Privacy Policy

1. Introduction

pko9 ("pko9," "we," "us," or "our") operates the online gaming platform accessible at pko9.com and any associated mobile applications (collectively, the "Platform"). We are committed to protecting the privacy and personal data of all players, visitors, and users of the pko9 Platform ("you" or "your").

This Privacy Policy describes how pko9 collects, uses, stores, shares, and protects your personal data in connection with your use of the Platform. It is prepared in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

2. Data Controller

pko9 is the personal information controller responsible for your personal data collected through the Platform. For all privacy-related inquiries, requests, and complaints, you may contact our Data Protection Officer (DPO) using the contact details provided in Section 15 of this Policy.

pko9 has registered its data processing systems with the National Privacy Commission as required under the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

3. Personal Data We Collect

3.1 Registration and Identity Data

When you create a pko9 account, we collect: your full legal name, date of birth, nationality, residential address (including city — Manila, Cebu, Davao, Quezon City, Makati, or elsewhere in the Philippines), email address, and mobile number. This information is required to create and maintain your account and to verify your identity in compliance with PAGCOR regulations and Philippine anti-money laundering laws.

3.2 Identity Verification (KYC) Data

To comply with Know Your Customer (KYC) requirements, pko9 may collect copies of government-issued identification documents (such as a Philippine passport, SSS ID, UMID, PhilSys National ID, or driver's license), proof of address documents, and selfie photographs for facial verification purposes.

3.3 Financial and Transaction Data

pko9 collects records of all deposits, withdrawals, wagers, and bonus transactions associated with your account. We collect the payment method type (e.g., GCash, PayMaya, BPI, BDO, Metrobank) and transaction reference numbers. We do not store full payment credentials such as GCash PINs, PayMaya passwords, or complete bank account numbers.

3.4 Gaming Activity Data

pko9 collects detailed records of your gaming activity on the Platform, including games played, bet amounts, game outcomes, session durations, and responsible gaming tool usage. This data is used to operate the Platform, resolve disputes, detect fraud, and comply with regulatory reporting obligations.

3.5 Technical and Device Data

When you access the Platform, pko9 automatically collects technical data including your IP address, device type and model, operating system, browser type and version, screen resolution, and general geographic location derived from your IP address. This data is used for security monitoring, fraud detection, and Platform optimization.

3.6 Communications Data

pko9 retains records of all communications between you and pko9 support, including live chat transcripts, email correspondence, and support ticket records. These records are used to resolve disputes, improve our support services, and comply with regulatory requirements.

4. How We Collect Your Data

pko9 collects your personal data through the following means:

• Directly from you: Information you provide during registration, identity verification, payment processing, support interactions, and promotional opt-ins.
• Automatically: Technical and device data collected via cookies, web beacons, server logs, and similar tracking technologies when you access the Platform.
• From third parties: Identity verification data from KYC service providers; fraud and risk data from payment processors; and regulatory data from PAGCOR or other competent authorities where required by law.

5. How We Use Your Personal Data

pko9 uses your personal data for the following purposes:

• To create, maintain, and manage your pko9 account.
• To verify your identity and age (21+) in compliance with Philippine gaming regulations.
• To process deposits, withdrawals, and other financial transactions via GCash, PayMaya, BPI, BDO, Metrobank, and other accepted payment methods.
• To provide and improve the games, features, and services available on the pko9 Platform.
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities.
• To comply with our legal and regulatory obligations, including PAGCOR reporting requirements and the Anti-Money Laundering Act (AMLA).
• To administer bonuses, promotions, and loyalty programs.
• To provide customer support and resolve disputes.
• To send you transactional communications (account notifications, payment confirmations, security alerts).
• To send you promotional communications, where you have provided your consent.
• To conduct responsible gaming monitoring and to provide responsible gaming tools and interventions.
• To analyze Platform usage and improve user experience.

6. Legal Basis for Processing

pko9 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you (i.e., to operate your pko9 account and provide gaming services).
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, the Anti-Money Laundering Act, and the Data Privacy Act.
• Legitimate interests: Processing for fraud prevention, security monitoring, and Platform improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided your explicit consent. You may withdraw consent at any time.

7. Data Sharing and Disclosure

pko9 does not sell your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash (Mynt), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your transactions.
• Identity verification providers: Third-party KYC and age verification service providers engaged by pko9 to verify player identities.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government authorities, where required by law or court order.
• Technology and infrastructure providers: Cloud hosting, data centre, and cybersecurity service providers engaged by pko9 to operate and secure the Platform.
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

8. International Data Transfers

Some of pko9's technology and service providers may be located outside the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection to the Philippines, pko9 will implement appropriate safeguards — such as contractual data protection clauses approved by the National Privacy Commission — to ensure that your data remains protected in accordance with the Data Privacy Act of 2012.

9. Data Retention

pko9 retains your personal data for as long as your account is active and for such additional period as is required by applicable law or regulation. In particular:

• Account and identity data is retained for a minimum of five (5) years following account closure, in compliance with PAGCOR regulations and the Anti-Money Laundering Act.
• Transaction records are retained for a minimum of five (5) years from the date of each transaction.
• Support communications are retained for three (3) years from the date of the communication.
• Marketing consent records are retained for as long as necessary to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, pko9 will securely delete or anonymize your personal data in accordance with our data disposal procedures.

10. Cookies and Tracking Technologies

pko9 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function correctly, including session management and security features. These cannot be disabled.
• Analytics cookies: Used to understand how players use the Platform, which pages are most visited, and where technical issues occur. This data is aggregated and anonymized.
• Preference cookies: Used to remember your language, display settings, and other preferences to improve your experience on the Platform.
• Marketing cookies: Used to deliver relevant promotional content, where you have consented to receive marketing communications. You may withdraw this consent at any time via your account settings.

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of the Platform.

11. Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by pko9:

• Right to be informed: You have the right to be informed of how your personal data is collected, used, and shared, as described in this Privacy Policy.
• Right of access: You may request a copy of the personal data pko9 holds about you, together with information about how it is processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held by pko9. You may update basic account information directly via your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to pko9's legal retention obligations.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe pko9 has violated your data privacy rights.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15. pko9 will respond to all verified data rights requests within fifteen (15) calendar days, or within such extended period as permitted by the Data Privacy Act.

12. Children's Privacy

The pko9 Platform is strictly intended for adults aged 21 years and older, in accordance with Philippine gaming regulations. pko9 does not knowingly collect personal data from individuals under the age of 21. If pko9 discovers that personal data has been collected from a person under 21, that account will be immediately suspended and the data will be deleted in accordance with our data disposal procedures.

If you believe that a minor has registered a pko9 account, please contact our support team immediately at [email protected] so that we can take prompt action.

13. Security Measures

pko9 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the pko9 Platform.
• Encryption of sensitive data at rest, including identity documents and financial records.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing of the Platform.
• Multi-factor authentication requirements for administrative access to pko9 systems.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

14. Changes to This Privacy Policy

pko9 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, pko9 will notify registered players via email or a prominent notice on the Platform at least fourteen (14) days before the changes take effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Policy periodically.

15. Contact and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or pko9's data processing practices, or if you wish to exercise your data rights, please contact our Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.