Privacy Policy

1. Overview

pisotaya ("we," "us," or "our") is committed to protecting the privacy and personal data of all players and visitors who use the pisotaya online gaming platform at pisotaya.club (the "Platform"). This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of personal information in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations.

This policy applies to all personal data collected through the Platform, including data provided during account registration, identity verification, deposits and withdrawals, gameplay, customer support interactions, and use of our website. It applies to all pisotaya players, prospective players, and website visitors regardless of location, though the Platform is primarily intended for use by residents of the Philippines.

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact our Data Protection Officer at the details provided in Section 13.

2. Data We Collect

pisotaya collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of data we collect include:

2.1 Registration Data

When you create a pisotaya account, we collect: full legal name, date of birth, gender, nationality, residential address (including city, province, and ZIP code), mobile number, and email address. This information is required to verify your identity, confirm your eligibility to play, and maintain your account.

2.2 Identity Verification Data

To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, pisotaya may collect copies of government-issued identification documents such as a Philippine passport, driver's license, SSS ID, UMID, or PhilSys National ID. We may also collect proof of address documents such as utility bills or bank statements.

2.3 Financial Data

pisotaya collects information necessary to process deposits and withdrawals, including GCash account numbers, PayMaya account details, and bank account information (BPI, BDO, Metrobank). We do not store full payment card numbers. Financial transaction records, including deposit amounts, withdrawal requests, and transaction timestamps, are retained for regulatory compliance purposes.

2.4 Gameplay Data

We collect records of your gaming activity on the Platform, including games played, bet amounts, win/loss outcomes, session durations, and responsible gaming tool usage. This data is used to operate the Platform, detect fraud, and fulfill regulatory reporting obligations.

2.5 Technical and Device Data

When you access the Platform, we automatically collect technical data including your IP address, device type and model, operating system, browser type and version, screen resolution, and session timestamps. This data is used for security monitoring, fraud prevention, and Platform optimization.

2.6 Communications Data

If you contact pisotaya customer support via live chat, email, or any other channel, we retain records of those communications, including the content of messages and any attachments, for quality assurance, dispute resolution, and regulatory compliance purposes.

3. How We Use Your Data

pisotaya uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your pisotaya account, including processing deposits and withdrawals, applying bonuses, and managing responsible gaming tools;
• Identity Verification: To verify your identity, age (21+), and eligibility to use the Platform in compliance with Philippine gaming regulations;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other prohibited conduct;
• Regulatory Compliance: To fulfill our obligations under applicable Philippine law, including AML reporting, KYC requirements, and gaming regulatory directives;
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance;
• Platform Improvement: To analyze usage patterns, identify technical issues, and improve the performance and features of the pisotaya Platform;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may opt out at any time;
• Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling behavior and to administer self-exclusion, deposit limits, and cooling-off periods.

pisotaya will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

4. Legal Basis for Processing

pisotaya processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform the contract between you and pisotaya (i.e., to operate your account and provide gaming services);
• Legal Obligation: Processing is required to comply with applicable Philippine law, including AML regulations, KYC requirements, and gaming regulatory obligations;
• Legitimate Interests: Processing is necessary for pisotaya's legitimate interests in fraud prevention, platform security, and business operations, provided these interests are not overridden by your data protection rights;
• Consent: For marketing communications and non-essential cookies, processing is based on your explicit consent, which you may withdraw at any time.

5. Data Sharing and Disclosure

5.1 Service Providers

pisotaya shares personal data with trusted third-party service providers who assist in operating the Platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, fraud detection services, cloud hosting providers, and customer support software vendors. All service providers are contractually bound to process your data only on pisotaya's instructions and in accordance with applicable data protection law.

5.2 Regulatory and Law Enforcement Authorities

pisotaya may disclose personal data to Philippine regulatory authorities, law enforcement agencies, or courts where required by law, court order, or regulatory directive. This includes disclosures required under AML regulations and gaming regulatory reporting obligations.

5.3 Game Providers

Certain game providers who supply games available on the pisotaya Platform may receive limited technical data (such as player session tokens) necessary to operate their games. Game providers do not receive your full personal profile and are contractually prohibited from using any data for purposes other than game operation.

5.4 No Sale of Data

pisotaya does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Any sharing of data is limited to what is strictly necessary for the purposes described in this policy.

6. Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit the pisotaya Platform. They help us recognize your device, maintain your session, remember your preferences, and analyze how you use the Platform.

6.2 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations.
• Analytics Cookies: Help us understand how players use the Platform, which pages are visited most, and where technical issues occur. Data collected is aggregated and anonymized where possible.
• Marketing Cookies: Used to deliver relevant promotional content. These are only placed with your consent and can be withdrawn at any time via your browser settings.

6.3 Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling non-essential cookies will not affect your ability to use the core features of the pisotaya Platform. Disabling essential cookies may prevent you from logging in or using certain Platform features.

7. Data Security

pisotaya implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the pisotaya Platform is encrypted using industry-standard SSL/TLS protocols;
• Data Encryption at Rest: Sensitive personal data stored in pisotaya's systems is encrypted at rest using AES-256 encryption;
• Access Controls: Access to personal data is restricted to authorized pisotaya personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations;
• Two-Factor Authentication: pisotaya supports and encourages the use of two-factor authentication (2FA) for player accounts to reduce the risk of unauthorized access;
• Regular Security Audits: pisotaya conducts regular internal and third-party security assessments to identify and remediate vulnerabilities;
• Incident Response: pisotaya maintains a data breach response plan. In the event of a data breach that poses a risk to your rights and freedoms, pisotaya will notify the National Privacy Commission and affected players in accordance with applicable law.

8. Data Retention

pisotaya retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulatory obligations. Specific retention periods include:

• Account and KYC Data: Retained for a minimum of five (5) years following account closure, as required by Philippine AML regulations;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction;
• Gameplay Records: Retained for a minimum of three (3) years from the date of each gaming session;
• Customer Support Communications: Retained for two (2) years from the date of the last communication;
• Marketing Consent Records: Retained for the duration of your account and for one (1) year following account closure or withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with pisotaya's data disposal procedures. Where data is anonymized rather than deleted, the anonymized data may be retained indefinitely for analytical purposes as it can no longer be linked to an identifiable individual.

9. Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by pisotaya:

• Right to Be Informed: You have the right to be informed about how your personal data is collected and processed, as set out in this Privacy Policy;
• Right of Access: You may request a copy of the personal data pisotaya holds about you at any time. pisotaya will respond to access requests within fifteen (15) business days;
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update basic account information directly through your account settings;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to pisotaya's legal and regulatory retention obligations;
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to pisotaya's overriding legitimate grounds;
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format;
• Right to Lodge a Complaint: If you believe pisotaya has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 13. pisotaya may require you to verify your identity before processing a data rights request.

10. Minors

The pisotaya Platform is strictly intended for adults aged 21 years and older. pisotaya does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process.

11. Third-Party Services

The pisotaya Platform may contain links to or integrations with third-party services, including payment gateways (GCash, PayMaya, BPI, BDO, Metrobank) and game providers. When you interact with these third-party services, their own privacy policies apply. pisotaya is not responsible for the privacy practices of third-party services and encourages you to review their privacy policies before providing any personal data.

pisotaya does not control how third-party payment processors handle your financial data once a transaction has been initiated. Payment data is transmitted directly to the relevant payment provider using encrypted channels. pisotaya does not store full payment credentials on its own servers.

12. Changes to This Policy

pisotaya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page will be revised whenever changes are made.

Where changes are material, pisotaya will notify registered players via the email address or mobile number on file at least seven (7) days before the changes take effect. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how pisotaya protects your personal data.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact the pisotaya Data Protection Officer:

• Email: [email protected]
• Support Hours: 8:00 AM – 12:00 MN Philippine Time (PHT), daily
• Live Chat: Available via your pisotaya account dashboard during support hours

pisotaya aims to respond to all data privacy inquiries and rights requests within fifteen (15) business days. For urgent matters, live chat is the fastest way to reach our team.