phlove33 Privacy Policy

1. Overview & Data Controller

phlove33 ("we," "us," "our") operates the online gaming platform accessible at phlove33.vip and is the data controller responsible for the personal information of registered users and visitors to the Platform. As a data controller, phlove33 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

phlove33 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with applicable data protection laws and serving as the primary point of contact for data subject inquiries and complaints. Contact details for the DPO are provided in Section 14 of this Policy.

This Policy should be read together with our Terms & Conditions, which govern your use of the phlove33 Platform. Capitalised terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

2. Personal Data We Collect

2.1 Registration & Identity Data

When you create a phlove33 account, we collect the following information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Philippine mobile number
• Email address
• Username and encrypted password
• Residential address within the Philippines

2.2 Identity Verification (KYC) Data

To comply with Philippine anti-money laundering regulations and PAGCOR requirements, we may collect:

• Copies of government-issued identification documents (e.g., Philippine passport, SSS ID, PhilHealth ID, UMID, driver's licence, Postal ID)
• Proof of address documents (e.g., utility bills, bank statements issued within the last three months)
• Selfie or live photo for facial verification purposes

2.3 Financial & Transaction Data

We collect data related to your financial transactions on the Platform, including:

• Deposit and withdrawal amounts and timestamps
• Payment method details (e.g., GCash mobile number, Maya account reference, bank account name — we do not store full bank account numbers)
• Transaction history and account balance records
• Bonus and promotional activity records

2.4 Gaming Activity Data

• Game session logs, bet amounts, win/loss records
• Game preferences and play patterns
• Responsible gaming tool usage (deposit limits, self-exclusion requests)

2.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration and navigation data
• Cookie identifiers and similar tracking technologies (see Section 9)

2.6 Communications Data

• Customer support chat transcripts and email correspondence
• Feedback, survey responses, and complaint records
• Marketing communication preferences

3. How We Collect Your Data

phlove33 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey.
• Automatically — through cookies, web beacons, and similar technologies when you browse or use the Platform (see Section 9).
• From third-party service providers — including identity verification providers, payment processors (GCash, Maya, Philippine banks), and fraud detection services, where necessary to provide our services or comply with legal obligations.
• From regulatory authorities — where required by law, including information shared by PAGCOR or the Anti-Money Laundering Council (AMLC).

4. Purpose of Processing

phlove33 processes your personal data for the following purposes:

5. Legal Basis for Processing

Under the Philippine Data Privacy Act, phlove33 processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform our contract with you (e.g., account management, payment processing, game provision).
• Legal obligation — processing required to comply with applicable Philippine laws, including the Anti-Money Laundering Act (AMLA), PAGCOR regulations, and the Data Privacy Act itself.
• Legitimate interests — processing necessary for our legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights and freedoms.
• Consent — for optional processing activities such as marketing communications and certain cookie-based analytics. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

phlove33 does not sell, rent, or trade your personal data. We may share your information with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors — GCash, Maya, and Philippine banking partners, to facilitate deposits and withdrawals.
• Identity verification providers — third-party KYC and AML compliance service providers operating under strict data processing agreements.
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where required by law.
• Technology and infrastructure providers — cloud hosting, cybersecurity, and platform maintenance providers who process data solely on our instructions under binding data processing agreements.
• Game content providers — licensed game studios whose software is integrated into the phlove33 Platform, limited to session and game outcome data necessary for game operation.
• Professional advisers — lawyers, auditors, and accountants, subject to professional confidentiality obligations.

7. Data Retention

phlove33 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and KYC data — retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements.
• Transaction records — retained for a minimum of five (5) years from the date of the transaction, as required by Philippine financial regulations.
• Customer support records — retained for three (3) years from the date of the last interaction.
• Marketing data — retained until you withdraw consent or request deletion, whichever is earlier.
• Technical and device data — retained for up to twelve (12) months for security and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our data disposal procedures.

8. Data Security

phlove33 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records
• Multi-factor authentication (MFA) for all administrative access to production systems
• Regular penetration testing and vulnerability assessments conducted by independent security firms
• Role-based access controls ensuring that staff can only access data necessary for their specific job functions
• Continuous monitoring and intrusion detection systems
• Regular staff training on data protection and information security best practices

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phlove33 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected data subjects without undue delay, in accordance with the Data Privacy Act.

9. Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device when you visit the phlove33 Platform. They help us recognise your device, remember your preferences, and improve your overall experience on the Platform.

9.2 Types of Cookies We Use

• Strictly necessary cookies — essential for the Platform to function correctly, including session management and security features. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings and login status to provide a more personalised experience.
• Analytics cookies — help us understand how users interact with the Platform so we can improve its performance and content. Data collected is aggregated and anonymised where possible.
• Marketing cookies — used only with your explicit consent to deliver relevant promotional content from phlove33. We do not use third-party advertising cookies.

9.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the phlove33 Platform. Strictly necessary cookies cannot be disabled as they are required for the Platform to operate.

10. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phlove33:

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 14. We will respond to all verified requests within fifteen (15) business days, in accordance with NPC guidelines.

11. Minors & Age Restriction

If phlove33 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, delete all personal data collected, and forfeit any associated account balance in accordance with our Terms & Conditions and applicable regulations.

If you are a parent or guardian and believe that your child has registered on the phlove33 Platform, please contact our Data Protection Officer immediately using the contact details in Section 14.

12. Cross-Border Data Transfers

phlove33 primarily stores and processes personal data within the Republic of the Philippines. In certain circumstances, data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international game studios.

Where such transfers occur, phlove33 ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that impose data protection obligations equivalent to those required under Philippine law. phlove33 will not transfer personal data to a country that does not provide an adequate level of protection without implementing appropriate safeguards and, where required, obtaining your consent.

13. Changes to This Privacy Policy

phlove33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

When material changes are made to this Policy, phlove33 will notify registered users via email or a prominent notice on the Platform at least fourteen (14) days before the changes take effect. Your continued use of the phlove33 Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how phlove33 is protecting your personal data.

14. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phlove33, please contact our Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data rights have not been adequately addressed by phlove33.