pisabet Privacy Policy

1. Who We Are

This Privacy Policy is issued by pisabet ("pisabet," "we," "us," "our"), the operator of the online gaming platform accessible at pisabet.one. pisabet is committed to protecting the privacy and personal data of all registered players and visitors to the Platform, in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations.

pisabet acts as the Personal Information Controller (PIC) in respect of the personal data collected through the Platform. This means pisabet determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection law.

2. Personal Data We Collect

pisabet collects the following categories of personal data from players and Platform visitors:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification document details (e.g., PhilSys ID, passport, driver's license, UMID, SSS ID, PRC ID);
• Contact Data: Philippine mobile number, email address, and residential address;
• Account Data: Username, account ID, account creation date, login history, and account preferences;
• Financial Data: Deposit and withdrawal transaction records, payment method details (e.g., GCash account reference, PayMaya/Maya account reference, bank account details for bank transfer), and transaction history. pisabet does not store full payment card numbers;
• Gaming Data: Game history, wagering activity, session duration, game preferences, and bonus usage;
• Technical Data: IP address, device type, operating system, browser type and version, time zone, and platform access logs;
• Communications Data: Records of your communications with pisabet customer support, including live chat transcripts and email correspondence;
• Responsible Gaming Data: Any deposit limits, loss limits, cooling-off periods, or self-exclusion requests you have submitted.

3. How We Collect Your Data

pisabet collects personal data through the following means:

• Direct collection: Data you provide when registering a pisabet Account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, and server logs;
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from anti-fraud service providers; payment transaction data from payment processors (GCash, PayMaya/Maya, banks).

4. How We Use Your Personal Data

pisabet uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your pisabet Account;
• Service delivery: To provide access to games, process deposits and withdrawals, and deliver the core pisabet gaming experience;
• Identity verification (KYC): To verify your identity and age (21+) as required by applicable regulations before processing withdrawals;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the Platform;
• Legal compliance: To comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations and data protection requirements;
• Customer support: To respond to your enquiries, complaints, and support requests;
• Responsible gaming: To administer deposit limits, loss limits, cooling-off periods, and self-exclusion requests, and to identify players who may be at risk;
• Platform improvement: To analyse usage patterns and improve the performance, features, and user experience of the pisabet Platform;
• Marketing communications: To send you promotional offers and updates about pisabet, where you have consented to receive such communications. You may opt out at any time.

5. Legal Basis for Processing

pisabet processes your personal data on the following legal bases under the Philippine Data Privacy Act:

• Contractual necessity: Processing required to perform our contract with you (i.e., to operate your pisabet Account and provide gaming services);
• Legal obligation: Processing required to comply with applicable Philippine laws, including AML regulations and gaming regulations;
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

pisabet does not sell, rent, or trade your personal data to third parties. pisabet may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• KYC and identity verification providers: To verify your identity and age as required for account registration and withdrawal processing;
• Payment processors: GCash, PayMaya/Maya, and banking partners, to process your deposits and withdrawals;
• Game providers: Third-party game suppliers who provide games on the pisabet Platform, to the extent necessary to deliver gaming services;
• Fraud prevention and AML service providers: To detect and prevent fraudulent activity and money laundering;
• IT and hosting providers: Cloud infrastructure and hosting providers who process data on pisabet's behalf under strict data processing agreements;
• Regulatory and law enforcement authorities: Where required by applicable Philippine law, court order, or regulatory requirement, including PAGCOR and the Anti-Money Laundering Council (AMLC).

All third-party service providers who process personal data on pisabet's behalf are required to do so under written data processing agreements that impose obligations equivalent to those applicable to pisabet under the DPA.

7. Cookies & Tracking Technologies

pisabet uses cookies and similar tracking technologies on the Platform to:

• Maintain your login session and account preferences;
• Analyse Platform usage and performance;
• Detect and prevent fraud and unauthorized access;
• Deliver relevant promotional content where you have consented.

pisabet uses session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period). Persistent cookies are used to remember your preferences and improve your experience on return visits to the pisabet Platform.

8. Data Retention

pisabet retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention periods:

• Account data: Retained for the duration of your pisabet Account and for a minimum of five (5) years following account closure, as required by Philippine AML regulations;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with the Anti-Money Laundering Act (AMLA) of the Philippines;
• KYC verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction;
• Customer support communications: Retained for three (3) years from the date of the communication;
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter for compliance purposes;
• Technical and log data: Retained for up to twelve (12) months from the date of collection.

Where retention beyond these periods is required by applicable law or for the establishment, exercise, or defence of legal claims, pisabet will retain the relevant data for the additional period required.

9. Data Security

pisabet implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the pisabet Platform;
• Encryption of sensitive data at rest, including financial data and identity documents;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing of the Platform infrastructure;
• Two-factor authentication (2FA) available for all player accounts;
• Continuous monitoring for suspicious activity and potential data breaches;
• Staff training on data protection obligations and security best practices.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, pisabet will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the DPA and NPC Circular No. 16-03.

10. Your Data Protection Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by pisabet:

• Right to be informed: The right to be informed of how your personal data is being collected and processed — which is the purpose of this Privacy Policy;
• Right of access: The right to request a copy of the personal data pisabet holds about you;
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data pisabet holds about you;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to pisabet's legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation;
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe pisabet has processed your personal data in violation of the DPA.

To exercise any of these rights, please contact pisabet's Data Protection Officer using the contact details set out in Section 14 of this Policy. pisabet will respond to all data subject requests within thirty (30) days of receipt, in accordance with the DPA.

11. Children's Privacy

The pisabet Platform is strictly intended for individuals who are at least 21 years of age. pisabet does not knowingly collect personal data from individuals under the age of 21. If pisabet becomes aware that personal data has been collected from a person under 21, it will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has registered a pisabet Account or provided personal data to pisabet, please contact our support team immediately so that we can take appropriate action.

12. International Data Transfers

pisabet's primary operations are based in the Philippines. However, some of our third-party service providers — including cloud hosting providers, KYC verification services, and game suppliers — may process personal data outside the Philippines. Where personal data is transferred outside the Philippines, pisabet ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under the Philippine DPA;
• Transfers only to jurisdictions that the NPC has determined provide an adequate level of data protection;
• Data processing agreements with all third-party processors that impose binding data protection obligations.

13. Updates to This Privacy Policy

pisabet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. The effective date at the top of this page will be updated whenever a material change is made.

Where changes are material, pisabet will notify registered players by email or through a prominent notice on the Platform prior to the changes taking effect. Your continued use of the pisabet Platform following notification of any amendment constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how pisabet protects your personal data.

14. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or pisabet's data processing practices, please contact our Data Protection Officer (DPO):

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you are not satisfied with pisabet's response to your data protection concern. The NPC can be reached through its official government channels.