Your Privacy Matters
to pgsoft

pgsoft ("we," "us," "our") is an online gaming and entertainment platform operating at pgsoft.today, designed and built specifically for Filipino players. We offer a wide catalog of casino-style games — from high-RTP slot titles and live bingo rooms to fishing arcade games like Pirate Fishing and Fishing Yi Lu Fa — all accessible in Philippine Peso (PHP) through GCash, PayMaya, BPI, BDO, and Metrobank.

As a platform serving users in the Philippines, pgsoft is committed to protecting your personal information in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations. We are registered with the National Privacy Commission (NPC) as a personal information controller.

This Privacy Policy applies to all users of the pgsoft platform — whether you are a registered player, a visitor browsing the site without an account, or someone interacting with us through our support channels. By accessing or using pgsoft, you acknowledge that you have read and understood this policy.

pgsoft collects personal data across three broad categories: information you provide directly, information generated by your use of the platform, and information we receive from third-party service providers. The table below provides a breakdown:

pgsoft collects personal data through the following channels and mechanisms:

• Account registration: When you create a pgsoft account, you provide your name, email address, mobile number, date of birth, and preferred currency. This data is collected directly through the registration form.
• KYC verification: As part of our PAGCOR-aligned Know Your Customer process, you submit government-issued identification documents and, in some cases, a selfie or liveness verification photo. These are collected via our secure document upload portal.
• Deposit and withdrawal transactions: When you make a financial transaction via GCash, PayMaya, BPI, BDO, or Metrobank, our payment processing partners transmit transaction confirmation data to pgsoft. We do not store full payment account numbers — only masked identifiers and transaction references.
• Platform usage (automatic): Our servers automatically log technical data — including your IP address, device identifiers, browser type, session duration, pages visited, and game rounds played — each time you access or interact with the pgsoft platform.
• Cookies and similar technologies: pgsoft uses cookies and local storage to maintain your session, remember preferences, and collect anonymized analytics data. See Section 07 for full cookie details.
• Support interactions: When you contact pgsoft via live chat or email, your message content, device information, and account details are recorded and stored as part of our support ticket system.
• Third-party sources: In certain cases, pgsoft may receive supplementary identity or fraud-check data from third-party identity verification providers, payment processors, or credit reference agencies to support our KYC and anti-money laundering obligations.

pgsoft uses personal data only for the purposes described below. We do not use your data for any purpose that is incompatible with the reasons for which it was collected:

• Account management: To create and maintain your pgsoft account, authenticate your identity at login, and manage your account settings and preferences.
• Service delivery: To provide access to games, process bets and payouts, credit bonuses, and deliver the full range of gaming and entertainment services available on the platform.
• Payment processing: To facilitate deposits and withdrawals in Philippine Peso via your chosen payment method, verify payment authenticity, and prevent fraudulent transactions.
• KYC and regulatory compliance: To verify your identity and age (21+ requirement), comply with PAGCOR licensing obligations, and meet our duties under the Anti-Money Laundering Act (RA 9160 as amended) and the Terrorism Financing Prevention and Suppression Act.
• Responsible gaming: To monitor gaming patterns that may indicate problem gambling behavior, enforce deposit and loss limits you have set, and deliver responsible gaming notifications where appropriate.
• Customer support: To respond to your support inquiries, resolve disputes, investigate complaints, and maintain records of our communications with you.
• Platform security and fraud prevention: To detect, investigate, and prevent unauthorized access, cheating, collusion, bot activity, multi-accounting, and other prohibited conduct described in our Terms & Conditions.
• Analytics and platform improvement: To analyze aggregated, anonymized usage data to understand how players interact with the platform and to improve game selection, user experience, and site performance.
• Marketing communications (with consent): To send you promotional offers, bonus notifications, and platform updates via email or SMS — only where you have explicitly opted in. You may withdraw consent at any time.
• Legal obligations: To comply with lawful orders from Philippine courts, PAGCOR, the National Privacy Commission, AMLC, or other competent government authorities.

Under the Data Privacy Act of the Philippines (RA 10173), pgsoft relies on the following lawful bases for processing your personal data, depending on the specific purpose:

• Contractual necessity: Processing required to perform our obligations under the account agreement with you — including providing games, processing payments, and managing your account.
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR regulations, the Data Privacy Act, anti-money laundering obligations, and tax reporting requirements.
• Legitimate interests: Processing necessary for pgsoft's legitimate interests in operating a secure, fair, and commercially viable platform — including fraud prevention, security monitoring, and anonymized analytics — provided such interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed consent — primarily for marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

pgsoft does not sell, rent, or trade your personal information to any third party under any circumstances. We share your data only in the limited circumstances described below, and only to the extent necessary for each specific purpose:

• Payment processors: GCash, PayMaya, BPI, BDO, and Metrobank receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and applicable Philippine financial regulations.
• Identity verification providers: Third-party KYC service providers receive identity document data solely for the purpose of verifying your identity and age. They are contractually prohibited from using this data for any other purpose.
• Game technology providers: Game engine and RNG providers may receive anonymized session data to support game performance and fairness auditing. No personally identifiable information is shared with game providers beyond what is technically necessary for session management.
• Regulatory authorities: pgsoft is required by law to disclose certain personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and other Philippine government agencies upon lawful request or as mandated by applicable reporting obligations.
• Law enforcement: Where required by a valid court order, subpoena, or lawful directive from Philippine law enforcement authorities, pgsoft will disclose the minimum personal data necessary to comply with such legal process.
• Group companies: pgsoft may share your data with affiliated companies within its corporate group for the purposes of consolidated compliance reporting, technical infrastructure management, and fraud prevention — subject to the same data protection standards described in this policy.

All third-party service providers who process personal data on pgsoft's behalf are required to enter into data processing agreements that obligate them to process your data only on our instructions, maintain appropriate security measures, and comply with RA 10173.

pgsoft uses cookies — small text files stored on your device — and similar tracking technologies (local storage, session tokens, pixel tags) to operate and improve the platform. Here is a plain-English breakdown of what we use and why:

You can manage your cookie preferences through your browser settings. Note that disabling essential or security cookies will impair your ability to use the pgsoft platform. pgsoft does not use cookies to serve third-party advertising or to track your activity across unrelated websites.

pgsoft retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, subject to applicable legal retention requirements. The following retention periods apply:

• Active account data: Retained for the full duration of your account's active status, plus a minimum of 5 years following account closure — consistent with PAGCOR record-keeping obligations and the Anti-Money Laundering Act's 5-year transaction record requirement.
• KYC documents: Retained for a minimum of 5 years from the date of submission or the date of account closure, whichever is later. This is a mandatory retention period under RA 9160 (Anti-Money Laundering Act).
• Transaction records: All deposit, withdrawal, and gaming transaction records are retained for a minimum of 5 years in accordance with AMLC reporting requirements and BIR tax record obligations.
• Support communications: Live chat transcripts and email correspondence are retained for 3 years from the date of the interaction, to support dispute resolution and regulatory audits.
• Technical and session logs: Server access logs and session data are retained for 12 months for security monitoring and fraud investigation purposes.
• Marketing data: Data collected on the basis of your marketing consent is deleted within 30 days of your withdrawal of consent, unless retention is required for another lawful purpose.
• Self-excluded accounts: Where you have activated self-exclusion, your account data is retained for the duration of the exclusion period and for 5 years thereafter to prevent re-registration and comply with regulatory obligations.

When retention periods expire and no legal obligation requires continued storage, pgsoft securely deletes or anonymizes your personal data so that it can no longer be attributed to you.

Under the Data Privacy Act of the Philippines (RA 10173), you have the following rights with respect to your personal data held by pgsoft. These rights can be exercised by contacting our Data Protection Officer (DPO) as described in Section 14:

• Right to be informed: You have the right to know how your personal data is being collected, processed, and used — which is the purpose of this Privacy Policy.
• Right to access: You may request a copy of the personal data pgsoft holds about you, including a summary of the categories of data, the purposes for which it is processed, and who it has been shared with.
• Right to correction: You may request correction of inaccurate, incomplete, or outdated personal data. Many corrections (such as email address or mobile number) can be made directly from your account settings.
• Right to erasure or blocking: You may request deletion or blocking of your personal data where it is no longer necessary for the original purpose, or where processing was based on consent that you have since withdrawn — subject to pgsoft's overriding legal retention obligations.
• Right to object: You have the right to object to processing based on legitimate interests — including direct marketing — and pgsoft must cease such processing unless it can demonstrate compelling legitimate grounds.
• Right to data portability: You may request that pgsoft provide your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) so that you can transfer it to another service provider.
• Right to damages: If you suffer damage as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data, you have the right to be indemnified for any damages sustained.
• Right to file a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe pgsoft has violated your data privacy rights. The NPC can be reached at privacy.gov.ph.

pgsoft implements a layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our technical and organizational security measures include:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and pgsoft servers is encrypted using TLS 1.3 with 256-bit AES encryption. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Data encryption at rest: Sensitive personal data — including KYC documents, government ID numbers, and financial account identifiers — is stored using AES-256 encryption on pgsoft's servers.
• Access controls: Access to personal data is restricted to pgsoft employees and contractors who require it to perform their job functions. All access is logged, audited, and subject to role-based access controls.
• Multi-factor authentication: Administrative access to pgsoft's internal systems requires multi-factor authentication. We also offer and encourage 2FA for player accounts.
• Regular security audits: pgsoft undergoes regular third-party penetration testing and security audits to identify and remediate vulnerabilities before they can be exploited.
• Data breach response: pgsoft maintains a documented data breach response plan. In the event of a personal data breach that poses a real risk to your rights and freedoms, pgsoft will notify the National Privacy Commission within 72 hours and affected data subjects without undue delay, as required by RA 10173.
• Employee training: All pgsoft staff who handle personal data receive mandatory data privacy and security training upon onboarding and annually thereafter.

While pgsoft employs industry-standard security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your pgsoft account credentials and for using a strong, unique password. If you suspect unauthorized access to your account, contact our support team immediately.

pgsoft is strictly an adult gaming platform. In accordance with PAGCOR regulations governing online gaming in the Philippines, access to pgsoft is permitted only for individuals who are 21 years of age or older. This age restriction is enforced through our KYC verification process, which requires all players to submit valid government-issued identification confirming their date of birth before they are permitted to make deposits or play games.

pgsoft does not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person below the minimum age, we will immediately suspend the associated account, delete all personal data collected in connection with that account, and reverse any transactions where technically and legally permissible.

If you believe a minor has registered on pgsoft or provided us with personal data, please contact our Data Protection Officer immediately at [email protected] so we can take prompt action.

pgsoft primarily stores and processes personal data on servers located within or serving the Asia-Pacific region. In certain circumstances — for example, when using internationally based technology infrastructure providers, cloud hosting services, or third-party KYC verification platforms — your personal data may be transferred to and processed in countries outside the Philippines.

Where such cross-border transfers occur, pgsoft ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under RA 10173. These safeguards include:

• Standard contractual clauses or data processing agreements that impose RA 10173-equivalent obligations on recipient organizations.
• Transfers only to countries or organizations that the National Privacy Commission has recognized as providing adequate data protection.
• Ensuring that recipients implement technical and organizational security measures equivalent to those described in Section 10 of this policy.

By using pgsoft, you acknowledge and consent to the transfer of your personal data as described in this section. If you have concerns about cross-border transfers of your data, please contact our Data Protection Officer.

pgsoft may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. When we make material changes to this policy, we will notify you through one or more of the following methods:

• A prominent notice displayed on the pgsoft platform upon your next login, requiring your acknowledgment of the updated policy.
• An email notification to the address associated with your pgsoft account, sent at least 14 days before the updated policy takes effect.
• An in-platform notification in your account dashboard.

The "Effective Date" at the top of this policy will always reflect when the current version came into force. Minor, non-material updates — such as corrections of typographical errors or clarifications that do not change the substance of our data practices — may be made without advance notice, though the effective date will be updated.

Your continued use of the pgsoft platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you should stop using pgsoft and may request account closure by contacting our support team.

pgsoft has appointed a Data Protection Officer (DPO) responsible for overseeing our compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests related to your personal data, you may contact our DPO through the following channels:

If you are not satisfied with pgsoft's response to your data privacy concern, you have the right to escalate your complaint directly to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for enforcing the Data Privacy Act and can be contacted through their official government portal.

These Terms were last updated on January 1, 2026 and are effective as of that date. pgsoft is committed to keeping this Privacy Policy clear, fair, and fully compliant with Philippine data protection law. If anything here is unclear, our support team is happy to explain any section in plain Filipino-English — just reach out via live chat or email.