piso168 Privacy Policy

This Privacy Policy ("Policy") governs the collection, processing, storage, and disclosure of personal data by piso168 ("the Company", "we", "us", "our") in connection with your use of the piso168 online gaming platform, accessible at piso168.org and through any associated mobile applications or digital interfaces operated by piso168.

piso168 is committed to protecting the privacy and personal data of every player, visitor, and prospective registrant ("you", "your") who interacts with our platform. We operate in strict compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission (NPC).

This Policy should be read alongside our Terms and Conditions, which together govern your use of the piso168 platform. By registering an account with piso168 or by continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

For the purposes of the Data Privacy Act of 2012 and this Policy, the personal information controller responsible for your data is:

• Platform Name: piso168
• Website: piso168.org
• Regulatory Authority: Philippine Amusement and Gaming Corporation (PAGCOR)
• Data Protection Officer Email: [email protected] (subject line: "Data Privacy Request")

Our designated Data Protection Officer (DPO) oversees all data privacy compliance matters at piso168, including the handling of data subject rights requests, breach response, and regulatory reporting to the NPC. If you have any concerns about how your personal data is being handled, the DPO is your primary point of contact.

piso168 collects personal data across several categories, depending on how you interact with our platform. The table below summarises what we collect and why:

piso168 collects personal data through the following channels:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in a promotion.
• Automated Collection: Technical data collected automatically when you access the piso168 platform, including IP address, device identifiers, browser type, session timestamps, and clickstream data — collected via cookies, server logs, and similar technologies.
• Third-Party Sources: Identity verification data obtained from PAGCOR-approved KYC service providers; fraud risk signals from payment processors; and, where applicable, publicly available information used for AML screening purposes.
• Platform Activity: Gaming history, wagering patterns, and responsible gaming interactions generated through your use of piso168 games and features.

We do not collect personal data from social media platforms or purchase data lists from third-party data brokers.

piso168 processes your personal data only where we have a lawful basis to do so under the Data Privacy Act of 2012. The lawful bases we rely on are: your consent, the performance of a contract with you, compliance with a legal obligation, and our legitimate interests in operating a secure and compliant gaming platform.

Specific uses of your personal data include:

• Creating and managing your piso168 player account, including verifying your identity and confirming you meet the 21+ age requirement mandated by PAGCOR regulations.
• Processing financial transactions, including deposits and withdrawals, and maintaining accurate financial records as required by Philippine law.
• Fulfilling our obligations under PAGCOR licensing conditions, including player activity reporting and the maintenance of gaming records.
• Complying with Anti-Money Laundering Council (AMLC) requirements, including transaction monitoring and the filing of covered transaction reports where required.
• Delivering customer support services through Live Chat and email, and maintaining records of support interactions.
• Monitoring gaming behaviour to identify signs of problem gambling and to provide responsible gaming interventions, including self-exclusion enforcement.
• Detecting, investigating, and preventing fraud, cheating, account abuse, and other prohibited activities on the piso168 platform.
• Sending you service-related communications, including account notifications, security alerts, and material changes to our Terms and Conditions or this Privacy Policy.
• Sending you marketing communications about piso168 promotions, bonuses, and new game releases — but only where you have given your explicit consent to receive such communications, and only through channels you have opted into.

piso168 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

• PAGCOR and Regulatory Authorities: We are legally required to share certain player data and gaming activity reports with PAGCOR as part of our licensing obligations. We may also be required to disclose data to other Philippine government agencies, law enforcement bodies, or courts upon receipt of a lawful order or subpoena.
• Anti-Money Laundering Council (AMLC): Financial transaction data may be reported to AMLC as required under Republic Act No. 9160 (Anti-Money Laundering Act) and its amendments.
• National Privacy Commission (NPC): In the event of a personal data breach, we are obligated to notify the NPC and affected data subjects in accordance with NPC Circular No. 16-03.
• Payment Service Providers: We share necessary financial data with PAGCOR-approved payment partners such as GCash, Maya, BPI, BDO, UnionBank, and Coins.ph to process your transactions. These providers process your data only for payment purposes under data processing agreements with piso168.
• KYC and Identity Verification Providers: We use third-party identity verification services to assist with the KYC process. These providers receive only the data required to verify your identity and are contractually bound to process it for no other purpose.
• IT and Security Service Providers: Our technology infrastructure partners may process certain technical data as part of hosting, security monitoring, and platform maintenance services, always under strict data processing agreements.

All third parties who process personal data on behalf of piso168 are contractually required to maintain appropriate data security standards and to process your data only in accordance with our documented instructions and applicable Philippine law.

piso168 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active account relationship with piso168, plus a minimum of five (5) years after account closure, in compliance with PAGCOR record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and PAGCOR licensing conditions.
• Gaming History: Retained for a minimum of three (3) years from the date of each gaming session, as required under our PAGCOR license.
• Customer Support Records: Retained for two (2) years from the date of the interaction, or longer if the interaction relates to an unresolved dispute or regulatory matter.
• Marketing Preferences: Retained until you withdraw your consent or close your account, whichever is earlier.
• Technical and Log Data: Retained for up to twelve (12) months from collection, unless required for longer retention for fraud investigation or security purposes.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures. Anonymised data that can no longer identify you may be retained indefinitely for statistical and analytical purposes.

piso168 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Encryption: All data in transit is encrypted using TLS 1.3. Sensitive data at rest, including passwords and financial account details, is encrypted using industry-standard AES-256 encryption.
• Access Control: Role-based access controls (RBAC) ensure that only authorised personnel can access personal data, and only to the extent required for their specific job function. All access is logged and subject to regular audit.
• Two-Factor Authentication: piso168 supports and encourages 2FA for all player accounts. Internal staff systems require mandatory 2FA.
• Vulnerability Management: We conduct regular security assessments, penetration testing, and vulnerability scanning of our platform infrastructure.
• Incident Response: We maintain a documented personal data breach response plan, with defined procedures for containment, assessment, notification, and post-incident review.
• Staff Training: All piso168 staff who handle personal data receive regular data privacy and information security training.

piso168 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the piso168 platform to function. These include session authentication cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences, such as your chosen language settings or game lobby layout. Disabling these cookies may affect your platform experience.
• Analytics Cookies: Help us understand how players use the piso168 platform by collecting aggregated, anonymised usage statistics. This allows us to identify areas for improvement.
• Security and Fraud Detection Cookies: Used by our fraud prevention systems to identify and flag suspicious activity, protecting both you and the integrity of the platform.

You can manage cookie preferences through your browser settings. Note that blocking strictly necessary cookies will prevent you from logging in to your piso168 account. piso168 does not use third-party advertising or cross-site tracking cookies.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by piso168. To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Privacy Request".

• Right to be Informed: The right to be notified about the collection and processing of your personal data — which this Privacy Policy fulfils.
• Right of Access: The right to obtain a copy of the personal data piso168 holds about you, along with information about how it is being processed.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected. You can update many details directly through your piso168 account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes at any time, without needing to provide justification.
• Right to Data Portability: The right to receive a copy of the personal data you provided to piso168 in a structured, machine-readable format.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe piso168 has processed your personal data in a manner inconsistent with the Data Privacy Act of 2012.

piso168 will respond to all verified data subject rights requests within thirty (30) calendar days of receipt. In cases of complex or high-volume requests, we may extend this period by a further thirty (30) days, with prior written notice to you.

The piso168 platform is strictly intended for persons who are at least 21 years of age, as mandated by PAGCOR regulations and applicable Philippine law governing online gaming. piso168 does not knowingly collect, process, or retain personal data from any individual under the age of 21.

As part of our registration and KYC process, all new piso168 accounts are subject to age and identity verification. Any account found to be held by a person under the age of 21 will be immediately suspended, all associated data will be deleted in accordance with our legal obligations, and the matter will be reported to PAGCOR.

If you are a parent or guardian and believe that a person under the age of 21 has registered an account on piso168 or provided us with personal data, please contact our Data Protection Officer immediately at [email protected]. We will investigate and take prompt remedial action.

piso168 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform features. The most current version of this Policy will always be available at piso168.org/privacy-policy, clearly marked with the date of the most recent update.

Where we make material changes to this Policy — such as changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — we will provide advance notice to registered players via email to their registered address, or via a prominent notice on the piso168 platform, at least seven (7) calendar days before the changes take effect.

Your continued use of the piso168 platform after the effective date of any amended Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree with the changes, you must discontinue use of the platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by piso168, please contact our designated Data Protection Officer through the following channels:

• Email: [email protected] — please use the subject line "Data Privacy Request" for all data-related enquiries to ensure your message is routed directly to the DPO.
• Live Chat: Available 24/7 on the piso168 platform. For urgent data security concerns — such as a suspected account breach — Live Chat is the fastest channel to reach our team.

For complaints that cannot be resolved directly with piso168, you have the right to escalate your concern to the National Privacy Commission of the Philippines (NPC), the independent government body responsible for administering and enforcing the Data Privacy Act of 2012. Information about the NPC's complaint procedures is publicly available through official Philippine government channels.

This Privacy Policy was last reviewed and approved by the piso168 Data Protection Officer on January 1, 2026. The current version supersedes all previous versions of the piso168 Privacy Policy.