pcso1 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how pcso1 ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "the Player") who register for or use the pcso1 online gaming platform available at pcso1.app.

pcso1 takes its obligations under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations ("IRR") seriously. This Policy is designed to be transparent, clear, and consistent with the principles of legitimate purpose, proportionality, and transparency mandated by the National Privacy Commission ("NPC") of the Philippines.

This Policy applies to all personal data processed by pcso1 in connection with your use of the platform, whether collected online, via mobile, or through our support channels. It should be read together with our Terms & Conditions, which govern the overall legal relationship between you and pcso1.

2 Data Controller Information

For the purposes of the Philippine Data Privacy Act of 2012, the data controller responsible for your personal information is pcso1, the operator of the online gaming platform at pcso1.app.

pcso1 has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and the DPA. Contact details for the DPO are set out in Section 14 of this Policy.

3 Personal Data We Collect

pcso1 collects the following categories of personal data in connection with your use of the platform:

3.1 Identity and Registration Data

• Full legal name, date of birth, and nationality;
• Government-issued identification number (e.g., PhilSys, SSS, UMID, passport number);
• Residential address, including barangay, city/municipality, province, and postal code;
• Gender (where provided voluntarily).

3.2 Contact Data

• Email address;
• Mobile phone number (Philippine format);
• Preferred communication language and contact preferences.

3.3 Financial and Transaction Data

• Deposit and withdrawal history, including amounts in Philippine Peso (PHP / ₱);
• Payment method details (e.g., GCash mobile number, PayMaya account reference, BPI or BDO account name);
• Transaction timestamps and reference numbers;
• Source of funds declarations (where required for KYC or AML compliance).

3.4 Gaming Activity Data

• Game history, betting records, wagers placed, and results;
• Session duration, login and logout timestamps;
• Bonus and promotion participation records;
• Responsible gaming tool usage (e.g., deposit limits set, cooling-off periods activated).

3.5 Technical and Device Data

• IP address and approximate geolocation (country and city level);
• Device type, operating system, and browser version;
• Cookies and session tokens (see Section 8);
• Referring URL and on-platform navigation paths.

3.6 Communications Data

• Records of live chat, email, and support interactions with pcso1 staff;
• Feedback, complaints, and dispute correspondence.

4 How We Collect Your Data

pcso1 collects your personal data through the following means:

4.1 Directly from You

The majority of the personal data pcso1 holds about you is provided directly by you during the registration process, KYC verification, deposit and withdrawal transactions, support interactions, and when you voluntarily update your account profile.

4.2 Automatically

When you access pcso1, certain technical data is collected automatically through cookies, server logs, and similar technologies. This includes your IP address, device identifiers, browser information, and session activity. Refer to Section 8 for details on cookies and how to manage them.

4.3 From Third Parties

pcso1 may receive personal data from trusted third-party sources in the following circumstances:

• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank may share transaction confirmation data with pcso1 to verify deposits and process withdrawals;
• Identity Verification Partners: KYC and anti-fraud service providers may share verification outcomes and risk scores to assist with account approval;
• Regulatory Bodies: PAGCOR or other Philippine regulatory authorities may share information relevant to licensing compliance or investigation requirements.

5 Purpose and Legal Basis for Processing

pcso1 processes your personal data only where a lawful basis for processing exists under the Philippine Data Privacy Act. The table below summarises the primary purposes for which we process your data and the corresponding legal basis.

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent for marketing communications, update your preferences in your account settings or contact our support team.

6 Sharing Your Personal Data

pcso1 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share your data only in the following limited circumstances:

6.1 Service Providers

pcso1 engages trusted third-party service providers to support platform operations. These include payment processors (GCash, PayMaya, BPI, BDO, Metrobank), KYC and identity verification providers, cloud hosting and infrastructure partners, customer support platform operators, and fraud detection and security vendors. All service providers are contractually obligated to process your data only on pcso1's instructions and in accordance with the DPA.

6.2 Game Content Providers

Certain game titles on pcso1 are supplied by third-party game studios and software providers. These providers may receive anonymised or pseudonymised game activity data for the purpose of game performance monitoring and RNG certification. Personally identifiable information is not shared with game studios without your consent.

6.3 Regulatory and Legal Disclosure

pcso1 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or any other competent Philippine authority where required to do so by law, court order, or regulatory direction. Such disclosures are made only to the extent required and are logged for compliance purposes.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of pcso1's business operations, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material changes to data processing arrangements that result from it.

7 International Data Transfers

pcso1 primarily processes your personal data within the Philippines. However, some of our third-party service providers — including cloud infrastructure partners, game studios, and fraud prevention vendors — may process data in locations outside the Philippines.

Where personal data is transferred outside the Philippines, pcso1 ensures that appropriate safeguards are in place in accordance with the DPA and NPC regulations, including:

• Contractual obligations equivalent to Philippine data protection standards;
• Transfers only to jurisdictions recognised by the NPC as providing adequate data protection;
• Standard data protection clauses approved under applicable Philippine regulations.

If you would like more information about the safeguards applied to international data transfers involving your personal data, please contact our Data Protection Officer as described in Section 14.

8 Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit pcso1.app. They help us recognise you between sessions, maintain platform security, remember your preferences, and understand how players use the platform so that we can improve it.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for platform operation, login sessions, and security. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and display options.
• Analytics Cookies: Help us understand player behaviour on the platform in aggregate, anonymised form to guide improvements.
• Session Security Tokens: Used to prevent cross-site request forgery (CSRF) and protect your account during active sessions.

8.3 Managing Cookies

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to log in and use the pcso1 platform. For full cookie management details, refer to your browser's help documentation.

9 Data Retention

pcso1 retains your personal data for as long as is necessary to fulfil the purposes set out in this Policy, or as required by applicable Philippine law and regulatory obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, pcso1 will securely delete or anonymise your personal data in a manner that prevents reconstruction or re-identification. In certain cases, data may be retained for longer periods where required by a specific regulatory directive or ongoing legal proceeding.

10 Data Security

pcso1 implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser and pcso1 is encrypted using industry-standard TLS protocols;
• Encrypted Data at Rest: Sensitive personal and financial data stored in pcso1 databases is encrypted at rest;
• Role-Based Access Controls: Only authorised pcso1 personnel with a legitimate operational need may access personal data, and all access is logged and audited;
• Two-Factor Authentication (2FA): Available and strongly recommended for all player accounts;
• Regular Security Audits: pcso1 conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities;
• Incident Response Plan: In the event of a personal data breach, pcso1 will notify affected players and the National Privacy Commission within the timeframes required by the DPA.

Whilst pcso1 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. If you suspect any unauthorised access to your account, contact our support team immediately.

11 Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you are entitled to the following rights in respect of your personal data held by pcso1:

• Right to Access: You may request a copy of the personal data pcso1 holds about you, along with information about how it is processed;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held by pcso1;
• Right to Erasure / Right to be Forgotten: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to applicable legal retention obligations;
• Right to Object: You may object to the processing of your data where processing is based on legitimate interests, including profiling for marketing purposes;
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format for transfer to another service;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting prior lawful processing.

To exercise any of these rights, please submit a written request to our Data Protection Officer using the contact details in Section 14. pcso1 will respond to all valid data subject requests within fifteen (15) business days in accordance with NPC guidelines. We may request proof of identity before processing any request to protect against fraudulent or unauthorised requests.

12 Children's Privacy

pcso1 is strictly an adults-only platform. Access to and use of the pcso1 platform is prohibited for individuals under the age of 21 years in accordance with PAGCOR regulations. pcso1 does not knowingly collect or process the personal data of minors.

If pcso1 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately closed, all associated data will be deleted to the extent permitted by legal retention requirements, and the matter will be escalated in accordance with applicable Philippine law.

13 Changes to This Privacy Policy

pcso1 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, regulatory requirements, or platform operations. When material changes are made, pcso1 will notify registered players via email and/or a prominent notice on the platform at least seven (7) days before the revised Policy takes effect.

The "Effective Date" at the top of this Policy indicates when the current version was last updated. Your continued use of pcso1 following the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you may close your account as described in the Terms & Conditions.

We encourage you to review this Policy periodically to stay informed about how pcso1 protects your personal information.

14 Contact the Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by pcso1, please contact our Data Protection Officer through the following channels:

For responsible gaming enquiries or self-exclusion requests, please visit our Responsible Gaming page or contact our support team directly via live chat.