phllove Privacy Policy

Introduction

phllove is committed to protecting the personal data of every player who uses our platform. We understand that Filipino players trust us with sensitive information — from identity documents to financial transaction records — and we take that responsibility seriously. This Privacy Policy has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as applicable PAGCOR regulatory requirements.

This policy covers all personal data that phllove collects, processes, stores, and shares in connection with the operation of the phllove platform. It applies to all registered players, prospective players who have initiated but not completed registration, and visitors to the phllove website.

We encourage you to read this policy in full. If you have questions about any part of it, our support team is available 24/7 via live chat on the platform, or you may reach us at the contact details provided in Section 15.

Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, phllove acts as the Personal Information Controller in respect of the personal data collected through the phllove platform. This means phllove determines the purposes and means by which your personal data is processed.

Where phllove engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, and cloud infrastructure providers — those parties act as Personal Information Processors and are contractually bound to process your data only in accordance with phllove's instructions and this Privacy Policy.

Personal Data We Collect

phllove collects the following categories of personal data in connection with the operation of the platform. We collect only what is necessary for the purposes described in this policy.

How We Collect Your Data

phllove collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automatically — when you use the phllove platform, our systems automatically collect technical and usage data including your IP address, device identifiers, browser information, and session activity through cookies and similar tracking technologies. See Section 8 for full details on cookies.
• From third-party service providers — phllove may receive identity verification results from KYC providers, fraud risk scores from fraud prevention services, and transaction confirmation data from payment processors such as GCash, PayMaya, BPI, BDO, and Metrobank.
• From regulatory and law enforcement authorities — where required by applicable Philippine law, phllove may receive information from PAGCOR, the Anti-Money Laundering Council (AMLC), or other competent authorities.

phllove does not purchase personal data from data brokers or other third-party data sources for marketing or profiling purposes.

How We Use Your Personal Data

phllove uses the personal data it collects for the following purposes:

• Account Management: To create, verify, maintain, and secure your phllove account, including processing your registration, verifying your identity and age (21+ requirement), and managing your account preferences.
• Platform Operation: To provide access to phllove's games — including Dragon Tiger, Mini Baccarat, Pirate Fishing, Fortune Mouse, Golden Land, Pearls of Bingo, and all other available titles — and to process your wagers, winnings, and game history.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other approved payment methods, and to maintain accurate financial records of all transactions in Philippine Peso (PHP).
• Regulatory Compliance: To comply with PAGCOR licensing requirements, the Anti-Money Laundering Act of 2001 (as amended), the Data Privacy Act of 2012, and all other applicable Philippine laws and regulations. This includes mandatory reporting obligations to the AMLC and PAGCOR.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, and other prohibited conduct on the phllove platform.
• Responsible Gaming: To monitor account activity for signs of problem gambling, to administer deposit limits, cooling-off periods, and self-exclusion requests, and to proactively reach out to players who may benefit from responsible gaming support.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Platform Improvement: To analyze usage patterns and player feedback in order to improve the phllove platform, fix technical issues, and develop new features.
• Marketing Communications: Where you have provided consent, to send you information about phllove promotions, bonuses, and new game releases. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting support.

Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, phllove processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to perform the contract between you and phllove — i.e., to operate your account, process transactions, and provide access to games — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable Philippine laws — including PAGCOR regulatory requirements, anti-money laundering obligations, and tax reporting — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement is carried out on the basis of phllove's legitimate interests, provided those interests are not overridden by your rights and interests.
• Consent: Processing for direct marketing communications is carried out on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing & Disclosure

phllove does not sell, rent, or trade your personal data to third parties. We share your personal data only in the following circumstances:

• Service Providers: phllove shares personal data with trusted third-party service providers who assist in operating the platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), KYC and identity verification providers, cloud hosting and infrastructure providers, fraud detection services, and customer support platform providers. All service providers are contractually bound to process your data only as instructed by phllove and in accordance with this Privacy Policy.
• Game Providers: Where phllove offers games developed by third-party game studios, limited technical data (such as session identifiers and wager amounts) may be shared with those providers to facilitate game operation. Game providers do not receive your identity or contact data.
• Regulatory Authorities: phllove is required by Philippine law to disclose certain player data to PAGCOR, the AMLC, the Bureau of Internal Revenue (BIR), and other competent authorities upon lawful request or as part of mandatory reporting obligations.
• Law Enforcement: phllove may disclose personal data to Philippine law enforcement agencies where required by a valid court order, subpoena, or other lawful legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of phllove's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy. phllove will notify affected players of any such transfer.

Cookies & Tracking Technologies

phllove uses cookies and similar tracking technologies on the phllove website and mobile application to provide a functional, secure, and personalized experience. The following types of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the phllove platform to function. They enable core features such as account login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: These cookies remember your preferences — such as language settings and game display options — to provide a more personalized experience on phllove.
• Analytics Cookies: phllove uses analytics cookies to understand how players use the platform, which pages are visited most frequently, and where technical issues occur. This data is used in aggregate form to improve the platform and is not used to identify individual players for marketing purposes.
• Security Cookies: These cookies help phllove detect and prevent fraudulent activity, unauthorized account access, and other security threats.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use the phllove platform. phllove does not use third-party advertising cookies or cross-site tracking technologies.

Data Retention

phllove retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, subject to the following retention periods:

• Account Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in accordance with PAGCOR regulatory requirements and applicable Philippine record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act of 2001 (as amended) and BIR regulations.
• KYC and Identity Documents: Retained for the duration of your account and for a minimum of five (5) years following account closure, or longer where required by applicable law or ongoing regulatory inquiry.
• Customer Support Records: Retained for a minimum of three (3) years from the date of the last interaction, to support dispute resolution and quality assurance.
• Marketing Consent Records: Retained for the duration of your consent and for a reasonable period thereafter to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, phllove will securely delete or anonymize your personal data in accordance with its data disposal procedures, unless retention is required by a specific legal obligation or ongoing regulatory or legal proceeding.

Data Security

phllove implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the phllove platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data stored in phllove's systems is encrypted at rest.
• Access Controls: Access to personal data within phllove's systems is restricted to authorized personnel on a need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Password Security: Account passwords are stored using one-way cryptographic hashing. phllove staff cannot view your password in plain text.
• Fraud Detection Systems: phllove operates automated fraud detection systems that monitor account activity for signs of unauthorized access, suspicious transactions, and other security threats in real time.
• Regular Security Reviews: phllove conducts regular reviews of its security practices and infrastructure to identify and address potential vulnerabilities.

Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by phllove. To exercise any of these rights, please contact phllove support as described in Section 15.

phllove will respond to all data rights requests within thirty (30) calendar days of receipt. Where a request is complex or phllove receives a high volume of requests, this period may be extended by a further thirty (30) days, and phllove will notify you of the extension and the reason for it.

Please note that certain rights are subject to limitations under applicable law. For example, phllove may be unable to delete personal data that it is required to retain under PAGCOR regulations or anti-money laundering laws.

Children's Privacy

The phllove platform is strictly intended for adults aged 21 years and above, consistent with the minimum legal age for casino-style gambling in the Philippines. phllove does not knowingly collect personal data from individuals under the age of 21.

If phllove becomes aware that personal data has been collected from a person under 21 years of age, it will immediately suspend the associated account, delete the personal data collected, and return any deposited funds to the originating payment method where possible.

If you are a parent or guardian and believe that a minor has registered on phllove or provided personal data to phllove, please contact our support team immediately at the contact details in Section 15. phllove takes underage access extremely seriously and will act promptly on all such reports.

Cross-Border Data Transfers

phllove's primary operations and data storage are based in the Philippines. However, certain third-party service providers engaged by phllove — including cloud infrastructure providers and game platform providers — may process or store data in servers located outside the Philippines.

Where personal data is transferred outside the Philippines, phllove ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Philippine Data Privacy Act of 2012. These safeguards may include:

• Contractual data processing agreements incorporating standard data protection clauses
• Transfers to jurisdictions recognized by the National Privacy Commission as providing adequate data protection
• Other legally recognized transfer mechanisms under the Data Privacy Act of 2012 and its Implementing Rules and Regulations

You may request information about the specific safeguards in place for any cross-border transfer of your personal data by contacting phllove's Data Protection Officer as described in Section 15.

Changes to This Privacy Policy

phllove reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The most current version of this Privacy Policy will always be available on this page, with the effective date clearly stated at the top.

Where changes are material — meaning they significantly affect how phllove processes your personal data or your rights under this policy — phllove will notify registered players via the email address associated with their account at least seven (7) days before the changes take effect.

Your continued use of the phllove platform after the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. If you do not agree to the updated policy, you must cease using the platform and may request account closure and withdrawal of your Real Money Balance in accordance with the phllove Terms & Conditions.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data privacy rights, or want to raise a concern about how phllove handles your personal data, please contact us through the following channels:

phllove will acknowledge all privacy-related inquiries within three (3) business days and will endeavor to resolve all requests within thirty (30) calendar days.

If you are not satisfied with phllove's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012. Information about how to file a complaint with the NPC is available through official Philippine government channels.

For responsible gaming concerns, including self-exclusion requests and deposit limit adjustments, please visit the Responsible Gaming page or contact support directly via live chat. All responsible gaming requests are handled with strict confidentiality and are processed separately from general support inquiries.