piso99 Privacy Policy

1 Introduction

piso99 ("piso99," "we," "us," or "our") operates the online gaming platform accessible at piso99.app. As a personal information controller under the Philippine Data Privacy Act of 2012 (RA 10173), piso99 is responsible for the lawful, fair, and transparent processing of your personal data.

This Privacy Policy applies to all personal information collected from individuals who visit, register on, or otherwise interact with the piso99 Platform, including through our website, mobile-optimized interface, customer support channels, and any promotional communications we send.

By registering an account on piso99 or continuing to use our Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact us to request account closure.

This Policy should be read together with our Terms & Conditions, which govern your use of the piso99 Platform.

2 Personal Data We Collect

piso99 collects personal data that is necessary for the provision of our gaming services, compliance with Philippine legal and regulatory obligations, and the improvement of your experience on the Platform. The categories of personal data we collect include:

piso99 does not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect biometric data, health information, or political affiliations.

3 How We Collect Your Data

piso99 collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, log files, and similar tracking technologies. See Section 7 for more details on our cookie practices.
• Third-Party Sources: Identity verification data from KYC service providers; transaction data from payment processors such as GCash, Maya, and Philippine banking partners; fraud prevention data from security service providers.
• Regulatory Sources: Information received from PAGCOR or other Philippine regulatory authorities in connection with our compliance obligations, including self-exclusion registers.

piso99 will always inform you at the point of collection what data is being collected and for what purpose. Where data collection is mandatory for the provision of our services (such as KYC verification), failure to provide the required information may result in your inability to access certain features of the Platform.

4 How We Use Your Personal Data

piso99 processes your personal data for the following purposes:

• Account Management: Creating and maintaining your piso99 account, verifying your identity and age (21+ requirement), and managing your account settings and preferences.
• Service Delivery: Processing deposits and withdrawals, crediting bonuses, resolving game disputes, and providing access to all games and features on the Platform.
• Legal and Regulatory Compliance: Fulfilling our obligations under the Philippine Data Privacy Act, Anti-Money Laundering Act (AMLA), and applicable PAGCOR regulations, including mandatory reporting and record-keeping requirements.
• Fraud Prevention and Security: Detecting and preventing unauthorized access, fraudulent transactions, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: Monitoring gaming patterns to identify potentially problematic behavior and administering self-exclusion, deposit limit, and cooling-off requests.
• Customer Support: Responding to your inquiries, resolving complaints, and improving the quality of our support services.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates where you have provided consent. You may withdraw consent at any time.
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve the performance, design, and features of the piso99 Platform.

piso99 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by Philippine law.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, piso99 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration, including account management, game provision, and payment processing.
• Legal Obligation: Processing required to comply with applicable Philippine laws and regulations, including AMLA reporting, PAGCOR compliance, and tax obligations.
• Legitimate Interests: Processing necessary for piso99's legitimate business interests, including fraud prevention, security monitoring, and platform improvement, where such interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Personal Data

piso99 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following circumstances and only to the extent necessary:

• Payment Processors: GCash, Maya, and Philippine banking partners receive the financial data necessary to process your deposits and withdrawals.
• KYC and Identity Verification Providers: Third-party verification services that assist piso99 in confirming your identity and age in compliance with Philippine regulations.
• Game Software Providers: Licensed game studios and live dealer operators who provide the games available on piso99 may receive limited technical and gaming data necessary for game delivery and dispute resolution.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies where disclosure is required by law or regulatory mandate.
• Law Enforcement: Philippine law enforcement agencies where piso99 is legally compelled to disclose information, or where disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by piso99, subject to strict confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of piso99's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom piso99 shares personal data are required to process that data in accordance with applicable Philippine privacy laws and are prohibited from using it for any purpose beyond what is strictly necessary for the services they provide to piso99.

7 Cookies & Tracking Technologies

piso99 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit our website. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations to provide a more personalized experience.
• Analytics Cookies: Collect aggregated, anonymized data about how players use the Platform, including pages visited, session duration, and navigation paths. This data helps piso99 improve the Platform's design and performance.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of our marketing campaigns. These are only activated with your explicit consent.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the piso99 Platform. Strictly necessary cookies cannot be disabled as they are required for the Platform to operate securely.

piso99 does not use cookies to collect sensitive personal information or to track your activity on third-party websites unrelated to piso99.

8 Data Retention

piso99 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. Our general retention periods are as follows:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements.
• Financial Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and PAGCOR regulations.
• Gaming History: Retained for a minimum of three (3) years from the date of each gaming session for dispute resolution and regulatory audit purposes.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, or longer if the matter is subject to ongoing legal proceedings.
• Marketing Preferences: Retained until you withdraw consent or request deletion, subject to any overriding legal retention obligations.
• Technical and Log Data: Retained for up to twelve (12) months for security monitoring and fraud prevention purposes.

Upon expiry of the applicable retention period, piso99 will securely delete or anonymize your personal data in accordance with the National Privacy Commission's guidelines on data disposal.

9 Data Security

piso99 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption: All data transmitted between your device and the piso99 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. Sensitive data at rest, including financial information, is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized piso99 personnel and service providers on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Two-Factor Authentication: piso99 supports SMS OTP-based two-factor authentication for player accounts to reduce the risk of unauthorized access.
• Security Monitoring: piso99 employs continuous monitoring systems to detect and respond to suspicious activity, unauthorized access attempts, and potential data breaches.
• Regular Security Assessments: piso99 conducts periodic security reviews and vulnerability assessments to identify and address potential weaknesses in our systems.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, piso99 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected individuals without undue delay, in accordance with the requirements of the Data Privacy Act of 2012.

10 Your Data Privacy Rights

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by piso99:

• Right to Be Informed: The right to be informed about how your personal data is collected, used, stored, and shared — which is the primary purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data piso99 holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you. You may update certain information directly through your account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on piso99's legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact the piso99 Data Privacy Officer using the contact details provided in Section 14. piso99 will respond to all verified data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

Please note that certain rights may be limited where piso99 is required to retain or process your data to comply with a legal obligation, to exercise or defend legal claims, or to protect the rights of other individuals.

11 Children's Privacy and Age Restriction

piso99 is strictly an adult gaming platform. In accordance with Philippine gaming regulations, access to real-money games on piso99 is restricted to individuals who are at least 21 years of age. piso99 does not knowingly collect personal data from individuals under the age of 21.

piso99 employs mandatory age verification procedures at the point of registration and during the KYC process. Any account found to belong to a person under the age of 21 will be immediately suspended, all funds will be returned to the source payment method, and the matter may be referred to the appropriate Philippine authorities.

If you are a parent or guardian and believe that a minor has registered on piso99 or accessed your account, please contact our support team immediately. piso99 will investigate and take appropriate action without delay.

12 Third-Party Links

The piso99 Platform may contain references to third-party services such as payment processors and game software providers. While piso99 carefully selects its service partners, we do not control the privacy practices of third-party entities and are not responsible for their privacy policies or data handling practices.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of piso99. piso99's Privacy Policy applies solely to data collected and processed by piso99 in connection with the Platform.

13 Changes to This Privacy Policy

piso99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When material changes are made, piso99 will notify registered players via the email address or mobile number on file, or by displaying a prominent notice on the Platform, at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page reflects when the most recent revision was made. Your continued use of the piso99 Platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the revised Policy, you should discontinue use of the Platform and contact support to request account closure.

All previous versions of this Privacy Policy are archived and available upon request by contacting the piso99 Data Privacy Officer.

14 Contact Us & Data Privacy Officer

piso99 has designated a Data Privacy Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact us:

Data Privacy Officer, piso99

Email: [email protected]

General Support: [email protected]

When submitting a data privacy request, please include your registered account username, a description of your request, and a copy of a valid government-issued ID for identity verification purposes. piso99 will acknowledge receipt of your request within three (3) business days and provide a full response within fifteen (15) business days.

If you are not satisfied with piso99's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about the NPC and how to file a complaint is available through official Philippine government channels.