phlgo Privacy Policy

phlgo ("we," "us," "our," or "the Platform") is an online gaming and sports betting platform operated for Filipino players across the Philippines. We are committed to protecting the privacy and personal data of every individual who uses our platform, whether as a registered player, a visitor browsing the site, or a person contacting our support team.

This Privacy Policy describes how phlgo collects, processes, stores, shares, and protects personal data in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and its implementing rules and regulations as administered by the National Privacy Commission (NPC).

This policy applies to all personal data collected through: the phlgo website at https://phlgo.net; the account registration and verification process; deposits, withdrawals, and all financial transactions; customer support interactions via live chat, Messenger, Viber, and email; and any promotional or marketing communications you opt into.

If you have questions about how phlgo handles your personal data at any time, you may contact our Data Protection Officer via email at [email protected] (plain text — not a clickable link).

phlgo collects personal data only to the extent necessary to provide a safe, compliant, and functional gaming service to Filipino players. The categories of personal data we collect include the following:

phlgo does not collect sensitive personal information — such as racial or ethnic origin, political opinions, religious beliefs, or health data — unless specifically required for responsible gaming support purposes and with your explicit consent.

phlgo collects personal data through the following channels and means:

• Direct submission: Information you provide when registering your phlgo account, completing identity verification, making deposits or withdrawal requests, contacting support, or participating in surveys and promotions.
• Automated collection: Technical and usage data collected automatically when you visit or interact with the phlgo platform, including through cookies, web beacons, server logs, and similar tracking technologies.
• Payment processors: Transaction confirmation data passed to phlgo by payment partners such as GCash, Maya, GrabPay, BPI, BDO, and Metrobank when you complete a deposit or withdrawal.
• Identity verification providers: Results from KYC checks conducted by third-party verification service providers engaged by phlgo to validate the identity documents you submit.
• Fraud and risk systems: Data generated by phlgo's internal security systems when monitoring account activity for patterns associated with fraud, money laundering, or prohibited behaviour.

phlgo processes your personal data for the following specific purposes:

• Account creation and management: To register, verify, and maintain your phlgo account, and to provide you with access to the games and features available on the platform.
• Identity verification and KYC compliance: To confirm that you are at least 21 years of age, that you are who you say you are, and that your account details are accurate — as required by Philippine gaming regulations and anti-money laundering rules.
• Financial transaction processing: To process your deposits and withdrawals securely in Philippine Peso (PHP / ₱) through your chosen payment method.
• Regulatory compliance: To meet our obligations under PAGCOR-regulated operating requirements, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other prohibited conduct.
• Responsible gaming: To monitor for signs of problem gambling behaviour and to enforce deposit limits, self-exclusion orders, or cool-off periods applied to your account.
• Customer support: To respond to your enquiries and resolve disputes, complaints, or technical issues raised through live chat, Messenger, Viber, or email.
• Platform improvement: To analyse how players use phlgo so we can improve the user experience, fix technical issues, and develop new features.
• Marketing communications: To send you promotional offers, bonus notifications, and relevant updates — but only where you have given your consent to receive such communications.

phlgo does not use your personal data for automated decision-making that produces significant legal effects without human review. Profiling for marketing purposes is conducted only on an aggregated, anonymised basis.

Under the Data Privacy Act of 2012 of the Philippines, phlgo relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing that is necessary to perform our contract with you — i.e., to provide you with the phlgo gaming service, process transactions, and operate your account.
• Legal obligation: Processing required for phlgo to comply with its obligations under Philippine law, including PAGCOR regulatory requirements, anti-money laundering regulations, and tax reporting duties.
• Legitimate interests: Processing carried out in pursuit of phlgo's legitimate business interests — such as fraud prevention, security monitoring, and platform improvement — where those interests are not overridden by your own privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — most notably for marketing communications. You may withdraw consent at any time by contacting support or updating your account notification preferences.

phlgo does not sell, rent, or trade your personal data to third parties. We share personal data only in the following circumstances, and only to the extent strictly necessary:

• Payment service providers: GCash, Maya, GrabPay, QR Ph, BPI, BDO, Metrobank, and 7-Eleven CLiQQ receive the transaction data required to process your deposits and withdrawals. These providers operate under their own privacy policies and data protection obligations.
• KYC and identity verification providers: Third-party verification service providers receive copies of the identity documents you submit for KYC checks. These providers are contractually bound to process your data solely for identity verification purposes.
• IT and cloud infrastructure providers: phlgo uses third-party hosting and cloud services to operate the platform. These providers process technical data on phlgo's behalf under data processing agreements.
• Fraud prevention and anti-money laundering services: phlgo may share data with specialist fraud detection providers and, where legally required, with financial intelligence and law enforcement authorities under the Anti-Money Laundering Act (AMLA).
• Regulatory authorities: phlgo may be required to disclose player data to PAGCOR, the National Privacy Commission, or other competent Philippine authorities in response to lawful requests or regulatory audits.
• Legal proceedings: In the event of litigation or dispute resolution, phlgo may share relevant personal data with legal advisers and courts as permitted or required by Philippine law.

All third parties with whom phlgo shares personal data are required to handle that data in accordance with applicable Philippine data protection law and their contractual obligations to phlgo. phlgo does not authorise any third party to use your data for their own independent marketing or commercial purposes.

phlgo uses cookies and similar technologies to operate the platform, maintain your session, remember your preferences, and collect analytical data that helps us improve the user experience for Filipino players. When you first visit phlgo, you will be presented with a cookie notice.

The types of cookies used by phlgo are as follows:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and security tokens that protect your account. Essential cookies cannot be disabled without disrupting the platform's core functionality.
• Functional cookies: Remember your preferences — such as your preferred language, display settings, and notification options — so you do not need to re-enter them on each visit.
• Analytical cookies: Collect anonymised data about how players navigate and use the phlgo platform. This data is used internally to identify areas for improvement. phlgo does not share analytical data with advertising networks.
• Security cookies: Support phlgo's fraud detection and session integrity systems by tracking unusual login patterns or suspicious activity associated with your device or IP address.

You can manage or delete cookies through your browser settings at any time. Please note that disabling non-essential cookies may affect the functionality and user experience of certain phlgo features.

phlgo retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulation. The general retention periods applied by phlgo are as follows:

• Account and identity data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements applicable to covered institutions operating under PAGCOR oversight.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable Philippine financial regulations.
• KYC and verification documents: Retained for the period required by the relevant regulatory framework and for at least five (5) years after account closure.
• Support communications: Retained for up to three (3) years from the date of the interaction, unless the matter relates to an ongoing dispute or legal proceedings.
• Marketing consent records: Retained for as long as your consent remains active and for a reasonable period thereafter to demonstrate compliance with consent requirements.
• Technical and usage logs: Retained for up to twelve (12) months, after which they are anonymised or deleted.

When personal data is no longer required and there is no legal basis for continued retention, phlgo securely deletes or anonymises it so that it can no longer be linked to you as an individual.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights in relation to the personal data that phlgo holds about you:

• Right to be informed: The right to know what personal data phlgo collects, how it is used, and with whom it is shared — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data phlgo holds about you. We will respond to verified access requests within thirty (30) days.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data we hold. You may update certain details directly through your account settings or by contacting support.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where there is no overriding legal basis for retention. Note that certain data must be retained for regulatory compliance and cannot be deleted on request.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes. You can opt out of marketing communications at any time.
• Right to data portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to file a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe phlgo has handled your personal data unlawfully or in breach of the Data Privacy Act.

To exercise any of the above rights, please contact the phlgo support team via live chat or email at [email protected]. We may require you to verify your identity before processing your request. All requests will be handled within the timeframes mandated by the Data Privacy Act of 2012.

phlgo takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the phlgo platform is encrypted using Secure Sockets Layer (SSL) / Transport Layer Security (TLS) protocols.
• Access controls: Personal data within phlgo's internal systems is accessible only to authorised personnel who have a documented need-to-know justification. Access logs are maintained and reviewed regularly.
• Data storage security: Personal data is stored on secured servers with regular vulnerability assessments and patching cycles applied.
• Fraud monitoring: phlgo's security systems monitor account activity continuously for patterns associated with unauthorised access, account takeover, or suspicious financial behaviour.
• Staff training: All phlgo personnel who handle personal data receive training on data protection obligations and the requirements of the Data Privacy Act of 2012.
• Incident response: phlgo maintains a data breach response procedure. In the event of a personal data breach that poses a risk to your rights, phlgo will notify the National Privacy Commission and affected individuals as required by law.

While phlgo applies stringent security measures, no online platform can guarantee absolute security. You also play a role in protecting your account — please use a strong, unique password for your phlgo account and do not share your login credentials with anyone.

phlgo is strictly an adult gaming platform. Registration and use of any feature of the phlgo platform is prohibited for persons under the age of twenty-one (21) years, in accordance with Philippine gaming regulations.

phlgo does not knowingly collect, process, or retain personal data from individuals under the age of 21. As part of the registration and KYC process, all applicants are required to provide their date of birth and, where required, documentary proof of age. Any account found to belong to a person under the age of 21 will be closed immediately, all balances will be forfeited, and any personal data collected will be deleted except to the extent required for legal or regulatory record-keeping purposes.

phlgo reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, changes in Philippine law or regulation, or operational changes to the phlgo platform. The effective date at the top of this page will be updated whenever material changes are made.

Where changes are significant, phlgo will endeavour to notify registered players via email or a prominent notice on the platform ahead of the changes taking effect. However, it remains your responsibility to review this Privacy Policy periodically to stay informed about how phlgo handles your personal data.

Continued use of the phlgo platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the revised policy. The version currently published at https://phlgo.net/privacy-policy is the operative version at all times.

If you have any questions, concerns, or requests relating to this Privacy Policy or how phlgo handles your personal data, you may reach our Data Protection Officer through the following channels:

• Live Chat: Available 24/7 directly on the phlgo platform — the fastest way to get a response from our Filipino-fluent support team.
• Messenger and Viber: Our support agents are reachable via Messenger and Viber for all data privacy enquiries.
• Email: [email protected] — please include "Privacy Request" in the subject line for faster routing.

phlgo will acknowledge all privacy-related requests within five (5) business days and will provide a substantive response within thirty (30) calendar days, or within the timeframe required by the Data Privacy Act of 2012, whichever is sooner.

If you are not satisfied with phlgo's response to your privacy complaint, you have the right to escalate your concern to the National Privacy Commission of the Philippines (NPC), the independent regulatory body responsible for enforcing the Data Privacy Act of 2012.