90piso Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected by 90piso (the "Company," "we," "us," or "our") through your use of our online casino platform, mobile-optimized website, customer support channels, and all related services (collectively, the "Services"). This policy applies to all users, whether registered players or casual visitors browsing our website.

90piso is committed to protecting the privacy and security of Filipino players in accordance with the Data Privacy Act of 2012, implementing regulations from the National Privacy Commission (NPC), and international data protection standards including the General Data Protection Regulation (GDPR) principles. We collect, process, and store personal data only for legitimate business purposes related to providing online casino services, ensuring platform security, preventing fraud, and complying with legal obligations under Philippine law.

This Privacy Policy should be read in conjunction with our Terms and Conditions, Responsible Gaming Policy, and Cookie Policy. By accessing the 90piso platform or creating an account, you acknowledge that you have read, understood, and consent to the data collection and processing practices described herein. If you do not agree with this Privacy Policy, you must discontinue use of our Services immediately.

2. Data Controller Information

For purposes of Philippine data protection law, 90piso acts as the data controller responsible for determining the purposes and means of processing your personal data. Our designated Data Protection Officer (DPO) oversees compliance with data protection regulations and serves as the primary point of contact for privacy inquiries, data subject rights requests, and complaints related to personal data handling.

You may contact our Data Protection Officer regarding any privacy concerns, questions about this policy, or requests to exercise your data subject rights through the following channels:

• Email: [email protected] (dedicated privacy inquiry address)
• Primary Contact: [email protected] (general customer support)
• Response Time: We aim to respond to all privacy inquiries within 72 hours of receipt

3. Personal Data We Collect

3.1 Information You Provide Directly

When you register for a 90piso account, we collect the following personal information that you voluntarily provide:

Data Category	Specific Information	Purpose
Identity Data	Full legal name, date of birth, gender, government-issued ID number	Account verification, age verification (21+), fraud prevention, regulatory compliance
Contact Data	Email address, mobile phone number, residential address	Account communication, customer support, account recovery, marketing (with consent)
Financial Data	Payment method details (GCash number, Maya account, bank account information), transaction history	Processing deposits and withdrawals, financial record-keeping, fraud prevention
Account Credentials	Username, password (encrypted), security questions and answers	Account authentication, security, access control
Verification Documents	Government-issued ID (passport, driver's license, UMID), proof of address, selfie photos	KYC compliance, age verification, fraud prevention, anti-money laundering (AML) compliance

3.2 Information We Collect Automatically

When you access and use the 90piso platform, we automatically collect certain technical and usage information through cookies, server logs, and analytics tools:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address where permitted)
• Connection Data: IP address, internet service provider, geographic location (city/region level), connection quality
• Usage Data: Pages visited, games played, time spent on platform, click patterns, navigation paths, session duration, deposit/withdrawal frequency
• Gaming Activity: Bets placed, game outcomes, winnings and losses, bonus claims, tournament participation, gameplay patterns
• Communication Records: Live chat transcripts, email correspondence, phone call recordings (with notice), customer support tickets
• Cookies and Tracking: Session cookies, preference cookies, analytics cookies, advertising cookies (with consent where required)

3.3 Information from Third Parties

We may receive personal data about you from third-party sources including:

• Payment Processors: GCash, Maya, and bank partners provide transaction confirmation, payment verification, and fraud detection data
• Identity Verification Services: Third-party KYC providers validate government IDs, verify addresses, and perform background checks
• Fraud Prevention Services: Credit bureaus and fraud detection networks share information about suspected fraudulent activities
• Affiliates and Marketing Partners: Referral sources provide limited information about how you discovered 90piso (with your consent)

4. How We Use Your Personal Data

4.1 Legal Basis for Processing

Under Philippine data protection law, we process your personal data based on one or more of the following legal grounds:

• Contract Performance: Processing necessary to provide the Services you requested, including account creation, game access, deposits, withdrawals, and customer support
• Legal Obligation: Processing required to comply with Philippine laws including age verification (21+), anti-money laundering regulations, tax reporting, and PAGCOR oversight requirements
• Legitimate Interests: Processing necessary for fraud prevention, security monitoring, platform improvement, and business analytics, provided such interests do not override your privacy rights
• Consent: Processing based on your explicit consent for marketing communications, optional data sharing, and non-essential cookies

4.2 Specific Processing Purposes

We use your personal data collected through 90piso for the following specific purposes:

1. Account Management: Creating and maintaining your player account, authenticating login sessions, managing account settings, processing profile updates, and handling account closure requests.
2. Service Delivery: Providing access to casino games, sports betting, live dealers, and all other gaming products; processing game selections; recording bets and outcomes; maintaining accurate game history; calculating winnings; and updating account balances in real-time.
3. Payment Processing: Handling deposits via GCash, Maya, bank transfer, and other approved payment methods; processing withdrawal requests; verifying payment source ownership; maintaining transaction records; investigating payment disputes; and preventing payment fraud.
4. Identity Verification and Compliance: Verifying you are 21 years of age or older; confirming identity through government-issued documents; validating residential address; ensuring compliance with Philippine gambling regulations; conducting enhanced due diligence for high-value transactions; and fulfilling anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
5. Fraud Prevention and Security: Detecting and preventing fraudulent accounts, payment fraud, bonus abuse, collusion, and other violations of our Terms and Conditions; monitoring for suspicious activity patterns; investigating reported security incidents; protecting against unauthorized account access; and maintaining platform security through IP monitoring, device fingerprinting, and behavioral analysis.
6. Customer Support: Responding to inquiries submitted via live chat, email, or phone; resolving technical issues; investigating complaints; providing gameplay assistance; explaining bonus terms; assisting with deposits and withdrawals; and maintaining records of all support interactions for quality assurance and dispute resolution.
7. Responsible Gaming: Implementing and enforcing deposit limits, loss limits, and session time limits set by players; processing self-exclusion requests; monitoring for problem gambling indicators; providing access to responsible gaming tools; and connecting at-risk players with support resources including PAGCOR's Responsible Gaming Hotline.
8. Marketing and Communications: Sending promotional emails about bonuses, tournaments, new games, and special offers (with consent); delivering SMS notifications about account activity; providing transaction confirmations; sending account security alerts; and personalizing marketing based on gameplay preferences (opt-out available anytime).
9. Platform Improvement: Analyzing user behavior to improve website navigation; optimizing game selection based on popularity; identifying and fixing technical bugs; testing new features; improving mobile performance; and enhancing overall user experience based on aggregated usage data.
10. Legal Compliance and Dispute Resolution: Maintaining records required by Philippine law and PAGCOR regulations; responding to lawful requests from government authorities; defending legal claims; resolving disputes with players; and preserving evidence for potential litigation.

5. Data Sharing and Disclosure

5.1 Third-Party Service Providers

90piso shares your personal data with trusted third-party service providers who assist in operating our platform. These providers are contractually obligated to protect your data and use it only for the specific purposes we authorize:

• Payment Processors: GCash, Maya, and banking partners receive payment information necessary to process deposits and withdrawals
• Game Providers: Software developers (Pragmatic Play, PG Soft, Evolution Gaming, etc.) receive gameplay data to operate games and calculate outcomes
• Identity Verification Services: KYC providers receive identification documents to verify age, identity, and address
• Cloud Hosting Providers: Infrastructure partners host our platform and databases with encryption and security measures
• Customer Support Tools: Live chat and helpdesk software providers process communication data to facilitate support services
• Analytics Providers: Analytics tools process usage data to generate insights about platform performance (anonymized where possible)
• Marketing Platforms: Email service providers and SMS gateways deliver communications (only with your consent)

5.2 Legal and Regulatory Disclosure

We may disclose your personal data to government authorities, regulatory bodies, and law enforcement when legally required or permitted:

• Philippine Amusement and Gaming Corporation (PAGCOR) for regulatory compliance and licensing requirements
• National Privacy Commission (NPC) in response to lawful data protection inquiries
• Bureau of Internal Revenue (BIR) for tax reporting on winnings exceeding reportable thresholds
• Anti-Money Laundering Council (AMLC) regarding suspicious transactions or activities
• Law enforcement agencies pursuant to valid court orders, subpoenas, or warrants
• Legal counsel in connection with actual or threatened litigation

5.3 Business Transfers

In the event 90piso undergoes a merger, acquisition, sale of assets, or bankruptcy proceeding, your personal data may be transferred to the acquiring entity or successor company. You will be notified via email and prominent website notice before any such transfer, and the new entity will be bound by this Privacy Policy unless you consent to changes.

5.4 What We Do NOT Do

To be absolutely clear, 90piso does NOT:

• Sell your personal data to third parties for their marketing purposes
• Share your data with affiliates or partners without contractual data protection obligations
• Allow third-party advertisers to access your identifiable personal information
• Disclose your gambling activity to family members, employers, or other individuals without your consent (except as le gally required)

6. Data Security Measures

90piso implements comprehensive technical, organizational, and physical security measures to protect your personal data against unauthorized access, loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• Encryption: 256-bit SSL/TLS encryption for all data transmission between your device and our servers, matching security standards used by Philippine banks like BPI, BDO, and Metrobank
• Secure Storage: All personal data stored in encrypted databases with access restricted to authorized personnel only
• Access Controls: Multi-factor authentication for administrative access, role-based permissions, and regular access audits
• Network Security: Firewalls, intrusion detection systems, DDoS protection, and continuous security monitoring
• Payment Security: PCI DSS compliance for payment card data handling, tokenization of payment information, and secure integration with payment processors
• Employee Training: Regular data protection training for all staff handling personal data, confidentiality agreements, and background checks
• Security Audits: Third-party security assessments, penetration testing, vulnerability scanning, and compliance audits conducted regularly
• Incident Response: Dedicated security team monitoring for breaches, incident response protocols, and breach notification procedures as required by Philippine law

While we implement industry-leading security measures, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and should notify us immediately if you suspect unauthorized account access.

7. Data Retention and Deletion

7.1 Retention Periods

90piso retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Account Data: Retained throughout the life of your account plus six (6) months after account closure
• Transaction Records: Maintained for seven (7) years after the transaction date to comply with Philippine financial record-keeping requirements
• Identity Verification Documents: Retained for seven (7) years after account closure for regulatory compliance and potential dispute resolution
• Communication Records: Customer support transcripts and correspondence retained for three (3) years
• Marketing Consent Records: Maintained for three (3) years after consent withdrawal to demonstrate compliance
• Security Logs: Server logs and security monitoring data retained for two (2) years for fraud investigation and security purposes

7.2 Data Deletion

After applicable retention periods expire, we securely delete or anonymize your personal data using industry-standard data destruction methods. You may request early deletion of your data by exercising your right to erasure (see Section 8 below), subject to our legal obligations to retain certain records.

8. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal data held by 90piso:

1. Right to Information: You have the right to be informed about what personal data we collect, how we use it, and with whom we share it (this Privacy Policy fulfills that obligation).
2. Right to Access: You may request a copy of all personal data we hold about you. We will provide this information in a structured, commonly used format within thirty (30) days of your verified request.
3. Right to Rectification: You may correct inaccurate or incomplete personal data through your account settings or by contacting customer support. We will update your records promptly upon verification.
4. Right to Erasure (Right to be Forgotten): You may request deletion of your personal data when it is no longer necessary for the purposes collected, when you withdraw consent, or when processing is unlawful. This right is subject to legal retention requirements for financial and regulatory records.
5. Right to Object: You may object to processing of your personal data for direct marketing purposes at any time by clicking "unsubscribe" in marketing emails or adjusting communication preferences in your account settings.
6. Right to Data Portability: You may request your personal data in a machine-readable format to transfer to another service provider (where technically feasible).
7. Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
8. Right to Lodge a Complaint: You have the right to file a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of these rights, contact our Data Protection Officer at [email protected]. We will respond within thirty (30) days and may request additional verification to confirm your identity before processing requests.

9. Cookies and Tracking Technologies

90piso uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that remember your preferences and activity.

9.1 Types of Cookies We Use

• Essential Cookies: Required for platform functionality including login authentication, session management, and security features (cannot be disabled)
• Functional Cookies: Remember your preferences such as language selection, display settings, and game favorites
• Analytics Cookies: Collect aggregated usage statistics to improve platform performance and user experience
• Marketing Cookies: Track your interaction with promotional content to deliver relevant bonus offers (requires consent)

You may control cookie preferences through your browser settings, though disabling certain cookies may limit platform functionality. For detailed information, please refer to our separate Cookie Policy.

10. International Data Transfers

While 90piso primarily serves Filipino players and maintains data infrastructure within the Philippines, some third-party service providers (game developers, payment processors, cloud hosting) may process data outside Philippine borders. When we transfer data internationally, we ensure adequate protection through:

• Standard contractual clauses approved by the National Privacy Commission
• Verification that recipient countries have adequate data protection laws
• Binding corporate rules and data protection agreements with service providers
• Encryption of data in transit and at rest

11. Children's Privacy

The 90piso platform is intended exclusively for individuals 21 years of age or older. We do not knowingly collect personal data from individuals under 21. If we discover that we have inadvertently collected information from a minor, we will delete that data immediately. Parents or guardians who believe their child has provided personal data to 90piso should contact [email protected] immediately.

12. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. Material changes will be communicated through:

• Email notification to your registered address at least thirty (30) days before changes take effect
• Prominent banner notification on the 90piso website
• Updated "Last Modified" date at the top of this policy

Your continued use of the Services after policy changes become effective constitutes acceptance of the revised Privacy Policy. If you do not agree with changes, you must discontinue use and may request account closure.

13. Contact Information for Privacy Inquiries

For questions, concerns, or requests regarding this Privacy Policy or your personal data:

• Data Protection Officer: [email protected]
• Customer Support: [email protected] (24/7 availability)
• Live Chat: Available through the 90piso website

For complaints regarding data protection violations, you may also contact the National Privacy Commission:

• Website: www.privacy.gov.ph
• Email: [email protected]
• Hotline: (02) 8234-2228