Privacy Policy – pk9 Casino

1. Introduction

This Privacy Policy ("Policy") is issued by pk9 ("pk9," "we," "us," or "our"), the operator of the online gaming platform accessible at pk9.bio ("Platform"). This Policy governs the collection, processing, storage, and disclosure of personal data relating to individuals ("Data Subjects," "Users," or "you") who access or use any part of the pk9 Platform.

pk9 processes personal data in accordance with applicable Philippine data protection legislation, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as applicable PAGCOR regulatory requirements governing player data in the context of online gaming operations.

By registering for a pk9 account, depositing funds, or otherwise using the pk9 Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Personal Data We Collect

pk9 collects personal data through multiple channels, including the account registration process, gameplay activity, financial transactions, and communications with our support team. The categories of personal data we may collect include:

2.1 Identity & Contact Data

• Full legal name as it appears on a government-issued Philippine ID;
• Date of birth (used for mandatory 21+ age verification);
• Email address and Philippine mobile number (+63);
• Residential address (province/city, including Metro Manila, Cebu, Davao, or other regions);
• Government-issued identification document number (e.g., PhilSys ID, Passport, Driver's License).

2.2 Financial Data

• GCash mobile number and PayMaya account reference, where used as a deposit or withdrawal method;
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) where provided for withdrawal processing;
• Transaction history, including deposit amounts, withdrawal requests, and gaming activity denominated in PHP.

2.3 Technical & Usage Data

• IP address, device type, browser type, and operating system;
• Session logs, login timestamps, and geographic access data;
• Game activity records, bet history, and account balance changes;
• Cookie identifiers and analytics data (see Section 6).

2.4 Communications Data

• Records of live chat conversations with pk9 support agents;
• Email correspondence between you and pk9;
• Records of responsible gaming interactions, including self-exclusion requests and limit-setting history.

3. How We Use Your Personal Data

pk9 uses the personal data we collect for the following purposes:

pk9 does not use personal data for purposes incompatible with those listed above without obtaining fresh consent where required by applicable law.

4. Legal Basis for Processing

pk9 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing is required to perform our obligations under the pk9 Terms & Conditions, including operating your account, processing transactions, and providing gaming services;
• Legal obligation: Processing is required to comply with PAGCOR regulations, Philippine AML laws, tax reporting obligations, and mandatory age verification requirements;
• Legitimate interests: Processing is necessary for fraud prevention, platform security, and the responsible gaming obligations of pk9;
• Consent: For direct marketing communications, pk9 relies on your freely given, informed consent, which you may withdraw at any time.

5. Data Sharing & Disclosure

pk9 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may disclose your personal data to the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash (GXI), PayMaya (Voyager Innovations), and Philippine banking partners, solely for the purpose of processing your financial transactions;
• Identity verification providers: Third-party KYC service providers engaged to verify your identity and age in compliance with PAGCOR requirements;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine government authorities, where disclosure is required by law or regulatory direction;
• Technology service providers: Cloud infrastructure, analytics, and security service providers engaged by pk9 under strict data processing agreements that prohibit independent use of your data;
• Law enforcement: Where disclosure is required pursuant to a valid legal order from a competent Philippine court or law enforcement authority.

All third parties to whom pk9 discloses personal data are required to process such data in accordance with applicable Philippine data protection law and the terms of pk9's data sharing agreements.

6. Cookies & Tracking Technologies

The pk9 Platform uses cookies and similar tracking technologies to operate and improve the Platform experience. The types of cookies we use include:

• Essential cookies: Required for the Platform to function, including session management, login state, and security tokens. These cannot be disabled without impairing Platform functionality;
• Analytics cookies: Used to understand how Filipino players interact with the pk9 Platform — which games are most popular, where users encounter difficulties, and how to improve navigation. Data collected is aggregated and anonymized;
• Preference cookies: Used to remember your language, display, and notification settings across sessions.

You may manage or disable non-essential cookies through your browser settings. Disabling essential cookies will affect your ability to log in to and use the pk9 Platform.

7. Data Retention

pk9 retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to applicable legal requirements. Specific retention periods include:

• Account data: Retained for the duration of your active pk9 account, plus a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLC record-keeping obligations;
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with Philippine financial record-keeping requirements;
• Self-exclusion records: Retained indefinitely to prevent re-registration during a self-exclusion period and to support responsible gaming compliance;
• Technical logs: Retained for up to twelve (12) months for security and fraud investigation purposes.

Where personal data is no longer required for any lawful purpose, pk9 will securely delete or anonymize such data in accordance with our internal data disposal procedures.

8. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 (RA 10173), Filipino Data Subjects have the following rights with respect to their personal data held by pk9:

• Right to be informed: The right to know that your personal data is being collected and processed by pk9;
• Right of access: The right to request a copy of the personal data pk9 holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of personal data that is no longer necessary, subject to legal retention obligations;
• Right to data portability: The right to receive your personal data in a structured, machine-readable format;
• Right to object: The right to object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact pk9's Data Protection Officer at support@pk9.bio with the subject line "Data Subject Request." pk9 will respond within thirty (30) days.

9. Data Security

pk9 implements technical and organizational security measures proportionate to the risks associated with processing your personal data. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the pk9 Platform;
• Encrypted storage of all personal and financial data at rest;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Two-factor authentication options for player accounts;
• Regular security audits and penetration testing of the pk9 Platform infrastructure;
• Incident response procedures for personal data breaches, including mandatory notification to the National Privacy Commission where required by RA 10173.

Notwithstanding these measures, no internet transmission is completely secure. pk9 cannot guarantee the absolute security of data transmitted to or from the Platform and users accept this residual risk by using the Platform.

10. Minors & Age Restriction

The pk9 Platform is strictly intended for individuals who are 21 years of age or older in accordance with PAGCOR regulations. pk9 does not knowingly collect, process, or retain personal data of individuals under the age of 21. If pk9 becomes aware that personal data of an individual under 21 has been collected, such data will be deleted immediately and the associated account will be closed. If you believe a minor has registered on the pk9 Platform, please contact us immediately at support@pk9.bio.

11. Third-Party Links

The pk9 Platform does not include links to third-party websites for commercial or affiliate purposes. Any third-party services integrated into the Platform — such as payment processing via GCash or identity verification providers — operate under their own independent privacy policies. pk9 is not responsible for the privacy practices of any third-party service provider. Users are encouraged to review the privacy policies of any third-party platform they interact with independently of pk9.

12. Changes to This Policy

pk9 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. Material changes to this Policy will be communicated to registered Users via email to the address associated with their pk9 account and will be posted on the pk9 Platform with an updated effective date. Your continued use of the pk9 Platform following any such update constitutes acceptance of the revised Policy.

13. Contact & Data Protection Officer

For any queries, concerns, or requests relating to this Privacy Policy or pk9's data processing activities, please contact the pk9 Data Protection Officer:

• Email: support@pk9.bio — Subject: "Privacy Policy / DPO Request"
• Live Chat: Available 24/7 on the pk9 Platform — staffed by Filipino agents

pk9 aims to respond to all data privacy inquiries within two (2) business days. For formal data subject requests under RA 10173, the statutory response period of thirty (30) days applies.