gold999 Privacy Policy

01 Definitions

In this Privacy Policy, the following terms shall have the meanings set out below:

• "gold999", "we", "us", or "our" refers to the gold999 online gaming platform operated at gold999.asia, regulated by PAGCOR.
• "Personal Data" means any information that identifies or could reasonably identify an individual, whether directly or indirectly, including but not limited to a name, mobile number, email address, IP address, or account identifier.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, sharing, access, transfer, deletion, or destruction.
• "Data Subject" means the individual to whom Personal Data relates — in this context, any gold999 Player or website visitor.
• "Data Controller" means gold999 in its capacity as the entity that determines the purposes and means of processing Personal Data collected on the Platform.
• "Data Processor" means any third party that processes Personal Data on gold999's behalf, pursuant to a written data processing agreement.
• "NPC" means the National Privacy Commission of the Philippines, the regulatory body responsible for administering and enforcing the Data Privacy Act of 2012.
• "DPA" means Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations.
• "Platform" means the gold999 website at gold999.asia and all associated services and features.
• "KYC" means the Know Your Customer identity and age verification process required by PAGCOR.

02 Scope & Application

This Privacy Policy applies to all Personal Data processed by gold999 in connection with the operation of the Platform, including data collected from registered Players, prospective Players who visit the Platform without registering, and individuals who contact gold999 Customer Support.

This Policy should be read alongside gold999's Terms & Conditions and Responsible Gaming Policy, which together govern the Player's relationship with the gold999 Platform.

By accessing or using the gold999 Platform — including by browsing gold999.asia without registering — you acknowledge that you have read and understood this Privacy Policy. If you do not consent to the collection and use of your Personal Data as described in this Policy, you should not access the Platform.

03 Data We Collect

Gold999 collects the following categories of Personal Data, depending on how you interact with the Platform:

Gold999 does not collect sensitive personal information beyond what is strictly necessary for identity and age verification under PAGCOR's KYC requirements. We do not collect biometric data, health information, or religious or political affiliations.

04 Purposes of Processing

Gold999 processes Personal Data for the following specific, lawful purposes:

• Account Registration and Management: To create and maintain your gold999 Player Account, including authentication, account settings, and communication preferences.
• Identity and Age Verification (KYC): To verify that you meet the PAGCOR-mandated minimum age requirement of 21 years and to confirm your identity as required by Philippine gaming regulation and anti-money laundering law.
• Platform Operation and Service Delivery: To provide access to Games, process bets and payouts, maintain PHP Wallet balances, and deliver all features of the gold999 Platform.
• Payment Processing: To facilitate deposits and withdrawals via GCash, Maya, BPI, BDO, UnionBank, Metrobank, 7-Eleven Cliqq, Coins.ph, and USDT TRC20, and to maintain accurate transaction records.
• Regulatory Compliance: To comply with PAGCOR requirements, Philippine anti-money laundering law (AMLA), tax reporting obligations, and any directives issued by Philippine regulatory authorities including the AMLC and NPC.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent, abusive, or unlawful activity on the Platform, including money laundering, bonus abuse, underage gambling, and account takeover attempts.
• Responsible Gaming: To monitor game activity patterns and offer or enforce responsible gaming tools such as deposit limits, session time controls, and self-exclusion, consistent with PAGCOR's responsible gaming framework.
• Customer Support: To respond to Player enquiries, resolve complaints, and provide technical assistance.
• Marketing Communications: Where you have provided explicit consent, to send promotional offers, bonus notifications, and Platform updates via SMS to your registered Philippine mobile number or email address. You may withdraw this consent at any time.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve Platform performance, game selection, and user experience.

05 Legal Bases for Processing

Under the Data Privacy Act of 2012, gold999 relies on the following legal bases for processing your Personal Data:

• Contractual Necessity: Processing required to fulfil gold999's obligations under the Terms & Conditions agreed upon by the Player at registration — including account management, service delivery, and payment processing.
• Legal Obligation: Processing required to comply with gold999's obligations under Philippine law, including PAGCOR's KYC and responsible gaming requirements, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate Interests: Processing necessary for gold999's legitimate business interests, where these do not override your fundamental rights — including fraud prevention, Platform security, and anonymised analytics for service improvement.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

06 Disclosure & Sharing of Personal Data

Gold999 does not sell, rent, or trade your Personal Data to third-party marketers, advertisers, or data brokers. Personal Data may be shared with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual data protection obligations:

• PAGCOR and Regulatory Authorities: Gold999 is required to disclose Player information to PAGCOR and, where applicable, to the AMLC, Bureau of Internal Revenue (BIR), and other Philippine government authorities, as mandated by law. Such disclosures are not discretionary — they are legal obligations.
• Payment Service Providers: GCash (G-Xchange Inc.), Maya (PayMaya Philippines Inc.), partner banks (BPI, BDO, UnionBank, Metrobank), 7-Eleven (PLDT subsidiary Cliqq), Coins.ph, and cryptocurrency processors, to the extent necessary to process deposit and withdrawal transactions.
• KYC and Identity Verification Partners: Third-party KYC service providers engaged to verify the identity and age of Players in compliance with PAGCOR requirements. All such providers process data under strict contractual controls aligned with the DPA.
• Game Studio Partners: Licensed game studios (including but not limited to Pragmatic Play, PG Soft, Evolution Gaming, and Jili) may receive Technical Data and anonymised game session data necessary for game delivery and integrity monitoring. These studios do not receive identifiable Player data beyond what is required for game operation.
• IT Infrastructure and Security Providers: Cloud hosting, content delivery, cybersecurity, and fraud detection service providers engaged by gold999 to maintain and secure the Platform.
• Legal and Professional Advisors: Philippine legal counsel, auditors, and compliance advisors, subject to professional confidentiality obligations.

Gold999 requires all Data Processors to comply with the Data Privacy Act and to implement appropriate technical and organisational measures to protect Personal Data. Gold999 does not permit Data Processors to use Player Personal Data for any purpose other than the specific service they provide to gold999.

07 Cookies & Tracking Technologies

Gold999 uses cookies and similar tracking technologies on the Platform to provide core functionality, improve user experience, and analyse usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function — including session management, authentication, security tokens, and PHP Wallet balance display. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, last-accessed game category, and deposit method preference, to provide a consistent experience across sessions.
• Analytical Cookies: Used to collect anonymised data about how Players interact with the Platform — pages visited, features used, session duration — to help gold999 improve its services. Data collected through analytical cookies is aggregated and does not identify individual Players.
• Security Cookies: Used to detect and prevent fraudulent or abusive access attempts, including bots and automated traffic, to protect the integrity of the Platform and Player accounts.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. Gold999's cookie usage is reviewed periodically to ensure compliance with the DPA and applicable NPC guidance.

08 Data Security

Gold999 implements technical and organisational security measures proportionate to the risk posed by the categories of Personal Data we process. These measures include:

• Encryption: All data in transit is encrypted using TLS 1.2 or higher (256-bit SSL). Passwords are stored as salted cryptographic hashes — plain-text passwords are never stored. Sensitive KYC documents are encrypted at rest.
• Access Controls: Access to Player Personal Data by gold999 personnel is restricted on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication on internal systems.
• Network Security: The Platform is protected by firewalls, intrusion detection systems, and DDoS mitigation services. Regular vulnerability assessments and penetration tests are conducted by qualified security professionals.
• Physical Security: Data is hosted in facilities with physical access controls, redundant power, and environmental controls meeting recognised industry security standards.
• Incident Response: Gold999 maintains a documented data breach response plan, including notification procedures aligned with NPC reporting requirements under the DPA.

While gold999 takes all reasonable steps to protect your Personal Data, no internet-based platform can guarantee absolute security. Players are encouraged to contribute to their own account security by enabling two-factor authentication, using a strong unique password, and not sharing login credentials with any third party.

09 Data Retention

Gold999 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and KYC Data: Retained for the duration of your Account registration and for a minimum of five (5) years following Account closure, consistent with PAGCOR's record-keeping requirements and AMLA obligations.
• Transaction Data: Deposit, withdrawal, and wagering transaction records are retained for a minimum of five (5) years following the transaction date, as required by AMLA and BIR regulations.
• Game Activity Data: Retained for up to three (3) years following the relevant game session, for the purposes of dispute resolution, responsible gaming monitoring, and regulatory reporting.
• Support Communications: Records of Customer Support interactions are retained for up to three (3) years following the closure of the relevant support case.
• Marketing Data: Marketing consent records and associated communication history are retained until consent is withdrawn and for one (1) year thereafter for compliance documentation purposes.
• Technical and Log Data: Server logs and security event data are retained for up to twelve (12) months unless retention is extended due to an active security investigation or regulatory inquiry.

10 Your Rights as a Data Subject

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your Personal Data held by gold999:

To exercise any of the above rights, please contact gold999's Data Protection Officer using the contact details in Section 16. Gold999 will respond to all verified data subject requests within 15 business days of receipt, consistent with NPC guidance. If you are not satisfied with gold999's response, you may lodge a complaint with the National Privacy Commission.

11 Children & Minors

The gold999 Platform is strictly for individuals aged 21 years and above, consistent with the PAGCOR-mandated minimum age for casino gambling in the Philippines. Gold999 does not knowingly collect Personal Data from individuals under 21 years of age.

If gold999 becomes aware that Personal Data has been collected from a person under 21 — whether discovered through KYC verification, player self-disclosure, or any other means — gold999 will immediately close the relevant account, forfeit all associated balances, and securely delete the minor's Personal Data in accordance with the DPA and NPC guidelines on children's data.

12 Third-Party Services

The gold999 Platform does not contain links to third-party websites. Game content is delivered through embedded interfaces provided by licensed studio partners. While the game software itself is provided by third-party studios, Players interact with those games through the gold999 Platform interface, and data generated during game sessions is processed in accordance with this Privacy Policy.

Gold999 does not embed third-party social media widgets, advertising scripts, or tracking pixels on the Platform. Third-party payment processors (GCash, Maya, BPI, BDO, etc.) operate their own privacy policies in relation to data processed within their own payment systems. Gold999 is not responsible for the privacy practices of payment processors in relation to data processed within their own systems, and Players are encouraged to review the relevant payment provider's privacy policy when using those services.

13 Cross-Border Data Transfers

Some of gold999's service providers — including cloud infrastructure providers and game studio partners — may process Personal Data in countries outside the Philippines. Where such cross-border data transfers occur, gold999 ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that required under the Data Privacy Act of 2012.

Such safeguards may include:

• Contractual clauses requiring the recipient to protect Personal Data to DPA standards;
• Transfers to recipients in countries with data protection laws recognised as adequate by the NPC;
• Binding corporate rules where applicable within group entities;
• Your explicit consent, where required by applicable law for specific transfers.

Gold999 maintains a register of cross-border data transfers and can provide information about applicable safeguards upon request to the Data Protection Officer.

14 Data Breach Protocol

Gold999 maintains a documented Personal Data Breach Response Plan aligned with the NPC's breach notification guidelines under the Data Privacy Act. In the event of a personal data breach that poses a real risk of serious harm to affected data subjects, gold999 will:

1. Contain the breach and assess its scope as a matter of urgency;
2. Notify the National Privacy Commission within 72 hours of becoming aware of the breach, where required by the DPA and NPC regulations;
3. Notify affected Players without undue delay, via the contact information on their registered Account, providing details of the nature of the breach, the categories of data affected, and the steps they should take to protect themselves;
4. Document all breach incidents, response actions taken, and notifications issued, consistent with gold999's record-keeping obligations.

15 Policy Amendments

Gold999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in its data processing practices, applicable Philippine law, NPC guidance, or PAGCOR requirements. The date of the most recent revision is displayed at the top of this page as the "Last Updated" date.

Where gold999 makes material changes to this Policy — particularly changes that affect the purposes for which your Personal Data is processed or your rights as a data subject — gold999 will notify registered Players via SMS to their registered Philippine mobile number at least seven (7) days before the revised Policy takes effect.

Your continued use of the gold999 Platform following the effective date of any Policy amendment constitutes your acknowledgement of the revised Policy. If you do not accept the revised Policy, you must cease using the Platform and may request Account closure in accordance with the Terms & Conditions.

16 Contact & Data Protection Officer

Gold999 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy, the Data Privacy Act of 2012, and all applicable NPC regulations. The DPO can be contacted for:

• Exercising any of your data subject rights described in Section 10;
• Raising concerns or complaints about gold999's data processing practices;
• Requesting information about cross-border data transfer safeguards;
• Reporting a suspected data breach or security incident;
• Any other privacy-related enquiry relating to your Personal Data held by gold999.

Contact: support@gold999.asia — please include "Data Privacy" or "DPO Request" in the subject line of your communication so that your enquiry is directed to the appropriate team.

Gold999 aims to respond to all privacy-related enquiries within fifteen (15) business days of receipt. If you remain unsatisfied with gold999's response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines through NPC's official channels.