pilslot Privacy Policy

pilslot ("pilslot," "we," "us," "our") is committed to protecting the personal data of every individual who interacts with our platform — whether as a registered player, a visitor to pilslot.org, or a person who contacts our support team. This Privacy Policy ("Policy") sets out how pilslot collects, uses, stores, shares, and protects your personal data, and what rights you hold as a data subject under applicable Philippine law.

This Policy applies to all personal data processed by pilslot in connection with the operation of the pilslot online gaming platform at pilslot.org, including all sub-pages, account management systems, payment processing flows, customer support channels, and marketing communications issued by pilslot.

By registering a pilslot account, accessing the pilslot platform, or otherwise providing your personal data to pilslot, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of the pilslot platform and contact us to close your account.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its implementing rules and regulations, pilslot is the personal information controller ("PIC") in respect of the personal data collected from players and platform visitors through pilslot.org.

pilslot's designated Data Protection Officer ("DPO") is responsible for overseeing pilslot's compliance with RA 10173 and the regulations of the National Privacy Commission ("NPC"). The DPO can be contacted via the support email address published in Section 16 of this Policy, with the subject line "Data Protection Officer – Privacy Inquiry."

pilslot operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation ("PAGCOR"). Certain data collection and reporting obligations imposed on pilslot arise from PAGCOR's licensing conditions and cannot be waived by individual data subject consent.

3.1 Registration and Account Data

When you create a pilslot account, we collect: your full legal name, date of birth, email address, mobile number, and residential address. This data is required to create and maintain your account. You cannot register without providing this information.

3.2 Identity Verification (KYC) Data

In compliance with PAGCOR licensing requirements and Philippine anti-money-laundering regulations, pilslot collects copies of government-issued identity documents and proof of address as part of its Know Your Customer process. Accepted Philippine IDs include the PhilSys National ID, passport, UMID, driver's license, SSS ID, PRC license, and voter's ID. Document images are stored securely and accessed only by pilslot's compliance team and, where legally required, by regulators.

3.3 Financial Transaction Data

We collect records of all deposits and withdrawals made through your pilslot account, including transaction amounts, timestamps, payment method identifiers (GCash reference numbers, Maya transaction IDs, bank account details as applicable), and transaction status. We do not store full card numbers for card-based payment methods; these are tokenised by the relevant payment processor.

3.4 Gameplay and Betting Data

pilslot records all wagering activity conducted through your account: game sessions, bet amounts, game outcomes, win and loss records, and session durations. This data is required for account integrity, dispute resolution, responsible gaming monitoring, and regulatory audit purposes.

3.5 Technical and Device Data

When you access pilslot, our systems automatically collect certain technical information: your IP address, browser type and version, operating system, device type and model, screen resolution, time zone, language preference, and pages visited within the pilslot platform. This data is collected for security monitoring, fraud prevention, and platform optimisation purposes.

3.6 Communications Data

We retain records of communications between you and pilslot's support team, including live chat transcripts, email correspondence, and any complaints or feedback submitted. These records are retained for quality assurance, training, dispute resolution, and regulatory compliance purposes.

3.7 Marketing Preference Data

Where you have consented to receive marketing communications, we record that consent and your expressed preferences (e.g., preferred communication channel, types of promotions of interest). Withdrawal of marketing consent is recorded alongside the original consent record.

pilslot collects your personal data through the following channels:

• Directly from you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact support, respond to a promotion, or update your account settings.
• Automatically through platform use: Technical and device data is collected automatically when you access pilslot.org, through server logs, cookies, and similar tracking technologies described in Section 10 of this Policy.
• From payment processors: When you initiate a deposit or withdrawal, pilslot receives transaction confirmation data from GCash, Maya, BPI, BDO, Coins.ph, or the relevant payment provider. pilslot receives only the data necessary to confirm the transaction; full financial account credentials remain with the payment provider.
• From identity verification services: pilslot may use third-party identity verification services to assist with KYC document authentication. These services process document images on pilslot's behalf and return a verification result. They do not retain your document data independently beyond the period required to perform the service.
• From regulatory and law enforcement sources: In certain circumstances, pilslot may receive data about you from PAGCOR, the Anti-Money Laundering Council (AMLC), or law enforcement agencies in connection with compliance investigations. Such data is processed strictly in accordance with applicable law.

pilslot processes your personal data only for specific, declared purposes. The principal purposes are:

• Account creation and management: To register your account, maintain it, process account settings changes, and manage your player relationship with pilslot.
• Identity and age verification: To verify that you are who you say you are, that you meet the 21+ age requirement, and that your account information is accurate — as required by PAGCOR and Philippine AML regulations.
• Transaction processing: To receive deposits, credit winnings, and process withdrawal requests through your selected payment method in Philippine Peso.
• Gameplay delivery and integrity: To provide access to games, record game outcomes, maintain accurate account balances, and detect and prevent cheating, collusion, or game manipulation.
• Fraud prevention and security: To detect unauthorised access, fraudulent transactions, money laundering activity, and other prohibited conduct as described in pilslot's Terms and Conditions.
• Regulatory compliance: To meet pilslot's obligations under PAGCOR's licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), RA 10173, and other applicable Philippine law.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling, enforce player-set limits, manage self-exclusion requests, and comply with PAGCOR's responsible gaming framework.
• Customer support: To investigate and resolve account queries, technical issues, payment disputes, and formal complaints.
• Platform improvement: To analyse aggregated and pseudonymised usage data for the purpose of improving pilslot's platform performance, game selection, and user experience.
• Marketing communications: To send promotional offers, new game announcements, and bonus notifications to players who have provided consent, in accordance with Section 14 of this Policy.

pilslot does not process your personal data for any purpose that is incompatible with those listed above without first seeking your consent or establishing a separate lawful basis.

Under RA 10173, pilslot processes personal data on the following legal bases:

• Contractual necessity: Processing of registration data, KYC data, transaction data, and gameplay data is necessary for the performance of the player agreement between you and pilslot. Without this processing, pilslot cannot provide its services.
• Legal obligation: Processing related to AML compliance, PAGCOR regulatory reporting, and age verification is required by Philippine law and cannot be waived by player consent.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform analytics, and dispute resolution is carried out on the basis of pilslot's legitimate interest in operating a secure, fair, and commercially viable gaming platform, balanced against your rights and interests as a data subject.
• Consent: Processing for marketing communications and any optional data processing activities is conducted solely on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

pilslot does not sell your personal data to third parties for their own commercial purposes. We share your data only in the following circumstances:

7.1 Service Providers (Personal Information Processors)

pilslot engages third-party service providers who process personal data on our behalf. These include: payment processors (GCash / GXI, Maya / Voyager Innovations, BPI, BDO, and others); identity verification service providers; cloud infrastructure and hosting providers; customer support platform providers; and email and SMS communication providers. All service providers are bound by data processing agreements requiring them to process your data only as instructed by pilslot and to implement appropriate security measures.

7.2 Regulatory and Law Enforcement Authorities

pilslot is required by Philippine law to share certain data with PAGCOR, the Anti-Money Laundering Council, the National Privacy Commission, and other competent government authorities upon lawful request or as part of pilslot's mandatory reporting obligations. pilslot cannot waive these obligations on behalf of individual players.

7.3 Game Content Providers

Game studios whose titles are hosted on the pilslot platform may receive limited technical data (e.g., session identifiers, bet amounts) to deliver the game experience. Applicable data sharing arrangements with game studios are governed by data processing agreements or data sharing agreements consistent with RA 10173 requirements.

7.4 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of pilslot's business, player data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any change in data controller identity prior to the transfer taking effect, to the extent practicable under applicable law.

pilslot retains your personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods mandated by Philippine law and PAGCOR regulations:

• Account and KYC data: Retained for a minimum of 5 years following account closure, in accordance with the Anti-Money Laundering Act's record-keeping requirements.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction, consistent with BSP and AMLC record-keeping obligations.
• Gameplay and betting records: Retained for a minimum of 3 years from the date of the game session, for dispute resolution and regulatory audit purposes.
• Support communications: Retained for a minimum of 2 years from the date of the communication, for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of the consent and for 1 year following withdrawal, to demonstrate compliance with consent obligations.

On expiry of the applicable retention period, personal data will be securely deleted or anonymised. Data that has been fully anonymised in a manner that cannot be reversed does not constitute personal data under RA 10173 and may be retained indefinitely for analytical purposes.

pilslot implements appropriate technical and organisational security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Specific measures include:

• Encryption in transit: All data transmitted between your device and pilslot's servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to login, registration, payment, and all other interactions with the platform.
• Encryption at rest: Sensitive data stored in pilslot's systems — including passwords (stored as salted cryptographic hashes, never in plaintext), KYC documents, and financial identifiers — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within pilslot's systems is restricted to staff members who need it to perform their job functions. Role-based access controls are enforced, and access logs are maintained and reviewed regularly.
• Security monitoring: pilslot operates continuous security monitoring for anomalous access patterns, potential intrusions, and suspicious account activity. Security incidents are investigated by pilslot's security team within defined response timeframes.
• Data breach response: In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of data subjects, pilslot will notify the NPC within 72 hours of becoming aware of the breach, and will notify affected individuals as required by RA 10173 and NPC Circular No. 16-03.
• Vendor security: All third-party service providers who process pilslot player data are assessed for security standards and are required to maintain security measures consistent with or exceeding pilslot's own standards under the terms of their data processing agreements.

While pilslot takes security seriously, no internet-based system can guarantee absolute security. You are responsible for maintaining the security of your own pilslot login credentials and for notifying pilslot promptly if you suspect any unauthorised access to your account.

pilslot uses cookies and similar tracking technologies (such as web beacons and local storage) on pilslot.org. Cookies are small data files stored on your device that help the platform remember your preferences and activity.

10.1 Strictly Necessary Cookies

These cookies are essential for the operation of the pilslot platform and cannot be disabled without affecting core platform functionality. They include session authentication cookies, security tokens, and cookies that enforce your responsible gaming settings (e.g., session time limits). No consent is required for strictly necessary cookies under RA 10173, as they are necessary for the performance of the service you have requested.

10.2 Functional Cookies

Functional cookies remember your preferences — language settings, last-visited game category, and similar personalisation choices. Disabling these cookies will not prevent you from using pilslot but will mean your preferences are not remembered between sessions.

10.3 Analytics Cookies

Analytics cookies collect pseudonymised information about how players use the pilslot platform — which pages are visited most frequently, how long sessions last, and where navigation errors occur. This data is aggregated and used to improve platform performance and user experience. pilslot uses this data internally and does not share individual analytics profiles with third parties for advertising purposes.

10.4 Managing Cookies

You can control and delete cookies through your browser settings. Note that disabling cookies may affect the functionality of the pilslot platform, including your ability to log in and maintain a session. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by pilslot:

• Right to Access: You have the right to request a copy of the personal data pilslot holds about you and information about how it is being processed.
• Right to Correction: You have the right to have inaccurate or incomplete personal data corrected. For basic account data, corrections can be made directly through your account settings. For KYC data corrections, contact pilslot's support team.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent (where consent was the processing basis). Note that this right is subject to legal retention obligations — pilslot cannot delete data it is required by law to retain.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests. Where you object, pilslot will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims.
• Right to Data Portability: Where technically feasible, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller.
• Right to Block: You have the right to suspend or withhold consent to pilslot's use of your personal data where you dispute its accuracy or the lawfulness of its processing, while the dispute is resolved.

Some of pilslot's service providers — particularly cloud infrastructure providers and game studio partners — operate servers or have personnel located outside the Philippines. Where personal data is transferred to a jurisdiction outside the Philippines, pilslot takes steps to ensure that the transfer is lawful and that the data continues to receive an appropriate level of protection, consistent with RA 10173 and NPC requirements for cross-border data flows.

These steps may include entering into NPC-standard contractual clauses with the receiving entity, assessing the adequacy of the receiving country's data protection framework, or obtaining your consent where required for specific transfers. pilslot maintains a record of cross-border data transfers and the safeguards applied to each.

By using the pilslot platform, you acknowledge that your data may be processed by service providers outside the Philippines, subject to the safeguards described above. If you would like more information about the specific cross-border transfers applicable to your data, please contact our DPO.

pilslot may send you promotional communications — including bonus offers, new game announcements, tournament invitations, and platform news — by email and SMS, but only where you have given your prior consent to receive such communications. Consent to marketing is optional and is not a condition of using the pilslot platform.

You may withdraw your consent to marketing communications at any time by: (a) clicking the unsubscribe link included in every marketing email; (b) updating your communication preferences in your pilslot account settings; or (c) contacting pilslot support directly. Marketing communications will cease within 5 business days of receipt of your withdrawal request.

Please note that withdrawing marketing consent does not affect transactional communications that pilslot is required or entitled to send you as part of your account service — such as deposit confirmations, withdrawal notifications, security alerts, KYC requests, and account activity notifications. These are not marketing communications and will continue regardless of your marketing preference settings.

pilslot reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, pilslot's business operations, or data processing practices. The revised Policy will be published at pilslot.org/privacy-policy with an updated effective date.

Where a material change is made to this Policy — meaning a change that substantially affects your rights as a data subject or pilslot's data processing practices in a manner adverse to you — pilslot will notify registered players via the email address on record at least 14 days before the change takes effect, where practicable. For non-material changes (e.g., clarifications, formatting updates, corrections of typographic errors), publication of the revised Policy constitutes sufficient notice.

Your continued use of the pilslot platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree to the revised Policy, please cease using the platform and request account closure.

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about pilslot's data processing practices, please contact pilslot's Data Protection Officer:

If you are not satisfied with pilslot's response to your privacy complaint or data rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC is the independent regulatory body responsible for administering RA 10173 and can be reached through the NPC's official government website and complaint channels. pilslot cooperates fully with NPC investigations as required by law.

This Privacy Policy was last reviewed and updated on 1 January 2026. This document supersedes all previous versions of the pilslot Privacy Policy. In the event of any inconsistency between a translated version and the English version, the English version shall prevail.