Privacy Policy

1. Data Controller

90piso ("we", "us", "our") is the data controller responsible for the personal data processed through the 90piso platform at 90piso.net. As data controller, 90piso determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in compliance with the Philippine Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations, and any applicable issuances of the National Privacy Commission (NPC).

By registering for a 90piso account or using the 90piso platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2. Data We Collect

2.1 Registration Data

When you create a 90piso account, we collect the following information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Philippine mobile number (used as your primary account identifier and for OTP authentication)
• Email address (for transactional notifications and account recovery)
• Home address (for KYC and AML compliance purposes)

2.2 Identity Verification (KYC) Data

To comply with our obligations under the Anti-Money Laundering Act (AMLA) and PAGCOR requirements, we collect copies of valid Philippine government-issued identification documents, which may include your passport, UMID, driver's license, SSS/GSIS ID, PhilSys National ID, or voter's ID. In certain cases we may also collect a selfie photograph for liveness verification purposes.

2.3 Financial Transaction Data

We collect information relating to all deposits, withdrawals, and bonus transactions processed through your 90piso account. This includes GCash account references, Maya account references, bank account numbers, transaction amounts in Philippine Peso (₱), transaction timestamps, and payment method identifiers. We do not store full bank card numbers or full e-wallet PINs.

2.4 Gaming Activity Data

We maintain a complete log of your gaming activity on the 90piso platform, including games played, wager amounts, win/loss outcomes, session duration, and game provider identifiers. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting.

2.5 Technical and Device Data

We automatically collect certain technical data when you access the 90piso platform, including:

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session tokens and authentication logs
• Pages visited and features used within the platform
• Error logs and crash reports

2.6 Communications Data

If you contact 90piso customer support via live chat, SMS, or email, we retain records of those communications, including the content of your messages and the date and time of each interaction. These records are used for quality assurance, dispute resolution, and staff training purposes.

3. How We Use Your Data

90piso processes your personal data for the following purposes:

Purpose	Data Used
Account creation and management	Registration data, mobile number, email
Age and identity verification (KYC)	ID documents, date of birth, selfie
Processing deposits and withdrawals	Financial transaction data, KYC data
Anti-money laundering (AML) compliance	Financial data, KYC data, gaming activity
Fraud prevention and security	Technical data, gaming activity, IP address
Responsible gaming monitoring	Gaming activity, session data
Customer support	Communications data, account data
Platform improvement	Technical data, usage analytics (aggregated)
Regulatory reporting to PAGCOR / NPC	As required by applicable regulation
Marketing communications (opt-in only)	Mobile number, email, gaming preferences

90piso does not use your personal data to make fully automated decisions that have significant legal or financial effects on you without human oversight.

4. Legal Basis for Processing

90piso processes your personal data on the following legal bases under RA 10173:

• Contractual necessity: Processing required to fulfil the 90piso Terms & Conditions, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable Philippine law, including AMLA, PAGCOR regulatory obligations, and NPC directives.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and product improvement, where such interests do not override your rights.
• Consent: Processing for optional marketing communications, non-essential cookies, and analytics. You may withdraw consent at any time.

5. Data Sharing & Third Parties

5.1 Service Providers

90piso shares personal data with carefully selected third-party service providers who assist in operating the platform. These providers are contractually bound to process your data only on 90piso's instructions and to maintain equivalent data protection standards. Categories of providers include:

• KYC and identity verification technology providers
• Payment processing partners (GCash, Maya, bank partners)
• Game content suppliers (Pragmatic Play, JILI, PG Soft, and others)
• Cloud hosting and infrastructure providers
• Customer support platform providers
• Fraud detection and security analytics providers

5.2 Regulatory Authorities

90piso may be required to disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government authorities where required by law, court order, or regulatory directive.

5.3 No Sale of Data

90piso does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes under any circumstances.

6. Cookies & Tracking Technologies

The 90piso platform uses cookies and similar tracking technologies to operate and improve the service. Cookies are small text files stored on your device.

6.1 Essential Cookies

These cookies are necessary for the platform to function and cannot be disabled. They include session authentication tokens, security identifiers, and preference settings. No consent is required for essential cookies as they are strictly necessary for service delivery.

6.2 Analytics Cookies (Opt-In)

With your consent, 90piso uses analytics cookies to understand how players navigate and use the platform, enabling us to improve the user experience. This data is processed in aggregated, anonymised form wherever possible.

6.3 Managing Cookies

You can control and delete cookies through your browser settings. Disabling essential cookies will impair or prevent your ability to log in and use the 90piso platform. Disabling analytics cookies will not affect your gaming experience.

7. Data Security

90piso implements a multi-layered security framework to protect your personal data, including:

• Encryption in transit: All data transmitted between your device and 90piso servers is protected by 256-bit SSL/TLS encryption.
• Encryption at rest: Sensitive personal data fields, including KYC document copies and payment references, are encrypted at the database level.
• Access controls: Internal access to personal data is restricted on a need-to-know basis. All staff with data access undergo background screening and regular security training.
• OTP authentication: Account logins from new devices require SMS one-time PIN verification sent to your registered Philippine mobile number.
• Intrusion detection: Continuous automated monitoring of platform traffic for anomalous patterns consistent with unauthorized access or data exfiltration.

No security system is impenetrable. In the event of a data breach that poses a real risk to your rights and freedoms, 90piso will notify affected users and the NPC within 72 hours of becoming aware of the breach, as required by NPC Circular 16-03.

8. Data Retention

90piso retains personal data for as long as your account is active and for a period thereafter as required by applicable law:

• Active account data: Retained for the duration of your active 90piso account.
• KYC and financial records: Retained for a minimum of five (5) years following account closure, as required by the AMLA and PAGCOR regulations.
• Gaming activity logs: Retained for a minimum of three (3) years.
• Customer support records: Retained for two (2) years from the date of each interaction.
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter for compliance documentation.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised.

9. Your Rights Under RA 10173

As a data subject under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by 90piso:

• Right to be informed: The right to know what personal data we collect and how it is used — which this Privacy Policy fulfils.
• Right of access: The right to obtain a copy of the personal data we hold about you.
• Right to rectification: The right to correct inaccurate or incomplete personal data in your account.
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations.
• Right to object: The right to object to processing based on legitimate interests, including direct marketing.
• Right to data portability: The right to receive your personal data in a structured, commonly used format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of the above rights, please contact the 90piso Data Protection Officer at [email protected] with the subject line "Data Privacy Request". We will respond within fifteen (15) business days.

10. Children's Privacy

The 90piso platform is strictly for adults aged 21 years and older in accordance with PAGCOR regulations. 90piso does not knowingly collect personal data from persons under 21 years of age. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete such data and close the associated account. Parents or guardians who believe a minor may have registered with 90piso should contact support immediately.

11. Cross-Border Data Transfers

Certain service providers engaged by 90piso (including cloud hosting infrastructure and game content suppliers) may process data in jurisdictions outside the Philippines. Where such transfers occur, 90piso ensures that appropriate safeguards are in place — including contractual data processing agreements that impose data protection standards equivalent to those required by RA 10173 — to protect your personal data during and after the transfer, consistent with NPC guidance on cross-border data transfers.

12. Changes to This Privacy Policy

90piso may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. Material changes will be communicated to registered users via SMS or in-platform notification at least seven (7) days before the changes take effect. The "Last updated" date at the top of this page will be revised accordingly. Your continued use of the 90piso platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy.

13. Contact & Data Protection Officer

For questions, concerns, or requests relating to this Privacy Policy or your personal data rights, please contact the 90piso Data Protection Officer:

• Email: [email protected] (subject: "Data Privacy Request")
• Live Chat: Available 24/7 from within your 90piso account dashboard

If you are not satisfied with our response, you have the right to escalate your concern to the National Privacy Commission (NPC) of the Philippines.