pk9 Casino – Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") applies to all personal data processed by pk9 ("pk9," "we," "us," or "the Company") in connection with the online gaming platform operated at pk9.lat. This Policy governs data collected from registered account holders, prospective players who initiate but do not complete registration, and visitors to the pk9 website.

pk9 is a registered Personal Information Controller (PIC) under the Philippine Data Privacy Act of 2012 (R.A. 10173) and its Implementing Rules and Regulations. As a PAGCOR-regulated operator, pk9 is also subject to PAGCOR's data management and player protection directives. This Policy is designed to satisfy both frameworks and to give Filipino players a clear, honest account of how their data is handled.

By creating and using a pk9 account, you consent to the processing of your personal data as described in this Policy. If you do not agree, you should not register for or use the pk9 platform.

2. Personal Data We Collect

pk9 collects personal data in the following categories:

2.1 Registration Data

When you create a pk9 account, we collect: full legal name, date of birth, Philippine mobile number or email address, and a self-selected password (stored in hashed, non-reversible form — never in plain text).

2.2 Identity Verification (KYC) Data

As required by PAGCOR and Philippine AML law, we collect government-issued identification documents. Acceptable documents include: PhilSys National ID, passport, driver's license, SSS ID, UMID, or PRC ID. We collect the document number, expiry date, and a photograph or scan of the document. A selfie or liveness check may be required for verification.

2.3 Financial Data

We collect details necessary to process deposits and withdrawals: GCash or PayMaya account number, bank account name and number (for BPI, BDO, Metrobank transfers), and transaction history within the pk9 platform. We do not store full payment card numbers. All financial data is encrypted at rest and in transit.

2.4 Gaming Activity Data

We record your gaming activity on pk9, including: game sessions played, bet amounts and outcomes, bonus utilisation, and responsible gaming tool settings (deposit limits, self-exclusion status). This data is required for regulatory reporting to PAGCOR and for AML monitoring.

2.5 Technical and Device Data

We automatically collect technical data when you access pk9: IP address, device type and operating system, browser type and version, session timestamps, and page interaction data. This data is used for security monitoring, fraud detection, and platform performance optimisation.

2.6 Communications Data

If you contact pk9 support, we retain records of your communications including the content of messages, timestamps, and resolution outcomes. This supports service quality and dispute resolution.

3. How We Use Your Personal Data

pk9 processes personal data only for the purposes listed below, each with a corresponding legal basis:

Purpose	Legal Basis
Account registration and authentication	Contract performance
KYC identity verification	Legal obligation (PAGCOR / AMLA)
Processing deposits and withdrawals	Contract performance
AML transaction monitoring	Legal obligation (R.A. 9160, as amended)
Responsible gaming monitoring and intervention	Legal obligation (PAGCOR directives)
Security and fraud prevention	Legitimate interest
Regulatory reporting to PAGCOR	Legal obligation
Customer support and dispute resolution	Contract performance / legitimate interest
Platform analytics and improvement	Legitimate interest
Promotional communications (where opted-in)	Consent

pk9 does not use personal data for automated decision-making that produces legal or similarly significant effects on players, other than standard fraud detection and AML screening systems that flag accounts for human review.

4. Data Sharing and Disclosure

pk9 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following limited circumstances:

4.1 Regulatory and Legal Authorities

pk9 is required to share data with PAGCOR as the licensing regulator, with the Anti-Money Laundering Council (AMLC) where mandated by law, and with law enforcement agencies where a valid legal demand is presented. These disclosures are mandatory and cannot be avoided without pk9 violating its legal obligations.

4.2 Service Providers

pk9 engages a limited number of third-party service providers who process personal data on pk9's behalf — including payment processors, identity verification providers, cloud hosting services, and customer support tools. All service providers are contractually bound to process data only for the specified purpose, to apply appropriate security measures, and to comply with Philippine data privacy law. pk9 remains accountable for their processing.

4.3 Game Providers

Third-party game providers integrated into the pk9 platform (such as JILI, Pragmatic Play, Evolution) may receive limited technical data (session tokens, stake amounts) to facilitate game delivery. They do not receive personally identifiable information beyond what is technically necessary.

4.4 Business Transfers

In the event of a merger, acquisition, or transfer of business assets involving pk9, personal data may be transferred to the successor entity, subject to equivalent data protection commitments. Players will be notified of any such transfer via the contact details on file.

5. Data Retention

pk9 retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods required by law:

• KYC and identity documents: 5 years from account closure, as required by AMLA.
• Financial transaction records: 5 years from the date of the transaction.
• Gaming activity logs: 3 years from the last activity date.
• Communications records: 2 years from the date of communication.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Data subject to an ongoing legal hold, regulatory investigation, or unresolved dispute will be retained until that matter is concluded.

6. Data Security

pk9 implements technical and organisational measures appropriate to the sensitivity of personal data processed, including:

• 256-bit SSL/TLS encryption for all data in transit between user devices and pk9 servers.
• AES-256 encryption for personally identifiable data stored at rest.
• One-way cryptographic hashing (bcrypt) for all passwords — plain-text passwords are never stored.
• Role-based access controls ensuring that pk9 staff access only the data necessary for their specific function.
• Intrusion detection systems and continuous security monitoring.
• Regular third-party security audits and penetration testing.
• Multi-factor authentication for all internal administrative access.

In the event of a personal data breach that is likely to pose a risk to the rights and freedoms of affected individuals, pk9 will notify the National Privacy Commission (NPC) within 72 hours of discovery, and will notify affected players without undue delay, as required by the Data Privacy Act of 2012.

7. Your Rights Under Philippine Law

As a data subject under R.A. 10173, you have the following rights with respect to your personal data held by pk9:

• Right to be informed: You have the right to know how your personal data is being processed — which this Policy fulfils.
• Right of access: You may request a copy of the personal data pk9 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure or blocking: You may request deletion or blocking of your personal data where processing is unlawful or no longer necessary, subject to pk9's legal retention obligations.
• Right to object: You may object to processing based on legitimate interest, including direct marketing.
• Right to data portability: You may request your personal data in a structured, commonly used format.
• Right to damages: You have the right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data.

To exercise any of these rights, contact pk9 at the support email address displayed in the footer of this page. We will respond within a reasonable period and in compliance with NPC guidelines. Note that certain requests may be limited where pk9 has overriding legal obligations, such as AML and PAGCOR regulatory requirements.

If you believe pk9 has not adequately addressed your data privacy concern, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.

8. Cookies and Tracking Technologies

pk9 uses cookies and similar tracking technologies on pk9.lat for the following purposes:

• Essential cookies: Required for the platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing platform functionality.
• Analytics cookies: Used to understand how players navigate the platform, which pages are visited, and where performance improvements can be made. Analytics data is aggregated and anonymised where possible.
• Preference cookies: Used to remember your language and display settings.

pk9 does not use third-party advertising cookies or cross-site tracking cookies. You can manage your cookie preferences via your browser settings. Note that disabling essential cookies will affect your ability to log in and use the pk9 platform.

9. Children's Privacy

The pk9 platform is strictly for individuals aged 21 and above, as mandated by PAGCOR. pk9 does not knowingly collect personal data from individuals under 21. If pk9 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all data will be deleted, and the matter will be reported to PAGCOR and, where applicable, the NPC.

10. Marketing Communications

pk9 will only send promotional communications — including bonus offers, game announcements, and platform updates — to players who have opted in to receive them during registration or subsequently via account settings. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account, or by contacting pk9 support. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal.

pk9 will never send promotional communications to players who have activated self-exclusion or who are subject to a responsible gaming account restriction.

11. Amendments to This Policy

pk9 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Material changes will be communicated to registered players via the email address or mobile number on file at least seven (7) days before the changes take effect. The updated Policy will be published on this page with a revised "Last Updated" date.

Continued use of the pk9 platform after the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree with an amendment, you must discontinue use of the platform and request account closure before the effective date.

12. Contact and Data Privacy Officer

For all data privacy inquiries, access requests, correction requests, or complaints, please contact pk9 at the support email address displayed in the footer of this page. Please include "Data Privacy Request" in the subject line of your message, along with your registered account name and a description of your request.

pk9 has designated a Data Privacy Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Policy. All data privacy correspondence will be handled by or escalated to the DPO where appropriate.