Privacy Policy for pilslot

1 Introduction

pilslot ("pilslot," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses our online casino platform at pilslot.com. This Privacy Policy ("Policy") describes how pilslot collects, uses, stores, shares, and protects personal information in connection with your use of the pilslot website, mobile platform, games, and all related services (collectively, the "Platform").

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the regulations of the National Privacy Commission (NPC) of the Philippines. It applies to all players who access the pilslot Platform from the Philippines, including those in Manila, Cebu, Davao, Quezon City, Makati, and all other regions.

By registering an account with pilslot or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, pilslot acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes in connection with the Platform.

pilslot has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. If you have any questions, concerns, or requests relating to your personal data, you may contact our DPO through the support channels described in Section 13 of this Policy.

Where pilslot engages third-party service providers to process personal data on its behalf (for example, payment processors and KYC verification providers), those parties act as Personal Information Processors (PIPs) and are contractually bound to process data only in accordance with pilslot's instructions and applicable Philippine law.

3 Data We Collect

pilslot collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is collected. The categories of personal data we collect include:

3.1 Registration Data

When you create a pilslot account, we collect:

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Residential address in the Philippines
• Email address
• Mobile phone number
• Username and encrypted password

3.2 Identity Verification (KYC) Data

To comply with PAGCOR regulations and the Anti-Money Laundering Act (Republic Act No. 9160), pilslot may collect:

• Government-issued photo ID (e.g., Philippine passport, driver's licence, PhilSys National ID, UMID, SSS ID)
• Proof of residential address (e.g., utility bill, bank statement, barangay certificate)
• Selfie or live photo for facial verification
• Source of funds documentation where required by applicable regulations

3.3 Financial Data

When you make deposits or withdrawals, we collect transaction records including payment method details (e.g., GCash account reference, PayMaya account reference, BPI/BDO/Metrobank account details), transaction amounts in Philippine Peso (₱), and transaction timestamps. pilslot does not store full card numbers or full bank account numbers on its servers.

3.4 Gaming Activity Data

pilslot records your gaming history, including games played, bets placed, wins and losses, session durations, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting.

3.5 Technical and Device Data

When you access the Platform, we automatically collect certain technical data, including:

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session timestamps and page interaction data
• Cookie identifiers and similar tracking data (see Section 9)

3.6 Communications Data

If you contact pilslot's customer support team via live chat or email, we retain records of those communications, including the content of messages and any attachments, for quality assurance, training, and dispute resolution purposes.

Data Category	Examples	Primary Purpose
Registration Data	Name, email, mobile number, DOB	Account creation & authentication
KYC / Identity Data	Government ID, proof of address	Regulatory compliance, fraud prevention
Financial Data	GCash/PayMaya references, transaction history	Payment processing, AML compliance
Gaming Activity	Bets, wins, session history	Account management, responsible gaming
Technical Data	IP address, device info, cookies	Security, platform optimisation
Communications	Support chat logs, emails	Customer service, dispute resolution

4 How We Use Your Data

pilslot uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and administer your pilslot player account, including authentication and account security.
• Identity Verification: To verify your identity and age (21+) in compliance with PAGCOR licensing requirements and Philippine law.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods.
• Regulatory Compliance: To fulfil our obligations under PAGCOR regulations, the Anti-Money Laundering Act, and other applicable Philippine laws, including filing Suspicious Transaction Reports (STRs) with the Anti-Money Laundering Council (AMLC) where required.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits, session reminders, and self-exclusion.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, and improve the performance and features of the pilslot Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent to receive such communications. You may opt out at any time.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other illegal conduct on the Platform.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, pilslot processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and pilslot (i.e., the Terms and Conditions), including account management, payment processing, and game provision.
• Legal Obligation: Processing is required to comply with applicable Philippine laws and regulations, including PAGCOR licensing conditions, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate Interests: Processing is necessary for pilslot's legitimate interests in operating a secure, fair, and commercially viable online gaming platform, provided those interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities — such as sending marketing communications or using non-essential cookies — pilslot relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Disclosure

pilslot does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

6.1 Service Providers

pilslot engages trusted third-party service providers to assist in operating the Platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), KYC and identity verification providers, cloud hosting and infrastructure providers, and customer support software providers. These providers are contractually bound to process your data only on pilslot's instructions and in accordance with applicable Philippine data protection law.

6.2 Regulatory and Law Enforcement Authorities

pilslot may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities where required by law, court order, or regulatory directive. pilslot cooperates fully with all lawful requests from Philippine authorities.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of pilslot's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and your rights in relation to it.

6.4 Game Providers

Certain game providers (such as Playtech) may receive limited technical data (e.g., session tokens, game history) necessary to deliver their games on the pilslot Platform. These providers are bound by their own data protection obligations and are not permitted to use your data for independent marketing purposes.

7 Data Retention

pilslot retains your personal data for as long as your account remains active and for such additional period as is required by applicable Philippine law and PAGCOR regulations. Specifically:

• Account and KYC data is retained for a minimum of five (5) years from the date of account closure, in accordance with PAGCOR licensing requirements and the Anti-Money Laundering Act.
• Financial transaction records are retained for a minimum of five (5) years from the date of each transaction.
• Gaming activity data is retained for a minimum of three (3) years from the date of each gaming session.
• Customer support communications are retained for a minimum of two (2) years from the date of the last communication.
• Marketing consent records are retained for as long as you remain subscribed to marketing communications, plus one (1) year following opt-out.

Upon expiry of the applicable retention period, pilslot will securely delete or anonymise your personal data in accordance with its data disposal procedures.

8 Security Measures

pilslot implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and pilslot's servers
• AES-256 encryption for sensitive data stored in pilslot's databases
• Multi-factor authentication (MFA) options for player accounts
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• 24/7 security monitoring and intrusion detection systems
• Secure data centres with physical access controls and environmental safeguards

While pilslot takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, pilslot will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of the Data Privacy Act of 2012.

9 Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device when you visit the pilslot Platform. They allow pilslot to recognise your device, remember your preferences, and collect information about how you interact with the Platform.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly, including session management and security features. These cannot be disabled.
• Functional Cookies: Remember your preferences (e.g., language settings, display preferences) to provide a more personalised experience.
• Analytics Cookies: Collect anonymised data about how players use the Platform, helping pilslot identify areas for improvement. No personally identifiable information is shared with analytics providers.
• Marketing Cookies: Used to deliver relevant promotional content to you on the pilslot Platform. These are only activated with your consent.

9.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the pilslot Platform. Strictly necessary cookies cannot be disabled as they are required for the Platform to operate.

10 Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by pilslot:

• Right to be Informed: The right to be informed of how your personal data is collected, used, and processed — which is the purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data pilslot holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data pilslot holds about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to pilslot's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe pilslot has violated your data privacy rights.

To exercise any of these rights, please contact pilslot's Data Protection Officer through the support channels described in Section 13. pilslot will respond to all data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

11 Children's Privacy

The pilslot Platform is strictly intended for adults aged 21 years and above, as required by PAGCOR regulations and Philippine law. pilslot does not knowingly collect personal data from individuals under the age of 21.

If pilslot becomes aware that personal data has been collected from a person under 21 years of age, it will immediately close the associated account, delete the personal data in question, and take appropriate action in accordance with applicable regulations.

12 Updates to This Privacy Policy

pilslot reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. The most current version of this Policy will always be available on this page, with the "Last Updated" date revised accordingly.

Where changes to this Policy are material — meaning they significantly affect your rights or how your personal data is processed — pilslot will notify registered players via email or a prominent notice on the Platform at least fourteen (14) days before the changes take effect.

Your continued use of the pilslot Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must discontinue use of the Platform and may request account closure in accordance with our Terms and Conditions.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by pilslot, please contact our Data Protection Officer. Our support team is available 24 hours a day, seven days a week via live chat on the Platform.

For written data privacy enquiries, you may reach our Data Protection Officer by email. Please include "Data Privacy Request" in the subject line of your email so that it is directed to the appropriate team. pilslot will acknowledge receipt of your enquiry within two (2) business days and provide a substantive response within fifteen (15) business days.

Data Protection Officer email: [email protected]

General support email: [email protected]

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC can be reached through its official government channels.