Your privacy matters to us. This Privacy Policy explains exactly what personal data Phlaro collects, why we collect it, how we use it, and the rights you have under Philippine law. We keep it straight — no hidden surprises.
Six core principles that guide how Phlaro handles your personal data every single day.
Phlaro operates in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and the regulations issued by the National Privacy Commission (NPC). Your data rights are protected by law.
All personal data transmitted between your device and Phlaro's servers is protected using TLS 1.3 encryption. Stored data is encrypted at rest. Your information is never transmitted in plain text.
Phlaro does not sell, rent, or trade your personal data to third-party marketers or advertisers. Your information is used solely to operate the platform and comply with legal obligations — nothing else.
We tell you exactly what data we collect and why. No vague language, no buried clauses. If we need to collect something new, we update this policy and notify you before the change takes effect.
Under the DPA 2012, you have the right to access, correct, delete, and port your personal data. Phlaro makes it easy to exercise these rights through your account settings or by contacting our support team.
We only collect the personal data that is strictly necessary for the purposes described in this policy. We do not collect data speculatively or for purposes we cannot clearly justify to you and to regulators.
Phlaro ("we," "us," or "our") is committed to protecting the privacy and personal data of all individuals who interact with our platform at phlaro.today (the "Platform"). This Privacy Policy describes how Phlaro collects, uses, stores, shares, and protects personal data in connection with the operation of our online gaming services.
This Privacy Policy applies to all registered players, visitors to the Platform, and any individual whose personal data is processed by Phlaro in connection with the Services. It covers data collected through the Phlaro website, mobile application, customer support channels, and any other touchpoint through which you interact with Phlaro.
This Privacy Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, which are incorporated by reference.
Phlaro acts as the Personal Information Controller (PIC) with respect to the personal data collected through the Platform, as defined under the Data Privacy Act of 2012. As PIC, Phlaro determines the purposes and means of processing your personal data.
Phlaro has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA 2012 and this Privacy Policy. You may contact the DPO for any privacy-related inquiries, requests, or complaints:
Phlaro collects only the personal data necessary to provide the Services, comply with legal obligations, and maintain the security and integrity of the Platform. The categories of personal data we collect are described below.
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, government-issued ID number, nationality | Account registration, KYC verification, age verification (21+) |
| Contact Data | Email address, mobile number, residential address | Account communication, transaction notifications, support |
| Financial Data | GCash number, PayMaya account, bank account details (BPI, BDO, Metrobank), transaction history | Processing deposits and withdrawals, AML compliance |
| Gaming Data | Wager history, game sessions, win/loss records, bonus usage | Service delivery, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, device type, browser type, operating system, session logs | Security monitoring, fraud prevention, platform optimization |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Customer support, quality assurance, dispute resolution |
| Preference Data | Language settings, notification preferences, responsible gaming limits | Personalization, responsible gaming compliance |
Phlaro collects personal data through the following means:
You provide personal data directly to Phlaro when you: register an account; complete KYC verification; make a deposit or withdrawal; contact customer support; participate in promotions; or submit feedback. This is the primary source of personal data we hold about you.
When you access the Platform, our systems automatically collect certain technical data including your IP address, device identifiers, browser type, operating system, pages visited, session duration, and clickstream data. This data is collected through server logs, cookies, and similar tracking technologies as described in Section 8.
Phlaro may receive personal data about you from third parties in the following circumstances:
Under the Data Privacy Act of 2012, Phlaro processes your personal data on the following legal bases:
Phlaro uses the personal data we collect for the following purposes:
Phlaro does not sell your personal data. We may share your personal data with the following categories of recipients only where necessary and on a strictly need-to-know basis:
Phlaro engages third-party service providers who process personal data on our behalf as Personal Information Processors (PIPs) under the DPA 2012. These include identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), cloud hosting providers, fraud detection services, and customer support platform providers. All PIPs are bound by data processing agreements that require them to process data only on Phlaro's instructions and in compliance with the DPA 2012.
Phlaro may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or courts where required by Philippine law, a valid legal order, or where disclosure is necessary to protect the rights, property, or safety of Phlaro, its players, or the public.
In the event of a merger, acquisition, or sale of all or substantially all of Phlaro's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to the transfer taking effect.
Where personal data is transferred outside the Philippines — for example, to cloud infrastructure providers — Phlaro ensures that appropriate safeguards are in place as required by the DPA 2012, including contractual clauses that provide equivalent data protection standards.
Phlaro uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and maintain security. The types of cookies we use are described below:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, authentication, security tokens. Required for the Platform to function. Cannot be disabled. | Session / up to 24 hours |
| Functional | Remembering your language preference, game settings, and responsible gaming limits. | Up to 12 months |
| Analytics | Understanding how players use the Platform to improve performance and user experience. Data is aggregated and anonymized. | Up to 24 months |
| Security | Fraud detection, bot prevention, and identifying suspicious login patterns. | Up to 6 months |
You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect the functionality of the Platform and may prevent you from accessing certain features, including your account.
Phlaro retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with Phlaro's data disposal procedures.
Phlaro implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:
As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by Phlaro:
Right to Be InformedYou have the right to be informed of how your personal data is collected, used, and processed — which is the purpose of this Privacy Policy.
Right to AccessYou may request a copy of the personal data Phlaro holds about you, along with information about how it is being processed.
Right to RectificationYou may request correction of any inaccurate or incomplete personal data we hold about you. Some corrections can be made directly in your account settings.
Right to ErasureYou may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Right to ObjectYou may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
Right to Data PortabilityYou may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
Right to Restrict ProcessingYou may request that Phlaro restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
Right to Lodge a ComplaintYou have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe Phlaro has violated your data privacy rights.
To exercise any of these rights, please contact our Data Protection Officer at [email protected]. Phlaro will respond to all verified requests within fifteen (15) business days as required under the DPA 2012. We may need to verify your identity before processing your request.
The Phlaro platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gambling regulations. Phlaro does not knowingly collect personal data from individuals under the age of 21.
If Phlaro becomes aware that personal data has been collected from an individual under 21 years of age, we will immediately close the associated account, return any deposited funds to the payment source, and securely delete all personal data associated with that account.
If you are a parent or guardian and believe that a minor has registered on the Phlaro platform, please contact our support team immediately at [email protected] so that we can take prompt action.
Phlaro reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.
Where changes are material — meaning they significantly affect how we process your personal data or your rights as a data subject — Phlaro will provide advance notice via email to your registered address and/or a prominent notice on the Platform at least fourteen (14) days before the changes take effect.
Your continued use of the Phlaro platform following the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with the changes, you may close your account in accordance with our Terms & Conditions.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way Phlaro processes your personal data, please contact us through the following channels:
If you are not satisfied with Phlaro's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012.
Your data is protected, your privacy is respected, and your gaming experience is secure. Join hundreds of thousands of Filipino players at the carnival today. 21+ only.
By registering you confirm you are 21 years of age or older and agree to our Terms & Conditions and this Privacy Policy.