piso88 Privacy Policy – How We Protect Your Personal Data 🔒

1. Introduction

1.1 piso88 ("we," "us," "our," "piso88") is committed to protecting the privacy and personal data of every player who accesses our platform at piso88.one. We understand that Filipino players entrust us with sensitive personal and financial information, and we take that responsibility seriously.

1.2 This Privacy Policy is prepared in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all relevant issuances of the National Privacy Commission (NPC) of the Philippines. It is also prepared in accordance with PAGCOR's data governance requirements applicable to licensed online gaming operators.

1.3 This Privacy Policy should be read together with piso88's Terms & Conditions and Responsible Gaming Policy. In the event of any inconsistency between this Privacy Policy and the Terms & Conditions on a privacy matter, this Privacy Policy shall prevail.

2. Data Controller

2.1 The data controller responsible for your personal data processed through piso88.one is piso88, the operator of the piso88 online gaming platform in the Philippines.

2.2 piso88 has designated a Data Protection Officer (DPO) as required under RA 10173. You may contact the piso88 DPO with privacy-related questions or requests using the contact details provided in Section 14 of this Policy.

3. Personal Data We Collect

3.1 piso88 collects the following categories of personal data in the course of operating our platform:

3.1 Identity & Contact Data

• Full legal name as appearing on a government-issued Philippine ID;
• Date of birth (for age verification — minimum 21 years);
• Registered mobile number (Philippine number);
• Email address (if provided during registration or communication);
• Residential address (required for certain KYC verification levels).

3.2 Identity Verification (KYC) Data

• Copies of government-issued Philippine IDs (PhilSys ID, Passport, UMID, Driver's Licence, Voter's ID, PRC ID);
• Selfie photographs submitted for identity matching;
• Proof of address documents where required.

3.3 Financial Data

• GCash or Maya account number (last digits or reference, not full credentials);
• Bank account details (BPI, BDO, UnionBank) for withdrawal processing;
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method references;
• Bonus and promotion redemption history.

3.4 Gaming Activity Data

• Games played, wager amounts, win/loss outcomes, session durations;
• Sports betting selections, stake amounts, and settlement results;
• Responsible gaming tool usage (deposit limits set, self-exclusion periods).

3.5 Technical & Device Data

• IP address and approximate geolocation at login;
• Device type, operating system, browser type and version;
• Session timestamps, login history, and logout records;
• Cookies and similar tracking technology data (see Section 8).

3.6 Communications Data

• Live chat transcripts between you and piso88 customer support;
• Email correspondence with piso88;
• Records of promotional SMS or push notifications sent to your registered mobile number.

4. How We Collect Your Data

4.1 Directly from you: Registration form, KYC submission portal, customer support interactions, responsible gaming tool activation requests, and promotional claim submissions.

4.2 Automatically through platform use: Our servers automatically record technical and gaming activity data when you access and use piso88.one, including through cookies and similar technologies described in Section 8.

4.3 From payment processors: GCash, Maya, BPI, BDO, UnionBank, and other payment providers share transaction reference data with piso88 as necessary to process deposits and withdrawals to and from your piso88 account.

4.4 From identity verification services: piso88 may use third-party KYC and identity verification providers to assist in verifying the authenticity of identity documents submitted by players.

5. Legal Basis for Processing

5.1 piso88 processes your personal data on the following legal bases under RA 10173:

• Contractual necessity: Processing required to fulfil our obligations to you under the piso88 Terms & Conditions — including account management, payment processing, game provision, and support.
• Legal obligation: Processing required to comply with PAGCOR regulatory requirements, anti-money laundering laws (AMLA, RA 9160 as amended), and other applicable Philippine legislation.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming risk detection, where such processing does not override your rights and freedoms.
• Consent: Where we send you promotional communications beyond what is necessary for service delivery, we do so on the basis of your consent, which you may withdraw at any time.

6. How We Use Your Personal Data

7. Sharing Your Personal Data

7.1 piso88 does not sell your personal data. We share personal data only in the following circumstances and with the following categories of recipients:

• PAGCOR and Philippine regulatory authorities: We are legally required to provide player data to PAGCOR upon request and to report suspicious transactions to the Anti-Money Laundering Council (AMLC) in accordance with RA 9160.
• Payment processors: GCash, Maya, BPI, BDO, UnionBank, and other payment service providers receive the minimum data necessary to process your transactions.
• KYC and identity verification providers: Third-party identity verification services that assist in validating the authenticity of documents submitted during the KYC process.
• IT infrastructure and hosting providers: Cloud infrastructure and server hosting providers whose services underpin the piso88 platform, subject to strict data processing agreements.
• Game software providers: Game studios and RNG certification bodies that supply games to the piso88 platform may receive anonymised or pseudonymised gaming activity data for compliance and certification purposes.
• Law enforcement: Philippine law enforcement agencies and courts, in response to lawful orders, warrants, or subpoenas.

7.2 All third-party processors engaged by piso88 are bound by data processing agreements that require them to process personal data only on piso88's documented instructions, to implement appropriate security measures, and to comply with applicable Philippine data protection law.

8. Cookies & Tracking Technologies

8.1 piso88.one uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session, prevent fraud, and analyse platform performance.

8.2 The following categories of cookies are used by piso88:

• Strictly necessary cookies: Essential for the platform to function — including session authentication, CSRF protection, and load balancing. These cannot be disabled.
• Functional cookies: Remember your language preference, game settings, and other personalisation choices.
• Analytics cookies: Collect anonymised and aggregated data about how players use the platform to help us improve the user experience. piso88 uses first-party analytics only; data is not shared with third-party advertising networks.
• Security cookies: Detect and prevent fraudulent login attempts, multiple account detection, and bot activity.

8.3 You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use piso88 — including the ability to log in and maintain a session.

9. Data Retention

9.1 piso88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy regulatory retention obligations. The following indicative retention periods apply:

• Account and KYC data: For the duration of your active piso88 account plus five (5) years following account closure, as required by PAGCOR's record-keeping obligations and anti-money laundering regulations.
• Transaction records: Five (5) years from the date of each transaction, in compliance with AMLA record-keeping requirements.
• Customer support communications: Three (3) years from the date of the communication.
• Gaming activity logs: Three (3) years from the date of the activity.
• Marketing consent records: For the period that consent remains active, plus three (3) years following consent withdrawal, as evidence of compliance.

9.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

10. Data Security

10.1 piso88 implements the following technical and organisational security measures to protect your personal data:

• 256-bit SSL/TLS encryption for all data transmitted between your device and piso88 servers;
• Encryption of sensitive data fields (including financial data and ID document images) at rest;
• Role-based access controls ensuring that personal data is accessible only to piso88 personnel with a demonstrated operational need;
• Multi-factor authentication required for piso88 staff accessing systems containing player personal data;
• Regular security vulnerability assessments and penetration testing;
• Documented data breach incident response procedures, including NPC notification within 72 hours of becoming aware of a breach that poses a risk to the rights of affected data subjects.

10.2 While piso88 implements industry-standard security measures, no system is entirely immune from security incidents. In the event of a data breach affecting your personal data, piso88 will notify you in accordance with the requirements of RA 10173 and NPC regulations.

11. Your Data Subject Rights

11.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by piso88:

• Right to be informed: The right to know how your personal data is being collected and processed — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data piso88 holds about you.
• Right to rectification: The right to have inaccurate or incomplete personal data corrected.
• Right to erasure: The right to request deletion of your personal data, subject to exceptions where retention is required by law (e.g., AMLA compliance).
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to restrict processing: The right to request that piso88 limit how your data is processed in certain circumstances.
• Right to object: The right to object to processing based on legitimate interests, including profiling for marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11.2 To exercise any of these rights, please contact piso88's Data Protection Officer using the details in Section 14. piso88 will respond to data subject requests within thirty (30) days of receipt, extendable by a further thirty (30) days where the request is complex or numerous, with prior notification to you of the extension.

11.3 piso88 will not charge a fee for responding to data subject requests, except in cases of manifestly unfounded or excessive repetition, where a reasonable fee reflecting administrative costs may be applied.

12. Children's Privacy

12.1 piso88 services are strictly restricted to individuals aged 21 years and older. piso88 does not knowingly collect, process, or retain personal data from any person under 21 years of age.

12.2 If piso88 discovers that personal data has been collected from a person under 21 years of age, we will immediately delete that data, close the associated account, and — where required — report the matter to PAGCOR in accordance with our regulatory obligations.

12.3 If you believe that piso88 has inadvertently collected personal data from a person under 21, please contact us immediately at the details provided in Section 14.

13. Changes to This Privacy Policy

13.1 piso88 reserves the right to amend this Privacy Policy at any time. The "Last Updated" date at the top of this document reflects the most recent revision.

13.2 Material changes to this Privacy Policy will be communicated to registered piso88 players via a notification on the platform and, where appropriate, via the registered mobile number. Your continued use of piso88 following the effective date of an amended Privacy Policy constitutes acceptance of the revised terms.

13.3 piso88 recommends reviewing this Privacy Policy periodically to stay informed about how your data is being protected.

14. Contact & Complaints

14.1 For privacy-related queries, data subject access requests, or to contact piso88's Data Protection Officer, please use the following channels:

• 24/7 Live Chat: Available directly on piso88.one
• Email: [email protected] (plain text — not a clickable link)

14.2 Complaints to the National Privacy Commission. If you are not satisfied with piso88's response to a privacy complaint, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Contact information and complaint procedures for the NPC are publicly available on the NPC's official website.

14.3 piso88 aims to resolve all privacy-related concerns promptly and in good faith. We encourage players to contact us directly in the first instance before escalating any complaint to a regulatory authority.