phlein Privacy Policy

1. Introduction

phlein ("phlein," "we," "us," or "our") is committed to protecting the privacy and personal data of all individuals who access or use the phlein online gaming platform at phlein.net (the "Platform"). This Privacy Policy ("Policy") describes how phlein collects, uses, stores, shares, and protects your personal information in connection with your use of the Platform.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Republic of the Philippines, and its Implementing Rules and Regulations, as well as the guidelines issued by the National Privacy Commission (NPC). By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read together with phlein's Terms and Conditions, which govern your use of the Platform. Capitalized terms not defined in this Policy have the meanings given to them in the Terms and Conditions.

2. Personal Data We Collect

phlein collects personal data that you provide directly, data generated through your use of the Platform, and data received from third parties in connection with identity verification and payment processing. The categories of personal data we collect include:

phlein does not intentionally collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. Where sensitive information is collected (such as government ID details), it is handled with heightened security measures.

3. How We Use Your Personal Data

phlein uses the personal data we collect for the following purposes:

• Account Registration and Management: To create and maintain your phlein account, verify your identity, and manage your account settings and preferences.
• Service Delivery: To provide access to games, process deposits and withdrawals, and deliver the core features of the phlein Platform.
• Identity Verification (KYC): To verify your age (21+), identity, and payment method ownership in compliance with PAGCOR requirements and anti-money laundering (AML) obligations.
• Transaction Processing: To process deposits via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels, and to process withdrawal requests.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other prohibited conduct.
• Regulatory Compliance: To fulfill our obligations under Philippine law, PAGCOR regulations, and the Data Privacy Act of 2012, including reporting obligations to regulatory authorities.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Responsible Gaming: To monitor gaming behavior and enforce responsible gaming tools such as deposit limits, session reminders, and self-exclusion where applicable.
• Platform Improvement: To analyze usage patterns, improve game offerings, and enhance the overall player experience on the phlein Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent to receive such communications. You may opt out at any time.

4. Legal Basis for Processing

phlein processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual Necessity: Processing is necessary to perform our obligations under the Terms and Conditions you have agreed to, including account management, game access, and payment processing.
• Legal Obligation: Processing is required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, AML obligations, and tax reporting requirements.
• Legitimate Interests: Processing is necessary for phlein's legitimate interests in operating a secure, fair, and commercially viable gaming platform, provided such interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities, such as marketing communications and non-essential cookies, phlein relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Cookies & Tracking Technologies

phlein uses cookies and similar technologies (such as web beacons and local storage) to operate and improve the Platform. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Used to remember your preferences, such as language settings and game display options, to provide a more personalized experience.
• Analytics Cookies: Used to collect aggregated, anonymized data about how players use the Platform, helping us identify areas for improvement. This data does not identify you personally.
• Performance Cookies: Used to monitor Platform performance, detect errors, and ensure the stability of the gaming environment.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. phlein does not use cookies to serve third-party advertising or to build advertising profiles.

6. Data Sharing & Disclosure

phlein does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors, solely to facilitate deposits and withdrawals on your behalf.
• Identity Verification Providers: Third-party KYC and AML screening services used to verify your identity and comply with regulatory obligations.
• Game Software Providers: Licensed game developers whose titles are available on the phlein Platform, to the extent necessary to deliver game services and resolve technical disputes.
• IT and Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers who process data on phlein's behalf under strict data processing agreements.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other Philippine government bodies, where disclosure is required by law or regulation.
• Law Enforcement: Philippine law enforcement agencies, where disclosure is required by a valid legal order, warrant, or subpoena.

All third-party service providers who process personal data on phlein's behalf are bound by contractual data processing agreements that require them to maintain appropriate security measures and process data only in accordance with phlein's instructions.

7. Data Retention

phlein retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and regulation. Specific retention periods include:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AML regulatory requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required under Philippine AML regulations.
• Communications Data: Support correspondence and chat transcripts are retained for up to three (3) years from the date of the communication.
• Technical and Usage Data: Retained for up to two (2) years from collection, after which it is anonymized or deleted.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with phlein's data disposal procedures.

8. Data Security

phlein implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phlein Platform.
• Encryption of sensitive data at rest, including financial information and government ID details.
• Role-based access controls ensuring that phlein staff can only access personal data necessary for their specific job functions.
• Regular security audits, vulnerability assessments, and penetration testing of the Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Comprehensive staff training on data privacy obligations and secure data handling practices.
• Incident response procedures to detect, contain, and report personal data breaches in accordance with NPC notification requirements.

While phlein takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that is likely to result in serious harm to your rights and freedoms, phlein will notify you and the National Privacy Commission within the timeframes prescribed by the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

9. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phlein:

• Right to Be Informed: You have the right to be informed of how your personal data is collected, used, and processed, as set out in this Policy.
• Right of Access: You have the right to request a copy of the personal data phlein holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update certain information directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phlein's legal and regulatory retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to phlein's overriding legitimate grounds.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe phlein has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the above rights, please contact phlein's Data Protection Officer at the email address provided in Section 12 of this Policy. phlein will respond to all verified data subject requests within fifteen (15) calendar days of receipt, or within such extended period as permitted by applicable law.

Please note that certain rights may be subject to limitations where phlein is required to retain or process your data to comply with legal obligations, including PAGCOR regulatory requirements and AML obligations.

10. Children's Privacy

The phlein Platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine gaming regulations. phlein does not knowingly collect personal data from individuals under the age of 21.

If phlein becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete such data and close the associated account. If you believe that a minor has registered on the phlein Platform, please contact our support team immediately so that we can investigate and take appropriate action.

Age verification is a mandatory step in the phlein registration and KYC process. Players who cannot provide satisfactory proof of age will not be permitted to deposit funds, access games, or process withdrawals.

11. Updates to This Privacy Policy

phlein reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this Policy.

Where changes are material — meaning they significantly affect your rights or how we process your personal data — phlein will notify registered players via email or through a prominent notice on the Platform prior to the changes taking effect. We encourage you to review this Policy periodically to stay informed about how phlein protects your information.

Your continued use of the phlein Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you must cease using the Platform and may request account closure by contacting our support team.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or phlein's data processing practices, you may contact our Data Protection Officer using the details below. All communications must be in writing. Please note that phlein cannot accept data subject requests submitted verbally.

Data Protection Officer
phlein Online Gaming Platform
Email: [email protected]
Website: phlein.net

phlein aims to respond to all privacy-related inquiries within fifteen (15) calendar days. For complex requests, we may require up to thirty (30) calendar days, in which case we will notify you of the extended timeline.

If you are not satisfied with phlein's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines through their official channels.