f9club Privacy Policy

01 Introduction

f9club is committed to protecting the privacy and personal data of every player who uses our platform. We understand that when you share your personal information with us — whether during registration, during KYC verification, or simply by browsing f9club.xyz — you are placing trust in us. We take that trust seriously.

This Policy applies to all personal data collected through the f9club website at f9club.xyz, any mobile-optimized version of the platform, and all communications between f9club and its registered players, including email, live chat, and SMS. It applies to all users regardless of location, though it is specifically designed to reflect the rights of Filipino players under Philippine law.

By registering an account with f9club or by continuing to use the f9club platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the f9club platform and may request account closure in accordance with our Terms & Conditions.

This Policy should be read together with the f9club Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated herein by reference.

02 Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, the data controller responsible for your personal data is:

f9club has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and with the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to your personal data, you may contact the DPO directly at the email address above. All data privacy inquiries will be acknowledged within five (5) business days.

03 Data We Collect

f9club collects the following categories of personal data from players. We collect only the data that is necessary for the purposes described in this Policy — we do not collect data for its own sake.

3.1 Identity & Contact Data

3.2 Technical & Usage Data

3.3 Sensitive Personal Information

In limited circumstances, f9club may collect sensitive personal information as defined under the Data Privacy Act of 2012, including information about your financial situation (for responsible gaming assessments) and, where required by law, information relevant to anti-money laundering compliance. Such sensitive data is collected only where strictly necessary and is subject to enhanced security measures.

04 How We Collect Data

f9club collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the f9club platform, through cookies, web beacons, and server logs. See Section 9 for details on our cookie practices.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance service providers; payment verification data from payment processors such as GCash and Maya.
• Publicly available sources: In limited circumstances, f9club may verify information against publicly available government databases or records for compliance purposes.

05 Purpose & Legal Basis

f9club processes your personal data only where we have a lawful basis to do so under the Data Privacy Act of 2012. The table below sets out the purposes for which we process your data and the corresponding legal basis for each:

Where f9club relies on your consent as the legal basis for processing — such as for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent for marketing, contact us at [email protected] or use the unsubscribe link in any marketing email.

06 Data Sharing

f9club does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

6.1 Service Providers

f9club engages trusted third-party service providers who process personal data on our behalf under strict data processing agreements. These include:

• KYC and identity verification providers — to verify your identity and age as required by law.
• Payment processors — including GCash, Maya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) — to process deposits and withdrawals.
• AML and fraud screening providers — to screen transactions and accounts against sanctions lists and fraud databases.
• Cloud hosting and infrastructure providers — to host and operate the f9club platform securely.
• Customer support platform providers — to manage live chat and email support communications.

All service providers are contractually required to process your data only on f9club's instructions, to maintain appropriate security measures, and to comply with applicable data protection laws.

6.2 Regulatory & Legal Disclosure

f9club may disclose your personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable Philippine law, including but not limited to:

• The Philippine Amusement and Gaming Corporation (PAGCOR), as required under f9club's operating license and applicable gaming regulations.
• The Anti-Money Laundering Council (AMLC), as required under Republic Act No. 9160 (Anti-Money Laundering Act) and its amendments.
• The National Privacy Commission (NPC), in the event of a data breach or as required under the Data Privacy Act of 2012.
• Any court, tribunal, or law enforcement authority with jurisdiction over f9club or the relevant player, pursuant to a valid legal order.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of f9club's business, your personal data may be transferred to the acquiring entity as part of that transaction. f9club will notify affected players of any such transfer and ensure that the acquiring entity is bound by privacy obligations no less protective than those in this Policy.

07 Data Retention

f9club retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, f9club will securely delete or anonymize your personal data in accordance with industry-standard data destruction practices. Anonymized data (which can no longer identify you) may be retained indefinitely for statistical and analytical purposes.

08 Data Security

f9club implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmitted between your device and the f9club platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest, including financial data and KYC documents, is encrypted using AES-256 encryption.
• Access controls: Access to personal data within f9club is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular data privacy training.
• Two-factor authentication: f9club supports and encourages the use of two-factor authentication (2FA) for all player accounts to reduce the risk of unauthorized access.
• Regular security audits: f9club conducts regular internal and third-party security audits and penetration testing to identify and remediate vulnerabilities in the platform.
• Incident response: f9club maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, f9club will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay.

09 Cookies & Tracking Technologies

f9club uses cookies and similar tracking technologies on the f9club.xyz platform to enhance your experience, maintain your session, and gather analytics data. A cookie is a small text file placed on your device by a website you visit. Cookies do not contain viruses or malware and cannot access other files on your device.

9.1 Types of Cookies We Use

9.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling strictly necessary cookies will prevent you from logging in to and using the f9club platform. Disabling functional cookies may affect your experience on the platform. Disabling analytics cookies will not affect your ability to use the platform.

f9club does not use cookies to serve third-party advertising or to track your activity across other websites.

10 Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by f9club. To exercise any of these rights, contact our Data Protection Officer at [email protected]. f9club will respond to all valid requests within thirty (30) calendar days.

• Right to be Informed: You have the right to be informed of how your personal data is being collected and processed. This Policy fulfills that obligation.
• Right to Access: You have the right to request a copy of the personal data f9club holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data f9club holds about you. You may update basic account information directly through your f9club account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to f9club's legal retention obligations. Note that data subject to mandatory retention periods (e.g., AML records) cannot be deleted until the retention period expires.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest, though f9club may be required to continue processing where there are compelling legitimate grounds.
• Right to Lodge a Complaint: If you believe f9club has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11 Children's Privacy

The f9club platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gambling regulations. f9club does not knowingly collect personal data from individuals under the age of 21.

If f9club becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the associated account, delete the personal data collected (subject to any mandatory legal retention obligations), and, where applicable, report the incident to the relevant authorities. If you are a parent or guardian and believe that your child has registered an account with f9club, please contact us immediately at [email protected] so that we can take prompt action.

12 Cross-Border Data Transfers

f9club's primary operations and data storage are based within the Philippines. However, some of our third-party service providers — including cloud infrastructure providers and KYC verification services — may process or store data in other countries. Where personal data is transferred outside the Philippines, f9club ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012.

Such safeguards may include contractual clauses approved by the National Privacy Commission, binding corporate rules, or transfers to countries that have been assessed as providing an adequate level of data protection. f9club will not transfer your personal data to a country that does not provide adequate data protection without your explicit consent or without the safeguards described above being in place.

13 Policy Updates

f9club reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. When material changes are made to this Policy, f9club will notify registered players via the email address associated with their account and will display a prominent notice on the f9club platform.

The updated Policy will be effective from the date specified in the notice. Your continued use of the f9club platform after the effective date of any update constitutes your acceptance of the revised Policy. The version number and effective date at the top of this document will be updated with each revision. We recommend reviewing this Policy periodically to stay informed of how f9club protects your data.

If any update to this Policy materially reduces your rights or increases f9club's ability to use your personal data in ways you have not previously consented to, f9club will seek your fresh consent before applying the updated terms to your data.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or to f9club's handling of your personal data, please contact our Data Protection Officer (DPO):

If you are not satisfied with f9club's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the government body responsible for enforcing the Data Privacy Act of 2012.