pisowin Privacy Policy

This Privacy Policy ("Policy") describes how pisowin ("we", "us", "our", "the Company") collects, uses, stores, shares, and protects the personal information of players and visitors ("you", "your") who access or use the pisowin platform at pisowin.xyz and all associated pages and services (collectively, the "Platform").

pisowin is committed to protecting your privacy and handling your personal data with the highest standards of care, transparency, and security. This Policy is drafted in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable PAGCOR data governance requirements.

By registering an account on pisowin or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy.

pisowin collects personal data through several channels: directly from you when you register or use the Platform, automatically through your use of the Platform, and from third-party service providers where necessary. The categories of personal data we collect include:

We do not collect sensitive personal information (as defined under RA 10173) unless strictly required for identity verification or responsible gaming compliance, and only with your explicit consent.

pisowin uses your personal data only for specific, legitimate purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your data are:

• Account Management: To create, maintain, and manage your pisowin player account, including verifying your identity and age (21+ requirement) and processing your login credentials securely.
• Service Delivery: To provide access to all pisowin games and features, process deposits and withdrawals via GCash, PayMaya, BDO, BPI, Metrobank, and other supported payment channels, and credit bonuses and winnings to your account.
• Regulatory Compliance: To comply with PAGCOR licensing requirements, Philippine AML (Anti-Money Laundering) laws, and the Data Privacy Act of 2012, including mandatory KYC (Know Your Customer) verification and transaction monitoring.
• Responsible Gaming: To monitor gaming patterns, enforce self-exclusion requests, apply deposit limits, and identify players who may be at risk of problem gambling, in line with our Responsible Gaming obligations.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance through our live chat and email support channels.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Platform Improvement: To analyze aggregated, anonymized usage data to improve the pisowin platform, optimize game performance, and enhance the overall player experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given your explicit consent to receive such communications. You may opt out at any time.

Under the Data Privacy Act of 2012, pisowin processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — i.e., to operate your pisowin account, process transactions, and deliver gaming services as described in our Terms & Conditions.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR regulations, AML laws (Republic Act No. 9160, as amended), and tax reporting obligations.
• Legitimate Interests: Processing is necessary for pisowin's legitimate interests in preventing fraud, ensuring platform security, and improving our services — provided these interests are not overridden by your data protection rights.
• Consent: For marketing communications and certain non-essential data processing activities, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

pisowin does not sell your personal data. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Processors: GCash, PayMaya, BDO, BPI, Metrobank, and other payment service providers require certain personal and financial data to process your deposits and withdrawals securely.
• Identity Verification Providers: Third-party KYC service providers who assist us in verifying your identity and age in compliance with PAGCOR and AML requirements.
• Game Software Providers: Licensed game developers and studios whose games are hosted on the pisowin platform may receive anonymized or pseudonymized gaming data for technical and audit purposes.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where disclosure is required by law or court order.
• IT & Security Service Providers: Cloud hosting, cybersecurity, and fraud detection providers who process data on our behalf under strict data processing agreements.
• Professional Advisors: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third parties with whom pisowin shares personal data are contractually required to process that data only for the specified purpose, maintain appropriate security measures, and comply with applicable Philippine data protection laws.

pisowin uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyze usage patterns. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and display options to personalize your pisowin experience.
• Analytics Cookies: Collect anonymized data about how players use the Platform — which pages are visited most, how long sessions last, and where players encounter errors — to help us improve the Platform.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access attempts, and bot traffic on the pisowin platform.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the pisowin platform. Strictly necessary cookies cannot be disabled as they are essential to the Platform's operation.

pisowin implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include:

• Encryption: All data transmitted between your device and pisowin is encrypted using 256-bit SSL/TLS protocols. Sensitive data stored in our systems, including passwords and financial information, is encrypted at rest using industry-standard algorithms.
• Access Controls: Access to personal data within pisowin is restricted on a strict need-to-know basis. All staff with access to personal data undergo background checks and regular data privacy training.
• Two-Factor Authentication: pisowin supports and encourages the use of two-factor authentication (2FA) for all player accounts to add an additional layer of security.
• Regular Security Audits: Our systems undergo regular penetration testing and security audits by independent third-party security firms to identify and remediate vulnerabilities.
• Incident Response: pisowin maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission (NPC) within 72 hours and affected players without undue delay, as required by RA 10173.

While pisowin takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is 100% secure. You also play a role in keeping your account secure — please use a strong, unique password and never share your login credentials with anyone.

pisowin retains your personal data for as long as necessary to fulfill the purposes outlined in this Policy, or as required by applicable Philippine law and PAGCOR regulations. Our general retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized so that it can no longer be linked to any individual player.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by pisowin. To exercise any of these rights, contact our Data Protection Officer using the details in Section 13.

pisowin is strictly an adult platform. In accordance with PAGCOR regulations and Philippine law, you must be at least 21 years of age to register and use the pisowin platform. We do not knowingly collect personal data from individuals under the age of 21.

During the registration process, pisowin requires players to confirm their date of birth and may request documentary proof of age as part of the KYC verification process. Any account found to belong to a person under 21 years of age will be immediately suspended, all balances will be forfeited, and the matter may be reported to the appropriate authorities.

If you are a parent or guardian and believe that a minor has registered on pisowin without your knowledge, please contact our support team immediately so we can take appropriate action.

pisowin primarily processes and stores personal data within the Philippines. In certain circumstances, your personal data may be transferred to and processed in countries outside the Philippines — for example, where our cloud infrastructure providers or game software partners operate servers in other jurisdictions.

Where such cross-border transfers occur, pisowin ensures that appropriate safeguards are in place to protect your personal data, including:

• Transferring data only to countries that the National Privacy Commission has determined provide an adequate level of data protection.
• Implementing standard contractual clauses or binding corporate rules with the recipient entity.
• Obtaining your explicit consent for the transfer where required by RA 10173.

pisowin will not transfer your personal data to any jurisdiction that does not provide adequate data protection safeguards without your prior consent.

pisowin may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulations, or the features and services offered on the Platform.

When we make material changes to this Policy, we will notify registered players by email and/or by posting a prominent notice on the pisowin platform at least seven (7) days before the changes take effect. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.

Your continued use of the pisowin platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the changes, you should stop using the Platform and may request account closure by contacting our support team.

We recommend reviewing this Privacy Policy periodically. The current version is always available at pisowin.xyz/privacy-policy.

pisowin has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Policy, please contact us through the following channels:

• Live Chat: Available 24/7 on the pisowin platform — the fastest way to reach our support team for general inquiries.
• Data Privacy Email: [email protected] — for formal data rights requests and DPO correspondence (plain text, not a clickable link).
• General Support Email: [email protected] (plain text, not a clickable link).

When submitting a data rights request, please include your full name, registered email address, and a clear description of your request so we can process it efficiently. We may need to verify your identity before fulfilling the request.

If you are not satisfied with pisowin's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.