philsot Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") describes how philsot.vip ("philsot," "we," "us," or "our") collects, processes, stores, and protects personal information about users ("you," "Player," or "Data Subject") of the philsot online gaming platform accessible at https://philsot.vip, including all related games, services, and features.

philsot acts as a Personal Information Controller as defined under the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations. We are committed to responsible data handling practices and full compliance with applicable Philippine and international privacy laws.

By registering for a philsot account or using any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read in conjunction with the philsot Terms & Conditions.

2. Personal Data We Collect

philsot collects personal data through various touchpoints during your registration, use of the Platform, and interactions with our support team. The categories of personal data we may collect include:

2.1 Registration & Identity Data

• Full legal name and date of birth;
• Philippine mobile number (used as primary account identifier);
• Username and encrypted password;
• Government-issued identification document details (for KYC verification — e.g., Philippine passport, driver's licence, SSS/GSIS ID, PhilSys ID);
• Proof of address where requested;
• Selfie or live photo for identity verification purposes.

2.2 Financial & Transaction Data

• GCash mobile number and/or PayMaya account reference;
• BPI, BDO, or Metrobank account details used for deposits or withdrawals;
• Deposit and withdrawal transaction history, amounts, and timestamps;
• philsot wallet balance and transaction records.

2.3 Gaming Activity Data

• Game sessions, bet history, stakes, and outcomes;
• Bonus usage, wagering history, and promotion participation;
• Session duration, time of play, and gaming frequency patterns.

2.4 Technical & Device Data

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Cookies, session tokens, and similar tracking technologies;
• Log files, error reports, and performance data.

2.5 Communications Data

• Live chat transcripts and support ticket correspondence;
• SMS communications sent by philsot to your registered number;
• Survey responses, feedback, and voluntary communications.

3. How We Use Your Personal Data

philsot processes your personal data only for specified, legitimate purposes directly related to delivering and improving the Platform. We do not process your personal data in ways that are incompatible with the purposes set out below:

• Account Management: Creating, maintaining, verifying, and securing your philsot account;
• Service Delivery: Enabling you to play games, place bets, and use all Platform features;
• Financial Processing: Processing deposits via GCash, PayMaya, BPI, BDO, and Metrobank, and fulfilling withdrawal requests to your registered payment method;
• Regulatory Compliance: Satisfying PAGCOR licensing obligations, Anti-Money Laundering Act (AMLA) reporting requirements, and National Privacy Commission (NPC) mandates;
• Identity & Age Verification: Confirming you are at least 21 years old and are who you claim to be, in accordance with PAGCOR requirements and these Terms;
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, account abuse, multi-accounting, and money laundering;
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behaviours and applying self-imposed limits or interventions where appropriate;
• Customer Support: Responding to your queries, resolving disputes, and providing technical assistance;
• Communications: Sending account notifications, OTPs, promotional messages (where consented), and regulatory communications via SMS or in-platform messaging;
• Platform Improvement: Analysing usage data to improve game selection, interface design, and overall user experience on philsot;
• Legal Proceedings: Establishing, exercising, or defending legal claims where necessary.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules, philsot relies on the following legal grounds for processing your personal data:

• Contractual Necessity: Processing required to perform the contract between you and philsot, including account management, game delivery, and payment processing;
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AMLA obligations, NPC regulations, and other applicable Philippine legal requirements;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and business analytics — where these interests are not overridden by your fundamental rights and freedoms;
• Consent: Processing for promotional communications and non-essential cookies, where you have provided explicit consent and may withdraw that consent at any time.

5. Data Sharing & Disclosure

philsot does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. We may share your personal data with the following categories of recipients strictly as necessary:

• PAGCOR and Regulatory Authorities: philsot is required to share relevant player data with PAGCOR and other competent Philippine authorities as part of our licensing obligations, including for responsible gaming compliance and suspicious transaction reporting;
• Payment Processors: GCash (G-Xchange Inc.), PayMaya, BPI, BDO, Metrobank, and other payment service providers receive transaction data strictly necessary to process your deposits and withdrawals;
• Game Providers: JILI, Pragmatic Play, PG Soft, Fa Chai, and other licensed game developers may receive session and technical data necessary to deliver their game content on the philsot Platform;
• KYC & Identity Verification Providers: Third-party identity verification services engaged by philsot to assist with age and identity checks;
• Law Enforcement & Courts: Where required by Philippine law, court order, or valid legal process;
• Professional Advisers: Lawyers, auditors, and accountants bound by professional confidentiality obligations, where required.

All third-party recipients are contractually required to process philsot player data only for the specified purpose and in compliance with applicable data protection laws.

6. Cookies & Tracking Technologies

philsot uses cookies, session tokens, local storage, and similar technologies to operate the Platform, remember your preferences, and analyse usage patterns. The types of cookies we use include:

• Strictly Necessary Cookies: Required for the Platform to function — including login session management, security tokens, and game state preservation. These cannot be disabled without breaking core functionality.
• Performance Cookies: Collect anonymous, aggregated data about how players use philsot — which games are most popular, where errors occur, and how navigation flows. This data helps us improve the Platform.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming limit configurations.
• Marketing Cookies: Used only with your explicit consent to track promotional campaign effectiveness. You may decline these without affecting your ability to use philsot.

You may manage cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will impair your ability to log in to and use the philsot Platform.

7. Data Retention

philsot retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever is longer. Key retention periods include:

• Active Account Data: Retained for the duration of your account's active status plus five (5) years following account closure, to satisfy PAGCOR record-keeping requirements and AMLA obligations;
• Transaction Records: Retained for a minimum of seven (7) years in accordance with Philippine financial record-keeping obligations;
• KYC Documentation: Retained for five (5) years from account closure or from the date of the last transaction, whichever is later;
• Support Communications: Retained for two (2) years from the date of the communication or resolution of the matter;
• Marketing Consent Records: Retained until you withdraw consent plus one (1) year.

Upon expiry of the applicable retention period, philsot will securely delete or anonymise personal data in a manner that prevents recovery or re-identification.

8. Security Measures

philsot implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and philsot servers is encrypted using industry-standard Transport Layer Security (TLS 1.2/1.3);
• Password Hashing: philsot passwords are stored using a strong one-way cryptographic hashing algorithm — we do not store your password in readable form;
• Multi-Factor Authentication: Optional two-factor authentication (2FA) is available for all player accounts;
• Access Controls: Internal access to player data is restricted on a strict need-to-know basis, with role-based access controls and audit logging;
• Intrusion Detection: philsot maintains active monitoring for suspicious login patterns, unusual transaction volumes, and potential security incidents;
• Regular Security Audits: The Platform undergoes periodic security assessments and penetration testing by qualified third parties.

While philsot implements these measures diligently, no online system can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, philsot will notify affected players and the National Privacy Commission (NPC) within the timeframes prescribed by Philippine law.

9. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by philsot:

• Right to Be Informed: To be notified of how your data is collected and processed — fulfilled by this Privacy Policy;
• Right of Access: To request a copy of the personal data philsot holds about you;
• Right to Rectification: To request correction of inaccurate or incomplete personal data;
• Right to Erasure or Blocking: To request deletion or restriction of processing of your personal data, subject to philsot's legal retention obligations;
• Right to Object: To object to the processing of your personal data where we rely on legitimate interests as the legal basis;
• Right to Data Portability: To receive your personal data in a structured, commonly used format;
• Right to Lodge a Complaint: To file a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of these rights, contact philsot's Data Protection Officer via live chat or email at [email protected]. philsot will respond to verified data subject requests within thirty (30) days. Note that some rights may be limited where philsot has overriding legal obligations requiring retention or continued processing.

10. Children, Minors & Age Policy

The philsot Platform is strictly for users aged 21 years or older, consistent with PAGCOR's minimum age requirement for online casino gaming in the Philippines. philsot does not knowingly collect, process, or retain personal data of persons under 21 years of age.

If philsot becomes aware that personal data has been collected from a person under 21 years of age, the account will be immediately suspended, and the data will be deleted in accordance with applicable law. Deposits received from underage players will be returned at philsot's discretion following identity verification.

Parents and guardians who believe a minor has registered on philsot should contact [email protected] or via live chat immediately.

11. International Data Transfers

philsot's primary data storage and processing infrastructure is located within or subject to jurisdictions with adequate data protection standards. Where personal data is transferred to third-party service providers located outside the Philippines — such as game providers or technology vendors — philsot ensures such transfers are governed by appropriate contractual safeguards, including Data Processing Agreements incorporating standard contractual clauses consistent with NPC guidance.

philsot does not transfer personal data to jurisdictions that do not provide an adequate level of protection for personal data without implementing additional safeguards to protect your rights.

12. Changes to This Privacy Policy

philsot reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or Platform features. Material changes to this Policy will be communicated to registered players via SMS to the registered mobile number or via an in-platform notification upon next login, at least fourteen (14) days before the changes take effect.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the philsot Platform following notification of any amendments constitutes acceptance of the updated Policy. If you do not accept the updated Policy, you should discontinue use and contact philsot to close your account.

13. Contact Us & Data Protection Officer

philsot has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. If you have any questions, concerns, or requests regarding this Policy or the processing of your personal data, please contact us through any of the following channels:

For complaints to the Philippine data protection authority: National Privacy Commission (NPC) — accessible at www.privacy.gov.ph (external government resource).