Introduction
Welcome to ZPiso. This Privacy Policy explains how ZPiso ("we," "us," or "our") collects, uses, stores, and protects the personal information you share with us when you visit zpiso.best, create an account, place bets, or get in touch with our support team. We know privacy can feel like a lot of legal jargon — so we've written this in plain English so every kabayan reading it can actually understand what's going on.
By using ZPiso, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our services. We update this policy when our practices change, so checking back from time to time is a good idea.
What Personal Data We Collect
When you register or use ZPiso, we collect only the information that we genuinely need to run a safe, fair, and legally compliant online betting platform. Here's what that looks like:
Account Registration Data
- Full name and date of birth (age verification)
- Email address and mobile number
- Username and encrypted password
- Home address in the Philippines (province, city/municipality, barangay)
Identity Verification (KYC)
- Government-issued ID (PhilSys ID, passport, driver's license, UMID, or SSS)
- Selfie photo for identity matching
- Proof of billing or residential address when required
KYC is mandatory under PAGCOR regulations and Republic Act 9160 (Anti-Money Laundering Act). We take verification seriously not just to comply with the law, but to protect you from fraud.
Financial and Transaction Data
- Deposit and withdrawal records
- Payment method details (GCash account, Maya wallet, bank account number for BDO/BPI/UnionBank, or card details for Visa/Mastercard)
- Bet history and winnings
Technical and Usage Data
- IP address and approximate geolocation
- Device type, browser type, and operating system
- Pages visited, session duration, and click patterns (via cookies)
- Login timestamps and activity logs
How We Use Your Personal Data
ZPiso uses your data for specific, lawful purposes only. We do not collect data we do not need, and we do not use it for anything outside what's listed here:
- Account management — Creating, maintaining, and securing your ZPiso account.
- Processing bets and payments — Handling deposits, withdrawals, and winnings accurately and quickly.
- Identity verification — Confirming that you are who you say you are, and that you are at least 21 years old as required by Philippine gambling law.
- Fraud prevention and security — Detecting suspicious activity, preventing money laundering, and protecting the platform from abuse.
- Responsible gaming — Monitoring for signs of problem gambling so we can offer support in line with our Responsible Gaming commitment.
- Customer support — Responding to your queries, resolving disputes, and improving your experience.
- Legal compliance — Meeting our obligations under Philippine law, PAGCOR licensing, and financial regulations.
- Service communications — Sending transaction confirmations, security alerts, and account notifications.
- Promotions and offers — Letting you know about ZPiso bonuses and promotions, but only if you have opted in to marketing communications.
Legal Basis for Processing
Under the Data Privacy Act of 2012 (RA 10173), ZPiso processes your personal data on the following grounds:
- Contract performance — Processing is necessary to deliver the betting services you signed up for.
- Legal obligation — We are required by Philippine law and PAGCOR regulations to collect and retain certain data.
- Legitimate interests — Security, fraud prevention, and platform improvement.
- Consent — For optional marketing communications, we rely on your explicit opt-in.
How Long We Keep Your Data
ZPiso retains your personal data only for as long as necessary. In practice:
- Account data is kept for the life of your account plus five (5) years after closure, as required by anti-money laundering rules.
- Transaction records are retained for at least five (5) years per AMLC requirements.
- KYC documents are stored securely and deleted after the mandatory retention period.
- Technical logs (IP, session data) are typically kept for 12 months.
- Marketing consent records are kept until you withdraw consent.
Cookies and Tracking Technologies
ZPiso uses cookies and similar technologies to keep the site working properly and to understand how our players use it. Here's the breakdown:
- Essential cookies — Keep you logged in, remember your session, and secure your account. You cannot opt out of these.
- Analytics cookies — Help us understand which pages are popular and how players navigate the site. Data is aggregated and anonymised.
- Preference cookies — Remember settings like language or game lobby view.
- Marketing cookies — Used only if you have opted in to personalised promotions.
You can manage cookie preferences through your browser settings at any time. Disabling certain cookies may affect some features of the site.
Sharing Your Data With Third Parties
ZPiso does not sell, rent, or trade your personal information. However, we do share data with trusted partners when it is necessary to operate our platform:
- Payment processors — GCash, Maya, GrabPay, Coins.ph, InstaPay/PESONet, and card networks (Visa/Mastercard) receive only the data needed to process transactions.
- KYC verification providers — Regulated identity verification services operate under strict data processing agreements with us.
- IT infrastructure and cloud providers — Servers and cloud services that host ZPiso data are secured under contractual data protection obligations.
- Regulators and law enforcement — We disclose data to PAGCOR, AMLC, or Philippine law enforcement agencies when legally required.
- Auditors and legal advisors — Only under strict confidentiality obligations.
All third parties that process your data on our behalf are required to handle it in line with RA 10173 and our internal data protection standards.
Your Rights as a Data Subject
Under the Data Privacy Act of 2012, you have the following rights regarding your personal data at ZPiso:
- Right to be informed — Know what personal data we collect and how we use it (that's what this policy is for).
- Right to access — Request a copy of the personal data we hold about you.
- Right to correct — Update or correct inaccurate information in your account.
- Right to erasure — Request deletion of your data, subject to our legal retention obligations.
- Right to restrict processing — Ask us to limit how we use your data in certain circumstances.
- Right to data portability — Request your data in a structured, machine-readable format.
- Right to object — Opt out of marketing communications at any time.
- Right to complain — Lodge a complaint with the National Privacy Commission (NPC) if you believe your rights have been violated.
To exercise any of these rights, email us at support@zpiso.best. We aim to respond within 15 business days, as required by RA 10173.
Data Security Measures
We take data security seriously at ZPiso. Our technical and organisational safeguards include:
- TLS 1.2+ encryption for all data transmitted between your device and our servers
- AES-256 encryption for sensitive data stored at rest
- Multi-factor authentication (MFA) available for all accounts
- Regular penetration testing and vulnerability assessments
- Role-based access controls — staff can only access data relevant to their job
- Automatic session timeouts after inactivity
- 24/7 security monitoring and incident response procedures
Despite our best efforts, no online platform can guarantee 100% security. We strongly encourage you to use a strong, unique password and enable two-factor authentication on your ZPiso account.
Children's Privacy
ZPiso is strictly an adult-only platform. We do not knowingly collect personal data from individuals under 21 years of age. If you believe a minor has registered with us, please contact us immediately at support@zpiso.best and we will promptly investigate and remove the account.
International Data Transfers
ZPiso primarily processes data within the Philippines. Where data is processed or stored outside the country — such as through international cloud infrastructure — we ensure that adequate safeguards are in place, consistent with RA 10173 and NPC guidelines.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify registered players via email or an in-app notification. The "Last updated" date at the top of this page will always reflect the most recent revision.
Continued use of ZPiso after any update constitutes your acceptance of the revised policy. If you disagree with the changes, you may close your account by contacting support.
How to Contact Us
For any privacy-related questions, data subject requests, or complaints, get in touch with the ZPiso Data Protection Officer:
- Email: support@zpiso.best
- Support hours: Monday to Sunday, 8:00 AM – 11:00 PM (PHT)
If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) at privacy.gov.ph.
