phplago Privacy Policy

1. Overview

phplago ("phplago," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses our online bingo, casino, and gaming platform at phplago.org. This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, disclosure, and protection of your personal information.

This Policy applies to all users of the phplago Platform, including visitors who browse without registering, registered players, and former account holders. It covers all interactions with phplago, including through our website, mobile platform, customer support channels, and marketing communications.

By registering an account or using the phplago Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform and contact us to close your account.

2. Personal Data We Collect

phplago collects personal data that you provide directly, data generated through your use of the Platform, and data obtained from third parties where permitted by law. The categories of personal data we collect include:

2.1 Data You Provide Directly

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued ID details (e.g., Philippine passport number, SSS ID, PhilHealth ID, driver's license number).
• Contact Data: Email address, mobile number, and residential address (including barangay, city/municipality, province, and postal code).
• Account Data: Username, password (stored in hashed form), security questions and answers, and account preferences.
• Financial Data: GCash mobile number, PayMaya account details, bank account information (BPI, BDO, Metrobank, or other Philippine banks), and credit/debit card details (card number, expiry, and CVV are processed by our PCI-DSS compliant payment processors and are not stored by phplago directly).
• KYC Documents: Copies of government-issued identification documents and proof of address submitted for identity verification purposes.
• Communications Data: Records of your communications with phplago customer support, including live chat transcripts, emails, and support ticket content.

2.2 Data Collected Automatically

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, games played, session duration, click patterns, search queries within the Platform, and features accessed.
• Transaction Data: Deposit and withdrawal history, game wager history, bonus usage, and account balance history.
• Location Data: General geographic location derived from your IP address. phplago does not collect precise GPS location data.
• Cookie Data: Data collected through cookies and similar tracking technologies as described in Section 6.

2.3 Data from Third Parties

• Identity verification data from KYC service providers.
• Fraud prevention and AML screening data from compliance service providers.
• Payment confirmation data from GCash, PayMaya, and banking partners.
• Responsible gaming data from self-exclusion registries where applicable.

3. How We Use Your Personal Data

phplago uses your personal data only for legitimate, specified purposes. We do not sell your personal data to third parties. The primary purposes for which we process your data include:

• Account Management: Creating and maintaining your phplago account, verifying your identity, and managing your account settings and preferences.
• Service Delivery: Providing access to bingo, casino, slot, and other games on the phplago Platform; processing deposits and withdrawals; crediting bonuses and promotions.
• KYC & Compliance: Verifying your age (21+), identity, and source of funds in accordance with PAGCOR guidelines and Philippine AML regulations.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, and other prohibited conduct.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behavior; administering deposit limits, self-exclusion, and cooling-off periods.
• Customer Support: Responding to your inquiries, resolving disputes, and providing technical assistance.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates — only where you have provided consent or where permitted by law. You may opt out at any time.
• Platform Improvement: Analyzing usage data to improve the phplago Platform, fix bugs, and develop new features for Filipino players.
• Legal Obligations: Complying with applicable Philippine laws, regulatory requirements, court orders, and requests from competent authorities.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, phplago processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — including account creation, game access, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws, including AML regulations, PAGCOR requirements, and tax obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Sharing Your Personal Data

phplago does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following circumstances:

5.1 Service Providers

We share data with trusted third-party service providers who assist us in operating the phplago Platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), KYC and identity verification providers, fraud prevention and AML screening services, cloud hosting and infrastructure providers, and customer support platform providers. All service providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection laws.

5.2 Regulatory Authorities

phplago may disclose your personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), or other competent Philippine regulatory authorities where required by law or in response to a valid legal request.

5.3 Law Enforcement

We may disclose personal data to law enforcement agencies where required by a court order, subpoena, or other valid legal process, or where we believe disclosure is necessary to prevent fraud, protect the safety of our players, or comply with applicable law.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of phplago's assets, your personal data may be transferred to the acquiring entity. We will notify you of any such transfer and the applicable privacy terms before your data is transferred and becomes subject to a different privacy policy.

6. Cookies & Tracking Technologies

phplago uses cookies and similar tracking technologies to enhance your experience on the Platform, remember your preferences, and analyze how our services are used. A cookie is a small text file placed on your device when you visit our website.

6.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in during your phplago session and security cookies that help detect fraudulent activity. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, game display options, and responsible gaming tool configurations.
• Analytics Cookies: Help us understand how Filipino players use the phplago Platform — which games are most popular, how long sessions last, and where players encounter difficulties. This data is aggregated and anonymized.
• Marketing Cookies: Used to deliver relevant promotional content about phplago games and offers. These are only placed with your consent.

6.2 Managing Cookies

You can control non-essential cookies through your browser settings or our cookie preference center. Please note that disabling certain cookies may affect the functionality of the phplago Platform. Strictly necessary cookies cannot be disabled as they are required for the Platform to operate securely.

Most browsers allow you to view, manage, and delete cookies through their settings menus. Refer to your browser's help documentation for specific instructions on managing cookies on your device.

7. Data Retention

phplago retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. Our general retention periods are as follows:

• Active Account Data: Retained for the duration of your account and for a period of five (5) years following account closure, in accordance with PAGCOR and AML record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, as required by the Anti-Money Laundering Act.
• Transaction Records: Retained for five (5) years from the date of each transaction.
• Customer Support Records: Retained for three (3) years from the date of the last interaction.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent.
• Technical and Usage Logs: Retained for up to twelve (12) months, after which they are anonymized or deleted.

When personal data is no longer required, phplago will securely delete or anonymize it in accordance with our data disposal procedures.

8. Data Security

phplago implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption: All data transmitted between your device and the phplago Platform is encrypted using 256-bit SSL/TLS technology. Passwords are stored using industry-standard one-way hashing algorithms.
• Access Controls: Access to personal data is restricted to phplago personnel and service providers who have a legitimate need to access it. All staff with access to personal data are subject to confidentiality obligations.
• Payment Security: phplago works with PCI-DSS compliant payment processors. Card details are processed directly by our payment partners and are not stored on phplago servers.
• Fraud Monitoring: We use automated systems to monitor for suspicious account activity, unauthorized login attempts, and unusual transaction patterns.
• Regular Security Reviews: Our security practices are reviewed and updated regularly to address emerging threats and vulnerabilities.

9. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phplago:

• Right to Be Informed: The right to know what personal data phplago collects about you, how it is used, and with whom it is shared — as set out in this Privacy Policy.
• Right to Access: The right to request a copy of the personal data phplago holds about you, along with information about how it is processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You can update most account information directly through your phplago account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Privacy Request." We will respond to your request within fifteen (15) business days. We may need to verify your identity before processing your request.

10. Minors and Age Restriction

The phplago Platform is strictly intended for adults aged 21 years and older, in accordance with Philippine gaming regulations. phplago does not knowingly collect personal data from individuals under the age of 21.

During registration, all players are required to confirm that they are at least 21 years of age and to submit valid government-issued identification for age verification. Any account found to be held by a person under 21 will be immediately closed, all funds will be returned to the registered payment method, and all personal data associated with the account will be deleted in accordance with our data retention policy.

If you are a parent or guardian and believe that a minor has registered on the phplago Platform using false information, please contact us immediately at [email protected] so that we can take appropriate action.

11. International Data Transfers

phplago primarily processes and stores personal data within the Philippines. However, some of our third-party service providers — including cloud infrastructure providers and KYC verification services — may process data in other countries.

Where personal data is transferred outside the Philippines, phplago ensures that appropriate safeguards are in place to protect your data, including contractual clauses that require the recipient to process your data in accordance with standards equivalent to those required under the Philippine Data Privacy Act of 2012.

By using the phplago Platform, you acknowledge and consent to the transfer of your personal data to countries outside the Philippines where necessary for the provision of our services, subject to the safeguards described above.

12. Changes to This Privacy Policy

phplago reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how phplago protects your personal data. Your continued use of the phplago Platform following any update constitutes your acceptance of the revised Policy.

13. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by phplago, please contact our Data Protection Officer (DPO):

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have not been adequately addressed by phplago. For more information on your rights under the Data Privacy Act, visit the NPC's official resources.

For responsible gaming concerns, please visit our Responsible Gaming page for tools and resources available to all phplago players.