phluck Privacy Policy

1. Introduction and Scope

phluck Gaming Corporation ("phluck") operates the online gambling website phluck.cam and related mobile applications (collectively, the "Platform" or "Services"). This Privacy Policy applies to all personal information collected from users ("you," "User," "Player") who access, register for, or use our casino games, sports betting, customer support, promotional communications, and any other services provided through the Platform.

By creating an account, submitting personal information, or using any phluck service, you acknowledge that you have read, understood, and agree to the collection, use, processing, storage, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with these terms, you must immediately cease using the Platform and contact us to request account closure and data deletion.

phluck is registered with the National Privacy Commission (NPC) of the Philippines and adheres to the principles of transparency, legitimate purpose, and proportionality as required under the Data Privacy Act of 2012. We implement appropriate organizational, technical, and physical security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a phluck account, we collect the following personal information:

• Identity Information: Full legal name as it appears on your government-issued identification, date of birth, gender, nationality, and government-issued ID number (passport, driver's license, UMID, postal ID, or Philippine national ID).
• Contact Information: Email address, mobile phone number, residential address (street, barangay, city, province, postal code).
• Financial Information: Payment method details including GCash account number, Maya account, bank account number (for InstaPay/PesoNet transfers), cryptocurrency wallet addresses, payment card information (stored by third-party payment processors in compliance with PCI-DSS standards, not by phluck directly).
• Account Credentials: Username, password (stored in encrypted, hashed format), security questions and answers, two-factor authentication settings.
• Verification Documents: Copies of government-issued ID, proof of address (utility bills, bank statements), selfies holding ID for identity verification (KYC), source of funds documentation (bank statements, payslips, tax returns) when requested for anti-money laundering (AML) compliance.
• Communication Records: Content of your communications with phluck customer support via live chat, email, phone, or social media, including timestamps, support ticket numbers, and resolution outcomes.

2.2 Information Collected Automatically

When you access or use the phluck Platform, we automatically collect certain technical and behavioral information:

• Device Information: Device type (desktop, mobile, tablet), operating system (Windows, macOS, iOS, Android), browser type and version, screen resolution, device model, unique device identifiers (IMEI, Android ID, IDFA).
• Connection Data: IP address, internet service provider (ISP), geolocation data (country, region, city derived from IP address), connection timestamps, network status.
• Usage Data: Pages visited, features used, buttons clicked, navigation paths, time spent on pages, referral sources (how you found phluck), search queries entered on the Platform.
• Gaming Activity: Bets placed (amount, type, odds), games played, session duration, win/loss records, betting patterns, wagering history, bonus claims and usage, deposit and withdrawal transactions.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, local storage, pixel tags, and similar technologies (see Section 9 for detailed cookie policy).

2.3 Information from Third Parties

phluck may receive information about you from third-party sources, including:

• Payment Processors: Transaction verification data from GCash, Maya, GrabPay, banks, and cryptocurrency payment providers.
• Identity Verification Services: Results from third-party KYC/AML verification providers that confirm your identity and screen against sanctions lists, politically exposed persons (PEP) databases, and fraud databases.
• Affiliate Partners: If you accessed phluck through an affiliate link, we may receive limited information about the referral source to attribute bonuses and commissions.
• Social Media Platforms: If you choose to register or log in using social media accounts (Facebook, Google), we may receive your public profile information, email address, and profile picture as permitted by the social media platform's privacy settings.
• Public Databases: Information from publicly available sources such as business registries, professional directories, or media reports to verify your identity and comply with regulatory obligations.

3. Legal Basis for Processing Personal Data

phluck processes your personal data based on the following legal grounds as required by the Data Privacy Act of 2012:

• Consent: You have explicitly consented to the processing of your personal data by accepting this Privacy Policy and our Terms and Conditions during account registration.
• Contractual Necessity: Processing is necessary to perform our contract with you (providing gambling services, processing deposits and withdrawals, paying out winnings) and to fulfill our obligations under our Terms and Conditions.
• Legal Obligation: We are required by law to process your data to comply with PAGCOR regulations, anti-money laundering (AMLA) obligations, tax reporting requirements, Know Your Customer (KYC) verification mandates, and data retention laws.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security monitoring, platform improvement, marketing communications (where you have not opted out), and customer support operations, provided these interests do not override your fundamental rights and freedoms.

4. How We Use Your Personal Information

phluck uses your personal information for the following purposes:

4.1 Account Management and Service Delivery

• Creating, maintaining, and managing your phluck account
• Processing registration, login, and authentication requests
• Verifying your identity and age (ensuring you are 21 years or older)
• Processing deposits, withdrawals, and financial transactions
• Recording and settling bets, calculating winnings, and paying out prizes
• Providing access to casino games, sports betting markets, and live dealer tables
• Applying bonuses, promotions, and loyalty rewards to your account

4.2 Regulatory Compliance and Legal Obligations

• Complying with PAGCOR licensing requirements and regulatory reporting obligations
• Conducting Know Your Customer (KYC) verification to prevent identity theft and fraud
• Screening against anti-money laundering (AML) watchlists, sanctions lists, and politically exposed persons (PEP) databases
• Reporting suspicious transactions to the Anti-Money Laundering Council (AMLC) as required by law
• Maintaining transaction records for audit, tax, and regulatory purposes
• Responding to lawful requests from government authorities, law enforcement agencies, and courts

4.3 Fraud Prevention and Security

• Detecting and preventing fraudulent activity, including multi-accounting, bonus abuse, collusion, and payment fraud
• Monitoring betting patterns and gameplay for suspicious behavior
• Protecting the Platform from cyberattacks, hacking attempts, and unauthorized access
• Investigating disputes, chargebacks, and user complaints
• Enforcing our Terms and Conditions and protecting our legal rights

4.4 Customer Support and Communication

• Responding to your inquiries, complaints, and support requests via live chat, email, or phone
• Sending transactional notifications (deposit confirmations, withdrawal approvals, bet settlements, bonus credits)
• Providing updates on account activity, security alerts, and policy changes
• Conducting customer satisfaction surveys and gathering feedback

4.5 Marketing and Promotional Communications

• Sending promotional emails, SMS messages, and push notifications about new games, bonuses, tournaments, and special offers (only if you have not opted out)
• Displaying personalized content and game recommendations based on your gaming preferences
• Conducting promotional campaigns, contests, and prize draws
• Analyzing marketing campaign effectiveness and user engagement

4.6 Platform Improvement and Analytics

• Analyzing user behavior and usage patterns to improve Platform functionality, design, and user experience
• Conducting A/B testing to optimize features, game selection, and promotional offers
• Developing new products, services, and features based on user feedback and data insights
• Generating aggregated, anonymized statistics and reports for business intelligence purposes

4.7 Responsible Gaming and Player Protection

• Implementing deposit limits, time limits, and self-exclusion requests
• Monitoring for signs of problem gambling behavior and intervening when necessary
• Providing access to responsible gaming tools and resources
• Ensuring compliance with underage gambling prevention measures

5. How We Share Your Personal Information

phluck does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients under specific circumstances:

5.1 Service Providers and Business Partners

We share personal information with trusted third-party service providers who perform services on our behalf, including:

• Payment Processors: GCash, Maya, GrabPay, banks, cryptocurrency payment gateways, and payment card processors to facilitate deposits and withdrawals.
• KYC/AML Verification Providers: Third-party identity verification services that confirm your identity, screen against watchlists, and assess fraud risk.
• Game Providers: Software developers and game studios (e.g., Evolution Gaming, Pragmatic Play, NetEnt) that provide casino games and live dealer services.
• Cloud Hosting and Data Storage: Cloud infrastructure providers (e.g., AWS, Google Cloud) that host our Platform and store data securely.
• Customer Support Tools: Live chat software, ticketing systems, and CRM platforms used to manage customer inquiries.
• Marketing and Analytics Services: Email marketing platforms, SMS providers, analytics tools (e.g., Google Analytics), and advertising networks.
• Cybersecurity and Fraud Prevention: Security monitoring services, DDoS protection providers, and fraud detection platforms.

All service providers are contractually required to protect your personal information, use it only for the purposes specified by phluck, and comply with applicable data protection laws.

5.2 Regulatory Authorities and Law Enforcement

We may disclose your personal information to government agencies, regulatory bodies, and law enforcement authorities when required by law or when we believe disclosure is necessary to:

• Comply with PAGCOR regulations, licensing requirements, and audit requests
• Report suspicious transactions to the Anti-Money Laundering Council (AMLC)
• Respond to lawful court orders, subpoenas, search warrants, or government investigations
• Cooperate with tax authorities (Bureau of Internal Revenue) for tax reporting purposes
• Protect our legal rights, property, and safety, or the rights and safety of our users and the public

5.3 Corporate Transactions

In the event of a merger, acquisition, reorganization, sale of assets, bankruptcy, or other corporate transaction involving phluck Gaming Corporation, your personal information may be transferred to the acquiring or successor entity. We will notify you via email and/or prominent notice on the Platform before your information is transferred and becomes subject to a different privacy policy.

5.4 Affiliate and Marketing Partners

If you accessed phluck through an affiliate link or referral code, we may share limited information (username, registration date, deposit activity) with the referring affiliate solely for the purpose of calculating and attributing commissions. Affiliates are contractually prohibited from using your information for any other purpose.

6. International Data Transfers

phluck primarily stores and processes personal data within the Philippines. However, some of our service providers and business partners are located outside the Philippines, including in the European Union, United States, Singapore, and other jurisdictions. When we transfer your personal data internationally, we ensure adequate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the National Privacy Commission
• Binding Corporate Rules for multinational service providers
• Ensuring the recipient country has been recognized by the NPC as providing adequate data protection
• Obtaining your explicit consent for specific transfers when required by law

By using phluck services, you acknowledge and consent to the transfer of your personal data outside the Philippines under these safeguards.

7. Data Retention

phluck retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our Terms and Conditions. Specific retention periods include:

• Account Information: Retained for the duration of your account plus seven (7) years after account closure to comply with PAGCOR record-keeping requirements and potential audit or dispute resolution needs.
• Transaction Records: Retained for a minimum of seven (7) years as required by Philippine anti-money laundering and tax laws.
• Verification Documents: Retained for seven (7) years after the last transaction or account closure to satisfy regulatory obligations.
• Customer Support Communications: Retained for three (3) years to resolve disputes and improve service quality.
• Marketing Communications: Retained until you unsubscribe or request deletion, after which records are deleted within 30 days.
• Security and Fraud Logs: Retained for up to three (3) years for fraud prevention and cybersecurity monitoring purposes.

After the applicable retention period expires, we securely delete or anonymize your personal data so that it can no longer be associated with you.

8. Your Data Protection Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request access to the personal information we hold about you. You can view and download your account information, transaction history, and betting records by logging into your phluck account. For additional information not available in your account dashboard, contact our Data Protection Officer.

8.2 Right to Rectification

If your personal information is inaccurate, incomplete, or outdated, you have the right to request correction or update. You can update your contact information and preferences directly in your account settings. For changes to identity information (name, date of birth), contact customer support with supporting documentation.

8.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, you withdraw consent, or you object to processing. However, we may be required to retain certain information to comply with legal obligations (e.g., PAGCOR record-keeping, AML laws, tax reporting) or to establish, exercise, or defend legal claims.

8.4 Right to Object

You have the right to object to the processing of your personal information for direct marketing purposes. You can opt out of promotional emails by clicking the "unsubscribe" link in any marketing email or by adjusting your communication preferences in your account settings. You can opt out of SMS marketing by replying "STOP" to any promotional message.

8.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format (e.g., CSV, JSON) and to transmit that data to another service provider. Contact our Data Protection Officer to request data portability.

8.6 Right to Restrict Processing

You may request that we restrict processing of your personal information in certain situations, such as when you contest the accuracy of the data, when processing is unlawful but you do not want the data deleted, or when you need the data to establish, exercise, or defend legal claims.

8.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted before withdrawal. Note that withdrawing consent may affect your ability to use certain phluck services.

8.8 Right to Lodge a Complaint

If you believe phluck has violated your data protection rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Contact details for the NPC can be found at privacy.gov.ph.

To exercise any of these rights, contact our Data Protection Officer at [email protected] or use the contact information provided in Section 14. We will respond to your request within thirty (30) days. We may request additional information to verify your identity before processing your request.

9. Cookies and Tracking Technologies

phluck uses cookies, web beacons, local storage, and similar technologies to enhance your experience on the Platform, analyze usage patterns, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize your browser and remember your preferences.

9.1 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function properly, including session management, login authentication, and security features. These cookies cannot be disabled.
• Performance and Analytics Cookies: Used to collect information about how users interact with the Platform, including pages visited, time spent, and navigation paths. This data helps us improve Platform performance and user experience. (e.g., Google Analytics)
• Functionality Cookies: Remember your preferences, language settings, and customization options to provide a more personalized experience.
• Advertising and Marketing Cookies: Track your browsing activity across websites to deliver targeted advertisements and measure the effectiveness of marketing campaigns. These cookies may be set by third-party advertising networks.

9.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies, but doing so may affect your ability to use certain features of the Platform. To learn more about managing cookies, visit your browser's help section:

• Google Chrome: chrome://settings/cookies
• Mozilla Firefox: support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
• Safari: support.apple.com/guide/safari/manage-cookies-sfri11471/mac
• Microsoft Edge: support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge

10. Data Security Measures

phluck implements industry-standard technical, organizational, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• Encryption: All data transmitted between your device and phluck servers is encrypted using TLS 1.2 or higher (SSL certificates). Sensitive data at rest, including passwords and financial information, is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized phluck employees, contractors, and service providers who need the information to perform their duties. Access is granted on a need-to-know basis and is logged for audit purposes.
• Firewalls and Intrusion Detection: Our servers are protected by firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) to defend against cyberattacks and unauthorized access.
• Regular Security Audits: We conduct regular security assessments, vulnerability scans, and penetration testing to identify and remediate potential security risks.
• Two-Factor Authentication (2FA): We offer 2FA as an additional security layer for user accounts and strongly recommend enabling it.
• Employee Training: phluck staff receive regular training on data protection best practices, confidentiality obligations, and security protocols.
• Incident Response Plan: We have established procedures to detect, respond to, and mitigate data breaches or security incidents. In the event of a breach affecting your personal data, we will notify you and the National Privacy Commission within the timeframes required by law.

While we take every reasonable precaution to protect your data, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for any activity conducted through your account.

11. Third-Party Links and Services

The phluck Platform may contain links to third-party websites, services, or applications (e.g., social media platforms, payment processors, affiliate sites). phluck is not responsible for the privacy practices or content of these third parties. We encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies only to information collected by phluck through the Platform.

12. Children's Privacy

phluck services are strictly intended for individuals who are twenty-one (21) years of age or older. We do not knowingly collect personal information from individuals under 21. If we become aware that we have inadvertently collected information from a person under 21, we will immediately delete the account and all associated data. Parents or guardians who believe their child has provided personal information to phluck should contact us immediately at [email protected].

13. Changes to This Privacy Policy

phluck reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. We will notify you of material changes by posting the updated Privacy Policy on this page with a revised "Last Updated" date and, where appropriate, by sending an email notification to the address associated with your account.

Your continued use of the Platform after changes are posted constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

14. Contact Information and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy, your personal information, or your data protection rights, please contact us:

• Data Protection Officer: [email protected]
• Customer Support: [email protected]
• Phone: +63 2 8123 4567 (Manila office, Monday-Friday, 9:00 AM - 6:00 PM PHT)
• Live Chat: Available 24/7 on the phluck Platform
• Mailing Address: phluck Gaming Corporation, Data Protection Department, 1234 Ayala Avenue, Makati City, Metro Manila 1226, Philippines

For complaints or inquiries regarding data protection, you may also contact the National Privacy Commission:

• National Privacy Commission: privacy.gov.ph
• Email: [email protected]
• Hotline: (02) 8234-2228

15. Consent and Acknowledgment

By creating a phluck account, using our services, or submitting personal information through the Platform, you acknowledge that you have read, understood, and agree to the collection, use, processing, storage, and disclosure of your personal information as described in this Privacy Policy. You consent to the processing of your personal data for the purposes outlined herein and confirm that all information provided is accurate and complete.

If you do not agree with this Privacy Policy, you must immediately cease using the Platform and contact us to request account closure and data deletion, subject to our legal retention obligations.

Compliance Statement: phluck Gaming Corporation is committed to compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and all relevant issuances of the National Privacy Commission. We continuously review and update our data protection practices to ensure the highest standards of privacy and security for our users.