Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") is issued by at999 ("we," "us," "our," or "at999") and applies to all personal data collected through the at999 website (at999.biz), mobile-optimised web platform, and any related services, features, or communications offered by at999 to registered and prospective players.

By accessing the at999 platform, creating an account, or using any of our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, you should discontinue use of the at999 platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the agreement between you and at999.

2. Data Controller

at999 is the data controller responsible for the personal data collected through the at999 platform. As data controller, at999 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is conducted in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations.

at999 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA and this Policy. The DPO may be contacted through the details provided in Section 14 of this Policy.

3. Personal Data We Collect

3.1 Registration Data

When you create an at999 account, we collect the following information:

• Full legal name as it appears on your government-issued identification;
• Email address and mobile phone number (Philippine mobile number required);
• Date of birth (to verify the 21+ age requirement);
• Username and encrypted password hash;
• Residential address (collected during KYC verification).

3.2 Identity Verification (KYC) Data

To comply with PAGCOR licensing requirements and Philippine anti-money laundering laws, at999 collects documentary evidence of identity, which may include:

• Copies of government-issued photo identification (UMID, PhilSys National ID, Driver's License, SSS card, or Philippine Passport);
• Proof of residential address (utility bills, bank statements, or similar documents);
• Source of funds documentation where required for enhanced due diligence.

3.3 Financial Transaction Data

at999 collects records of all financial transactions conducted through the platform, including deposit amounts, withdrawal requests, payment channel used (GCash, Maya, BPI, BDO, Metrobank, etc.), transaction dates and times, and transaction reference numbers.

3.4 Gaming Activity Data

at999 maintains records of your gaming activity on the platform, including games played, bet amounts, game outcomes, session durations, and responsible gaming tool settings. This data is used to operate the platform, detect problem gambling behaviour, and comply with regulatory requirements.

3.5 Technical and Device Data

When you access at999, our systems automatically collect certain technical information, including your IP address, device type and operating system, browser type and version, session identifiers, and pages visited within the platform. This information is used for security, fraud prevention, and platform optimisation purposes.

3.6 Communications Data

If you contact at999 customer support or communicate with us via email or live chat, we retain records of those communications for quality assurance, training, and dispute resolution purposes.

4. How We Use Your Personal Data

at999 uses your personal data for the following purposes:

• Account Management: To create, verify, maintain, and secure your at999 account;
• Service Delivery: To provide access to all at999 platform features, including casino games, sports betting, bingo, sabong, and the Mine coin rewards system;
• Payment Processing: To process deposits, withdrawals, and refunds through your chosen payment channel;
• Regulatory Compliance: To comply with PAGCOR licensing conditions, Philippine anti-money laundering laws (AMLA), tax obligations, and other applicable regulations;
• Age Verification: To verify that you meet the mandatory 21+ age requirement for online gaming participation in the Philippines;
• Fraud and Security: To detect, investigate, and prevent fraudulent activity, cheating, account takeover, money laundering, and other prohibited conduct;
• Responsible Gaming: To monitor gaming patterns, implement responsible gaming tools, and identify players who may need support;
• Service Improvement: To analyse platform usage, identify technical issues, and improve the overall at999 player experience;
• Communications: To send you account-related notifications, security alerts, and, where you have consented, promotional communications about at999 offers.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, at999 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing necessary to perform the contract between you and at999, including operating your account, processing bets, and handling payments;
• Legal Obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, AMLA obligations, and tax reporting requirements;
• Legitimate Interests: Processing for at999's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your privacy rights;
• Consent: Processing based on your freely given, specific, and informed consent, particularly for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

6. Data Sharing and Disclosure

at999 does not sell, rent, or trade your personal data to third parties for commercial purposes. Your personal data may be shared in the following limited circumstances:

6.1 Service Providers

at999 engages third-party service providers to assist in operating the platform, including payment processors, game software providers, identity verification services, cloud infrastructure providers, and customer support tools. These providers are authorised to process your data only to the extent necessary to provide the contracted services and are bound by appropriate data processing agreements.

6.2 Regulatory Authorities

at999 is required by law to disclose personal data to regulatory and law enforcement authorities in certain circumstances, including PAGCOR (for licensing compliance), the Anti-Money Laundering Council (AMLC) (for transaction reporting obligations), the National Privacy Commission (NPC), and courts or tribunals in connection with legal proceedings.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of at999's business assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

7. Cookies and Tracking Technologies

at999 uses cookies and similar tracking technologies to operate the platform effectively, maintain session continuity, detect fraud, and analyse usage patterns. The types of cookies used on at999 include:

• Strictly Necessary Cookies: Required for the platform to function, including authentication session cookies and security tokens. These cannot be disabled.
• Functional Cookies: Used to remember your preferences, language settings, and responsible gaming tool configurations.
• Analytics Cookies: Used to understand how players navigate the platform so we can identify technical issues and improve the user experience. Analytics data is aggregated and does not identify individual players in reports.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the functionality of the at999 platform and may prevent you from logging in or placing bets.

8. Data Retention

at999 retains personal data for the following periods, after which data is securely deleted or anonymised:

• Account and registration data: For the duration of your account and for five (5) years following account closure, in accordance with PAGCOR record-keeping requirements;
• KYC and identity verification documents: For five (5) years following account closure or the date the document was last relied upon for verification purposes, in accordance with AMLA obligations;
• Financial transaction records: For five (5) years from the date of the transaction, consistent with AMLA requirements;
• Gaming activity logs: For three (3) years from the date of the gaming session;
• Customer support communications: For two (2) years from the date of the communication.

Where retention beyond these periods is required by applicable law or is necessary for the establishment, exercise, or defence of legal claims, at999 will retain the relevant data for the minimum period necessary for that purpose.

9. Security Measures

at999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the at999 platform;
• Encryption of sensitive data fields at rest, including payment credentials and KYC document stores;
• Role-based access controls limiting internal access to personal data to authorised personnel with a demonstrated business need;
• Comprehensive audit logging of all access to personal data systems;
• Regular security assessments and penetration testing of platform infrastructure;
• Two-factor authentication options for player accounts;
• Automated fraud detection and anomaly monitoring systems operating continuously.

No security system is impenetrable. In the event of a personal data breach affecting your rights and freedoms, at999 will notify you and the National Privacy Commission within the timeframes required by the Philippine Data Privacy Act.

10. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by at999:

To exercise any of these rights, please contact at999's Data Protection Officer using the contact details in Section 14. at999 will respond to all verifiable data subject requests within thirty (30) days.

11. Children and Minors

at999 does not knowingly collect personal data from individuals under 21 years of age. The at999 platform is strictly for adults aged 21 and above in compliance with Philippine law and PAGCOR regulations. If at999 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all data will be deleted, and any funds deposited will be returned through the original payment channel, net of any withdrawals already processed.

If you believe that a minor has registered an at999 account, please contact our support team immediately at the contact details provided in Section 14.

12. International Data Transfers

at999 primarily processes personal data within the Philippines. Where personal data is transferred to service providers or infrastructure located outside the Philippines — for example, cloud hosting providers or game platform integrators operating internationally — at999 ensures that such transfers are conducted in accordance with the Philippine Data Privacy Act and that appropriate safeguards are in place to protect your data to an equivalent standard.

Such safeguards may include standard contractual clauses, adequacy decisions, or binding corporate rules as applicable to the receiving jurisdiction.

13. Updates to This Privacy Policy

at999 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, at999 will notify registered players via the email address on file and by displaying a prominent notice on the platform. The "Last Updated" date at the top of this Policy will be revised to reflect the date of the most recent amendment.

Your continued use of the at999 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically.

14. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by at999, please contact our Data Protection Officer:

If you are not satisfied with at999's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.