phlagu Privacy Policy

This Privacy Policy applies to the phlagu online gaming platform, accessible at phlagu.vip ("Platform"), and all related services operated under the phlagu brand ("phlagu," "we," "our," or "us").

phlagu is the data controller responsible for the personal information of registered players and visitors to the phlagu Platform. As data controller, phlagu determines the purposes and means by which your personal data is processed.

By creating a phlagu account, accessing the Platform, or using any phlagu service, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read in conjunction with the phlagu Terms & Conditions.

phlagu collects the following categories of personal information from players and Platform visitors:

2.1 Identity and Registration Data

• Full legal name as it appears on your government-issued Philippine identification
• Date of birth (to verify you are 21 years of age or older)
• Email address and chosen username
• Residential address, city, and region (e.g., Manila, Cebu, Davao, Makati, Quezon City)
• Mobile phone number
• Copies of government-issued identification documents (Passport, UMID, PhilSys National ID, SSS ID, or Driver's License) collected during KYC verification

2.2 Financial and Transaction Data

• GCash account details, PayMaya account details, or Philippine bank account details (BPI, BDO, Metrobank) used for deposits and withdrawals
• Transaction history: deposits made to and withdrawals from your phlagu account
• Betting and gaming history across all phlagu games and services

2.3 Technical and Usage Data

• IP address and geolocation data at the time of phlagu login
• Device type, operating system, and browser version
• Session duration, pages visited, and in-game activity on the phlagu Platform
• Cookie identifiers and similar tracking data (see Section 7)

2.4 Communications Data

• Records of communications between you and phlagu's support team, including live chat transcripts and email correspondence
• Your marketing communication preferences
• Any feedback, complaints, or dispute records relating to your phlagu account

phlagu collects your personal information through the following means:

• Directly from you: When you register a phlagu account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a phlagu promotion
• Automatically: Through cookies, web beacons, and analytics tools when you access and interact with the phlagu Platform (see Section 7)
• From third parties: From payment service providers (GCash, PayMaya, BPI, BDO) for the purpose of processing and verifying transactions; from identity verification providers during KYC; from fraud prevention services; and from publicly available sources where legally permitted

phlagu uses the personal information we collect for the following purposes:

• Account creation and management: To register, maintain, and administer your phlagu account, including verifying your identity and age eligibility
• Service delivery: To provide access to phlagu's casino games, sports betting, sabong, bingo, slots, and other services you use on the Platform
• Payment processing: To process deposits to and withdrawals from your phlagu account through GCash, PayMaya, and Philippine bank transfers
• Legal compliance: To fulfil phlagu's obligations under Philippine law, PAGCOR regulations, anti-money laundering (AML) requirements, and Know Your Customer (KYC) obligations
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeovers, and misuse of the phlagu Platform
• Responsible gaming: To monitor gaming behaviour and enforce responsible gaming tools, including deposit limits, self-exclusion, and age restrictions (21+)
• Customer support: To respond to your queries, complaints, and account-related requests via phlagu's 24/7 live chat and email support channels
• Marketing communications: To send you promotional offers, bonus notifications, and phlagu news — only where you have provided explicit consent
• Platform improvement: To analyse usage patterns and improve the phlagu user experience, game selection, and interface design

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, phlagu processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and phlagu — i.e., to provide the gaming services you have registered to use
• Legal obligation: Processing required to comply with Philippine laws and regulations, including PAGCOR licensing conditions, AML obligations, and KYC requirements
• Legitimate interests: Processing necessary for phlagu's legitimate business interests, including fraud detection, platform security, and service improvement, where these interests are not overridden by your rights
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — in particular, for marketing communications and optional analytics

phlagu does not sell your personal data. We may share your information with the following categories of recipients, and only to the extent necessary:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors for the purpose of processing your deposits and withdrawals
• Identity verification providers: Third-party KYC and AML compliance services to verify your identity and meet regulatory obligations
• Game software providers: phlagu's licensed game providers may receive the minimum data necessary to deliver their games on the phlagu Platform
• Regulatory and law enforcement authorities: PAGCOR, the National Privacy Commission (NPC), and other Philippine government bodies where disclosure is required by law, court order, or regulatory requirement
• Fraud prevention services: Specialist third-party services used to detect and prevent fraudulent activity on the phlagu Platform

The phlagu Platform uses cookies and similar tracking technologies to operate effectively, enhance your experience, and analyse Platform usage. The following types of cookies are used by phlagu:

• Essential cookies: Required for the phlagu Platform to function — including maintaining your phlagu login session, remembering your language preferences, and securing your account. These cannot be disabled without affecting Platform functionality.
• Analytics cookies: Used to collect aggregate, anonymised data about how players navigate and use the phlagu Platform, enabling us to identify and fix usability issues.
• Functional cookies: Used to remember your preferences and personalise your phlagu experience, such as your preferred game categories or display settings.
• Marketing cookies: Used only where you have consented, to deliver relevant phlagu promotions and measure the effectiveness of our marketing communications.

You can manage your cookie preferences through your browser settings. Disabling essential cookies will affect your ability to access the phlagu Platform and maintain a phlagu login session.

phlagu retains your personal data for as long as your phlagu account is active and for a period after account closure as required by law and regulatory obligations. Specifically:

• Account registration and KYC data is retained for a minimum of five (5) years following account closure, in compliance with Philippine AML regulations
• Transaction records (deposits, withdrawals, betting history) are retained for a minimum of five (5) years from the date of each transaction
• Customer support communications are retained for three (3) years following resolution of the relevant query or complaint
• Marketing consent records are retained for as long as your consent is active plus a reasonable period following withdrawal of consent

Upon expiry of the applicable retention period, phlagu will securely delete or anonymise your personal data in accordance with our internal data destruction procedures.

phlagu implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phlagu Platform
• Industry-standard password hashing — phlagu never stores your raw phlagu login password
• Access controls restricting personal data access to authorised phlagu staff on a need-to-know basis
• Regular security audits and penetration testing of the phlagu Platform
• Two-factor authentication (2FA) available to all phlagu account holders
• Automated monitoring for suspicious activity and anomalous phlagu login patterns

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, phlagu will notify you and the Philippine National Privacy Commission (NPC) in accordance with the requirements of the Data Privacy Act of 2012.

As a data subject under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by phlagu:

• Right to be informed: The right to know what personal data phlagu collects and how it is used — as set out in this Privacy Policy
• Right of access: The right to request a copy of the personal data phlagu holds about you
• Right to rectification: The right to have inaccurate or incomplete personal data corrected
• Right to erasure: The right to request deletion of your personal data, subject to phlagu's legal retention obligations
• Right to object: The right to object to certain processing activities, including direct marketing
• Right to data portability: The right to receive your personal data in a structured, commonly used format
• Right to lodge a complaint: The right to lodge a complaint with the Philippine National Privacy Commission (NPC) if you believe phlagu has not handled your personal data in accordance with the Data Privacy Act

To exercise any of these rights, please contact phlagu's data protection team at [email protected]. phlagu will respond to all data subject requests within thirty (30) calendar days.

The phlagu Platform is strictly intended for adults who are 21 years of age or older. phlagu does not knowingly collect personal data from individuals under 21 years of age. If phlagu becomes aware that personal data has been collected from a person under 21, that data will be immediately deleted and the associated phlagu account will be permanently closed.

If you are a parent or guardian and believe that a minor has registered a phlagu account or provided personal data to phlagu without your consent, please contact phlagu's support team immediately at [email protected].

phlagu reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. When material changes are made, phlagu will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via their registered email address.

Your continued use of the phlagu Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how phlagu protects your personal information.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way phlagu handles your personal data, please contact our Data Protection team through the following channels:

You also have the right to lodge a complaint directly with the Philippine National Privacy Commission (NPC) if you are unsatisfied with phlagu's handling of your personal data.