9apis Privacy Policy

1. Introduction

9apis is committed to protecting the privacy and personal data of all players who use our online gaming platform. This Privacy Policy has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable PAGCOR regulatory requirements governing the operation of online gaming platforms in the Philippines.

This Privacy Policy applies to all personal data collected through the 9apis website at 9apis.net, including all associated pages, account management interfaces, customer support channels, and promotional communications. It applies to all players registered from the Philippines, including those located in Manila, Cebu, Davao, Quezon City, Makati, and other regions across the archipelago.

We encourage you to read this Privacy Policy in full before creating a 9apis account. If you have any questions about how we handle your personal data, our Data Protection Officer can be contacted using the details provided in Section 16 of this policy.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, the data controller responsible for your personal data is the operator of the 9apis platform. All inquiries, requests, and complaints relating to the processing of personal data by 9apis should be directed to our Data Protection Officer at the contact address provided in Section 16 of this Privacy Policy.

As data controller, 9apis determines the purposes for which and the means by which your personal data is processed. We are responsible for ensuring that our data processing activities comply with applicable Philippine data protection law and PAGCOR requirements at all times.

3. Personal Data We Collect

9apis collects only the personal data that is necessary to provide our gaming services, comply with our legal and regulatory obligations, and improve the player experience. The categories of personal data we collect are described below.

We do not collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where sensitive data — such as government ID numbers — is collected, it is subject to enhanced security controls as described in Section 10 of this policy.

4. How We Collect Your Data

9apis collects personal data through the following channels and mechanisms:

• Direct provision by you: When you register a 9apis account, complete identity verification, make a deposit or withdrawal, contact our support team, or participate in a promotion, you provide personal data directly to us;
• Automated collection: When you access and use the 9apis platform, we automatically collect Technical Data and Usage Data through cookies, server logs, and similar tracking technologies (see Section 8 for full details on our use of cookies);
• Payment providers: When you make a deposit or withdrawal using GCash, Maya, QR Ph, GrabPay, InstaPay, PesoNet, BPI, BDO, Metrobank, or 7-Eleven CLiQQ, we receive confirmation data from those payment providers sufficient to verify the transaction;
• Identity verification services: For KYC purposes, 9apis may use third-party identity verification providers who assist in verifying the authenticity of documents and information you submit during the verification process;
• Fraud prevention services: We may receive data about your device and behavior from fraud prevention and security monitoring services that help us protect the integrity of the 9apis platform.

5. How We Use Your Personal Data

9apis uses the personal data we collect for the following specific purposes:

1. Account registration and management: To create, maintain, and administer your 9apis player account, including processing your registration, managing your account settings, and handling account closures;
2. Identity verification and KYC compliance: To verify your identity, age (21+), and eligibility to use the 9apis platform in compliance with PAGCOR regulations and anti-money laundering requirements;
3. Payment processing: To process your deposits and withdrawals via your chosen payment method, verify ownership of payment instruments, and maintain accurate financial records;
4. Platform provision: To deliver the games, services, and features available on 9apis, including JILI slots, live casino tables, fish shooting games (God Fish Slicing, Pirate Fishing), bingo rooms, and sports betting;
5. Customer support: To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance;
6. Responsible gaming: To monitor gaming behavior, enforce account limits set by you or required by regulation, and fulfil our duty of care obligations under PAGCOR's responsible gaming framework;
7. Fraud prevention and security: To detect, prevent, and investigate fraudulent activity, money laundering, unauthorized account access, and other security threats;
8. Regulatory compliance: To meet our legal obligations under the Philippine Data Privacy Act, PAGCOR licensing conditions, Anti-Money Laundering Act, and other applicable Philippine laws;
9. Marketing communications: To send you information about 9apis promotions, bonuses, and new games — but only where you have provided your consent to receive marketing. You may withdraw this consent at any time;
10. Platform improvement: To analyze platform usage patterns and player behavior (in aggregate and anonymized form) to improve the 9apis experience for all players.

6. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 9apis processes your personal data on the following legal bases:

• Contractual necessity: Processing necessary to fulfil our contractual obligations to you as a registered 9apis player — including account management, payment processing, and game delivery;
• Legal obligation: Processing required for compliance with applicable Philippine laws and regulations, including PAGCOR licensing conditions, the Anti-Money Laundering Act of 2001 (as amended), and the Tax Code of the Philippines;
• Legitimate interests: Processing necessary for the legitimate interests of 9apis, including fraud prevention, platform security, responsible gaming monitoring, and business analytics — provided such interests are not overridden by your privacy rights;
• Consent: Processing based on your freely given, specific, and informed consent, particularly in relation to marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Disclosure

9apis does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. We may share your personal data only in the following limited circumstances:

• Payment service providers: We share the minimum necessary financial and identity data with GCash, Maya, BPI, BDO, Metrobank, and other supported payment providers to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine data protection law;
• Identity verification providers: We share identity document data with authorized KYC service providers solely for the purpose of verifying your identity and age in accordance with PAGCOR requirements;
• Game software providers: Game providers whose titles are available on 9apis (including JILI and other licensed providers) may receive limited gaming session data necessary to operate their game software. No financial or identity data beyond what is operationally required is shared;
• Fraud prevention and security services: We share Technical Data with fraud detection and cybersecurity service providers to protect the integrity of the 9apis platform and your account;
• Regulatory authorities: We are legally required to share certain player data with PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other competent Philippine government authorities when required by law or court order;
• Professional advisers: We may share your data with our lawyers, auditors, and insurers on a confidential basis where necessary for the conduct of our business;
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the 9apis business, your personal data may be transferred to the acquiring entity, subject to the same level of data protection as described in this Privacy Policy.

All third parties with whom 9apis shares personal data are required to maintain appropriate technical and organizational security measures and to process your data only for the purposes for which it was shared.

8. Cookies & Tracking Technologies

9apis uses cookies and similar tracking technologies on the platform. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the 9apis platform to function. They enable you to log in, maintain your session, navigate between pages, and use core features. These cookies cannot be disabled without impairing your use of 9apis;
• Functional cookies: These cookies remember your preferences — such as language settings and display options — to provide a more personalized experience on 9apis;
• Analytics cookies: These cookies collect anonymized data about how players use the 9apis platform, such as which games are most popular and how players navigate through the site. This data is used in aggregate to improve the platform;
• Security cookies: These cookies help 9apis detect and prevent fraudulent activity, unauthorized access attempts, and other security threats by analyzing behavioral and technical patterns.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will affect your ability to log in and use the 9apis platform normally. For analytics and functional cookies, disabling them will not prevent you from accessing or using 9apis but may affect certain non-essential features and personalization.

9apis does not use third-party advertising cookies or allow external ad networks to track your behavior across other websites from within the 9apis platform.

9. Data Retention

9apis retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, as described in this Privacy Policy, and to comply with our legal and regulatory obligations. The following retention periods apply:

• Account data and KYC documents: Retained for a minimum of five (5) years from the date of account closure, in compliance with PAGCOR requirements and the Anti-Money Laundering Act;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine tax and financial regulations;
• Gaming history: Retained for a minimum of three (3) years from the date of each gaming session, for dispute resolution and regulatory reporting purposes;
• Customer support communications: Retained for two (2) years from the date of the last interaction, for quality assurance and dispute resolution purposes;
• Marketing consent records: Retained for as long as you remain subscribed to 9apis marketing communications, and for one (1) year following withdrawal of consent, as evidence of consent management compliance;
• Technical and usage data: Retained in aggregate and anonymized form for up to two (2) years for platform analytics purposes.

At the end of the applicable retention period, your personal data will be securely deleted or anonymized so that it can no longer be associated with you. Where deletion is not immediately practicable due to technical constraints, the data will be securely isolated and protected from further active processing until deletion is completed.

10. Data Security

9apis takes the security of your personal data seriously and has implemented a comprehensive set of technical and organizational measures designed to protect your data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and the 9apis platform is encrypted using 256-bit SSL/TLS protocols;
• Encryption at rest: Sensitive personal data stored on 9apis servers is encrypted using AES-256 encryption;
• Access controls: Access to personal data held by 9apis is strictly limited to authorized personnel who require access to perform their job responsibilities. All staff with access to personal data are subject to confidentiality obligations and regular data protection training;
• Multi-factor authentication: Internal systems holding personal data are protected by multi-factor authentication requirements for all administrative access;
• Regular security audits: 9apis conducts regular internal and external security audits and penetration tests to identify and address potential vulnerabilities;
• Incident response: 9apis maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the National Privacy Commission in accordance with the timelines required under Philippine law.

11. Your Data Subject Rights

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to the personal data held by 9apis. You may exercise these rights by contacting our Data Protection Officer using the details in Section 16.

9apis will respond to all valid data subject rights requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

Please note that certain data subject rights are subject to limitations where the data is required for compliance with legal obligations, the exercise of legal claims, or the protection of the rights of other individuals. Where we are unable to fulfil a request in full, we will explain the reason for this in our response.

12. Children's Privacy

The 9apis platform is strictly intended for adults aged 21 years and above. 9apis does not knowingly collect, process, or store personal data belonging to individuals under the age of 21. Age verification is a mandatory component of the 9apis account registration process, in compliance with PAGCOR regulations governing real-money online gaming in the Philippines.

If 9apis becomes aware that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to suspend the relevant account, delete the personal data in question, and report the matter to the relevant PAGCOR authority where required.

If you are a parent or guardian and believe that a minor has registered a 9apis account using false age information, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action without delay.

13. International Data Transfers

The 9apis platform primarily stores and processes player data within servers located in jurisdictions with data protection standards equivalent to or exceeding those required under the Philippine Data Privacy Act of 2012. Where personal data is transferred to, or accessed from, a jurisdiction outside the Philippines, 9apis ensures that appropriate safeguards are in place to protect your data, including:

• Data processing agreements incorporating standard contractual clauses approved by the National Privacy Commission or equivalent regulatory body;
• Transfers only to jurisdictions recognized as providing an adequate level of data protection;
• Implementation of supplementary technical and organizational measures where required to ensure an equivalent level of protection.

Where 9apis engages international service providers — such as game software providers or global fraud prevention services — these engagements are governed by data processing agreements that require the service provider to maintain the same level of data protection as required under Philippine law. Your personal data will not be transferred internationally beyond what is necessary to provide the 9apis gaming service.

14. Third-Party Links

The 9apis platform may from time to time contain references to third-party services, including payment providers and game software suppliers. This Privacy Policy applies solely to personal data processed by 9apis in connection with the 9apis platform. It does not apply to any third-party websites, applications, or services that may be accessible in connection with your use of 9apis.

9apis is not responsible for the privacy practices of third-party services, payment providers, or game suppliers. We encourage you to review the privacy policies of any third-party service you use in connection with your 9apis account, including GCash, Maya / PayMaya, and your chosen banking institution.

15. Changes to This Privacy Policy

9apis reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or the features and services offered on the 9apis platform. All updates will be reflected in a revised "Effective Date" at the top of this page.

Where changes to the Privacy Policy are material — meaning they significantly affect how we collect, use, or share your personal data — 9apis will provide notice through one or more of the following methods: a notification displayed within the platform upon login, or an email to your registered address. Your continued use of 9apis following the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes.

We recommend reviewing this page periodically to stay informed of how 9apis protects your personal data.

16. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 9apis, please contact our Data Protection Officer using the details below. All privacy-related communications must be submitted in English.

If you are not satisfied with our response to your privacy inquiry or data subject rights request, you have the right to escalate your complaint to the Philippine National Privacy Commission (NPC). The NPC is the independent regulatory authority responsible for enforcing the Philippine Data Privacy Act of 2012.

This Privacy Policy was last reviewed and updated on January 1, 2026 and supersedes all prior versions of the 9apis Privacy Policy.