peso999 Privacy Policy

1.1 Scope. This Policy applies to all personal information collected by peso999 in connection with your use of the peso999 Platform, including during account registration, identity verification (KYC), payment processing, gaming activity, customer support interactions, and marketing communications. It applies regardless of the device or method you use to access the Platform — desktop, mobile browser, or any other interface.

1.2 Data Controller. peso999 acts as the personal information controller (as defined under the Data Privacy Act of 2012) in respect of the personal data it collects and processes in connection with the Platform. All questions, requests, or complaints relating to the use of your personal data should be directed to the contact details provided in Section 15 of this Policy.

1.3 Relationship to Terms & Conditions. This Policy is incorporated into and forms part of the peso999 Terms & Conditions. Terms defined in the Terms & Conditions and used in this Policy carry the same meaning. In the event of any conflict between this Policy and the Terms & Conditions on a data privacy matter, this Policy shall prevail.

2.1 Categories of Personal Data. The following table sets out the categories of personal data that peso999 collects, with examples of the specific data points within each category:

2.2 Sensitive Personal Information. peso999 may collect sensitive personal information within the meaning of the Data Privacy Act of 2012, specifically: government-issued identification numbers and documents submitted for KYC verification purposes. Such sensitive information is collected solely for identity verification and anti-money laundering compliance, is stored with enhanced security controls, and is not used for any other purpose without your explicit consent.

peso999 collects personal data through the following means:

• Directly from you — when you register an Account, complete KYC verification, make deposits or withdrawal requests, contact customer support, respond to surveys or promotions, or otherwise communicate with peso999 in any form.
• Automatically through the Platform — Technical Data and Gaming Activity Data are collected automatically when you access and use the peso999 Platform through server logs, session management systems, and analytics tools. This collection occurs regardless of whether you are logged into your Account.
• From payment providers — When you initiate a deposit or withdrawal via GCash, Maya, BPI, BDO, UnionBank, or other integrated payment channels, peso999 receives transaction confirmation and reference data from those providers sufficient to identify and verify your payment.
• From identity verification partners — Where peso999 engages a third-party KYC verification service provider to assist with identity document checking, that provider may share the result of the verification (and the underlying document data) with peso999 in order to complete the KYC process.
• From fraud prevention and analytics services — peso999 may receive risk signals, device fingerprint data, or behavioral analytics from authorized service providers to support fraud detection and platform security.

4.1 Contractual Necessity. The following processing activities are necessary for peso999 to perform its obligations under the Terms & Conditions agreement with you:

• Creating, maintaining, and managing your peso999 Account
• Processing deposits and withdrawals via integrated Philippine payment methods
• Providing access to gaming products, live casino tables, and sports betting markets
• Providing customer support and resolving disputes
• Applying bonus and promotional credits to your Account in accordance with applicable terms

4.2 Legal Obligation. The following processing activities are required to comply with peso999's legal and regulatory obligations under Philippine law:

• Identity verification (KYC) pursuant to applicable anti-money laundering regulations
• Retention of transaction records for the period required by Philippine financial regulations
• Reporting of suspicious transactions to the Anti-Money Laundering Council (AMLC) where required by law
• Age verification to confirm compliance with the 21-year minimum age requirement for online gaming
• Maintaining records required by PAGCOR and other applicable regulatory bodies

4.3 Legitimate Interests. The following processing activities are conducted on the basis of peso999's legitimate interests in operating a secure and sustainable gaming platform:

• Fraud detection, prevention, and investigation
• Detecting and preventing multi-accounting and bonus abuse
• Platform security monitoring and incident response
• Improving and optimizing the Platform based on aggregated usage analytics
• Enforcing responsible gaming tools and identifying Players who may require intervention

4.4 Consent. Where peso999 processes your personal data for marketing communications, including sending promotional SMS messages or emails about new games, bonuses, or offers, such processing is conducted on the basis of your consent, which you provide by opting in to marketing communications. You may withdraw this consent at any time as set out in Section 11.

5.1 Service Providers. peso999 may share your personal data with carefully selected third-party service providers who process data on our behalf and under our instruction. These include:

• Payment processing partners (GCash/GXI, Maya/Voyager Innovations, BancNet, and other relevant payment infrastructure providers)
• KYC and identity verification service providers
• Cloud hosting and data storage infrastructure providers
• Fraud prevention and cybersecurity service providers
• Customer support platform providers
• Analytics and platform optimization services (processing aggregated or pseudonymized data only)

All third-party service providers are contractually bound to process your data only for the specified purpose, to maintain adequate security standards, and to comply with applicable Philippine privacy laws.

5.2 Regulatory and Law Enforcement Authorities. peso999 may disclose your personal data to Philippine government agencies, regulatory bodies, law enforcement authorities, or courts where required by law, court order, or regulatory direction. This includes disclosures to PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC).

5.3 Game Content Providers. Live dealer game providers and certain RNG game studios operate their own game servers, which process limited Technical Data and Gaming Activity Data as part of delivering the game experience. These providers are subject to contractual data processing obligations with peso999.

5.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of substantially all of peso999's assets, your personal data may be transferred to the successor entity as part of that transaction. peso999 will provide advance notice through the Platform of any such transfer that materially affects how your data is processed.

6.1 Retention Principles. peso999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law and regulations. The following retention periods apply:

6.2 Post-Retention Deletion. Upon expiry of the applicable retention period, peso999 will securely delete or anonymize personal data in accordance with recognized data destruction standards. Anonymized data (from which no individual can be identified) may be retained for longer periods for aggregated analytics purposes.

7.1 Technical Safeguards. peso999 implements the following technical measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and peso999's servers
• Encryption at rest for sensitive personal data stored in peso999's databases, including KYC documents and financial account identifiers
• Multi-factor authentication controls for administrative access to systems containing personal data
• Firewalls, intrusion detection systems, and continuous security monitoring
• Regular penetration testing and vulnerability assessments by qualified security professionals
• SMS OTP verification for critical account actions, including password changes and large withdrawal requests

7.2 Organizational Safeguards. peso999 maintains the following organizational security measures:

• Role-based access controls limiting employee access to personal data to those with a need-to-know for their job function
• Mandatory data privacy and security training for all staff with access to personal data
• Confidentiality obligations for all staff and contractors who handle personal data
• A documented data breach response procedure, including notification obligations to the National Privacy Commission and affected individuals where required by law

7.3 Your Role in Security. The security of your personal data also depends on your own precautions. peso999 strongly recommends that you use a unique, strong password for your peso999 Account, never share your password or OTP with any third party, and log out of your Account when using shared or public devices.

8.1 What Are Cookies. Cookies are small text files placed on your device by a website you visit. peso999 uses cookies and similar tracking technologies (including localStorage tokens and session identifiers) to operate the Platform, remember your session state, detect fraud, and improve the user experience.

8.2 Types of Cookies Used. peso999 uses the following categories of cookies:

• Strictly Necessary Cookies: These are essential for the Platform to function correctly — for example, maintaining your login session, remembering your account state between pages, and enabling secure payment flows. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: These cookies remember your preferences within the Platform, such as your preferred game category or language setting, to provide a more personalized experience.
• Analytics Cookies: peso999 uses aggregated, anonymized analytics to understand how Players navigate the Platform and where usability improvements can be made. These analytics are conducted using internal tools only and do not involve sharing individual-level data with external analytics services.
• Security Cookies: Cookies and device fingerprint tokens used to detect suspicious access patterns, prevent account takeover, and support fraud prevention measures.

8.3 Managing Cookies. You can control cookies through your browser settings. Most modern browsers allow you to view, delete, or block cookies. Please note that disabling strictly necessary cookies will impair the functionality of the peso999 Platform and may prevent you from accessing your account or completing transactions.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, as a Philippine data subject you have the following rights in respect of your personal data held by peso999. To exercise any of these rights, please contact peso999 as described in Section 15.

9.1 How to Submit a Request. To exercise any of the rights above, contact peso999's Data Protection Officer at the contact details in Section 15. peso999 will acknowledge your request within five (5) business days and will endeavor to fulfill valid requests within thirty (30) calendar days, subject to the complexity of the request and any applicable legal limitations on the exercise of these rights.

9.2 Identity Verification for Rights Requests. To protect your data from unauthorized access, peso999 may require you to verify your identity before fulfilling a data rights request. You may be asked to confirm your registered mobile number and to provide a copy of a government-issued identification document.

The peso999 Platform is strictly intended for adults aged twenty-one (21) years and above. peso999 does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you are prohibited from registering for or using the peso999 Platform in any capacity.

If peso999 becomes aware that it has collected personal data from an individual who is under 21 years of age, peso999 will take prompt steps to delete that data and permanently close the relevant Account. Any Balances or gaming activity associated with an underage Account will be voided in accordance with the Terms & Conditions.

11.1 Consent-Based Marketing. peso999 sends promotional SMS messages and email communications about new games, bonuses, and platform features only to Players who have opted in to receive such communications. Consent to receive marketing communications is obtained during the registration process and can be withdrawn at any time.

11.2 Withdrawing Marketing Consent. You can withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in your peso999 Account settings under "Notifications"
• Replying STOP to any promotional SMS message sent by peso999
• Contacting customer support via live chat or at [email protected] and requesting removal from marketing lists

Withdrawal of marketing consent does not affect your ability to continue using the Platform, nor does it affect peso999's right to send you transactional and account-related communications (such as deposit confirmations, withdrawal notifications, and security alerts), which are sent on the basis of contractual necessity rather than consent.

11.3 Responsible Gaming Communications. Even if you have opted out of all marketing communications, peso999 reserves the right to send responsible gaming communications — including notifications about deposit limit thresholds, session time reminders, and self-exclusion reminders — where these are required for player protection purposes.

The peso999 Platform integrates with third-party services to deliver certain features — including payment processing, live dealer games, and identity verification. When you interact with these third-party features, the relevant third party may process certain personal data as a separate data controller under their own privacy policies.

peso999 is not responsible for the data processing practices of third-party controllers. You are encouraged to review the privacy policies of any third-party service you interact with in connection with your use of peso999 — particularly your payment provider (GCash, Maya, BPI, BDO, or UnionBank). peso999 will only share the minimum personal data necessary to enable the relevant third-party service to function.

This Policy does not extend to any third-party websites, applications, or services that may be referenced in peso999's communications but that are not directly operated by peso999.

Some of peso999's third-party service providers — including cloud infrastructure providers, game studios, and certain security services — may be located or operate servers outside the Republic of the Philippines. Where personal data is transferred to a jurisdiction outside the Philippines, peso999 ensures that such transfers are made only where:

• The receiving jurisdiction has been determined to have an adequate level of data protection comparable to the standards under Philippine law, or
• peso999 has put in place contractual safeguards with the receiving party that require them to protect the personal data to the same standard as required under this Policy and Philippine law, or
• The transfer is necessary for the performance of a contract with you (for example, processing a payment or delivering a live casino game stream).

peso999 maintains a register of cross-border data transfers and reviews the adequacy of safeguards for such transfers on a periodic basis.

peso999 reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, Platform operations, or data processing practices. The "Last Updated" date at the top of this document will be revised whenever changes are made.

Where a proposed amendment constitutes a material change to how peso999 processes your personal data — particularly any change that reduces your privacy protections or introduces a new purpose for processing — peso999 will notify you through your Account dashboard or via SMS to your registered Philippine mobile number at least fourteen (14) days before the change takes effect. Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgment of the updated Policy.

peso999 recommends bookmarking this page and checking the "Last Updated" date periodically. If you have questions about any proposed change, please contact the Data Protection Officer using the details in Section 15 before the amendment takes effect.

peso999 has designated a Data Protection Officer (DPO) in compliance with the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by peso999, please contact the DPO using the following channels:

• Email: [email protected] — mark the subject line "Data Privacy Request" or "DPO Inquiry" for prioritized handling by the privacy team.
• Live Chat: Available 24/7 through the peso999 Platform. For data rights requests requiring formal processing, email is recommended as it creates a written record.

peso999's DPO will acknowledge all data privacy requests within five (5) business days and will provide a substantive response or request for additional information within thirty (30) calendar days of receiving a complete request.

If you are not satisfied with peso999's response to your data privacy request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph or through the NPC's official contact channels.