petir108 Privacy Policy

This Privacy Policy ("Policy") describes how petir108 ("petir108," "we," "us," "our") collects, uses, stores, shares, and protects the personal information of users ("Player," "you," "your") who access or use the petir108 online gaming platform at petir108.asia and any associated mobile applications or services (collectively, the "Platform"). This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations.

01 Introduction

petir108 is committed to protecting the privacy and security of every Filipino player who chooses to enjoy our platform. We understand that your personal information is valuable, and we take our responsibility as a data controller seriously. This Policy applies to all personal data we collect through the Platform, through our customer support channels, and through any other interaction you have with petir108.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.

02 Data Controller

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, petir108 is the Personal Information Controller in respect of the personal data collected through the Platform. Our designated Data Protection Officer (DPO) can be contacted using the details provided in Section 15 of this Policy.

petir108 operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR). As a PAGCOR-licensed operator, petir108 is subject to regulatory obligations that may require the collection, retention, and disclosure of certain player data to PAGCOR and other competent Philippine government authorities.

03 Personal Data We Collect

petir108 collects the following categories of personal data from Players:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued ID;
• Date of birth (used to verify the 21+ age requirement);
• Nationality and country of residence;
• Residential address (including barangay, city/municipality, province, and ZIP code);
• Email address;
• Mobile number.

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., Philippine passport, SSS ID, UMID, driver's license, PhilSys national ID, PRC ID, or voter's ID);
• Proof of address documents (e.g., utility bill, bank statement, or barangay certificate);
• Selfie or liveness verification image where required for enhanced KYC;
• Proof of payment method ownership where required.

3.3 Financial Data

• GCash or PayMaya / Maya account reference (mobile number associated with the e-wallet);
• Bank account details for bank transfer transactions (account name, bank name, account number);
• Debit card details (card number, expiry — stored in tokenized form only);
• Transaction history including deposits, withdrawals, and wager records.

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser information;
• Session logs, login timestamps, and session duration;
• Game play history, wagering patterns, and Platform interaction data;
• Cookie identifiers and similar tracking technology data (see Section 8).

3.5 Communications Data

• Records of live chat, email, and other support communications with petir108;
• Feedback, survey responses, and promotional opt-in preferences.

04 How We Collect Your Data

petir108 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated collection: Technical and usage data collected automatically when you access and use the Platform, including through cookies and similar technologies (see Section 8);
• Third-party sources: Identity verification data from KYC service providers; fraud and sanctions screening data from compliance databases; payment verification data from payment processors such as GCash and Maya;
• Regulatory sources: Information received from PAGCOR or other Philippine government authorities in connection with our licensing obligations.

05 How We Use Your Personal Data

petir108 uses your personal data for the following purposes:

Purpose	Data Categories Used
Account registration and management	Identity & Contact Data
Age and identity verification (KYC)	Identity & Contact Data, KYC Data
Processing deposits and withdrawals	Financial Data, Identity Data
Fraud prevention and anti-money laundering (AML) compliance	All categories
PAGCOR regulatory reporting	Identity Data, Financial Data, Usage Data
Customer support and dispute resolution	Identity Data, Communications Data, Usage Data
Responsible gaming monitoring and intervention	Usage Data, Financial Data
Platform security and fraud detection	Technical & Usage Data
Personalization and platform improvement	Usage Data, Communications Data
Marketing communications (with consent)	Identity & Contact Data, Communications Data

petir108 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable Philippine law.

06 Legal Basis for Processing

petir108 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you, including account management, payment processing, and game provision;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AML obligations under Republic Act No. 9160 (Anti-Money Laundering Act), and other applicable Philippine laws;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

07 Sharing Your Personal Data

petir108 does not sell your personal data. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

7.1 Service Providers

Third-party vendors who provide services on our behalf, including KYC and identity verification providers, payment processors (GCash, Maya, and banking partners), cloud hosting providers, customer support platform providers, and fraud detection services. All service providers are contractually bound to process your data only on petir108's instructions and in compliance with applicable data protection law.

7.2 Regulatory and Law Enforcement Authorities

PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law, court order, or regulatory instruction.

7.3 Group Companies

Affiliated entities within the petir108 corporate group, where necessary for internal administrative purposes, subject to the same data protection standards as set out in this Policy.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of petir108's assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments. You will be notified of any such transfer in advance.

08 Cookies & Tracking Technologies

petir108 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function, including session management, login authentication, and security features. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options to improve your experience on petir108.
• Analytics cookies: Collect aggregated, anonymized data about how Players use the Platform to help us identify areas for improvement. Used only with your consent.
• Marketing cookies: Used to deliver relevant promotional content within the petir108 Platform. Used only with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the petir108 Platform. For more information on managing cookies in popular Philippine mobile browsers, refer to your device's browser help documentation.

09 Data Retention

petir108 retains your personal data for the following periods:

• Account data: For the duration of your active account plus five (5) years following account closure, as required by PAGCOR regulations and AML obligations;
• KYC documents: Five (5) years from the date of collection or from the date of the last transaction, whichever is later, in compliance with RA 9160;
• Financial transaction records: Five (5) years from the date of the transaction;
• Customer support communications: Two (2) years from the date of the communication;
• Technical and usage logs: Twelve (12) months from the date of collection, unless retained longer for security investigation purposes;
• Marketing data: Until you withdraw consent or opt out of marketing communications.

Upon expiry of the applicable retention period, petir108 will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

10 Data Security

petir108 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• TLS 1.2 or higher encryption for all data in transit between your device and petir108 servers;
• AES-256 encryption for sensitive data stored at rest;
• Multi-factor authentication (MFA) for all internal petir108 staff access to systems containing personal data;
• Role-based access controls limiting data access to authorized personnel on a need-to-know basis;
• Regular penetration testing and vulnerability assessments conducted by independent security firms;
• 24/7 security monitoring and intrusion detection systems;
• Staff training on data protection and information security obligations.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, petir108 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected Players without undue delay, in accordance with RA 10173.

11 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by petir108:

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15. petir108 will respond to all verified data subject requests within thirty (30) days of receipt. We may request proof of identity before processing your request to protect against unauthorized access to your data.

If you are not satisfied with petir108's response to a data subject request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

12 Children and Minors

The petir108 Platform is strictly intended for persons who are 21 years of age or older, in accordance with Philippine gaming regulations. petir108 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately close the associated account, return any deposited funds, and securely delete the personal data in question.

If you believe that a minor has registered an account on petir108, please contact us immediately using the details in Section 15 so that we can take prompt action.

13 Cross-Border Data Transfers

petir108 primarily stores and processes your personal data on servers located within or accessible from the Philippines. Where it is necessary to transfer your personal data to service providers or group companies located outside the Philippines, petir108 will ensure that such transfers are made only to countries or organizations that provide an adequate level of data protection, or that appropriate safeguards are in place (such as contractual clauses approved by the NPC), in accordance with RA 10173 and its Implementing Rules.

By using the petir108 Platform, you acknowledge and consent to the transfer of your personal data as described in this section, subject to the safeguards described above.

14 Amendments to This Policy

petir108 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered Players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect. The "Last Updated" date at the top of this Policy will be revised accordingly.

Your continued use of the petir108 Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree to the amended Policy, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.

15 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or petir108's data processing practices, please contact our Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated: