pilslot Privacy Policy

1. Introduction

This Privacy Policy (the "Policy") is issued by pilslot (hereinafter "pilslot," "we," "us," or "our"), the operator of the online gaming platform accessible at pilslot.vip (the "Platform"). This Policy explains how pilslot collects, processes, stores, shares, and protects the personal information of individuals who access or use the Platform, including registered account holders, prospective players, and visitors to the Website.

pilslot operates in the Philippines and processes personal data in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, the directives of the National Privacy Commission (NPC), and applicable PAGCOR regulations governing online gaming data handling.

By registering a pilslot account, placing a bet, or using any service on the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside pilslot's Terms & Conditions and Responsible Gaming Policy.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and applicable Philippine data protection regulations, pilslot is the Data Controller responsible for the personal data of its account holders and Website visitors. pilslot determines the purposes and means of processing personal data collected through the Platform.

Where pilslot engages third-party service providers to process personal data on its behalf (e.g., payment processors, KYC verification providers, game software providers), those parties act as Data Processors and are bound by contractual obligations to process data only on pilslot's documented instructions and to implement appropriate technical and organisational security measures.

3. Personal Data We Collect

3.1 Registration Data

When you create a pilslot account, we collect:

• Full legal name (as it appears on your government-issued ID);
• Date of birth (for age verification — must be 21 years or older);
• Residential address in the Philippines;
• Philippine mobile number (used as primary account identifier);
• Email address (optional, but required for certain notifications);
• Username and hashed password.

3.2 Identity Verification (KYC) Data

Before processing withdrawals, pilslot is required by PAGCOR regulations and anti-money laundering law to verify your identity. KYC data collected includes:

• Scanned copy or photograph of a valid Philippine government-issued photo ID (e.g., PhilSys National ID, passport, driver's license, SSS card, UMID, or PRC ID);
• A selfie or liveness check photograph for identity matching purposes;
• Proof of address (e.g., utility bill, bank statement) where required;
• Source of funds documentation where required by anti-money laundering regulations.

3.3 Financial Data

To process deposits and withdrawals in Philippine Peso, pilslot collects and processes:

• GCash mobile number and transaction reference numbers;
• PayMaya account details and transaction references;
• Bank account details (account name, account number, bank name) for BPI, BDO, and Metrobank withdrawals;
• Transaction history (deposits, withdrawals, wagers, winnings) within your pilslot account.

pilslot does not store full debit or credit card numbers. Card transactions are processed by PCI-DSS certified third-party payment processors. pilslot receives only a transaction token and the last four digits for reference purposes.

3.4 Gameplay and Activity Data

• Game session data (titles played, bets placed, outcomes, session duration);
• Sports betting selections, odds, and results;
• Bonus and promotion interactions;
• Support interactions (chat transcripts, support tickets).

3.5 Technical and Device Data

• IP address and approximate geographic location;
• Device type, operating system, and browser type;
• Session timestamps and login history;
• Cookies and similar tracking technologies (see Section 10).

4. How We Collect Your Data

pilslot collects personal data through the following channels:

• Direct collection: Information you provide when registering, completing KYC, making deposits or withdrawals, contacting support, or participating in promotions;
• Automatic collection: Technical data collected automatically when you access the Platform, including IP addresses, device identifiers, and cookies;
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance databases; payment confirmation data from GCash, PayMaya, and banking partners.

5. How We Use Your Personal Data

pilslot uses the personal data it collects for the following purposes:

• Account management: Creating and maintaining your pilslot account, processing your login, and providing account-related notifications;
• Identity verification: Completing KYC checks as required by PAGCOR and Philippine anti-money laundering laws;
• Payment processing: Processing deposits and withdrawals in Philippine Peso via GCash, PayMaya, and Philippine banks;
• Platform services: Delivering the games, betting markets, live casino streams, and other services you access through the Platform;
• Legal and regulatory compliance: Meeting our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012;
• Fraud prevention and security: Detecting and preventing fraudulent activity, account takeovers, bonus abuse, and money laundering;
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and, where appropriate, applying account restrictions in accordance with our Responsible Gaming Policy;
• Customer support: Responding to your queries, complaints, and support requests;
• Personalisation: Tailoring game recommendations, promotions, and VIP programme communications to your preferences, subject to your marketing consent;
• Platform improvement: Analysing aggregated, anonymised usage data to improve the pilslot Platform, fix technical issues, and develop new features.

6. Legal Basis for Processing

pilslot processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract between pilslot and the Player (account services, payment processing, game delivery);
• Legal obligation: Processing required to comply with PAGCOR regulations, AMLA obligations, tax reporting, and NPC data protection requirements;
• Legitimate interests: Fraud prevention, security monitoring, and responsible gaming monitoring where these interests are not overridden by your privacy rights;
• Consent: Marketing communications and optional personalisation features, where your explicit consent has been obtained and may be withdrawn at any time.

7. Data Sharing and Disclosure

pilslot does not sell your personal data. We may share your personal data with the following categories of third parties strictly for the purposes described in this Policy:

• Payment processors: GCash (GXI Corp.), PayMaya (Voyager Innovations), and Philippine banking partners for transaction processing;
• KYC and identity verification providers: Third-party identity verification platforms contracted by pilslot for PAGCOR-compliant KYC checks;
• Game software providers: Licensed game studios (e.g., JILI, PG Soft, Pragmatic Play) who may process session data as part of RNG certification and game auditing;
• Fraud and AML compliance providers: Screening services used to detect money laundering, fraud, and sanctioned individuals;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government bodies as required by law;
• Legal and professional advisers: Lawyers, auditors, and other professional advisers acting under obligations of confidentiality.

8. International Data Transfers

Some of pilslot's game software providers and technology partners are based outside the Philippines. Where personal data (typically limited to gameplay session data and device identifiers) is transferred to servers or processors outside the Philippines, pilslot ensures that such transfers are covered by appropriate contractual safeguards consistent with the requirements of the Data Privacy Act of 2012 and NPC guidance on cross-border data transfers.

Financial data, KYC documents, and Philippine mobile numbers are processed on infrastructure based in the Philippines or in jurisdictions with adequate data protection standards as recognised by the NPC.

9. Data Retention

pilslot retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law and PAGCOR regulations:

• Account and KYC records: Minimum 5 years from the date of account closure, as required by AMLA regulations;
• Transaction records: Minimum 5 years from the date of each transaction;
• Support interaction records: 2 years from the date of the interaction;
• Marketing consent records: Duration of consent plus 1 year following withdrawal;
• Technical and device logs: Up to 12 months for security monitoring purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

10. Cookies and Tracking Technologies

The pilslot Platform uses cookies and similar tracking technologies to operate and improve the service. The following categories of cookies are used:

• Strictly necessary cookies: Required for core Platform functions including login session management, security, and payment flow. These cannot be disabled without breaking the Platform;
• Functional cookies: Remember your preferences (e.g., language, game lobby layout) to improve your experience;
• Analytics cookies: Anonymised data on how players navigate the Platform, used to identify and fix usability issues. No personal data is shared with analytics providers;
• Security cookies: Used to detect unusual login patterns and prevent account takeover fraud.

pilslot does not use third-party advertising or behavioural tracking cookies. You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or prevent use of the Platform.

11. Your Data Rights

Under the Data Privacy Act of 2012, pilslot account holders and Website visitors have the following rights in respect of their personal data:

• Right to be informed: The right to know what personal data pilslot collects and how it is used — as set out in this Policy;
• Right of access: The right to request a copy of the personal data pilslot holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to retention obligations under PAGCOR regulations and AMLA;
• Right to data portability: The right to receive your personal data in a structured, commonly used format;
• Right to object: The right to object to processing based on legitimate interests, including profiling for marketing purposes;
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), the right to withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact pilslot's Data Protection Officer via the support email below. pilslot will respond to verified requests within thirty (30) calendar days, as required by the Data Privacy Act of 2012.

12. Children's Privacy

The pilslot Platform is strictly restricted to individuals who are 21 years of age or older in accordance with PAGCOR regulations. pilslot does not knowingly collect personal data from anyone under 21 years of age. Any account found to have been opened by a person under 21 will be immediately closed and all data associated with that account will be deleted, except where retention is required for regulatory reporting purposes.

If you believe that a minor has registered a pilslot account or submitted personal data to the Platform, please contact pilslot support immediately so that the account can be investigated and closed.

13. Data Security

pilslot implements technical and organisational security measures proportionate to the sensitivity of the personal data processed. These include:

• 256-bit TLS/SSL encryption for all data in transit;
• AES-256 encryption for sensitive data at rest (KYC documents, financial data);
• bcrypt password hashing with unique per-user salts;
• Two-factor authentication (SMS OTP) available for all account holders;
• Access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing;
• Incident response procedures aligned with NPC notification requirements.

In the event of a personal data breach that is likely to pose a real risk to the rights and freedoms of affected individuals, pilslot will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach and will notify affected individuals without undue delay.

14. Third-Party Links

The pilslot Platform may contain links to third-party websites (e.g., game provider information pages) that are not operated or controlled by pilslot. This Privacy Policy applies solely to the pilslot Platform. pilslot is not responsible for the privacy practices or content of any third-party websites. Players are encouraged to review the privacy policies of any external websites they visit.

15. Changes to This Policy

pilslot reserves the right to update this Privacy Policy at any time. Where changes are material, pilslot will notify active account holders via their registered mobile number or email address, or by displaying a prominent notice on the Platform at least fourteen (14) days before the changes take effect.

The current version of this Policy is always available at pilslot.vip/privacy-policy. Continued use of the Platform after the effective date of any update constitutes acceptance of the revised Policy.

16. Contact — Data Protection Officer

For data privacy queries, rights requests, or complaints relating to pilslot's processing of your personal data, please contact:

If you are not satisfied with pilslot's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for the Data Privacy Act of 2012.