Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected and processed by piso99 (the "Platform," "we," "us," or "our") in connection with your use of the piso99 website accessible at piso99.cam, our mobile applications, and all related gaming services offered to players in the Philippines.

piso99 operates as a personal information controller under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR). We are registered with the National Privacy Commission (NPC) and comply with all applicable data protection obligations under Philippine law.

By creating a piso99 account, depositing funds, placing wagers, or otherwise accessing our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal information as described herein. If you do not agree with any provision of this Policy, please cease using the piso99 platform immediately.

This Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference.

2. Personal Data We Collect

piso99 collects personal data that is necessary, adequate, relevant, and limited to what is required for the purposes outlined in this Policy. We collect data through the following channels: direct registration, account verification processes, payment transactions, platform usage and behavioral analytics, and customer support interactions.

2.1 Identity and Contact Information

When you register for a piso99 account, we collect:

• Full legal name as it appears on your government-issued identification;
• Date of birth (to verify you are at least 21 years of age, as required by PAGCOR regulations);
• Valid Philippine mobile number and email address;
• Residential address within the Philippines;
• Gender and nationality, where required for regulatory compliance.

2.2 Identity Verification Documents

To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements mandated by PAGCOR and Philippine law, piso99 collects copies of government-issued identification documents, which may include:

• PhilSys National ID, UMID, SSS ID, GSIS ID;
• Philippine passport or driver's license;
• Voter's ID, postal ID, or other PAGCOR-accepted identification;
• Proof of billing or residential address (utility bills, bank statements);
• Source of funds declarations where required by AML protocols.

2.3 Financial and Transaction Data

• GCash wallet number, PayMaya account details, or bank account information linked to your piso99 account;
• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers;
• Wagering history, game session data, win/loss records, and bonus utilization records.

2.4 Technical and Usage Data

• Device information including device type, operating system, and browser type;
• IP address, geolocation data (to verify you are accessing from within the Philippines), and mobile network operator;
• Platform navigation patterns, session duration, pages visited, and features accessed;
• Cookie identifiers and similar tracking technologies as described in Section 6.

2.5 Communications Data

• Records of live chat conversations, email correspondence, and support ticket submissions;
• Feedback, survey responses, and promotional campaign interactions;
• Any information you voluntarily provide to our customer support team.

3. How We Use Your Personal Data

piso99 processes your personal data only for specified, explicit, and legitimate purposes. We do not use your data in any manner incompatible with the purposes for which it was originally collected. The following outlines all primary uses of your personal information on the piso99 platform:

3.1 Account Management and Service Delivery

• Creating, maintaining, and administering your piso99 account;
• Processing your deposits, withdrawals, and gaming transactions in Philippine Pesos;
• Delivering the gaming services, promotions, bonuses, and loyalty programs you access on piso99;
• Verifying your eligibility to use piso99 services, including age verification (21+) and location verification within the Philippines.

3.2 Legal and Regulatory Compliance

• Fulfilling KYC and AML obligations under PAGCOR regulations and Philippine law;
• Reporting suspicious transactions to the Anti-Money Laundering Council (AMLC) as required;
• Maintaining records required by PAGCOR for audit and licensing purposes;
• Complying with court orders, subpoenas, or lawful requests from Philippine government agencies.

3.3 Security and Fraud Prevention

• Detecting and investigating fraudulent activity, including multi-accounting, bonus abuse, and identity theft;
• Monitoring for suspicious transaction patterns that may indicate money laundering or illegal activity;
• Protecting the security and integrity of the piso99 platform and its player community;
• Geofencing verification to ensure piso99 is accessed only from within the Philippines as required by PAGCOR.

3.4 Responsible Gaming

• Monitoring player behavior for indicators of problem gambling and intervening where appropriate;
• Administering self-exclusion requests and enforcing deposit and loss limits set by players;
• Maintaining records of self-exclusion periods to prevent circumvention;
• Generating responsible gaming reports required by PAGCOR.

3.5 Communications and Marketing

• Sending account-related notifications, security alerts, and transaction confirmations;
• Delivering promotional offers, bonus notifications, and loyalty program updates – only where you have consented to receive marketing communications;
• Conducting player satisfaction surveys and platform feedback collection;
• Responding to customer support inquiries through live chat and email.

3.6 Platform Improvement and Analytics

• Analyzing aggregated and anonymized usage patterns to improve platform performance, navigation, and game selection;
• Conducting A/B testing and user experience optimization;
• Generating internal business analytics and reporting for platform development purposes.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012 and its IRR, piso99 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and piso99 as set out in our Terms & Conditions – including account creation, game delivery, and payment processing;
• Legal Obligation: Processing is required to comply with PAGCOR licensing conditions, AML obligations, tax reporting, and other applicable Philippine legal requirements;
• Consent: Where you have provided explicit consent – for example, for marketing communications or optional analytics – we process your data on that basis. You may withdraw consent at any time without affecting the lawfulness of prior processing;
• Legitimate Interests: Processing that serves our legitimate business interests (such as fraud prevention, platform security, and responsible gaming monitoring) where those interests are not overridden by your rights and freedoms under Philippine law.

5. Data Sharing and Third-Party Disclosure

piso99 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the circumstances described below, and only to the extent necessary for each specified purpose.

5.1 Regulatory and Government Authorities

piso99 is required by Philippine law to share certain personal data with regulatory and government authorities, including:

• PAGCOR – as our licensing and regulatory authority, which may audit player records and transaction histories;
• Anti-Money Laundering Council (AMLC) – for mandatory suspicious transaction reports and covered transaction reports;
• Bureau of Internal Revenue (BIR) – for applicable gaming tax compliance and withholding obligations;
• National Privacy Commission (NPC) – in the event of a data breach or regulatory inquiry;
• Courts, law enforcement agencies, and other competent government bodies pursuant to lawful orders or legal process.

5.2 Service Providers and Data Processors

piso99 engages trusted third-party service providers who process personal data on our behalf, strictly under written data processing agreements that bind them to confidentiality and security obligations no less stringent than those in this Policy. These providers include:

• Payment processors and e-wallet service providers (including those facilitating GCash and PayMaya transactions);
• Identity verification and KYC platform providers;
• Cloud hosting and infrastructure providers operating data centers subject to Philippine data residency requirements where applicable;
• Customer support platform and live chat technology providers;
• Cybersecurity and fraud detection solution providers;
• Game software providers who may receive anonymized session data for technical integration purposes.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of substantially all assets of piso99, your personal data may be transferred to the acquiring or successor entity, subject to the same privacy protections described in this Policy. We will notify you of any such transfer through your registered email address.

6. Cookies and Tracking Technologies

piso99 uses cookies and similar tracking technologies to operate the platform effectively, maintain session security, and improve your gaming experience. The following types of cookies are used:

6.1 Strictly Necessary Cookies

These cookies are essential for the piso99 platform to function. They maintain your login session, store your security token, and enable core platform features such as game loading and cashier access. These cookies cannot be disabled without preventing access to key platform functions.

6.2 Functional Cookies

Functional cookies remember your preferences, such as your preferred language, game lobby view settings, and responsible gaming limit configurations. Disabling these cookies will result in preference settings not being retained between sessions.

6.3 Analytical Cookies

With your consent, piso99 uses analytical cookies to collect aggregated information about how players navigate the platform. This data is used solely to improve platform performance and user experience. Analytical cookie data is anonymized before processing and is not linked back to individual player accounts.

6.4 Security and Fraud Prevention Cookies

piso99 uses device fingerprinting and session security cookies as part of our fraud detection and account protection systems. These cookies help identify anomalous login behavior, detect multi-accounting, and protect player accounts from unauthorized access.

You may control cookie settings through your browser's preferences. However, disabling strictly necessary or security cookies may prevent you from accessing the piso99 platform or impair platform security features.

7. Data Security Measures

piso99 implements comprehensive technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and piso99 servers is encrypted using industry-standard TLS 1.3 protocols;
• At-Rest Encryption: Sensitive personal data stored in piso99 databases is encrypted using AES-256 encryption;
• Two-Factor Authentication (2FA): All piso99 player accounts support SMS-based 2FA, which is strongly recommended for all users and mandatory for withdrawal requests above certain thresholds;
• Access Controls: Access to personal data by piso99 employees is strictly role-based and limited to the minimum necessary for each employee's job function. All access is logged and regularly audited;
• Penetration Testing: piso99 engages independent cybersecurity firms to conduct regular penetration testing and vulnerability assessments;
• Incident Response: piso99 maintains a documented data breach incident response plan. In the event of a breach affecting your personal data, we will notify you and the National Privacy Commission (NPC) within the timeframes required by the Data Privacy Act of 2012.

While piso99 employs robust security measures, no digital platform can guarantee absolute security against all possible threats. You are encouraged to use a strong, unique password for your piso99 account, enable 2FA, and never share your login credentials with any third party.

8. Data Retention

piso99 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve disputes or enforce our agreements. The following retention periods apply:

• Account and identity data: Retained for the duration of your active account, plus a minimum of five (5) years following account closure, as required by PAGCOR gaming records requirements and AML regulations;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act of 2001 (RA 9160) and its amendments;
• Gaming session logs: Retained for a minimum of two (2) years for responsible gaming monitoring and dispute resolution purposes;
• Customer support communications: Retained for three (3) years from the date of each interaction;
• Security and fraud detection logs: Retained for three (3) years from collection;
• Marketing consent records: Retained for the duration of your account and for a period of two (2) years following withdrawal of consent, for audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data destruction procedures. Anonymized, aggregated data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

9. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by piso99. These rights are not absolute and may be subject to limitations where overriding legal obligations apply (for example, AML record-keeping requirements).

9.1 Right to Be Informed

You have the right to be informed about how piso99 collects and processes your personal data. This Privacy Policy fulfills that obligation. You may request a plain-language summary of this Policy at any time through our support team.

9.2 Right of Access

You have the right to request a copy of the personal data piso99 holds about you, including information about the categories of data held, the purposes of processing, and the recipients of your data. Requests for data access will be processed within thirty (30) calendar days of receipt.

9.3 Right to Rectification

If any personal data we hold about you is inaccurate, incomplete, or outdated, you have the right to request correction. For data that affects your account security or financial transactions, additional verification may be required before corrections are made.

9.4 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (where consent is the legal basis for processing). Note that piso99 is not able to erase data where retention is required by law – for example, AML transaction records required by PAGCOR and the AMLC.

9.5 Right to Data Portability

You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that this data be transmitted directly to another controller, where technically feasible.

9.6 Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to our demonstrating compelling legitimate grounds that override your rights.

9.7 Right to Lodge a Complaint

If you believe piso99 has processed your personal data in violation of the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. We encourage you to contact our Data Protection Officer first, so we have the opportunity to address your concern directly and promptly.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 13 of this Policy. We will respond to all verified requests within thirty (30) calendar days.

10. Third-Party Services and Links

The piso99 platform integrates with various third-party services to deliver a complete gaming experience, including payment gateways (GCash, PayMaya, BPI, BDO, Metrobank, UnionBank), game software providers, and customer support platforms. These third-party services operate under their own privacy policies and data protection practices, which are independent of piso99.

While piso99 conducts due diligence when engaging third-party service providers and requires them to maintain data protection standards consistent with Philippine law, we cannot be responsible for the independent privacy practices of these third parties. We encourage you to review the privacy policies of any third-party payment service you use in connection with your piso99 account.

11. Children's Privacy and Age Verification

The piso99 platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations governing online gaming in the Philippines. piso99 does not knowingly collect personal data from individuals under 21 years of age.

piso99 employs mandatory age verification procedures as part of the account registration and KYC process. All players must submit a valid government-issued identification document confirming their date of birth before accessing real-money gaming services. Accounts found to belong to individuals under 21 will be immediately suspended, all winnings will be voided, and all deposits will be refunded after verification.

If you become aware that a minor has registered on the piso99 platform or has accessed our services, please contact our support team immediately at [email protected] so we can take appropriate action without delay.

12. Updates to This Privacy Policy

piso99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform operations. When material changes are made to this Policy, we will:

• Update the "Last Updated" date at the top of this page;
• Send a notification to your registered email address at least seven (7) calendar days before the updated Policy takes effect;
• Display a prominent in-platform notification for logged-in players for a period of at least fourteen (14) days following the update.

Your continued use of the piso99 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the updated Policy, you must cease using the platform and may request account closure in accordance with our Terms & Conditions.

13. Contact Our Data Protection Officer

piso99 has appointed a Data Protection Officer (DPO) in compliance with the Data Privacy Act of 2012 and NPC regulations. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO through the following channels:

• Email: [email protected] (please use the subject line "Data Privacy Request – [Your Full Name]")
• Live Chat: Available 24/7 through the piso99 platform – request escalation to the Data Protection team
• Response Time: All data subject rights requests will receive an initial acknowledgment within five (5) business days and a substantive response within thirty (30) calendar days

For formal complaints or regulatory matters, you may contact the National Privacy Commission (NPC) of the Philippines through their official government channels. piso99 fully cooperates with NPC investigations and will provide all requested information in a timely manner.