pk9 Privacy Policy

1 Introduction

pk9 is committed to protecting the privacy and personal data of all players who use our online gaming platform. We understand that trust is the foundation of any good relationship — and that's especially true when it comes to how we handle your information. This Policy sets out our practices in plain, honest terms so you always know where you stand.

This Policy applies to all personal data collected through the pk9 website, any associated mobile interfaces, customer support channels, and any other means by which you interact with pk9. It should be read alongside our Terms & Conditions, which govern your use of the Platform as a whole.

If you have questions about this Policy or wish to exercise any of your data rights, please refer to Section 14 (Contact Us) for our Data Protection contact details.

2 Personal Data We Collect

pk9 collects the following categories of personal data from players:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification number (e.g., Philippine National ID, passport, driver's licence, SSS/GSIS number).
• Contact Data: Email address, mobile number, and residential address (including city — e.g., Manila, Cebu, Davao, Quezon City, Makati).
• Account Data: Username, encrypted password, account preferences, and communication settings.
• Financial Data: Payment method details (e.g., GCash mobile number, Maya account reference, bank account details for BPI, BDO, Metrobank, UnionBank, Landbank, PNB, or Security Bank), transaction history, deposit and withdrawal records.
• Gaming Data: Game history, wager amounts, session durations, win/loss records, and responsible gaming tool usage.
• Technical Data: IP address, device type, browser type and version, operating system, time zone, and session logs.
• Communications Data: Records of your correspondence with pk9 customer support, including chat logs and email exchanges.
• KYC Verification Data: Copies of identity documents and selfie photographs submitted during the Know Your Customer (KYC) verification process.

We do not collect sensitive personal information beyond what is strictly necessary for identity verification, regulatory compliance, and the provision of gaming services.

3 How We Collect Your Data

pk9 collects personal data through the following means:

• Direct Collection: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, and server logs. See Section 7 for full details on our cookie practices.
• Third-Party Sources: Identity verification data from KYC service providers; fraud prevention data from anti-fraud partners; payment confirmation data from payment processors (GCash, Maya, and banking partners).

4 How We Use Your Personal Data

pk9 uses your personal data for the following purposes:

• To create, verify, and manage your pk9 Account.
• To process deposits and withdrawals and maintain accurate financial records.
• To verify your identity and age (21+) in compliance with PAGCOR requirements and Philippine law.
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities.
• To provide customer support and respond to your enquiries.
• To personalise your gaming experience and deliver relevant promotions (where you have consented to marketing communications).
• To monitor gaming activity for responsible gaming purposes and to apply player protection measures where appropriate.
• To comply with applicable legal and regulatory obligations, including reporting requirements under Philippine anti-money laundering laws.
• To improve the pk9 Platform through analysis of aggregated, anonymised usage data.

pk9 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or where you have given explicit consent.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, pk9 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions, including Account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, Anti-Money Laundering Act (AMLA) requirements, and tax reporting obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing and Disclosure

pk9 does not sell your personal data. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Processors: GCash, Maya, and banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process your financial transactions.
• KYC and Identity Verification Providers: Third-party services engaged to verify your identity and age in compliance with regulatory requirements.
• Fraud Prevention and Security Partners: Services used to detect and prevent fraudulent activity, money laundering, and other prohibited conduct.
• Game Software Providers: Game providers whose titles are available on the pk9 Platform may receive anonymised session data for technical and audit purposes.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities, where disclosure is required by law or court order.
• Professional Advisers: Legal, accounting, and auditing firms engaged by pk9, subject to professional confidentiality obligations.

All third-party service providers engaged by pk9 are contractually required to process your data only for the specified purpose and to maintain appropriate security standards consistent with this Policy.

7 Cookies and Tracking Technologies

pk9 uses cookies and similar technologies to operate and improve the Platform. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting Platform functionality.
• Performance Cookies: Used to collect anonymised data about how players use the Platform (e.g., pages visited, time on site) to help us improve performance and user experience.
• Functional Cookies: Used to remember your preferences (e.g., language, display settings) to provide a more personalised experience.

pk9 does not use third-party advertising or tracking cookies. You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may affect your ability to use certain features of the Platform, including logging in to your pk9 Account.

8 Data Retention

pk9 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in compliance with PAGCOR and AMLC record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required under the Anti-Money Laundering Act of the Philippines.
• KYC Verification Documents: Retained for the duration of your Account and for five (5) years following closure, or longer if required by a regulatory authority.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Technical and Log Data: Retained for up to twelve (12) months for security monitoring and fraud prevention purposes.
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, as evidence of your preferences.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

9 Data Security

pk9 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• AES-256 encryption for all personal and financial data stored on pk9 servers.
• TLS 1.2 or higher encryption for all data transmitted between your device and the pk9 Platform.
• Multi-factor authentication options for player Accounts and mandatory multi-factor authentication for all internal administrative access.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Strict role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific function.
• Continuous monitoring of systems for suspicious activity, with automated alerts and incident response procedures in place.

While pk9 takes all reasonable steps to protect your data, no system is entirely immune to security risks. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, pk9 will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of the Data Privacy Act of 2012 and its Implementing Rules.

10 Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by pk9:

• Right to Be Informed: You have the right to be informed of how your personal data is being collected and processed, as set out in this Policy.
• Right of Access: You may request a copy of the personal data pk9 holds about you, along with information about how it is being used.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held by pk9. You can update most Account details directly through your Account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations that may require pk9 to retain certain data.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to pk9's overriding legal or regulatory obligations.
• Right to Data Portability: You may request that pk9 provide your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Lodge a Complaint: If you believe pk9 has not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 14. pk9 will respond to all verified data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, with prior notice to you.

11 Children's Privacy and Age Restriction

The pk9 Platform is strictly intended for persons who are at least 21 years of age, in accordance with the minimum legal age for casino-style gambling in the Philippines. pk9 does not knowingly collect personal data from individuals under the age of 21.

If pk9 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor has registered an Account on the pk9 Platform, please contact our support team immediately.

12 Third-Party Links

The pk9 Platform may contain references to third-party services such as payment providers (GCash, Maya, and banking partners). While pk9 takes care to work only with reputable partners, we are not responsible for the privacy practices of third-party websites or services. Once you leave the pk9 Platform and interact directly with a third-party service, that service's own privacy policy applies.

We encourage you to review the privacy policies of any third-party services you use in connection with your pk9 Account, particularly your chosen payment provider.

13 Changes to This Privacy Policy

pk9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. When material changes are made, we will notify registered players via the email address associated with their Account and by displaying a prominent notice on the Platform.

The date of the most recent revision is shown at the top of this document. Your continued use of the pk9 Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy. If you do not agree with the revised Policy, you should cease using the Platform and may request Account closure.

14 Contact Us and Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by pk9, please contact our Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated. pk9 encourages players to contact us first so we can address your concern promptly and directly.