PisoPlay Privacy Policy – How We Protect Your Personal Data

1Who We Are and What This Policy Covers

PisoPlay ("we," "us," or "our") is a PAGCOR-licensed online gaming platform operating in the Philippines. We provide services including PBA sports betting, Tongits card games, Esports Betting, JILI Slots, a VIP Club loyalty program, and a Refer a Friend program — collectively referred to as the "Platform."

This Privacy Policy applies to all personal information collected by PisoPlay when you access our website, create an account, make a deposit or withdrawal, participate in any of our games or promotions, or contact our support team. It also applies to information we collect passively through cookies and analytics tools when you browse the Platform.

For purposes of the Philippines' Data Privacy Act of 2012 (RA 10173), PisoPlay is the Personal Information Controller responsible for your personal data. Our designated Data Protection Officer (DPO) can be reached at privacy@pisoplay.net.

2Personal Data We Collect

PisoPlay collects different categories of personal data depending on how you interact with the Platform. Here's a summary of what we collect and why:

PisoPlay does not collect sensitive personal information as defined under RA 10173 (such as health records, political affiliation, or biometric data) except where strictly required for identity verification, in which case it is processed under appropriate safeguards and destroyed after the verification process is complete.

3How We Collect Your Personal Data

PisoPlay collects personal data through the following channels:

Directly From You

When you register for a PisoPlay account, complete KYC verification, make a deposit or withdrawal request, contact our support team, participate in a promotion, or update your account settings, you directly provide us with personal information.

Automatically Through Technology

When you access PisoPlay — whether via web browser or mobile device — our servers automatically log certain technical data such as your IP address, device type, browser version, and the pages you visit. We also use cookies and similar tracking technologies to remember your preferences and improve your experience on the Platform. See Section 7 for more detail on cookies.

From Third-Party Payment Providers

When you process a deposit or withdrawal through GCash, Maya, GrabPay, Coins.ph, InstaPay, BDO, BPI, UnionBank, or card networks, those providers share limited transaction confirmation data with PisoPlay to verify and credit your account. We do not receive your full payment credentials — only the reference information needed to match and confirm the transaction.

From Identity Verification Providers

For KYC verification, we may use regulated third-party identity verification services that process your government-issued ID and selfie images. These providers are contractually required to handle your data in compliance with RA 10173 and to retain it only for the period necessary to complete verification.

4Why We Use Your Personal Data

PisoPlay uses your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain your player profile.
• Service delivery: To process bets, settle winnings, manage your gaming wallet, and provide access to all PisoPlay games and features.
• Payment processing: To process deposits and withdrawals through your chosen Philippine payment channel, and to comply with financial recordkeeping requirements.
• Regulatory compliance: To comply with PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and related Philippine regulations — including verifying your identity, monitoring for suspicious transactions, and maintaining records required by law.
• Security and fraud prevention: To detect and prevent fraud, unauthorized account access, bonus abuse, and other prohibited activity.
• Customer support: To respond to your inquiries, resolve complaints, and maintain a record of your support interactions.
• Promotions and marketing: To send you relevant offers, bonus notifications, and promotional updates — but only if you have opted in to receive marketing communications. You can opt out at any time.
• Platform improvement: To analyse usage patterns, identify performance issues, and improve the PisoPlay user experience based on aggregated and anonymised data.
• Responsible gaming: To monitor for signs of problem gambling behaviour and, where appropriate, reach out to players who may benefit from responsible gaming support tools.

5Legal Basis for Processing

Under the Data Privacy Act of 2012 and its implementing rules, PisoPlay processes your personal data on the following legal grounds:

• Contractual necessity: Processing your registration data, payment information, and gaming records is necessary to perform the contract between you and PisoPlay — that is, to provide you with the services you signed up for.
• Legal obligation: Processing for KYC verification, transaction monitoring, and regulatory reporting is required by PAGCOR licensing conditions, the AMLA, and related Philippine law. We do not have discretion over these obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and aggregated analytics serves the legitimate interests of PisoPlay and its players, provided these interests do not override your fundamental privacy rights.
• Consent: Marketing communications, optional analytics tracking beyond functional purposes, and any processing not covered above is carried out only with your explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6How We Share Your Data

PisoPlay does not sell, rent, or trade your personal data to third-party advertisers or data brokers. We share your data only in the following limited circumstances:

Payment Processors

To complete deposits and withdrawals, we share the minimum necessary data with your chosen Philippine payment provider (GCash, Maya, GrabPay, Coins.ph, BDO, BPI, UnionBank, card networks). These providers are independent data controllers with their own privacy policies. PisoPlay does not control how they handle data once the transaction is initiated.

Identity Verification Providers

For KYC verification, we share your submitted ID documents with contracted identity verification service providers. These providers are bound by data processing agreements requiring compliance with RA 10173.

Regulatory Authorities

PisoPlay is required to report certain transactions and account activity to PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory bodies as required by law. We do not require your consent to make disclosures mandated by law.

IT and Platform Service Providers

PisoPlay uses trusted third-party service providers for cloud hosting, cybersecurity monitoring, fraud detection, and customer support software. These providers process data on our behalf and are contractually restricted from using it for any purpose other than providing services to PisoPlay.

Business Transfers

In the event of a merger, acquisition, or transfer of all or part of PisoPlay's business, your personal data may be transferred as part of that transaction. We will notify you in advance and ensure your rights are protected in any such transfer.

7Cookies and Tracking Technologies

PisoPlay uses cookies — small text files stored on your device — and similar tracking technologies to make the Platform work properly and to improve your experience. Here's a breakdown of the types of cookies we use:

• Essential cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and cookies that remember your login state. You cannot opt out of essential cookies without disabling the Platform entirely.
• Functional cookies: Remember your preferences such as your preferred language, last visited game category, and notification settings. These improve convenience but are not strictly essential.
• Analytics cookies: Help us understand how players use the Platform — which pages are most visited, where users drop off, and how game sessions flow. Analytics data is aggregated and does not identify individual players.
• Marketing cookies: Used only with your explicit consent to track the effectiveness of promotional campaigns and personalise offers. These can be disabled in your account settings or browser preferences without affecting core functionality.

Most browsers allow you to control cookies through their settings. Note that disabling functional or essential cookies may affect how the Platform performs for you. For mobile app usage, similar tracking mechanisms apply and can be managed through your device's app permissions settings.

8How Long We Keep Your Data

PisoPlay retains personal data only for as long as necessary to fulfil the purposes it was collected for, or as required by Philippine law. Here's a general guide to our retention periods:

• Account and identity data: Retained for the duration of your active account, plus a minimum of five years after account closure — as required by PAGCOR regulations and AMLA recordkeeping obligations.
• Transaction records: Retained for a minimum of five years from the date of the transaction, in compliance with Philippine financial regulations.
• Gaming activity logs: Retained for three years from the date of the session or bet, and may be retained longer if the data is relevant to an open investigation or dispute.
• KYC verification documents: Retained for five years from the date of verification, after which original documents are securely destroyed. Reference records confirming that verification was completed are retained for the full account lifecycle.
• Support communications: Retained for two years from the date of the interaction.
• Marketing preferences and analytics data: Retained until you withdraw consent or request deletion, or for a maximum of two years from your last active session, whichever comes first.

When retention periods expire, personal data is securely deleted or anonymised in a way that it can no longer be linked to you as an individual.

9How We Protect Your Data

PisoPlay implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or disclosure. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and PisoPlay servers.
• Encryption at rest for sensitive data fields including payment references and identity verification records.
• Two-factor authentication required for withdrawal requests, preventing unauthorised cash-outs even if account credentials are compromised.
• Role-based access controls limiting which PisoPlay staff can access different categories of player data — only staff with a clear operational need can access your personal information.
• Regular security audits and penetration testing conducted by independent cybersecurity specialists.
• Real-time monitoring for suspicious login activity and anomalous transaction patterns.
• Staff training on data protection obligations under RA 10173 and PisoPlay's internal data handling policies.

Despite these measures, no platform is entirely immune to security incidents. In the event of a personal data breach that poses a risk to your rights and freedoms, PisoPlay will notify you and the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, in accordance with the NPC's breach notification requirements.

10Your Privacy Rights Under Philippine Law

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by PisoPlay. We take these rights seriously and will respond to verified requests within a reasonable timeframe — generally within 15 business days.

To exercise any of these rights, contact our Data Protection Officer at privacy@pisoplay.net or through the in-app support chat. We may need to verify your identity before processing your request to protect against fraudulent requests from third parties.

11Children's Privacy

PisoPlay is strictly an adult platform. The minimum age to register and use PisoPlay is 21 years old, in compliance with PAGCOR licensing requirements for online gaming in the Philippines. We do not knowingly collect personal data from anyone under the age of 21.

If we discover that personal data has been collected from a player who is under 21, we will immediately suspend the account, void any transactions, and permanently delete the data. If you believe a minor has registered on PisoPlay, please notify us immediately at support@pisoplay.net.

12Third-Party Links and Services

PisoPlay's platform may contain references or links to third-party payment providers and game suppliers. These third parties operate their own platforms and have their own privacy policies that are independent of this document. PisoPlay is not responsible for the privacy practices of third-party services and encourages you to review their privacy policies before interacting with them directly.

When you initiate a deposit via GCash or Maya, for example, you are redirected to those providers' own secure payment interfaces. Any data you enter directly on those interfaces is governed by GCash's and Maya's own privacy policies, not this one.

13Changes to This Privacy Policy

PisoPlay may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will notify you via in-app notification and/or email at least seven days before the updated policy takes effect, where practicable.

The "Last updated" date at the top of this page shows when the policy was most recently revised. We encourage you to review this page periodically to stay informed about how PisoPlay protects your information. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised policy.

Archived versions of previous Privacy Policies are available upon written request to our Data Protection Officer.

14Contact Us and How to File a Complaint

If you have questions about this Privacy Policy, want to exercise your data rights, or need to report a potential data security concern, please reach out through any of the following:

• Data Protection Officer (DPO): privacy@pisoplay.net
• General support: support@pisoplay.net
• In-app live chat: Available daily, 9:00 AM – 10:00 PM PHT

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines:

• National Privacy Commission (NPC)
• 8th Floor, CICC Building, Anonas Road corner Del Monte Avenue, Quezon City, Philippines
• Website: privacy.gov.ph