phalgo Privacy Policy
At phalgo, we take your personal data seriously — not as a legal obligation to tick off a checklist, but as a genuine commitment to Filipino players who trust us with their information. This Privacy Policy explains exactly what data phalgo collects, why we collect it, how we protect it, and what rights you have under Philippine law.
How phalgo Approaches Your Privacy
Six principles guide every data decision at phalgo — from what we collect at registration to how we handle a data access request from a player in Davao or Cebu. These are not marketing statements; they are operational commitments.
We Collect Only What We Need
phalgo collects the minimum personal data required to operate a regulated online casino in the Philippines — registration details, KYC documents, and payment information. We do not harvest data beyond what is genuinely necessary to deliver and secure the service you use.
We Are Transparent About Every Use
This Privacy Policy states every purpose for which phalgo processes your data. No hidden secondary uses, no undisclosed third-party data sales. If the purpose for processing your data changes, we will notify you and, where required by Philippine law, seek fresh consent.
We Protect Your Data Actively
phalgo implements 256-bit SSL encryption, role-based access controls, and regular security audits to protect the personal data of every Filipino player on the platform. We treat a data breach as a critical incident, not a compliance afterthought.
Your Rights Are Real and Exercisable
Under the Philippine Data Privacy Act of 2012, you have genuine rights over your personal data held by phalgo — access, correction, deletion, objection, and portability. We have a dedicated process for handling these requests and will respond within the timelines the law requires.
We Keep Data Only as Long as Necessary
phalgo retains personal data only for as long as it is needed to fulfill the purpose it was collected for, or as required by Philippine law and PAGCOR regulatory obligations. Account data is retained for five years after account closure for AML compliance purposes.
We Are Registered with the NPC
phalgo is registered with the National Privacy Commission (NPC) of the Philippines in accordance with the Data Privacy Act of 2012. Our Data Protection Officer (DPO) is responsible for overseeing compliance and is your point of contact for any privacy-related concern.
Your Rights Under the Philippine Data Privacy Act
The Data Privacy Act of 2012 (Republic Act 10173) grants every Filipino player on phalgo the following rights over their personal data. To exercise any of these rights, contact our Data Protection Officer at the details provided in this policy.
Right to Be Informed
You have the right to know that phalgo is collecting and processing your personal data, the specific purposes for processing, and how long your data will be retained.
Right to Access
You may request a copy of the personal data phalgo holds about you. We will provide this within a reasonable period upon receipt of a verified request from the registered account holder.
Right to Correction
If any personal data phalgo holds about you is inaccurate, incomplete, or outdated, you have the right to request correction. Most profile data can be updated directly from your account settings.
Right to Erasure or Blocking
You may request erasure or blocking of personal data where it is no longer necessary for the purposes it was collected, subject to phalgo's legal retention obligations under Philippine AML and PAGCOR regulations.
Right to Object
You have the right to object to processing of your personal data for direct marketing or profiling purposes. Upon receipt of a valid objection, phalgo will cease processing for those specific purposes immediately.
Right to Data Portability
Where technically feasible, you may request a copy of your personal data in a structured, commonly used, machine-readable format. Submit portability requests to the phalgo Data Protection Officer.
This Privacy Policy ("Policy") describes how phalgo ("phalgo," "we," "us," "our") collects, uses, discloses, stores, and protects the personal data of individuals ("you," "Player," "User") who register accounts, access, or use the phalgo online casino platform available at phalgo.cam. This Policy is issued pursuant to Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations, and forms an integral part of the phalgo Terms and Conditions. By using the phalgo Platform, you acknowledge that you have read and understood this Policy.
1 Introduction & Identity of the Data Controller
phalgo is the data controller responsible for the personal data collected through the phalgo.cam platform. As data controller, phalgo determines the purposes and means of processing your personal data and is accountable for its protection under Philippine law.
phalgo operates within the regulatory framework established by PAGCOR and is registered with the National Privacy Commission (NPC) of the Philippines. Our Data Protection Officer (DPO) is the designated point of contact for all data privacy matters and can be reached via the contact details provided in Section 15 of this Policy.
2 Personal Data We Collect
phalgo collects the following categories of personal data in the course of operating the Platform and fulfilling our legal obligations:
2.1 Registration & Identity Data
Full legal name; date of birth; Philippine mobile phone number; email address; registered residential address; gender; and nationality. This data is collected at account registration and is required to create and maintain your phalgo Account.
2.2 KYC & Verification Data
Government-issued photo identification documents (PSA National ID, UMID, driver's license, passport, PRC ID, or equivalent); selfie photographs for identity matching; proof of address documentation; and any supplementary documents requested during enhanced due diligence procedures.
2.3 Financial & Transaction Data
GCash account numbers; PayMaya account numbers; bank account details (BPI, BDO, Metrobank); cryptocurrency wallet addresses; deposit records; withdrawal requests; transaction amounts; transaction timestamps; and account balance history. This data is required for payment processing and AML compliance.
2.4 Technical & Device Data
IP address; device type and model; operating system; browser type and version; screen resolution; mobile network carrier; session timestamps; and login history. This data is collected automatically when you access the phalgo Platform.
2.5 Gameplay & Behavioral Data
Game session records; bet amounts; game outcomes; game preferences; session duration; responsible gaming tool usage; and wagering history. This data is used for account management, fraud prevention, and responsible gaming purposes.
2.6 Communications Data
Records of communications between you and phalgo support staff, including live chat transcripts, email correspondence, and any other written communication submitted to phalgo through any channel.
Note: phalgo does not collect sensitive personal information as defined under the DPA — such as health data, political affiliations, or religious beliefs — unless you voluntarily disclose such information in the course of a support communication. We will not process any such information beyond what is necessary to address your specific communication.
3 How We Collect Your Personal Data
phalgo collects personal data through the following means:
- Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal, contact support, or submit any form on the Platform.
- Automatically: Through cookies, server logs, and similar technologies when you access or use the phalgo Platform. See Section 7 for detailed information on cookies and tracking technologies.
- From third-party service providers: Identity verification providers used for KYC processing; payment processors for transaction data; fraud detection services; and analytics providers — all of which operate under data processing agreements with phalgo.
- From regulatory authorities: phalgo may receive data from PAGCOR or other Philippine regulatory bodies as part of compliance procedures.
4 Legal Basis for Processing
phalgo processes your personal data on the following legal bases as provided under the Data Privacy Act of 2012:
| Processing Purpose | Legal Basis |
|---|---|
| Account creation and management | Contract — necessary to fulfill the service agreement |
| KYC identity verification | Legal obligation — required under Philippine AML law and PAGCOR regulations |
| Payment processing (deposits and withdrawals) | Contract — necessary to execute payment transactions you initiate |
| Fraud detection and prevention | Legitimate interest — protecting the platform and other players from fraudulent activity |
| Responsible gaming monitoring | Legal obligation — required under PAGCOR responsible gaming framework |
| Customer support communications | Contract — necessary to respond to your service requests |
| Direct marketing communications | Consent — which you may withdraw at any time |
| Analytics and platform improvement | Legitimate interest — improving the phalgo service for Filipino players |
5 How We Use Your Personal Data
phalgo uses your personal data solely for the purposes described in this Policy. Specifically, we use your data to:
- Create, verify, and maintain your phalgo Account;
- Process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and cryptocurrency channels;
- Comply with KYC and AML obligations under Philippine law;
- Detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct;
- Administer bonuses, promotions, and loyalty programme rewards;
- Monitor gameplay for responsible gaming purposes and enforce self-imposed limits;
- Provide customer support and respond to your inquiries;
- Improve the phalgo Platform, including game selection and user interface performance on Philippine mobile devices;
- Send transactional communications (account notifications, payment confirmations, security alerts) via SMS or email;
- With your consent, send promotional communications about phalgo offers, new games, and platform updates;
- Comply with applicable Philippine regulatory requirements and respond to lawful requests from PAGCOR and other authorities.
Your Control: You may withdraw consent for direct marketing communications at any time by updating your notification preferences in the phalgo Account settings or by contacting our Data Protection Officer. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal, nor does it affect processing carried out on other legal bases.
6 Data Sharing & Disclosure
phalgo does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following circumstances and with the following categories of recipients:
- KYC and Identity Verification Providers: Third-party service providers engaged to perform identity document verification as part of the phalgo onboarding process. These providers process data under data processing agreements with phalgo and are prohibited from using your data for any purpose other than the provision of verification services.
- Payment Processors: GCash, PayMaya, and banking partners (BPI, BDO, Metrobank) receive your payment details to the extent necessary to process your deposit and withdrawal transactions.
- Fraud Prevention & Security Services: Specialist third-party services that assist phalgo in detecting and preventing fraudulent transactions, account takeovers, and platform abuse.
- PAGCOR and Philippine Regulatory Authorities: phalgo is required to share player data with PAGCOR and other Philippine government authorities when lawfully requested as part of regulatory oversight, licensing compliance, or law enforcement investigations.
- Anti-Money Laundering Compliance: As required under Republic Act No. 9160 (Anti-Money Laundering Act), phalgo will report covered and suspicious transactions to the Anti-Money Laundering Council (AMLC) of the Philippines.
- Game Providers: Certified casino game providers may receive limited technical data (such as session identifiers) necessary to deliver games on the phalgo Platform. No financial or identity data is shared with game providers beyond what is technically required.
No Third-Party Data Sales: phalgo does not sell, rent, lease, or otherwise transfer your personal data to third parties for advertising, marketing profiling, or any other commercial purpose outside the scope described in this Policy.
7 Cookies & Tracking Technologies
The phalgo Platform uses cookies and similar tracking technologies to ensure the proper functioning of the Platform, enhance your experience, and collect analytics data. The following categories of cookies are used:
- Essential Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your phalgo Account during a visit. These cannot be disabled without affecting Platform functionality.
- Performance & Analytics Cookies: Collect aggregated, anonymized data about how Players use the phalgo Platform — which games are most visited, typical session lengths, and common navigation paths. This data is used to improve Platform performance for Filipino users.
- Functional Cookies: Store your preferences — such as language settings, remembered device status, and responsible gaming notification preferences — to personalize your Platform experience.
- Security Cookies: Used to detect and prevent fraudulent sessions, bot activity, and unauthorized Account access attempts.
You may manage your cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in to your phalgo Account. For detailed cookie management instructions, refer to your browser's help documentation.
8 Data Security
phalgo implements a multi-layered approach to the security of your personal data, consistent with industry standards for online financial services in the Philippines:
- Encryption in Transit: All data transmitted between your device and phalgo's servers is encrypted using 256-bit SSL/TLS encryption — the same standard used by Philippine banks for online banking transactions.
- Encryption at Rest: Sensitive personal data, KYC documents, and financial records stored on phalgo's servers are encrypted at rest using industry-standard encryption protocols.
- Access Controls: Access to personal data within phalgo's organization is restricted on a strict need-to-know basis. Employees handling player data undergo regular privacy and security training.
- Regular Security Audits: phalgo conducts periodic internal and third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
- Incident Response: phalgo maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, phalgo will notify the National Privacy Commission and affected Players within the timeframes required by the DPA.
Your Responsibility: The security of your phalgo Account also depends on you. Use a strong, unique password. Enable two-factor authentication (2FA) in your account settings. Never share your login credentials with anyone. phalgo's support team will never ask for your password through any channel.
9 Data Retention
phalgo retains personal data for the periods set out below, after which data is securely deleted or anonymized unless a longer retention period is required or permitted by law:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | AML / PAGCOR regulatory requirement |
| KYC identity documents | 5 years after account closure | Republic Act 9160 (AMLA) |
| Financial transaction records | 5 years from transaction date | AMLA and PAGCOR regulations |
| Gameplay and session records | 2 years from session date | Responsible gaming compliance |
| Support communications | 3 years from last communication | Dispute resolution; legal claim defense |
| Marketing consent records | Until consent is withdrawn + 1 year | NPC compliance; evidence of consent |
Upon expiry of the applicable retention period, phalgo will securely delete or irreversibly anonymize your personal data unless further retention is required by a specific legal order or regulatory directive.
10 Children's Privacy — Under-21 Restriction
Age Restriction: The phalgo Platform is strictly limited to individuals who are 21 years of age or older. phalgo does not knowingly collect personal data from individuals under the age of 21. If phalgo discovers that personal data has been collected from an individual under 21, all such data will be deleted immediately and the associated Account will be closed.
This restriction is enforced through identity verification during the KYC process, which requires submission of a valid Philippine government-issued identification document confirming date of birth. If you believe that phalgo may have inadvertently collected data from a person under 21, please contact our Data Protection Officer immediately using the contact details in Section 15.
11 Exercising Your Data Privacy Rights
To exercise any of your rights under the Data Privacy Act of 2012 — including the right to access, correction, erasure, objection, or data portability — submit a written request to the phalgo Data Protection Officer using the contact details in Section 15. Please include the following in your request:
- Your full name and registered phalgo Account email address or mobile number;
- A description of the right you wish to exercise and the specific data concerned;
- A copy of a valid Philippine government-issued ID to verify your identity.
phalgo will acknowledge your request within five business days and provide a substantive response within the period required by applicable Philippine law. Where a request cannot be fulfilled — for example, due to a conflicting legal obligation — phalgo will explain the reason in writing.
Complaints: If you believe phalgo has handled your personal data in a manner that violates the Data Privacy Act of 2012, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. Information on filing a complaint is available through the NPC's official government channels.
12 Cross-Border Data Transfers
phalgo's primary data processing operations are conducted within the Republic of the Philippines. In some cases, personal data may be transferred to or accessed from third-party service providers located in other jurisdictions — for example, cloud infrastructure providers or specialized KYC verification services.
Where such cross-border transfers occur, phalgo ensures that appropriate safeguards are in place to protect your personal data in accordance with the DPA and NPC guidelines on cross-border data transfers. This includes contractual data protection clauses with international service providers that meet the standards required by Philippine law.
phalgo will not transfer your personal data to any country or territory that does not provide an adequate level of data protection comparable to the standards established by the Data Privacy Act of 2012, unless specific contractual or legal safeguards are in place to compensate for that difference.
13 Third-Party Links & Services
The phalgo Platform may contain links to third-party websites or services — for example, links to responsible gaming resources or regulatory information. This Privacy Policy applies solely to the personal data processed by phalgo through the phalgo.cam platform. phalgo is not responsible for the privacy practices of any third-party website or service, and we encourage you to review the privacy policies of any external sites you visit.
Game providers whose titles are made available on the phalgo Platform operate under separate data processing agreements with phalgo. These providers may process limited technical data — such as game session identifiers — as necessary to deliver their games. This is governed by the data processing terms between phalgo and those providers.
14 Updates to This Privacy Policy
phalgo may update this Privacy Policy from time to time to reflect changes in our data practices, Philippine legal requirements, or NPC guidance. Material changes to this Policy will be communicated to registered Players via the email address associated with their phalgo Account, and a prominent notice will be displayed on the Platform prior to the effective date of the change.
We encourage you to review this Policy periodically. The effective date at the top of this page indicates when the current version was last updated. Continued use of the phalgo Platform after the effective date of any updated Policy constitutes your acknowledgment of the updated terms.
15 Contact & Data Protection Officer
For all privacy-related inquiries, data subject rights requests, or concerns about phalgo's handling of your personal data, contact our Data Protection Officer through the following channels:
- Email: [email protected] — include "Privacy / DPO Request" in the subject line
- Live Chat: Available 24/7 on the phalgo.cam platform — average response 3 to 5 minutes
phalgo will acknowledge all privacy-related inquiries within five Philippine business days. Responses to substantive data subject rights requests will be provided within the timeframes required by the Data Privacy Act of 2012 and NPC regulations.
Regulator Contact: The National Privacy Commission (NPC) of the Philippines is the supervisory authority responsible for data protection in the Philippines. For information on your rights or to file a complaint, visit the NPC through official Philippine government channels. phalgo's NPC registration details are available upon written request to our Data Protection Officer.
Play at phalgo Casino — With Full Confidence in Your Data Privacy
You now know exactly how phalgo handles your personal data. A platform built for Filipino players, compliant with Philippine law, and genuinely committed to protecting your information. 500+ games, instant GCash payouts, Filipino support 24/7. For players 21 and older.
By playing, you confirm you are 21+ and have read this Privacy Policy and our Terms & Conditions. For gaming-related concerns visit Responsible Gaming.