a9win Privacy Policy

a9win ("we," "us," "our") is committed to protecting the personal data of every player who uses the a9win platform, accessible at a9win.cam. This Privacy Policy describes the types of personal information a9win collects from registered players and website visitors, the purposes for which that information is used, the circumstances in which it may be shared, and the rights available to individuals whose data a9win holds.

This Policy applies to all personal data processed by a9win in connection with the operation of the a9win platform, including account registration, identity verification (KYC), deposits and withdrawals, gameplay activity, customer support interactions, and marketing communications. It applies to all players in the Philippines — from Metro Manila and Makati to Cebu, Davao, and every province across the archipelago.

By registering for an a9win account or continuing to use the a9win platform, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. This Policy should be read together with the a9win Terms & Conditions, which are incorporated by reference.

For the purposes of applicable data protection law, a9win is the data controller in respect of personal data collected and processed through the a9win platform. As data controller, a9win determines the purposes and means of processing personal data and is responsible for ensuring that such processing is carried out in accordance with applicable Philippine privacy and data protection legislation, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

Contact details for data protection inquiries are provided in Section 16 of this Policy. Players wishing to exercise any data rights set out in Section 11 should direct their requests to the contact channels listed in Section 16.

a9win collects the following categories of personal data in connection with the registration and operation of player accounts:

a9win does not collect sensitive personal data (as defined under the Data Privacy Act of 2012) beyond what is strictly necessary for identity verification, responsible gaming compliance, and anti-money laundering obligations.

a9win collects personal data through the following primary methods:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, updating account settings, or contacting customer support.
• Automated collection: Technical and usage data collected automatically through server logs, cookies, and similar tracking technologies when you access and use the a9win platform. See Section 8 for full details on cookies.
• Payment processors: Transaction confirmation data received from GCash, Maya, BPI, BDO, Metrobank, and other payment service providers when you make a deposit or receive a withdrawal. a9win does not store full payment card numbers or complete mobile wallet credentials.
• Identity verification services: Where a9win uses a third-party KYC or identity verification provider to validate documents submitted during the verification process, that provider may return confirmation data to a9win.
• Game providers: Game session data — including bet amounts, game outcomes, and round identifiers — is generated and transmitted by third-party game suppliers (e.g., JILI, Pragmatic Play, PG Soft) to a9win's systems for transaction logging purposes.

a9win processes personal data only where a lawful basis for processing exists under the Data Privacy Act of 2012. The principal purposes for which a9win processes your data, and the corresponding legal basis for each, are as follows:

1. Account registration and management — necessary for the performance of the contract between a9win and the Player.
2. Identity verification (KYC) — compliance with a legal obligation under applicable Philippine anti-money laundering regulations and gaming rules.
3. Processing deposits and withdrawals — necessary for the performance of the contract and for compliance with financial transaction reporting obligations.
4. Game provision and bet settlement — necessary for the performance of the contract; a9win requires transaction logs to settle bets, handle disputes, and produce complete bet history for players.
5. Responsible gaming monitoring — compliance with a legal obligation and pursuit of a legitimate interest in identifying and supporting at-risk players.
6. Customer support — necessary for the performance of the contract and pursuit of a legitimate interest in maintaining service quality.
7. Fraud prevention and security — pursuit of a legitimate interest in protecting the integrity of the a9win platform and the funds of all players.
8. Marketing communications — based on the Player's explicit consent given at registration or updated through account settings; consent may be withdrawn at any time.
9. Platform analytics and improvement — pursuit of a legitimate interest in understanding how the a9win platform is used in order to improve it.

a9win does not sell, rent, or otherwise commercially share your personal data with third parties. a9win may, however, share your data with the following categories of recipients where necessary for the purposes described in this Policy:

• Payment service providers (GCash, Maya, GrabPay, BPI, BDO, Metrobank, InstaPay, QR Ph) — to process deposits and withdrawals. These providers act as independent data controllers for their own services and are subject to their own privacy policies.
• Game suppliers (JILI Games, Pragmatic Play, PG Soft, Evolution Gaming, and others) — game session data is transmitted to and from game suppliers' systems to facilitate game play and settle bets. Suppliers are contractually bound to use data only for this purpose.
• KYC and identity verification providers — third-party services engaged to validate identity documents submitted during the KYC process. These providers operate under strict data processing agreements with a9win.
• IT infrastructure and hosting providers — cloud infrastructure, database hosting, and security service providers whose systems a9win uses to operate the platform. All such providers are bound by data processing agreements.
• Regulatory and law enforcement authorities — a9win may be required by law to disclose personal data to Philippine regulatory bodies, law enforcement agencies, or courts in response to a lawful request or court order.

In each case where a9win shares data with a third-party service provider, a9win requires those providers to maintain appropriate data security standards and to process data only for the purposes for which it was shared.

Some of a9win's third-party service providers — particularly game suppliers and cloud infrastructure providers — operate servers and processing facilities outside the Philippines. When personal data is transferred outside the Philippines, a9win takes appropriate steps to ensure that such transfers comply with applicable Philippine data protection requirements and that an adequate level of protection is maintained for the data.

These steps include entering into data processing agreements that incorporate standard contractual clauses or equivalent data transfer safeguards, and conducting due diligence on the data protection practices of the receiving entities.

Players who wish to obtain further information about the specific safeguards in place for international data transfers may contact a9win using the details in Section 16 of this Policy.

a9win uses cookies and similar tracking technologies on the a9win platform to deliver a functional and personalised experience. The following types of cookies are in use:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged into your a9win account during a session. These cookies cannot be disabled without impairing platform functionality.
• Analytics cookies: Used to collect anonymised data about how players use the a9win platform — which pages are visited most, how long sessions last, and where errors occur. This information is used to improve the platform.
• Functional cookies: Used to remember your preferences, such as language settings, game lobby display preferences, and notification settings, so you do not have to reset them every visit.
• Security cookies: Used for fraud detection, bot prevention, and protecting your a9win account from unauthorised access attempts.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your a9win account. a9win does not use third-party advertising cookies and does not facilitate behavioural advertising targeting on the platform.

a9win retains personal data for as long as is necessary for the purposes described in this Policy, including compliance with legal obligations. The principal retention periods applicable to a9win player data are as follows:

• Account and identity data: Retained for the duration of the active account relationship and for a minimum of five (5) years following permanent account closure, in compliance with applicable Philippine anti-money laundering record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, in accordance with financial record-keeping obligations under Philippine law.
• KYC documents: Retained for the duration of the account relationship and for five (5) years following permanent account closure.
• Customer support records: Retained for three (3) years from the date of the interaction, unless the record relates to an unresolved dispute or regulatory matter.
• Marketing data: Retained until the Player withdraws consent or requests erasure, subject to legal retention obligations taking precedence.
• Technical and usage data: Typically retained in identifiable form for up to thirteen (13) months, after which it is anonymised or deleted.

Following the expiry of the applicable retention period, personal data is securely deleted or permanently anonymised in accordance with a9win's internal data disposal procedures.

a9win implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the a9win platform.
• Encryption at rest for sensitive stored data including KYC documents and financial records.
• Access controls limiting internal access to personal data on a strict need-to-know basis, with role-based permissions and audit logging.
• Multi-factor authentication for internal system access by a9win staff.
• Regular security assessments including vulnerability scanning and penetration testing of the a9win platform.
• Data breach response procedures — in the event of a personal data breach affecting your data, a9win will notify affected players and relevant Philippine regulatory authorities within the timeframes required by applicable law.

Under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, Filipino players whose data a9win holds have the following rights in respect of their personal data:

The a9win platform is strictly restricted to individuals who are 21 years of age or older, in accordance with applicable Philippine gambling regulations. a9win does not knowingly collect or process personal data of individuals under the age of 21.

If a9win becomes aware that personal data has been collected from a person under 21 years of age, that data will be deleted immediately and the associated account will be permanently closed. Any balance in such an account will be handled in accordance with a9win's standard account closure procedures set out in the Terms & Conditions.

a9win may send marketing communications — including promotional emails, SMS messages, and in-platform notifications about bonuses, new games, and special offers — where the Player has explicitly opted in to receive such communications at registration or subsequently through account settings.

a9win does not engage in unsolicited cold marketing. We will not send promotional messages to any Player who has not opted in, and we will honour opt-out requests promptly. Players may manage their marketing preferences at any time through the Notifications section of their a9win account settings. Opting out of marketing communications does not affect service-related communications such as withdrawal confirmations, security alerts, or KYC request notifications — these are sent as part of the contractual relationship and cannot be disabled while an account is active.

The a9win platform may contain links to game providers' information pages or other third-party content. This Privacy Policy applies only to data processing carried out by a9win. a9win is not responsible for the privacy practices of any third-party websites, applications, or services that may be accessible via links from the a9win platform. Players are advised to review the privacy policies of any third-party services they use independently of a9win.

a9win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable law, our data processing practices, or the services offered on the a9win platform. Material changes to this Policy will be communicated to active players by email to the registered email address on file, or by prominent notice within the a9win platform, at least seven (7) days before the change takes effect.

Continued use of the a9win platform following notification of a material change to this Policy constitutes acceptance of the revised Policy. The current version of this Privacy Policy is always accessible at a9win.cam/privacy-policy. The "Last Updated" date at the top of this Policy reflects the most recent revision.

For all data protection queries, requests to exercise your data rights, or complaints relating to a9win's handling of your personal data, please contact a9win through the following channels:

• Support Email: [email protected] Plain text only — not a clickable link. Please quote "Privacy Request" in your subject line.
• Live Chat: Available 24/7 in Filipino and English from within the a9win platform.

a9win aims to acknowledge all data rights requests within two (2) business days and to resolve them fully within fifteen (15) business days. Where the request is complex or the volume of requests is high, a9win may extend this period by a further thirty (30) days and will notify the requester accordingly.