piso9 Privacy Policy

This Privacy Policy applies to all personal information processed by piso9 in connection with its online gaming platform, including the website at piso9.org, any associated mobile applications, and all services offered to players registered in the Philippines and other permitted jurisdictions.

piso9 is the personal information controller for all data processed under this Policy. piso9 is committed to full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered and enforced by the National Privacy Commission (NPC) of the Philippines.

This Policy should be read alongside piso9's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference. Where this Privacy Policy conflicts with any earlier statement made by piso9 regarding data handling, this Policy shall prevail.

piso9 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include:

piso9 does not intentionally collect sensitive personal information such as health data, biometric data, religious beliefs, or political opinions unless specifically required by Philippine law or regulatory mandate.

piso9 collects personal data through the following channels:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or using any piso9 feature that requires you to input your details;
• Automated Collection: Technical data collected automatically when you access piso9.org or use the platform, including through cookies, web beacons, log files, and similar tracking technologies (see Section 6 for full details);
• Third-Party Sources: Identity verification data obtained from accredited KYC and identity verification service providers operating under data processing agreements with piso9; transaction data received from payment processors such as GCash, PayMaya, and partner banks; fraud detection signals from risk management service providers;
• Regulatory Disclosures: Data received from PAGCOR or Philippine law enforcement authorities in connection with licensing, regulatory compliance, or investigation procedures.

Under the Philippine Data Privacy Act of 2012, piso9 processes your personal data on one or more of the following legal bases:

• Contract Performance: Processing necessary to create and manage your piso9 account, facilitate deposits and withdrawals in PHP, deliver gaming services, and fulfill our obligations under the Terms & Conditions you have accepted;
• Legal Obligation: Processing required to comply with applicable Philippine law, including the Anti-Money Laundering Act (RA 9160), PAGCOR licensing requirements, tax regulations, and NPC-mandated data protection obligations;
• Legitimate Interests: Processing necessary for fraud detection and prevention, platform security, responsible gaming monitoring, and service improvement — where these interests are not overridden by your data protection rights;
• Consent: Where piso9 relies on your consent for optional processing activities, such as sending promotional communications about new games, bonuses, or platform features.

The specific purposes for which piso9 processes your personal data include, but are not limited to:

• Creating and managing your piso9 player account;
• Verifying your identity and age (21+) as required by PAGCOR regulations;
• Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank;
• Preventing and detecting fraud, money laundering, and other prohibited activities;
• Monitoring gaming activity to fulfill responsible gaming obligations and player protection duties;
• Responding to customer support enquiries and resolving disputes;
• Complying with regulatory reporting obligations to PAGCOR and other competent Philippine authorities;
• Improving the functionality, security, and user experience of the piso9 platform;
• Sending service notifications, account alerts, and — where you have consented — promotional communications.

piso9 does not sell or rent your personal data. We share your information only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose:

• Game Providers: Licensed game developers and live casino studios whose games are accessible through the piso9 platform. These providers receive only the technical and session data necessary to deliver their games and verify game integrity;
• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other payment service providers, who receive transaction data necessary to process your deposits and withdrawals;
• KYC & Fraud Prevention Partners: Accredited identity verification and fraud detection service providers who assist piso9 in meeting its regulatory obligations. These providers act as data processors under binding contractual agreements and may not use your data for their own independent purposes;
• Regulatory & Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and any other Philippine government authority, court, or regulator where disclosure is required by applicable law, court order, or regulatory mandate;
• Professional Advisers: Lawyers, accountants, auditors, and insurers, where necessary for the conduct of piso9's business, under strict confidentiality obligations;
• Business Transfers: In the event of a merger, acquisition, or sale of piso9's business assets, player data may be transferred to the acquiring entity, subject to the same level of data protection. Affected players will be notified in advance of any such transfer.

piso9 uses cookies and similar tracking technologies on piso9.org to deliver a functional, secure, and personalized platform experience. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the operation of piso9.org. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without impairing the platform's functionality;
• Functional Cookies: Remember your preferences such as language settings, game display options, and responsible gaming tool configurations to provide a consistent experience across sessions;
• Analytics Cookies: Used by piso9 to understand how players navigate and use the platform, which features are most used, and where technical issues occur. This data is aggregated and anonymized where possible;
• Security & Fraud Prevention Cookies: Help piso9 detect and prevent fraudulent activity, unauthorized access attempts, and bot traffic on the platform.

piso9 does not use third-party advertising cookies or behavioral profiling cookies for the purpose of serving targeted advertising. You may manage your cookie preferences through your browser settings; however, disabling strictly necessary cookies may prevent you from accessing certain piso9 features.

piso9 retains your personal data for the periods set out below, after which data is securely deleted or irreversibly anonymized:

Where piso9 is required by law or regulatory order to retain data beyond the periods stated above, the relevant data will be retained for the legally mandated period and will be subject to enhanced access restrictions during that extended retention window.

piso9 implements a comprehensive suite of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• Encryption in Transit: All data transmitted between your device and piso9 servers is encrypted using TLS 1.2 or higher. Connections to piso9.org are secured via HTTPS at all times;
• Encryption at Rest: Personal data and financial records stored on piso9 systems are encrypted at rest using AES-256 standard encryption;
• Access Controls: Access to personal data is strictly limited to piso9 personnel with a demonstrated need to know, enforced through role-based access controls and multi-factor authentication requirements for all administrative systems;
• Payment Tokenization: piso9 does not store raw payment credentials. GCash, PayMaya, and banking transaction references are handled through tokenized processing flows;
• Continuous Monitoring: piso9 systems are subject to continuous security monitoring, intrusion detection, and regular third-party security assessments to identify and remediate vulnerabilities;
• Incident Response: piso9 maintains a documented data breach response plan. In the event of a security incident, piso9 will take immediate containment action and fulfill its notification obligations to the NPC and affected players as required by the Data Privacy Act of 2012.

As a data subject under the Philippine Data Privacy Act of 2012, you are entitled to exercise the following rights with respect to your personal data held by piso9:

piso9 is strictly an adult gaming platform. Registration and use of piso9 services is prohibited for any person under the age of 21 years, in compliance with PAGCOR regulations governing online gaming in the Philippines.

piso9 does not knowingly collect personal data from individuals under the age of 21. Where piso9 discovers that personal data has been collected from a minor, the relevant account will be immediately closed, all associated data will be securely deleted, and any winnings or balances will be voided.

If you are a parent or guardian and believe that a minor in your care has registered on piso9, please contact us immediately at [email protected] so that we can take appropriate action without delay.

Some of piso9's third-party service providers — including certain game providers and technical infrastructure partners — may process your personal data in jurisdictions outside the Philippines. Where such cross-border transfers occur, piso9 ensures that adequate safeguards are in place to protect your data to a standard equivalent to Philippine law, including through:

• Binding contractual clauses that impose data protection obligations on the receiving party consistent with the Data Privacy Act of 2012;
• Transfers only to jurisdictions that the National Privacy Commission has recognized as providing an adequate level of data protection;
• Ensuring that receiving parties are subject to binding corporate rules or equivalent internal data protection policies where applicable.

piso9 will not transfer your personal data to a jurisdiction that does not provide an adequate level of protection without implementing appropriate safeguards and, where required by the NPC, obtaining prior authorization for such transfers.

piso9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC guidelines, or PAGCOR regulatory requirements.

When material changes are made to this Policy, piso9 will notify registered players by email to their registered address and/or by posting a prominent notice on piso9.org at least seven (7) days before the revised Policy takes effect — unless a shorter notice period is required by applicable law.

The effective date displayed at the top of this Policy reflects the date of the most recent revision. Your continued use of piso9 following the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree to the updated Policy, you should cease using piso9 and may request account closure in accordance with the Terms & Conditions.

piso9 recommends that you review this Privacy Policy periodically to remain informed of how your data is being protected.

piso9 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Policy, you may contact the piso9 DPO through the following channel:

If you are not satisfied with piso9's response to your data rights request or privacy concern, you have the right to escalate your complaint directly to the National Privacy Commission (NPC) of the Philippines, which is the competent supervisory authority for data protection matters in the Philippines.