Peso99 Privacy Policy

1. Who We Are

This Privacy Policy is issued by Peso99 ("we," "us," or "the Platform"), the operator of the online gaming and sports betting platform accessible at peso99.app. Peso99 acts as the personal information controller in respect of all personal data collected through the platform, its mobile application, and any related communications.

We are committed to protecting the privacy and security of every player who registers on Peso99. This policy applies to all users of the platform, including registered players, visitors, and any person who contacts us through our support channels.

2. Personal Data We Collect

Peso99 collects only the personal data that is necessary for the purposes described in this policy. The categories of data we collect include:

We do not intentionally collect sensitive personal information such as racial or ethnic origin, religious beliefs, or health data, unless specifically required by law or regulatory obligation.

3. How We Collect Your Data

Peso99 collects personal data through the following means:

• Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey or promotion.
• Automated collection: When you browse or use the platform, our systems automatically record technical and usage data including your IP address, device identifiers, and interaction logs.
• Payment processors: When you transact via GCash, PayMaya, BPI, BDO, Metrobank, or Instapay, we receive transaction confirmation data from those providers sufficient to verify and process your payment.
• Identity verification services: Where we use third-party KYC providers to verify the authenticity of documents you submit, those providers may return verification results and risk scores to us.
• Cookies and similar technologies: As described in Section 7 of this policy.

4. Why We Use Your Personal Data

Peso99 uses your personal data only for legitimate, specified purposes. The primary purposes for which we process your data are:

• Account management: To create, maintain, and administer your Peso99 player account, including authentication and access control.
• Identity verification (KYC): To verify your identity and age (21+) as required by applicable gaming regulations and anti-money laundering obligations.
• Payment processing: To process deposits, withdrawals, and refunds in Philippine Peso (₱) via your chosen payment method.
• Regulatory compliance: To meet our obligations under Philippine gaming regulations, anti-money laundering laws, and data privacy legislation.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeovers, and other security threats.
• Customer support: To respond to your enquiries, resolve disputes, and improve our support services.
• Responsible gaming: To monitor gameplay patterns and identify players who may be at risk of problem gambling, and to administer self-exclusion and limit-setting tools.
• Platform improvement: To analyse usage patterns and improve the functionality, performance, and user experience of the Peso99 platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), Peso99 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform our contract with you — including account creation, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable laws, including KYC/AML obligations, gaming regulations, and tax reporting requirements.
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, and service improvement — provided those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and optional analytics. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

Peso99 does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, and Instapay receive the minimum data necessary to process your transactions.
• KYC and identity verification providers: Third-party verification services receive your identity documents and return verification results. These providers are contractually bound to process your data only for verification purposes.
• Regulatory authorities: We may be required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities in response to lawful requests or reporting obligations.
• IT and infrastructure providers: Cloud hosting, database, and security service providers who process data on our behalf under strict data processing agreements.
• Legal and professional advisers: Lawyers, auditors, and compliance consultants who are bound by professional confidentiality obligations.

7. Cookies and Tracking Technologies

Peso99 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. The types of cookies we use are:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and last-used payment method to improve your experience on return visits.
• Analytics cookies: Collect anonymised data about how players use the platform — such as which games are most popular and where users encounter difficulties — to help us improve the service.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and account takeover attempts.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Peso99 platform. A full cookie preference centre is available within your account settings.

8. Data Retention

Peso99 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by anti-money laundering regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with Philippine financial record-keeping requirements.
• KYC documents: Retained for five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Support communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required for an ongoing dispute or regulatory matter.
• Technical and usage logs: Retained for up to twelve (12) months, after which they are anonymised or deleted.
• Marketing preferences: Retained until you withdraw consent or close your account.

When personal data is no longer required, it is securely deleted or anonymised in accordance with our data disposal procedures.

9. Data Security

Peso99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records
• Multi-factor authentication (MFA) for all administrative access to production systems
• Role-based access controls ensuring that staff can only access data necessary for their specific job function
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• 24/7 intrusion detection and security monitoring systems
• Formal incident response procedures, including notification protocols in the event of a data breach

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Peso99 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected data subjects without undue delay.

10. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by Peso99:

• Right to be informed: The right to know what personal data we collect, why we collect it, and how it is used — as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. You can update most account information directly through your Peso99 account settings.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to object: The right to object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please submit a request through the support section of your Peso99 account dashboard. We will respond to all verified data subject requests within thirty (30) days of receipt.

11. Children and Minors

Peso99 is strictly an adult platform. We do not knowingly collect personal data from any person under the age of 21. The minimum age to register and use the Peso99 platform is 21 years, in accordance with Philippine gaming regulations.

If we become aware that personal data has been collected from a person under 21 years of age, we will immediately close the relevant account, delete all associated personal data, and — where required — report the matter to the relevant regulatory authority.

If you are a parent or guardian and believe that a minor has registered on Peso99 using your details or otherwise, please contact our support team immediately through the account dashboard.

12. Cross-Border Data Transfers

In certain circumstances, personal data processed by Peso99 may be transferred to, or accessed by, service providers located outside the Philippines — for example, cloud infrastructure providers or KYC verification services operating internationally.

Where such transfers occur, Peso99 ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under Philippine law
• Transfers only to jurisdictions that the National Privacy Commission has recognised as providing an adequate level of data protection
• Data processing agreements that restrict the recipient's use of your data to the specific purpose for which it was transferred

13. Changes to This Privacy Policy

Peso99 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect.

The effective date of the current version is displayed at the top of this page. We encourage you to review this policy periodically. Your continued use of the Peso99 platform after the effective date of any update constitutes your acknowledgement of the revised policy.

If you disagree with any changes to this policy, you may request account closure by contacting our support team through your account dashboard.

14. Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or want to raise a data privacy concern, please contact the Peso99 Data Privacy team through the live chat or support ticket system available in your account dashboard.

We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them within 30 days. For complex requests, we may require additional time and will keep you informed of progress.

If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). Information about how to file a complaint with the NPC is available through official Philippine government channels.