at999 Casino Privacy Policy

This Privacy Policy ("Policy") describes how at999 ("at999," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of individuals ("you," "Player," or "User") who access or use the at999 online gaming platform at https://at999.club (the "Platform").

at999 is committed to protecting the privacy and security of all personal data entrusted to us by our players across the Philippines — from Manila and Makati to Cebu, Davao, and Quezon City. We operate in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

By registering an account on at999 or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy.

at999 collects the following categories of personal data from players and prospective players:

at999 does not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where required by law (e.g., responsible gaming assessments).

3.1 Directly From You

The majority of personal data at999 holds is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion. You are responsible for ensuring that all information you provide is accurate and up to date.

3.2 Automatically Through the Platform

When you access and use the at999 Platform, we automatically collect certain technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device identifiers, browser information, and in-platform activity. See Section 7 for more details on our use of cookies.

3.3 From Third Parties

at999 may receive personal data about you from the following third-party sources:

• KYC and identity verification providers — to confirm your identity and age in compliance with PAGCOR and AML requirements.
• Payment processors — including GCash, PayMaya, BPI, BDO, and Metrobank — to confirm transaction status and detect fraudulent activity.
• Fraud prevention and security services — to identify suspicious account activity or potential breaches of our Terms & Conditions.
• Analytics providers — aggregated and anonymised data to help us understand how players use the Platform.

at999 uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your at999 player account, including processing your registration and verifying your identity.
• Transaction processing: To process deposits and withdrawals in Philippine Peso (PHP) via your chosen payment method, and to maintain accurate financial records.
• Legal and regulatory compliance: To fulfil our obligations under the Data Privacy Act of 2012, the Anti-Money Laundering Act, PAGCOR regulations, and other applicable Philippine laws. This includes filing mandatory reports with the Anti-Money Laundering Council (AMLC) where required.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, account abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling, to enforce deposit limits and self-exclusion requests, and to provide responsible gaming support where appropriate.
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of our support services.
• Marketing communications: To send you promotional offers, bonuses, and news about at999 — but only where you have opted in to receive such communications. You may opt out at any time.
• Platform improvement: To analyse usage patterns, conduct A/B testing, and improve the features, performance, and user experience of the at999 Platform.
• Personalisation: To tailor game recommendations, promotional offers, and platform content to your preferences and playing history.

at999 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

Under the Data Privacy Act of 2012, at999 processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform our contract with you — specifically, to operate your at999 account, process your transactions, and provide the gaming services you have requested.
• Legal obligation: Processing is required to comply with applicable Philippine laws, including AML reporting obligations, PAGCOR regulatory requirements, and tax reporting obligations.
• Legitimate interests: Processing is necessary for at999's legitimate business interests, including fraud prevention, security monitoring, and platform improvement, provided these interests are not overridden by your privacy rights.
• Consent: For marketing communications and certain non-essential cookies, at999 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

at999 does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

6.1 Service Providers

at999 engages trusted third-party service providers to assist in operating the Platform. These include KYC and identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), cloud hosting providers, customer support software providers, and analytics platforms. All service providers are contractually bound to process your data only on at999's instructions and in accordance with applicable data privacy law.

6.2 Regulatory and Law Enforcement Authorities

at999 may disclose your personal data to PAGCOR, the AMLC, the National Privacy Commission, the Bureau of Internal Revenue (BIR), or other competent Philippine government authorities where required by law, court order, or regulatory directive. at999 will notify you of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of at999's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Policy that result from it.

at999 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming limits. Disabling these may affect your experience.
• Analytics cookies: Collect anonymised data about how players use the Platform to help us improve performance and usability. These are only set with your consent.
• Marketing cookies: Used to deliver relevant promotional content within the at999 Platform. These are only set with your explicit consent and can be withdrawn at any time.

You can manage your cookie preferences through your browser settings or through the at999 cookie preference centre. Note that disabling strictly necessary cookies will prevent you from logging in to your at999 account.

at999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS 1.3 encryption for all data in transit between your device and at999 servers.
• AES-256 encryption for sensitive data stored at rest, including financial records and identity documents.
• Multi-factor authentication (MFA) options for player accounts.
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent third-party security firms.
• 24/7 security monitoring and automated anomaly detection systems.
• Secure data centres with physical access controls and redundant infrastructure.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, at999 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with NPC Circular 16-03.

at999 retains your personal data for as long as your account is active and for a period thereafter as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and BIR regulations.
• Customer support communications: Retained for three (3) years from the date of the last interaction, or longer if related to an ongoing dispute or legal proceeding.
• Marketing consent records: Retained for the duration of your consent and for three (3) years thereafter as evidence of consent.
• Technical and usage data: Retained for up to thirteen (13) months for analytics purposes, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, at999 will securely delete or anonymise your personal data in a manner that prevents reconstruction or identification.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by at999:

To exercise any of the above rights, please contact our Data Protection Officer (see Section 14). at999 will respond to all verified data subject requests within fifteen (15) business days of receipt. We may request proof of identity before processing your request to protect against unauthorised access.

The at999 Platform is strictly intended for individuals aged 21 years and above, in compliance with PAGCOR regulations governing online casino gaming in the Philippines. at999 does not knowingly collect personal data from individuals under the age of 21.

If at999 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. All winnings generated by an underage account will be forfeited. If you believe a minor has registered an at999 account, please contact our support team immediately.

at999 primarily stores and processes personal data within the Philippines. In certain circumstances, personal data may be transferred to and processed in countries outside the Philippines — for example, where at999 uses cloud infrastructure or third-party service providers with operations in other jurisdictions.

Where such transfers occur, at999 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under the Data Privacy Act of 2012. These safeguards may include contractual clauses approved by the National Privacy Commission, adequacy decisions, or binding corporate rules.

By using the at999 Platform, you consent to the transfer of your personal data to countries outside the Philippines where necessary for the purposes described in this Policy, subject to the safeguards described above.

at999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where changes are material — meaning they significantly affect your rights or how we use your personal data — at999 will notify registered players by email and/or by a prominent notice on the Platform at least fourteen (14) days before the changes take effect. For non-material changes, the updated Policy will be posted on this page with an updated revision date.

Your continued use of the at999 Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree to the amended Policy, you must cease using the Platform and may request account closure by contacting our support team.

at999 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Policy, please contact our DPO using the details below.

Data Protection Officer — at999

Email (plain text — not a clickable link):
[email protected]

General support enquiries:
[email protected]

at999 aims to acknowledge all privacy-related enquiries within three (3) business days and to provide a substantive response within fifteen (15) business days. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines through its official channels.