Privacy Policy

A9win takes the privacy of its players seriously. As an online gaming platform serving Filipino players across Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond, a9win handles personal data responsibly and transparently. This Policy sets out the legal basis on which we process your personal data, the purposes for which it is used, and the rights you hold as a data subject under Philippine law.

This Policy applies to all personal data collected through the a9win website, mobile platform, applications, and any related services. It does not apply to third-party websites or services that may be linked from the a9win platform — those are governed by their own privacy policies.

A9win is committed to full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

For the purposes of the Philippine Data Privacy Act of 2012, A9win is the personal information controller responsible for the personal data collected through the a9win platform. A9win has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws.

If you have any questions about how a9win processes your personal data, or if you wish to exercise any of your data subject rights, you may contact our Data Protection Officer using the contact details provided in Section 14 of this Policy.

A9win collects only the personal data that is necessary to provide the platform, comply with legal obligations, and maintain the security and integrity of our services. The categories of personal data we collect include:

A9win does not intentionally collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance. Where sensitive personal information is collected (such as government ID numbers), it is handled with heightened security measures.

A9win collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the a9win platform, including through cookies, web beacons, and server logs. See Section 9 for full details on cookies.
• Third-party sources: Identity verification and fraud prevention data from KYC service providers; payment confirmation data from payment processors such as GCash, PayMaya, BPI, BDO, and Metrobank; and compliance screening data from anti-money laundering service providers.
• Regulatory sources: Information received from PAGCOR or other regulatory authorities in connection with licensing, compliance, or investigation requirements.

A9win processes your personal data only where there is a lawful basis to do so under the Philippine Data Privacy Act of 2012. The following table sets out the primary purposes for which a9win processes personal data and the corresponding legal basis:

Where processing is based on your consent (for example, receiving promotional emails or SMS notifications), you have the right to withdraw that consent at any time by updating your communication preferences in your account settings or by contacting a9win support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

A9win does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing deposits and withdrawals. These providers process your data under their own privacy policies and are bound by contractual data protection obligations.
• Identity verification providers: Third-party KYC and age verification service providers engaged by a9win to verify player identity and comply with regulatory requirements.
• Fraud prevention and AML providers: Service providers that assist a9win in detecting and preventing fraudulent activity and money laundering.
• Game providers: Licensed game software providers whose games are available on the a9win platform may receive limited technical data necessary to deliver game functionality.
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities, where disclosure is required by law, court order, or regulatory directive.
• Professional advisers: Legal counsel, auditors, and other professional advisers engaged by a9win, subject to confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of a9win's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

A9win retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements under Philippine law.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended).
• Gaming history: Retained for the duration of your account and for a minimum of three (3) years following account closure.
• Support communications: Retained for three (3) years from the date of the last communication.
• Technical and usage data: Retained for up to twelve (12) months from collection, unless required for longer periods for security or fraud investigation purposes.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with a9win's data disposal procedures. Where data is anonymized, it may be retained indefinitely for analytical purposes as it no longer constitutes personal data.

A9win implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and a9win's servers.
• Encryption of sensitive data at rest, including financial data and government ID information.
• Role-based access controls ensuring that only authorized a9win personnel can access personal data, and only to the extent required for their role.
• Regular security vulnerability assessments and penetration testing of the a9win platform.
• Intrusion detection and monitoring systems operating on a continuous basis.
• Staff training on data protection obligations and security best practices.
• Incident response procedures for managing and reporting personal data breaches.

While a9win takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your a9win account credentials. If you suspect that your account has been compromised, contact a9win support immediately.

A9win uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyze usage patterns, and support security functions. The following types of cookies are used on the a9win platform:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies and security tokens. These cookies cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalized experience.
• Analytics cookies: Used to collect aggregated, anonymized data about how players use the a9win platform, helping us identify areas for improvement. This data does not identify individual players.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats to the platform.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the a9win platform. A9win does not use third-party advertising cookies or behavioral tracking cookies for marketing purposes on behalf of external advertisers.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by a9win:

• Right to be informed: The right to be informed of how your personal data is being collected and processed, as set out in this Policy.
• Right of access: The right to request a copy of the personal data a9win holds about you, along with information about how it is being processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data a9win holds about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to a9win's legal retention obligations.
• Right to object: The right to object to the processing of your personal data where processing is based on legitimate interest, including profiling for direct marketing purposes.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe that a9win has processed your personal data in violation of the Data Privacy Act.

To exercise any of the above rights, please contact a9win's Data Protection Officer using the contact details in Section 14. A9win will respond to all data subject requests within thirty (30) days of receipt, or within such extended period as permitted by applicable law where the request is complex or numerous.

The a9win platform is strictly intended for persons aged 21 years and above, in accordance with PAGCOR regulations governing online gaming in the Philippines. A9win does not knowingly collect personal data from persons under the age of 21.

If a9win becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be closed. Any winnings accrued by an underage player will be forfeited.

Some of a9win's service providers and technology partners may be located outside the Philippines. Where personal data is transferred to recipients in other countries, a9win ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under Philippine law.

Such safeguards may include contractual data protection clauses, binding corporate rules, or transfers to countries that have been assessed as providing an adequate level of data protection. A9win will not transfer your personal data to a foreign country unless such safeguards are in place or the transfer is otherwise permitted under the Data Privacy Act of 2012 and NPC regulations.

A9win reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, a9win will notify registered players via the email address associated with their account or through a prominent notice on the platform, at least seven (7) days before the changes take effect.

The date of the most recent revision is displayed at the top of this Policy. Your continued use of the a9win platform following notification of any changes constitutes your acknowledgment of the revised Policy. If you do not accept the revised Policy, you should stop using the platform and may request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way a9win processes your personal data, please contact our Data Protection Officer. A9win is committed to addressing all privacy-related inquiries promptly and transparently.

If you are not satisfied with a9win's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory body responsible for administering and implementing the Data Privacy Act of 2012.

For more information about your rights and a9win's other policies, please visit our About Us page, review our Terms & Conditions, or check our FAQ. For responsible gaming tools and support resources, visit our Responsible Gaming page.