IMPORTANT NOTICE: This Privacy Policy ("Policy") describes how pisoph ("pisoph," "we," "us," or "our"), the operator of the online gaming platform at pisoph.cam, collects, uses, stores, shares, and protects the personal information of registered users ("Players," "you," or "your"). This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations. By creating or maintaining a pisoph account, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
1 Overview & Scope
This Policy applies to all personal data collected and processed by pisoph in connection with the provision of online gaming services through the pisoph platform, including the website at pisoph.cam, any associated mobile interfaces, and communications conducted through our customer support channels. It applies to all registered players and individuals who interact with the pisoph platform regardless of their location within the Philippines — whether you're based in Manila, Cebu, Davao, Quezon City, or elsewhere in the archipelago.
This Policy should be read together with our Terms & Conditions, which govern your overall use of the pisoph platform. In the event of any conflict between this Policy and any other pisoph document regarding the processing of personal data, this Privacy Policy shall prevail. Certain specific processing activities — such as those related to responsible gaming monitoring or PAGCOR reporting — are addressed both in this Policy and in our Responsible Gaming Policy.
pisoph has appointed a Data Protection Officer (DPO) as required under the Data Privacy Act of 2012. Our DPO oversees compliance with applicable data protection laws and serves as the primary point of contact for data subject inquiries and complaints. Contact details for our DPO are provided in Section 14 of this Policy.
2 Personal Data We Collect
pisoph collects only the personal data that is necessary to provide our gaming services, comply with legal and regulatory obligations, and maintain the security and integrity of the platform. The categories of personal data we collect include:
| Category | Specific Data Points | Required / Optional |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (Philippine passport, driver's license, UMID, SSS, or PhilHealth ID) | Required (KYC) |
| Contact Data | Email address, mobile phone number, residential address | Required |
| Financial Data | GCash account number, PayMaya account, bank account details (BPI, BDO, Metrobank), transaction history, deposit and withdrawal records | Required (transactions) |
| Gaming Activity Data | Game session logs, bet amounts, win/loss records, game preferences, responsible gaming settings | Automatic (system-generated) |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps, cookie identifiers | Automatic (system-generated) |
| Communications Data | Live chat transcripts, support ticket content, email correspondence | When you contact us |
| Preference Data | Marketing preferences, notification settings, language preferences | Optional |
pisoph does not intentionally collect sensitive personal information as defined under the Data Privacy Act of 2012 (such as racial or ethnic origin, political opinions, religious beliefs, health data beyond what is directly relevant to responsible gaming assessments, or biometric data) unless specifically required by PAGCOR regulations or applicable law and with your explicit consent.
3 How We Collect Your Data
pisoph collects personal data through the following methods:
- Direct registration: When you create a pisoph account, you provide identity, contact, and optionally financial data through the registration process;
- KYC verification: When you submit identity documents for account verification prior to your first withdrawal, pisoph collects copies of government-issued IDs and supporting documents;
- Transactions: Each deposit and withdrawal you process generates financial transaction records automatically within the pisoph system;
- Platform interaction: Your gaming sessions, bet placements, navigation patterns, and feature usage are automatically logged by the pisoph platform's server-side systems;
- Customer support: When you contact our support team via live chat or email, the content of that communication is recorded and associated with your account;
- Cookies and tracking technologies: When you access the pisoph platform through a web browser, certain technical data is automatically collected through cookies and similar tracking tools as described in Section 7;
- Third-party payment processors: When you initiate a deposit or withdrawal via GCash, PayMaya, or a Philippine bank, pisoph receives transaction confirmation data from the relevant payment processor.
4 Purposes of Processing
pisoph processes your personal data for the following specific purposes:
- Account creation and management: To register your account, verify your identity, and maintain accurate account records;
- Service delivery: To provide access to pisoph's gaming catalog, process bets, calculate and pay winnings, and deliver the core gaming experience;
- Financial transactions: To process deposits from GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods, and to process withdrawal requests back to your verified payment accounts;
- Regulatory compliance: To fulfill pisoph's obligations under PAGCOR regulations, the Anti-Money Laundering Act (RA 9160 as amended), the Data Privacy Act (RA 10173), and other applicable Philippine laws;
- Age and identity verification: To confirm that all registered players meet the mandatory 21+ age requirement and are who they claim to be;
- Responsible gaming: To monitor gaming patterns for indicators of problem gambling, to implement self-exclusion and deposit limit requests, and to comply with PAGCOR responsible gaming directives;
- Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and unauthorized account access;
- Customer support: To respond to your inquiries, resolve disputes, and improve our support quality;
- Platform improvement: To analyze aggregated usage data to improve game selection, website performance, and user experience;
- Marketing communications: To send you promotional offers, bonus notifications, and relevant platform updates — only where you have provided consent and in accordance with applicable law.
You may withdraw consent to receive marketing communications from pisoph at any time by updating your notification preferences in your account settings or by contacting our support team. Withdrawing marketing consent does not affect the processing of your data for other purposes described in this Policy.
5 Legal Basis for Processing
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, pisoph processes your personal data on the following legal bases:
- Contractual necessity: Processing necessary to perform the contract between you and pisoph — including account management, game provision, and financial transactions — is conducted on the basis that such processing is required to deliver the service you have contracted for;
- Legal obligation: Processing required to comply with applicable Philippine laws, PAGCOR directives, AML obligations, and other regulatory requirements is conducted on the basis of legal obligation;
- Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement is conducted on the basis of pisoph's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms;
- Consent: Processing for marketing communications and non-essential cookies is conducted on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing based on other grounds.
6 Data Sharing & Disclosure
pisoph does not sell your personal data to third parties. We share your personal data only in the circumstances described below and only to the extent necessary for the stated purpose:
- PAGCOR and regulatory authorities: pisoph is required to report certain data to PAGCOR as part of its licensing obligations, including but not limited to player verification records, transaction data above regulatory reporting thresholds, and responsible gaming compliance reports;
- Anti-Money Laundering Council (AMLC): In accordance with the Anti-Money Laundering Act, pisoph is required to report covered and suspicious transactions to the AMLC. This includes transactions exceeding the statutory threshold and transactions that exhibit characteristics of money laundering;
- Payment processors: To process your GCash, PayMaya, and bank transfer transactions, pisoph shares the minimum necessary data with the relevant payment service providers. These providers process data under their own privacy policies and applicable Philippine payment regulations;
- Game providers: The third-party game providers whose titles are hosted on pisoph's platform receive session data necessary to deliver and audit the fairness of their games. Game providers do not receive your identity or financial data beyond what is technically required;
- IT service providers: pisoph uses cloud hosting, security, and analytics service providers who process data on pisoph's behalf under strict data processing agreements that comply with the Data Privacy Act;
- Law enforcement: pisoph may disclose personal data to Philippine law enforcement authorities when required to do so by a valid court order, subpoena, or lawful government request.
pisoph strictly prohibits the sale, rental, or unauthorized transfer of player personal data to third-party advertisers, data brokers, or any commercial entity for their independent marketing purposes. Your data stays within the pisoph ecosystem and the regulated parties described in this section.
7 Cookies & Tracking Technologies
pisoph uses cookies and similar tracking technologies to operate the platform, maintain your login session, and improve your experience. The types of cookies used by pisoph include:
- Strictly necessary cookies: These cookies are essential for the platform to function correctly. They maintain your login session, remember your account preferences, and enable secure transactions. These cookies cannot be disabled without disabling core platform functionality;
- Performance cookies: These cookies collect anonymous information about how visitors use the pisoph platform, including which pages are visited most often and any error messages encountered. This data is used to improve platform performance;
- Functionality cookies: These cookies allow pisoph to remember your preferences — such as your language setting or game display preferences — to provide a more personalized experience;
- Analytics cookies: pisoph uses analytics tools to analyze aggregated platform usage data. Analytics data is pseudonymized and used only for internal platform improvement purposes;
- Marketing cookies: With your consent, pisoph may use cookies to deliver relevant promotional content and measure the effectiveness of marketing campaigns.
You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the pisoph platform. Your cookie preferences can also be updated through the platform's privacy settings where available.
8 Data Retention
pisoph retains personal data for as long as is necessary to fulfill the purposes for which it was collected, subject to longer retention periods required by applicable law. Our standard retention periods are as follows:
- Account and identity records: Retained for the duration of your active account plus a minimum of five (5) years following account closure, as required by PAGCOR regulations and AML compliance obligations under the AMLA;
- Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AML reporting requirements and tax record-keeping obligations;
- Gaming session logs: Retained for three (3) years from the date of each session for purposes of dispute resolution, regulatory audit, and responsible gaming monitoring;
- Customer support communications: Retained for two (2) years from the date of the last interaction in any support thread;
- Marketing consent records: Retained for the duration of your consent plus three (3) years to demonstrate compliance with consent requirements;
- Technical logs: Retained for twelve (12) months for security monitoring and fraud prevention purposes.
Upon expiry of applicable retention periods, personal data is securely deleted or anonymized in a manner that makes re-identification permanently impossible. pisoph conducts periodic data retention reviews to ensure that personal data is not held beyond applicable retention periods.
9 Data Security
pisoph implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security infrastructure includes:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the pisoph platform;
- Data encryption at rest for all stored personal and financial data on pisoph's servers;
- Role-based access controls ensuring that pisoph staff can only access personal data that is necessary for their specific job function;
- Multi-factor authentication for all pisoph staff accessing systems containing personal data;
- Intrusion detection systems and continuous security monitoring for unauthorized access attempts;
- Regular third-party security audits and penetration testing conducted by certified security firms;
- Secure data center facilities with physical access controls, environmental monitoring, and redundant systems.
In the unlikely event of a personal data breach that poses a real risk to your rights and freedoms, pisoph will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, as required by the Data Privacy Act. Affected players will be notified directly as soon as practicable following the initial NPC notification.
10 Your Privacy Rights
Under the Data Privacy Act of 2012 (RA 10173) of the Philippines, you have the following rights with respect to your personal data held by pisoph. You may exercise any of these rights by contacting our Data Protection Officer using the details in Section 14:
You have the right to request a copy of the personal data pisoph holds about you, along with information about how it is being processed. pisoph will respond to verified access requests within thirty (30) calendar days.
You have the right to request correction of any inaccurate or incomplete personal data pisoph holds about you. Updates to registered account information are subject to identity re-verification where the change affects KYC-verified data.
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that pisoph may be unable to fulfill erasure requests where retention is required by PAGCOR regulations or other applicable law.
You have the right to object to the processing of your personal data based on legitimate interests, including processing for direct marketing purposes. Objection to marketing processing will be honored promptly and without consequence to your account status.
You have the right to receive a structured, commonly used, machine-readable copy of the personal data you have provided to pisoph, for personal use or transfer to another service provider where technically feasible.
Where processing is based on your consent (such as marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
To exercise any of the above rights, contact our Data Protection Officer at [email protected] with the subject line "Data Subject Request." pisoph will verify your identity before processing any request. Where pisoph is unable to fulfill a request — for example, due to a conflicting legal obligation — we will explain the reason in writing.
If you believe pisoph has not handled your personal data in compliance with the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
11 Children's Privacy
The pisoph platform is strictly prohibited for use by any individual under the age of twenty-one (21) years, in accordance with PAGCOR regulations governing online gaming in the Philippines. pisoph does not knowingly collect personal data from individuals under 21 years of age.
All account registrations are subject to age verification, and pisoph requires government-issued identification confirming age before any withdrawal is processed. If pisoph becomes aware that personal data has been collected from an individual under 21 years of age, we will immediately suspend the relevant account, notify relevant regulatory authorities as required, and securely delete the collected data subject to any overriding legal obligations.
If you are a parent or guardian and believe that an individual under 21 years of age has registered a pisoph account, please contact our Data Protection Officer immediately at [email protected] so that appropriate action can be taken without delay.
12 Cross-Border Data Transfers
pisoph primarily processes personal data within the Philippines. However, some of the third-party service providers used by pisoph — including cloud infrastructure providers and game provider technology systems — may process data in servers located outside the Philippines. Where such transfers occur, pisoph ensures that appropriate safeguards are in place to protect your personal data in accordance with the Data Privacy Act of 2012 and the standards set by the National Privacy Commission.
Safeguards applied to cross-border transfers include contractual data processing agreements requiring the receiving party to maintain security standards equivalent to those required under Philippine law, and where applicable, reliance on the receiving country's adequacy of data protection laws as assessed by the National Privacy Commission.
pisoph does not transfer personal data to jurisdictions that have not been assessed as providing adequate data protection, unless appropriate contractual safeguards are first established and documented.
13 Updates to This Privacy Policy
pisoph may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. When material changes are made, pisoph will notify registered players via email at the address on file and via an in-platform notification at least seven (7) days before the updated Policy takes effect.
The updated Privacy Policy will be published at pisoph.cam/privacy-policy with a revised effective date at the top of the document. We encourage you to review this Policy periodically to stay informed about how pisoph protects your personal data. Your continued use of the pisoph platform after the effective date of any updated Policy constitutes your acknowledgment of the changes.
Where changes to this Policy require your fresh consent — for example, where we seek to use your data for a materially new purpose — pisoph will seek that consent proactively before processing your data for the new purpose.
14 Contact Our Data Protection Officer
pisoph has appointed a Data Protection Officer (DPO) in accordance with Section 21 of the Data Privacy Act of 2012. If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or want to raise a privacy concern, please contact our DPO through the following channels:
- Email: [email protected] — please use the subject line "Data Privacy Inquiry" or "Data Subject Request"
- Live Chat: Available 24/7 through the in-platform support chat after logging into your pisoph account
- Response Time: pisoph's DPO aims to acknowledge all written privacy inquiries within two (2) business days and to provide a substantive response within thirty (30) calendar days of receiving a verifiable request
pisoph's support team includes Filipino-speaking staff who can assist players from across the Philippines — from Luzon to Mindanao — in understanding their privacy rights and how pisoph processes their personal data. All communications regarding data privacy are handled confidentially and in accordance with the Data Privacy Act of 2012.
For complaints that are not resolved to your satisfaction by pisoph's DPO, you may file a complaint directly with the National Privacy Commission of the Philippines (NPC) at their official government channels.
Beyond legal compliance, here's what pisoph's Privacy Policy actually means for Filipino players in everyday practice.
pisoph processes all player data in full compliance with Republic Act No. 10173 — the Data Privacy Act of the Philippines. We maintain a registered Data Protection Officer, conduct regular privacy impact assessments, and cooperate fully with the National Privacy Commission on all compliance matters.
pisoph does not sell, rent, or trade your personal data to third-party marketers or data brokers — period. Your GCash account details, your betting history, and your contact information stay within the pisoph ecosystem and the regulated parties described in our policy. That's a firm commitment, not just legal language.
When pisoph asks for your Philippine passport or UMID card, it's for two clear reasons: to comply with PAGCOR age verification requirements and to meet AML obligations under Philippine law. Your ID documents are encrypted at rest, accessed only by authorized verification staff, and never shared beyond the regulatory purposes stated in this policy.
pisoph sends promotional emails and bonus notifications only to players who have opted in. Unsubscribing takes one click — no dark patterns, no re-opt-in loops. Your account remains fully active and your data processing for gaming purposes continues unchanged after opting out of marketing.
Want to know exactly what data pisoph holds about you? Submit a data access request via email and our DPO team will compile and deliver a full copy of your data within 30 calendar days. Your data. Your right. No hassle, no bureaucratic runaround — just your information delivered securely.
If a data breach ever affects your personal information, pisoph commits to notifying the National Privacy Commission within 72 hours and informing affected players as soon as practicably possible. We won't sit on breach information — timely, transparent notification is both our legal duty and our ethical obligation to Filipino players.
Game With Confidence on pisoph
pisoph is built on transparency — regulated by PAGCOR, compliant with the Philippine Data Privacy Act, and committed to protecting your personal information every step of the way. Slots, live casino, PBA and UFC sports betting, bingo, fishing, and more — in a platform you can genuinely trust with your data and your peso.
21+ only. T&Cs apply. Please play responsibly.