Privacy Policy

01 Introduction

petpk is committed to protecting the privacy and personal data of every person who interacts with our platform — whether you are browsing our site, registering an account, making a deposit, or contacting our support team. We understand that trust is the foundation of any financial and gaming relationship, and we treat the protection of your personal information as a core responsibility, not an afterthought.

This Policy applies to all personal data collected through the petpk.net website, mobile-optimised browser experience, and any related communication channels including live chat and email. By accessing petpk.net or registering an account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

If you do not agree with any part of this Policy, you should discontinue use of the petpk platform. For questions about how your data is handled, see Section 14 – Contact & DPO.

02 Data We Collect

petpk collects only the personal data necessary to operate a licensed, PAGCOR-regulated gambling platform safely and lawfully. The categories of data we collect are described in the table below:

We do not collect sensitive personal information such as health data, religious beliefs, or political affiliations unless explicitly required by a PAGCOR regulatory process. We never store full payment card numbers — if card payments are introduced in future, only tokenised references will be retained.

03 How We Collect Data

petpk collects your personal data through the following means:

• Direct registration: When you create an account on petpk.net, you provide your name, email address, date of birth, mobile number, and chosen credentials directly to us.
• KYC document submission: When you submit identity documents as part of the Know Your Customer (KYC) verification process, we collect identity and address data from those documents.
• Payment transactions: When you make a deposit or request a withdrawal, we receive transaction data and payment account identifiers from your chosen payment provider (e.g., GCash, Maya, BPI, BDO).
• Platform interaction: As you use petpk — browsing games, placing bets, claiming bonuses — our systems automatically log gameplay and session data to maintain game integrity and meet PAGCOR reporting obligations.
• Cookies and device signals: When you visit petpk.net, your browser transmits technical identifiers. See Section 7 – Cookies for details.
• Support communications: When you contact petpk via live chat or email, the contents of those communications are retained as support records.
• Responsible gaming tools: When you activate self-exclusion, set limits, or request account cooling-off, those requests and their settings are recorded to enforce your chosen protections.

petpk does not purchase personal data from third-party data brokers or marketing lists. We do not obtain data about you from social media platforms unless you voluntarily share a social profile in a support context.

04 Why We Use Your Data

petpk uses your personal data for the following clearly defined purposes only. We do not use your data for any purpose incompatible with the reasons listed here without first obtaining your separate consent:

• Account creation and management: To create, maintain, and secure your petpk player account, verify your identity, and manage your preferences and settings.
• Age verification and KYC compliance: To confirm that you are at least 21 years of age as required under PAGCOR regulations, and to meet Anti-Money Laundering Act (AMLA) obligations.
• Payment processing: To process deposits and withdrawals via GCash, Maya, bank transfer, USDT TRC20, and other supported Philippine payment channels.
• Game delivery and integrity: To provide slots, live casino, sports betting, bingo, Super Bingo, and other games, and to ensure fair play and detect fraudulent or exploitative behaviour.
• Regulatory reporting: To generate the transaction and player activity reports that PAGCOR requires licensed operators to maintain and submit.
• Responsible gaming enforcement: To apply self-exclusion blocks, deposit limits, loss limits, and session limits that you have requested, and to monitor for signs of problem gambling.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality assurance.
• Security and fraud prevention: To detect and investigate suspicious login attempts, multi-accounting, bonus abuse, and potential money laundering activity.
• Marketing (with consent): To send you promotional emails and platform notifications about offers, bonuses, and new games — only if you have opted in and have not subsequently withdrawn consent.
• Platform improvement: To analyse anonymised usage data to improve the petpk user experience, fix bugs, and develop new features.

05 Legal Bases for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules, petpk processes your personal data on the following lawful bases:

• Contractual necessity: Processing your identity, contact, payment, and gaming activity data is necessary to fulfil our contract with you — i.e., to operate your player account and deliver the games and services you have enrolled for.
• Legal obligation: Processing required for KYC, AMLA compliance, PAGCOR regulatory reporting, and age verification is carried out because Philippine law obliges us to do so, regardless of consent.
• Legitimate interests: Security monitoring, fraud detection, platform analytics, and support record-keeping are conducted on the basis of petpk's legitimate interest in operating a safe, fair, and compliant gaming platform, provided those interests do not override your fundamental data rights.
• Consent: Marketing communications, optional analytics cookies, and any other processing not covered by the above bases are carried out only with your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

06 Data Sharing & Disclosure

petpk does not sell your personal data. We share personal data only with the categories of recipients listed below, and only to the minimum extent necessary for the stated purpose:

• PAGCOR and Philippine government authorities: As a PAGCOR-licensed operator, we are required to provide player data, transaction records, and activity reports to PAGCOR upon request and on a periodic regulatory reporting basis. We may also disclose data to the AMLC (Anti-Money Laundering Council) or other government bodies where legally required.
• Payment processors: GCash, Maya/PayMaya, BPI, BDO, UnionBank, Metrobank, and cryptocurrency payment rails receive only the transaction data necessary to execute your deposit or withdrawal instruction.
• KYC and identity verification providers: Third-party identity verification services may process document scans and selfie images to perform automated or human-reviewed KYC checks on our behalf. These providers operate under strict data processing agreements.
• Game content providers: Third-party game studios whose titles are hosted on petpk may receive anonymised session and gameplay data for RTP auditing and technical troubleshooting. They do not receive your name, contact details, or payment information.
• Cloud infrastructure and hosting providers: petpk's platform runs on secure cloud infrastructure. Our hosting providers process data on our behalf under contractual data processing terms and have no independent right to use your data.
• Legal and professional advisers: We may share data with our lawyers, auditors, or compliance consultants where necessary to obtain professional advice or to establish, exercise, or defend legal claims.

All third-party data processors engaged by petpk are required to implement adequate technical and organisational security measures and to process personal data only on petpk's documented instructions. We do not transfer personal data outside the Philippines except where required by PAGCOR's regulatory framework or where the recipient country's data protection laws are deemed adequate under NPC guidance.

07 Cookies & Tracking Technologies

petpk.net uses cookies and similar tracking technologies to make the platform function correctly, keep you securely logged in, and understand how players use the site so we can improve the experience over time.

You can manage your cookie preferences through your browser settings. Disabling essential cookies will prevent petpk.net from functioning correctly and you will not be able to log in. Disabling analytics or marketing cookies will not affect your ability to play. petpk does not use third-party advertising network cookies or cross-site tracking pixels.

08 Data Retention

petpk retains your personal data for as long as is necessary to fulfil the purposes described in this Policy and to comply with our legal obligations. Specific retention periods by data category are as follows:

• Account and identity data: Retained for the lifetime of your active account plus a minimum of 5 years after account closure, as required by PAGCOR licensing conditions and AMLA record-keeping obligations.
• Transaction and financial data: Retained for a minimum of 10 years from the date of the transaction, in line with Philippine anti-money laundering regulations.
• KYC documents: Retained for the same period as identity data — account lifetime plus 5 years post-closure.
• Gaming activity logs: Retained for 5 years from the date of the session or bet, for game integrity auditing and dispute resolution purposes.
• Support communications: Retained for 3 years from the date of the interaction, unless the communication relates to an open dispute or legal matter.
• Marketing consent records: Retained for the duration of your subscription plus 2 years after opt-out, to demonstrate consent history if challenged.
• Analytics data: Anonymised usage data is retained indefinitely in aggregated form. Individual session data is anonymised after 24 months.

When personal data is no longer required and no legal retention obligation applies, petpk permanently deletes or irreversibly anonymises that data using secure deletion standards. We conduct periodic data audits to ensure retention schedules are followed.

09 Data Security

petpk implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your browser and petpk.net is encrypted using TLS 1.2 or higher. The padlock icon in your browser confirms this connection is active.
• Data encryption at rest: Personal data stored in petpk's databases is encrypted at rest using AES-256 encryption standards.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. petpk staff can only access player data categories relevant to their specific operational role.
• Two-factor authentication: Internal system access for petpk staff requires multi-factor authentication. We also encourage and support 2FA for player accounts.
• Security monitoring: petpk's infrastructure is monitored continuously for intrusion attempts, unusual access patterns, and data exfiltration indicators.
• Penetration testing: petpk engages independent security professionals to conduct periodic penetration testing of our platform and infrastructure.

While petpk takes every reasonable precaution to protect your data, no internet transmission or electronic storage system is 100% secure. You also play an important role in keeping your account safe: use a strong, unique password, enable 2FA, never share your login credentials, and contact support immediately if you suspect unauthorised access to your account.

10 Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by petpk. These rights apply subject to applicable legal exemptions, such as data that must be retained to comply with PAGCOR or AMLA obligations:

To exercise any of the above rights, contact petpk's Data Protection Officer (DPO) at [email protected] with the subject line "Data Privacy Request." We will acknowledge your request within 3 business days and respond substantively within 30 calendar days, or notify you if an extension is required. Identity verification will be required before we act on any data access, rectification, or erasure request to protect against fraudulent submissions.

11 Children & Minors

If you are a parent or guardian and believe your child has created an account on petpk, please contact our support team immediately via live chat or at [email protected]. We will investigate promptly, close the account, and delete all personal data associated with it within 30 days, except where retention is required to prevent future fraudulent re-registration.

petpk's registration process requires a date of birth and government-issued ID verification that enforces the 21+ requirement. We take our age verification obligations seriously and view the protection of minors from gambling harm as a non-negotiable commitment under our PAGCOR licence.

12 Marketing Communications

petpk will only send you promotional emails, SMS, or in-platform notifications about bonuses, new games, and special offers if you have opted in to marketing communications during registration or subsequently through your account settings. We do not send unsolicited marketing to players who have not opted in.

Marketing messages from petpk will always:

• Clearly identify petpk as the sender.
• Include a one-click unsubscribe option in every email.
• Be relevant to your gaming activity on petpk — we do not sell your contact details to third-party advertisers.
• Respect your preferred communication channel — if you opt out of email marketing, you will not receive email promotions even if you remain subscribed to in-platform notifications.

If you are on a self-exclusion period, all marketing communications to your account are automatically suspended for the duration of your exclusion, regardless of your marketing preferences. This is a PAGCOR-mandated responsible gaming requirement. Reactivating marketing opt-in is only possible after your self-exclusion period has fully elapsed and your account has been reinstated.

13 Changes to This Privacy Policy

petpk reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, new PAGCOR regulatory requirements, NPC guidance, or updates to the Data Privacy Act's Implementing Rules. The "Effective Date" at the top of this page will always reflect the date of the most recent revision.

For material changes — meaning changes that meaningfully affect how we collect, use, or share your personal data — we will notify registered players by email to their registered address or through a prominent in-platform notification, at least 7 calendar days before the changes take effect. For non-material changes such as typographic corrections, structural reformatting, or minor clarifications, the updated Policy will take effect upon publication without advance notice.

Your continued use of petpk after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with a material change, you have the right to close your account before the change takes effect, and any remaining verified balance will be returned to your registered payment method.

14 Contact & Data Protection Officer

petpk has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests related to your personal data, you can reach the petpk DPO and support team through the following channels:

• Live Chat: Available 24/7 via the chat widget on any petpk page after logging in. For urgent data concerns such as suspected unauthorised account access, live chat is the fastest channel.
• Email (DPO and Privacy Requests): [email protected] — use the subject line "Data Privacy Request" or "DPO Query" to ensure routing to the correct team. Response within 3 business days.

If you believe petpk has not handled your personal data in accordance with the Data Privacy Act of 2012, you have the right to file a complaint with the National Privacy Commission of the Philippines (NPC). Information on how to file an NPC complaint is available through the NPC's official channels. petpk fully cooperates with all NPC investigations and takes all privacy complaints seriously.

petpk's registered business address and full corporate details are available on request from the DPO email above, in compliance with PAGCOR licensing disclosure requirements.