phlove33 Privacy Policy

01 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, phlove33 is the Personal Information Controller (PIC) with respect to all personal data collected through the platform. As a PAGCOR-licensed online gaming operator, phlove33 determines the purposes and means of processing your personal information in connection with the delivery of its gaming and betting services to Filipino players.

phlove33 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173 and this Policy. Contact details for the DPO are provided in Section 13 of this Policy.

02 Personal Data We Collect

phlove33 collects the following categories of personal data, depending on how you interact with our platform:

03 How We Collect Your Data

phlove33 collects personal data through the following methods:

• Direct Collection: Information you voluntarily provide when creating your account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical data automatically collected when you access the phlove33 platform, including through cookies, web beacons, log files, and similar tracking technologies. See Section 7 for details on cookies.
• Third-Party Sources: Identity verification data may be cross-referenced against government databases and commercially available identity verification services to confirm the accuracy of KYC submissions. Payment transaction data is received from GCash, Maya, BPI, BDO, Metrobank, and other integrated payment providers. Fraud prevention data may be received from industry fraud prevention services.
• Platform Use: Gaming activity data generated as you use phlove33 — including game selections, wager amounts, session durations, and responsible gaming tool activations — is recorded automatically in our system logs.

04 Purpose and Legal Basis for Processing

phlove33 processes your personal data for the following purposes, each supported by a valid legal basis under RA 10173:

• Account Management (Contractual Necessity): Creating and maintaining your phlove33 account, authenticating your identity on login, and delivering the gaming services you have contracted for.
• KYC and Regulatory Compliance (Legal Obligation): Verifying your identity and age (21+) as required under PAGCOR regulations and Republic Act No. 9160 (Anti-Money Laundering Act). phlove33 is legally required to perform these checks and cannot waive them.
• Payment Processing (Contractual Necessity): Processing deposits and withdrawals through GCash, Maya, and other integrated Philippine payment methods. This requires sharing relevant financial data with payment service providers.
• Responsible Gaming (Legal Obligation and Legitimate Interest): Monitoring gaming activity to identify patterns consistent with problem gambling and administering self-exclusion and deposit limit tools in compliance with PAGCOR responsible gaming requirements.
• Fraud Prevention and Security (Legitimate Interest): Detecting and preventing fraudulent activity, money laundering, multi-accounting, and other prohibited conduct on the platform.
• Customer Support (Contractual Necessity and Legitimate Interest): Responding to your enquiries, resolving disputes, and improving platform service quality based on support interactions.
• Marketing Communications (Consent): Where you have given explicit consent, sending you promotional offers, bonus notifications, and gaming news by email or SMS. You may withdraw this consent at any time by contacting our support team or adjusting your account notification settings.
• Platform Analytics (Legitimate Interest): Analysing aggregated, anonymised platform usage data to improve game selection, user experience, and platform performance.

05 Data Sharing and Disclosure

phlove33 does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment Processors: GCash (Mynt / G-Xchange Inc.), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other integrated Philippine payment providers receive the financial data necessary to process your deposit and withdrawal transactions.
• Game Providers: Third-party game providers integrated into phlove33 — including Evolution Gaming, JILI, Pragmatic Play, PG Soft, and SA Gaming — receive necessary session data to deliver their games. These providers operate under data processing agreements with phlove33.
• Identity Verification Services: Accredited KYC and identity verification service providers receive copies of identity documents for verification purposes in compliance with PAGCOR KYC requirements.
• Regulatory Authorities: phlove33 is required by law to disclose personal data and transaction records to PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies upon lawful request.
• Fraud Prevention Services: Industry-standard fraud prevention platforms may receive technical identifiers (IP address, device fingerprint) to support fraud detection. No additional personal data is shared for this purpose.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by phlove33 may access personal data where necessary for the provision of their professional services, subject to strict confidentiality obligations.

06 Data Retention

phlove33 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention standards:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, as required under PAGCOR regulations and Republic Act No. 9160 for gaming transaction records.
• KYC Documents: Retained for a minimum of five (5) years from the date of collection or from the date of the last gaming transaction, whichever is later, as mandated by anti-money laundering regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years as required under Philippine financial regulations and PAGCOR operating conditions.
• Customer Support Communications: Retained for three (3) years from the date of the last interaction, or longer where required in connection with an unresolved dispute.
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years after withdrawal of consent for audit purposes.
• Technical and Log Data: Retained for up to twelve (12) months for security monitoring and fraud prevention purposes, unless required to be retained longer in connection with an investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with recognised data destruction standards.

07 Cookies and Tracking Technologies

phlove33 uses cookies and similar tracking technologies on its website to deliver and improve the platform experience. Cookies are small text files placed on your device when you visit phlove33.org. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential to the operation of the platform — including session authentication, fraud prevention, and load balancing. These cookies cannot be disabled without impairing core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game lobby layout, and notification configurations to improve your experience on subsequent visits.
• Performance and Analytics Cookies: Collect anonymised and aggregated data about how users navigate phlove33 — including pages visited, time spent, and error events — to help us improve platform performance.
• Session Cookies: Temporary cookies deleted automatically when you close your browser, used to maintain your login session during active gameplay.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use core phlove33 services, but may affect some personalisation features. phlove33 does not use third-party advertising cookies or cookies that track your activity across unrelated third-party websites.

08 Data Security

phlove33 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

• 256-bit Transport Layer Security (TLS) encryption for all data transmitted between your device and phlove33 servers — the same encryption standard used by Philippine banks.
• At-rest encryption for stored personal data, including KYC documents, financial records, and account credentials.
• Multi-factor authentication options for account access.
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of platform infrastructure.
• Incident response procedures aligned with RA 10173's breach notification requirements — including notification to the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of a personal data breach that is likely to result in harm to data subjects.

While phlove33 employs industry-standard security practices, no system is entirely immune to security incidents. You are responsible for keeping your account credentials confidential and for using a secure, private device when accessing the platform.

09 Your Rights Under RA 10173 (Data Privacy Act)

As a data subject under Philippine law, you have the following rights with respect to your personal data held by phlove33:

• Right to Be Informed: The right to know what personal data phlove33 collects about you, why it is processed, and with whom it is shared — as set out in this Privacy Policy.
• Right to Access: The right to obtain a copy of your personal data held by phlove33, along with information about how it is being processed.
• Right to Correction (Rectification): The right to request correction of inaccurate, incomplete, or outdated personal data in your account.
• Right to Erasure (Right to be Forgotten): The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phlove33's legal retention obligations under PAGCOR regulations and RA 9160.
• Right to Object: The right to object to the processing of your personal data for marketing purposes or where processing is based on legitimate interest. Objections to legally required processing (e.g., KYC, AML compliance) cannot be honoured.
• Right to Data Portability: The right to receive a structured, commonly used, machine-readable copy of personal data you have provided to phlove33.
• Right to Damages: The right to claim compensation for damages arising from inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, contact phlove33's Data Protection Officer at [email protected]. We will respond to verified requests within thirty (30) calendar days as required under RA 10173.

10 Children's Privacy and Age Restriction

phlove33 is strictly prohibited to persons under twenty-one (21) years of age. We do not knowingly collect personal data from individuals under 21. Age verification is a mandatory component of the phlove33 account registration process, and we require all applicants to provide a valid government-issued Philippine ID confirming their date of birth.

If you have reason to believe that a person under 21 has registered on phlove33, please notify us immediately at [email protected] so that we can take prompt corrective action.

11 Cross-Border Data Transfers

Some of phlove33's third-party game providers, technology vendors, and cloud infrastructure providers may be located outside the Philippines. Where personal data is transferred to jurisdictions outside the Philippines, phlove33 ensures that such transfers comply with the requirements of RA 10173 and its Implementing Rules, including through the use of data processing agreements that impose equivalent data protection obligations on the receiving party.

Personal data transfers outside the Philippines are limited to what is strictly necessary for service delivery (for example, transmitting session data to a game provider's servers to run a live casino game). phlove33 does not transfer sensitive personal information — including KYC documents and government ID data — outside the Philippines except where required by law or where an adequate level of data protection is guaranteed by contractual safeguards.

12 Updates to This Privacy Policy

phlove33 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered account holders by email and/or by displaying a prominent notice on the phlove33 platform prior to the changes taking effect.

The "Effective Date" displayed at the top of this page reflects the date of the most recent version of this Policy. We encourage you to review this Policy periodically. Your continued use of the phlove33 platform after the effective date of any update constitutes your acceptance of the revised Policy.

13 Contact and Data Protection Officer

For all data privacy enquiries, requests to exercise your rights under RA 10173, or to contact phlove33's designated Data Protection Officer, please use the following contact details:

If you are not satisfied with phlove33's response to your data privacy request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.