At phlagi, your privacy matters. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have as a player. We comply fully with the Republic Act No. 10173 — the Data Privacy Act of 2012 of the Philippines.
Last updated: January 1, 2026 | Effective date: January 1, 2026
RA 10173 Compliant
phlagi fully complies with RA 10173 (Data Privacy Act of 2012) and all NPC regulations governing personal data in the Philippines.
All data transmitted to and from phlagi is protected by industry-standard SSL/TLS encryption. Your information is never stored in plain text.
phlagi does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Ever.
You have the right to access, correct, and request deletion of your personal data held by phlagi at any time, in line with Philippine law.
phlagi ("phlagi," "we," "us," or "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the phlagi online casino platform (the "Platform"). This Privacy Policy ("Policy") describes how phlagi collects, uses, stores, shares, and protects personal information in connection with your use of the Platform, including all games, features, promotions, customer support services, and any associated mobile-optimized interfaces.
This Policy applies to all registered players, prospective players, and visitors to the phlagi Platform. It should be read together with our Terms and Conditions and our Responsible Gaming Policy, both of which are incorporated herein by reference.
By using the phlagi Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately.
For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, phlagi acts as the personal information controller ("PIC") in respect of the personal data it collects from players and users of the Platform.
As a personal information controller, phlagi determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with applicable Philippine data privacy regulations and the guidelines issued by the National Privacy Commission (NPC).
phlagi has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data privacy laws. You may contact the DPO at: [email protected]
phlagi collects personal data that is necessary for the provision of its services, compliance with legal obligations, and the improvement of the Platform experience. The categories of personal data we collect include:
phlagi does not collect sensitive personal information (as defined under RA 10173) beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect information about your race, religion, health condition, or political affiliations.
phlagi collects personal data through the following means:
phlagi uses the personal data it collects for the following purposes:
| Purpose | Data Used |
|---|---|
| Account registration and management | Identity, contact, and verification data |
| Age and identity verification (KYC) | Identity documents, date of birth, selfie data |
| Processing deposits and withdrawals | Financial and payment data |
| Providing gaming services and platform features | Gaming activity and session data |
| Fraud prevention and security monitoring | Technical data, financial data, gaming activity |
| Anti-money laundering (AML) compliance | Identity, financial, and transaction data |
| Responsible gaming monitoring and intervention | Gaming activity, session data, RG tool usage |
| Customer support and dispute resolution | Communications data, identity data |
| Sending promotional offers and platform updates | Contact data, gaming preferences (with consent) |
| Platform analytics and improvement | Technical data, gaming activity data |
| Compliance with legal and regulatory obligations | All categories as required by law |
phlagi will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable law.
Under the Data Privacy Act of 2012, phlagi processes your personal data on the following legal bases:
phlagi does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:
phlagi engages trusted third-party service providers to assist in operating the Platform, including KYC and identity verification providers, payment processors (GCash, PayMaya, banking partners), fraud detection and cybersecurity firms, cloud hosting and infrastructure providers, and customer support platform providers. All service providers are contractually bound to process personal data only on phlagi's instructions and in accordance with applicable data privacy laws.
phlagi may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or other government authorities where required by law, court order, or regulatory directive. Such disclosures will be made only to the extent required and will be documented in accordance with phlagi's internal compliance procedures.
In the event of a merger, acquisition, restructuring, or sale of all or part of phlagi's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the applicable privacy terms of the acquiring entity prior to the transfer taking effect.
phlagi will never share your personal data with advertisers, data brokers, or any third party for their own independent marketing or profiling purposes.
phlagi uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, and gather analytics data. The types of cookies we use include:
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For more information on managing cookies in your browser, refer to your browser's help documentation.
phlagi retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce agreements. Specific retention periods include:
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with phlagi's data disposal procedures.
phlagi implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:
Security Incident Notification: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phlagi will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with RA 10173.
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by phlagi:
To exercise any of the above rights, please contact phlagi's Data Protection Officer at [email protected]. phlagi will respond to all verified data subject requests within thirty (30) days of receipt, in accordance with NPC guidelines.
The phlagi Platform is strictly intended for individuals who are at least twenty-one (21) years of age. phlagi does not knowingly collect personal data from individuals under the age of 21. If phlagi becomes aware that personal data has been collected from a person under 21, it will take immediate steps to delete that data and close the associated account.
If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to phlagi, please contact us immediately at [email protected] so that we can take appropriate action.
phlagi primarily processes and stores personal data within the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines — for example, cloud infrastructure providers or international KYC platforms — phlagi ensures that such transfers are subject to appropriate safeguards, including contractual data processing agreements that impose data protection standards equivalent to those required under Philippine law.
phlagi will not transfer your personal data to any country or territory that does not provide an adequate level of data protection without first implementing appropriate safeguards and, where required, obtaining your consent.
The phlagi Platform may contain links to third-party websites or services for informational purposes. phlagi is not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit. This Policy applies solely to personal data collected by phlagi through the phlagi Platform.
phlagi reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. The date of the most recent revision will be indicated at the top of this page.
Where changes are material, phlagi will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect. Your continued use of the phlagi Platform following the publication of any updated Policy constitutes your acceptance of the revised terms.
If you have any questions, concerns, or requests regarding this Privacy Policy or phlagi's data processing practices, please contact us through the following channels:
You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe your data privacy rights have not been adequately addressed by phlagi.
Six ways phlagi keeps your personal data safe and respected
Every byte of data you send to phlagi travels over SSL/TLS encrypted connections. Your login, deposits, and personal details are always protected in transit.
phlagi collects only what is strictly necessary to provide services and meet legal obligations. We don't ask for information we don't need.
This Policy tells you exactly what we collect, why, and who we share it with. No hidden data practices, no vague language — just clear, honest disclosure.
When you close your phlagi account and your legal retention period expires, your personal data is securely deleted or anonymized — not kept indefinitely.
Only authorized phlagi personnel with a legitimate need can access your personal data. All access is logged, monitored, and regularly audited.
phlagi is fully compliant with the National Privacy Commission's guidelines and the Data Privacy Act of 2012. Your rights under Philippine law are always upheld.
Your data is protected, your privacy is respected, and your experience is our priority. Join thousands of Filipino players who trust phlagi every day.
21+ only. Please play responsibly. phlagi operates under the PAGCOR-regulated framework.