Your Data, Your Rights
How pagasia Keeps Your Information Safe
We believe every Filipino player deserves to know exactly how their personal information is used. Here are the core principles that guide how pagasia handles your data.
Data Privacy Act Compliance
pagasia operates in full compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and the implementing rules and regulations issued by the National Privacy Commission (NPC). Your rights as a data subject are fully protected.
Encrypted Data Storage
All personal information stored on pagasia's systems is protected using industry-standard encryption protocols. Sensitive data such as payment details and government ID numbers are encrypted at rest and in transit using TLS 1.2 or higher at all times.
No Selling of Personal Data
pagasia does not sell, rent, or trade your personal information to any third party for commercial purposes. Data shared with our service providers and partners is strictly limited to what is necessary to deliver the pagasia gaming experience to you.
Your Consent Matters
pagasia processes your personal data only on lawful bases recognized under the Data Privacy Act — including your explicit consent, the performance of our service agreement with you, and compliance with legal obligations. You may withdraw non-essential consents at any time.
Transparent Data Use
We clearly explain every category of personal data we collect and exactly why we collect it. pagasia does not collect data beyond what is reasonably necessary for the safe, compliant operation of the platform and the delivery of our services to you.
Direct Access to Your Data
As a registered pagasia player, you have the right to access a copy of your personal data held by us, request corrections to inaccurate information, and in certain circumstances request erasure or restriction of your data — all via a simple written request to our Data Protection Officer.
Contents
- 1. About This Policy
- 2. Data We Collect
- 3. How We Use Your Data
- 4. Legal Bases for Processing
- 5. Data Sharing & Disclosure
- 6. Cookies & Tracking
- 7. Data Retention
- 8. Data Security
- 9. Your Rights
- 10. Children & Minors
- 11. Marketing Communications
- 12. Third-Party Links
- 13. Policy Updates
- 14. Contact & amp; DPO
1 About This Policy
This Privacy Policy describes how pagasia ("we", "us", "our") collects, processes, stores, and protects the personal information of individuals who access or use the pagasia platform, website, and related services (collectively, the "Services") at pagasia.net. This policy applies to all registered players, visitors, and any individual whose personal data we process in connection with the operation of pagasia.
pagasia is operated for the benefit of Filipino players and is subject to the requirements of Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and the rules, regulations, and issuances of the National Privacy Commission (NPC). Where applicable, pagasia also adheres to the data-related obligations arising from the Anti-Money Laundering Act (AMLA), PAGCOR regulatory requirements, and other relevant Philippine legislation.
By registering a pagasia account, accessing the pagasia website, or using any of our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you should discontinue use of the pagasia platform.
2 Data We Collect
2.1 Registration and Identity Data
When you create a pagasia account, we collect the personal information you provide during the registration process. This includes your full legal name, date of birth, residential address (including city — whether that is Manila, Cebu, Davao, Quezon City, Makati, or elsewhere in the Philippines), email address, and Philippine mobile number. This information is necessary to create and maintain your account and to verify your identity and eligibility to use the Services.
2.2 Know Your Customer (KYC) Documents
As required under Philippine anti-money laundering regulations and PAGCOR compliance obligations, pagasia may collect copies of government-issued identification documents such as your Philippine passport, driver's license, SSS ID, PhilHealth ID, UMID, or Postal ID. We may also collect proof of address documents and, where applicable, documentation relating to the source of your funds. These documents are processed solely for identity verification and legal compliance purposes.
2.3 Financial and Transaction Data
pagasia collects information about your deposits, withdrawals, wagers, bonuses, and general account balance activity. We also collect the payment method details necessary to process your transactions — including GCash account references, Maya account details, bank account numbers (BPI, BDO, Metrobank), and other payment identifiers. Full payment card numbers, if applicable, are never stored on pagasia's servers — they are processed by our certified payment processors under PCI-DSS standards.
2.4 Gaming Activity Data
pagasia collects detailed records of your gaming activity on the platform, including the games you play (JILI slots, live casino, sports betting, sabong, bingo), the duration of play sessions, wager amounts, game outcomes, and bonus usage. This data is used for account management, game integrity monitoring, responsible gaming compliance, and regulatory reporting where required.
2.5 Technical and Device Data
When you access the pagasia platform, we automatically collect certain technical information from your device and browser, including your IP address, device type and model, operating system version, browser type and version, screen resolution, time zone, referring URL, and pages visited within the pagasia platform. This technical data is used for security monitoring, fraud prevention, and platform optimization.
2.6 Communications Data
If you contact pagasia's customer support team via live chat, email, or any other supported channel, we collect and retain records of those communications, including the content of your messages and any information you provide in the course of seeking assistance. This data is used to resolve your query, improve our support services, and maintain an audit trail of support interactions.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, address | Account creation, age & identity verification |
| KYC Documents | Government IDs, proof of address | AML compliance, PAGCOR regulatory reporting |
| Financial Data | GCash ref, bank account, transaction history | Payment processing, fraud prevention |
| Gaming Activity | Bets placed, game sessions, win/loss history | Account management, responsible gaming monitoring |
| Technical Data | IP address, device info, browser type | Security, fraud detection, platform analytics |
| Communications | Live chat logs, support emails | Customer support, dispute resolution |
3 How We Use Your Data
pagasia uses your personal data for the following purposes:
- Account Management: To create, maintain, and administer your pagasia player account, including processing your registration, verifying your identity, and managing your account settings and preferences.
- Service Delivery: To provide you with access to the pagasia platform, including all games, betting markets, promotional offers, and customer support services.
- Payment Processing: To process deposits and withdrawals through your chosen payment method (GCash, Maya, BPI, BDO, Metrobank, InstaPay, PesoNet, GrabPay, QR Ph, or 7-Eleven CLiQQ) and to maintain accurate financial records of all transactions on your account.
- Legal and Regulatory Compliance: To fulfill pagasia's obligations under Philippine law, including the Data Privacy Act, the Anti-Money Laundering Act, PAGCOR licensing requirements, and any other applicable regulations. This includes mandatory reporting to PAGCOR and the Anti-Money Laundering Council (AMLC) where required.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account takeovers, money laundering, bonus abuse, and other prohibited conduct on the pagasia platform.
- Responsible Gaming: To monitor your gaming patterns and activity for indicators of problematic gambling behavior, and to support the responsible gaming tools available through your account dashboard, including deposit limits, self-exclusion, and cooling-off periods.
- Marketing and Promotions: Where you have provided your consent, to send you information about pagasia promotions, bonuses, new game releases, and relevant platform news via email or SMS. You may opt out of marketing communications at any time.
- Platform Improvement: To analyze aggregate usage patterns, player behavior, and technical performance data for the purpose of improving the pagasia platform, user experience, and game offering.
- Dispute Resolution: To investigate and resolve disputes, complaints, and chargebacks relating to your pagasia account or any transaction processed through the platform.
4 Legal Bases for Processing
Under the Data Privacy Act of 2012, pagasia is required to identify a lawful basis for each category of personal data processing. The following bases apply to pagasia's data processing activities:
- Consent (Section 12(a), RA 10173): Where you have provided explicit consent — for example, for the receipt of marketing communications or for optional personalization features.
- Contractual Necessity (Section 12(b), RA 10173): Processing necessary for the performance of the Terms & Conditions agreement between you and pagasia — including account creation, payment processing, and service delivery.
- Legal Obligation (Section 12(c), RA 10173): Processing required to comply with pagasia's legal obligations under the AMLA, PAGCOR regulations, NPC requirements, and other applicable Philippine law.
- Legitimate Interests (Section 12(f), RA 10173): Processing carried out for pagasia's legitimate business interests — including fraud prevention, platform security, and responsible gaming monitoring — where those interests do not override your rights and freedoms as a data subject.
5 Data Sharing & Disclosure
5.1 Service Providers and Processors
pagasia shares personal data with carefully selected third-party service providers who assist in the operation of the platform. These include payment processors and e-wallet partners (for GCash, Maya, BPI, BDO, Metrobank, and other supported payment methods), game content providers (including JILI Games and other licensed game studios), KYC and identity verification service providers, cloud hosting and data storage providers, and customer support platform providers. All service providers acting as Personal Information Processors (PIPs) on our behalf are bound by written data processing agreements that restrict their use of your data to the specific purposes for which it was shared.
5.2 Regulatory and Law Enforcement Disclosure
pagasia is required by Philippine law to disclose certain personal and financial data to regulatory authorities including PAGCOR and the Anti-Money Laundering Council (AMLC). pagasia will also disclose personal data to law enforcement agencies, courts, or government bodies where required by a valid legal order, warrant, or regulatory directive. In such cases, pagasia will disclose only the minimum amount of data necessary to satisfy the legal requirement.
5.3 No Sale of Personal Data
pagasia does not sell, rent, lease, or otherwise commercially transfer your personal data to any third party for that third party's independent marketing or commercial purposes. Any data sharing with business partners is strictly limited to operational necessity and is subject to appropriate contractual safeguards.
5.4 Corporate Transactions
In the event of a merger, acquisition, reorganization, or sale of all or substantially all of pagasia's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change via the email address registered on your pagasia account, and this Privacy Policy will be updated to reflect the new data controller's identity and contact details.
6 Cookies & Tracking Technologies
pagasia uses cookies and similar tracking technologies on the pagasia.net website to support the platform's functionality, improve user experience, maintain session security, and analyze aggregate usage patterns. A cookie is a small text file placed on your device by your browser when you visit a website.
pagasia uses the following categories of cookies:
- Strictly Necessary Cookies: Required for the core operation of the pagasia platform, including maintaining your login session, processing transactions, and preventing cross-site request forgery. These cookies cannot be disabled without impairing the fundamental functionality of the platform.
- Functional Cookies: Used to remember your preferences and settings on the pagasia platform, such as your preferred language, display settings, and notification preferences, so that you do not need to reconfigure them on each visit.
- Analytics Cookies: Used to collect aggregate, anonymized information about how players navigate and interact with the pagasia platform, which helps us identify areas for improvement. This data does not identify any individual player personally.
- Security Cookies: Used as part of our fraud detection and account security systems to identify unusual or suspicious activity patterns associated with your session or device.
You may configure your browser settings to refuse or delete cookies at any time. However, disabling strictly necessary cookies will prevent you from logging in to your pagasia account or using the platform's core features. pagasia does not use cookies to serve third-party advertising or to track your browsing activity on websites outside of pagasia.net.
7 Data Retention
pagasia retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, to maintain your active account, and to comply with our legal, regulatory, and compliance obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of active account + 5 years after closure | AMLA, PAGCOR regulatory requirements |
| KYC Documents | 5 years from the date of last transaction | Anti-Money Laundering Act (AMLA) |
| Financial & Transaction Records | 5 years from the date of each transaction | AMLA, Tax obligations, PAGCOR compliance |
| Gaming Activity Logs | 3 years from the date of each session | Responsible gaming compliance, dispute resolution |
| Customer Support Records | 2 years from the date of each interaction | Dispute resolution, service improvement |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Data Privacy Act compliance, audit trail |
Following the expiry of the applicable retention period, personal data will be securely deleted or anonymized so that it can no longer be attributed to any identifiable individual. Where data is required for the resolution of an active dispute, investigation, or legal proceeding, it will be retained until that matter is finally resolved, regardless of the standard retention period.
8 Data Security
pagasia implements a comprehensive suite of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:
- Transport Layer Security (TLS 1.2 or higher) encryption for all data transmitted between your device and pagasia's servers;
- AES-256 encryption for sensitive personal data stored in pagasia's databases;
- Multi-factor authentication requirements for pagasia staff who access personal data systems;
- Role-based access controls that limit employee access to personal data strictly to what is required for their specific job function;
- Regular independent security assessments, penetration testing, and vulnerability scanning of the pagasia platform and infrastructure;
- Dedicated security operations monitoring for suspicious access patterns, anomalous data queries, and potential breach indicators;
- Secure data disposal procedures ensuring that physical and digital storage media containing personal data are irreversibly sanitized before disposal or reuse.
While pagasia takes all reasonable precautions to safeguard your personal data, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, pagasia will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players as soon as practicable in accordance with the NPC's breach notification guidelines.
9 Your Rights as a Data Subject
Under the Data Privacy Act of 2012 of the Philippines, you have the following rights in respect of the personal data that pagasia holds about you. To exercise any of these rights, please submit a written request to pagasia's Data Protection Officer at [email protected].
Right to Access
You have the right to request a copy of the personal data pagasia holds about you, information about the purposes for which it is processed, and details of any third parties with whom it has been shared. pagasia will respond to access requests within 15 business days.
Right to Rectification
If any personal data pagasia holds about you is inaccurate, incomplete, or outdated, you have the right to request that it be corrected. pagasia will update inaccurate records promptly upon verification of the correct information.
Right to Erasure
You have the right to request erasure of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other lawful basis exists), or where the data has been unlawfully processed. This right is subject to pagasia's overriding legal retention obligations under the AMLA and PAGCOR regulations.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes at any time, and to processing carried out on the basis of pagasia's legitimate interests where you believe your fundamental rights override those interests.
Right to Data Portability
You have the right to receive a copy of the personal data you provided to pagasia in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another service provider where technically feasible.
Right to Lodge a Complaint
If you believe that pagasia has processed your personal data in violation of the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. pagasia encourages you to contact us first so that we may attempt to resolve your concern directly.
pagasia will not charge a fee for processing data subject requests in the ordinary course. However, if a request is manifestly unfounded or excessive — for example, if it is repetitive in nature — pagasia reserves the right to charge a reasonable administrative fee or to decline to act on the request, with written reasons provided.
10 Children & Minors
The pagasia platform is strictly for adults aged 21 years and above, in accordance with PAGCOR regulatory requirements and Philippine law governing casino-style gambling. pagasia does not knowingly collect personal data from any person under the age of 21.
During the registration process, pagasia requires all applicants to confirm their date of birth. Any account where the registered date of birth indicates that the player is under 21 years of age will be immediately rejected. Where pagasia subsequently discovers that an active account holder is under 21 years of age, the account will be immediately closed, all funds will be held pending investigation, and the matter will be escalated to the appropriate regulatory and law enforcement authorities as required.
11 Marketing Communications
With your consent, pagasia may send you promotional communications via email or SMS regarding new games, bonuses, seasonal promotions, and platform updates. These communications are designed specifically for Filipino players and may include information about JILI slot launches, live casino events, sports betting markets, and other pagasia offers.
You may opt out of marketing communications at any time by:
- Clicking the unsubscribe link included in any pagasia marketing email;
- Updating your communication preferences in your pagasia account settings;
- Sending a written opt-out request to [email protected].
Opting out of marketing communications does not affect pagasia's ability to send you service-related communications that are necessary for the administration of your account, such as transaction confirmations, security alerts, and mandatory regulatory notices.
pagasia does not send marketing communications to players who have self-excluded from the platform or who have requested exclusion under our responsible gaming tools.
12 Third-Party Links
The pagasia platform may contain links to third-party websites, resources, or services that are not operated or controlled by pagasia. This Privacy Policy applies solely to data processed by pagasia in connection with the pagasia.net platform and Services. pagasia is not responsible for the privacy practices, content, or data processing activities of any third-party website, even where a link to that website appears on the pagasia platform.
We encourage you to review the privacy policy of any third-party website you visit before providing any personal information to that website.
13 Policy Updates
pagasia reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable Philippine law or NPC regulations, or changes in the structure or operation of the pagasia platform.
Where a material change is made to this Privacy Policy, pagasia will notify registered players via email and will display a prominent notice on the pagasia platform for a minimum of seven (7) days prior to the effective date of the change. The "Last Updated" date at the top of this document will reflect the most recent revision.
Your continued use of the pagasia platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the revised policy, you should cease using the Services and request voluntary closure of your account.
14 Contact & Data Protection Officer
If you have any questions, concerns, or requests relating to this Privacy Policy or to pagasia's handling of your personal data, please contact our Data Protection Officer (DPO):
- Data Protection Officer: pagasia Privacy Team
- Email: [email protected]
- Live Chat: Available 24/7 through the pagasia platform
- Response Time: pagasia aims to acknowledge all privacy-related requests within 5 business days and to provide a substantive response within 15 business days.
If you are not satisfied with pagasia's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012.