Privacy Policy

piso99 is an online casino and sports betting platform operating at piso99.club and serving players primarily located in the Philippines. For the purposes of Philippine data protection law — specifically Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations — piso99 acts as the Personal Information Controller (PIC) with respect to the personal data it collects and processes in connection with the piso99 Platform.

piso99 is committed to full compliance with the DPA, the National Privacy Commission (NPC) Circulars, and all other applicable data protection laws and regulations in the Philippines.

piso99 collects only the personal data necessary to provide its services, comply with legal obligations, and maintain platform security. The categories of data we collect include:

piso99 does not intentionally collect sensitive personal information as defined under the DPA (e.g., health data, religious beliefs, political affiliations) except where voluntarily provided by a player in the context of a responsible gaming or self-exclusion request, and only to the extent strictly necessary to process that request.

piso99 collects personal data through the following channels:

• Direct Submission: Information you provide when creating a piso99 account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated Technical Collection: Data collected automatically when you access or use the piso99 Platform, including IP addresses, device identifiers, browser logs, and session data via cookies and similar tracking technologies.
• Third-Party Payment Processors: Confirmation data from GCash, PayMaya, BDO, BPI, Metrobank, and other payment providers relating to transaction completion. piso99 does not store full payment credentials — only transaction reference data necessary for reconciliation.
• KYC Verification Partners: Identity verification data returned by licensed KYC service providers in connection with the document verification process.
• Game Providers: Session and gameplay data from piso99's game content providers, which feed into the centralized gaming history maintained on your piso99 account.

Under the Data Privacy Act of 2012 and its IRR, piso99 processes your personal data on the following lawful bases:

• Contractual Necessity: Processing required to register your account, operate your piso99 Wallet, process deposits and withdrawals, deliver game services, and manage your account in accordance with the piso99 Terms & Conditions.
• Legal Obligation: Processing required to comply with PAGCOR regulations, Anti-Money Laundering Act (AMLA) obligations, tax reporting requirements, and orders from competent regulatory or judicial authorities.
• Legitimate Interest: Processing for platform security, fraud detection, responsible gaming monitoring, and internal analytics — where such interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications and non-essential cookies, where your prior consent has been obtained. You may withdraw marketing consent at any time.

piso99 uses your personal data for the following purposes:

• To create, maintain, verify, and secure your piso99 account.
• To process deposits, withdrawals, and bonus transactions through your piso99 Wallet.
• To deliver game services — slots, bingo, live casino, and other piso99 game categories.
• To verify your age and identity in compliance with PAGCOR requirements and AMLA obligations.
• To detect and prevent fraud, cheating, money laundering, and prohibited activities on the piso99 Platform.
• To operate responsible gaming tools, including deposit limits, session reminders, and self-exclusion management.
• To provide customer support and resolve disputes relating to your piso99 account or transactions.
• To send you transactional communications — account notifications, OTP codes, withdrawal confirmations, and security alerts.
• To send you promotional communications about piso99 bonuses, new games, and offers — only where you have opted in to receive such communications.
• To fulfill legal and regulatory reporting obligations.
• To analyze platform usage and improve piso99 services — in aggregate and anonymized form where possible.

piso99 does not use your personal data to make fully automated decisions that produce significant legal effects concerning you without human review.

6.1 Third-Party Service Providers. piso99 engages third-party service providers acting as Personal Information Processors (PIPs) who process personal data on our behalf under binding data processing agreements. These include KYC and identity verification providers, payment processors, game content suppliers, cloud infrastructure providers, and customer support platform operators. These processors are contractually required to process data only as instructed by piso99 and in accordance with applicable privacy law.

6.2 Regulatory and Legal Disclosure. piso99 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or courts of competent jurisdiction where required by applicable law, regulation, or valid legal process. In such cases, piso99 will disclose only the minimum data necessary to satisfy the legal requirement.

6.3 No Sale of Personal Data. piso99 does not sell, rent, or trade your personal data to any third party for their independent marketing or commercial purposes. This is an absolute commitment.

6.4 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of piso99's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the applicable privacy practices of the successor entity.

piso99 uses cookies and similar technologies on the Platform for the following purposes:

• Strictly Necessary Cookies: Required for the Platform to function, including session authentication, wallet security, and login state management. These cannot be disabled without breaking core piso99 functionality.
• Functional Cookies: Remember your preferences — such as language settings, last-played game, and responsible gaming limit displays.
• Analytics Cookies: Help piso99 understand how players navigate the Platform so we can improve game layouts, page performance, and support resources. Data is processed in aggregate form.
• Marketing Cookies: Used only where you have provided explicit consent, to display relevant piso99 promotions. You may withdraw consent at any time via your browser settings or the cookie preference center on piso99.club.

You can manage cookie preferences through your browser's settings. Disabling strictly necessary cookies may impair your ability to use the piso99 Platform.

piso99 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are:

• Account and Identity Data: Retained for the duration of the active account relationship and for a period of five (5) years following account closure, in compliance with AMLA record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Gaming Session Data: Retained for three (3) years from the date of the session, for dispute resolution and regulatory purposes.
• Support Communications: Retained for two (2) years from the date of the interaction, unless a dispute or regulatory matter requires longer retention.
• Marketing Consent Records: Retained for the duration of the consent and for two (2) years following withdrawal of consent, to demonstrate compliance.

Upon expiry of applicable retention periods, piso99 will securely delete or anonymize the relevant personal data.

piso99 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and piso99 servers.
• Encryption of sensitive data fields — including passwords and government ID numbers — at rest using industry-standard algorithms.
• Strict access controls limiting piso99 employee access to personal data on a need-to-know basis, with full audit logging of all access.
• Intrusion detection systems and 24/7 security monitoring of the piso99 Platform infrastructure.
• Regular security assessments and penetration testing of the piso99 Platform.
• OTP-based two-factor authentication for all piso99 player accounts.

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, piso99 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay in accordance with DPA requirements.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by piso99:

• Right to Be Informed: The right to be informed of the personal data piso99 collects about you and how it is used — as set out in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data piso99 holds about you, subject to identity verification and applicable legal restrictions.
• Right to Correction: The right to request correction of any inaccurate, incomplete, or outdated personal data in your piso99 account.
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where processing is no longer necessary, unlawful, or where consent has been withdrawn — subject to piso99's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing or where processing is based on piso99's legitimate interests, on grounds relating to your particular situation.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format for transfer to another service provider where technically feasible.
• Right to Damages: The right to be indemnified for damages sustained as a result of inaccurate, incomplete, outdated, or unlawfully obtained personal data, in accordance with applicable law.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe that piso99 has processed your personal data in violation of the DPA.

To exercise any of these rights, please submit a written request to piso99 Support. We will respond within a reasonable period and in any case within thirty (30) days of receipt of a verifiable request.

The piso99 Platform is strictly for persons aged 21 years and above. piso99 does not knowingly collect personal data from individuals under 21 years of age. If piso99 becomes aware that personal data has been collected from a person under 21, we will take immediate steps to delete such data and close the associated account.

If you are a parent or guardian and believe that a minor has registered on piso99, please contact our Support team immediately with the relevant account details so we can investigate and act accordingly.

piso99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or the piso99 Platform's functionality. Material changes will be communicated to registered players via their registered email address and/or by a prominent notice on piso99.club at least seven (7) calendar days before the revised policy takes effect.

Your continued use of the piso99 Platform after the effective date of any amended Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree to the revised policy, you should cease using piso99 and request account closure.

piso99 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Privacy Policy. For privacy-related inquiries, data subject rights requests, or to report a suspected data breach, please contact piso99 through the following channel:

For complaints that remain unresolved after contact with piso99, you may escalate the matter to the National Privacy Commission (NPC) of the Philippines. The NPC's contact information is publicly available through official Philippine government channels.