ph love Privacy Policy –
Your Data, Handled with Care

ph love (referred to in this Privacy Policy as "ph love," "we," "us," or "our") operates the online gaming platform accessible at phlove.app. ph love is duly licensed by the Philippine Amusement and Gaming Corporation (PAGCOR) and operates in full compliance with the Republic of the Philippines' applicable legislation governing data privacy, financial services, and online gaming.

This Privacy Policy describes how ph love collects, uses, stores, shares, and protects personal information provided by or obtained from individuals who access, register on, or use the ph love Platform ("Players" or "you"). It also describes your rights as a data subject under Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR).

ph love takes data privacy seriously. Every Filipino player on ph love — whether based in Metro Manila, Cebu, Davao, or anywhere else in the Philippines — has the right to know exactly how their information is handled. This document is written to make that as clear as possible.

• "Personal Data" means any information, whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained, or when put together with other information would directly and certainly identify an individual.
• "Sensitive Personal Information" means personal data about an individual's race, ethnic origin, political opinion, religious or philosophical beliefs, sexual life, financial situation, health data, government-issued identification numbers, or any information provided specifically for the purpose of professional licensing.
• "Data Subject" means any natural person whose personal data is processed — in the context of this Policy, this refers to registered Players on the ph love Platform.
• "Data Controller" means ph love, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any natural or juridical person, or any other body, that processes personal data on behalf of ph love.
• "Processing" means any operation or set of operations performed upon personal data, including collection, recording, organisation, storage, updating, retrieval, use, consolidation, blocking, erasure, or destruction.
• "NPC" means the National Privacy Commission of the Philippines, the regulatory authority responsible for administering and implementing RA 10173.

ph love collects the following categories of personal data from Players in connection with the registration, operation, and maintenance of their accounts:

• IP address and approximate geolocation at time of login;
• Device type, operating system, and browser version;
• Session timestamps, login history, and access logs;
• Pages visited, game categories accessed, and time spent on each section of the Platform;
• Cookie identifiers and similar tracking data as described in Section 11 of this Policy.

ph love collects personal data through the following channels and mechanisms:

• Direct collection: Data you voluntarily provide during account registration, KYC document submission, support ticket creation, or contact form submission;
• Automated collection: Technical and usage data collected automatically through server logs, session tracking, and cookie mechanisms as you interact with the ph love Platform;
• Payment processors: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, and Metrobank in connection with deposit and withdrawal processing;
• Identity verification services: Data returned by third-party KYC verification partners engaged by ph love to verify government-issued identification documents;
• Anti-fraud systems: Device fingerprint data, behavioural analytics signals, and account activity patterns analysed by ph love's fraud detection systems.

ph love processes personal data only where a lawful basis exists under RA 10173 and PAGCOR's regulatory requirements. The following table summarises the primary purposes of data processing and the corresponding legal basis:

ph love uses collected personal data strictly for the purposes set out in Section 5. More specifically, your personal data may be used to:

• Create, maintain, and administer your ph love Account and enforce account security protections;
• Verify that you meet the PAGCOR-mandated minimum age of 21 years before permitting real-money play;
• Process GCash, PayMaya, and bank deposits and withdrawals in Philippine Peso;
• Comply with PAGCOR audit requirements, including the preservation of gaming records and financial transaction logs;
• Detect, investigate, and prevent fraud, collusion, money laundering, and other prohibited conduct as described in the ph love Terms & Conditions;
• Provide personalised customer support through live chat and email;
• Send account notifications, security alerts, and responsible gaming prompts;
• Deliver promotional offers and bonus notifications where you have consented to receive marketing communications;
• Conduct internal analytics to improve Platform performance, game selection, and user experience.

ph love may share your personal data with the following categories of recipients, strictly on a need-to-know basis and under contractual data protection obligations:

• PAGCOR: ph love is legally obligated to submit gaming records, Player identity data, and financial transaction reports to PAGCOR as required by our operating license and applicable Philippine gaming regulations;
• Anti-Money Laundering Council (AMLC): ph love is required under RA 9160 as amended to file covered transaction reports and suspicious transaction reports with the AMLC in relation to qualifying financial activity;
• National Privacy Commission (NPC): In the event of a personal data breach meeting the NPC notification threshold, ph love is required by RA 10173 to notify the NPC and affected data subjects;
• Payment processors: GCash (Mynt), PayMaya (Maya Philippines), BPI, BDO, and Metrobank receive only the transaction data necessary to process your deposit and withdrawal requests;
• KYC verification partners: Third-party identity verification service providers engaged by ph love receive your government ID documents and selfie for verification purposes only, under strict contractual data processing agreements;
• Game software providers: Where required for technical operation of games, limited session data (account identifier, bet and win values, game round identifier) is shared with the relevant game provider's systems. This data does not include your name, contact details, or payment information;
• Law enforcement authorities: ph love will disclose personal data to the Philippine National Police, NBI, or other competent authorities when required to do so by a valid court order or subpoena under Philippine law.

ph love's primary data storage and processing infrastructure is located within the Republic of the Philippines. In limited circumstances, certain data processing activities — such as those performed by international game software providers or cloud infrastructure services — may involve the transfer of personal data outside the Philippines.

Where such transfers occur, ph love ensures that adequate data protection safeguards are in place, including:

• Contractual clauses incorporating data protection standards consistent with RA 10173 and its IRR;
• Confirmation that the receiving jurisdiction provides an adequate level of protection for personal data, consistent with NPC standards;
• Data processing agreements requiring international recipients to process transferred data only for the specific purpose for which it was transferred.

ph love retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and in compliance with applicable Philippine legal retention requirements. The following retention periods apply:

Following the expiry of applicable retention periods, ph love will securely delete or anonymise personal data in accordance with NPC-approved data disposal procedures.

ph love implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and the ph love Platform;
• Encrypted database storage for sensitive personal data and KYC documents at rest;
• Access controls and role-based permissions restricting employee access to personal data on a strict need-to-know basis;
• Two-factor authentication (2FA) available to all Players for Account login protection;
• Automated suspicious activity detection monitoring for unusual login patterns, IP anomalies, and access from unrecognised devices;
• Regular penetration testing and security audits conducted by independent cybersecurity specialists;
• Data breach response procedures consistent with NPC breach notification requirements under RA 10173.

ph love uses cookies and similar tracking technologies on the Platform for the following purposes:

You may manage optional cookie preferences through your browser settings. Note that disabling essential and security cookies will impair Platform functionality and may prevent Account login. ph love does not use third-party advertising tracking cookies.

As a data subject under the Philippine Data Privacy Act of 2012, you hold the following rights with respect to your personal data held by ph love. To exercise any of these rights, contact ph love via live chat or email at [email protected]:

The ph love Platform is strictly intended for individuals who are 21 years of age or older, consistent with PAGCOR's minimum age requirements for real-money online gaming in the Philippines. ph love does not knowingly collect personal data from individuals under the age of 21.

If ph love becomes aware that personal data has been collected from an individual under the age of 21 — whether through registration, deposit activity, or any other channel — ph love will immediately suspend the affected Account, delete the associated personal data to the extent permitted by legal retention obligations, and report the matter to PAGCOR as required by our operating license.

ph love may send you promotional communications — including bonus offers, tournament announcements, new game notifications, and seasonal promotions — by SMS, email, or in-Platform notification, where you have consented to receive such communications at the time of registration or through your Account notification settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in Account Settings under "Notifications";
• Clicking the unsubscribe link included in every ph love promotional email;
• Contacting ph love support via live chat and requesting removal from marketing communications.

Withdrawal of marketing consent does not affect your ability to receive essential Account communications, including security alerts, deposit confirmations, withdrawal notifications, and responsible gaming notices. These operational communications are sent regardless of marketing preferences as they are necessary for the proper functioning of your Account.

The ph love Platform does not contain links to external third-party websites. Should any third-party content appear on the Platform in connection with a specific game or service, ph love is not responsible for the data privacy practices of third-party operators. Players should review the privacy policies of any external service they access independently.

This Privacy Policy applies exclusively to personal data collected and processed by ph love in connection with the phlove.app Platform.

ph love reserves the right to amend this Privacy Policy at any time in response to changes in Philippine data privacy law, PAGCOR regulatory requirements, NPC guidance, or ph love's internal data processing practices. Amendments will be published on the Platform with a revised effective date and version number.

Where an amendment materially affects how ph love processes your personal data or your rights as a data subject, ph love will notify registered Players via email or in-Platform notification at least seven (7) calendar days before the amendment takes effect. Continued use of the ph love Platform following the effective date of an amendment constitutes acceptance of the revised Privacy Policy.