Privacy Policy

Last Updated: January 1, 2026  |  Effective Date: January 1, 2026

1. Introduction and Scope

pegasusph ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with our online casino services. This Privacy Policy governs the collection, processing, storage, and disclosure of personal information in connection with your use of the pegasusph website, mobile applications, and all related services.

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC) of the Philippines. We are committed to upholding the principles of transparency, legitimate purpose, and proportionality in all our data processing activities.

This Policy applies to all personal data collected through the pegasusph Platform, regardless of whether you are accessing our services from Metro Manila, Cebu, Davao, Quezon City, Makati, or any other location within the Philippines.

2. Personal Data We Collect

2.1 Information You Provide Directly

When you register an account, use our services, or contact our support team, we collect the following categories of personal data:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (e.g., PhilSys national ID, passport, driver's license)
• Contact Information: Email address, mobile phone number, and residential address (including barangay, city, province, and ZIP code)
• Financial Information: GCash account details, PayMaya account details, bank account information (BPI, BDO, Metrobank, and other Philippine banks), transaction history, deposit and withdrawal records
• Account Credentials: Username and encrypted password (we never store passwords in plain text)
• Verification Documents: Copies of government-issued IDs, proof of address documents, and selfie photographs submitted for KYC (Know Your Customer) verification
• Communications: Records of your interactions with our customer support team, including live chat transcripts and email correspondence

2.2 Information Collected Automatically

When you access and use the pegasusph Platform, we automatically collect certain technical and behavioral data, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, and unique device identifiers
• Log Data: IP address, access timestamps, pages visited, features used, and session duration
• Gameplay Data: Game history, bet amounts, win/loss records, bonus usage, and wagering activity
• Location Data: General geographic location derived from your IP address to verify compliance with Philippine jurisdiction requirements
• Cookies and Tracking Technologies: Session cookies, persistent cookies, and similar technologies used to maintain your session, remember preferences, and analyze Platform usage

2.3 Information from Third Parties

We may receive personal data about you from third-party sources, including payment processors (GCash, PayMaya, banking partners), identity verification service providers, fraud detection and anti-money laundering (AML) screening services, and analytics providers. All third-party data sharing is conducted under strict data processing agreements that require compliance with the Data Privacy Act of 2012.

3. How We Use Your Personal Data

pegasusph processes your personal data for the following purposes, each grounded in a lawful basis under the Data Privacy Act:

Purpose	Lawful Basis
Account registration and identity verification	Contractual necessity; legal obligation
Processing deposits and withdrawals	Contractual necessity
Providing gaming services and customer support	Contractual necessity
Anti-money laundering (AML) and fraud prevention	Legal obligation; legitimate interest
Age verification (21+ requirement)	Legal obligation
Responsible gaming monitoring and intervention	Legal obligation; legitimate interest
Sending promotional offers and bonuses	Consent
Platform analytics and service improvement	Legitimate interest
Compliance with regulatory reporting requirements	Legal obligation

4. Cookies and Tracking Technologies

4.1 Types of Cookies We Use

pegasusph uses cookies and similar tracking technologies to enhance your experience on our Platform. The types of cookies we use include:

• Essential Cookies: Required for the Platform to function properly. These include session management cookies that keep you logged in and security cookies that prevent fraudulent activity. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and game history to provide a personalized experience.
• Analytics Cookies: Help us understand how players use the Platform, which games are most popular, and where technical issues occur. This data is aggregated and anonymized.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of our marketing campaigns. These are only activated with your consent.

4.2 Managing Cookies

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may prevent you from accessing certain features of the Platform, including logging in to your account. Please note that blocking cookies does not prevent us from collecting server-side log data such as IP addresses and access timestamps.

5. Data Sharing and Disclosure

pegasusph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data only in the following circumstances:

• Service Providers: We share data with trusted third-party service providers who assist us in operating the Platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, cloud hosting services, and customer support platforms. All service providers are bound by data processing agreements requiring compliance with the DPA.
• Regulatory Authorities: We may disclose personal data to Philippine government agencies, law enforcement authorities, or regulatory bodies when required by law, court order, or regulatory directive. This includes compliance with PAGCOR reporting requirements and Anti-Money Laundering Council (AML C) investigations.
• Fraud Prevention and Security: We may share data with fraud detection services, cybersecurity providers, and other platforms to prevent fraudulent activity, money laundering, and account abuse.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Policy.
• With Your Consent: We may share your data with third parties when you have provided explicit consent for a specific purpose.

All third-party data sharing is conducted under strict contractual safeguards that require recipients to maintain the same level of data protection as pegasusph and to use the data only for the specified purposes.

6. Data Security Measures

pegasusph implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Sensitive data stored in our databases is encrypted at rest.
• Access Controls: Personal data is accessible only to authorized personnel who require access to perform their job functions. All employees undergo data privacy training and are bound by confidentiality agreements.
• Secure Infrastructure: Our servers are hosted in secure data centers with physical access controls, 24/7 monitoring, and redundant backup systems.
• Regular Security Audits: We conduct regular security assessments, vulnerability scans, and penetration testing to identify and address potential security risks.
• Incident Response: We maintain an incident response plan to quickly detect, contain, and remediate any data breaches or security incidents.

While we implement robust security measures, no system is completely immune to security threats. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorized access to your account.

7. Data Retention

pegasusph retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Our retention periods are as follows:

• Active Accounts: Personal data is retained for the duration of your active account and for a period of five (5) years after account closure, as required by Philippine anti-money laundering regulations.
• Transaction Records: Financial transaction records, including deposits, withdrawals, and gameplay history, are retained for seven (7) years to comply with tax and financial reporting requirements.
• Verification Documents: Copies of government-issued IDs and verification documents are retained for five (5) years after account closure.
• Marketing Communications: If you have consented to receive marketing communications, your contact information is retained until you withdraw consent or your account is closed.
• Legal Holds: Data subject to legal holds, regulatory investigations, or pending litigation is retained until the matter is resolved, regardless of standard retention periods.

After the applicable retention period expires, personal data is securely deleted or anonymized in accordance with our data disposal procedures.

8. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data:

• Right to Be Informed: You have the right to be informed about the collection, use, and processing of your personal data. This Privacy Policy serves as our primary notice to you.
• Right to Access: You have the right to request access to the personal data we hold about you. You may request a copy of your data by contacting our Data Protection Officer.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data. You can update most information directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data, subject to legal retention requirements and legitimate business interests.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to your request within fifteen (15) days as required by the DPA.

9. International Data Transfers

pegasusph primarily processes personal data within the Philippines. However, some of our service providers and technology partners may be located outside the Philippines. When we transfer personal data internationally, we ensure that appropriate safeguards are in place, including:

• Standard contractual clauses approved by the National Privacy Commission
• Adequacy determinations recognizing equivalent data protection standards
• Binding corporate rules for intra-group transfers
• Explicit consent for specific transfers where required

All international data transfers comply with Section 20 of the Data Privacy Act and NPC Circular No. 16-03 on Security of Personal Data in Government.

10. Children's Privacy

pegasusph services are intended exclusively for individuals who are at least twenty-one (21) years of age. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that information from our systems.

If you are a parent or guardian and believe that your child has provided personal data to pegasusph, please contact us immediately at [email protected] so that we can take appropriate action.

11. Changes to This Privacy Policy

pegasusph reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this Policy, we will notify you by email (to the address associated with your account) and by posting a prominent notice on the Platform at least thirty (30) days before the changes take effect.

Your continued use of the pegasusph Platform after the effective date of the revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must discontinue use of the Platform and close your account.

12. Contact Information and Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data processing practices, please contact our Data Protection Officer:

Data Protection Officer
pegasusph Online Casino
Email: [email protected]
Customer Support: Available 24/7 via live chat

We are committed to resolving all privacy inquiries and complaints promptly and fairly. If you are not satisfied with our response, you have the right to file a complaint with the National Privacy Commission of the Philippines.

National Privacy Commission
5th Floor, Philippine International Convention Center (PICC)
Vicente Sotto Street, Pasay City, Metro Manila 1307
Email: [email protected]
Website: www.privacy.gov.ph