This Privacy Policy explains how pisotaya collects, uses, stores, shares, and protects your personal information when you register, play games, and transact on the pisotaya platform. We take your privacy seriously — especially in a digital environment where your financial and identity data is entrusted to us.
Last Updated: January 1, 2026Our core privacy commitments — full details are in the policy document below.
All personal data transmitted to and from pisotaya is encrypted using industry-standard 256-bit SSL/TLS technology. Your login credentials, payment details, and KYC documents are protected in transit at all times.
pisotaya processes personal data in compliance with Republic Act No. 10173 — the Data Privacy Act of 2012 — and the regulations issued by the National Privacy Commission (NPC) of the Philippines.
pisotaya does not sell, rent, or trade your personal information to third parties for their independent marketing or commercial purposes. Your data is used solely for platform operations, compliance, and service improvement.
Data collected by pisotaya is used only for the specific purposes stated in this Privacy Policy. We do not repurpose your personal information for unrelated activities without seeking your explicit consent where required by applicable law.
As a Filipino data subject, you have legally protected rights over your personal information — including rights to access, correction, erasure, and data portability. pisotaya provides clear channels to exercise each of these rights.
Personal and financial data is stored on secure, access-controlled servers with restricted administrative access. KYC documents and identity records are stored using encryption at rest with multi-layer access controls.
pisotaya operates pisotaya.app — an online casino and sports betting platform designed for Filipino players across the Philippines, including Metro Manila, Cebu, Davao, Quezon City, and players nationwide. As a platform that processes financial transactions and handles government-issued identity documents for KYC verification, pisotaya recognizes that data privacy is not an administrative formality but a fundamental obligation to our players.
This Privacy Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and the implementing rules and regulations issued by the National Privacy Commission. It describes in clear, practical terms what personal information we collect from pisotaya players and visitors, why we collect it, how we use and store it, who we may share it with, and how you can exercise your rights as a data subject under Philippine law.
This Privacy Policy applies to all personal data collected through the pisotaya website at pisotaya.app, through the pisotaya mobile experience, through our customer support channels, and through any communication between you and pisotaya by any means. It does not apply to third-party websites, applications, or services linked from our platform — those entities operate under their own separate privacy policies.
2.1 pisotaya is the data controller responsible for personal information processed through the pisotaya platform. As data controller, pisotaya determines the purposes for which and the means by which personal data is processed, and bears the obligations imposed on data controllers under the Data Privacy Act of 2012.
2.2 pisotaya has designated a Data Protection Officer (DPO) responsible for overseeing compliance with applicable data privacy laws and for handling data subject rights requests, privacy inquiries, and complaints. The pisotaya DPO may be contacted through our support channels listed in Section 15 of this Privacy Policy.
2.3 pisotaya operates within the regulatory framework applicable to online gaming in the Philippines. Personal data processing conducted by pisotaya in connection with anti-money laundering compliance, age and identity verification, and tax reporting obligations is carried out pursuant to legal requirements that may exist independently of this Privacy Policy.
3.1 pisotaya collects personal data through several distinct channels and for specific operational purposes. The categories of personal data we collect are as follows:
When you create a pisotaya account, we collect: your full legal name, date of birth, residential address in the Philippines, Philippine mobile number, email address, and the password you create. You may also voluntarily provide a referral code if applicable.
To comply with legal obligations and verify your eligibility to hold a pisotaya account, we collect copies of Philippine government-issued identity documents (such as UMID, Driver's License, Passport, PhilSys National ID, SSS ID, GSIS e-card, or PRC ID) and a selfie photograph taken while holding the submitted document. This constitutes sensitive personal information under the Data Privacy Act and is handled with heightened security measures.
pisotaya collects transaction records associated with your account, including deposit and withdrawal amounts, timestamps, payment method identifiers (such as registered GCash or PayMaya numbers and bank account details used for transactions), and the history of wagers placed and game outcomes. Full payment card or banking credentials are not stored by pisotaya — these are processed by our payment service providers under their respective security standards.
When you access pisotaya, we automatically collect technical information including: your IP address, browser type and version, device type and operating system, device identifiers, screen resolution, session duration, pages accessed and navigation path, and error logs. This data is used to operate and improve the platform and to detect security threats and prohibited conduct.
pisotaya retains records of communications between you and our support team, including live chat transcripts, email correspondence, and any attachments or documents shared in the course of a support interaction. These records are used for quality assurance, dispute resolution, and compliance documentation.
Where you use responsible gaming tools — such as deposit limits, session timers, or self-exclusion — pisotaya records the tool activated, the settings applied, and the effective dates of any restrictions. This data is used to enforce the restrictions you have requested and, where applicable, to fulfill legal obligations in connection with self-exclusion programs.
| Data Category | Examples | Classification |
|---|---|---|
| Registration Data | Full name, date of birth, mobile number, email, address | Personal Information |
| KYC / Identity Data | Government ID copy, selfie photo | Sensitive Personal Information |
| Financial Data | GCash number, deposit/withdrawal records, transaction history | Personal Information |
| Technical Data | IP address, device ID, browser, session logs | Personal Information |
| Communications Data | Live chat transcripts, support emails | Personal Information |
| Responsible Gaming Data | Deposit limits set, self-exclusion requests | Personal Information |
4.1 pisotaya processes your personal data for the following specific purposes:
5.1 Under the Data Privacy Act of 2012, pisotaya processes your personal information on the following legal bases:
5.2 For sensitive personal information (such as government-issued identity documents), pisotaya relies on your explicit consent given at the time of KYC submission, and on legal obligation where such processing is mandated by Philippine law.
6.1 pisotaya may share your personal data with the following categories of recipients where necessary and proportionate:
6.2 Where pisotaya shares personal data with data processors, we ensure such sharing is governed by written data processing agreements that impose obligations equivalent to those under the Data Privacy Act of 2012 on the receiving party.
6.3 pisotaya does not share your personal data with other online gambling platforms, marketing brokers, data analytics companies for resale, or any entity whose primary function is the commercial monetization of personal data.
7.1 pisotaya uses cookies and similar tracking technologies to operate the platform, enhance your experience, and analyze usage patterns. The categories of cookies used on pisotaya are:
7.2 You may manage non-essential cookie preferences through your browser settings. Disabling analytics or functional cookies will not prevent you from accessing core platform features, though some personalization features may be affected.
7.3 pisotaya does not use third-party advertising cookies or behavioral tracking technologies for cross-site advertising targeting.
8.1 pisotaya retains personal data for the minimum period necessary to fulfill the purpose for which it was collected, or for such longer period as required by applicable law. The following retention periods apply:
8.2 Following the expiry of applicable retention periods, pisotaya will securely delete or anonymize personal data in accordance with industry-standard data disposal procedures. Anonymized data that no longer identifies any individual may be retained indefinitely for aggregate analytics purposes.
9.1 The technical security measures implemented by pisotaya include, without limitation:
9.2 The organizational measures implemented by pisotaya include staff data privacy training, binding confidentiality obligations in all contracts with personnel and service providers who access personal data, and a documented data breach response procedure.
9.3 In the event of a personal data breach that is likely to result in harm to affected data subjects, pisotaya will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected data subjects within a reasonable time, in accordance with the Data Privacy Act of 2012 and NPC Circular 16-03.
9.4 While pisotaya implements robust security measures, no internet-based system is completely immune to security risks. Players are encouraged to use a unique, strong password for their pisotaya account and to enable two-factor authentication to reduce the risk of unauthorized account access.
10.1 Under the Data Privacy Act of 2012, as a Filipino data subject you have the following rights with respect to your personal data held by pisotaya. These rights may be exercised by contacting pisotaya through the channels listed in Section 15:
You may request a copy of the personal data pisotaya holds about you, the purposes for which it is processed, and the categories of third parties with whom it has been shared.
You may request correction of inaccurate or incomplete personal data held about you. Corrections to KYC identity data require re-submission of supporting documents.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and no legal retention obligation applies.
You may request a copy of the personal data you provided to pisotaya in a structured, commonly used, machine-readable format where technically feasible.
You may object to processing of your personal data based on legitimate interests or for direct marketing purposes. Objection to direct marketing takes effect immediately.
If you believe pisotaya has violated your data privacy rights, you may file a complaint directly with the National Privacy Commission (NPC) of the Philippines.
11.1 pisotaya enforces the 21+ age requirement through identity document verification during the KYC process. Accounts created by individuals determined to be under 21 years of age will be immediately closed, and any deposited funds will be returned to the payment source following verification procedures.
11.2 If pisotaya becomes aware that personal data has been collected from an individual under 21 without the knowledge of a parent or guardian, pisotaya will promptly delete such data and close the associated account. If you believe pisotaya has inadvertently collected data from an underage individual, please contact us immediately through the channels listed in Section 15.
12.1 The pisotaya platform integrates third-party game software from providers including JILI Games, Pragmatic Play, PG Soft, Evolution Gaming, and others. When you launch a game provided by a third-party supplier, a session token and limited account identifiers are passed to that provider's servers to deliver the game. These providers operate as data processors for pisotaya and are bound by data processing agreements that restrict their use of your data to game delivery purposes only.
12.2 pisotaya's payment integration with GCash, PayMaya, and banking institutions involves passing necessary transaction data (amounts, account identifiers) to these payment processors. These entities operate under their own privacy policies and regulatory frameworks. pisotaya is not responsible for the data handling practices of independent payment providers once data has been transmitted to them for transaction processing.
12.3 Any links from the pisotaya platform to external websites or resources are provided for informational purposes only. pisotaya does not control and is not responsible for the content, data practices, or privacy policies of any external websites.
13.1 Some of pisotaya's service providers — including game software providers, cloud infrastructure providers, and technical support vendors — may operate servers or processing facilities located outside the Philippines. Where personal data is transferred internationally, pisotaya ensures that such transfers are conducted under contractual safeguards that provide a level of data protection equivalent to that required under the Data Privacy Act of 2012.
13.2 Game session data transmitted to international game providers is limited to the minimum necessary for game delivery — typically a pseudonymous session token and balance data — and does not include your full identity information or government ID documents.
13.3 pisotaya will not transfer sensitive personal information — including KYC identity documents — to servers located outside the Philippines without ensuring equivalent data protection safeguards are in place.
14.1 pisotaya reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. Material changes will be communicated to registered Players by email or through an in-app notice at least seven (7) days prior to the effective date of the updated policy.
14.2 The "Last Updated" date at the top of this page reflects the most recent revision. Registered Players are encouraged to review this Privacy Policy periodically. Continued use of pisotaya following notification of an update constitutes your acceptance of the revised Privacy Policy.
14.3 Where a proposed change to this Privacy Policy would result in processing of your sensitive personal information for a new purpose that requires your explicit consent, pisotaya will seek your consent before proceeding with such processing.
15.1 For privacy-related inquiries, data subject rights requests, or complaints regarding pisotaya's data handling practices, please contact us through the following channels:
15.2 If you are dissatisfied with pisotaya's response to a data privacy complaint, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcement of the Data Privacy Act of 2012. Information on filing a complaint with the NPC is available through Philippine government channels.
pisotaya handles your personal data with the security and respect it deserves. Join over a million Filipino players who trust pisotaya for their online casino experience. 21+ only, play responsibly.
21+ only. Gambling involves financial risk. Please play responsibly.