pko9 Privacy Policy

This Privacy Policy applies to all personal information collected and processed by pko9 in connection with the operation of the pko9 online gaming platform at pko9.cam and all associated services, mobile interfaces, and communication channels. It applies to all registered players, visitors to the platform, and any individual whose personal data is otherwise processed by pko9 in the course of its operations.

In this Privacy Policy, the following terms have the meanings set out below:

• "pko9," "we," "us," "our" — the pko9 platform and the entity responsible for processing personal data as described in this Policy.
• "Personal Data" or "Personal Information" — any information that identifies or could reasonably identify a natural person, whether directly or indirectly, as defined under Republic Act No. 10173 (the Data Privacy Act of 2012).
• "Player," "you," "your" — any individual who registers an account on pko9, accesses the platform, or whose personal data is otherwise processed by pko9.
• "Processing" — any operation or set of operations performed upon personal data, including collection, recording, organization, storage, updating, retrieval, use, disclosure, or disposal.
• "KYC" — Know Your Customer identity verification conducted for compliance with Philippine anti-money laundering and gaming regulations.
• "NPC" — the National Privacy Commission of the Philippines, the regulatory authority overseeing compliance with the Data Privacy Act of 2012.
• "DPA 2012" — Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations.

pko9 collects personal data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed. The categories of personal data we collect from pko9 players are as follows:

pko9 does not intentionally collect sensitive personal information (as defined under the DPA 2012) beyond what is strictly required for identity verification and regulatory compliance purposes.

pko9 collects personal data through the following channels:

• Account Registration: When you create a pko9 account, you provide identity and contact data directly through the registration form.
• KYC Verification: When you submit identity documents for account verification, pko9 collects the information contained in those documents as necessary to confirm your identity and age.
• Deposits and Withdrawals: Financial data is collected when you initiate transactions via GCash, PayMaya, or Philippine bank transfer through the pko9 Cashier.
• Platform Use: Gaming activity data and technical data are collected automatically as you use the pko9 platform, through server logs, cookies, and session tracking technologies.
• Support Interactions: When you contact the pko9 support team via live chat or email, the content of those communications and your account details are recorded.
• Promotions and Surveys: If you participate in pko9 promotional campaigns or respond to player surveys, you may voluntarily provide additional personal information in connection with those activities.

pko9 does not purchase or acquire personal data from external data brokers or third-party marketing databases.

pko9 processes your personal data only for specified, legitimate purposes and only where a lawful basis for processing exists under the DPA 2012. The primary purposes for which pko9 processes personal data, and the corresponding legal basis, are set out below:

• Account creation and platform access — Processing is necessary for the performance of the contract between you and pko9 (i.e., the Terms & Conditions governing your account).
• Identity verification and KYC compliance — Processing is required by law under PAGCOR regulations and applicable Philippine anti-money laundering legislation (Republic Act No. 9160, as amended).
• Payment processing — Processing is necessary for contract performance and for compliance with financial regulatory obligations.
• Fraud prevention and security monitoring — Processing is carried out in pko9's legitimate interests in protecting its platform and its players from unauthorized access, fraud, and financial crime.
• Responsible gaming compliance — Processing is required by PAGCOR regulations and is in the vital interests of players, particularly to enforce the 21+ age restriction and self-exclusion measures.
• Customer support — Processing is necessary for contract performance and in pko9's legitimate interests in resolving player queries efficiently.
• Platform improvement and analytics — Processing is carried out in pko9's legitimate interests in understanding how the platform is used in order to improve the Filipino player experience, subject always to appropriate safeguards.
• Promotional communications — Where you have given your consent, pko9 may send you information about promotions, bonuses, and new games. You may withdraw consent at any time by contacting pko9 support or adjusting your account notification preferences.

pko9 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. Your personal data may be shared in the following limited circumstances only:

• Certified game providers: Certain technical and gaming activity data is shared with pko9's certified game providers (e.g., JILI, Pragmatic Play, Evolution Gaming) as necessary to deliver game services. These providers act as data processors under contractual data processing agreements that require them to handle your data in accordance with applicable Philippine privacy law.
• Payment processors: Financial data necessary to process your GCash, PayMaya, or bank transfer transactions is shared with the relevant payment service providers. These providers are bound by their own regulatory obligations and data protection frameworks.
• Fraud prevention and security services: Technical and identity data may be shared with third-party fraud detection and cybersecurity service providers to protect the integrity of the pko9 platform and prevent unauthorized activity.
• Regulatory and law enforcement authorities: pko9 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the NPC, or other competent Philippine government authorities where required by law, court order, or regulatory directive.
• Professional advisers: pko9 may share personal data with its legal, audit, or compliance advisers where necessary in the course of obtaining professional advice, subject to confidentiality obligations.

Any third party that receives personal data from pko9 is required to process that data only for the specified purpose, in accordance with pko9's instructions, and subject to appropriate data security obligations consistent with the DPA 2012.

pko9 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following general retention periods apply:

• Account and KYC records: Retained for the duration of the player's active account and for a minimum of five (5) years following permanent account closure, in compliance with AMLC record-keeping obligations under Republic Act No. 9160.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable financial regulations.
• Gaming activity logs: Retained for the duration of the account and for a minimum of three (3) years following account closure, for audit, regulatory compliance, and dispute resolution purposes.
• Support communications: Retained for a period of three (3) years from the date of each interaction, unless a longer period is required to resolve an ongoing dispute or comply with regulatory requirements.
• Technical and log data: Typically retained for up to twelve (12) months, unless required for longer periods for security or fraud investigation purposes.

Upon expiry of the applicable retention period, pko9 will securely delete or anonymize personal data in a manner that prevents reconstruction or identification of the individual concerned.

pko9 uses cookies and similar tracking technologies on the pko9.cam platform to ensure proper functionality, improve the player experience, and support analytics. The categories of cookies used by pko9 are as follows:

• Strictly necessary cookies: Required for the pko9 platform to function correctly — for example, maintaining your login session, remembering your language preference, and enabling secure transactions. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Enable enhanced features and personalization, such as remembering your game history and lobby preferences. These may be set by pko9 or by third-party providers whose services are integrated into the platform.
• Analytics cookies: Used to collect aggregated, anonymized data about how players use the pko9 platform — which games are most popular, how players navigate the lobby, and where technical issues occur. This data helps pko9 improve the platform for Filipino players.
• Security cookies: Support fraud detection, bot prevention, and platform security monitoring.

You may manage cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect the functionality of the pko9 platform. Strictly necessary cookies cannot be disabled while using the platform.

pko9 implements appropriate technical and organizational security measures to protect personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include, without limitation:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the pko9 platform;
• Encryption at rest for sensitive personal data stored on pko9 servers;
• Access controls limiting internal access to personal data on a strictly need-to-know basis, with all access logged and audited;
• Multi-factor authentication for administrative access to systems holding personal data;
• Regular security assessments and penetration testing to identify and remediate vulnerabilities;
• Incident response procedures designed to detect, contain, and report data security incidents in accordance with NPC notification requirements under the DPA 2012.

While pko9 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely infallible. Players are encouraged to use strong, unique passwords for their pko9 accounts and to enable two-factor authentication (2FA) for an additional layer of account security.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, Filipino players have the following rights in respect of their personal data held by pko9. To exercise any of these rights, contact the pko9 Data Privacy Officer as described in Section 13.

pko9 will respond to all valid data subject rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, pko9 may extend this period by a further thirty (30) days, subject to notification of the extension and its reasons within the initial period.

The pko9 platform is strictly intended for individuals aged 21 and above. pko9 does not knowingly collect or process personal data from any individual under the age of 21. This age restriction applies across all categories of gaming available on the pko9 platform, in compliance with Philippine law and PAGCOR regulations.

Where pko9 discovers or has reasonable grounds to believe that an account has been created by a person under 21 years of age, the account will be immediately suspended, all associated personal data will be deleted (subject to any mandatory retention obligations), and any funds deposited will be returned through the original payment method to the extent permitted by applicable anti-money laundering regulations.

Parents and guardians of minors who have reason to believe that a minor has registered on pko9 or otherwise provided personal information to the platform are encouraged to contact the pko9 Data Privacy Officer immediately so that appropriate steps can be taken.

Some of the third-party service providers that pko9 works with — including certified international game providers such as Evolution Gaming, Pragmatic Play, and others — may be located outside the Philippines and may process personal data in countries other than the Philippines.

Where personal data is transferred outside the Philippines, pko9 ensures that appropriate safeguards are in place to protect that data and to ensure a level of protection consistent with the requirements of the DPA 2012. These safeguards include, without limitation:

• Contractual data processing agreements incorporating data protection clauses that meet the standard required by the NPC;
• Transfers only to jurisdictions or entities that provide an adequate level of data protection as assessed by pko9 or recognized by the NPC;
• Regular monitoring and auditing of third-party data processors to ensure ongoing compliance with pko9's data protection standards.

Players may request information about the specific safeguards applied to cross-border data transfers by contacting the pko9 Data Privacy Officer.

pko9 may update or revise this Privacy Policy from time to time to reflect changes in applicable Philippine law, regulatory guidance from the NPC or PAGCOR, pko9's data processing activities, or the technological environment in which the platform operates.

Where changes to this Privacy Policy are material — for example, where new categories of personal data are to be collected or new purposes for processing are introduced — pko9 will provide advance notice to registered players via their registered email address and/or a prominent notification on the platform, at least fourteen (14) days before the changes take effect. For non-material updates (such as clarifications or formatting corrections), the revised Policy will be published on this page with an updated "Last Updated" date and no separate notification will be required.

Continued use of the pko9 platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the updated Policy. If you do not agree with any changes, you should cease use of the platform and contact pko9 support to discuss account closure in accordance with the procedures set out in the pko9 Terms & Conditions.

In compliance with the DPA 2012 and NPC Advisory Opinion requirements, pko9 has designated a Data Privacy Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable Philippine data protection law. You may contact the pko9 DPO to exercise your data rights, raise a privacy concern, or seek clarification on any aspect of this Policy through the following channels:

• Email: [email protected] — please include "Privacy / DPO Request" in your subject line. Responses within 2 business hours.
• Live Chat: Available 24/7 from within your logged-in pko9 account. Average response time under 5 minutes. For urgent privacy concerns, live chat is the fastest channel.

When submitting a data rights request or privacy complaint, please include your registered pko9 account email address, a clear description of your request or concern, and any supporting information that will allow pko9 to identify you and process your request efficiently.

If you are unsatisfied with pko9's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines in accordance with the NPC's published complaint procedures.