This Privacy Policy explains what personal information 90piso collects from players, how we use it, who we share it with, and how we protect it — in compliance with the Republic of the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173) and applicable PAGCOR regulations.
A plain-language summary before the full legal text below
1.1 Scope. This Privacy Policy applies to all personal information collected by 90piso through the 90piso.vip website, associated mobile-optimised pages, customer support channels, and any other service operated under the 90piso brand. It applies to all registered players and visitors to the Platform regardless of whether they have a registered Account.
1.2 Data Controller. The data controller responsible for your personal information is 90piso's operating entity — a Philippine-registered company operating under a valid PAGCOR online gaming license. For all privacy-related matters, the Data Protection Officer (DPO) can be contacted at [email protected] with the subject line "Privacy – DPO".
1.3 Regulatory Framework. 90piso processes personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission of the Philippines. Processing also complies with applicable PAGCOR anti-money laundering (AML) and Know Your Customer (KYC) requirements.
90piso collects personal information through several channels. The categories of data collected are set out below:
| Category | Data Elements | Collection Point |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government-issued ID type and number | Registration, KYC verification |
| Contact Data | Philippine mobile number, email address | Registration |
| Financial Data | GCash-linked mobile number, PayMaya account reference, bank account name and partial number (for BPI, BDO, Metrobank), transaction history, deposit and withdrawal records | Deposit/withdrawal, KYC |
| Gaming Data | Game play history, bet amounts, win/loss records, session duration, responsible gaming limit settings | Platform use |
| Technical Data | IP address, device type and OS, browser type and version, session tokens, login timestamps | Automatic collection |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
2.1 Sensitive Personal Information. Government-issued ID numbers, financial account details, and any information that may reveal your financial situation constitute sensitive personal information under RA 10173. 90piso collects this data solely to the extent required for KYC and AML compliance and protects it with enhanced security measures.
90piso uses the personal data we collect for the following purposes:
Under RA 10173, 90piso processes your personal data on the following legal bases:
5.1 Payment Processors. 90piso shares transaction-relevant data with GCash (G-Xchange Inc.), PayMaya Philippines, and partner banks (BPI, BDO, Metrobank) to process deposits and withdrawals. These providers are contractually bound to process data only for payment purposes.
5.2 Regulatory Bodies. 90piso shares player data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government agencies where legally required — including in response to lawful orders, warrants, and regulatory reporting obligations.
5.3 Game Providers. Game play data (bet amounts, game session records) is shared with licensed game providers (including JILI Gaming and Pragmatic Play) to the extent necessary to resolve disputes and validate game outcomes. Game providers do not receive identity or financial data beyond session references.
5.4 Technology Service Providers. 90piso works with vetted third-party technology vendors for platform hosting, fraud detection, customer support tooling, and analytics. These vendors act as data processors under written contracts that prohibit independent data use.
5.5 No Advertising Networks. 90piso does not share personal data with advertising networks, data brokers, or social media platforms for targeting purposes.
6.1 Cookies Used. 90piso uses cookies and similar technologies on the Platform for the following purposes:
6.2 No Third-Party Advertising Cookies. 90piso does not deploy third-party advertising or cross-site tracking cookies on the Platform.
7.1 Active Accounts. 90piso retains personal data for as long as your Account is active and for a period thereafter as required by law.
7.2 Post-Closure Retention. Following account closure, 90piso retains the following data for the periods specified:
| Data Category | Retention Period | Legal Basis |
|---|---|---|
| Identity & KYC documents | 5 years post-closure | AMLA / PAGCOR |
| Financial transaction records | 5 years post-closure | AMLA / BIR requirements |
| Gaming activity logs | 3 years post-closure | PAGCOR regulatory |
| Customer support records | 3 years post-closure | Dispute resolution |
| Self-exclusion records | Permanent / until lifted | Responsible gaming |
8.1 Technical Measures. 90piso implements the following technical safeguards to protect your personal data:
8.2 Breach Notification. In the event of a personal data breach that poses a real risk to your rights and freedoms, 90piso will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay as required by RA 10173.
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 90piso:
Parents and guardians who believe a minor may have registered a 90piso Account should contact [email protected] immediately. We will investigate and take appropriate action without delay.
11.1 Primary Processing in the Philippines. 90piso stores and processes personal data primarily on servers located within the Republic of the Philippines.
11.2 Limited International Transfers. Certain game providers and technology service providers operate infrastructure outside the Philippines. Where personal data is transferred to such providers, 90piso ensures appropriate safeguards are in place — including contractual data processing agreements that require recipient organisations to maintain data protection standards equivalent to those required under RA 10173.
11.3 No Transfers Without Basis. 90piso does not transfer personal data to foreign entities without a lawful basis under RA 10173 and, where required, prior notification to or approval from the National Privacy Commission.
12.1 Updates. 90piso may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform features. Updated versions will be published on 90piso.vip with a revised effective date.
12.2 Notification. For material changes to this Privacy Policy, 90piso will provide advance notice to registered players via their registered email address or in-Platform notification at least 14 days before the change takes effect where practicable. Continued use of the Platform following the effective date constitutes acceptance of the updated Privacy Policy.
For all privacy-related inquiries, data subject rights requests, or concerns regarding 90piso's handling of your personal data, please contact:
You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data rights have been violated.