Last Updated: January 2025 Compliant with RA 10173 – Data Privacy Act

phlove25 Privacy Policy

Your personal data belongs to you. This Privacy Policy explains exactly what information phlove25 collects when you use our platform, why we collect it, how we store and protect it, and what rights you have over it as a Filipino data subject under Republic Act No. 10173. If you have any questions after reading, our support team is always ready to help.

RA 10173 Compliant
SSL Encrypted Storage
No Data Sold to Third Parties
PAGCOR Regulatory Compliance
Governing Law
RA 10173, Philippines
Data Controller
phlove25 (PAGCOR Licensed)
Retention Period
5 years post-account closure
DPO Contact
support@phlove25.app
phlove25
01

Introduction

phlove25 takes data privacy seriously. This Privacy Policy explains how phlove25 ("we," "us," or "our"), the operator of the gaming platform at phlove25.app, handles the personal information of everyone who registers, visits, or interacts with our platform.

This policy is written to comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC). As a PAGCOR-licensed gaming operator, phlove25 is also subject to data handling requirements under our operating licence conditions.

By creating an account or using phlove25, you acknowledge that you have read and understood this Privacy Policy. You consent to the collection, use, and processing of your personal data in the manner described below. If you disagree with any part of this policy, please do not register or use our platform.

This Privacy Policy should be read together with the phlove25 Terms and Conditions, which govern the overall use of the platform.

02

What Personal Data We Collect

phlove25 collects only the personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. We don't collect information for the sake of it. Below is a breakdown of the categories of data we collect and the specific items within each category.

Category Data Items Required?
Identity Full name, date of birth, government ID type & number Yes (KYC)
Contact Mobile number, email address Yes
Financial Payment method details (GCash, Maya, bank account), transaction history Yes
Account Activity Login history, game play records, bet history, bonus claims Auto-collected
Technical IP address, device type, browser, OS, session timestamps Auto-collected
Communications Support chat transcripts, email correspondence When used
Preferences Language settings, notification preferences, responsible gaming limits Optional

We do not collect sensitive personal information beyond what is required for identity verification (KYC) under PAGCOR and AML regulations. phlove25 does not collect biometric data, racial or ethnic origin, religious beliefs, or political affiliations.

03

How We Collect Your Data

phlove25 collects personal data through the following methods:

  • Direct collection: Information you provide when registering for a phlove25 account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
  • Automated collection: Technical data collected automatically when you use the platform – including your device's IP address, browser type, session duration, and pages or games accessed. This is collected via server logs and session tracking technologies.
  • Payment providers: When you deposit or withdraw using GCash, Maya, BDO, BPI, UnionBank, or other Philippine payment channels, those providers share transaction confirmation data with phlove25 to verify and process your payment.
  • Cookies and similar technologies: phlove25 uses cookies and local storage to maintain your session, remember preferences, and measure platform performance. See Section 7 for full details.
  • Verification services: For KYC purposes, phlove25 may use third-party identity verification services to validate government-issued ID documents. These providers process your data under binding data processing agreements.
phlove25
04

Why We Use Your Personal Data

phlove25 uses personal data for specific, legitimate purposes only. We do not use your data for purposes unrelated to the operation of the platform. Here is a clear breakdown of why we process your data:

  • Account creation and management: To register your phlove25 account, authenticate your login, maintain your profile, and process account changes you request.
  • Identity verification (KYC): To verify that you are who you say you are, that you meet the minimum age requirement of 18, and that you are not on any self-exclusion register. This is a legal obligation under PAGCOR licence conditions and Philippine AML law.
  • Payment processing: To process deposits to your phlove25 wallet and withdrawals to your registered Philippine payment account. Financial data is also retained for tax reporting as required under Philippine law.
  • Game provision and bet settlement: To run the casino games and sportsbook markets you participate in, record results accurately, and settle your bets correctly.
  • Customer support: To respond to your enquiries, resolve disputes, and document the resolution of any complaint for regulatory reference.
  • Fraud prevention and security: To detect and prevent unauthorised access, multi-accounting, chargebacks, money laundering, and other activities prohibited under our Terms and Conditions and Philippine law.
  • Responsible gaming: To monitor gameplay for signs of problem gambling patterns and, where applicable, to enforce deposit limits, cool-off periods, or self-exclusion restrictions that you or phlove25's responsible gaming team have applied to your account.
  • Marketing communications: Only with your explicit consent, to send you information about promotions, new games, and offers at phlove25. You may withdraw this consent at any time by updating your notification preferences or contacting support.
  • Regulatory compliance: To meet all reporting obligations under our PAGCOR licence, including transaction monitoring reports required for AML compliance.
05

Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, personal data may only be processed if at least one lawful basis exists. phlove25 relies on the following lawful bases for the processing activities described in this Privacy Policy:

  • Contractual necessity: Most processing – account management, payment processing, game operation, bet settlement – is necessary to fulfil our contract with you as a registered member of phlove25.
  • Legal obligation: KYC verification, AML transaction reporting, age verification, and data retention for tax purposes are required by Philippine law and our PAGCOR operating licence. We cannot opt out of these, and neither can you as a member.
  • Legitimate interests: Fraud detection, platform security monitoring, and responsible gaming analysis are processed on the basis of phlove25's legitimate interest in maintaining a safe, fair, and legally compliant gaming environment.
  • Consent: Marketing communications and non-essential cookies are processed only with your explicit, freely given consent. You may withdraw consent at any time without affecting the processing that was carried out prior to withdrawal.
06

How We Share Your Data

phlove25 does not sell your personal data to any third party, ever. We share data only where it is necessary to operate the platform, comply with legal obligations, or where you have given explicit consent. The third parties with whom phlove25 may share your data, and the reasons for sharing, are as follows:

  • Payment processors: GCash, Maya, BDO, BPI, UnionBank, and other Philippine payment partners receive transactional data necessary to process your deposits and withdrawals. These providers are bound by their own data privacy obligations under Philippine law.
  • Game software providers: The game developers whose titles are available on phlove25 may receive aggregated, anonymised gameplay data for game performance analytics. Individual player data is not shared with game providers without your consent.
  • Identity verification services: Third-party KYC providers receive your submitted identity documents and personal details to perform verification on phlove25's behalf, under binding data processing agreements.
  • PAGCOR: As our licensing authority, PAGCOR has the regulatory right to request access to player and transaction data as part of compliance audits and investigations. phlove25 is legally required to cooperate with such requests.
  • Philippine law enforcement and courts: phlove25 will disclose personal data to law enforcement authorities, the NPC, or courts where required by a lawful order, warrant, or judicial process under Philippine law.
  • Cloud and infrastructure providers: phlove25 uses secure, reputable cloud infrastructure providers to host and operate the platform. These providers access data only as data processors under strict contractual terms and may not use your data for their own purposes.

phlove25 never shares your personal data with advertising networks, data brokers, or any marketing company without your explicit prior consent.

07

Cookies and Tracking Technologies

phlove25 uses cookies and similar technologies to operate the platform correctly and improve your experience. A cookie is a small text file stored on your device by your browser. Here is how phlove25 uses them:

  • Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in while you navigate phlove25, and security tokens that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
  • Functional cookies: Remember your preferences – such as language settings and whether you have acknowledged certain notifications – so you don't have to re-enter them on every visit.
  • Analytics cookies: Used by phlove25's internal analytics to measure how players use the platform – which games are popular, where users encounter friction, and how to improve navigation. Data collected is aggregated and does not identify individual players.
  • Marketing cookies: Only applied with your explicit consent. These help phlove25 measure the effectiveness of promotional campaigns. You may withdraw consent at any time through your browser cookie settings or by contacting support.

You can control cookie settings through your browser. Disabling essential cookies will prevent phlove25 from functioning correctly. Disabling functional or analytics cookies will not affect your ability to play but may reduce the quality of your experience.

phlove25
08

Data Retention

phlove25 retains personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by Philippine law and PAGCOR regulations. The following general retention periods apply:

  • Account and identity data: Retained for the duration of your active phlove25 account and for a minimum of five (5) years following account closure. This retention period is required under Philippine AML law and PAGCOR licence conditions.
  • Transaction and financial records: Retained for a minimum of five (5) years following each transaction for financial audit and tax reporting compliance.
  • Communication records: Support chat logs and email correspondence retained for two (2) years following resolution of the matter to which they relate.
  • Technical and session data: IP logs and session records retained for twelve (12) months for security and fraud investigation purposes.
  • Marketing preferences: Retained as long as your account is active or until you withdraw consent, whichever is earlier.

When data is no longer required under the applicable retention period, phlove25 securely deletes or anonymises it so it cannot be attributed to any individual.

09

How We Protect Your Data

phlove25 implements technical and organisational security measures proportionate to the sensitivity of the personal data we process. Our security framework is reviewed regularly and updated in response to emerging threats. Key measures include:

  • TLS/SSL encryption: All data transmitted between your device and the phlove25 platform is encrypted using industry-standard TLS 1.2 or higher. You'll always see the padlock icon in your browser when connected to phlove25.
  • Encrypted data storage: Sensitive data – including identity documents and financial information – is stored in encrypted form at rest on secure cloud infrastructure located in compliant data centres.
  • Access controls: Internal access to personal data is restricted on a strict need-to-know basis. phlove25 staff access levels are role-based and logged. All access to sensitive data requires multi-factor authentication.
  • Intrusion detection: phlove25 operates continuous monitoring systems that detect and alert on unusual access patterns or attempted breaches in real time.
  • Third-party security audits: phlove25 engages independent security professionals to conduct penetration testing and vulnerability assessments on a scheduled basis.

No online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms as a data subject, phlove25 will notify you and the National Privacy Commission within 72 hours of becoming aware of the incident, as required by RA 10173.

10

Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, every registered phlove25 member has the following rights with respect to their personal data. You may exercise these rights at any time by contacting our Data Protection Officer (DPO) at support@phlove25.app.

11

Children's Privacy

phlove25 is strictly an 18+ platform. We do not knowingly collect or process personal data from any person under the age of 18. Our registration process includes age verification steps and we conduct additional KYC checks where the age of an applicant is uncertain.

If phlove25 discovers that personal data of a minor has been collected – whether through a registration error or a deliberate misrepresentation of age – the account will be closed immediately, all associated data will be deleted in accordance with our data retention policy, and any deposits will be returned to the payment source. If you are the parent or guardian of a minor who may have registered on phlove25, please contact our support team immediately at support@phlove25.app.

12

Updates to This Privacy Policy

phlove25 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in Philippine privacy law, or changes to our PAGCOR licence conditions. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered members via their registered mobile number or email address.

Your continued use of phlove25 after the effective date of any amendment constitutes your acknowledgement of the updated Privacy Policy. If you do not agree with changes that materially affect your rights, you may close your account and request deletion of your data (subject to the statutory retention obligations described in Section 8).

13

Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the way phlove25 handles your personal data, please reach out to our designated Data Protection Officer (DPO). We will respond to all data privacy enquiries within five (5) business days of receipt.

DPO Email
support@phlove25.app
Platform
phlove25.app
Regulatory Authority
PAGCOR (Philippine Amusement and Gaming Corporation)
Data Privacy Regulator
National Privacy Commission (NPC) of the Philippines

If you are not satisfied with phlove25's response to a data privacy complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines, which is the independent government body responsible for enforcing RA 10173.


Data Subject Rights

Your Rights Under the Philippine Data Privacy Act

As a phlove25 member, you have these rights over your personal data. Contact our DPO at support@phlove25.app to exercise any of them.

Right to Access

You may request a copy of all personal data phlove25 holds about you at any time. We will provide this in a clear, structured format within 15 business days of your verified request.

Right to Rectification

If any personal data phlove25 holds about you is inaccurate or incomplete, you have the right to have it corrected. Update basic details directly in your account settings or contact support for changes that require verification.

Right to Erasure

You may request deletion of your personal data. Where we are not legally required to retain it (see Section 8), phlove25 will delete it. Data subject to AML and PAGCOR retention obligations cannot be deleted before the mandated retention period ends.

Right to Object

You may object to certain types of processing – particularly processing based on phlove25's legitimate interests, such as marketing profiling. We will stop the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.

Right to Data Portability

Where processing is based on your consent or on a contract, you may request a copy of your data in a structured, machine-readable format suitable for transfer to another service, if technically feasible.

Right to Withdraw Consent

Where phlove25 processes your data based on consent (such as for marketing), you may withdraw that consent at any time by updating your preferences in account settings or contacting our DPO. Withdrawal does not affect any processing carried out before withdrawal.

How We Protect You

Security Measures at phlove25

A quick look at the technical and organisational safeguards we use to keep your data safe on phlove25.

TLS/SSL Encryption

All communication between your device and phlove25 uses TLS 1.2 or higher. Look for the padlock icon in your browser – it should always be there on phlove25.

Encrypted Storage at Rest

Identity documents, payment details, and sensitive account data are stored encrypted on secure cloud servers. Even in a breach scenario, this data is not directly readable without decryption keys.

2FA Account Protection

phlove25 supports two-factor authentication (2FA) via mobile OTP. Enabling 2FA on your phlove25 account adds a critical layer of protection against unauthorised access.

Continuous Monitoring

phlove25 runs 24/7 intrusion detection and anomaly monitoring on all platform infrastructure. Unusual access patterns trigger immediate alerts and automated protective responses.

Role-Based Access Control

Internal access to personal data is restricted to staff who need it to do their job, with every access event logged. Elevated access to sensitive data requires multi-factor authentication.

Regular Security Audits

Independent security professionals perform scheduled penetration tests and vulnerability assessments on phlove25 infrastructure. Findings are addressed before any vulnerability reaches members.

Your Privacy is Safe at phlove25 – Ready to Play?

Now you know exactly how phlove25 handles your data – transparently, securely, and in full compliance with the Philippine Data Privacy Act. Your personal information is never sold, your payments are protected, and your rights as a data subject are fully respected. Join thousands of Filipino players who trust phlove25 every day.

RA 10173 Compliant No data sold to third parties SSL encrypted transactions PAGCOR licensed platform

Play Responsibly at phlove25. Gaming is entertainment – not a way to earn a living. Set your limits, know when to stop, and use our responsible gaming tools if you ever feel your habits are changing. They're always available in your account settings.