phlov Privacy Policy

phlov ("phlov," "we," "us," or "our") operates the online gaming platform accessible at phlov.org, a Philippines-focused digital entertainment destination offering live casino games, slots, bingo, sports betting, Jacks or Better video poker, and the Mine game to registered Filipino players. For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, phlov acts as the Personal Information Controller (PIC) in respect of the personal data collected and processed through the phlov platform.

This Privacy Policy applies to all users of the phlov website, including visitors who have not yet registered, registered players who access phlov through the phlov Login page, and any individuals who contact us through our support channels. By using phlov.org, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

phlov collects personal data that is necessary to operate a regulated online gaming platform, verify player identities, process financial transactions, and provide a safe and compliant gaming environment for Filipino players. The categories of personal data we may collect include:

phlov does not intentionally collect special categories of sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, health information, or sexual orientation, unless specifically required by applicable law or regulatory obligation.

phlov collects your personal data through the following channels and interactions:

• Account Registration: When you create a phlov account via the phlov Login registration page, you directly provide your name, date of birth, email address, and Philippine mobile number.
• KYC Verification: When you submit identity documents to complete your account verification, phlov collects the information contained in those documents to confirm your identity and age (21+ requirement).
• Deposits & Withdrawals: When you make financial transactions on phlov using GCash, PayMaya, BPI, BDO, Metrobank, or other supported payment methods, transaction and payment account data is collected.
• Platform Usage: As you interact with phlov's games, features, and pages, we automatically collect technical data such as your IP address, device information, session duration, and in-game activity through server logs and analytics tools.
• Support Interactions: When you contact phlov's support team via live chat or email, we collect the content of your communications and any additional information you provide during the support interaction.
• Cookies and Tracking Technologies: phlov uses cookies and similar technologies to collect browsing and session data. See Section 8 for full details on our cookie practices.

phlov processes your personal data for the following specific purposes, each of which is necessary to operate a safe, compliant, and high-quality gaming platform for Filipino players:

• Account Creation and Management: To register your phlov account, verify your identity, maintain your profile, and enable access through phlov Login.
• Age Verification (21+ Compliance): To confirm that all players using the platform meet the minimum gambling age requirement of 21 years under Philippine law and PAGCOR regulations.
• Payment Processing: To facilitate deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels, and to maintain accurate financial records.
• Regulatory Compliance: To meet our KYC, AML, counter-terrorism financing, and other regulatory obligations under Philippine law, PAGCOR licensing conditions, and applicable financial regulations.
• Responsible Gaming: To monitor gaming behavior, implement player-requested responsible gaming tools (deposit limits, self-exclusion, cooling-off periods), and identify players who may be at risk of problem gambling.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, bonus abuse, and other security threats to the platform and our players.
• Customer Support: To respond to your inquiries, process complaints, and resolve disputes in a timely manner through our 24/7 Filipino-speaking support team.
• Platform Improvement: To analyze aggregated and anonymized usage data to improve the phlov platform's features, game selection, and user experience for Filipino players.
• Marketing Communications: To send you promotional offers, bonus notifications, and gaming updates via email or SMS — but only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time.

Under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, phlov processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and phlov (i.e., your phlov account and the Terms and Conditions you agreed to upon registration). This covers account management, payment processing, and core platform functionality.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including KYC and AML obligations under the Anti-Money Laundering Act of 2001 (as amended), PAGCOR licensing requirements, and the Cybercrime Prevention Act of 2012.
• Legitimate Interests: Processing is necessary for phlov's legitimate interests in operating a secure, fraud-free gaming platform, provided those interests are not overridden by your fundamental rights and freedoms. This covers security monitoring, fraud detection, and platform analytics.
• Consent: Where phlov relies on your consent as the legal basis — such as for marketing communications and non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place before your withdrawal.

phlov does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: phlov shares necessary transaction and identity data with payment service providers — including GCash (Mynt), PayMaya (Voyager Innovations), BPI, BDO, and Metrobank — to facilitate deposits and withdrawals. These providers are bound by their own data protection obligations and are prohibited from using your data for any purpose beyond processing your transactions.
• KYC and Identity Verification Partners: phlov may use third-party identity verification services to assist with document verification during the KYC process. These partners process your data solely for the purpose of identity verification on phlov's behalf and under strict contractual data protection terms.
• Regulatory and Law Enforcement Authorities: phlov is legally obligated to disclose certain player data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government authorities when required by law, court order, or regulatory demand.
• Technology and Hosting Providers: phlov's platform is hosted and operated using third-party cloud and technology infrastructure. These providers access personal data only to the extent necessary to provide technical services to phlov and are contractually required to maintain appropriate data security standards.
• Professional Advisers: phlov may share data with legal counsel, auditors, and compliance consultants on a need-to-know basis, always under confidentiality obligations.

Any third party that processes personal data on phlov's behalf is required to enter into a Data Processing Agreement and is prohibited from processing your data for any purpose other than the specific service they are providing to phlov.

phlov retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Account Data and KYC Documents: Retained for a minimum of five (5) years from account closure, in compliance with the Anti-Money Laundering Act of 2001 (as amended by RA 10365) and PAGCOR record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable Philippine financial regulations.
• Gaming History and Activity Logs: Retained for a minimum of three (3) years from the date of activity, to support dispute resolution and responsible gaming monitoring.
• Support Communications: Retained for two (2) years from the date of the last interaction, for quality assurance and complaint resolution purposes.
• Marketing Preferences and Consent Records: Retained until you withdraw consent or for two (2) years after your last interaction with phlov marketing communications, whichever comes first.
• Technical and Log Data: Typically retained for twelve (12) months from collection, unless flagged for security investigation, in which case relevant logs may be retained for the duration of that investigation.

When personal data is no longer required, phlov will securely delete or anonymize it in accordance with industry best practices and applicable Philippine data protection standards.

phlov uses cookies and similar tracking technologies on phlov.org to ensure the platform functions correctly, to maintain your phlov Login session, and to understand how Filipino players interact with our games and features. The types of cookies phlov uses are as follows:

phlov does not use third-party advertising cookies or tracking pixels that send your data to external ad networks. You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will impair your ability to use phlov and may prevent you from logging in via the phlov Login page.

phlov implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• SSL/TLS Encryption: All data in transit between your device and phlov.org is encrypted using industry-standard SSL/TLS protocols, including during phlov Login and all financial transactions.
• Data Encryption at Rest: Sensitive personal data and financial information stored on phlov's servers is encrypted at rest using AES-256 or equivalent encryption standards.
• Access Controls: Access to personal data within phlov's systems is restricted to authorized personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and undergo regular data protection training.
• Two-Factor Authentication: phlov offers two-factor authentication for player accounts and mandates it for administrative system access to reduce the risk of unauthorized account access.
• Regular Security Audits: phlov conducts regular penetration testing, vulnerability assessments, and security audits to identify and remediate potential weaknesses in our systems.
• Incident Response: phlov maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, phlov will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, as required by RA 10173.

As a data subject under the Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by phlov. You may exercise any of these rights by contacting us at [email protected]:

• Right to be Informed: You have the right to know what personal data phlov collects about you, why we collect it, how it is used, and with whom it is shared — which is the primary purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data phlov holds about you, including your account data, KYC records, transaction history, and gaming activity.
• Right to Rectification: You have the right to request that phlov correct any inaccurate or incomplete personal data we hold about you. You can update basic profile information directly from your phlov account settings, or contact support for assistance.
• Right to Erasure / Right to be Forgotten: You have the right to request the deletion of your personal data, subject to phlov's legal retention obligations under AML regulations and PAGCOR requirements. Where a legal retention period applies, phlov will delete your data as soon as that period has expired.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though this right is subject to balancing against phlov's legal and regulatory obligations.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that phlov transmit that data to another data controller where technically feasible.
• Right to Lodge a Complaint: If you are not satisfied with how phlov has handled your personal data or a privacy rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

phlov will respond to all verifiable privacy rights requests within fifteen (15) business days of receipt. In complex cases, we may extend this period by a further thirty (30) days and will notify you accordingly. To protect your security, we may need to verify your identity before processing a rights request.

The phlov platform is strictly intended for individuals aged 21 years and above, in accordance with the minimum legal gambling age in the Philippines. phlov does not knowingly collect, process, or retain personal data from any individual under the age of 21.

phlov implements robust age verification procedures during the account registration and KYC process to prevent minors from accessing the platform. Any account found to belong to an individual under 21 years of age will be immediately suspended, all real-money balances will be withheld pending investigation, and the matter will be reported to the relevant Philippine authorities in accordance with our legal obligations.

If you are a parent or guardian and believe that a minor under your care has registered on phlov and provided personal data, please contact us immediately at [email protected]. phlov will promptly investigate and, where confirmed, delete all personal data associated with the minor's account in accordance with applicable law.

phlov is a Philippines-focused platform and processes the majority of player data within the Philippines. However, some of our technology service providers and cloud infrastructure partners may be located outside the Philippines. Where personal data is transferred outside the Philippines, phlov ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under RA 10173.

These safeguards may include contractual clauses approved by the National Privacy Commission (NPC), the use of NPC-approved standard contractual clauses, or reliance on adequacy determinations where the recipient country provides a comparable level of data protection. phlov will not transfer your personal data to countries or organizations that cannot provide adequate data protection guarantees.

phlov reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new regulatory requirements, or improvements to our platform. When material changes are made to this Privacy Policy, phlov will notify registered players through one or more of the following means: a prominent notice on the phlov homepage, an email notification to your registered email address, or an in-platform notification displayed upon your next phlov Login.

The updated Privacy Policy will be effective as of the "Last Updated" date shown at the top of this page. Your continued use of the phlov platform after the effective date constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with the changes, you should stop using phlov and may request account closure by contacting [email protected].

phlov encourages you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data. The current version will always be available at phlov.org/privacy-policy.

phlov has appointed a Data Protection Officer (DPO) as required under the Data Privacy Act of 2012 (RA 10173) and NPC regulations. If you have any questions, concerns, or requests regarding this Privacy Policy or phlov's data processing practices, you may reach us through the following channels:

• Email: [email protected] (include "Privacy / DPO" in the subject line)
• Live Chat: Available 24/7 directly on the phlov platform — our support agents include Tagalog-speaking staff who can assist with privacy inquiries
• Support Hours: 24 hours a day, 7 days a week (Philippine Standard Time)

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the government body responsible for administering and enforcing RA 10173.