pilslot Privacy Policy

pilslot ("we," "us," "our") operates the online gaming platform accessible at pilslot.club (the "Platform"). pilslot is committed to safeguarding the privacy and personal data of every person who visits, registers with, or interacts with the Platform.

This Privacy Policy is published in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, administered by the National Privacy Commission (NPC) of the Philippines. It applies to all personal data collected from members, prospective members, and website visitors in connection with the pilslot Platform.

By accessing pilslot.club or creating a pilslot account, you acknowledge that you have read this Privacy Policy and consent to the collection and use of your personal data as described herein. This policy is incorporated by reference into the pilslot Terms & Conditions.

For the purposes of the Philippine Data Privacy Act, pilslot is the Personal Information Controller (PIC) in respect of personal data collected through the Platform. This means pilslot determines the purpose and means by which your personal data is processed.

pilslot has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and with applicable Philippine data protection law. Contact details for the pilslot DPO are provided in Section 16 of this Policy.

Where pilslot engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, or customer support software — those providers act as Personal Information Processors (PIPs) and are bound by data processing agreements that require them to maintain appropriate safeguards.

pilslot collects the following categories of personal data in connection with the operation of the Platform:

pilslot does not collect sensitive personal information as defined in RA 10173 (such as religious beliefs, health records, or racial origin) except where required by a specific legal obligation. Government ID data collected during KYC is treated with the heightened protections applicable to sensitive personal information.

pilslot collects personal data through the following means:

• Directly from you — when you register for a pilslot account, complete KYC verification, make deposits or withdrawals, contact support, participate in promotions, or use responsible gaming tools.
• Automatically — through your use of the Platform, pilslot's servers record technical and activity data including IP addresses, session tokens, game logs, and browser information.
• Through cookies and similar technologies — as described in Section 7 of this Policy, pilslot uses cookies to maintain session state, prevent fraud, and analyse platform usage.
• From third parties — pilslot may receive verification results from KYC service providers, transaction confirmations from payment processors (such as GCash or Maya), and fraud-screening flags from anti-fraud systems.

pilslot does not purchase personal data from third-party data brokers and does not obtain personal data from social media platforms except with your explicit consent.

pilslot processes your personal data for the following specific purposes, each anchored in a lawful basis under the Philippine Data Privacy Act:

pilslot does not sell, rent, or trade your personal data. pilslot may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment Processors: GCash (GXI), Maya (Paymaya Philippines), BPI, BDO, Metrobank, and other payment service providers receive the minimum data required to process your deposit or withdrawal transaction.
• KYC Verification Providers: Identity verification service providers receive your KYC documents and identity data solely for the purpose of verifying your identity and age in compliance with PAGCOR requirements.
• Anti-Fraud and Security Providers: Fraud detection platforms receive technical and activity data to identify and prevent fraudulent access and transactions.
• Customer Support Software: The platform used to manage live chat and email support may process communication data on behalf of pilslot as a Personal Information Processor.
• PAGCOR: As a licensed operator under the PAGCOR framework, pilslot is required to submit certain member and transaction data to PAGCOR as part of its regulatory obligations.
• National Privacy Commission (NPC): In the event of a reportable data breach or upon lawful NPC request, pilslot will disclose required information in accordance with RA 10173.
• Philippine Law Enforcement: pilslot will disclose personal data to law enforcement agencies when required by a valid court order or lawful legal process under Philippine law.

pilslot uses cookies and similar tracking technologies on pilslot.club. A cookie is a small text file placed on your device when you visit the Platform. The following types of cookies are used:

• Essential Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and cookies that maintain your login state. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Used to remember your preferences, such as your preferred language or game lobby layout. These improve your experience but are not essential.
• Analytics Cookies: Used to understand how members use the Platform — which pages are visited, how long sessions last, and which features are most used. This data is aggregated and anonymised. pilslot uses this information to improve the Platform.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats. These cookies analyse device fingerprints and session behaviour.

pilslot does not serve third-party advertising on the Platform and does not participate in cross-site behavioural advertising networks. Analytics data collected through cookies is used exclusively for internal Platform improvement and is not shared with third-party marketers.

pilslot implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• TLS 1.3 Encryption: All data in transit between your device and pilslot's servers is encrypted using Transport Layer Security (TLS) version 1.3.
• Encryption at Rest: Sensitive personal data stored in pilslot's databases — including KYC documents, government ID information, and financial records — is encrypted at rest using industry-standard AES-256 encryption.
• Access Controls: Access to personal data is restricted to pilslot employees and contractors who have a genuine operational need. All access is role-based, logged, and subject to regular review.
• Two-Factor Authentication: All pilslot staff accounts with access to member data require two-factor authentication. Members are also encouraged to enable 2FA on their own accounts.
• Intrusion Detection: pilslot's infrastructure is monitored around the clock for unauthorised access attempts, anomalous data access patterns, and security incidents.
• Penetration Testing: pilslot conducts regular security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.

While pilslot takes all reasonable technical precautions, no internet-based platform can guarantee absolute security. You are also responsible for maintaining the security of your own pilslot account credentials. See the Account Security section of the pilslot Terms & Conditions for your responsibilities.

pilslot retains your personal data for the periods set out below, after which data is securely deleted or anonymised. Retention periods are determined by the purpose of collection, applicable regulatory requirements, and legal limitation periods under Philippine law:

Where retention is required solely by legal obligation, pilslot will restrict access to archived data during the retention period so that it is not used for any other purpose. Once the retention period expires, data is deleted using secure deletion methods that prevent recovery.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by pilslot. pilslot is committed to facilitating the exercise of these rights without undue delay:

To exercise any of these rights, contact the pilslot Data Protection Officer via the details in Section 16. pilslot will acknowledge your request within 3 business days and respond substantively within 30 calendar days. Where a request is complex or involves a large volume of data, the 30-day period may be extended by a further 60 days with notice to you.

If you believe pilslot has failed to handle your data in accordance with your rights under RA 10173, you may lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

pilslot is an online gaming platform that is strictly restricted to persons aged 21 years and above, in accordance with PAGCOR regulations governing online gambling in the Philippines. pilslot does not knowingly collect personal data from persons under the age of 21.

Age verification is a mandatory step in the pilslot KYC process, and accounts found to belong to individuals under 21 will be immediately closed. All data associated with an underage account will be deleted, except for records required to be retained for regulatory compliance purposes.

Parents and guardians are advised to use parental control software to restrict access to online gambling platforms on shared or family devices. pilslot's age verification layer is a regulatory safeguard, not a substitute for responsible household supervision of minors' internet use.

pilslot's primary data infrastructure is based in the Philippines. However, certain service providers engaged by pilslot — such as cloud hosting providers, KYC verification platforms, or international payment processors — may process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, pilslot ensures that appropriate safeguards are in place as required by RA 10173, including:

• Binding contractual clauses in data processing agreements requiring the receiving party to maintain data protection standards equivalent to those required by Philippine law.
• Transfers only to jurisdictions or receiving entities that the NPC has determined provide adequate data protection.
• Where necessary, obtaining your explicit consent for specific international transfers that cannot be covered by contractual safeguards.

pilslot does not transfer KYC documents or government-issued identity data to any entity outside of those strictly required to complete the verification process. All KYC processing partners are contractually bound to process identity data exclusively for identity verification and to delete documents immediately following the completion of the verification process.

pilslot may send you promotional communications — including information about new games, bonuses, tournaments, and platform updates — where you have provided your explicit opt-in consent to receive such communications. Marketing communications are sent via the following channels:

• Email to your registered address
• SMS to your registered Philippine mobile number
• In-platform notifications visible after login

Your consent to receive marketing communications is optional and is separate from your consent to the pilslot Terms & Conditions and this Privacy Policy. You may withdraw your marketing consent at any time by:

• Updating your notification preferences in your pilslot Account settings.
• Clicking the "unsubscribe" link in any pilslot marketing email.
• Contacting pilslot support via live chat and requesting removal from the marketing list.

Withdrawal of marketing consent will be actioned within 5 business days. Please note that transactional and account-related communications — such as deposit confirmations, withdrawal notifications, and security alerts — are not marketing communications and will continue to be sent regardless of your marketing preferences as they are necessary for the operation of your account.

The pilslot Platform does not contain links to third-party websites for commercial or advertising purposes. Any links to external resources — such as PAGCOR's official website or the NPC — are provided solely for informational purposes in the context of regulatory compliance disclosures.

When you access any third-party website through a link on the Platform, pilslot has no control over, and takes no responsibility for, the privacy practices or content of that third-party site. You should review the privacy policy of any third-party website you visit independently.

Game content provided by third-party game studios and streamed through the pilslot Platform is subject to the data practices disclosed in this Policy. Game studios providing content to pilslot are contractually required to process only anonymised session data for the purpose of delivering gameplay functionality, and are prohibited from independently collecting member personal data.

pilslot reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The most current version of the Privacy Policy will always be published at pilslot.club/privacy-policy.

For material changes — those that significantly affect how we collect, use, or share your personal data — pilslot will provide at least fourteen (14) days' prior notice via a prominent Platform notification and, where appropriate, an email to your registered address before the change takes effect.

For minor changes — such as typographical corrections, clarifications that do not alter the substance of our practices, or updates required by minor regulatory amendments — pilslot may update the Policy without advance individual notice. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.

Your continued use of the pilslot Platform following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not accept the amended Policy, you should discontinue use of the Platform and contact support to request account closure.

For all privacy-related enquiries, data subject rights requests, or to report a suspected data breach or privacy concern, please contact the pilslot Data Protection Officer through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, on pilslot.club. For urgent privacy matters, live chat is the fastest channel.
• Email: [email protected] — please mark the subject line clearly as "Privacy / Data Rights Request" to ensure your message is routed to the DPO team directly.

When submitting a data subject rights request, please include your full registered name, your registered email address or mobile number, and a clear description of the right you wish to exercise or the concern you wish to raise. pilslot will respond to all privacy enquiries within the timeframes set out in Section 10.

If you are dissatisfied with pilslot's response to your privacy concern, you have the right to lodge a complaint with the:

This Privacy Policy was last updated in January 2026 and supersedes all previous versions. © 2026 pilslot. All rights reserved.