zpiso Privacy Policy
At zpiso, we treat your personal data with the same level of care and security as your account funds. This Privacy Policy explains exactly what information we collect, why we collect it, how we use it, and the rights you have over your own data under Philippine law.
Philippine Data Privacy Act
zpiso fully complies with Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations. Your personal information is handled strictly within the bounds set by the National Privacy Commission (NPC).
256-Bit SSL Encryption
Every connection to zpiso is protected by bank-grade 256-bit SSL/TLS encryption. Your login credentials, payment details, and personal data are transmitted through secure channels that are never exposed to third-party interception.
No Third-Party Data Sales
zpiso does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. Data sharing is limited strictly to what is necessary for platform operations, payment processing, and regulatory compliance.
Minimal Data Collection
We collect only the personal information that is genuinely necessary to verify your identity, process your transactions, and provide you with a safe gaming experience. We do not collect data for the sake of it.
Transparent Data Use
We are upfront about every category of data we collect and each specific purpose it serves. There are no hidden profiling practices or undisclosed data pipelines at zpiso. What you see in this policy is exactly what we do.
Your Rights, Always Respected
As a data subject under Philippine law, you have the right to access, correct, erase, and port your personal data. zpiso provides a clear process for exercising all of these rights without unnecessary friction or delay.
- 01 Who We Are
- 02 Data We Collect
- 03 How We Collect Your Data
- 04 Why We Use Your Data
- 05 Legal Bases for Processing
- 06 Data Sharing & Disclosure
- 07 Data Retention
- 08 Cookies & Tracking
- 09 Data Security
- 10 Your Rights as a Data Subject
- 11 Children & Minors
- 12 International Data Transfers
- 13 Changes to This Policy
- 14 Contact Our Privacy Team
Your Privacy Matters to Us: This Privacy Policy applies to all personal data collected and processed by zpiso in connection with your use of the zpiso platform, including the website at zpiso.app and any related services. By creating an account or using any zpiso service, you acknowledge that you have read and understood this policy. If you have any questions about how we handle your data, please contact us at [email protected] before using the platform.
Who We Are
zpiso is a PAGCOR-registered online casino and sports betting platform operating at zpiso.app and serving Filipino players across the Philippines. For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), zpiso acts as the Personal Information Controller (PIC) in respect of the personal data it collects from players, visitors, and other users of the platform.
As a Personal Information Controller, zpiso determines the purposes and means by which your personal data is processed, and is directly responsible for ensuring that all data processing activities comply with the standards set by the National Privacy Commission (NPC) of the Philippines.
Where zpiso engages third-party service providers — such as payment processors, game content providers, or fraud prevention tools — those parties act as Personal Information Processors (PIPs) operating under contract with zpiso and subject to the same data protection standards required by Philippine law.
Data Protection Officer: zpiso has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with data privacy obligations under Philippine law. You may contact the DPO at [email protected] with any data privacy inquiries.
Data We Collect
zpiso collects personal data across several categories, depending on the nature of your interaction with the platform. The table below summarizes the key categories of personal data we process:
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government ID type and number | Required |
| Contact Data | Email address, mobile number, home address (city/province level) | Required |
| Financial Data | GCash number, Maya account, bank name and account details (last 4 digits only stored), transaction history | Required |
| KYC Documents | Scanned or photographed government-issued ID, selfie for liveness verification | Required |
| Account Data | Username, encrypted password hash, account preferences, responsible gaming settings | Required |
| Gaming Activity Data | Game sessions, bet amounts, win/loss records, bonus usage, wagering history | Required |
| Technical Data | IP address, device type, browser type and version, operating system, session duration | Automatic |
| Communications Data | Live chat transcripts, support email correspondence, feedback submissions | Where Applicable |
| Marketing Preferences | Opt-in/opt-out status for promotional emails, SMS notifications, and in-platform offers | Optional |
We Do Not Collect: zpiso does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, health data beyond age verification, or biometric data beyond what is strictly required for identity verification under PAGCOR KYC rules.
How We Collect Your Data
zpiso collects personal data through the following channels and methods:
Direct Collection
The majority of your personal data is collected directly from you when you:
- Complete the account registration form on zpiso.app
- Submit KYC documents for identity and age verification
- Make a deposit or request a withdrawal using GCash, Maya, or bank transfer
- Update your account profile, payment methods, or responsible gaming settings
- Contact the zpiso support team via live chat or email
- Respond to surveys, promotions, or feedback requests
- Set up responsible gaming tools such as deposit limits or self-exclusion
Automated Collection
When you visit and use the zpiso platform, certain technical data is collected automatically through cookies, web beacons, and server logs. This includes your IP address, device identifiers, browser information, and session activity data. This automated collection is necessary for platform security, fraud detection, and performance optimization.
Third-Party Sources
In limited circumstances, zpiso may receive personal data about you from third parties, including:
- Payment providers (GCash, Maya, BPI, BDO, Metrobank) — transaction confirmation and account validation data
- KYC verification partners — identity document validation results
- Fraud prevention services — risk scoring and device fingerprinting data
- PAGCOR and regulatory authorities — self-exclusion list data and regulatory compliance information
Why We Use Your Data
zpiso processes your personal data for specific, documented purposes only. We do not use your data for any purpose that is incompatible with the purposes described below:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Identity, Contact, Account Data |
| Age and identity verification (KYC) | Identity, KYC Documents |
| Processing deposits and withdrawals | Identity, Financial Data |
| Delivering gaming services and platform features | Account, Gaming Activity, Technical Data |
| Responsible gaming monitoring and tools | Identity, Gaming Activity, Account Data |
| Fraud prevention and platform security | Identity, Financial, Technical Data |
| AML/CTF compliance and regulatory reporting | Identity, Financial, Gaming Activity Data |
| Customer support and dispute resolution | Identity, Account, Communications Data |
| Sending promotional offers and bonuses | Contact, Marketing Preferences Data |
| Platform analytics and improvement | Technical, Gaming Activity Data (anonymized) |
You may opt out of receiving promotional communications from zpiso at any time by updating your notification preferences in your account settings or by contacting the support team. Opting out of marketing does not affect your ability to use the platform.
Legal Bases for Processing
Under the Philippine Data Privacy Act, every act of personal data processing must be grounded in at least one lawful basis. The following legal bases apply to zpiso's data processing activities:
- Contractual Necessity: Processing your personal data is necessary to fulfill the contract between you and zpiso — i.e., providing you with access to the gaming platform, processing your financial transactions, and managing your player account.
- Legal Obligation: zpiso is required by PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act itself to collect, retain, and in some cases report certain categories of personal data. This includes KYC verification data, transaction records, and responsible gaming monitoring data.
- Legitimate Interests: zpiso processes technical data and gaming activity data for fraud prevention, platform security, and service improvement. These legitimate interests are balanced against your rights and freedoms as a data subject.
- Consent: For optional data processing activities — such as sending you promotional offers, depositing cookies beyond the strictly necessary category, and retaining communications data for quality improvement — zpiso relies on your freely given, informed, and specific consent. You may withdraw consent at any time without affecting other processing activities.
Data Sharing & Disclosure
zpiso does not sell your personal data. We share your data only in the following limited and controlled circumstances:
Service Providers (Personal Information Processors)
zpiso shares necessary personal data with trusted third-party service providers who process data on our behalf under strict contractual data processing agreements. These include payment gateway operators (GCash/Maya/bank partners), KYC verification technology providers, cloud infrastructure and hosting providers, fraud detection and cybersecurity vendors, and customer support platform providers. All such processors are contractually bound to handle your data in accordance with Philippine data privacy law and zpiso's internal data protection standards.
Regulatory and Legal Disclosure
zpiso may disclose personal data to government and regulatory authorities where required by Philippine law or a valid legal process. This includes disclosures to PAGCOR in connection with license compliance audits, the Anti-Money Laundering Council (AMLC) in connection with suspicious transaction reporting obligations under the AMLA, the National Privacy Commission in the event of a data breach notification requirement, and Philippine law enforcement agencies pursuant to a valid court order or subpoena.
Business Transfers
In the event that zpiso undergoes a corporate restructuring, merger, acquisition, or asset sale, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity before your data is transferred, and your rights as a data subject will be preserved throughout.
No Cross-Border Transfers Without Safeguards: Where any sharing of your personal data involves a transfer to an entity located outside the Philippines, zpiso ensures that adequate data protection safeguards are in place, consistent with the requirements of the Philippine Data Privacy Act and the standards published by the National Privacy Commission.
Data Retention
zpiso retains your personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulatory requirements. The following general retention guidelines apply:
- Active Account Data: Retained for the full duration of your account's existence plus a minimum of five (5) years after account closure, as required by PAGCOR licensing conditions and anti-money laundering regulations.
- KYC and Identity Verification Documents: Retained for a minimum of five (5) years from the date of account closure, in line with AMLA record-keeping obligations.
- Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, consistent with AMLC reporting obligations.
- Customer Support Communications: Retained for two (2) years from the date of the last communication, or longer where the communication relates to an ongoing dispute or investigation.
- Marketing Preference Data: Retained until you withdraw consent or request deletion, whichever occurs first.
- Technical and Log Data: Retained for up to twelve (12) months for security and fraud investigation purposes, after which it is anonymized or deleted.
When personal data is no longer required for its original purpose and no legal retention obligation applies, zpiso will securely delete or anonymize the data in accordance with its internal data disposal procedures.
Cookies & Tracking Technologies
zpiso uses cookies and similar tracking technologies on the zpiso.app website to ensure the platform functions correctly, to maintain the security of your session, and to improve the overall user experience for Filipino players.
Types of Cookies We Use
- Strictly Necessary Cookies: These cookies are essential for the zpiso platform to function. They enable core features such as session authentication, account security, and navigation. These cookies cannot be disabled without breaking the platform's core functionality.
- Performance & Analytics Cookies: These cookies collect anonymized information about how visitors use the zpiso website — such as which pages are visited most frequently and how long sessions last. This data helps us identify areas for improvement. These cookies require your consent.
- Functional Cookies: These cookies remember your platform preferences — such as your preferred language, game lobby filters, and responsible gaming settings — so you don't have to reset them on every visit. These cookies require your consent.
- Security Cookies: These cookies support our fraud detection and platform integrity systems by helping identify unusual access patterns or suspicious activity on your account.
Managing Cookies
You can manage your cookie preferences through the cookie consent panel available on the zpiso website. Please note that disabling strictly necessary cookies will impair your ability to log in and use the platform. You can also manage cookies through your browser settings, though this may affect your experience on other websites as well.
Data Security
zpiso implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security program includes:
- 256-bit SSL/TLS Encryption: All data transmitted between your browser and the zpiso platform is protected by industry-standard transport layer encryption.
- Encryption at Rest: Sensitive personal data — including identity documents and financial account details — is stored in encrypted form in our databases. Passwords are never stored in plaintext; they are hashed using a strong one-way cryptographic algorithm.
- Access Controls: Access to systems holding personal data is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and undergo regular data security training.
- Multi-Factor Authentication (MFA): Internal administrative access to player data systems requires multi-factor authentication. We also recommend that players enable MFA on their zpiso accounts for additional security.
- Intrusion Detection and Monitoring: The zpiso platform is monitored 24/7 by automated security systems that detect and respond to anomalous access patterns, brute force attempts, and other security threats in real time.
- Regular Security Audits: zpiso engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of its platform infrastructure.
Data Breach Response: In the event of a personal data breach that is likely to result in significant harm to affected players, zpiso will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, in accordance with the requirements of the Philippine Data Privacy Act. Affected players will also be notified without undue delay.
Your Rights as a Data Subject
The Philippine Data Privacy Act grants you, as a data subject, a robust set of rights in relation to your personal data. zpiso is committed to facilitating the exercise of these rights in a timely and straightforward manner. Your rights include:
Rights Granted to You Under Philippine Law
Right to Be Informed
You have the right to know what personal data zpiso collects about you, why it is collected, and how it is used — which is precisely what this Privacy Policy provides.
Right of Access
You have the right to request a copy of the personal data zpiso holds about you. We will respond to verified access requests within thirty (30) days.
Right to Rectification
You have the right to request correction of any inaccurate or incomplete personal data we hold. You can update many details directly through your zpiso account settings.
Right to Erasure
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under PAGCOR and AMLA regulations.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes. Once you object, we will cease that specific processing activity immediately.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.
Right to Block or Restrict Processing
You have the right to request that zpiso temporarily restrict the processing of your personal data while a dispute about its accuracy or the lawfulness of its processing is being resolved.
Right to Withdraw Consent
Where zpiso processes your personal data on the basis of your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint
If you believe zpiso has not handled your personal data in accordance with Philippine law, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
How to Exercise Your Rights: To exercise any of the rights described above, please contact zpiso's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." We will acknowledge your request within five (5) business days and aim to fulfill verified requests within thirty (30) calendar days. Identity verification may be required before we action your request to protect against unauthorized access to your data.
Children & Minors
zpiso is strictly an adults-only platform. In accordance with Philippine law and PAGCOR regulations, the minimum age to register for and use the zpiso platform is 21 years old. We do not knowingly collect personal data from individuals under the age of 21.
Age verification is a mandatory step in the zpiso account registration and KYC process. All players are required to submit valid government-issued identification confirming that they meet the minimum age requirement before they are permitted to deposit funds or play any game on the platform.
If zpiso discovers or is notified that it has inadvertently collected personal data from a minor — that is, any individual under 21 years of age — we will immediately suspend the relevant account, delete all associated personal data, reverse any transactions where legally possible, and report the incident to PAGCOR if required under our licensing obligations.
Parents and Guardians: If you believe that a minor in your care has created an account on zpiso, please contact us immediately at [email protected] so we can take swift action to close the account and remove all associated data.
International Data Transfers
zpiso's primary operations and data storage infrastructure are based in the Philippines. However, some of our third-party service providers — including cloud infrastructure, game content delivery networks, and fraud prevention tools — may process data in server locations outside the Philippines.
Where such cross-border data transfers occur, zpiso ensures that they are carried out in strict compliance with Section 21 of the Philippine Data Privacy Act. This means that personal data is only transferred to countries, organizations, or individuals that offer an adequate level of data protection, or where appropriate safeguards — such as standard contractual clauses or binding corporate rules — are in place.
zpiso does not transfer your personal data to jurisdictions that lack adequate legal frameworks for personal data protection without first implementing contractual safeguards that are consistent with the requirements of Philippine law.
Changes to This Policy
zpiso may update this Privacy Policy from time to time to reflect changes in our data processing practices, updates to Philippine data privacy law, new PAGCOR regulatory requirements, or improvements to our platform services. When we make material changes to this policy, we will:
- Post the updated Privacy Policy on this page with a revised "Last Updated" date at the top
- Display a prominent notice on the zpiso platform informing players of the change
- Where required by law, seek your renewed consent before applying new processing activities to your existing personal data
We encourage you to review this Privacy Policy periodically to stay informed about how zpiso protects your personal data. Your continued use of the zpiso platform after any update to this policy constitutes your acknowledgment of the revised terms, subject always to your rights under the Philippine Data Privacy Act.
Minor, non-material changes such as typographical corrections, formatting updates, or clarifications that do not alter the substance of the policy may be made without advance notice.
Contact Our Privacy Team
If you have any questions, concerns, or requests relating to this Privacy Policy or zpiso's data processing practices, please get in touch with our dedicated privacy team. We are committed to responding to all privacy-related inquiries in a timely, transparent, and respectful manner.
| Contact Point | Details |
|---|---|
| Data Protection Officer | zpiso Data Privacy Office |
| [email protected] | |
| Subject Line | Use "Privacy Policy Inquiry" or "Data Subject Rights Request" for faster routing |
| Response Time | We acknowledge all inquiries within 5 business days and resolve within 30 calendar days |
| Live Chat | 24/7 support available in-platform for general queries; privacy-specific matters are escalated to the DPO |
| Regulatory Authority | National Privacy Commission (NPC) of the Philippines — for complaints if you are unsatisfied with our response |
zpiso values the trust you place in us when you share your personal data. We are fully committed to honoring that trust by processing your data responsibly, transparently, and in strict compliance with Philippine law. Thank you for taking the time to read and understand our Privacy Policy.
Experience zpiso — Safe, Fair, and Filipino
Your data is protected. Your gaming experience is world-class. Join thousands of Filipino players already enjoying 1,200+ games on a PAGCOR-registered platform built with your privacy and security at its core.
Explore zpiso Casino Player Login21+ only. Please gamble responsibly. PAGCOR-registered platform.