tp999 Privacy Policy

tp999 ("tp999", "we", "us", "our") operates the online gaming platform accessible at tp999.co and is the personal information controller ("PIC") under Republic Act No. 10173, the Philippine Data Privacy Act of 2012 ("DPA"), with respect to all personal data collected from registered players and platform visitors in the Philippines.

tp999 operates under a valid license issued by the Philippine Amusement and Gaming Corporation ("PAGCOR") and processes personal data in accordance with PAGCOR's licensing conditions, PAGCOR's data governance framework, and the regulatory oversight of the National Privacy Commission ("NPC").

Questions, data subject requests, and privacy-related complaints may be directed to our Data Protection Officer at: [email protected] (displayed as plain text — not a clickable link).

tp999 collects personal data in several categories depending on your interaction with the platform. The table below summarizes the data we collect and the context in which it is collected:

tp999 does not knowingly collect sensitive personal information as defined under Section 3(l) of the DPA (e.g., health data, religious beliefs, political affiliations) except where strictly required for regulatory compliance or responsible gaming assessments, and only with your explicit consent where applicable.

tp999 processes your personal data only for the following specified, legitimate purposes:

• Account creation and management: To register your tp999 account, verify your identity and age (21+ requirement), and maintain your account in good standing;
• Platform operation: To provide access to games, process bets, calculate and pay out winnings, and ensure the integrity of gaming outcomes;
• Payment processing: To facilitate deposits via GCash, PayMaya, BDO, BPI, and Metrobank, and to process withdrawal requests to your registered Philippine payment method;
• Regulatory compliance: To fulfill our obligations as a PAGCOR licensee, including anti-money laundering (AML) reporting under Republic Act No. 9160 (Anti-Money Laundering Act), AMLC regulations, and PAGCOR monitoring requirements;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and abuse of platform systems;
• Responsible gaming: To monitor gaming behavior in accordance with PAGCOR's responsible gaming framework, enforce deposit limits set by players, and identify patterns indicative of problem gambling;
• Customer support: To respond to inquiries, resolve disputes, and handle complaints submitted to the tp999 support team;
• Platform improvement: To analyze aggregated usage data (in anonymized or pseudonymized form) to improve the tp999 user experience, game selection, and platform performance;
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have given consent or where permitted under applicable law. You may opt out at any time.

Under the Philippine Data Privacy Act, tp999 processes your personal data on the following legal bases:

• Contractual necessity: Processing necessary to perform our contract with you — your tp999 account agreement — including account management, game provision, and payment processing;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act, AMLC regulations, NPC requirements, and other applicable Philippine law;
• Legitimate interests: Processing necessary for tp999's legitimate business interests in fraud prevention, platform security, and improving our services, where such interests are not overridden by your rights;
• Consent: For optional processing such as marketing communications and analytics cookies, where we will request your explicit consent and honor any withdrawal of consent promptly.

tp999 does not sell, rent, or trade your personal data. We share your data only with the following categories of recipients and only to the extent necessary:

• Payment processors: GCash (Mynt / Globe Fintech), PayMaya (Voyager Innovations), BDO Unibank, BPI, and Metrobank, for the processing of deposits and withdrawals;
• Game software providers: Our game provider partners who supply the gaming engines and RNG infrastructure for tp999's bingo, slot, live casino, and other game categories. These providers process game session data as personal information processors under data processing agreements with tp999;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, as required by law or regulatory direction;
• KYC / AML verification providers: Third-party identity verification and AML screening services that assist tp999 in meeting its regulatory obligations;
• Legal and professional advisors: Law firms, auditors, and consultants where disclosure is necessary for legal proceedings, audits, or regulatory investigations;
• Law enforcement: Philippine law enforcement agencies where tp999 is legally compelled to disclose data or where disclosure is necessary to prevent or investigate criminal activity.

All third-party service providers acting as personal information processors on behalf of tp999 are bound by data processing agreements that require them to process your data only on our instructions, implement appropriate security measures, and comply with the DPA.

tp999 uses cookies and similar tracking technologies on the tp999.co platform. Cookies are small text files stored on your device by your browser. We use the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function — session authentication, security tokens, load balancing. These cannot be disabled without impairing platform functionality;
• Functional cookies: Remember your preferences (e.g., game lobby display settings, language preference) to improve your tp999 experience;
• Analytics cookies: Collect aggregated, anonymized data about how players use the platform to help tp999 improve navigation, game discovery, and overall experience. These require your consent;
• Session replay / heatmap cookies: Where used, these help tp999's UX team understand how players interact with specific pages. Data is anonymized before analysis.

You may manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the tp999 platform, including your ability to remain logged in between sessions.

tp999 retains your personal data for the minimum period necessary to fulfill the purposes described in this Policy, after which data is securely deleted or anonymized. Key retention periods include:

• Account and identity data: Retained for the duration of your active tp999 account plus a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AML record-keeping obligations under RA 9160;
• Financial transaction records: Retained for a minimum of five (5) years as required by the Anti-Money Laundering Act and AMLC Regulations;
• Gaming session logs: Retained for a minimum of three (3) years for dispute resolution purposes and PAGCOR audit compliance;
• Customer support communications: Retained for two (2) years from the date of the last communication in a thread;
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year to demonstrate compliance.

Where applicable law requires retention beyond these periods, tp999 will retain data for the legally mandated duration. At the end of the retention period, data is securely destroyed in accordance with NPC-approved disposal procedures.

tp999 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction:

• Encryption in transit: All data transmitted between your device and tp999 servers is protected by TLS 1.2 / TLS 1.3 with 256-bit SSL certificates;
• Encryption at rest: Sensitive personal data stored in tp999 databases is encrypted using AES-256 encryption;
• Access controls: Strict role-based access controls (RBAC) limit tp999 employee access to personal data on a need-to-know basis. Access is logged and audited;
• Multi-factor authentication: tp999 internal systems require MFA for all staff with access to personal data processing systems;
• Penetration testing: The tp999 platform undergoes regular third-party penetration testing and vulnerability assessments;
• Incident response: tp999 maintains a documented personal data breach response procedure aligned with NPC Circular No. 16-03 requirements, including notification timelines.

Despite these measures, no system is completely impenetrable. If you become aware of any suspected unauthorized access to your tp999 account, notify us immediately at [email protected].

Under the Philippine Data Privacy Act (Sections 16–20), you have the following rights with respect to your personal data held by tp999:

To exercise any of these rights, contact tp999's Data Protection Officer at [email protected] with your full name, registered mobile number, and a description of your request. We will respond within the timeframes prescribed by the NPC (generally within 15 working days of receipt of a complete request). If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission.

tp999 is strictly an adult platform. In accordance with PAGCOR regulations and Philippine law, tp999 does not knowingly collect personal data from, or provide services to, any individual under 21 years of age. Age verification is a mandatory step in the tp999 registration process.

If tp999 discovers that personal data has been collected from an individual who is under 21 years of age, the account will be immediately suspended, all personal data associated with the account will be deleted as soon as practicable (subject to any legally required retention obligations), and any funds — including deposits and winnings — will be handled in accordance with PAGCOR's underage gambling protocols.

If you are a parent or guardian and believe that your child may have created a tp999 account, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

tp999 primarily processes personal data within the Republic of the Philippines. Some of our technology service providers — including game software providers and cloud infrastructure providers — may process or store personal data in servers located outside the Philippines.

Where such transfers occur, tp999 ensures that appropriate safeguards are in place as required by Section 21 of the Data Privacy Act and applicable NPC regulations, including: contractual clauses that require recipient organizations to maintain a level of data protection equivalent to Philippine DPA standards, and assessments of the data protection laws in the recipient country.

tp999 does not transfer personal data to jurisdictions that lack adequate data protection frameworks without implementing the contractual and technical safeguards described above.

tp999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. The effective date at the top of this page will always reflect the date of the most recent revision.

Where changes are material — meaning they significantly affect how we process your personal data or your rights as a data subject — tp999 will provide at least 14 days' advance notice by posting a prominent notice on the tp999.co platform and, where feasible, by notifying registered players via their registered mobile number or email address.

Your continued use of tp999 after the effective date of a revised Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with any revised Policy, you may close your tp999 account in accordance with our Terms and Conditions.

For all privacy-related matters — including data subject rights requests, questions about this Policy, or to report a suspected personal data breach — please contact tp999's designated Data Protection Officer:

If you are not satisfied with tp999's response to a data subject rights request or privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) through their official government channels and complaint portal.