phlar Privacy Policy - Your Data, Protected

1. Introduction and Data Controller Information

phlar, operating under PAGCOR authorization, is the data controller responsible for your personal information. We take our obligations under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) seriously and have implemented comprehensive technical and organizational measures to ensure the security and confidentiality of your data. This Privacy Policy applies to all personal information collected through phlar.cam, our mobile applications, customer service channels, and any other phlar-operated platforms.

By creating a phlar account or using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, and use of your personal information as described herein. If you do not agree with any aspect of this Privacy Policy, you must not use phlar services.

2. Information We Collect

2.1 Account Registration Information

When you create a phlar account, we collect personal information necessary to verify your identity, comply with regulatory requirements, and provide gaming services. This information includes:

• Full legal name as it appears on government-issued identification
• Date of birth (to verify you meet the minimum age requirement of 21 years)
• Philippine address (street address, barangay, city/municipality, province, postal code)
• Email address
• Mobile phone number
• Username and password (passwords are encrypted and not accessible by phlar staff)
• Government-issued identification documents (Philippine Passport, Driver's License, UMID, SSS ID, Postal ID, or other valid IDs)
• Selfie photographs for identity verification purposes

2.2 Financial Transaction Information

To process deposits and withdrawals, we collect information related to your financial transactions, including:

• Payment method details (GCash mobile number, bank account information, Maya account details, or other payment service provider information)
• Transaction history (deposits, withdrawals, amounts, dates, and times)
• Source of funds documentation when required for anti-money laundering compliance
• Tax identification number (TIN) for large withdrawals as required by Philippine law

We do not store complete credit card or bank account numbers. Payment processing is handled securely through encrypted third-party payment processors who maintain PCI DSS compliance.

2.3 Gaming Activity Information

We collect and store information about your gaming activity on phlar, including:

• Game selections and gameplay history
• Bet amounts, win/loss records, and account balance changes
• Bonuses claimed and wagering progress
• Session durations and frequency of play
• Sports betting selections and outcomes
• Live casino interactions and dealer game participation

This information is essential for providing gaming services, preventing fraud, ensuring responsible gaming compliance, and resolving disputes.

2.4 Technical and Device Information

We automatically collect technical information when you access phlar services, including:

• IP address and geographic location (to verify you are accessing from within the Philippines)
• Device type, operating system, and browser information
• Screen resolution and device identifiers
• Cookies and similar tracking technologies (see Section 8 for detailed cookie policy)
• Pages visited, time spent on platform, and navigation paths
• Referral sources and marketing campaign interactions

2.5 Communications and Support Interactions

When you contact phlar customer support via live chat, email, or phone, we collect and store:

• Content of your communications with our support team
• Support ticket history and resolution records
• Call recordings for quality assurance and training purposes (with your consent)
• Feedback and survey responses

3. How We Use Your Information

phlar uses your personal information for the following legitimate purposes:

3.1 Service Provision and Account Management

• Create and maintain your phlar account
• Verify your identity and age to comply with Philippine gaming laws (21+ requirement)
• Process deposits, withdrawals, and gaming transactions
• Provide access to casino games, live dealer tables, sports betting, and other gaming products
• Track bonuses, promotions, and loyalty rewards
• Manage your account settings and preferences
• Communicate important account information, terms updates, and service announcements

3.2 Regulatory Compliance and Legal Obligations

• Comply with PAGCOR licensing requirements and gaming regulations
• Fulfill anti-money laundering (AML) and counter-terrorism financing obligations under Philippine law
• Respond to lawful requests from government authorities, courts, or regulatory bodies
• Conduct internal audits and maintain transaction records as required by law
• Report suspicious activities to relevant authorities when legally required

3.3 Fraud Prevention and Security

• Detect and prevent fraudulent transactions, account takeovers, and identity theft
• Monitor for suspicious betting patterns, collusion, and bonus abuse
• Verify the legitimacy of withdrawal requests and protect your account from unauthorized access
• Investigate security incidents and policy violations
• Maintain platform integrity and ensure fair play for all users

3.4 Responsible Gaming

• Monitor your gaming behavior for signs of problem gambling
• Enforce deposit limits, loss limits, and self-exclusion requests
• Provide responsible gaming resources and support when indicators suggest potential issues
• Comply with PAGCOR responsible gaming directives

3.5 Service Improvement and Marketing

• Analyze platform usage to improve user experience and optimize services
• Personalize game recommendations based on your preferences
• Send promotional offers, bonuses, and marketing communications (with your consent)
• Conduct customer satisfaction surveys and gather feedback
• Develop new features and gaming products based on user behavior insights

You may opt out of marketing communications at any time by adjusting your account preferences or clicking unsubscribe links in our emails. Opting out will not affect essential service communications.

4. Information Sharing and Disclosure

phlar does not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information only in the following circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment processors (GCash, Maya, banks, and other financial institutions) for transaction processing
• Identity verification services for age and identity confirmation
• Cloud hosting providers for secure data storage
• Customer support platforms for ticketing and communication management
• Analytics providers for platform performance monitoring
• Marketing automation services for promotional campaigns (only if you've consented to marketing)

All service providers are contractually bound to maintain confidentiality and security of your information and may use it only for the specific purposes we authorize.

4.2 Legal and Regulatory Obligations

We may disclose your information when required by law or in response to valid legal processes, including:

• PAGCOR audits, inspections, and regulatory compliance reviews
• Court orders, subpoenas, or other lawful requests from government authorities
• Anti-money laundering investigations by the Anti-Money Laundering Council (AMLC)
• Tax reporting obligations to the Bureau of Internal Revenue (BIR)
• Law enforcement requests related to criminal investigations

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity. We will notify you via email and prominent notice on phlar.cam before your information is transferred and becomes subject to a different privacy policy.

4.4 Protection of Rights and Safety

We may disclose information when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of phlar, our users, or the public, including to prevent fraud, enforce our Terms and Conditions, or respond to emergencies.

5. Data Security Measures

phlar employs industry-leading security technologies and practices to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

5.1 Technical Security

• 256-bit SSL/TLS encryption for all data transmission between your device and our servers
• Encrypted database storage with access controls and audit logging
• Password hashing using bcrypt algorithm (passwords are never stored in plain text)
• Two-factor authentication (2FA) option for enhanced account security
• Regular security vulnerability assessments and penetration testing by independent security firms
• Web application firewalls and intrusion detection systems
• DDoS protection and rate limiting to prevent service disruptions

5.2 Organizational Security

• Strict employee access controls based on need-to-know principles
• Mandatory security training for all staff handling personal data
• Non-disclosure agreements and confidentiality obligations for employees and contractors
• 24/7 security operations center monitoring for suspicious activity
• Incident response procedures for data breaches
• Regular security policy reviews and updates

5.3 Data Breach Notification

In the unlikely event of a data breach that compromises your personal information, phlar will notify affected users within seventy-two (72) hours of discovering the breach, as required by the Philippine Data Privacy Act. Notifications will include the nature of the breach, data affected, potential consequences, and steps we are taking to address the issue.

6. Data Retention

phlar retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Information: Retained for the duration of your account plus five (5) years after account closure, as required by PAGCOR regulations and anti-money laundering laws
• Transaction Records: Retained for ten (10) years to comply with Philippine tax and financial record-keeping requirements
• Gaming Activity: Retained for five (5) years for dispute resolution and regulatory compliance purposes
• Communications: Retained for three (3) years for quality assurance and legal protection
• Marketing Consents: Retained until you withdraw consent or the information is no longer needed for marketing purposes

After the applicable retention period, personal information is securely deleted or anonymized so that it can no longer identify you.

7. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you. You can access most of your account information directly through your phlar account dashboard. For additional information, contact [email protected].

7.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information. You can update most information through your account settings. For changes requiring verification (name, date of birth), contact customer support with supporting documentation.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information when it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements. Note that we must retain certain information to comply with PAGCOR regulations and Philippine law.

7.4 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes. You may opt out of marketing communications at any time through account preferences or by contacting customer support.

7.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit that data to another controller.

7.6 Right to Lodge a Complaint

If you believe your privacy rights have been violated, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Contact details: National Privacy Commission, 5th Floor, Philippine International Convention Center, Vicente Sotto Street, Pasay City, Philippines 1307.

To exercise any of these rights, contact us at [email protected] with your full name, registered email address, and specific request. We will respond within fifteen (15) days of receiving your request.

8. Cookies and Tracking Technologies

phlar uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and provide personalized content. A cookie is a small text file stored on your device when you visit phlar.cam.

8.1 Types of Cookies We Use

• Essential Cookies: Required for platform functionality, including session management, security, and authentication. These cannot be disabled.
• Performance Cookies: Collect anonymous information about how you use phlar.cam to help us improve performance and user experience.
• Functional Cookies: Remember your preferences (language, currency, game favorites) to personalize your experience.
• Marketing Cookies: Track your interactions with marketing campaigns and display relevant promotional offers (requires your consent).

8.2 Managing Cookies

You can control cookie settings through your browser preferences. Note that disabling essential cookies may impair platform functionality. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications when cookies are placed.

9. Third-Party Links

phlar.cam may contain links to third-party websites or services (such as payment processors). This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices of external websites. We encourage you to review the privacy policies of any third-party services before providing personal information.

10. Children's Privacy

phlar services are strictly for individuals aged 21 years and above. We do not knowingly collect personal information from individuals under 21. If we discover that a person under 21 has created an account, we will immediately close the account and delete all associated information. If you believe a minor has created a phlar account, please contact us immediately at [email protected].

11. International Data Transfers

Your personal information is primarily stored on servers located in Singapore and the Philippines. While phlar primarily serves Filipino players within the Philippines, some of our service providers may process data outside the Philippines. When we transfer data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses, to protect your information in accordance with Philippine data protection standards.

12. Changes to This Privacy Policy

phlar reserves the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by email and by posting a prominent notice on phlar.cam at least thirty (30) days before the changes take effect. The "Effective Date" at the top of this policy indicates when it was last updated. Your continued use of phlar services after the effective date of the revised Privacy Policy constitutes acceptance of the changes.

13. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection Officer: