pisomax Privacy Policy

pisomax ("pisomax", "we", "us", "our") operates the online gaming platform accessible at pisomax.bet. We are committed to protecting the privacy and personal data of every Filipino player who registers, deposits, plays, or otherwise interacts with our platform. This Privacy Policy ("Policy") describes in clear, plain language how pisomax collects, uses, stores, shares, and protects your personal information.

This Policy is drafted in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. It applies to all personal data collected through the pisomax website, mobile platform, customer support channels, and any other pisomax-operated touchpoint.

This Policy should be read alongside the pisomax Terms & Conditions and our Responsible Gaming Policy. Together, these documents form the complete agreement governing your relationship with pisomax.

pisomax collects personal data through multiple channels, including direct input during registration, ongoing use of the platform, payment processing, and automated technical systems. The categories of personal data we may collect are outlined below.

pisomax does not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data unless this is strictly required for responsible gaming compliance purposes (for example, where a player discloses a gambling disorder as part of a self-exclusion request).

pisomax uses your personal data only for specific, legitimate purposes directly related to the operation of the platform and our obligations as a PAGCOR-regulated gaming operator. We do not process your data in ways that are incompatible with the purposes stated here.

• Account creation and management — To register your pisomax account, verify your identity, maintain your profile, and enable you to access all platform features.
• Transaction processing — To securely process deposits via GCash, Maya, GrabPay, InstaPay, and bank transfers, and to process withdrawal requests to your registered payment method.
• Identity and age verification (KYC) — To confirm that you are at least 21 years of age and are the rightful owner of the payment methods linked to your account, as required by PAGCOR.
• Regulatory compliance and AML obligations — To fulfill our obligations under the Anti-Money Laundering Act (AMLA) and PAGCOR's Know Your Customer requirements, including reporting to the Anti-Money Laundering Council (AMLC) where legally required.
• Platform security and fraud prevention — To detect and prevent fraudulent activity, account takeovers, bonus abuse, and other conduct that violates the pisomax Terms & Conditions.
• Responsible gaming — To monitor gaming behavior for signs of problem gambling and to administer deposit limits, loss limits, cooling-off periods, and self-exclusion requests in accordance with PAGCOR responsible gaming standards.
• Customer support — To respond to your enquiries, resolve disputes, and improve the quality of our support service.
• Platform improvement — To analyze aggregated usage patterns, diagnose technical issues, and improve the features, performance, and security of the pisomax platform.
• Marketing communications — To send you promotional offers, bonus notifications, and news about pisomax — but only where you have opted in to receive such communications. You may opt out at any time via your account settings.

Under the Data Privacy Act of 2012 and NPC regulations, pisomax processes your personal data on one or more of the following lawful bases:

1. Contractual necessity — Processing is necessary to perform our contractual obligations to you under the pisomax Terms & Conditions, including providing access to games, processing transactions, and managing your account.
2. Legal obligation — Processing is required for us to comply with applicable Philippine laws, including PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act, and any orders from competent regulatory or judicial authorities.
3. Legitimate interests — Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and freedoms.
4. Consent — For optional data uses such as marketing communications, pisomax will only process your data where you have provided clear, informed, and freely given consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

pisomax does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We may, however, share your personal information with the following categories of recipients where strictly necessary:

• Payment processors and e-wallet providers — GCash, Maya, GrabPay, InstaPay, BPI, BDO, Metrobank, and 7-Eleven CLiQQ receive only the data necessary to process your specific transaction.
• Identity verification providers — Third-party KYC/AML service providers who assist pisomax in verifying player identity and age. These providers operate under strict data processing agreements and are prohibited from using your data for any purpose other than the specific verification task.
• Cloud infrastructure and hosting providers — pisomax uses secure, enterprise-grade cloud infrastructure to host the platform. Infrastructure providers access data only at the system level and are bound by confidentiality obligations.
• Regulatory and law enforcement authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities may receive player data where pisomax is legally required to disclose it.
• Customer support platforms — Third-party live chat and ticketing systems used to deliver 24/7 support may process communication data on pisomax's behalf under data processing agreements.
• Professional advisers — Legal, financial, and compliance advisers engaged by pisomax may access data where necessary for the provision of professional services, subject to professional confidentiality obligations.

pisomax uses cookies and similar technologies (such as web beacons, pixel tags, and local storage objects) to operate the platform, maintain session continuity, and gather anonymous analytics data. The types of cookies we use are described below.

• Strictly necessary cookies — These cookies are essential for the pisomax platform to function. They maintain your login session, remember your language preferences, and enable secure transactions. These cookies cannot be disabled without severely impairing your ability to use the platform.
• Functional cookies — These cookies remember choices you make (such as your preferred game category or notification settings) to provide a more personalized experience. They are not used for advertising purposes.
• Analytics cookies — pisomax uses aggregated, anonymized analytics data to understand how players navigate the platform, which features are most used, and where technical issues occur. This data does not identify you individually.
• Security cookies — These cookies help pisomax detect and prevent fraudulent activity, bot access, and account takeover attempts. They are essential components of our platform security architecture.

You can control or delete cookies through your browser settings. Most browsers allow you to block third-party cookies while accepting first-party cookies. Note that disabling strictly necessary cookies will affect your ability to log in and use core platform features. pisomax does not use advertising or cross-site tracking cookies.

pisomax retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The general retention periods applied by pisomax are as follows:

When personal data is no longer required and its retention period has expired, pisomax will securely delete or anonymize the data so that it can no longer be linked to any individual. Where anonymization is not technically feasible, the data will be securely destroyed in accordance with industry best practices.

pisomax implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following measures:

• TLS encryption — All data transmitted between your device and the pisomax platform is protected by Transport Layer Security (TLS 1.2 or higher) encryption.
• Data encryption at rest — Sensitive data including payment credentials and identity documents are stored with AES-256 encryption on our servers.
• Access controls — Access to personal data within pisomax is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their role.
• Multi-factor authentication — Administrative access to pisomax backend systems requires multi-factor authentication. We encourage players to enable available two-factor authentication on their accounts as well.
• Regular security audits — pisomax conducts regular security assessments and penetration testing to identify and remediate potential vulnerabilities before they can be exploited.
• Incident response — pisomax maintains a documented data breach response plan. In the event of a personal data breach affecting your rights and freedoms, we will notify you and the National Privacy Commission within the timeframes required by the Data Privacy Act.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by pisomax. These rights may be exercised free of charge by contacting our Data Protection Officer at [email protected].

• Right to be informed — You have the right to be informed of how your personal data is being collected, used, and shared, which is the primary purpose of this Privacy Policy.
• Right of access — You may request a copy of the personal data pisomax holds about you, along with information on how it is being processed.
• Right to rectification — If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update most account details directly through your pisomax account settings.
• Right to erasure — You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. Note that this right may be limited where pisomax is required to retain data by law (for example, for AML compliance).
• Right to object — You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, in which case pisomax will cease processing unless we can demonstrate compelling legitimate grounds.
• Right to data portability — You may request that pisomax provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another data controller.
• Right to lodge a complaint — If you believe pisomax has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

pisomax will respond to all data subject requests within fifteen (15) business days of receipt. If additional time is required due to the complexity of the request, we will inform you of the expected timeline within the initial 15-day period.

pisomax is strictly an adults-only platform. In accordance with PAGCOR regulations and Philippine law, only individuals who are 21 years of age or older are permitted to register and participate in any gaming activity on the pisomax platform.

pisomax does not knowingly collect, process, or store personal data from individuals under the age of 21. All new player registrations are subject to age verification as part of our mandatory KYC process. If pisomax discovers that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, reverse any pending transactions, and permanently delete the data in question.

We encourage parents and guardians to use available parental control software to restrict access to online gaming platforms for minors. pisomax supports all responsible gaming initiatives aimed at protecting young people from exposure to gambling content.

pisomax is a Philippines-facing platform and processes the majority of its data within the Philippines. However, some of our third-party service providers — including cloud infrastructure providers, identity verification services, and customer support platforms — may be located outside the Philippines or may process data on servers located in other jurisdictions.

Where personal data is transferred outside the Philippines, pisomax ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012. These safeguards may include:

• Binding data processing agreements incorporating the NPC's standard contractual clauses or equivalent data protection obligations;
• Transfers to jurisdictions that the NPC has recognized as providing an adequate level of data protection;
• Other legally recognized transfer mechanisms approved by the National Privacy Commission.

You may request information about the specific safeguards in place for any cross-border transfer of your personal data by contacting our Data Protection Officer at [email protected].

pisomax reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, PAGCOR regulations, or platform operations. When we make material changes to this Policy, we will notify registered players via:

• A prominent notice displayed on the pisomax platform upon your next login;
• An email notification sent to the address registered to your pisomax account;
• An updated "Last Updated" date at the top of this Privacy Policy page.

Minor changes such as typographical corrections or clarifications that do not affect the substance of the Policy may be made without prior notice. We encourage you to review this Privacy Policy periodically to stay informed about how pisomax protects your personal data.

pisomax has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and NPC regulations. If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us through the following channels:

If you are not satisfied with the response you receive from our DPO, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012.

pisomax is committed to working constructively with the NPC and with data subjects to resolve all privacy concerns promptly, fairly, and in full compliance with Philippine data protection law.