phlove33 Privacy Policy —
How We Protect Your Personal Data

phlove33 ("Platform," "We," "Us," "Our") operates the online gaming platform accessible at phlove33.co. As part of delivering our services to Filipino players across the Philippines — from Metro Manila and Cebu to Davao and beyond — we necessarily collect and process personal information about you.

This Privacy Policy ("Policy") explains in clear terms what personal data we collect, why we collect it, how we use and protect it, who we share it with, how long we keep it, and what rights you have over your information. This Policy applies to all visitors to our website and all registered players on the phlove33 platform.

phlove33 is committed to complying with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA) of the Philippines, its Implementing Rules and Regulations, and all relevant issuances of the National Privacy Commission (NPC). Where phlove33 also serves players under other applicable privacy frameworks, we apply the higher standard of protection in practice.

For the purposes of the Philippine Data Privacy Act of 2012, phlove33 acts as the Personal Information Controller (PIC) in respect of the personal data of its players and website visitors. This means phlove33 determines the purposes and means by which your personal information is processed.

phlove33 has appointed a Data Protection Officer (DPO) responsible for overseeing data protection compliance, handling data subject rights requests, and acting as the primary point of contact for the National Privacy Commission. Contact details for the DPO are provided in Section 15 of this Policy.

Certain service providers engaged by phlove33 — including payment processors, game software providers, and fraud prevention services — may process personal data on our behalf as Personal Information Processors (PIPs). These parties are contractually bound to process data only as instructed by phlove33 and in accordance with applicable data protection law.

phlove33 collects personal data in two primary ways: information you provide directly, and information collected automatically through your use of the platform.

Information You Provide Directly:

Information Collected Automatically:

Under the Philippine Data Privacy Act, phlove33 relies on the following lawful bases for processing your personal information:

• Contractual Necessity: Processing required to fulfill our obligations under the phlove33 Terms & Conditions — including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including anti-money laundering (AML) obligations under Republic Act No. 9160 (as amended), PAGCOR-aligned regulatory requirements, and tax reporting obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, product improvement, and analytics — where such interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications (email, SMS) and non-essential analytics cookies — where you have provided explicit, freely given, and revocable consent.

phlove33 uses the personal data it collects for the following specific, legitimate purposes:

• Account Creation and Management: Registering your phlove33 account, verifying your identity, managing your account settings, processing your login sessions, and maintaining your account history.
• Age Verification and KYC Compliance: Verifying that you meet the minimum age requirement of 21 years as required by Philippine gaming regulations, and confirming your identity in compliance with AML obligations.
• Payment Processing: Facilitating deposits via GCash, PayMaya, BPI, BDO, and Metrobank; processing withdrawal requests; recording transaction history; and complying with financial reporting obligations.
• Game Delivery: Delivering game sessions, recording wagering activity for accuracy and dispute resolution purposes, crediting winnings, and applying promotional rewards to eligible accounts.
• Fraud Prevention and Security: Detecting and preventing unauthorized account access, fraudulent transactions, bonus abuse, money laundering, and other prohibited activities. This includes automated risk scoring and manual review of flagged accounts.
• Customer Support: Responding to your support inquiries, resolving disputes, processing complaints, and maintaining records of support interactions for quality assurance and audit purposes.
• Responsible Gaming: Monitoring gaming activity to identify patterns that may indicate problem gambling behavior; administering deposit limits, loss limits, cooling-off periods, and self-exclusion requests; and fulfilling our duty-of-care obligations to players.
• Platform Improvement: Analyzing aggregated usage data to improve platform performance, optimize the user interface, identify and fix bugs, and develop new features that better serve Filipino players.
• Legal and Regulatory Compliance: Fulfilling obligations under the Data Privacy Act, Anti-Money Laundering Act, PAGCOR regulations, and other applicable Philippine legislation; responding to lawful requests from regulatory authorities or courts.
• Marketing and Promotions (with consent): Sending promotional offers, bonus notifications, tournament announcements, and other marketing communications via SMS or email, where you have provided consent and not subsequently withdrawn it.

phlove33 does not sell, rent, or commercially trade your personal information to third parties. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: Your financial data (e.g., GCash number, transaction reference) is shared with the relevant payment service provider solely for the purpose of processing your specific deposit or withdrawal transaction. Payment processors are bound by their own regulatory obligations and data protection standards.
• Game Software Providers: Your account identifier and gaming session data may be shared with our game providers (Pragmatic Play, PG Soft, JILI, Evolution, Microgaming, Playtech, Habanero, Spadegaming) to deliver game content and resolve technical disputes. These providers operate under contractual data processing agreements with phlove33.
• Fraud and AML Service Providers: Your identity data and transaction records may be shared with third-party fraud detection and anti-money laundering compliance services engaged to protect platform integrity and fulfill regulatory obligations.
• Regulatory and Law Enforcement Authorities: phlove33 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, courts, or other Philippine government authorities where required by law or where necessary to protect the rights, property, or safety of phlove33, its players, or the public.
• Professional Advisors: Legal counsel, auditors, and other professional advisors engaged by phlove33 may access personal data as necessary in the course of their professional services, subject to confidentiality obligations.

phlove33 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, and in compliance with minimum retention periods required by Philippine law. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with phlove33's data deletion procedures. Anonymized data, which cannot identify any individual, may be retained indefinitely for statistical and analytical purposes.

phlove33 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. Key security controls in place include:

• SSL/TLS Encryption (256-bit): All data transmitted between your browser or device and the phlove33 platform is encrypted using TLS 1.2 or TLS 1.3, preventing interception by third parties.
• Password Hashing: Account passwords are stored as salted cryptographic hashes — phlove33 has no ability to retrieve your plain-text password. This means our support staff cannot tell you what your password is; they can only help you reset it.
• Two-Factor Authentication (2FA): SMS-based OTP two-factor authentication is available for all accounts and is strongly recommended. 2FA prevents unauthorized account access even if your password is compromised.
• Access Controls: Access to personal data within phlove33's systems is restricted to employees and contractors who have a legitimate business need for that access, governed by role-based access control policies and regular access reviews.
• Fraud Detection Systems: Automated systems monitor login activity, transactions, and gameplay patterns for indicators of fraud, account takeover, or money laundering, with alerts routed to the compliance team for review.
• Data Breach Response: phlove33 maintains an incident response plan for personal data breaches. In the event of a breach that poses a real risk to data subjects, phlove33 will notify the National Privacy Commission within 72 hours of discovery, and will notify affected data subjects without undue delay as required by the DPA.

phlove33 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. phlove33 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, security cookies that detect fraudulent account activity, and load-balancing cookies. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your preferences, language settings, and game lobby filters to personalize your experience. These are set on the basis of your consent and can be disabled without preventing access to core features.
• Analytics Cookies: Collect anonymized data about how players navigate and use the platform (pages visited, session duration, feature engagement) to help phlove33 identify improvements. Analytics data is aggregated and does not identify individual players. Based on consent.
• Security and Fraud Prevention: Detect patterns associated with automated bots, account takeover attempts, and prohibited use of multiple accounts. These are operationally necessary and cannot be disabled.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality. Consult your browser's help documentation for instructions on managing cookie settings on your specific browser and device.

phlove33 may send you promotional communications — including bonus offers, new game announcements, tournament invitations, and platform updates — via SMS to your registered mobile number or via email, where you have provided explicit consent to receive such communications during registration or subsequently through your account settings.

You may withdraw your consent to marketing communications at any time by:

• Updating your notification preferences in your phlove33 account settings;
• Following the opt-out or unsubscribe instructions included in any marketing SMS or email; or
• Contacting phlove33 support with a written request to remove you from marketing lists.

Withdrawal of marketing consent will be processed within 5 business days. Note that transactional communications — such as deposit confirmations, withdrawal notifications, OTPs, security alerts, and support responses — are not marketing communications and cannot be opted out of without closing your account, as they are required for the safe and proper operation of your account.

phlove33 does not knowingly collect personal data from individuals under the age of 21. The platform is strictly intended for adult users of legal gambling age as defined under Philippine regulations (21 years and above). Age verification is mandatory for all phlove33 accounts and must be completed before real-money gaming access is granted.

If phlove33 becomes aware that personal data has been collected from a person under the age of 21 — whether through misrepresentation of age during registration or any other means — the following actions will be taken immediately:

• The account will be suspended and access to all gaming features revoked;
• Any real-money balance resulting from deposits made while underage will be returned to the original payment method after deduction of any winnings (which are not payable to underage players);
• The personal data of the underage individual will be deleted from phlove33 systems as promptly as legally and technically feasible, subject to any mandatory retention obligations;
• The incident will be reported to relevant authorities where legally required.

To exercise any of your rights under the Philippine Data Privacy Act — including access, correction, deletion, objection, or data portability — submit a written request through the phlove33 support channel accessible via live chat on the platform. Your request should include:

• Your full name and phlove33 account username;
• A clear description of the right you wish to exercise;
• Sufficient information to identify the specific personal data concerned (where applicable); and
• A copy of a valid government-issued Philippine ID for identity verification purposes.

phlove33 will acknowledge your request within 3 business days and provide a substantive response within 15 business days of receipt of a complete and verifiable request. Where a request is complex or requires additional investigation, we may extend this period by a further 10 business days, with notice to you explaining the reason for the extension.

phlove33 may decline a request where it is manifestly unfounded, repetitive, or where compliance would conflict with a legal obligation (such as mandatory data retention requirements under the AMLA). In such cases, we will explain the basis for declining in writing.

Some of the third-party service providers engaged by phlove33 — including certain game software providers and technical infrastructure partners — may be located outside of the Philippines. Where personal data is transferred to a country that does not provide a level of data protection equivalent to the Philippines' Data Privacy Act, phlove33 will implement appropriate safeguards to ensure adequate protection of your information.

Such safeguards include contractual data processing agreements incorporating standard data protection clauses, which obligate the overseas recipient to process your data in accordance with standards consistent with Philippine data privacy requirements. By using phlove33, you acknowledge and consent to the transfer of your personal data to these overseas processors subject to these safeguards.

phlove33 may update this Privacy Policy periodically to reflect changes in our data processing practices, platform features, or applicable law. When we make material changes to this Policy — such as changes to the categories of data collected, the purposes for which it is used, or the rights available to you — we will provide at least 14 days' notice via a prominent notification on the phlove33 platform and/or a message to your registered mobile number.

Non-material changes, such as typographical corrections or reordering of sections for clarity, may take effect immediately upon publication. The "Effective Date" and "Version" information at the top of this Policy will be updated to reflect all changes. We encourage you to review this Policy periodically.

Your continued use of phlove33 following the effective date of a revised Privacy Policy constitutes your acknowledgment of the changes and your agreement to the updated terms. If you do not agree to the revised Policy, you must discontinue use of phlove33 and may request account closure.

If you have questions, concerns, or requests relating to this Privacy Policy or phlove33's handling of your personal data, you may contact us through the following channels:

• Live Chat: The preferred and fastest contact channel — available 24/7 through the phlove33 platform. Ideal for general privacy inquiries and data subject rights requests.
• Data Protection Officer Email (plain text): [email protected] — for formal data privacy matters, including written data subject rights requests and data breach notifications.

phlove33's Data Protection Officer is responsible for ensuring compliance with the Philippine Data Privacy Act and for handling data subject rights requests in accordance with this Policy. The DPO's contact details are registered with the National Privacy Commission of the Philippines as required by law.