phlboss Privacy Policy

1. Introduction

phlboss ("phlboss," "we," "us," or "our") is committed to protecting the privacy and personal data of all players who use the phlboss platform at phlboss.one (the "Platform"). This Privacy Policy ("Policy") describes how phlboss collects, uses, stores, shares, and protects your personal information when you access or use our services.

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). By registering an account or using the phlboss Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, phlboss is the personal information controller responsible for the personal data collected through the Platform. All inquiries, requests, and complaints relating to the processing of your personal data should be directed to our Data Protection Officer (DPO) using the contact details provided in Section 15 of this Policy.

3. Data We Collect

phlboss collects the following categories of personal data from players and users of the Platform:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, government-issued ID number, nationality	Account registration, KYC verification, age verification
Contact Data	Philippine mobile number, email address, residential address (city/province)	Account communications, transaction notifications, support
Financial Data	GCash number, PayMaya account, BPI/BDO/Metrobank account details, transaction history	Processing deposits and withdrawals, AML compliance
Technical Data	IP address, device type, browser type, operating system, session timestamps	Platform security, fraud prevention, service improvement
Usage Data	Games played, wager amounts, session duration, bonus usage, login history	Responsible gaming monitoring, personalization, regulatory reporting
Communications Data	Support chat transcripts, email correspondence, feedback submissions	Customer support, dispute resolution, service quality
Verification Documents	Scanned copies of Philippine ID, proof of address, selfie verification images	KYC compliance, identity verification, fraud prevention

phlboss does not intentionally collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance. Where sensitive personal information is collected, it is handled with the heightened protections required under the Data Privacy Act of 2012.

4. How We Collect Your Data

phlboss collects personal data through the following means:

• Direct interactions: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting our support team, or participating in promotions on the phlboss Platform.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar tracking technologies as described in Section 8.
• Third-party sources: Identity and financial verification data received from payment processors such as GCash, PayMaya, BPI, BDO, and Metrobank, as well as from identity verification service providers engaged by phlboss for KYC purposes.
• Regulatory sources: Information received from PAGCOR or other Philippine regulatory authorities in connection with our licensing and compliance obligations.

5. How We Use Your Data

phlboss uses the personal data we collect for the following purposes:

• To create, manage, and maintain your phlboss Account;
• To verify your identity and age (21+) in compliance with Philippine gaming regulations;
• To process deposits, withdrawals, and other financial transactions on the Platform;
• To detect, investigate, and prevent fraud, money laundering, and other illegal activities;
• To comply with our legal and regulatory obligations under Philippine law, including PAGCOR requirements and AML regulations;
• To provide customer support and resolve disputes;
• To send you account-related communications, including transaction confirmations and security alerts;
• To monitor your gaming activity for responsible gaming purposes and to apply any self-imposed limits or restrictions;
• To personalize your experience on the phlboss Platform;
• To send you promotional communications about phlboss offers and new games, where you have consented to receive such communications; and
• To improve the performance, security, and features of the phlboss Platform.

phlboss will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

6. Legal Basis for Processing

phlboss processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you, including operating your Account, processing transactions, and providing gaming services;
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, AML obligations, and tax reporting;
• Legitimate interests: Processing necessary for phlboss's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights; and
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including for direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Data Sharing and Disclosure

phlboss does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers engaged to process your financial transactions;
• Identity verification providers: Third-party KYC and identity verification service providers engaged by phlboss to assist with player verification;
• Technology providers: Cloud hosting, data storage, and platform infrastructure providers who process data on our behalf under strict data processing agreements;
• Game content providers: Third-party game studios and software providers whose games are available on the phlboss Platform, to the extent necessary for game operation and fairness auditing;
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities where disclosure is required by law or regulatory directive; and
• Professional advisers: Legal counsel, auditors, and other professional advisers engaged by phlboss in connection with our business operations.

All third parties with whom phlboss shares personal data are required to handle such data in accordance with applicable Philippine data privacy laws and are prohibited from using your data for their own independent purposes.

8. Cookies and Tracking Technologies

phlboss uses cookies and similar tracking technologies on the Platform to enhance your user experience, maintain session security, and gather analytics data. The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function correctly, including session management and security features. These cannot be disabled.
• Functional cookies: Remember your preferences and settings to provide a more personalized experience on phlboss.
• Analytics cookies: Collect anonymized data about how players use the Platform, helping us understand usage patterns and improve our services.
• Performance cookies: Monitor Platform performance and identify technical issues to ensure a smooth gaming experience.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phlboss Platform. For more information about the specific cookies we use, please contact our support team.

9. Data Retention

phlboss retains your personal data for as long as your Account remains active and for a period thereafter as required by applicable Philippine law and regulatory obligations. Specifically:

• Account and identity data is retained for a minimum of five (5) years following Account closure, in accordance with PAGCOR requirements and AML regulations;
• Financial transaction records are retained for a minimum of five (5) years from the date of each transaction;
• Communications data is retained for a period of three (3) years from the date of the communication; and
• Technical and usage data is retained for a period of two (2) years from collection, unless a longer retention period is required for security or legal purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with phlboss's data disposal procedures.

10. Data Security

phlboss implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phlboss Platform;
• Encryption of sensitive personal data stored in our databases;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security audits and vulnerability assessments of our systems;
• Multi-factor authentication requirements for Account access; and
• Staff training on data privacy and security obligations.

While phlboss takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your phlboss login credentials and for notifying us immediately if you suspect unauthorized access to your Account.

11. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phlboss:

• Right to be Informed: You have the right to be informed of how your personal data is being collected, processed, and used by phlboss, as set out in this Policy.
• Right to Access: You may request a copy of the personal data phlboss holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. You can update basic account information directly through your phlboss Account settings.
• Right to Erasure or Blocking: You may request deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to other forms of processing based on legitimate interests, subject to applicable legal exceptions.
• Right to Data Portability: You may request that phlboss provide your personal data in a structured, commonly used, and machine-readable format.
• Right to Damages: You have the right to seek compensation for any damages suffered as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15. We will respond to your request within a reasonable timeframe and in accordance with the requirements of the Data Privacy Act of 2012. We may need to verify your identity before processing your request.

12. Children and Minors

The phlboss Platform is strictly intended for persons aged 21 years and above, in accordance with Philippine gaming regulations. phlboss does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated Account.

If you are a parent or guardian and believe that a minor has registered on the phlboss Platform, please contact our support team immediately so that we can investigate and take appropriate action.

13. Third-Party Links

The phlboss Platform may contain references to third-party services, such as payment processors. phlboss is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of phlboss. This Policy applies solely to personal data collected and processed by phlboss through the Platform.

14. Changes to This Policy

phlboss reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes to this Policy will be communicated to registered players via the contact details on file or by prominent notice on the Platform, with reasonable advance notice where practicable. The "Last Updated" date at the top of this Policy will be revised accordingly.

Your continued use of the phlboss Platform following the effective date of any amendment to this Policy constitutes your acknowledgment of the updated terms. We encourage you to review this Policy periodically to stay informed about how phlboss protects your personal data.

15. Contact and Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by phlboss, please contact our Data Protection Officer:

Data Protection Officer – phlboss
Email: [email protected]

Our support team is also available 24/7 via live chat on the Platform to assist players across the Philippines – from Manila, Makati, and Quezon City to Cebu, Davao, and beyond.

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the government authority responsible for administering and implementing the Data Privacy Act of 2012 and ensuring compliance with its provisions.