phlagu Privacy Policy

Welcome to phlagu's Privacy Policy. This document explains how phlagu ("phlagu," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of users ("you," "your," or "Player") who access or use the phlagu website located at phlagu.com and all associated services, games, features, and content (collectively, the "Platform").

phlagu is committed to protecting your privacy and ensuring that your personal data is handled in a secure, transparent, and lawful manner. This Privacy Policy is designed to help you understand:

• What personal information we collect and why we collect it
• How we use, process, and store your personal data
• Who we share your information with and under what circumstances
• Your rights regarding your personal data and how to exercise them
• The security measures we implement to protect your information

By registering an account, accessing the Platform, or using any of phlagu's services, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

phlagu complies with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, as well as all applicable Philippine data protection laws. We are committed to upholding the highest standards of data privacy and security for all our users in the Philippines and beyond.

phlagu collects various types of personal information to provide, maintain, and improve our services. The information we collect falls into the following categories:

2.1 Information You Provide Directly

When you register an account or use our services, you may provide us with the following information:

• Account Registration Data: Full name, date of birth, email address, phone number, residential address, username, and password.
• Identity Verification Documents: Government-issued identification such as Philippine National ID (PhilSys), passport, driver's license, UMID card, or other acceptable forms of ID required for age verification and Know Your Customer (KYC) compliance.
• Payment Information: Payment method details including GCash account, PayMaya account, bank account information (BPI, BDO, Metrobank, etc.), and transaction history. Note that full credit card numbers are not stored by phlagu but are processed securely through our PCI-DSS compliant payment partners.
• Communication Data: Any information you provide when you contact our customer support team, participate in surveys, or communicate with us via email, live chat, or other channels.
• Responsible Gaming Preferences: Deposit limits, session time limits, self-exclusion requests, and other responsible gaming tool settings you configure.

2.2 Information Collected Automatically

When you access or use the phlagu Platform, we automatically collect certain technical and usage information, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (such as IP address and device ID).
• Usage Data: Pages visited, games played, time spent on the Platform, clickstream data, referring/exit pages, date and time stamps, and other interaction data.
• Location Data: Approximate geographic location derived from your IP address to ensure compliance with jurisdictional restrictions and to provide localized services.
• Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to enhance your experience, analyze Platform usage, and deliver personalized content. See Section 9 for more details on cookies.

2.3 Information from Third Parties

In certain circumstances, we may receive information about you from third-party sources, including:

• Payment Processors: Transaction confirmation, payment status, and fraud detection data from GCash, PayMaya, banks, and other payment service providers.
• Identity Verification Services: Verification results and risk assessment data from third-party KYC and anti-fraud service providers.
• Affiliate Partners: Referral information if you accessed phlagu through an affiliate link or promotional campaign.

phlagu uses the personal information we collect for the following purposes:

3.1 Account Management and Service Delivery

• To create, maintain, and manage your phlagu account
• To process your deposits, withdrawals, and other financial transactions
• To provide access to games, features, and services on the Platform
• To communicate with you about your account, transactions, and Platform updates
• To provide customer support and respond to your inquiries

3.2 Legal and Regulatory Compliance

• To verify your identity and age (21+ requirement) in compliance with Philippine gaming regulations
• To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations
• To detect, prevent, and investigate fraud, money laundering, and other illegal activities
• To comply with legal obligations, court orders, and requests from regulatory authorities
• To enforce our Terms & Conditions and other policies

3.3 Platform Improvement and Personalization

• To analyze Platform usage and user behavior to improve our services
• To personalize your experience by recommending games and content based on your preferences
• To conduct research, testing, and statistical analysis to enhance Platform performance
• To develop new features, products, and services

3.4 Marketing and Promotions

• To send you promotional offers, bonuses, newsletters, and marketing communications (with your consent where required)
• To administer contests, tournaments, and promotional campaigns
• To provide you with personalized offers based on your gaming activity and preferences

3.5 Security and Fraud Prevention

• To monitor and detect suspicious activity, unauthorized access, and security threats
• To prevent fraud, collusion, bonus abuse, and other prohibited conduct
• To protect the integrity of our games and ensure fair play
• To safeguard the Platform and our users from cyber attacks and other security risks

3.6 Responsible Gaming

• To implement and enforce responsible gaming tools such as deposit limits, session time limits, and self-exclusion
• To identify and assist users who may be experiencing problem gambling behaviors
• To comply with responsible gaming obligations under Philippine law

Under the Data Privacy Act of 2012 and applicable data protection laws, phlagu processes your personal information based on one or more of the following legal grounds:

• Consent: You have given explicit consent for us to process your personal data for specific purposes, such as receiving marketing communications.
• Contractual Necessity: Processing is necessary to perform our contract with you (i.e., to provide the services you requested when you registered an account and agreed to our Terms & Conditions).
• Legal Obligation: Processing is required to comply with legal and regulatory obligations, including age verification, KYC/AML requirements, and reporting obligations to Philippine authorities.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, Platform improvement, and customer support, provided that these interests do not override your fundamental rights and freedoms.

Where we rely on consent as the legal basis for processing, you have the right to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

phlagu does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your personal data with the following categories of recipients under specific circumstances:

5.1 Service Providers and Business Partners

We share personal information with trusted third-party service providers who assist us in operating the Platform and delivering our services, including:

• Payment Processors: GCash, PayMaya, banks (BPI, BDO, Metrobank, etc.), and other payment gateways to process deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML service providers to verify your identity and comply with regulatory requirements.
• Cloud Hosting and IT Infrastructure: Cloud service providers that host our Platform and store data securely.
• Customer Support Tools: Live chat, email, and ticketing system providers to deliver customer support services.
• Marketing and Analytics Partners: Email marketing platforms, analytics tools, and advertising networks to deliver and measure the effectiveness of our marketing campaigns.

All service providers are contractually obligated to protect your personal information, use it only for the purposes we specify, and comply with applicable data protection laws.

5.2 Legal and Regulatory Authorities

We may disclose your personal information to government authorities, regulators, law enforcement agencies, and courts when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests
• Enforce our Terms & Conditions and other policies
• Protect the rights, property, or safety of phlagu, our users, or the public
• Detect, prevent, or investigate fraud, money laundering, or other illegal activities

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring or successor entity. We will notify you via email or a prominent notice on the Platform before your personal data is transferred and becomes subject to a different privacy policy.

5.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that does not directly identify you with third parties for research, analytics, marketing, and other business purposes. This data cannot be used to identify you personally.

phlagu takes the security of your personal information seriously and implements a range of technical, organizational, and administrative measures to protect your data from unauthorized access, disclosure, alteration, and destruction.

Security Measures Include:

• Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols. Sensitive data stored on our servers is encrypted at rest.
• Access Controls: Access to personal data is restricted to authorized personnel only, based on the principle of least privilege. All employees and contractors with access to personal data are bound by confidentiality obligations.
• Secure Payment Processing: Payment transactions are processed through PCI-DSS compliant payment gateways. phlagu does not store full credit card numbers or sensitive payment credentials.
• Regular Security Audits: We conduct regular security assessments, vulnerability scans, and penetration testing to identify and address potential security risks.
• Incident Response: We maintain an incident response plan to detect, respond to, and recover from data breaches and security incidents promptly.
• Two-Factor Authentication (2FA): We strongly encourage all users to enable 2FA on their accounts for an additional layer of security.

Despite our best efforts, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant authorities in accordance with applicable data protection laws.

phlagu retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements.

Retention Periods:

• Active Accounts: Personal data associated with active accounts is retained for the duration of your account's active status and for a reasonable period thereafter to allow for account reactivation if you choose to return.
• Closed Accounts: After you close your account, we will retain certain personal information for up to seven (7) years to comply with legal, regulatory, and tax obligations, including anti-money laundering record-keeping requirements under Philippine law.
• Transaction Records: Financial transaction records, including deposits, withdrawals, and gaming activity, are retained for at least five (5) years as required by applicable financial regulations.
• Marketing Data: If you opt out of marketing communications, we will retain a record of your opt-out preference indefinitely to ensure we do not contact you again for marketing purposes.
• Legal Claims: Where necessary to establish, exercise, or defend legal claims, we may retain personal data for longer periods as required by law.

Once the retention period expires and there is no legal or business reason to retain your data, we will securely delete or anonymize your personal information in accordance with our data retention and deletion policies.

Under the Data Privacy Act of 2012 and applicable data protection laws, you have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request access to the personal data we hold about you. You can request a copy of your personal information by contacting our privacy team.

8.2 Right to Rectification

If you believe that any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request that we correct or update it. You can update most of your account information directly through your account settings.

8.3 Right to Erasure (Right to be Forgotten)

You have the right to request the deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw your consent. Please note that we may be required to retain certain information to comply with legal obligations.

8.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to our processing.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider where technically feasible.

8.6 Right to Object

You have the right to object to the processing of your personal data for certain purposes, including direct marketing. You can opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or adjusting your communication preferences in your account settings.

8.7 Right to Withdraw Consent

Where we rely on your consent as the legal basis for processing your personal data, you have the right to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

8.8 Right to Lodge a Complaint

If you believe that phlagu has violated your privacy rights or applicable data protection laws, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. You can contact the NPC at:

• Website: www.privacy.gov.ph
• Email: [email protected]
• Hotline: (02) 8234-2228

phlagu uses cookies, web beacons, and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver personalized content and advertising.

What Are Cookies?

Cookies are small text files that are stored on your device when you visit a website. They allow the website to recognize your device and remember certain information about your preferences and activity.

Types of Cookies We Use:

• Essential Cookies: These cookies are necessary for the Platform to function properly. They enable core functionality such as account login, session management, and security features. You cannot opt out of essential cookies.
• Performance Cookies: These cookies collect information about how you use the Platform, such as which pages you visit and how long you spend on each page. This data helps us improve Platform performance and user experience.
• Functional Cookies: These cookies allow the Platform to remember your preferences (such as language, currency, and game settings) and provide enhanced, personalized features.
• Advertising Cookies: These cookies are used to deliver relevant advertisements and measure the effectiveness of our marketing campaigns. They may be set by us or by third-party advertising partners.

Managing Cookies:

Most web browsers allow you to control cookies through their settings. You can choose to block or delete cookies, but please note that doing so may affect your ability to use certain features of the Platform. To learn more about managing cookies, visit your browser's help section or visit www.allaboutcookies.org.

Third-Party Tracking:

We may use third-party analytics and advertising services (such as Google Analytics) that use cookies and similar technologies to collect information about your use of the Platform. These third parties may combine this information with other data they have collected about you from other websites and services. We do not control these third-party cookies and recommend reviewing their privacy policies for more information.

The phlagu Platform may contain links to third-party websites, services, or applications that are not owned or controlled by phlagu. This Privacy Policy applies only to the phlagu Platform and does not cover the privacy practices of third-party sites.

We are not responsible for the privacy policies, practices, or content of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit before providing them with your personal information.

The inclusion of a link to a third-party website does not imply endorsement by phlagu. You access third-party websites at your own risk.

The phlagu Platform is intended solely for individuals who are 21 years of age or older, as required by Philippine gaming regulations. phlagu does not knowingly collect, use, or disclose personal information from individuals under the age of 21.

If we become aware that we have inadvertently collected personal information from a person under the age of 21, we will take immediate steps to delete that information from our systems and terminate the associated account.

If you are a parent or guardian and believe that your child has provided personal information to phlagu, please contact us immediately at [email protected] so that we can take appropriate action.

phlagu operates primarily in the Philippines and stores personal data on servers located within the Philippines and in secure cloud infrastructure that may be located in other jurisdictions.

If your personal information is transferred to countries outside the Philippines, we will ensure that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012 and applicable data protection laws. These safeguards may include:

• Standard contractual clauses approved by the National Privacy Commission
• Ensuring that the recipient country has adequate data protection laws
• Obtaining your explicit consent for the transfer where required by law

By using the phlagu Platform, you acknowledge and consent to the transfer of your personal information to jurisdictions outside the Philippines where necessary to provide our services.

phlagu reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations.

When we make material changes to this Privacy Policy, we will notify you by:

• Posting a prominent notice on the Platform
• Sending an email notification to the email address associated with your account
• Updating the "Last Updated" date at the top of this Privacy Policy

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information. Your continued use of the Platform after any changes to this Privacy Policy constitutes your acceptance of the revised policy.

If you do not agree with any changes to this Privacy Policy, you must stop using the Platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests regarding this Privacy Policy or phlagu's data practices, please contact our Data Protection Officer or customer support team:

• Email: [email protected]
• Customer Support: [email protected]
• Live Chat: Available 24/7 via the chat widget on the phlagu Platform
• Mailing Address: phlagu Data Protection Officer, Metro Manila, Philippines

We will respond to all privacy-related inquiries within fifteen (15) business days as required by the Data Privacy Act of 2012.

For complaints or concerns regarding data protection, you may also contact the National Privacy Commission (NPC) of the Philippines:

• Website: www.privacy.gov.ph
• Email: [email protected]
• Hotline: (02) 8234-2228
• Address: 5th Floor, Philippine International Convention Center (PICC), Vicente Sotto St., Pasay City, Metro Manila, Philippines