pg89 Privacy
Policy

01 — Introduction

pg89 is an online gaming platform serving players across the Philippines, including those in Manila, Cebu, Davao, Quezon City, Makati, and beyond. We take the privacy and security of your personal data seriously. This Policy applies to all personal data collected through the pg89 website, account registration process, customer support interactions, and any other touchpoint between you and pg89.

This Policy should be read together with the pg89 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. Capitalized terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

If you have any questions about how pg89 handles your personal data, or if you wish to exercise any of your data privacy rights, please contact our Data Protection Officer using the details provided in Section 15 of this Policy.

02 — Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, pg89 acts as the Personal Information Controller (PIC) in respect of the personal data it collects from players and visitors to the pg89 platform. This means pg89 determines the purposes and means of processing your personal data.

Where pg89 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, and cloud hosting services — those providers act as Personal Information Processors (PIPs) and are bound by data processing agreements that restrict their use of your data to the specific purposes authorized by pg89.

03 — Data We Collect

pg89 collects the following categories of personal data:

Category	Examples	Required?
Identity Data	Full legal name, date of birth, nationality, government-issued ID number	Yes — KYC
Contact Data	Email address, mobile number, residential address	Yes — Account
Financial Data	GCash number, PayMaya account, bank account details (BDO, BPI, Metrobank), transaction history	Yes — Payments
Technical Data	IP address, device type, browser type and version, operating system, session timestamps	Automatic
Usage Data	Games played, bet amounts, win/loss records, session duration, feature interactions	Automatic
Communications Data	Live chat transcripts, support ticket content, email correspondence with pg89	When applicable
Verification Data	Copies of government-issued IDs, selfies or liveness check images submitted for KYC	Yes — KYC

pg89 does not intentionally collect sensitive personal information as defined under the Data Privacy Act (such as health data, religious beliefs, or political affiliations) unless specifically required by law or regulatory obligation. If you voluntarily disclose such information in a support interaction, pg89 will handle it with the heightened protections required by law.

04 — How We Collect Data

pg89 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically when you access the pg89 platform, through cookies, server logs, and similar tracking technologies.
• Third-party sources: Identity and fraud-check data received from KYC verification partners, payment processors (such as GCash and PayMaya), and, where legally required, from PAGCOR or other regulatory bodies.

05 — Purposes of Processing

pg89 processes your personal data for the following purposes:

• To create, manage, and maintain your pg89 account.
• To verify your identity and age (21+) in compliance with PAGCOR regulations and Philippine law.
• To process deposits, withdrawals, and other financial transactions via GCash, PayMaya, BDO, BPI, Metrobank, and other accepted payment methods.
• To detect, investigate, and prevent fraud, money laundering, and other illegal activity, including compliance with the Anti-Money Laundering Act (AMLA).
• To provide customer support and respond to your inquiries and complaints.
• To send you transactional communications related to your account, such as deposit confirmations, withdrawal notifications, and security alerts.
• To send you promotional communications about pg89 offers and new games, where you have consented to receive such communications or where pg89 has a legitimate interest in doing so.
• To analyze platform usage and improve the pg89 gaming experience.
• To comply with legal and regulatory obligations, including reporting requirements imposed by PAGCOR and the AMLC.
• To enforce the pg89 Terms & Conditions and protect the rights and safety of pg89, its players, and the public.

06 — Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, pg89 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform the contract between you and pg89 — including account management, payment processing, and KYC verification.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing conditions, the AMLA, and NPC issuances.
• Legitimate interests: Processing necessary for pg89's legitimate business interests, such as fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: Where pg89 relies on your consent as the legal basis for processing — such as for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

07 — Data Sharing & Disclosure

7.1 Service Providers

pg89 shares personal data with carefully selected third-party service providers who assist in operating the platform. These include payment processors (GCash, PayMaya, BDO, BPI, Metrobank), KYC and identity verification providers, cloud infrastructure and hosting providers, customer support platform providers, and fraud detection and cybersecurity partners. All service providers are bound by data processing agreements and are prohibited from using your data for any purpose other than providing services to pg89.

7.2 Regulatory and Law Enforcement Disclosure

pg89 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and other competent Philippine government authorities where required by law, court order, or regulatory direction. pg89 will notify you of such disclosures where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of pg89's business, your personal data may be transferred to the acquiring entity as part of that transaction. pg89 will notify you of any such transfer and ensure that the acquiring entity is bound by privacy obligations no less protective than those in this Policy.

7.4 No Sale of Personal Data

pg89 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Any sharing of data is limited to the purposes described in this Policy.

08 — Data Retention

pg89 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the duration of your account relationship with pg89 and for a period thereafter as required by law or regulation.

Specifically, pg89 applies the following retention periods as a general guide:

• Account and identity data: Retained for the duration of your account plus a minimum of 5 years after account closure, in compliance with PAGCOR record-keeping requirements and the AMLA.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction, as required by the AMLA and BIR regulations.
• Customer support communications: Retained for 3 years from the date of the interaction, or longer if related to an ongoing dispute or investigation.
• Technical and usage data: Retained for up to 2 years from collection, unless required for longer for security or fraud investigation purposes.
• Marketing consent records: Retained for the duration of your consent plus 3 years, to demonstrate compliance with consent requirements.

When personal data is no longer required, pg89 will securely delete or anonymize it in accordance with NPC guidelines.

09 — Security Measures

pg89 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and the pg89 platform is protected using 256-bit SSL/TLS encryption.
• Encryption at rest: Sensitive personal data stored in pg89's systems is encrypted using industry-standard algorithms.
• Access controls: Access to personal data within pg89 is restricted on a need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular security training.
• Two-factor authentication: pg89 supports and encourages the use of two-factor authentication (2FA) for player accounts to reduce the risk of unauthorized access.
• Regular security audits: pg89 conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident response: pg89 maintains a data breach response plan. In the event of a personal data breach that poses a real risk to your rights and freedoms, pg89 will notify the NPC and affected players within the timeframes required by law.

While pg89 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your pg89 account credentials and for notifying pg89 immediately if you suspect unauthorized access to your account.

10 — Cookies & Tracking Technologies

pg89 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the platform. The following types of cookies are used:

• Strictly necessary cookies: Required for the platform to function, including session management and security features. These cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalized experience.
• Analytics cookies: Used to collect aggregated, anonymized data about how players use the pg89 platform, helping us identify areas for improvement. pg89 does not use third-party analytics services that share your data with external advertising networks.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification.

You can manage or disable cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your pg89 account and using core platform features.

11 — Minors

If you are a parent or guardian and believe that a minor has registered on the pg89 platform using your details or otherwise, please contact our support team immediately so that we can investigate and take appropriate action.

12 — Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by pg89:

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15. pg89 will respond to all verified requests within 15 business days. In some cases, pg89 may need to verify your identity before processing your request. pg89 will not charge a fee for reasonable requests, but may charge a reasonable fee for manifestly unfounded or excessive requests.

If you are not satisfied with pg89's response to a privacy request or complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

13 — International Data Transfers

Some of pg89's service providers — including cloud hosting and infrastructure providers — may process personal data on servers located outside the Philippines. Where such transfers occur, pg89 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under Philippine law. These safeguards may include standard contractual clauses approved by the NPC, binding corporate rules, or transfers to countries recognized by the NPC as providing adequate data protection.

pg89 will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate safeguards and, where required, obtaining your consent.

14 — Changes to This Policy

pg89 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. When material changes are made, pg89 will notify registered players by posting the updated Policy on the platform and, where practicable, by sending a notification to your registered email address.

The effective date at the top of this Policy indicates when it was last updated. Your continued use of the pg89 platform after the effective date of any amendment constitutes your acknowledgment of the updated Policy. We encourage you to review this Policy periodically to stay informed about how pg89 protects your personal data.

15 — Contact & Data Protection Officer

pg89 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Policy, please contact the pg89 DPO through the following channels:

pg89 aims to acknowledge all privacy-related inquiries within 48 hours and to resolve them within 15 business days. For complex requests, pg89 may extend this period by a further 15 business days, in which case you will be notified of the extension and the reason for it.