pesomax Privacy Policy — Your Data, Our Responsibility

Introduction

This Privacy Policy ("Policy") describes how pesomax ("pesomax", "we", "us", "our") collects, uses, stores, and discloses personal information when you access the pesomax website at pesomax.bio, register an account, make deposits or withdrawals, participate in games, or contact our support team.

pesomax is committed to complying with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines. We take our obligations under these laws seriously, and this Policy reflects those obligations in plain, accessible language.

By creating a pesomax account or continuing to use the platform, you acknowledge that you have read this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the pesomax platform.

This Policy should be read together with the pesomax Terms & Conditions, which govern the overall use of the platform and are incorporated herein by reference.

Personal Data We Collect

pesomax collects the following categories of personal data from players and visitors. We collect only what is reasonably necessary for the purposes described in this Policy.

pesomax does not intentionally collect sensitive personal information such as racial or ethnic origin, religious beliefs, health data, or sexual orientation, except where expressly required by law or regulatory process. If such information is incidentally disclosed during a support interaction, it will not be recorded or used for any purpose beyond resolving the immediate issue.

How We Collect Your Data

pesomax collects personal data through the following channels and methods:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, set responsible gaming limits, or update your account profile.
• Automatically: When you visit or use the pesomax platform, our servers and analytics tools automatically record technical data including your IP address, browser type, device identifiers, pages visited, and session duration. This occurs through standard web server logs, cookies, and similar technologies.
• From third-party payment processors: When you make a transaction via GCash, Maya, BPI, BDO, UnionBank, Coins.ph, or other supported payment methods, the relevant processor shares transaction confirmation data with pesomax to facilitate deposits and withdrawals.
• From identity verification services: pesomax may use third-party KYC and AML compliance tools to verify the authenticity of identity documents submitted during the verification process. These services process document data on our behalf under strict data processing agreements.
• From fraud prevention and security services: Data about your device, IP address, and behaviour patterns may be shared with anti-fraud services to detect and prevent fraudulent activity on the platform.

Why We Use Your Data

pesomax processes personal data for the following specific, legitimate purposes:

• Account creation and management: To register your account, verify your identity, maintain your account settings, and enable you to log in securely.
• KYC and AML compliance: To fulfil our legal obligations under Philippine anti-money laundering laws, PAGCOR regulatory requirements, and related compliance frameworks. This includes verifying your identity, monitoring transactions for suspicious activity, and filing reports with the Anti-Money Laundering Council (AMLC) where legally required.
• Payment processing: To process deposits, verify payment method ownership, execute withdrawal requests, and maintain an accurate record of all financial transactions.
• Game provision: To deliver casino games, sports betting, and other platform services, record game results, calculate winnings, apply bonus terms, and ensure accurate crediting of your account balance.
• Responsible gaming: To monitor gaming patterns and identify potential signs of problem gambling, enforce responsible gaming limits you have set, and contact you if we identify concerning behaviour.
• Customer support: To respond to your enquiries, resolve disputes, investigate complaints, and improve our support quality.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, cheating, collusion, and abuse of the platform.
• Legal compliance and reporting: To comply with applicable Philippine laws, court orders, regulatory directions, and law enforcement requests.
• Platform improvement: To analyse usage patterns, identify technical issues, test new features, and improve the overall pesomax experience for Filipino players.
• Marketing communications (with your consent): To send you promotional offers, bonus notifications, and platform updates — only if you have opted in to receive such communications and have not subsequently withdrawn consent.

Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, pesomax processes your personal data under the following lawful bases:

• Contractual necessity: Processing required to perform the contract between you and pesomax — specifically, to operate your account, process transactions, and deliver gaming services as agreed in the Terms & Conditions.
• Legal obligation: Processing required to comply with Philippine law, including AML/CFT obligations, PAGCOR regulatory requirements, and the Data Privacy Act itself.
• Legitimate interests: Processing necessary for pesomax's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for optional marketing communications. You may withdraw this consent at any time by updating your account preferences or contacting support.

Where processing is based on consent, withdrawal of that consent will not affect the lawfulness of processing carried out before the withdrawal, nor will it affect processing conducted under a different lawful basis (such as contractual necessity or legal obligation).

Sharing & Disclosure of Personal Data

pesomax does not sell personal data. We share your information only in the following limited circumstances:

• Payment processors: GCash, Maya, BPI, BDO, UnionBank, 7-Eleven Cliqq, Coins.ph, and USDT TRC20 processing partners receive the minimum data necessary to process your transactions. These processors operate under their own privacy policies and data protection obligations.
• KYC / identity verification providers: Third-party services engaged to verify the authenticity of your identity documents and confirm your eligibility to use the platform.
• Fraud prevention and security services: Industry-standard fraud detection platforms that help pesomax identify suspicious account activity, protect against payment fraud, and prevent platform abuse.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and any other Philippine government body to which pesomax is required by law to report or provide information.
• Law enforcement: Philippine law enforcement agencies when required by a lawful court order, subpoena, or regulatory directive.
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged by pesomax, who are bound by professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of pesomax's business, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections and prior notice to affected players where practicable.

All third-party service providers engaged by pesomax are required to process personal data strictly in accordance with our instructions and applicable law, and are prohibited from using it for their own independent purposes.

Cookies & Tracking Technologies

pesomax uses cookies and similar tracking technologies to operate and improve the platform. The following types of cookies may be set when you visit pesomax.bio:

pesomax does not use third-party advertising cookies or allow external ad networks to set cookies on our platform. Analytics data is aggregated and anonymised wherever possible — individual player profiles are not shared with analytics providers.

You can manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using pesomax but may affect your experience. Disabling strictly necessary cookies may prevent the platform from working correctly.

Data Retention

pesomax retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of your active relationship with pesomax, plus a minimum of 5 years after account closure, in compliance with Philippine AML record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later, as required by AMLC regulations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Customer support communications: Retained for up to 3 years from the date of the interaction, or longer if the communication relates to a dispute or legal matter that remains unresolved.
• Marketing consent records: Retained for as long as you are an active player, or until consent is withdrawn, whichever is earlier. Records of withdrawn consent are kept to demonstrate compliance.
• Technical / server log data: Typically retained for 12 months, after which logs are anonymised or deleted.

When the applicable retention period expires, personal data is securely deleted, destroyed, or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised data may be retained indefinitely for statistical and research purposes.

Security Measures

pesomax implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and pesomax servers is encrypted using Transport Layer Security (TLS). Never send sensitive information over an unencrypted connection.
• Encryption at rest: Sensitive data fields — including identity documents and financial information — are encrypted in our databases using industry-standard algorithms.
• Access controls: Personal data is accessible only to pesomax staff who require it to perform their role. Access is governed by role-based permissions, and all access is logged and audited.
• Two-factor authentication: Players are encouraged to enable two-factor authentication (2FA) on their pesomax account. Support staff access to internal systems is protected by mandatory 2FA.
• Regular security assessments: pesomax conducts periodic security reviews, vulnerability assessments, and penetration testing to identify and remediate potential security weaknesses.
• Incident response: pesomax maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify affected players and the National Privacy Commission in accordance with the Data Privacy Act.

Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by pesomax. To exercise any of these rights, contact our Data Privacy Officer using the details in Section 14.

pesomax will respond to data rights requests within 30 calendar days of receipt. Complex requests may require up to an additional 30 days, in which case we will notify you of the extension and the reason for it. We may request proof of identity before processing any rights request to prevent unauthorised disclosure.

Minors & Age Policy

pesomax is strictly intended for adults aged 21 years and older, in accordance with PAGCOR regulations governing online casino-style gaming in the Philippines. We do not knowingly collect personal data from individuals under the age of 21.

If you are a parent or guardian and believe that a minor has registered an account or submitted personal data to pesomax without your consent, please contact us immediately at the details provided in Section 14. We will investigate the matter promptly, close the account if confirmed, and securely delete all personal data associated with it.

pesomax employs age verification measures during the registration and KYC process specifically to prevent minors from accessing the platform. These measures include date-of-birth verification at registration, document-based KYC for all accounts proceeding to withdrawal, and behavioural monitoring that may flag accounts for manual review.

International Data Transfers

pesomax is primarily operated for and within the Philippines. However, some of our third-party service providers — including KYC verification platforms, fraud detection services, and cloud infrastructure providers — may process or store data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, pesomax ensures that appropriate safeguards are in place in accordance with the Data Privacy Act of 2012 and NPC guidelines. These safeguards may include:

• Data processing agreements incorporating standard contractual clauses approved by the NPC.
• Transfers only to jurisdictions recognised as providing an adequate level of data protection.
• Contractual obligations requiring the recipient to implement security measures equivalent to those required under Philippine law.

You may request information about specific international transfers involving your personal data by contacting the Data Privacy Officer at the details provided in Section 14.

Changes to This Privacy Policy

pesomax reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or the services we offer. When material changes are made, we will:

• Update the "Last Updated" date at the top of this Policy.
• Post the revised Policy on this page at pesomax.bio/privacy-policy.
• Where practicable, notify registered players via email or in-platform notification of significant changes.

Your continued use of the pesomax platform after the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you must stop using the platform and close your account before the effective date.

For changes that materially affect your rights or that require fresh consent under the Data Privacy Act, pesomax will seek your explicit acknowledgment before the changes take effect on your account.

Contact & Data Privacy Officer

pesomax has designated a Data Privacy Officer (DPO) responsible for overseeing compliance with this Policy and the Philippine Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to your personal data or this Policy, please contact us through the following channels:

• Support Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Rights Requests: Please use "Data Privacy Request – [Your Registered Name]" to ensure your query is routed to the correct team promptly.
• Live Chat: Available 24/7 through the pesomax platform after login. Live chat is the fastest way to reach us for general support enquiries.
• Response Time: Data rights requests are acknowledged within 5 business days and fully responded to within 30 calendar days.

If you are not satisfied with peso max's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for administering and enforcing the Data Privacy Act of 2012.