399 Privacy Policy – How We Protect Your Personal Data

1 Who This Policy Covers

This Privacy Policy applies to all individuals who access or use the 399 platform, including the website at 399.ceo and the 399 Android application. It covers registered account holders, individuals browsing the platform without an account, and anyone who contacts 399 through our support channels.

The 399 platform is intended exclusively for use by residents of the Philippines who are 21 years of age or older. By using the platform, you confirm that you meet these requirements and consent to the data practices described in this policy.

2 What Data We Collect

The data 399 collects falls into three broad categories: information you provide directly, information generated through your use of the platform, and technical data collected automatically.

We do not collect payment card numbers, bank account credentials, or e-wallet PINs. Deposits and withdrawals are processed through payment gateways that handle sensitive financial credentials directly — this data does not pass through or reside on 399's systems.

3 How We Use Your Data

Your personal data is used for the following purposes:

• Account management: creating, maintaining, and securing your 399 player account.
• Identity verification: confirming your age (21+) and identity as required by KYC procedures before withdrawals are processed.
• Transaction processing: handling deposits and withdrawals in Philippine Peso through your registered payment channels.
• Regulatory compliance: meeting anti-money laundering (AML) and know-your-customer (KYC) obligations applicable to our operations.
• Responsible gaming: monitoring for patterns that may indicate problem gambling behaviour and applying the tools available through the platform where appropriate.
• Security and fraud prevention: detecting unusual activity, protecting accounts from unauthorised access, and investigating suspected fraud.
• Service communications: sending you important notices about your account, transactions, policy updates, and security alerts via your registered Philippine mobile number or email.
• Platform improvement: analysing aggregated, anonymised usage data to understand how the platform is used and improve the player experience.

4 KYC & Identity Verification

Identity verification is a mandatory step at 399 before any withdrawal from your account can be processed. This requirement exists to confirm that you are who you say you are, that you meet the 21+ age requirement, and to comply with standard anti-money laundering procedures.

The KYC process involves submitting a valid Philippine government-issued ID through your account settings. Accepted documents include the PhilSys National ID, UMID, driver's licence, passport, and voter's ID. A liveness check ( selfie photo) may be required as part of this process.

• KYC is a one-time process. Once verified, your account remains verified unless circumstances require re-verification.
• KYC documents are stored securely and used only for identity verification and compliance purposes.
• Accounts that cannot be verified may have withdrawals placed on hold until verification is completed.
• 399 does not share your KYC documents with third parties except where required by applicable legal or regulatory obligations.

5 Sharing Your Data

399 does not sell, rent, or trade your personal data to any third party. Limited sharing occurs only in the following circumstances:

• Payment processors: your transaction data is shared with the payment service providers that handle deposits and withdrawals in Philippine Peso (e.g., banking gateway partners). They receive only what is necessary to complete the transaction.
• Identity verification services: KYC document data may be processed by a third-party verification provider engaged by 399 to confirm identity and age.
• Technology and hosting providers: platform infrastructure and data storage are provided by third-party technology partners operating under data processing agreements with 399.
• Legal and regulatory requirements: where required by applicable law, court order, or a competent authority, 399 may disclose personal data as legally obligated.
• Fraud and security investigations: data may be shared with relevant authorities or partners where there is a credible suspicion of fraud, money laundering, or criminal activity.

All third-party service providers engaged by 399 are bound by contractual obligations to handle your data securely and only for the purposes for which it is shared.

6 Cookies & Tracking

The 399 website uses cookies and similar tracking technologies to support platform functionality and improve your experience. Cookies are small text files stored on your device when you visit the site.

• Essential cookies: required for the platform to function — these handle your login session, security tokens, and core navigation.
• Functional cookies: remember your preferences such as language settings and display options.
• Analytics cookies: collect anonymised, aggregated data about how pages are accessed and how players navigate the platform. This data is used internally to improve the service.

You can manage or disable cookies through your browser settings. Please note that disabling essential cookies will affect your ability to log in and use core platform features. 399 does not use cookies to serve third-party advertising.

7 Data Retention

399 retains your personal data for as long as your account remains active and for a reasonable period after account closure to meet any outstanding legal, regulatory, or compliance obligations. Transaction records and KYC documents are retained for the minimum period required under applicable anti-money laundering and financial record-keeping standards.

When data is no longer required and no legal obligation exists to retain it, it is securely deleted or anonymised. Anonymised data may be retained indefinitely for aggregated analytics purposes as it can no longer identify any individual.

8 Your Rights

As a user of the 399 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with your registered account details.

9 Security Measures

399 applies technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:

• SSL/TLS encryption on all data transmitted between your device and the 399 platform.
• OTP two-step verification for sensitive account actions including login from new devices, password changes, and withdrawal requests.
• Hashed password storage — your account password is never stored in plain text.
• Access controls limiting internal access to personal data to staff who require it to perform their role.
• Regular security reviews of platform infrastructure and data handling processes.

While 399 takes data security seriously, no online platform can guarantee absolute security. You also play a role in keeping your account safe — use a strong, unique password and do not share your login credentials with anyone. If you suspect unauthorised access to your account, contact support immediately at [email protected].

10 Policy Changes

399 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will notify registered players through in-platform notifications before the updated policy takes effect.

The effective date of the current version of this policy is shown at the top of this page. Continued use of the 399 platform after a policy update has been communicated constitutes acceptance of the revised terms.

11 Contact

If you have questions about this Privacy Policy, wish to exercise your data rights, or want to report a data concern, please reach out to the 399 support team:

For general questions about the platform, the FAQ page is often the quickest place to find an answer. For account-specific matters, our support team can be reached directly via email.