peso991 Privacy Policy

1 About This Privacy Policy

This Privacy Policy ("Policy") describes how peso991 ("peso991," "we," "us," or "our") collects, processes, uses, stores, discloses, and protects the personal information of individuals ("you," "your," or "User") who access or use the peso991 website, mobile platform, and all related services (collectively, the "Platform").

This Policy forms part of the peso991 Terms and Conditions, which you accept when you register an account or use any peso991 service. In the event of any conflict between this Policy and the Terms and Conditions, the Terms and Conditions shall prevail unless this Policy expressly provides otherwise.

By using the peso991 platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the peso991 platform.

2 Data Controller

peso991 is the data controller responsible for the personal information collected through the Platform. As data controller, peso991 determines the purposes and means of processing your personal data and is accountable for its protection under applicable law, including Republic Act No. 10173 (the Philippine Data Privacy Act of 2012) and its Implementing Rules and Regulations.

For all privacy-related inquiries, data subject requests, or complaints, you may contact the peso991 Data Privacy Officer using the contact details provided in Section 15 of this Policy.

3 Personal Data We Collect

peso991 collects the following categories of personal data in the course of providing its services:

3.1 Registration and Identity Data

• Full legal name as it appears on your government-issued Philippine identification;
• Date of birth (for age verification — all players must be 21 years of age or older);
• Philippine mobile number used for account registration and OTP verification;
• Username and encrypted password;
• Residential address in the Philippines.

3.2 Identity Verification (KYC) Data

• Government-issued Philippine ID (e.g., PhilSys National ID, UMID, driver's license, passport, SSS/GSIS ID, Voter's ID, PRC ID);
• Proof of address documentation where required;
• Source of funds documentation where required for high-value transactions;
• Selfie or facial verification image where required for identity confirmation.

3.3 Financial and Transaction Data

• GCash account number or PayMaya account number used for deposits and withdrawals;
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) for bank transfer transactions;
• Transaction history including deposit amounts, withdrawal requests, and processing timestamps;
• Bonus and promotional credit history.

3.4 Gaming Activity Data

• Games played, game sessions, wager amounts, and game outcomes;
• Sports bets placed and results;
• Session duration and login/logout timestamps;
• Responsible gaming settings, including self-imposed limits and self-exclusion status.

3.5 Technical and Device Data

• IP address and approximate geographic location derived therefrom;
• Device type, operating system, browser type and version;
• Device identifier where available;
• Platform interaction logs, error logs, and session metadata.

3.6 Communications Data

• Records of customer support interactions, including live chat transcripts and email correspondence;
• Feedback, complaints, and survey responses submitted by the User.

4 How We Collect Your Data

peso991 collects personal data through the following means:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact support, or update your account settings;
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies as you use the Platform (see Section 10);
• From third-party payment providers — GCash, PayMaya, and Philippine banks transmit transaction confirmation data to peso991 to verify payment completion;
• From identity verification services — where peso991 uses third-party KYC service providers to verify the authenticity of identification documents.

5 How We Use Your Personal Data

peso991 uses the personal data collected for the following purposes:

peso991 will not use your personal data for purposes other than those listed above without obtaining your prior consent, unless required to do so by applicable Philippine law or regulatory authority.

6 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, peso991 processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform our contract with you, including account management, payment processing, and game provision;
• Legal obligation — processing required to comply with Philippine law, including PAGCOR regulatory requirements, Anti-Money Laundering Act (AMLA) obligations, and tax reporting;
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your privacy rights;
• Consent — processing for direct marketing communications and certain optional data uses, where your consent is obtained and may be withdrawn at any time.

7 Data Sharing and Disclosure

peso991 does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data may be shared only in the following limited circumstances:

7.1 Service Providers

peso991 engages third-party service providers who process personal data on our behalf, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification and KYC providers, cloud hosting and data storage providers, fraud detection and cybersecurity services, and customer support platform providers. All such providers are contractually required to process data only on peso991's instructions and to maintain appropriate security standards.

7.2 Game Providers and Software Licensors

Certain technical identifiers (not full personal profiles) may be shared with game software providers for game performance monitoring and regulatory audit purposes. No financial data or full identity data is shared with game providers beyond what is technically necessary.

7.3 Regulatory and Law Enforcement Authorities

peso991 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or other competent Philippine government authorities where required by law, court order, or regulatory instruction.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of substantially all assets of peso991, personal data held by peso991 may be transferred to the successor entity as part of the transaction, subject to the same privacy protections described in this Policy. Affected Users will be notified of such a transfer.

8 Data Retention

peso991 retains personal data for as long as necessary to fulfill the purposes for which it was collected, to maintain an active account relationship with you, and to comply with applicable legal, regulatory, and audit obligations.

Specific retention periods include:

• Active account data: Retained for the duration of the account relationship plus a minimum of five (5) years following account closure, in accordance with Philippine AMLA requirements;
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of collection or account closure, whichever is later;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• Customer support communications: Retained for two (2) years from the date of the interaction;
• Technical logs: Retained for up to twelve (12) months from collection.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with peso991's data disposal procedures.

9 Data Security

peso991 implements and maintains technical and organizational security measures appropriate to the nature of the personal data processed and the risks involved. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the peso991 platform;
• Encryption of sensitive data fields (including passwords, which are stored as irreversible cryptographic hashes and never in plain text) in our databases;
• Role-based access controls ensuring that personal data is accessible only to peso991 personnel with a legitimate operational need;
• Multi-factor authentication requirements for internal system access by peso991 staff;
• Regular penetration testing and security audits conducted by qualified security professionals;
• Incident response procedures for detecting, containing, and reporting data security incidents in accordance with the National Privacy Commission's breach notification requirements.

While peso991 takes all reasonable precautions to protect your data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the security of your account credentials and for notifying peso991 immediately of any suspected unauthorized access.

10 Cookies and Tracking Technologies

peso991 uses cookies and similar tracking technologies (collectively, "Cookies") to operate the platform, improve user experience, analyze platform performance, and support security functions. Cookies are small text files stored on your device by your browser.

10.1 Types of Cookies Used

• Strictly necessary cookies: Required for core platform functionality such as session management, login authentication, and payment security. These cannot be disabled without significantly impairing platform usability.
• Performance and analytics cookies: Collect anonymized or aggregated data about how Users interact with the platform, enabling peso991 to identify technical issues and improve service quality. These do not identify individual users.
• Functional cookies: Remember your preferences (such as language settings and previously entered information) to improve your experience on return visits.
• Security cookies: Used to detect and prevent fraudulent login attempts, account takeovers, and other security threats.

10.2 Managing Cookies

You may configure your browser to refuse some or all cookies or to alert you when cookies are being set. Please note that disabling strictly necessary cookies will affect the functionality of the peso991 platform, including the ability to log in and process transactions. Browser-specific cookie management instructions are available through your browser's help documentation.

11 Your Data Rights Under Philippine Law

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data processed by peso991:

• Right to be informed — the right to be told what data is collected, why it is collected, and how it is used, before or at the time of collection;
• Right to access — the right to request a copy of the personal data peso991 holds about you;
• Right to correction — the right to request correction of inaccurate, incomplete, or outdated personal data;
• Right to erasure or blocking — the right to request deletion or blocking of personal data where processing is unlawful or the data is no longer necessary for its original purpose, subject to applicable legal retention obligations;
• Right to data portability — the right to receive a structured, machine-readable copy of your personal data for transfer to another data controller, where technically feasible;
• Right to object — the right to object to the processing of your personal data for direct marketing purposes at any time;
• Right to lodge a complaint — the right to file a complaint with the Philippine National Privacy Commission (NPC) if you believe your privacy rights have been violated.

To exercise any of the above rights, please submit a request to peso991's Data Privacy Officer at [email protected]. peso991 will respond to all legitimate data subject requests within a reasonable timeframe. Note that certain rights may be limited by legal obligations, such as AMLA data retention requirements, which peso991 is required to comply with regardless of an erasure request.

12 Children's Privacy and Age Restriction

peso991 does not knowingly collect, process, or store personal data of individuals below the age of 21. If peso991 discovers or is notified that personal data belonging to an individual under 21 has been collected, that data will be promptly deleted and the associated account permanently closed, with all funds returned to the verified source payment method where possible.

If you believe that a minor has registered an account on peso991, please notify us immediately at [email protected].

13 International Data Transfers

The peso991 platform is operated primarily for Filipino players and processes most data within systems located in jurisdictions with appropriate data protection frameworks. Where personal data is processed by third-party service providers located outside the Philippines — for example, cloud hosting infrastructure or game provider analytics systems — peso991 ensures that such transfers are subject to appropriate safeguards, including contractual data processing agreements that impose data protection obligations equivalent to those required under the Philippine Data Privacy Act.

By using the peso991 platform, you acknowledge and consent to the transfer of your personal data to systems located outside the Philippines where necessary for the provision of services, subject to the protections described in this Policy.

14 Changes to This Privacy Policy

peso991 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, peso991 will update the "Last Updated" date at the top of this document. Where required by law or where changes significantly affect Users' rights, peso991 will provide advance notice via the registered email address or a prominent notice displayed upon platform login.

Your continued use of the peso991 platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with any changes, you must cease use of the platform and may request account closure as described in the Terms and Conditions.

15 Contact and Complaints

For all privacy-related inquiries, data subject access requests, or complaints, please contact the peso991 Data Privacy Officer:

• Email: [email protected]
• Live Chat: 24/7 support available through the peso991 platform
• Response Time: Within five (5) business days for data subject requests

If you are not satisfied with peso991's response to your privacy concern, you have the right to lodge a complaint with the Philippine National Privacy Commission (NPC), which is the data protection authority responsible for enforcing the Data Privacy Act of 2012.