phlein Casino – Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how phlein ("phlein", "we", "us", "our"), accessible at https://phlein.vip, collects, uses, discloses, and safeguards the personal information of users ("Player", "you", "your") who register, access, or use the phlein platform and its associated services.

phlein operates in accordance with the Republic of the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. By creating an account or using phlein, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read together with phlein's Terms & Conditions and Responsible Gaming Policy, which are incorporated by reference.

2. Personal Data We Collect

2.1 Registration Data

When you create a phlein account, we collect the following information:

• Full legal name;
• Philippine mobile number;
• Date of birth (to verify the 21+ age requirement);
• Username and encrypted password;
• Residential address (as required for KYC verification).

2.2 Identity Verification (KYC) Data

phlein is required to verify the identity of all players before processing withdrawals. KYC data may include:

• Government-issued photo identification (e.g., Philippine passport, SSS ID, PhilSys ID, driver's licence);
• Proof of address (e.g., utility bill, bank statement dated within 90 days);
• Selfie or liveness check for identity confirmation.

2.3 Financial Data

When you make deposits or withdrawals, phlein records transaction data including GCash account references, BDO/BPI/Metrobank account details (masked), deposit and withdrawal amounts, dates, and transaction reference numbers. phlein does not store full bank account numbers or GCash PINs.

2.4 Usage & Behavioural Data

phlein automatically collects technical and behavioural data when you use the platform, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Pages visited, games played, session duration, and click patterns;
• Login timestamps and session history.

3. How We Collect Your Data

phlein collects personal data through the following mechanisms:

• Direct collection: Information you provide when registering, completing KYC, making deposits, contacting support, or participating in promotions;
• Automated collection: Technical data collected via cookies, server logs, and analytics tools when you interact with the phlein platform;
• Third-party sources: Identity verification services, payment processors (GCash, PayMaya, BDO, BPI, Metrobank), and fraud-detection partners, used solely for the purpose of verifying your identity and processing transactions securely.

4. How We Use Your Personal Data

phlein processes your personal data for the following purposes:

• Account management: Creating and maintaining your player account, authenticating logins, and processing account changes;
• Transaction processing: Handling deposits, withdrawals, and bonus credits via GCash, PayMaya, and Philippine bank transfers;
• Regulatory compliance: Fulfilling KYC obligations, anti-money laundering (AML) checks, and reporting requirements under PAGCOR guidelines and Philippine law;
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviours and applying the tools available under phlein's Responsible Gaming Policy;
• Customer support: Responding to queries, resolving disputes, and providing assistance via phlein's 24/7 live chat team;
• Fraud prevention and security: Detecting and preventing unauthorised account access, bonus abuse, and fraudulent transactions;
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates, subject to your communication preferences and consent;
• Platform improvement: Analysing usage data to improve the phlein user experience, game library, and technical performance.

5. Legal Basis for Processing

phlein processes personal data on the following legal bases as recognised under RA 10173:

• Contractual necessity: Processing required to fulfil phlein's obligations to you under the Terms & Conditions (account management, payment processing, game access);
• Legal obligation: Processing required to comply with Philippine law, PAGCOR requirements, and AML obligations;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring;
• Consent: Processing for optional marketing communications, where you have explicitly opted in.

6. Data Sharing & Disclosure

phlein does not sell, rent, or trade your personal data. We may share data with the following categories of recipients solely to the extent necessary:

6.1 Service Providers

Trusted third-party vendors who assist phlein in operating the platform, including payment processors (GCash, PayMaya, BDO, BPI, Metrobank), KYC verification providers, cloud hosting services, and customer support technology providers. All service providers are contractually required to handle personal data securely and in accordance with this Policy.

6.2 Regulatory Authorities

phlein may disclose personal data to PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), or other Philippine government authorities when required to do so by law, court order, or regulatory demand.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of phlein's business or assets, personal data may be transferred to the relevant successor entity, provided that the successor entity agrees to honour the protections set out in this Policy.

7. Data Retention

phlein retains personal data for as long as your account is active and for a period of five (5) years following account closure, in accordance with Philippine AML regulations and PAGCOR requirements. KYC documents are retained for the duration required by law. Usage and behavioural data is retained for up to two (2) years for analytics and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. You may request early deletion of your data subject to legal retention obligations — see Section 10 for details.

8. Security Measures

phlein implements the following technical and organisational measures to protect your personal data:

• 256-bit SSL/TLS encryption for all data in transit;
• AES-256 encryption for sensitive data at rest;
• Role-based access control — only authorised personnel with a legitimate need can access personal data;
• Regular security audits and penetration testing;
• Multi-factor authentication for all phlein administrative systems;
• 24/7 intrusion detection and monitoring.

While phlein employs industry-standard security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your phlein login credentials. If you suspect unauthorised access to your account, contact phlein support immediately via live chat.

9. Cookies & Tracking Technologies

phlein uses cookies and similar tracking technologies to operate and improve the platform. Cookies used by phlein include:

• Essential cookies: Required for the platform to function (session management, login state, security tokens). These cannot be disabled without affecting platform functionality;
• Analytics cookies: Used to understand how players navigate phlein and to improve user experience. Data collected is aggregated and anonymised;
• Preference cookies: Remember your settings (e.g., language, notification preferences) across sessions.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will impair your ability to use the phlein platform.

10. Your Data Rights

Under the Philippine Data Privacy Act (RA 10173), you have the following rights with respect to personal data phlein holds about you:

• Right to be informed: You have the right to know what personal data phlein collects and how it is used — this Policy fulfils that obligation;
• Right to access: You may request a copy of the personal data phlein holds about you;
• Right to correction: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data, subject to legal retention obligations;
• Right to object: You may object to the processing of your personal data for marketing purposes at any time;
• Right to data portability: You may request a structured, machine-readable copy of personal data you have provided to phlein.

To exercise any of these rights, contact phlein's support team via live chat. phlein will respond to all data rights requests within thirty (30) days. Requests may require identity verification.

11. Children's Privacy

phlein is strictly for players who are twenty-one (21) years of age or older. phlein does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under this age threshold, the account will be immediately suspended, all associated data will be deleted, and the funds will be forfeited in accordance with phlein's Terms & Conditions.

If you believe that a minor has registered or is using a phlein account, please contact our support team immediately via live chat so that we can take appropriate action.

12. Changes to This Privacy Policy

phlein may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the Services we offer. Material changes will be communicated to registered players via their registered mobile number or email address with at least seven (7) days' notice prior to the changes taking effect.

The date of the most recent revision is always indicated at the top of this page. Continued use of phlein following the effective date of any revision constitutes your acceptance of the updated Policy. We encourage you to review this page periodically.

13. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or phlein's handling of your personal data, please reach out through the following channels:

• Live Chat: Available 24/7 directly from the phlein platform — average response time 3 minutes
• Email: [email protected]

phlein's Data Protection Officer (DPO) is responsible for overseeing compliance with RA 10173 and can be reached through the same support channels above. phlein is committed to addressing all privacy enquiries promptly and transparently.