slotpg Privacy Policy

slotpg operates the online casino and sports betting platform accessible at slotpg.bio and is the Personal Information Controller (PIC) with respect to all personal data collected from users of the Platform. As PIC, slotpg determines the purposes and means of processing personal data in connection with the Platform's operation and is responsible for ensuring that processing activities comply with the Data Privacy Act of 2012 (R.A. 10173), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission (NPC).

slotpg operates within the regulatory framework governing licensed online gambling in the Philippines as administered by the Philippine Amusement and Gaming Corporation (PAGCOR). Data processing activities related to regulatory compliance, AML obligations, and KYC identity verification are carried out pursuant to PAGCOR's licensing requirements in addition to slotpg's obligations under the DPA.

For all privacy-related inquiries, the slotpg Data Protection Officer (DPO) may be contacted at: [email protected]

slotpg collects and processes the following categories of personal data in connection with account registration, platform use, financial transactions, and regulatory compliance:

slotpg collects personal data through the following methods and sources:

• Direct provision by you: Information you submit during account registration, KYC identity verification, payment method setup, support requests, or feedback submissions.
• Automated collection: Technical data (IP addresses, device identifiers, session tokens, browser information) collected automatically when you access or use the Platform.
• Transactional records: Financial data generated through deposit and withdrawal transactions processed via GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, 7-Eleven, and Cebuana.
• Gaming activity logs: Data generated automatically by the Platform's game engines and betting systems during your active sessions.
• Third-party identity verification services: Where you provide consent, slotpg may use licensed third-party KYC service providers to verify identity documents against government databases, including the Philippine Statistics Authority's PhilSys registry where applicable.
• Publicly available sources: Where permitted by law and relevant to AML or fraud prevention obligations, slotpg may supplement account information with data from publicly available sources such as court records or PAGCOR exclusion lists.

slotpg processes your personal data for the following specific, legitimate purposes:

1. Account registration and management: To create, verify, and maintain your slotpg Account and ensure only eligible individuals (aged 21+, not on exclusion lists) are granted access.
2. KYC and identity verification: To comply with PAGCOR's mandatory Know Your Customer requirements and verify that account holders are who they represent themselves to be.
3. Payment processing: To process deposits, withdrawals, bonus credits, and refunds through your registered payment methods including GCash and PayMaya.
4. Fraud prevention and AML compliance: To detect, investigate, and prevent fraudulent activity, money laundering, financial crime, and breaches of the slotpg Terms & Conditions.
5. Provision of gaming services: To deliver the Platform's casino games, sports betting, bingo, sabong, and related features to your Account.
6. Customer support: To respond to your inquiries, resolve complaints, process account changes, and provide assistance in English and Tagalog.
7. Responsible gaming compliance: To administer and enforce deposit limits, self-exclusion requests, cooling-off periods, and other responsible gaming measures required under PAGCOR regulations.
8. Marketing communications: To send you information about slotpg promotions, bonuses, and new game launches — only where you have provided explicit consent, which you may withdraw at any time.
9. Regulatory reporting: To prepare and submit reports required by PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities.
10. Security and system integrity: To monitor for unauthorized access, protect the integrity of the Platform's infrastructure, and investigate security incidents.

Under the Data Privacy Act of 2012, slotpg's processing of personal data rests on one or more of the following lawful bases depending on the processing activity:

• Consent (Section 12(a), DPA): Where you have given specific, informed, and freely given consent for a processing activity — such as receiving promotional marketing communications — processing proceeds on the basis of that consent. You may withdraw consent at any time by contacting slotpg support or adjusting your Account notification preferences.
• Contractual necessity (Section 12(b), DPA): Processing necessary for the performance of the contract between you and slotpg — including account registration, KYC verification, gameplay, and payment processing — is carried out on this basis.
• Legal obligation (Section 12(c), DPA): Processing required for slotpg to comply with applicable legal or regulatory obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act itself, and other applicable Philippine law.
• Legitimate interests (Section 12(f), DPA): Processing necessary for the legitimate interests of slotpg or a third party, including fraud prevention, security monitoring, and improvement of the Platform's services, where such interests are not overridden by your fundamental rights and freedoms as a data subject.

slotpg does not sell, rent, or trade personal data to third-party marketing companies or data brokers under any circumstances. Personal data is shared externally only in the following limited circumstances:

• Payment service providers: GCash (Mynt), PayMaya (Maya Philippines), BPI, BDO, Metrobank, UnionBank, Cebuana Lhuillier, and 7-Eleven (Cliqq) receive necessary financial data to process your transactions. These providers are bound by their own privacy policies and applicable financial regulation.
• KYC and identity verification providers: Licensed third-party identity verification services engaged by slotpg to assist with KYC obligations receive identity data strictly for verification purposes and are prohibited from using it for any other purpose.
• Game providers and technology suppliers: Game engine providers whose titles are hosted on the slotpg platform may receive anonymized or pseudonymized session data for technical performance and RNG audit purposes. Personal identity data is not shared with game providers.
• PAGCOR and regulatory authorities: slotpg is required by its licensing conditions to provide player data, transaction reports, and other information to PAGCOR, the AMLC, and other competent Philippine authorities upon valid legal request or as part of routine regulatory reporting.
• Law enforcement and courts: slotpg will disclose personal data to law enforcement agencies, courts, or government bodies in the Philippines where required to do so by a valid legal obligation, court order, or in connection with the investigation of a criminal offence.
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged by slotpg may access personal data on a strictly need-to-know basis subject to professional confidentiality obligations.

Where slotpg's operations involve the transfer of personal data to service providers or technology partners located outside the Philippines — including cloud infrastructure providers, game platform operators, or technical support vendors — such transfers are carried out only where adequate data protection safeguards are in place, consistent with Section 21 of the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

Safeguards for international transfers may include:

• Standard Contractual Clauses (SCCs) or equivalent contractual protections incorporated into slotpg's data processing agreements with international service providers.
• Transfer to jurisdictions assessed by the NPC as providing an adequate level of data protection.
• Your explicit consent to the transfer where required under applicable law.

You may request further information about the specific safeguards applicable to international transfers involving your data by contacting slotpg's Data Protection Officer.

slotpg retains personal data for no longer than is necessary for the purpose for which it was collected, subject to overriding legal, regulatory, and contractual retention obligations. The following general retention periods apply:

At the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized so that it can no longer be associated with a specific individual.

slotpg implements a range of technical and organizational security measures to protect personal data against unauthorized access, disclosure, loss, alteration, destruction, or unlawful processing. These measures include but are not limited to:

• Encryption: TLS/SSL encryption for all data in transit between your device and slotpg's servers. AES-256 encryption for sensitive data stored at rest, including identity documents and payment details.
• Access controls: Role-based access control (RBAC) ensuring that slotpg staff can only access personal data relevant to their specific job function. Access to sensitive data is logged, audited, and subject to periodic review.
• Two-factor authentication: SMS OTP-based 2FA is available for all user accounts and is mandatory for administrative access to slotpg's internal systems.
• Network security: Firewall protection, intrusion detection systems, and regular penetration testing to identify and remediate security vulnerabilities.
• Staff training: All slotpg staff with access to personal data receive data privacy training covering the DPA, slotpg's internal data handling policies, and incident response procedures.
• Incident response: slotpg maintains a documented personal data breach response procedure. In the event of a breach, slotpg will assess the risk to affected data subjects, implement containment measures, notify the NPC, and inform affected users in accordance with the DPA's breach notification requirements.

While slotpg takes all reasonable steps to protect your personal data, no system is entirely immune to security threats. You can help protect your own data by using a strong, unique password for your slotpg Account and by notifying us immediately if you suspect unauthorized access.

slotpg uses cookies and similar tracking technologies on the Platform to deliver core functionality, enhance the user experience, and collect aggregated analytics. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that maintain your logged-in state and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing the Platform's core functionality.
• Functional cookies: Store your preferences such as language settings and responsible gaming tool configurations to improve your experience on return visits.
• Analytics cookies: Collect anonymized data about how users interact with the Platform — such as pages visited, time spent on pages, and error occurrences — to help slotpg improve the Platform's performance and usability.
• Session replay and heatmap tools: Where used, these tools collect anonymized interaction data to help slotpg identify usability issues. Personal data visible in input fields during sessions is automatically masked and is not captured by these tools.

You may configure your browser settings to block or delete cookies at any time. Note that disabling strictly necessary cookies will impair your ability to log in and use core Platform features. For detailed cookie settings, refer to the cookie preferences panel accessible from the footer of the slotpg website.

To exercise any of the rights described in this Policy — including the rights to access, correction, objection, erasure, and data portability — please submit a written request to slotpg's Data Protection Officer at [email protected], clearly identifying:

1. The specific right you wish to exercise.
2. Your full name and registered slotpg Account email address or username.
3. Sufficient information to enable slotpg to locate and identify the relevant personal data.
4. A copy of a valid Philippine government-issued ID for identity verification purposes.

slotpg will acknowledge receipt of your request within three (3) business days. A substantive response will be provided within thirty (30) calendar days of receipt, or within a shorter period where required by applicable law. Where an extension is required (e.g., due to the complexity or volume of your request), slotpg will notify you within the initial 30-day period and provide a revised timeline.

The slotpg Platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21. The minimum age for participation in online gambling in the Philippines under PAGCOR regulations is 21 years. slotpg enforces this restriction through mandatory age declaration at registration and KYC identity verification that confirms the account holder's date of birth against a government-issued Philippine ID.

If slotpg discovers or is notified that an Account is held by an individual under 21 years of age, it will immediately suspend the Account, preserve the data for the period necessary for PAGCOR regulatory reporting, and thereafter securely delete the personal data of the underage individual. Any funds deposited by an underage account holder will be handled in accordance with PAGCOR's guidelines on unauthorized accounts.

Parents and guardians who believe that a minor under their supervision has registered an Account with slotpg should contact the DPO immediately at the contact address provided in Section 14.

slotpg reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, slotpg's data processing activities, or the Platform's features and services. Material changes to this Policy will be communicated to registered Account holders via email to the address registered with your slotpg Account, with at least fourteen (14) days' advance notice before the changes take effect.

The effective date at the top of this Policy reflects the date of the most recent version. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the updated Policy. If you do not accept the updated Policy, you must cease using the Platform and may request Account closure in accordance with the process described in the slotpg Terms & Conditions.

Previous versions of the slotpg Privacy Policy are retained internally and are available to data subjects upon written request submitted to the Data Protection Officer.

For all privacy-related inquiries, data subject rights requests, or data breach concerns, please contact slotpg's Data Protection Officer:

• Email: [email protected]
• Attn: Data Protection Officer, slotpg
• Live Chat: Available 24/7 from within your logged-in Account dashboard

If you are not satisfied with slotpg's response to your privacy concern or data subject rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the competent supervisory authority for data protection matters under the Data Privacy Act of 2012. The NPC's complaint process and contact details are published on the NPC's official government website.