phkidlat Privacy Policy

1Introduction and Scope

phkidlat ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with the phkidlat online gaming platform, including registered players, prospective players, and visitors to the phkidlat website (collectively, "you", "your", "the Player").

This Privacy Policy describes how phkidlat collects, uses, stores, shares, and protects your personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines.

This Policy applies to all personal data processed by phkidlat through the following channels:

• The phkidlat website and all associated web pages;
• The phkidlat mobile platform and any associated applications;
• Customer support interactions via live chat, email, or other communication channels;
• Account registration, verification, and management processes;
• Financial transactions, including deposits and withdrawals.

2Data Controller Information

phkidlat acts as the data controller in respect of the personal data it collects and processes. As data controller, phkidlat determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection laws.

phkidlat has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection legislation. You may contact the phkidlat DPO at any time using the contact details provided in Section 15 of this Policy.

phkidlat operates in alignment with the regulatory framework of the Philippine Amusement and Gaming Corporation (PAGCOR), which may impose additional data handling requirements as part of its licensing and oversight functions.

3Personal Data We Collect

phkidlat collects the following categories of personal data, depending on your interaction with the Platform:

phkidlat does not intentionally collect sensitive personal information beyond what is necessary for identity verification and regulatory compliance. Where sensitive personal information is collected (such as government ID numbers), it is handled with the highest level of care and subject to strict access controls.

4How We Collect Your Data

phkidlat collects personal data through the following means:

• Direct Collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated Collection: Data collected automatically when you use the Platform, including through cookies, web beacons, log files, and similar tracking technologies (see Section 10);
• Third-Party Sources: Data received from payment processors (such as GCash and Maya), identity verification service providers, fraud prevention services, and regulatory bodies where permitted by law;
• Public Sources: In limited circumstances, phkidlat may collect data from publicly available sources for the purpose of fraud prevention or regulatory compliance.

5How We Use Your Personal Data

phkidlat uses your personal data for the following purposes:

• To create and manage your phkidlat account, including verifying your identity and age (21+);
• To process deposits, withdrawals, and other financial transactions on the Platform;
• To comply with our legal and regulatory obligations, including KYC, AML, and PAGCOR requirements;
• To provide customer support and respond to your enquiries and complaints;
• To monitor and enforce responsible gaming limits, self-exclusion requests, and cooling-off periods;
• To detect, investigate, and prevent fraud, cheating, money laundering, and other prohibited activities;
• To personalise your experience on the phkidlat Platform and recommend relevant games and promotions;
• To send you transactional communications, account notifications, and — where you have opted in — promotional messages;
• To analyse Platform usage and improve the quality, security, and performance of phkidlat's services;
• To resolve disputes and enforce the phkidlat Terms & Conditions.

phkidlat will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

6Legal Basis for Processing

phkidlat processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform the contract between you and phkidlat (i.e., the Terms & Conditions), including account management, game participation, and financial transactions;
• Legal Obligation: Processing is necessary to comply with applicable laws and regulations, including PAGCOR licensing requirements, AML obligations, and tax reporting requirements;
• Legitimate Interests: Processing is necessary for phkidlat's legitimate interests, including fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and interests;
• Consent: Where phkidlat relies on your consent as the legal basis for processing (e.g., for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7Sharing Your Personal Data

phkidlat does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, Maya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for the purpose of processing deposits and withdrawals;
• Identity Verification Providers: Third-party KYC and identity verification service providers engaged by phkidlat to verify player identities and comply with regulatory requirements;
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities, where required by law or regulation;
• Fraud Prevention Services: Third-party fraud detection and prevention service providers engaged to protect the integrity of the phkidlat Platform;
• IT and Infrastructure Providers: Cloud hosting, data storage, and technical service providers who process data on phkidlat's behalf under strict data processing agreements;
• Legal and Professional Advisers: Lawyers, auditors, and other professional advisers where necessary for legal proceedings, compliance, or corporate governance purposes;
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of phkidlat's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

All third parties with whom phkidlat shares personal data are required to handle that data in accordance with applicable data protection laws and phkidlat's data protection standards.

8International Data Transfers

phkidlat primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to, or accessed from, locations outside the Philippines — for example, where phkidlat uses cloud infrastructure or third-party service providers with operations in other countries.

Where personal data is transferred outside the Philippines, phkidlat ensures that appropriate safeguards are in place to protect your data, including contractual clauses that impose data protection obligations on the recipient equivalent to those required under Philippine law. phkidlat will not transfer your personal data to a country that does not provide an adequate level of data protection without first implementing appropriate safeguards.

9Data Retention

phkidlat retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

As a general guide, phkidlat applies the following retention periods:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR and AML requirements;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations;
• KYC and Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction;
• Customer Support Records: Retained for a minimum of two (2) years from the date of the interaction;
• Marketing Consent Records: Retained until you withdraw your consent or for three (3) years from the date of consent, whichever is earlier.

When personal data is no longer required, phkidlat will securely delete or anonymise it in accordance with its data disposal procedures.

10Cookies and Tracking Technologies

phkidlat uses cookies and similar tracking technologies (such as web beacons and pixel tags) to enhance your experience on the Platform, analyse usage patterns, and support security and fraud prevention measures.

The following types of cookies are used on the phkidlat Platform:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These cookies cannot be disabled as they are required for core functionality such as login sessions and security;
• Performance and Analytics Cookies: Used to collect anonymised information about how players use the Platform, helping phkidlat improve its services;
• Functional Cookies: Used to remember your preferences and personalise your experience on the Platform;
• Targeting and Advertising Cookies: Used to deliver relevant promotional content. These cookies are only placed with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phkidlat Platform. For more information about managing cookies, refer to your browser's help documentation.

11Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phkidlat:

• Right to be Informed: The right to be informed about how your personal data is collected and processed — which this Privacy Policy fulfils;
• Right of Access: The right to request a copy of the personal data phkidlat holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure: The right to request deletion of your personal data, subject to phkidlat's legal and regulatory retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

12Data Security

phkidlat implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the phkidlat Platform;
• AES-256 encryption for sensitive data stored on phkidlat's servers;
• Multi-factor authentication options for player accounts;
• Regular security audits, penetration testing, and vulnerability assessments;
• Strict access controls limiting employee access to personal data on a need-to-know basis;
• Staff training on data protection and information security best practices;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phkidlat will notify the National Privacy Commission and affected individuals in accordance with the requirements of the Philippine Data Privacy Act.

While phkidlat takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. You are responsible for maintaining the confidentiality of your phkidlat account credentials.

13Children's Privacy

The phkidlat Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine casino regulations. phkidlat does not knowingly collect personal data from individuals under the age of 21.

If phkidlat becomes aware that it has inadvertently collected personal data from a person under the age of 21, it will take immediate steps to delete that data and close the associated account. If you believe that phkidlat may have collected data from a minor, please contact us immediately using the details in Section 15.

14Changes to This Privacy Policy

phkidlat reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or regulatory obligations. When material changes are made, phkidlat will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect.

The "Last updated" date at the top of this Privacy Policy indicates when it was most recently revised. We encourage you to review this Policy periodically to stay informed about how phkidlat protects your personal data. Your continued use of the phkidlat Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

15Contact and DPO Information

If you have any questions, concerns, or requests relating to this Privacy Policy or phkidlat's handling of your personal data, please contact the phkidlat Data Protection Officer:

All email addresses above are provided as plain text for informational purposes only and are not clickable links. phkidlat's customer support team is available 24/7 via live chat on the Platform.

If you are not satisfied with phkidlat's response to your data protection enquiry, you have the right to lodge a complaint with the National Privacy Commission of the Philippines: