Privacy Policy – pisotaya Online Casino Philippines

1. Introduction

pisotaya is committed to protecting the privacy and personal data of every player on its platform. We understand that when you register with pisotaya, deposit funds through GCash or BDO, or play a live dealer game, you are entrusting us with personal and financial information. That trust is not taken lightly.

This Policy has been prepared in compliance with the Republic Act No. 10173 — Data Privacy Act of 2012 (DPA) of the Philippines, its Implementing Rules and Regulations, and the regulations of the National Privacy Commission (NPC). pisotaya processes personal data in accordance with the principles of transparency, legitimate purpose, and proportionality as required by Philippine law.

This Policy applies to all personal data processed in connection with your use of the pisotaya website, mobile browser experience, customer support channels, and any related services. It does not apply to third-party websites or services that may be linked to or integrated with pisotaya's platform.

2. Personal Data We Collect

pisotaya collects personal data in the following categories:

Category	Examples	When Collected
Identity Data	Full name, date of birth, government ID number, nationality	Registration and KYC verification
Contact Data	Email address, Philippine mobile number, residential address	Registration and account updates
Financial Data	GCash number, PayMaya account, bank name, transaction history	Deposits, withdrawals, KYC
Technical Data	IP address, device type, browser type, operating system, login timestamps	Platform access and security monitoring
Usage Data	Games played, bet amounts, session duration, game preferences	Active game sessions
Communications Data	Support chat transcripts, email correspondence, complaint records	Customer support interactions
Document Data	Copies of government IDs (PhilSys, passport, driver's license, SSS ID), proof of address	KYC identity verification

pisotaya does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or political opinions unless specifically required by law.

3. How pisotaya Uses Your Personal Data

pisotaya processes your personal data for the following purposes:

• Account creation and management — to register your pisotaya account, verify your identity, and maintain your account details;
• Service delivery — to enable you to play games, make deposits, request withdrawals, and access all pisotaya features;
• Payment processing — to facilitate transactions through GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, Visa, and Mastercard;
• KYC and AML compliance — to verify player identity and comply with anti-money laundering obligations under Philippine law;
• Fraud prevention and security — to detect, investigate, and prevent unauthorised access, fraudulent transactions, and abuse of the pisotaya platform;
• Regulatory compliance — to meet reporting and record-keeping obligations to PAGCOR and other applicable regulators;
• Customer support — to respond to your enquiries, complaints, and support requests;
• Responsible gaming — to monitor gaming behaviour, apply account limits, and enforce self-exclusion requests;
• Platform improvement — to analyse usage patterns and improve the pisotaya website, game lobby, and payment experience;
• Marketing communications — to send you promotional offers, bonus notifications, and platform updates, where you have consented or where permitted by applicable law. You may opt out of marketing communications at any time through your pisotaya account settings.

pisotaya does not sell your personal data to third parties for their own marketing purposes.

4. Legal Basis for Processing

pisotaya processes your personal data on the following legal grounds under the Data Privacy Act of 2012:

• Contractual necessity — processing is necessary to perform the contract between you and pisotaya (i.e., to provide gaming services, process payments, and manage your account);
• Legal obligation — processing is required to comply with applicable Philippine laws, including PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and tax reporting obligations;
• Legitimate interests — processing is necessary for pisotaya's legitimate interests in fraud prevention, platform security, and service improvement, provided such interests are not overridden by your privacy rights;
• Consent — for marketing communications and optional data processing activities, pisotaya relies on your express consent, which may be withdrawn at any time.

5. Data Sharing and Disclosure

pisotaya shares personal data only in the following limited circumstances:

• Payment processors — your financial data is shared with GCash, PayMaya, BPI, BDO, Metrobank, and card network processors solely for the purpose of processing your transactions;
• Identity verification providers — KYC document data may be shared with third-party identity verification services that assist pisotaya in complying with PAGCOR and AML requirements;
• Regulatory authorities — pisotaya will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government bodies where required by law or court order;
• Game content providers — limited technical data (session tokens, game round IDs) may be shared with certified game providers to facilitate game delivery and resolve disputes;
• Professional advisers — lawyers, auditors, and compliance consultants engaged by pisotaya may access personal data under strict confidentiality obligations.

All third parties with whom pisotaya shares personal data are contractually required to process that data only for the specified purpose and to maintain appropriate security measures. pisotaya does not transfer personal data outside the Philippines except where the receiving jurisdiction provides an adequate level of data protection or where appropriate contractual safeguards are in place.

6. Cookies and Tracking Technologies

pisotaya uses cookies and similar tracking technologies on its platform for the following purposes:

• Essential cookies — required for the pisotaya platform to function, including session management and security tokens. These cannot be disabled without impairing platform functionality;
• Analytics cookies — used to analyse how players use the pisotaya platform, which pages are most visited, and how sessions progress. This data is aggregated and anonymised;
• Preference cookies — used to remember your display preferences, preferred language, and game lobby filters;
• Security cookies — used to detect and prevent fraudulent login attempts, bot activity, and multiple-account abuse.

You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of some pisotaya features.

7. Data Retention

pisotaya retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: retained for a minimum of 5 years after account closure, as required by PAGCOR and AMLA regulations;
• Transaction records: retained for a minimum of 5 years from the date of the transaction;
• Customer support communications: retained for 3 years from the date of the communication;
• KYC documents: retained for the duration of account activity plus 5 years after account closure.

After the applicable retention period expires, personal data is securely deleted or anonymised in accordance with pisotaya's data disposal procedures.

8. Your Rights Under the Data Privacy Act

As a data subject under the Republic Act No. 10173, you have the following rights in respect of your personal data held by pisotaya:

• Right to be informed — you have the right to know how pisotaya collects and uses your personal data;
• Right of access — you may request a copy of the personal data pisotaya holds about you;
• Right to rectification — you may request correction of any inaccurate or incomplete personal data;
• Right to erasure — in certain circumstances, you may request deletion of your personal data, subject to pisotaya's legal retention obligations;
• Right to data portability — you may request a structured, commonly used copy of your personal data for transfer to another service provider;
• Right to object — you may object to certain types of processing, including direct marketing;
• Right to file a complaint — you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe pisotaya has violated your data privacy rights.

To exercise any of these rights, please contact pisotaya's Data Protection Officer at the contact details set out in Section 12. pisotaya will respond to all verifiable data subject requests within 30 calendar days.

9. Data Security

pisotaya implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• End-to-end SSL/TLS encryption for all data transmitted between your device and the pisotaya platform;
• Encrypted storage of sensitive data at rest, including financial data and KYC documents;
• Access controls limiting personal data access to authorised pisotaya personnel on a need-to-know basis;
• Regular security audits and vulnerability assessments of the pisotaya platform;
• Multi-factor authentication for internal systems that access personal data;
• Incident response procedures for detecting, reporting, and remedying personal data breaches.

10. Minors

The pisotaya platform is strictly for individuals aged 21 years and above. pisotaya does not knowingly collect personal data from persons under the age of 21. If pisotaya becomes aware that personal data has been collected from a minor, the relevant account will be immediately suspended and the data will be securely deleted. Parents or guardians who believe their child has created a pisotaya account should contact pisotaya support immediately.

11. Changes to This Privacy Policy

pisotaya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, pisotaya will publish the updated Policy on the platform and, where practicable, notify registered players by email or in-platform notification. The date at the top of this Policy reflects the most recent revision. Your continued use of the pisotaya platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

12. Contact and Data Protection Officer

For privacy-related enquiries, data subject access requests, or complaints regarding pisotaya's handling of your personal data, please contact:

If you are not satisfied with pisotaya's response to your privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC).