phgl is committed to protecting the personal data of every Filipino player on our platform. This Privacy Policy explains what data we collect, how we use it, who we share it with, and how you can exercise your rights under the Philippine Data Privacy Act of 2012.
phgl takes the privacy and security of your personal data seriously. We operate as a PAGCOR-regulated online gaming platform serving Filipino players across Manila, Cebu, Davao, Quezon City, Makati, and throughout the Philippines. In doing so, we necessarily collect and process personal data about the players who register accounts and use our services.
This Privacy Policy has been prepared in compliance with the Philippine Data Privacy Act of 2012 (Republic Act 10173), its Implementing Rules and Regulations, and relevant issuances of the National Privacy Commission (NPC). It is intended to give you clear, honest information about how phgl handles your personal data — because you have a right to know, and we have an obligation to tell you.
Please read this Privacy Policy carefully. If you do not agree with how phgl processes your personal data as described herein, you should not register a phgl Account or use the phgl Platform. By creating a phgl Account, you acknowledge that you have read and understood this Privacy Policy.
For the purposes of the Philippine Data Privacy Act of 2012 and this Privacy Policy, the Personal Information Controller (PIC) responsible for your personal data is:
phgl has appointed a Data Protection Officer (DPO) in accordance with Section 21 of RA 10173. The DPO is responsible for ensuring phgl's compliance with data privacy obligations, responding to data subject requests, and serving as the point of contact for the National Privacy Commission.
phgl collects only personal data that is necessary for the specific purposes described in this Policy. We do not collect personal data excessively or without legitimate justification. The categories of personal data phgl collects are set out in the table below:
| Data Category | Specific Data Points | Purpose |
|---|---|---|
| IDENTITY DATA | Full legal name, date of birth, government ID number, ID document images (front and back), selfie or liveness verification image | KYC identity verification; PAGCOR compliance; age verification (21+); AML compliance |
| CONTACT DATA | Philippine mobile number (+63), email address (if provided) | Account registration; OTP delivery; security alerts; promotional communications (with consent) |
| FINANCIAL DATA | GCash account number, Maya account number, bank account details (BPI/BDO/Metrobank), USDT wallet address (TRC20) | Processing deposits and withdrawals; AML transaction monitoring; fraud prevention |
| GAMING DATA | Game session records, bet amounts, game outcomes, win/loss history, session durations, game preferences | Game operation; dispute resolution; responsible gaming monitoring; PAGCOR audit compliance |
| TECHNICAL DATA | IP address, device type and identifiers, browser type and version, operating system, geolocation data (region-level), session timestamps | Platform security; fraud detection; geographic access restriction enforcement; session management |
| USAGE DATA | Pages visited on phgl, navigation patterns, features accessed, time spent on each section, search terms used within the Platform | Platform improvement; user experience optimization; analytics |
| COMMUNICATIONS DATA | Records of support chat conversations, email correspondence with phgl support, complaint submissions | Customer support; quality assurance; dispute resolution record-keeping |
phgl collects personal data through the following channels:
Under the Philippine Data Privacy Act of 2012, phgl processes your personal data on the following legal bases, as applicable to each processing activity:
phgl uses your personal data for the following specific purposes:
phgl does not sell your personal data to third parties. phgl shares your personal data only in the following circumstances and only to the extent necessary for the relevant purpose:
phgl uses cookies and similar tracking technologies (local storage, session storage, pixel tags) on the phgl Platform. These technologies serve the following purposes:
You may control non-essential cookies through your browser settings. Note that disabling essential or security cookies will prevent you from logging in and using the phgl Platform. phgl does not use third-party advertising cookies or behavioural tracking cookies for cross-site advertising purposes.
phgl retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The general retention periods applied by phgl are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity & KYC Documents | 10 years from Account closure | AMLA / PAGCOR regulatory requirement |
| Financial Transaction Records | 10 years from transaction date | AMLA / tax law requirement |
| Game Session Records | 5 years from session date | PAGCOR audit / dispute resolution |
| Account Data (active) | For the duration of Account existence plus 5 years post-closure | Contractual / PAGCOR requirement |
| Support Communications | 3 years from last interaction | Dispute resolution / quality assurance |
| Technical / Log Data | 12 months from collection | Security / fraud detection |
| Marketing Consent Records | 3 years from consent withdrawal | Proof of consent / NPC compliance |
After the applicable retention period, personal data is securely deleted or anonymised in accordance with phgl's data destruction procedures. Where anonymisation is applied, the resulting anonymised data set may be retained indefinitely for analytical purposes as it no longer constitutes personal data under RA 10173.
phgl implements appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:
The Philippine Data Privacy Act of 2012 grants you specific rights with respect to your personal data. phgl is committed to facilitating the exercise of these rights. Your rights are as follows:
You have the right to be informed that your personal data is being collected and processed, and to receive this Privacy Policy before or at the time of data collection.
You have the right to obtain from phgl a copy of the personal data phgl holds about you, and information about how that data is being processed.
You have the right to request the correction or updating of inaccurate or incomplete personal data that phgl holds about you.
You have the right to request the deletion or blocking of personal data where processing was unlawful or where the data is no longer necessary for the purposes for which it was collected, subject to phgl's legal retention obligations.
You have the right to object to phgl processing your personal data for direct marketing purposes, including withdrawal of consent for promotional SMS or email communications.
You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format where technically feasible and where processing is based on consent or contract.
You have the right to be indemnified for any damages suffered due to inaccurate, incomplete, outdated, false, or unlawful personal data processing, as provided under Section 16(f) of RA 10173.
You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe phgl has processed your personal data in violation of RA 10173.
To exercise any of the rights above, contact phgl's Data Protection Officer at [email protected]. phgl will respond to verified data subject requests within thirty (30) calendar days of receipt, as required by NPC regulations. Identity verification will be required before phgl processes any data subject request, to protect your data from unauthorized access.
The phgl Platform is strictly restricted to persons aged 21 years and above, in accordance with PAGCOR's licensing conditions for online casino gaming in the Philippines. phgl does not knowingly collect personal data from any person under the age of 21.
As part of the phgl Account registration and KYC verification process, phgl verifies the age of each Account applicant using government-issued identification. Accounts found to have been registered by persons under 21 years of age will be immediately suspended and all personal data associated with the Account will be processed only to the extent necessary to fulfil phgl's legal obligations, including reporting to PAGCOR where required.
phgl primarily processes and stores personal data within the Philippines. In limited circumstances, personal data may be transferred to or processed by third-party service providers located in other countries — for example, where a certified game technology provider operates data centres outside the Philippines, or where phgl uses internationally-hosted KYC verification infrastructure.
Where cross-border data transfers occur, phgl ensures that appropriate safeguards are in place as required by Section 21 of RA 10173 and relevant NPC guidelines. These safeguards may include contractual clauses binding the recipient to data protection standards equivalent to those required under Philippine law, or reliance on an adequacy determination where applicable.
phgl maintains a record of all cross-border data transfers and the safeguards applied. You may request information about cross-border transfers of your personal data by contacting phgl's Data Protection Officer.
phgl reserves the right to amend this Privacy Policy at any time to reflect changes in applicable Philippine privacy law, NPC issuances, PAGCOR regulatory requirements, changes in phgl's data processing activities, or other legitimate business reasons.
Material amendments — meaning changes that significantly affect your privacy rights or phgl's data processing activities — will be communicated to registered phgl Account holders via SMS or in-Platform notification at least seven (7) calendar days before the amended Policy takes effect. Non-material amendments, such as typographical corrections or clarifications that do not change the substance of phgl's data processing practices, may be made without advance notice.
The current version of this Privacy Policy, including its effective date, is always available at phgl.one/privacy-policy. Your continued use of the phgl Platform following the effective date of any amendment constitutes your acknowledgment of the amended Privacy Policy.
For all privacy-related enquiries, data subject rights requests, complaints, or concerns about how phgl handles your personal data, please contact phgl's Data Protection Officer:
phgl Data Protection Officer
Email: [email protected]
Subject line: DATA PRIVACY REQUEST — [Your Account Username]
Response time: Within 30 calendar days of receipt (as required by RA 10173 IRR)
Please include your registered phgl mobile number and a description of your request. Identity verification will be required before phgl processes any data subject request.
If you are not satisfied with phgl's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the supervisory authority responsible for the enforcement of RA 10173 in the Philippines.
This Privacy Policy was last reviewed and updated on January 1, 2026. phgl reserves all rights not expressly granted herein. This document is governed by the laws of the Republic of the Philippines.
Six concrete ways phgl delivers on its data protection commitments — backed by RA 10173 compliance, PAGCOR oversight, and technical security standards.
Every byte of data transmitted between your device and phgl's servers travels through TLS 1.3 encrypted channels. HTTPS is enforced at all times via HSTS — there is no fallback to unencrypted HTTP. Your personal data never travels in plaintext.
Access to your personal data within phgl's systems is restricted strictly on a need-to-know basis. Not every phgl employee can see your KYC documents or financial account details — access is tiered, logged, and regularly reviewed. Unauthorized internal access is treated as a disciplinary matter.
phgl's data processing practices are designed from the ground up to comply with the Philippine Data Privacy Act of 2012. We have an appointed Data Protection Officer, a documented data privacy management program, a breach response protocol, and a data subject rights process — all in place and functional.
Sensitive personal data stored in phgl's databases — including government ID images, KYC documents, and financial account identifiers — is encrypted at rest using AES-256. Even in the unlikely event of a storage-level breach, encrypted data is unreadable without the corresponding decryption keys.
phgl does not sell, rent, or trade your personal data to third-party marketers, data brokers, or any commercial entity for advertising purposes. Your data is used to run your phgl Account and comply with legal obligations — not to generate revenue from data monetization.
If a data breach occurs that is likely to cause real harm to you, phgl will notify the National Privacy Commission within 72 hours and notify affected Account holders without undue delay — as required under NPC Circular 16-03. You'll never be kept in the dark about a breach that affects your data.
phgl is built on a foundation of regulatory compliance, transparent data practices, and genuine respect for player privacy. PAGCOR-regulated, RA 10173 compliant, and committed to protecting every Filipino player's personal data. 21+ only.