This Privacy Policy explains how phlagu collects, processes, stores, and protects the personal information of its users — in plain language, consistent with the Republic Act No. 10173 (Data Privacy Act of 2012) and PAGCOR regulatory requirements.
Summary: phlagu collects personal information because it is legally required to verify your identity, process payments, and comply with PAGCOR and anti-money laundering regulations. We do not sell your data. We share it only with verified service providers and regulators as required by Philippine law. You have the right to access, correct, object to, and request deletion of your data, subject to legal retention obligations. Full details are set out in the sections below.
phlagu (operating the platform at phlagu.club) is the personal information controller for the purposes of the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines ("DPA"). As a PAGCOR-licensed online gaming operator, phlagu is incorporated and operates under the laws of the Republic of the Philippines.
phlagu determines the purposes and means of processing the personal data of its registered users ("Players") and visitors to phlagu.club. References in this Policy to "phlagu," "we," "us," or "our" refer to the phlagu platform and its operating entity. References to "you," "your," or "Player" refer to individuals who use or access the phlagu Platform.
phlagu has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable Philippine data protection laws. Contact details for the DPO are set out in Section 14.
This Privacy Policy applies to all personal information collected and processed by phlagu in connection with:
This Policy should be read alongside phlagu's Terms & Conditions and Responsible Gaming policy. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a data privacy matter, this Privacy Policy prevails.
phlagu collects personal information through several channels. The categories of data collected, and the context of collection, are described below.
When you create a phlagu account, we collect your full legal name, date of birth, registered mobile number or email address, and the password you set (stored in encrypted form — we never store plaintext passwords). This constitutes the minimum information required to create a player account.
To comply with PAGCOR licensing requirements, the Anti-Money Laundering Act (RA 9160 as amended), and the DPA, phlagu requires identity verification before full account functionality is enabled. KYC data collected includes: a photograph or scan of a valid Philippine government-issued identification document (PhilSys National ID, UMID, driver's license, passport, or equivalent), a selfie or liveness check image for facial verification, and any supplementary documents requested to establish source of funds.
phlagu records all deposit and withdrawal transactions, including the amount in Philippine Peso (₱), the payment method used (e.g., GCash, BPI), transaction timestamps, and reference numbers. This data is retained for regulatory reporting and dispute resolution purposes.
We record the games you play, bet amounts, game outcomes, session durations, and any responsible gaming limits you set or modify. This data is used to fulfill your gaming session, calculate winnings and losses, comply with PAGCOR reporting obligations, and administer responsible gaming tools.
When you access phlagu.club, our servers automatically collect your IP address, device type, operating system, browser type and version, mobile network carrier (e.g., Globe, Smart, DITO), session start and end times, pages visited, and referring URL. This data is used for platform security, fraud detection, and performance optimization.
If you contact phlagu via live chat or email, we retain the content of those communications, including any personal information you voluntarily provide, for the purpose of resolving your inquiry and improving customer support quality.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity | Full name, date of birth, government ID | KYC, age verification, AML compliance |
| Contact | Mobile number, email address | Account access, OTP, notifications |
| Financial | Transaction history, payment method details | Payment processing, AML reporting |
| Gaming | Bets, game history, session data | Service delivery, PAGCOR compliance |
| Technical | IP address, device ID, browser data | Security, fraud detection |
| Communications | Support chat logs, email exchanges | Dispute resolution, service quality |
phlagu uses the personal information it collects for the following specific purposes:
phlagu does not use personal information for purposes beyond those listed above without obtaining your separate consent or where required by law.
Under the Data Privacy Act of 2012 (RA 10173), phlagu's processing of your personal information rests on the following legal bases:
phlagu.club uses cookies and similar technologies (including local storage and session storage) to operate the Platform. Cookies are small text files stored on your device when you visit phlagu.club. We use the following categories of cookies:
You can manage or disable non-essential cookies through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. Most modern browsers (Chrome, Firefox, Safari) provide controls under Settings > Privacy to manage cookie preferences.
Note: phlagu does not use advertising or retargeting cookies. We do not share your usage data with advertising networks or social media platforms for behavioral advertising purposes.
phlagu does not sell your personal information to any third party. We share personal data only in the following circumstances and only to the extent necessary:
⚠ Important: phlagu will never sell, rent, or trade your personal information to third-party advertisers, data brokers, or marketing companies. Any disclosure outside the categories above requires your explicit prior consent.
phlagu retains your personal information for as long as necessary to fulfill the purposes for which it was collected, and for as long as required by applicable Philippine law:
Following the expiry of the applicable retention period, phlagu will securely delete or anonymize personal data in accordance with its data disposal procedures, unless a longer retention period is required by law.
phlagu implements appropriate technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:
Despite these measures, no internet transmission or electronic storage system is 100% secure. phlagu cannot guarantee absolute security of your data. In the event of a personal data breach that poses a risk to your rights and freedoms, phlagu will notify you and the National Privacy Commission (NPC) in accordance with the DPA's mandatory breach notification requirements.
Your role in data security: You are responsible for keeping your phlagu login credentials confidential. Do not share your password or OTP with anyone — including people claiming to be phlagu staff. phlagu will never ask for your password. If you suspect your account has been compromised, contact phlagu support immediately via live chat.
phlagu's primary operations and data infrastructure are based in the Philippines. However, some of phlagu's game provider and technology partners operate infrastructure in other jurisdictions, which may result in personal data being transferred to or processed in countries outside the Philippines.
Where such cross-border transfers occur, phlagu takes steps to ensure that an appropriate level of data protection is maintained, including entering into data processing agreements with the recipient that incorporate standard contractual clauses consistent with NPC guidelines, or verifying that the recipient jurisdiction provides an adequate level of data protection as recognized by the NPC.
By registering for and using the phlagu Platform, you acknowledge that your data may be transferred and processed outside the Philippines in the circumstances described above, subject to the safeguards set out in this section.
Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal information held by phlagu. To exercise any of these rights, contact phlagu's Data Protection Officer using the details in Section 14.
You have the right to request a copy of the personal information phlagu holds about you, including the categories of data, the purposes for which it is processed, and the third parties to whom it has been disclosed.
You have the right to request correction of inaccurate or incomplete personal information. Note that certain KYC data cannot be changed without re-submitting verified documentation.
You may request deletion of your personal data where phlagu no longer has a lawful basis to retain it. This right is subject to phlagu's mandatory data retention obligations under PAGCOR licensing and the AML Act — data required by law cannot be deleted before the end of the mandatory retention period.
You may object to processing of your personal data where phlagu relies on legitimate interests as its legal basis, including profiling for marketing purposes. You may opt out of marketing communications at any time by contacting support.
You may request a copy of the personal information you have provided to phlagu in a structured, commonly used, machine-readable format, where technically feasible and where processing is carried out by automated means.
If you believe phlagu has violated your data privacy rights, you may lodge a complaint with the National Privacy Commission (NPC) of the Philippines through its official channels. phlagu recommends first raising any concern with phlagu's DPO for a faster resolution.
Response Timeframe: phlagu will acknowledge all data subject rights requests within five (5) business days and respond substantively within thirty (30) calendar days of receipt, consistent with NPC guidelines. Where requests are complex or numerous, phlagu may extend this period by a further thirty (30) days, with notice to you.
The phlagu Platform is strictly for individuals 21 years of age or older, in accordance with PAGCOR regulations and applicable Philippine gaming law. phlagu does not knowingly collect personal information from persons under 21.
Age verification is a mandatory step in the phlagu KYC process. Any account where the account holder is found to be under 21 years of age will be immediately closed, and the matter will be reported to PAGCOR as required. Real-money funds associated with such accounts will be handled in accordance with PAGCOR's guidelines on underage gambling.
⚠ Parental Notice: If you are a parent or guardian and believe that a person under 21 in your care has registered on phlagu without authorization, please contact phlagu immediately at [email protected]. We will investigate and take appropriate action promptly. 21+
phlagu may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or NPC guidance. When material changes are made, phlagu will notify registered players via their registered email address or mobile number, and through a prominent notice on phlagu.club, at least seven (7) days before the revised Policy takes effect.
The revised Policy will display an updated "Effective" date at the top of this page. Your continued use of the phlagu Platform after the effective date of the revised Policy constitutes acceptance of the updated terms. If you do not accept a revised Policy, you should close your account and cease using the Platform before the effective date.
Archived versions of previous Privacy Policies are available upon request from phlagu's Data Protection Officer.
For any questions, concerns, or requests relating to this Privacy Policy or phlagu's processing of your personal data, please contact:
When submitting a data subject rights request, please include your full name, registered mobile number or email address, and a description of your request. phlagu may require you to verify your identity before processing certain requests.
If you are not satisfied with phlagu's response, you may file a complaint with the National Privacy Commission of the Philippines through its official public channels.
Effective Date: This Privacy Policy is effective as of 1 January 2026 and supersedes all prior versions of phlagu's privacy notices. By using phlagu on or after this date, you acknowledge that you have read and understood this Policy.
Your Privacy, Protected
phlagu's Privacy Policy isn't a formality — it reflects concrete technical and legal commitments to Filipino players. Here's what those commitments look like in practice.
Every connection between your device and phlagu.club is protected by TLS 1.3 encryption. Your login credentials, payment details, and gaming activity data are never transmitted in plain text. This applies on all Philippine mobile networks — Globe, Smart, DITO, and WiFi.
Your phlagu password is hashed using industry-standard cryptographic algorithms before storage. No phlagu staff member can view or retrieve your password. If you forget it, a reset is required — we cannot "look it up" because it doesn't exist in readable form in our systems.
phlagu does not sell, rent, or trade your personal information to third-party advertisers, data brokers, or marketing platforms. Your Filipino contact details and gaming history are not used to build advertising profiles for third parties. What's yours stays with phlagu.
phlagu's data practices are governed by the Republic Act No. 10173 (Data Privacy Act of 2012), the implementing rules issued by the National Privacy Commission, and PAGCOR data governance requirements. You have enforceable rights under Philippine law — and phlagu is legally obligated to respect them.
If a personal data breach occurs that poses a risk to your rights, phlagu is required by the DPA to notify you and the National Privacy Commission within 72 hours of discovery. We have incident response procedures in place specifically for this obligation — it's not something we'd handle quietly.
Access, correction, deletion, objection, and portability — these are real rights under Philippine law, not aspirational bullet points. phlagu has a designated Data Protection Officer and a documented process for handling data subject requests, with a 30-day response commitment.
phlagu is PAGCOR-licensed, NPC-compliant, and built specifically for Filipino players. Your data is protected under Philippine law — and your gaming experience is backed by fair, certified games and fast GCash payouts. Must be 21+.