the matter relates to an open dispute. |
| Technical / usage logs | 90 days for routine logs; up to 1 year for logs related to security investigations. |
| Marketing consent records | Until consent is withdrawn, plus 3 years as evidence of prior consent. |
Upon expiry of the applicable retention period, tp999 will securely delete or permanently anonymize the relevant personal data, unless retention for a longer period is required by a binding legal obligation or pending litigation.
09 Data Security
tp999 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include, without limitation:
- Encryption: All data transmitted between your device and tp999 servers is encrypted using TLS 1.2 or higher. Sensitive data stored at rest is encrypted using AES-256 or equivalent;
- Access Controls: Personal data is accessible only to tp999 personnel and authorized processors who require it to perform their duties, under strict role-based access controls;
- Two-Factor Authentication: tp999 offers and recommends two-factor authentication (SMS OTP) for all player accounts, adding an additional layer of protection beyond password-only login;
- Penetration Testing: tp999 conducts regular security assessments and penetration tests of its Platform infrastructure to identify and remediate vulnerabilities;
- Incident Response: tp999 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights, tp999 will notify the National Privacy Commission and affected players within the timeframes prescribed by the Data Privacy Act.
Your Responsibility: While tp999 takes extensive steps to secure your data, no system is entirely infallible. You are responsible for keeping your tp999 login credentials confidential. Never share your password or OTP codes with anyone, including persons claiming to be tp999 staff. tp999 support will never ask for your full password.
10 Cookies and Tracking Technologies
10.1 What Are Cookies
Cookies are small text files placed on your device by a website you visit. tp999 uses cookies and similar tracking technologies (such as pixel tags and session identifiers) to operate the Platform, remember your preferences, authenticate your session, and analyze usage patterns.
10.2 Types of Cookies Used by tp999
| Cookie Type | Purpose |
|---|---|
| Essential Cookies | Required for the Platform to function. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled. |
| Functional Cookies | Remember your preferences such as language settings, game lobby layout, and responsible gaming notification intervals. |
| Analytical Cookies | Collect aggregated, anonymized data about how players use the Platform — pages visited, time spent, features used — to help tp999 improve the user experience. |
| Security Cookies | Support tp999's fraud detection and anti-bot systems by identifying unusual access patterns from the same device or network. |
10.3 Managing Cookies
You may configure your browser to refuse or delete cookies. Most modern browsers (Chrome, Safari, Firefox, Edge) provide cookie management settings in their privacy or security menus. Note that disabling essential cookies will impair Platform functionality, including your ability to remain logged in during a session.
11 Your Data Subject Rights
Under the Data Privacy Act of 2012 and its Implementing Rules, you have the following rights with respect to your personal data held by tp999. To exercise any of these rights, contact our Data Protection Officer using the details in Section 15.
Right to Access
You may request a copy of the personal data tp999 holds about you, along with information about how it is processed.
Right to Rectification
You may request correction of inaccurate or incomplete personal data we hold about you. Some corrections require re-submission of supporting documentation.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Right to Object
You may object to the processing of your personal data for direct marketing purposes. Your objection to marketing communications will be honoured promptly and without charge.
Right to Data Portability
You may request a structured, machine-readable copy of personal data you have provided to tp999, for transfer to another service provider where technically feasible.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Right to Restriction
You may request restriction of processing in certain circumstances — for example, while you contest the accuracy of data we hold about you or while an objection is under consideration.
Right to Complain
You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe tp999 has processed your data in breach of applicable law.
tp999 will respond to all verifiable data rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, tp999 may extend this period by a further 30 days with written notice to you. Requests are processed at no charge for the first request in any 12-month period.
12 Minors and Age Restrictions
The tp999 Platform is strictly for users who are at least 21 years of age, in compliance with PAGCOR regulations governing online gambling in the Philippines. tp999 does not knowingly collect personal data from individuals under the age of 21.
If tp999 becomes aware that personal data has been collected from a person under 21 years of age without appropriate consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered an account on tp999, please notify our support team at [email protected] immediately.
21+ Enforcement: Age verification is conducted during KYC processing. Accounts where age verification is pending or has failed are restricted from real-money play and withdrawals. tp999 takes underage gambling prevention seriously as both a legal obligation and an ethical responsibility.
13 International Data Transfers
tp999 operates primarily within the Philippines. However, certain third-party service providers (including cloud hosting, game providers, and analytics tools) may process personal data on servers located outside the Philippines. Where such transfers occur, tp999 ensures that appropriate safeguards are in place, including:
- Binding contractual clauses requiring the recipient to apply equivalent data protection standards to those required under Philippine law;
- Transfer only to jurisdictions that the National Privacy Commission recognizes as providing an adequate level of data protection;
- Limiting the scope of data transferred to the minimum necessary for the specified processing purpose.
You may request information about specific cross-border transfers affecting your personal data by contacting the Data Protection Officer.
14 Changes to This Privacy Policy
tp999 may update this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or Platform services. Material changes — those that significantly affect your rights or our processing activities — will be communicated to registered players via the mobile number or email address on file at least 14 days before the changes take effect.
The most current version of this Privacy Policy will always be accessible at tp999.one/privacy-policy. Your continued use of the Platform following the effective date of any revision constitutes acceptance of the updated Policy. We recommend reviewing this page periodically.
15 Contact and Data Protection Officer
If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, you may contact tp999's Data Protection Officer through any of the following channels:
- Live Chat: Available 24/7 via the in-platform chat function — for general privacy queries and urgent data concerns;
- Email: [email protected] — for formal data subject requests, written complaints, and DPA-related correspondence. Please mark the subject line with "Data Privacy Request" to ensure routing to the DPO;
- Response Time: tp999 acknowledges data rights requests within 5 business days and provides substantive responses within 30 calendar days.
If you are not satisfied with tp999's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the national supervisory authority for data protection matters.
Identity Verification for Data Requests: To protect your privacy and prevent unauthorized access to your data, tp999 will verify your identity before processing any data subject access, rectification, or erasure request. Verification typically requires confirmation of your registered username and mobile number, and may require additional documentation for sensitive requests.