phlein Privacy Policy

1. Introduction

phlein ("phlein," "we," "us," or "our") is committed to protecting the privacy and personal data of every individual who uses our online gaming platform at phlein.org. This Privacy Policy describes the personal information we collect from players and visitors, the purposes for which it is used, the parties with whom it may be shared, the security measures we apply, and the rights available to you under Philippine law.

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as overseen by the National Privacy Commission (NPC). It supplements, and must be read alongside, phlein's Terms & Conditions.

By creating a phlein account, visiting phlein.org, or otherwise providing your personal information to us, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, you should not create an account or use our services.

2. Data Controller

The data controller responsible for your personal information is phlein, operator of phlein.org, a PAGCOR-regulated online gaming platform. phlein has designated a Data Protection Officer (DPO) to oversee compliance with the Data Privacy Act and to handle data subject rights requests.

3. Personal Data We Collect

phlein collects personal data through registration, KYC verification, account activity, financial transactions, and platform usage. The categories of data we collect are:

phlein does not collect sensitive personal information (as defined under the Data Privacy Act, such as health data, political opinions, or religious beliefs) unless specifically required by PAGCOR regulations or applicable Philippine law.

4. How We Use Your Personal Data

phlein uses the personal data collected for the following purposes:

• Account Creation & Management: To register your account, verify your identity, and maintain your player profile on the phlein platform;
• KYC & Age Verification: To confirm that you meet the 21+ age requirement mandated by PAGCOR and to verify your identity as required under Philippine gaming regulations;
• Transaction Processing: To process deposits via GCash, Maya, BPI, BDO, and other supported methods, and to process withdrawal requests to your verified accounts;
• Platform Security: To detect and prevent fraud, money laundering, unauthorised access, bot activity, and other prohibited conduct as defined in phlein's Terms & Conditions;
• Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling and to administer self-exclusion, deposit limits, and other responsible gaming tools;
• Legal & Regulatory Compliance: To comply with obligations under PAGCOR, the Anti-Money Laundering Act (RA 9160 as amended), the Data Privacy Act, and other applicable Philippine laws;
• Customer Support: To respond to your enquiries, resolve disputes, and improve service quality;
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates — only where you have provided consent and have not opted out;
• Analytics & Improvement: To understand how players interact with phlein and to improve game selection, platform performance, and user experience.

5. Legal Bases for Processing

phlein processes your personal data on the following legal bases under the Philippine Data Privacy Act:

• Consent: Where you have given explicit consent, such as for marketing communications;
• Contractual Necessity: Where processing is necessary to perform our contract with you (account operation, payments, game services);
• Legal Obligation: Where processing is required to comply with Philippine law, including PAGCOR regulations, AML obligations, and tax requirements;
• Legitimate Interests: Where processing is necessary for phlein's legitimate interests — including fraud prevention, platform security, and responsible gaming monitoring — provided such interests are not overridden by your rights and freedoms.

6. Sharing Your Personal Data

phlein does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited circumstances:

• PAGCOR: As required by our gaming licence, certain player data and transaction reports must be submitted to PAGCOR;
• Anti-Money Laundering Council (AMLC): Suspicious transaction reports and covered transaction reports as required under RA 9160;
• Payment Processors: We share the minimum data necessary with GCash, Maya, BPI, BDO, UnionBank, and other payment providers to process your transactions;
• KYC / Identity Verification Providers: Third-party providers who assist with document verification and identity matching, bound by confidentiality agreements;
• Technology & Hosting Providers: Cloud and infrastructure providers who store platform data under data processing agreements with appropriate security standards;
• Law Enforcement & Courts: Where required by court order, subpoena, or lawful government request under Philippine law.

7. Cookies & Tracking Technologies

phlein uses cookies, web beacons, and similar tracking technologies to operate and improve the platform. The types of cookies phlein uses are:

• Strictly Necessary Cookies: Essential for the platform to function — maintaining your login session, security tokens, and cart/wallet state. These cannot be disabled.
• Performance & Analytics Cookies: Aggregate, anonymised data about how players use phlein, used to identify technical issues and improve platform performance.
• Functional Cookies: Remember your preferences such as language, game category filters, and display settings between sessions.
• Marketing Cookies: Used where you have given consent to personalise promotional content and offers shown to you on the phlein platform.

You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect platform functionality. phlein does not use third-party advertising network cookies.

8. Data Security

phlein implements industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and phlein's servers;
• Encryption of sensitive data at rest, including financial records and identity documents;
• Role-based access controls ensuring phlein staff can access only data necessary for their specific function;
• Regular penetration testing and security audits by independent third parties;
• Two-factor authentication available to all players and mandatory for phlein administrative accounts;
• Automated monitoring for anomalous access patterns, with alerts triggering security review.

In the event of a data breach that poses a real risk of serious harm to affected individuals, phlein will notify the National Privacy Commission and affected players within the timeframes prescribed by the Data Privacy Act.

9. Data Retention

phlein retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods:

• Account & Identity Data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions;
• Financial Transaction Records: Retained for a minimum of five (5) years as required under the Anti-Money Laundering Act;
• Gameplay Records: Retained for a minimum of three (3) years for dispute resolution and regulatory reporting purposes;
• Support Communications: Retained for two (2) years to facilitate quality assurance and dispute resolution;
• Marketing Consent Records: Retained for the duration of the consent plus three (3) years to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with NPC guidelines.

10. Your Data Rights

Under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by phlein:

• Right to Be Informed: To be told what personal data phlein holds about you and how it is used — as described in this Policy;
• Right of Access: To request a copy of the personal data phlein holds about you;
• Right to Rectification: To request correction of inaccurate or incomplete personal data;
• Right to Erasure: To request deletion of your personal data, subject to phlein's legal and regulatory retention obligations;
• Right to Object: To object to processing based on legitimate interests, including direct marketing;
• Right to Data Portability: To receive a copy of data you have provided to phlein in a structured, commonly used format;
• Right to Lodge a Complaint: To file a complaint with the National Privacy Commission (NPC) if you believe phlein has not complied with the Data Privacy Act.

To exercise any of these rights, contact phlein's Data Protection Officer at [email protected] with the subject line "DPO — Privacy Request." phlein will respond within fifteen (15) business days of receiving a verified request.

11. Children's Privacy

phlein's platform is strictly for adults aged 21 and above, as required by PAGCOR. phlein does not knowingly collect, process, or retain personal data of individuals under the age of 21. Any account found to have been registered by a person under 21 will be immediately closed, data will be deleted (subject to mandatory regulatory reporting obligations), and the matter may be referred to PAGCOR and relevant Philippine authorities.

If you believe that phlein has inadvertently collected data from a person under 21, please contact us immediately at [email protected].

12. International Data Transfers

Where phlein uses service providers or infrastructure located outside the Philippines — such as cloud hosting providers — personal data may be transferred internationally. phlein ensures that all such transfers are subject to appropriate safeguards, including contractual data processing agreements that require receiving parties to protect personal data to a standard equivalent to that required by the Philippine Data Privacy Act and NPC regulations.

13. Updates to This Privacy Policy

phlein may update this Privacy Policy periodically to reflect changes in our data practices, regulatory requirements, or platform functionality. Where changes are material, phlein will notify registered players via the email address on file and/or via a notice on the platform. The updated Policy will specify its effective date. Continued use of phlein following notice of an update constitutes your acknowledgement of the revised Policy.

14. Contact & Complaints

For questions, concerns, or requests regarding this Privacy Policy or phlein's data practices, please contact our Data Protection Officer:

If you are not satisfied with phlein's handling of your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint is available on the NPC's official website.