How phlink Keeps Your Data Safe
Before diving into the full legal text, here is a plain-English summary of the six core commitments phlink makes to every Filipino player on this platform.
End-to-End Encryption
All data transmitted between your device and phlink servers is protected with TLS encryption. Sensitive fields — including payment credentials and government ID documents — are encrypted at rest using industry-standard protocols. Your data is never sent or stored in plain text.
Purpose-Limited Collection
phlink collects only the personal data that is strictly necessary to operate your account, comply with PAGCOR and AMLC regulations, and process your payments in Philippine Peso. We do not collect data for unrelated commercial purposes without your explicit consent.
No Unauthorised Third-Party Sharing
phlink does not sell your personal data to third parties. Data is shared only with regulated payment processors, licensed KYC providers, and government bodies (such as PAGCOR and AMLC) where disclosure is legally required. All third-party processors are bound by data processing agreements.
Your Rights Under RA 10173
As a Filipino data subject, you have the right to access, correct, object to, erase, and port your personal data under the Data Privacy Act of 2012. phlink provides a straightforward process for exercising these rights via your account dashboard or by contacting our Data Protection Officer.
Defined Retention Periods
phlink retains your personal data only for as long as required to fulfil the purpose for which it was collected, or as mandated by applicable Philippine law — including PAGCOR's record-keeping requirements and AMLC's five-year transaction record retention obligations. Data is securely deleted when no longer required.
Breach Notification
In the unlikely event of a personal data breach that poses a real risk to your rights and freedoms, phlink will notify affected users and the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, in accordance with NPC Circular 16-03 and related issuances.
01 About This Policy
This Privacy Policy ("Policy") describes how phlink ("phlink", "we", "us", "our") collects, uses, stores, shares, and protects personal data in connection with the phlink online gaming platform, accessible at phlink.org, including all associated services such as the phlink casino lobby, bingo rooms, slot games, sportsbook, live dealer tables, and the phlink login portal.
This Policy applies to all users of the phlink platform who are located in the Republic of the Philippines, and is drafted in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). Where applicable, it also reflects the data-related requirements of PAGCOR's regulatory framework.
By creating a phlink account, completing the phlink login process, or otherwise using the phlink platform, you acknowledge that you have read, understood, and agree to the collection and use of your personal data as described in this Policy. If you do not agree, please discontinue use of the platform and contact support to close your account.
Plain-language summary: This Policy tells you exactly what data phlink holds about you, why we need it, and what you can do about it. If anything is unclear, our Data Protection Officer is reachable via the contact details in Section 14.
02 Data Controller
For the purposes of the Data Privacy Act of 2012, phlink is the personal information controller in respect of all personal data collected through the phlink platform. phlink determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data privacy law.
phlink has appointed a Data Protection Officer (DPO) who oversees compliance with this Policy, handles data subject rights requests, and serves as the primary point of contact with the National Privacy Commission. The DPO's contact details are provided in Section 14 of this Policy.
03 Personal Data We Collect
phlink collects personal data through several channels: directly from you during registration and KYC verification, automatically through your use of the platform, and from regulated third-party verification providers. The categories of personal data we collect are set out in the table below.
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number (passport, SSS, PhilHealth, driver's licence) | Provided by you during registration and KYC |
| Contact Data | Email address, Philippine mobile number, residential address (barangay, city/municipality, province) | Provided by you during registration |
| Financial Data | GCash or PayMaya account reference, BDO/BPI/Metrobank/UnionBank account name, deposit and withdrawal history in Philippine Peso (₱) | Provided by you and generated by platform transactions |
| Gaming Activity Data | Bet history, game session logs, wagering amounts, bonus claims, win/loss records | Automatically generated by your platform activity |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps, cookies | Automatically collected via platform systems |
| Identity Verification Documents | Scanned or photographed copies of government-issued IDs, selfies with ID for liveness verification, proof of address documents | Provided by you during KYC; processed by phlink's KYC provider |
| Communications Data | Live chat transcripts, support ticket content, email correspondence with phlink | Generated when you contact phlink support |
| Responsible Gaming Data | Deposit limit settings, loss limit configurations, self-exclusion status, session time preferences | Set by you via account dashboard; recorded by phlink |
3.1 Data You Are Not Required to Provide
Providing accurate identity and contact data is a mandatory requirement for maintaining a phlink account under PAGCOR's KYC obligations. However, phlink does not require you to provide sensitive personal information beyond what is necessary for identity verification, payment processing, and responsible gaming compliance. You will not be asked for your religious beliefs, political affiliations, or health records unless strictly required for responsible gaming assessment purposes and with your explicit consent.
04 How We Use Your Personal Data
phlink uses the personal data it collects for the following purposes:
- Account management: To create, verify, maintain, and close your phlink account, including processing your phlink login credentials and enabling two-factor authentication (2FA) via SMS OTP to your registered Philippine mobile number.
- KYC and identity verification: To verify your identity, confirm your age is 21 years or above as required under PAGCOR regulations, and comply with phlink's know-your-customer obligations.
- Payment processing: To process deposits and withdrawals in Philippine Peso (₱) via GCash, PayMaya, BDO, BPI, Metrobank, and UnionBank, and to verify that payment methods are registered in your name.
- Gaming services delivery: To provide access to phlink's casino games, bingo rooms, slot games, live dealer tables, and sportsbook features, including maintaining your bet history and game session records.
- Bonus and promotion administration: To assess your eligibility for phlink promotions, apply bonus credits to your account, and track wagering requirement fulfilment.
- Responsible gaming monitoring: To monitor your gaming activity for signs of problem gambling behaviour, enforce deposit and loss limits you have set, apply self-exclusion where requested, and fulfil phlink's responsible gaming obligations.
- Legal and regulatory compliance: To comply with PAGCOR reporting requirements, AMLC anti-money laundering obligations, NPC data privacy obligations, and any other applicable Philippine law or regulatory direction.
- Fraud and security: To detect, investigate, and prevent fraud, money laundering, account takeover, bot activity, and other prohibited conduct as defined in phlink's Terms and Conditions.
- Customer support: To respond to your support inquiries, live chat sessions, complaints, and dispute resolution requests.
- Platform improvement: To analyse aggregated, anonymised usage data to improve phlink's platform performance, game selection, and user experience for Filipino players.
- Marketing communications (with consent): To send you promotional offers, bonus notifications, and platform updates via email or SMS, where you have provided explicit consent. You may withdraw consent at any time via your account dashboard notification preferences.
05 Legal Bases for Processing
Under the Data Privacy Act of 2012 and its Implementing Rules, phlink processes your personal data on one or more of the following legal bases:
- Contractual necessity: Processing is necessary to perform the contract between you and phlink (i.e., the Terms and Conditions) — including account registration, payment processing, game access, and customer support.
- Legal obligation: Processing is required to comply with PAGCOR licensing conditions, AMLC anti-money laundering reporting obligations, NPC data privacy requirements, and other applicable Philippine laws and regulations.
- Legitimate interests: Processing is necessary for phlink's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided these interests are not overridden by your data protection rights.
- Consent: For marketing communications and any processing of sensitive personal information beyond KYC requirements, phlink relies on your freely given, specific, informed, and unambiguous consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
06 Cookies & Tracking Technologies
phlink uses cookies and similar tracking technologies on the phlink.org website to support platform functionality, maintain your phlink login session, and analyse platform usage. The types of cookies used are described below:
- Strictly necessary cookies: Required for core platform functionality, including maintaining your authenticated phlink login session, remembering your language preference, and enabling secure payment flows. These cookies cannot be disabled without impairing platform functionality.
- Functional cookies: Enable enhanced functionality such as remembering your responsible gaming settings, preferred game categories, and notification preferences between sessions.
- Analytics cookies: Used in anonymised, aggregated form to understand how Filipino players use the phlink platform — including which games are most popular, where users encounter difficulties, and how navigation patterns can be improved. No individual user is identified in analytics reports.
- Security cookies: Used to detect fraudulent activity, bot behaviour, and suspicious login patterns — including multiple phlink login attempts from unusual IP addresses or device combinations.
You can manage cookie preferences via your browser settings. Please note that disabling strictly necessary cookies will prevent you from completing the phlink login process and accessing your account. phlink does not use third-party advertising cookies or serve personalised ads based on your browsing history on other websites.
phlink does not share cookie or tracking data with advertising networks, data brokers, or social media platforms. All tracking on phlink.org is limited to first-party operational and security purposes.
07 Sharing Your Personal Data
phlink does not sell, rent, or trade your personal data to any third party. Personal data may be shared only in the following limited circumstances:
- Payment processors: GCash (Mynt — Globe Fintech Innovations), PayMaya (Maya Bank), BDO Unibank, BPI (Bank of the Philippine Islands), Metrobank, and UnionBank, as necessary to process your deposits and withdrawals in Philippine Peso. These entities process data under their own privacy policies and relevant Bangko Sentral ng Pilipinas (BSP) regulations.
- KYC and identity verification providers: Licensed third-party providers engaged by phlink to perform document verification, liveness checks, and identity matching as part of the KYC process. These providers act as data processors under written agreements with phlink.
- PAGCOR: phlink may be required to share account, gaming, and transaction data with PAGCOR in connection with its regulatory oversight responsibilities, audit requests, or compliance examinations.
- Anti-Money Laundering Council (AMLC): phlink is legally required to report covered and suspicious transactions to the AMLC under the Anti-Money Laundering Act (RA 9160, as amended). Required disclosures are made strictly in compliance with AMLC reporting obligations.
- National Privacy Commission (NPC): In the event of a personal data breach or in response to a formal NPC inquiry, phlink will share data as required under the Data Privacy Act of 2012 and NPC issuances.
- Law enforcement and courts: Where phlink is required by a valid court order, subpoena, or lawful direction from a Philippine law enforcement authority to disclose personal data, phlink will comply to the extent required by law.
- Game software providers: Some game session data is processed by phlink's licensed game software providers to operate game functionality, maintain RNG certification, and compute RTP statistics. Game providers process data solely for game delivery purposes under data processing agreements with phlink.
No international data sales. phlink does not engage in cross-border data transfers for commercial purposes. Any cross-border transfer of personal data (e.g., to a game software provider with servers outside the Philippines) is conducted under appropriate contractual safeguards as described in Section 12.
08 Data Retention
phlink retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | AMLC record-keeping requirements |
| Financial transaction records | 5 years from transaction date | AMLC Act (RA 9160, as amended) |
| KYC documents | Duration of account + 5 years after closure | PAGCOR KYC requirements |
| Gaming session logs | 3 years from session date | Dispute resolution and regulatory audit |
| Support communications | 3 years from last interaction | Contractual and complaint resolution |
| Marketing consent records | Until consent is withdrawn + 3 years | Data Privacy Act compliance |
| Responsible gaming records | Duration of account + 3 years after closure | PAGCOR responsible gaming obligations |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymised data is retained for analytical purposes, it no longer constitutes personal data under the Data Privacy Act of 2012.
09 Your Data Subject Rights
Under the Data Privacy Act of 2012 and NPC regulations, you have the following rights in respect of your personal data held by phlink:
- Right to be informed: The right to be told what personal data phlink collects about you, why it is collected, and how it is used — which this Policy fulfils.
- Right of access: The right to obtain a copy of the personal data phlink holds about you, including your account profile, KYC records, transaction history, and gaming activity logs. Requests can be submitted via the live chat on your account dashboard.
- Right to rectification: The right to have inaccurate or incomplete personal data corrected. You may update basic contact details directly in your account settings; corrections to identity documents require verification.
- Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and no overriding legal basis for retention exists (including AMLC and PAGCOR retention obligations).
- Right to object: The right to object to processing of your personal data for direct marketing purposes or where processing is based on phlink's legitimate interests. Objections to marketing processing can be actioned immediately via account notification settings.
- Right to data portability: The right to receive a structured, machine-readable copy of personal data you have provided to phlink, where technically feasible, to transmit to another controller.
- Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe phlink has processed your personal data in breach of the Data Privacy Act of 2012. NPC contact details are available at the NPC's official government website.
How to exercise your rights: Submit a data subject rights request via the 24/7 live chat on your phlink account dashboard, or email phlink's Data Protection Officer at the address listed in Section 14. phlink will acknowledge your request within five (5) business days and respond within thirty (30) calendar days in accordance with NPC guidelines.
10 Data Security
phlink implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
- TLS 1.2 / 1.3 encryption for all data in transit between your device and phlink servers.
- AES-256 encryption for sensitive personal data stored at rest, including government ID document scans and financial account references.
- Multi-factor authentication for all phlink staff access to systems containing personal data.
- Role-based access controls limiting internal access to personal data to staff who require it for their specific job function.
- Regular independent security assessments and penetration testing of phlink's platform infrastructure.
- Incident response and breach notification procedures in accordance with NPC Circular 16-03.
- Secure deletion protocols for personal data that has reached the end of its retention period.
While phlink takes all reasonable precautions to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your phlink login credentials and for notifying phlink immediately if you suspect any unauthorised access to your account.
11 Children's Privacy
The phlink platform is strictly for persons aged 21 years and above, as required by PAGCOR regulations governing casino-style online gambling in the Philippines. phlink does not knowingly collect personal data from any person under the age of 21.
Age verification is a mandatory step in the phlink account registration and KYC process. Any account identified as belonging to a person under 21 years of age will be immediately closed, all associated funds returned to the deposited payment method, and the matter reported to PAGCOR as required.
If you are a parent or guardian and believe a minor has created a phlink account using falsified age information, please contact phlink support immediately via the live chat or by email at the address in Section 14. phlink will investigate and act promptly.
12 Cross-Border Data Transfers
Some of phlink's game software providers and technology service partners operate servers located outside the Republic of the Philippines. Where personal data is transferred to a country or territory outside the Philippines in connection with these services, phlink ensures that such transfers are protected by one or more of the following safeguards:
- A contractual data processing agreement incorporating the standard data protection clauses recommended by the National Privacy Commission.
- A determination that the recipient country provides an adequate level of protection for personal data that is equivalent to the standards set out in the Data Privacy Act of 2012.
- Your explicit consent to the specific transfer, where required.
phlink does not transfer personal data internationally for commercial resale, advertising, or data brokerage purposes. Cross-border transfers are limited to the operational requirements of delivering gaming services, processing payments, and maintaining platform security.
13 Policy Updates
phlink reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, new regulatory requirements from the NPC or PAGCOR, or improvements to the phlink platform. When material changes are made, phlink will notify registered users via the platform interface or by email to your registered phlink account address at least seven (7) days before the updated Policy takes effect.
The updated Policy will be published at phlink.org/privacy-policy with a revised effective date at the top of the document. Your continued use of the phlink platform after the updated Policy takes effect constitutes your acceptance of the revised terms. If you do not agree with any material update, you may close your account by contacting phlink support.
We encourage you to review this Policy periodically to stay informed about how phlink protects your personal data. The "Last Updated" date at the top of this page indicates when the most recent revision was made.
14 Contact & Data Protection Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or phlink's data processing practices, or if you wish to exercise any of your data subject rights under the Data Privacy Act of 2012, please contact phlink's Data Protection Officer through the following channels:
Email: [email protected]
Live Chat: Available 24/7 via your phlink account dashboard
Response Time: Within 5 business days for data subject rights requests; within 72 hours for urgent security or breach-related matters
If you believe phlink has not adequately addressed your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. The NPC is the independent government body responsible for administering and enforcing the Data Privacy Act of 2012.
Your Privacy Is Protected at phlink
Now that you know how phlink safeguards your personal data, you can enjoy our casino games, bingo rooms, and slot titles with complete peace of mind. Filipino players across Manila, Cebu, Davao, and beyond trust phlink for secure, fair, and responsible online gaming in Philippine Peso.
phlink enforces a strict 21+ age policy. Please gamble responsibly.