pinasplay Privacy Policy

1. About This Policy

1.1 This Policy applies to all personal data processed by pinasplay in connection with your use of pinasplay.one, including account registration, gaming activity, financial transactions, customer support interactions, and promotional communications.

1.2 pinasplay is the personal information controller in respect of all data collected through pinasplay.one. pinasplay is responsible for ensuring that your data is handled in accordance with this Policy and applicable Philippine privacy law.

1.3 This Policy should be read alongside the pinasplay Terms and Conditions, which are published at pinasplay.one/terms-conditions. In the event of any conflict between this Policy and the Terms regarding data matters, this Policy shall prevail.

2. Data We Collect

2.1 Registration Data. When you create a pinasplay account, we collect: full legal name, date of birth, nationality, residential address in the Philippines, email address, Philippine mobile number, and login credentials (password stored in hashed form only).

2.2 Identity Verification (KYC) Data. To comply with PAGCOR licensing requirements and Philippine anti-money laundering law, we collect copies of government-issued Philippine identification documents (e.g., Philippine Passport, SSS ID, UMID, PhilSys National ID, Driver's License) and, where required, proof of address and source of funds documentation.

2.3 Financial Data. We collect transactional data related to your deposits and withdrawals, including GCash account reference numbers, Maya wallet identifiers, bank account details where applicable, transaction amounts, and timestamps. We do not store complete payment card numbers on our servers.

2.4 Gaming Activity Data. We collect comprehensive records of your gaming activity on pinasplay, including game sessions, bet amounts, game results, win/loss records, and bonus usage. This data is required for regulatory reporting to PAGCOR and for responsible gaming monitoring.

2.5 Technical & Usage Data. When you access pinasplay.one, we automatically collect: IP address, device type and operating system, browser type and version, referring URL, pages visited, session duration, and login timestamps. This data is used for security monitoring, fraud detection, and platform improvement.

2.6 Communications Data. We retain records of your communications with pinasplay's customer support team, including live chat transcripts, email correspondence, and support ticket records.

3. How We Collect Data

3.1 Directly from You. Most personal data is collected directly from you — during registration, KYC verification, deposit and withdrawal transactions, customer support interactions, and when you complete surveys or promotional opt-ins.

3.2 Automatically. Technical and usage data is collected automatically through cookies, web beacons, and server logs when you access pinasplay.one. See Section 7 for detailed information about cookies.

3.3 From Third Parties. pinasplay may receive identity verification data from licensed KYC service providers, fraud and sanctions screening data from compliance data vendors, and technical fraud signals from payment processors including GCash and Maya. All third-party data sharing is conducted under contractual arrangements that require equivalent data protection standards.

4. Legal Basis for Processing

4.1 pinasplay processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the pinasplay Terms and Conditions — including account management, game delivery, and payment processing.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA) obligations, and other applicable Philippine legal requirements.
• Legitimate Interests: Processing for fraud detection and prevention, security monitoring, platform analytics, and responsible gaming monitoring, where these interests do not override your rights.
• Consent: Processing for direct marketing communications (where you have opted in) and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. How We Use Your Data

5.1 pinasplay uses your personal data for the following purposes:

• Creating, maintaining, and managing your pinasplay account
• Verifying your identity and age (21+ requirement) during registration and KYC review
• Processing deposits, withdrawals, and all financial transactions in Philippine Peso
• Providing access to all games, live casino tables, and platform features
• Administering bonuses, promotions, and the pinasplay VIP program
• Detecting, investigating, and preventing fraud, money laundering, and prohibited conduct
• Monitoring for and responding to responsible gaming indicators
• Providing customer support across all channels
• Complying with PAGCOR reporting requirements and legal obligations
• Sending transactional communications (deposit confirmations, withdrawal updates, security alerts)
• Sending promotional communications where you have provided consent
• Improving pinasplay's platform, games, and services through aggregated analytics

6. Sharing Your Data

6.1 pinasplay does not sell, rent, or trade your personal information to third parties for their own marketing purposes under any circumstances.

6.2 pinasplay shares personal data only in the following circumstances and only to the minimum extent necessary:

• PAGCOR and Regulatory Authorities: As required by our gaming license, pinasplay reports gaming activity and player data to PAGCOR and other relevant Philippine government authorities.
• Payment Processors: Transaction data is shared with GCash, Maya, BPI, BDO, and other payment providers to the extent necessary to process your deposits and withdrawals.
• KYC & Compliance Vendors: Identity and document data is shared with licensed identity verification and sanctions screening providers to fulfil PAGCOR KYC requirements.
• Game Providers: Aggregated or pseudonymized gaming session data may be shared with game providers for technical and RNG certification purposes. Individual player identity is not disclosed to game providers.
• Law Enforcement: Where required by law or court order, pinasplay will disclose personal data to law enforcement agencies and other competent authorities.
• Professional Advisers: Legal, accounting, and audit professionals retained by pinasplay may access personal data under strict confidentiality obligations in the course of their professional services.

7. Cookies & Tracking Technologies

7.1 pinasplay.one uses cookies and similar tracking technologies to operate the platform, secure user sessions, and analyze usage patterns. Cookies are small text files stored on your device by your browser.

7.2 Types of Cookies Used

• Strictly Necessary Cookies: Required for session authentication, security token management, and core platform functionality. These cannot be disabled without impairing platform access.
• Performance & Analytics Cookies: Used to measure page load times, user navigation patterns, and feature usage across pinasplay.one in aggregated, anonymized form.
• Functional Cookies: Store user preferences such as language settings, display preferences, and last-visited game categories to improve your experience.
• Marketing Cookies: Used only where you have provided explicit consent. These track referral sources and support the measurement of promotional campaign effectiveness.

7.3 You may manage or withdraw cookie consent through your browser settings. Disabling certain cookie categories may limit platform functionality. Consent to non-essential cookies may be withdrawn at any time with prospective effect.

8. Data Security

8.1 pinasplay implements a comprehensive set of technical and organizational security measures to protect your personal data:

• 256-bit SSL / TLS 1.3 encryption for all data in transit between your device and pinasplay servers
• Encryption of sensitive data at rest, including KYC documents and financial records
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Multi-factor authentication required for all pinasplay administrative and data access systems
• Regular third-party security audits and penetration testing of platform infrastructure
• 24/7 automated monitoring for anomalous access patterns and data breach indicators
• Formal data breach response procedures compliant with NPC notification requirements

8.2 While pinasplay employs industry-standard security measures, no online platform can guarantee absolute security. You are responsible for maintaining the security of your pinasplay login credentials. Do not share your password with any person, including pinasplay support staff — pinasplay will never ask for your full password.

9. Data Retention

9.1 pinasplay retains personal data for the periods described below, after which data is securely deleted or anonymized:

• Account & KYC Data: Retained for the duration of your active pinasplay account plus five (5) years following account closure, as required by PAGCOR regulations and AMLA compliance obligations.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction in compliance with AMLA requirements.
• Gaming Activity Logs: Gaming session data is retained for three (3) years from the date of the session for regulatory reporting and dispute resolution purposes.
• Support Communications: Customer support records are retained for two (2) years from the date of the last interaction.
• Marketing Data: Where consent has been withdrawn, marketing-related data is deleted within 30 days of consent withdrawal.

10. Your Rights Under the Data Privacy Act

10.1 As a data subject under Republic Act 10173, you have the following rights in respect of your personal data held by pinasplay. To exercise any of these rights, contact pinasplay's Data Protection Officer at the address in Section 13.

10.2 pinasplay will respond to all data rights requests within fifteen (15) business days of receipt. Where a request cannot be fulfilled within this period, pinasplay will provide an interim response with an estimated completion date.

10.3 If you are dissatisfied with pinasplay's response to a data rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

11. Children & Minors

11.1 pinasplay is strictly a 21+ platform. pinasplay does not knowingly collect personal data from any person under 21 years of age. Age verification is performed during the registration process as a mandatory PAGCOR compliance requirement.

11.2 If pinasplay discovers that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all associated data will be deleted as required by law, and any funds deposited will be returned through the original payment method following verification.

11.3 If you believe that a minor has registered a pinasplay account, please contact pinasplay support immediately at the contact details in Section 13.

12. Changes to This Policy

12.1 pinasplay may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or regulatory guidance from PAGCOR or the National Privacy Commission.

12.2 Material changes to this Policy will be notified to registered pinasplay players via the email address on file at least 14 days before the changes take effect. The revised Policy will also be published at pinasplay.one/privacy-policy.

12.3 Your continued use of pinasplay following the effective date of a revised Policy constitutes your acknowledgment of the updated terms. If you do not agree to the revised Policy, you must discontinue use of pinasplay and may request account closure.

13. Contact & Data Protection Officer

13.1 pinasplay has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection law.

13.2 To exercise your data rights, submit a privacy complaint, or raise any concern about how pinasplay handles your personal data, please contact the pinasplay Data Protection Officer through pinasplay's customer support channels available at pinasplay.one, or by email at the address displayed in the footer of this page.

13.3 All formal privacy complaints will be acknowledged within 24 hours and resolved within 15 business days. If a matter requires escalation to the National Privacy Commission, pinasplay will cooperate fully with any resulting investigation.

13.4 Effective Date: This Privacy Policy is effective as of June 2026 and supersedes all previously published versions of the pinasplay Privacy Policy.