1apiso Privacy Policy

1 Introduction

1apiso ("the Platform," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy describes how 1apiso collects, processes, uses, stores, discloses, and protects the personal information of all users ("you," "your," or "the player") who access or use the 1apiso online gaming platform at 1apiso.vip, including any mobile-optimised versions of the site.

1apiso operates in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC) of the Philippines. This Policy also reflects our obligations under applicable Philippine gaming regulations administered by PAGCOR.

We take our data protection responsibilities seriously. Filipino players trust us with their personal information — their mobile numbers, government ID details, financial transaction records — and we handle that trust with the seriousness it deserves. This Policy is written in plain English so you can understand exactly what we do with your data and what rights you have over it.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 and applicable data protection legislation, the data controller responsible for your personal data is the operating entity behind the 1apiso platform. The platform is accessible at 1apiso.vip and is operated in alignment with PAGCOR's regulatory framework for online gaming in the Philippines.

For all data-related inquiries, rights requests, or complaints, you may contact 1apiso through the channels listed in Section 17 of this Policy. Where 1apiso has appointed a Data Protection Officer (DPO) as required under the NPC's registration requirements, DPO contact details are provided in Section 17.

3 Personal Data We Collect

1apiso collects the following categories of personal data from players who register and use the platform. The specific data collected varies depending on the stage of your interaction with 1apiso.

We do not knowingly collect special categories of sensitive personal data (such as health information, political opinions, or religious beliefs) except where strictly necessary for responsible gaming compliance, such as records of self-exclusion requests made on mental health or gambling disorder grounds.

4 How We Collect Your Data

1apiso collects personal data through the following methods:

4.1 Direct Collection

Data you provide directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team through live chat or email, activate a responsible gaming tool, or participate in any promotional activity on the platform.

4.2 Automated Collection

Data collected automatically when you access and use 1apiso, including technical data such as your IP address, device identifiers, browser type, and session timestamps. This data is collected through standard web server logs and session tracking technologies.

4.3 Cookies and Similar Technologies

1apiso uses cookies and similar tracking technologies to enhance platform functionality, maintain your login session, and analyze platform usage patterns. For full details on cookies, see Section 11 of this Policy.

4.4 Third-Party Sources

In limited circumstances, 1apiso may receive personal data from third-party sources, including payment processors (such as GCash or PayMaya) confirming the status of a transaction, identity verification service providers during KYC processing, and regulatory bodies such as PAGCOR where required for compliance purposes.

5 Purposes of Data Processing

1apiso processes your personal data for the following purposes:

• Account Management: Creating and maintaining your 1apiso player account, authenticating your identity on login, and managing your account security.
• KYC and Age Verification: Verifying that you are at least 21 years of age and confirming your identity in compliance with PAGCOR requirements and anti-money laundering regulations.
• Payment Processing: Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported Philippine payment methods.
• Gaming Services: Delivering the games and betting services available on the 1apiso platform and maintaining accurate records of your gaming activity.
• Regulatory Compliance: Fulfilling obligations under PAGCOR regulations, the Philippine Anti-Money Laundering Act (AMLA), the Philippine Data Privacy Act, and other applicable legislation.
• Fraud Detection and Security: Detecting and preventing fraudulent activity, unauthorized account access, multi-accounting, bonus abuse, and other prohibited conduct.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behaviors, administering deposit limits and self-exclusion requests, and maintaining responsible gaming compliance.
• Customer Support: Responding to your inquiries, resolving complaints, and providing technical assistance.
• Marketing and Promotions: Sending you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications (see Section 14).
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve platform performance, user experience, and game selection.

6 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 1apiso processes your personal data on the following lawful bases:

7 Data Sharing and Disclosure

1apiso does not sell your personal data to third parties. We share your personal data only in the following circumstances and only to the extent necessary for the stated purpose:

7.1 Regulatory and Law Enforcement Authorities

1apiso discloses personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where required by law, court order, or regulatory directive. This includes mandatory disclosure of suspicious transaction reports (STRs) and covered transaction reports (CTRs) under the Philippine AMLA.

7.2 Payment Service Providers

To process deposits and withdrawals, 1apiso shares necessary financial and identity data with payment processors including GCash (Mynt), PayMaya (PayMongo/Voyager), and Philippine banks such as BPI, BDO, and Metrobank. These providers process data only as necessary to execute the specific transaction.

7.3 Identity Verification and KYC Providers

1apiso may engage certified third-party KYC and identity verification service providers to assist with processing government ID documents and verifying player identity. These providers operate under data processing agreements that restrict their use of your data to KYC purposes only.

7.4 Game Content Providers

Game studios and content providers (such as JILI, PG Soft, Pragmatic Play, Evolution Gaming) receive limited technical data — such as player session identifiers and bet amounts — necessary to deliver game sessions. These providers do not receive personally identifiable contact or identity data beyond what is technically required.

7.5 IT and Security Service Providers

Providers of hosting, cloud infrastructure, cybersecurity, and fraud detection services may process technical data as part of delivering platform services. All such providers operate under data processing agreements consistent with Philippine data privacy requirements.

8 International Data Transfers

Some of 1apiso's third-party service providers, including game content studios and cloud infrastructure providers, may be located outside the Philippines. Where personal data is transferred to recipients outside the Philippines, 1apiso takes steps to ensure that appropriate safeguards are in place to protect your data, in accordance with Section 21 of the Philippine Data Privacy Act of 2012.

These safeguards include the execution of data transfer agreements incorporating standard contractual clauses approved by the National Privacy Commission, or reliance on transfers to countries with adequate data protection laws as recognized by the NPC.

By using 1apiso and accepting this Privacy Policy, you consent to the transfer of your personal data to third-party service providers outside the Philippines where such transfers are carried out under the safeguards described above.

9 Data Retention

1apiso retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or for such longer periods as may be required by applicable Philippine law.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized. Where data is anonymized, the resulting anonymized data sets (which no longer identify any individual) may be retained for analytical purposes without restriction.

10 Data Security Measures

1apiso implements technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and 1apiso servers is encrypted in transit using industry-standard Transport Layer Security (TLS) protocols — the same standard used by major Philippine commercial banks.
• Password Security: Account passwords are hashed using bcrypt with a work factor sufficient to resist brute-force attacks. Passwords are never stored in plain text. 1apiso support staff cannot view your password — only reset it through verified procedures.
• OTP Authentication: Sensitive account actions — including logins from new devices and all withdrawal requests — require One-Time Password (OTP) verification sent to your registered Philippine mobile number.
• Access Controls: Internal access to personal data is restricted to authorized personnel who require access to perform their job responsibilities. Access is logged and audited regularly.
• Data Minimization: 1apiso collects only the personal data necessary for each stated purpose and does not retain data beyond applicable retention periods.
• Security Monitoring: 1apiso employs automated monitoring tools to detect unusual login patterns, suspicious transactions, and potential unauthorized access attempts in real time.

Notwithstanding these measures, no digital platform can guarantee absolute security. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, 1apiso will notify the National Privacy Commission and, where required, affected individuals, in accordance with the NPC's data breach notification procedures and within the timelines prescribed under Philippine law.

11 Cookies and Tracking Technologies

1apiso uses cookies and similar technologies on the platform. A cookie is a small text file placed on your device when you access a website. Cookies help the platform function correctly, maintain your session, and provide a better user experience.

11.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the platform to function. These include session cookies that keep you logged in during a gaming session. These cannot be disabled.
• Functionality Cookies: Remember your preferences, such as your preferred language or display settings, to personalize your experience on 1apiso.
• Analytics Cookies: Collect anonymized data about how players use the platform, such as which game categories are accessed most frequently, to help us improve platform performance and usability.
• Security Cookies: Used for fraud prevention and security monitoring purposes, including detecting login anomalies and suspicious session behavior.

11.2 Managing Cookies

You may manage non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling strictly necessary cookies will prevent the 1apiso platform from functioning correctly — you will not be able to log in or access games if session cookies are blocked.

1apiso does not use cookies for cross-site advertising tracking or to share your data with advertising networks.

12 Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 1apiso. To exercise any of these rights, please contact 1apiso through the channels listed in Section 17.

To exercise any of the above rights, please submit a request through 1apiso's live chat or by contacting our support team at the address in Section 17. We may require you to verify your identity before processing your request. Rights requests are responded to within fifteen (15) business days of receipt of a complete request. Where a request cannot be fulfilled, 1apiso will explain the reason.

If you are dissatisfied with 1apiso's response to a data privacy rights request or complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines through official NPC channels.

13 Minors and the 21+ Age Policy

All registrants are required to confirm they are at least 21 years of age at the time of registration. Age verification via a valid Philippine government-issued ID is required prior to processing any withdrawal. Where 1apiso discovers or has reasonable grounds to believe that a registered player is under 21 years of age, the account will be closed immediately, gaming activity suspended, and any deposits returned in accordance with applicable regulations.

Any personal data inadvertently collected from a person under the age of 21 will be deleted promptly upon discovery. If you are a parent or guardian and believe that your minor child has registered on 1apiso, please contact us immediately through the support channels in Section 17 so we can take appropriate action.

14 Marketing Communications

1apiso may send you marketing communications about promotions, bonuses, new games, and platform news where you have provided your consent to receive such communications. Consent is collected during account registration and can be updated at any time through your account settings.

Marketing communications from 1apiso may be delivered by SMS to your registered Philippine mobile number, by email to your registered email address, or through in-platform notifications when you are logged in.

Withdrawing marketing consent: You may opt out of receiving marketing communications from 1apiso at any time by:

• Updating your communication preferences in your 1apiso account settings.
• Clicking the unsubscribe link included in any marketing email.
• Contacting our support team by live chat or email (see Section 17) and requesting removal from marketing lists.

Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal. Opting out of marketing communications will not affect the delivery of transactional communications, such as deposit confirmations, withdrawal notifications, or account security alerts, which are sent regardless of marketing preferences.

15 Third-Party Services and Links

The 1apiso platform may include game content delivered by third-party studios and providers. These game providers operate their own data practices within their game environments. While 1apiso takes steps to ensure its provider agreements include appropriate data protection obligations, 1apiso is not responsible for the independent data practices of third-party game studios.

The 1apiso website does not contain links to external third-party websites. This Privacy Policy applies only to data collected and processed by 1apiso directly in connection with the operation of the 1apiso platform. It does not apply to any data collected by payment processors such as GCash or PayMaya through their own apps or platforms — please review those providers' privacy policies directly for information about their data practices.

16 Policy Amendments

1apiso reviews this Privacy Policy regularly and reserves the right to update it at any time to reflect changes in our data practices, applicable Philippine law, or NPC guidance. The updated effective date is displayed at the top of this page.

Where amendments are material — meaning they significantly change how your personal data is collected, used, or shared — 1apiso will notify registered players via email to their registered address or through an in-platform notification prior to the changes taking effect.

Your continued use of the 1apiso platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Privacy Policy, please cease using the platform and contact our support team to request account closure.

17 Contact and Data Protection Officer

For all data privacy inquiries, rights requests, complaints, or to contact 1apiso's Data Protection Officer (DPO), please use the following channels:

• Live Chat: Available 24/7 through the 1apiso platform — the fastest way to reach our team for any privacy concern
• Email: [email protected]

When submitting a data privacy rights request, please include your registered username or mobile number, the nature of your request, and any supporting information that will help us process your request accurately. We may request additional identity verification before processing rights requests in order to protect your account from unauthorized data disclosure.

Rights requests and privacy complaints are acknowledged within five (5) business days and responded to within fifteen (15) business days where possible. For complex requests, we will inform you of the expected timeframe.

If you wish to escalate a complaint about 1apiso's data practices to the Philippine data protection regulator, you may contact the National Privacy Commission (NPC) through official Philippine government channels.