Your personal data matters. This Privacy Policy explains what information pisotaya collects, how it is used, who it may be shared with, and the rights you hold over your own data as a member on pisotaya.net.
A plain-language summary of our data practices. The full legal text below governs in all cases.
pisotaya collects only the personal data necessary to operate your account, process transactions, meet KYC obligations under Philippine regulations, and deliver customer support. We do not collect data for its own sake.
Your data is protected using SSL/TLS encryption in transit and AES-256 encryption at rest. Access to personal data within pisotaya is restricted on a strict need-to-know basis. We conduct regular security reviews of our infrastructure.
As a pisotaya member, you have the right to access, correct, delete, and port your personal data. You may exercise these rights at any time by contacting our Data Privacy Officer through the contact channels described in this Policy.
pisotaya does not sell, rent, or trade your personal information to unaffiliated third parties for their own marketing or commercial purposes. Full stop.
Personal data is retained for the period required to provide services, meet regulatory obligations (typically five years minimum under PAGCOR and AMLC requirements), and resolve disputes. Data is securely deleted or anonymized thereafter.
In the unlikely event of a personal data breach affecting your information, pisotaya will notify affected individuals and the National Privacy Commission (NPC) within the timeframes required by Republic Act No. 10173 and its Implementing Rules and Regulations.
YOUR PRIVACY IS IMPORTANT TO US. This Privacy Policy ("Policy") describes how pisotaya ("we," "us," "our," "the Platform") collects, uses, stores, and discloses personal information obtained from players, visitors, and users of pisotaya.net and its associated services. By accessing pisotaya.net or registering a player account, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy forms part of pisotaya's Terms & Conditions.
pisotaya is committed to protecting the privacy and personal data of its members, visitors, and users. This Policy has been developed in compliance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations, as administered and enforced by the National Privacy Commission (NPC).
As a platform serving Filipino players across the Philippines — from Metro Manila to Cebu, Davao, Iloilo, and beyond — pisotaya takes seriously its obligations under Philippine law to handle personal data with integrity, transparency, and proportionality. Our approach to privacy is grounded in the data privacy principles of transparency, legitimate purpose, and proportionality as codified in the Data Privacy Act.
This Policy applies to all personal data processed by pisotaya in connection with the operation of its online gaming platform, customer support functions, payment processing, responsible gaming compliance, and marketing communications directed at opted-in members.
The data controller responsible for the personal data of pisotaya members and visitors is pisotaya, operating pisotaya.net. pisotaya has designated a Data Privacy Officer (DPO) responsible for overseeing compliance with this Policy and applicable Philippine data protection law.
If you have any questions, concerns, or requests relating to the processing of your personal data by pisotaya, you may contact the Data Privacy Officer through the channels set out in Section 16 of this Policy.
pisotaya collects the following categories of personal data from members and visitors:
| Category | Data Points Collected | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, government ID number and type, nationality | Account registration, KYC verification, age verification |
| Contact Data | Philippine mobile number, email address, residential address | Account management, transaction notifications, support |
| Financial Data | GCash number, Maya account reference, bank account details (where applicable), deposit and withdrawal transaction records | Payment processing, withdrawal verification, anti-money laundering |
| Technical Data | IP address, device type and operating system, browser type, session duration, login timestamps | Security, fraud prevention, platform optimisation |
| Gaming Data | Game history, wagers placed, wins and losses, sports betting selections, bonus activity, responsible gaming tool usage | Service delivery, regulatory reporting, responsible gaming monitoring |
| Communications Data | Live chat transcripts, support ticket content, email correspondence with pisotaya | Customer support, dispute resolution, quality assurance |
| Verification Data | Government ID images, selfie photographs submitted during KYC | KYC identity verification required by PAGCOR and AMLC regulations |
pisotaya does not intentionally collect sensitive personal information as defined under the Data Privacy Act (such as health data, religious beliefs, or political affiliations) unless it is strictly necessary for a specific regulatory purpose and consent has been obtained.
pisotaya collects personal data through the following methods:
pisotaya processes your personal data for the following purposes:
pisotaya processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012:
pisotaya engages carefully selected third-party service providers who process personal data on our behalf under data processing agreements that require them to maintain appropriate security standards and process data only on pisotaya's documented instructions. These include: KYC and identity verification providers, payment processors (including GCash/Maya infrastructure partners), fraud prevention and anti-money laundering screening services, customer support platform providers, game software providers who may receive session identifiers, and IT infrastructure and cloud hosting providers.
pisotaya may disclose personal data to PAGCOR, the Anti-Money Laundering Council, the National Privacy Commission, the Philippine National Police, or other competent Philippine authorities where required by law, court order, or in response to a lawful regulatory request. pisotaya will take reasonable steps to notify affected members of such disclosures except where notification is prohibited by law or would compromise an investigation.
pisotaya does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing or commercial purposes under any circumstances.
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of pisotaya's assets, personal data held by pisotaya may be transferred to the acquiring entity. Affected members will be notified in advance of any such transfer and the terms of data handling by the acquiring entity.
pisotaya primarily processes personal data within the Philippines. Where personal data is transferred to service providers or infrastructure operating in other jurisdictions, pisotaya ensures that such transfers are conducted only to recipients who provide an adequate level of data protection, and that appropriate safeguards are in place in accordance with Section 21 of the Data Privacy Act and NPC guidance on cross-border data flows.
pisotaya will not transfer personal data to jurisdictions that do not provide adequate data protection standards without implementing appropriate contractual safeguards such as standard data protection clauses approved by the NPC.
pisotaya implements organisational and technical security measures appropriate to the nature and sensitivity of the personal data processed. These measures include:
While pisotaya implements robust security measures, no digital platform can guarantee absolute security against all threats. Members are strongly encouraged to use strong, unique passwords for their pisotaya accounts and to enable two-factor authentication to reduce the risk of unauthorised access.
pisotaya retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.
| Data Category | Retention Period | Legal Basis for Retention |
|---|---|---|
| Account and identity data | Duration of account + 5 years post-closure | PAGCOR licensing requirements, Data Privacy Act |
| Transaction and financial records | Minimum 5 years from transaction date | Anti-Money Laundering Act (AMLA), tax obligations |
| KYC documents | Duration of account + 5 years post-closure | AMLC regulations, PAGCOR requirements |
| Gaming activity records | Duration of account + 2 years post-closure | Regulatory compliance, dispute resolution |
| Customer support records | 3 years from last interaction | Dispute resolution, service quality |
| Marketing preferences | Until consent is withdrawn | Consent |
| Technical and log data | 12 months | Legitimate interest (security) |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised and aggregated data (which cannot identify any individual) may be retained indefinitely for statistical and analytical purposes.
pisotaya uses cookies and similar tracking technologies on pisotaya.net to enable core platform functionality, enhance user experience, support security measures, and — where you have consented — to deliver relevant promotions and analyse platform usage.
You can control non-essential cookies through the cookie preference centre accessible from the footer of pisotaya.net. You may also manage cookies through your browser settings; however, disabling strictly necessary cookies will affect platform functionality. Note that withdrawing consent for cookies does not affect the lawfulness of any prior cookie processing.
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, pisotaya members have the following rights with respect to their personal data:
| Right | Description | How to Exercise |
|---|---|---|
| Right to be Informed | The right to know what personal data pisotaya holds about you, how it is used, and who it is shared with. | This Privacy Policy; contact the DPO for a detailed account |
| Right of Access | The right to request a copy of the personal data pisotaya holds about you. | Submit a Data Access Request via the contact details in Section 16 |
| Right to Rectification | The right to have inaccurate personal data corrected or incomplete data completed. | Update via account settings or contact support |
| Right to Erasure | The right to request deletion of your personal data where it is no longer necessary, subject to legal retention obligations. | Submit a Data Erasure Request via Section 16 contact channels |
| Right to Data Portability | The right to receive your personal data in a structured, machine-readable format and to transmit it to another controller. | Submit a Data Portability Request via Section 16 contact channels |
| Right to Object | The right to object to processing based on legitimate interests, including direct marketing. | Opt out via account marketing preferences or contact DPO |
| Right to Lodge a Complaint | The right to lodge a complaint with the National Privacy Commission if you believe your data rights have been violated. | Contact the NPC at privacy.gov.ph (external regulatory body) |
pisotaya will respond to data subject rights requests within fifteen (15) calendar days of receipt of a valid, verified request, in accordance with NPC guidelines. pisotaya may extend this period by a further fifteen (15) days where the request is complex or where a large number of requests have been received, in which case we will notify you of the extension and the reasons for it.
To verify your identity before processing a data rights request, pisotaya may require you to provide sufficient information to confirm that you are the account holder to whom the data relates. This is a security measure to protect against unauthorised data access requests.
pisotaya is strictly for adults aged 21 years and above. pisotaya does not knowingly collect or process personal data from individuals under 21 years of age. In accordance with PAGCOR regulations and Philippine law, age verification is conducted during registration and KYC processes. If pisotaya discovers that personal data has been collected from a person under 21, that data will be immediately deleted and the associated account suspended. Any person aware of a potential underage account on pisotaya should report it to our DPO immediately.
pisotaya.net may contain references to game provider names and payment method logos that are trademarks of their respective owners. pisotaya does not maintain embedded links to third-party websites within its content pages.
This Privacy Policy applies solely to personal data processed by pisotaya in connection with pisotaya.net. pisotaya is not responsible for the privacy practices of third-party service providers such as GCash, Maya, BPI, or BDO — players interacting with those services should review the respective privacy policies of those providers.
pisotaya reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. Material changes to this Policy will be communicated to registered members via email or in-platform notification at least seven (7) days before they take effect.
The version of this Privacy Policy bearing the most recent effective date shown at the top of this page is the version in force. We encourage pisotaya members to review this Policy periodically. Continued use of the platform following any update constitutes acceptance of the revised Policy.
For all data privacy matters — including exercising your data subject rights, raising a concern about pisotaya's data handling, or submitting a formal complaint — please contact pisotaya's Data Privacy Officer through the following channels:
If you are not satisfied with pisotaya's response to a data privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for enforcing the Data Privacy Act of 2012. This Privacy Policy was last reviewed and updated on January 1, 2026.
We built pisotaya with privacy and security at the core — not as an afterthought. Ready to join thousands of Filipino players on the platform? 21+ only. Play responsibly.