phplu
Privacy Policy

1. Introduction

phplu ("phplu," "we," "us," "our") operates the online gaming platform accessible at phplu.cam and related services. This Privacy Policy sets out how phplu collects, processes, stores, discloses, and protects personal information obtained from individuals ("you," "your," "Player") who register for or use the phplu platform.

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations as issued by the National Privacy Commission (NPC). By creating a phplu account or accessing any part of the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

phplu takes the privacy of Filipino players seriously. Whether you're logging in from Manila, playing slots on your lunch break in Cebu, or catching a live baccarat session from Davao — your personal information deserves the same level of protection regardless of where in the Philippines you are. This Policy explains precisely what that protection looks like in practice.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, phplu acts as the personal information controller (PIC) in respect of all personal data collected from players using the phplu platform. phplu is responsible for determining the purposes and means by which your personal data is processed.

phplu has designated a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173 and this Privacy Policy. Data-related inquiries, access requests, and complaints may be directed to phplu's support team at [email protected], clearly marked for the attention of the Data Protection Officer.

3. Personal Data We Collect

3.1 Registration Data

When you create a phplu account, we collect the following information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (for age verification — players must be 21 years or older)
• Philippine mobile number
• Email address
• Username and encrypted password
• Residential address (for identity verification and compliance purposes)

3.2 Identity Verification Data

To comply with PAGCOR Know Your Customer (KYC) requirements and Philippine anti-money laundering regulations, phplu may request:

• Government-issued photo identification (Philippine passport, driver's license, PhilSys National ID, UMID, or PRC ID)
• Proof of residential address (utility bill, bank statement, or barangay certification issued within the last three months)
• Proof of ownership of the payment method used for deposits (e.g., screenshot of GCash or Maya account registered in your name)
• Source of funds declaration where required by applicable regulations

3.3 Financial Transaction Data

phplu records all financial activity on your account, including:

• Deposit amounts, dates, and payment methods used
• Withdrawal requests, amounts, and processing outcomes
• GCash or Maya account identifiers (masked except for verification purposes)
• Transaction reference numbers issued by payment processors
• Wallet balance history

3.4 Gaming Activity Data

phplu maintains records of your gaming activity on the platform, including:

• Games played, wagers placed, and outcomes received
• Session start and end times
• Bonus and promotional usage history
• Responsible gaming settings and tool activations (e.g., deposit limits set, self-exclusion activations)

3.5 Technical & Device Data

phplu automatically collects certain technical data when you access the platform:

• IP address and approximate geographic location
• Device type, operating system, and browser type and version
• Session logs, page visit history on phplu.cam, and feature interaction data
• Cookie identifiers and similar tracking technology data (see Section 8)

4. How We Collect Your Data

phplu collects personal data through the following means:

• Direct collection: Information you actively provide when registering an account, completing identity verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and device data gathered automatically as you use the phplu platform, including through cookies, session tracking, and server logs.
• Third-party sources: Identity verification data confirmed through KYC service providers; transaction data received from payment processors including GCash, Maya, and bank transfer systems; and fraud-screening data from compliance service partners.
• Regulatory bodies: In certain circumstances, phplu may receive information about players from PAGCOR or other Philippine government agencies in connection with its regulatory obligations.

5. How phplu Uses Your Personal Data

phplu processes your personal data for the following purposes:

5.1 Account Management & Service Delivery

To create and maintain your phplu account; to authenticate your identity at login; to process deposits and withdrawals through GCash, Maya, and other payment methods; to provide access to games and platform features; and to communicate account-related information including transaction confirmations, security alerts, and service notifications.

5.2 Regulatory Compliance & Legal Obligations

To comply with PAGCOR licensing conditions and reporting requirements; to meet obligations under the Anti-Money Laundering Act (AMLA) and its amendments; to conduct KYC verification and ongoing due diligence; to respond to lawful requests from Philippine government agencies, courts, and law enforcement; and to enforce phplu's Terms and Conditions.

5.3 Responsible Gaming

To monitor gaming activity for indicators of problem gambling behaviour; to administer deposit limits, loss limits, session time tools, cooling-off periods, and self-exclusion requests set by players; to comply with PAGCOR's responsible gaming requirements; and to provide appropriate support and referrals to players who may be experiencing gaming-related harm.

5.4 Security & Fraud Prevention

To detect, investigate, and prevent fraud, money laundering, unauthorized access, bonus abuse, and other prohibited activities; to monitor login activity for unusual patterns that may indicate account compromise; and to maintain the integrity of phplu's gaming environment for all players.

5.5 Platform Improvement & Analytics

To analyze aggregated and anonymized usage data to improve platform performance, user experience, and game selection; to troubleshoot technical issues; and to understand how Filipino players use phplu across different devices and regions. phplu does not use individual player profiles for automated decision-making that produces legal or similarly significant effects without human review.

5.6 Marketing Communications (With Consent Only)

Where you have opted in to marketing communications, phplu may send you information about promotions, bonuses, new game launches, and relevant offers by SMS or email. You may withdraw your marketing consent at any time by contacting phplu support or updating your account communication preferences. Withdrawal of marketing consent does not affect phplu's ability to send you transactional or service-related communications.

6. Legal Basis for Processing

phplu processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract between you and phplu — specifically, providing you with access to the gaming platform, processing your transactions, and managing your account.
• Legal obligation: Processing required to comply with PAGCOR regulations, AMLA obligations, tax reporting requirements, and other applicable Philippine laws.
• Legitimate interests: Processing necessary for phplu's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Data Sharing & Disclosure

phplu does not sell, rent, or share your personal data with third parties for their own commercial purposes. phplu may share your personal data with the following categories of recipients strictly for the purposes described in this Policy:

7.1 Payment Processors

GCash, Maya, BPI, BDO, Metrobank, and other payment service providers receive the minimum personal data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by contractual data protection obligations when processing data on phplu's behalf.

7.2 Identity Verification Providers

phplu engages KYC and identity verification service providers to assist with document verification and fraud screening. These providers process your identity documents on phplu's behalf and are contractually prohibited from using your data for any other purpose.

7.3 Regulatory Bodies and Government Authorities

phplu is required by law to provide personal data and gaming activity information to PAGCOR and other Philippine regulatory and law enforcement agencies upon lawful request. phplu will also comply with court orders and legal processes requiring disclosure of player information.

7.4 Game Providers

Certain game providers who supply live casino, slot, or other game content to phplu may receive limited session and wagering data necessary to deliver their games. Game providers are contractually required to treat this data confidentially and in accordance with applicable data protection standards.

8. Cookies & Tracking Technologies

phplu uses cookies and similar tracking technologies on phplu.cam to deliver and improve the platform. The following types of cookies are used:

• Essential cookies: Required for the platform to function — including session management, login authentication, and security features. These cannot be disabled without affecting your ability to use phplu.
• Functional cookies: Used to remember your preferences, language settings, and responsible gaming tool configurations between sessions.
• Analytics cookies: Used to collect aggregated, anonymized data about how players navigate the platform, which helps phplu improve performance and usability.
• Security cookies: Used to detect fraudulent logins, unusual activity patterns, and other security threats in real time.

phplu does not use third-party advertising cookies or tracking pixels for the purpose of targeted advertising on external websites. Your browser settings may allow you to control or delete cookies; however, disabling essential cookies may prevent you from accessing certain phplu features. For more information on managing cookies on your device, consult your browser's help documentation.

9. Data Retention

phplu retains your personal data for as long as necessary to fulfill the purposes described in this Policy, and in any case for the minimum periods required by applicable Philippine law and regulation:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR requirements and the Anti-Money Laundering Act.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction in accordance with AMLA obligations.
• Gaming activity records: Retained for three (3) years following your last gaming session, or longer where required by PAGCOR.
• Support and communication records: Retained for two (2) years from the date of the relevant communication, or longer if the matter is subject to an ongoing dispute or investigation.
• Marketing consent records: Retained until you withdraw consent and for a reasonable period thereafter as evidence of the consent.

Upon expiry of the applicable retention period, phplu will securely delete or anonymize your personal data in a manner that prevents reconstruction of individually identifiable records.

10. Data Security

phplu implements a range of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• TLS 1.3 encryption for all data in transit between your device and phplu's servers
• Encryption at rest for sensitive personal data including identity documents and payment information
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular security audits and penetration testing of phplu's platform infrastructure
• Intrusion detection systems and real-time monitoring for unauthorized access attempts
• Staff training on data protection obligations and security best practices
• Incident response procedures for data breaches, including NPC notification obligations

In the event of a personal data breach that is likely to result in harm to your rights and freedoms, phplu will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach and will inform affected players as required by RA 10173.

11. Your Data Rights Under RA 10173

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phplu:

• Right to be informed: You have the right to be informed of how phplu collects and processes your personal data, as described in this Policy.
• Right of access: You have the right to request confirmation of whether phplu processes personal data about you and to obtain a copy of that data.
• Right to correction: You have the right to request correction of inaccurate, incomplete, or outdated personal data held by phplu.
• Right to erasure or blocking: You have the right to request deletion or blocking of personal data where it is unlawfully processed, no longer necessary for the purpose collected, or where you withdraw consent (subject to overriding legal retention obligations).
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on phplu's legitimate interests.
• Right to data portability: Where technically feasible, you have the right to receive a structured, machine-readable copy of personal data you have provided to phplu.
• Right to damages: You have the right to seek compensation for any damage suffered as a result of phplu's inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data.
• Right to file a complaint: You have the right to file a complaint with the National Privacy Commission of the Philippines if you believe your data rights have been violated.

To exercise any of the above rights, please submit a written request to phplu support at [email protected]. phplu will respond to data rights requests within fifteen (15) business days of receipt, and will request reasonable identification verification before processing access or deletion requests.

12. Children and Minors

phplu is strictly a platform for adults. In accordance with PAGCOR regulations, the minimum age to register and use phplu is 21 years of age. phplu does not knowingly collect personal data from individuals under the age of 21.

Where phplu discovers or has reason to believe that personal data has been collected from a person under 21 years of age, phplu will immediately suspend the relevant account, delete the associated personal data, and refund any deposited funds to the original payment source. Age verification may be requested at any stage of the registration or withdrawal process.

If you believe that a minor has registered on phplu, please contact phplu support immediately at [email protected].

13. International Data Transfers

phplu's primary operations and data storage infrastructure are oriented toward the Philippine market. Where it is necessary to transfer personal data outside the Philippines — for example, to engage game providers, payment processors, or cloud infrastructure providers — phplu ensures that such transfers are subject to appropriate safeguards, including contractual data protection clauses that require recipients to protect your data to a standard equivalent to that provided under RA 10173.

phplu does not transfer personal data to countries or organizations that do not provide an adequate level of data protection without first implementing appropriate safeguards and, where required, obtaining your consent or approval from the National Privacy Commission.

14. Third-Party Links and Services

The phplu platform may contain references or links to third-party services including game providers, payment processors, and responsible gaming resources. phplu is not responsible for the privacy practices or content of these third-party services. Each third party operates under its own privacy policy, which we encourage you to review before providing any personal information. phplu's Privacy Policy applies solely to personal data collected and processed by phplu through the phplu.cam platform and related services.

15. Amendments to This Privacy Policy

phplu reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or phplu's data processing practices. Material changes to this Policy will be communicated to registered players via email to the address on file or through a prominent notice on the phplu platform at least seven (7) days before the changes take effect.

The version of the Privacy Policy displayed on phplu.cam at any given time constitutes the current operative version. Your continued use of the phplu platform after the effective date of any amendment constitutes your acknowledgment of and agreement to the updated Policy. If you do not agree with a revised Privacy Policy, you must cease using phplu and may request account closure in accordance with phplu's Terms and Conditions.

16. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or phplu's handling of your personal data, please contact phplu's Data Protection Officer through the following channel:

• Email: [email protected] (subject line: "Data Privacy Inquiry")
• Live Chat: Available 24/7 through the phplu platform
• Response Time: phplu commits to acknowledging privacy-related inquiries within 24 hours and providing a substantive response within 15 business days.

If you are not satisfied with phplu's response to your data privacy inquiry or complaint, you have the right to file a complaint with the National Privacy Commission of the Philippines. Information about the NPC complaints process is available through the NPC's official government channels.

This Privacy Policy was last updated on 1 January 2026. The version published on phplu.cam at any given time constitutes the current operative version.