pcso1 Privacy Policy — How We Handle Your Personal Data

This Privacy Policy ("Policy") describes how pcso1 ("pcso1," "we," "us," or "our"), the operator of the online gaming platform accessible at pcso1.cam, collects, uses, processes, stores, and protects the personal information of players, visitors, and users ("you") who access or interact with the pcso1 platform.

pcso1 is committed to protecting the privacy of every Filipino player — whether you are signing up from Manila, placing bets from Cebu, or browsing our slot lobby from Davao. This Policy has been prepared in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the relevant issuances of the National Privacy Commission ("NPC").

By accessing or using the pcso1 platform, creating an account, or engaging with any pcso1 service, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. If you do not agree with any part of this Policy, please discontinue your use of the pcso1 platform immediately.

For the purposes of the Data Privacy Act of 2012 and this Policy, the personal information controller for data processed through the pcso1 platform is pcso1, operating the platform at pcso1.cam. pcso1 determines the purposes and means by which your personal data is processed.

pcso1 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with applicable data privacy laws and acting as a point of contact for data subjects exercising their rights under the DPA. Contact details for the DPO are provided in Section 14 of this Policy.

pcso1 collects personal data in the categories described in the table below. We collect only data that is necessary, adequate, and not excessive relative to the purposes for which it is processed — consistent with the principle of proportionality under the DPA.

pcso1 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies as you navigate and use the pcso1 platform (see Section 9 for details)
• From payment service providers — GCash, Maya, BPI, BDO, Metrobank, and other payment processors may share transaction confirmation data with pcso1 as part of payment processing
• From identity verification partners — third-party KYC and anti-money laundering (AML) service providers may process your identity documents and return verification results to pcso1
• From fraud prevention and analytics providers — technical and behavioral data may be processed by fraud detection systems to protect the security of the pcso1 platform and its players

pcso1 processes your personal data only for the specific, legitimate, and explicit purposes set out below. Each processing activity is grounded in one of the lawful bases recognized under the Data Privacy Act of 2012:

• Account creation and platform access — necessary for the performance of the player agreement between you and pcso1
• Identity verification (KYC) and age verification — required for compliance with PAGCOR licensing obligations and the 21+ age restriction applicable under Philippine gambling regulations
• Payment processing and financial record-keeping — required for the performance of contractual obligations and for compliance with Republic Act No. 9160 (Anti-Money Laundering Act) and its amendments
• Fraud prevention and account security — necessary for the legitimate interests of pcso1 and its players in maintaining platform integrity
• Customer support — necessary for the performance of the service agreement and to respond to your inquiries
• Regulatory reporting — required for compliance with PAGCOR, the Anti-Money Laundering Council (AMLC), and other applicable Philippine regulatory bodies
• Responsible gaming monitoring — necessary for compliance with responsible gaming obligations and, where applicable, for the protection of players' vital interests
• Marketing communications — based on your freely given and specific consent, which you may withdraw at any time through your account settings or by contacting our support team
• Platform improvement and analytics — based on pcso1's legitimate interest in improving service quality, subject to your privacy rights

pcso1 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only in the limited circumstances described below:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, GrabPay, InstaPay, and 7-Eleven payment services receive only the transaction data necessary to execute your deposit or withdrawal instruction.
• KYC and AML compliance providers: Third-party identity verification vendors process your identity documents for KYC screening. These providers are contractually bound to process data solely on pcso1's instructions and in compliance with Philippine data privacy law.
• Game technology providers: Certified game studios (e.g., Pragmatic Play, Evolution Gaming, PG Soft) may receive your session data to deliver the game experience. No financial or identity data is transferred beyond what is technically necessary.
• Regulatory authorities: pcso1 will disclose personal data to PAGCOR, the AMLC, the NPC, the Bureau of Internal Revenue (BIR), or any other competent Philippine government authority where required by law or valid legal process.
• Fraud and security partners: Data may be shared with fraud detection and cybersecurity service providers operating under strict data processing agreements.
• Corporate transactions: In the event of a merger, acquisition, or asset sale involving pcso1, personal data may be transferred to the successor entity, subject to equivalent privacy protections and prior notice to affected data subjects where practicable.

pcso1 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or for such longer periods as may be required by applicable Philippine law or regulation. General retention principles are as follows:

• Active account data — retained for the lifetime of your active pcso1 account plus a post-closure period as required by PAGCOR and AML regulations (typically five (5) years after account closure under RA 9160)
• Financial transaction records — retained for a minimum of five (5) years following the date of the transaction, in accordance with AMLC record-keeping requirements
• Customer support records — retained for three (3) years from the date of the last interaction
• Marketing consent records — retained until consent is withdrawn, plus a reasonable period thereafter to evidence compliance
• Technical and log data — retained for up to twelve (12) months, unless required for longer periods in connection with an active security investigation

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with pcso1's data disposal procedures.

pcso1 implements a comprehensive suite of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and pcso1 servers — the same standard used by BPI, BDO, and other Philippine banks
• Encryption at rest for sensitive stored data including identity documents and financial records
• Access controls and role-based permissions limiting employee access to personal data on a strict need-to-know basis
• Multi-factor authentication for pcso1 administrative systems
• Regular security audits and penetration testing by independent cybersecurity specialists
• Intrusion detection systems and 24/7 security monitoring
• Staff training on data privacy and information security obligations under the DPA

pcso1 uses cookies and similar tracking technologies (web beacons, pixel tags, local storage objects) to operate and improve the platform. Cookies are small text files stored on your device by your browser. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for core platform functionality including authentication, session management, and security. These cookies cannot be disabled without impairing platform operation.
• Performance and Analytics Cookies: Collect aggregate, anonymized information about how players use the pcso1 platform — which pages are visited most, error messages encountered, and navigation paths. This data helps us improve the platform.
• Functionality Cookies: Remember your preferences such as language settings, preferred game lobby view, and login state (if "Remember Me" is selected).
• Targeting and Marketing Cookies: Used only with your consent to deliver relevant promotions and to measure the effectiveness of our marketing communications. You may withdraw consent at any time via your browser settings or by contacting support.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookie categories may affect the functionality of the pcso1 platform on your device.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by pcso1. To exercise any of these rights, contact our Data Protection Officer at the details provided in Section 14:

The pcso1 platform is strictly restricted to persons aged 21 years and above in accordance with PAGCOR regulations governing online gaming in the Philippines. pcso1 does not knowingly collect or process personal data of individuals below the age of 21.

Some of the third-party service providers engaged by pcso1 — including certain game technology providers and fraud detection services — may process personal data outside of the Philippines. Where cross-border data transfers occur, pcso1 ensures that adequate safeguards are in place as required by Section 21 of the DPA and NPC Advisory Opinion No. 2018-031. These safeguards include:

• Contractual clauses requiring recipient entities to implement data protection standards equivalent to those required under Philippine law
• Transfer only to jurisdictions that have been assessed as providing an adequate level of data protection, or subject to appropriate contractual protections where such adequacy has not been formally recognized
• Limiting cross-border transfers to the minimum data necessary for the specific service purpose

pcso1 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance issued by the NPC or PAGCOR. The most current version of this Policy will always be accessible at pcso1.cam/privacy-policy. The version number and effective date are displayed at the top of the Policy.

Where a material change to this Policy would significantly affect your rights or the way we process your data, pcso1 will notify you in advance through your registered email address or via an in-platform notification before the change takes effect. Your continued use of the pcso1 platform following such notification constitutes your acceptance of the updated Policy. If you do not accept the updated terms, please contact our support team to discuss your options, including account closure and data deletion.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by pcso1, please contact our designated Data Protection Officer through the following channels:

• Live Chat: Available 24/7 at pcso1.cam — the fastest way to reach our support and privacy team
• Email: [email protected] — for formal data subject requests and privacy inquiries (plain text, not a clickable link)

pcso1 is committed to resolving privacy concerns promptly and in good faith. If you are not satisfied with the outcome of your inquiry, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing the Data Privacy Act of 2012.