Introduction
phkidlat ("we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses our online gaming platform at phkidlat.club. This Privacy Policy describes how phkidlat collects, processes, stores, shares, and protects your personal information when you access or use our website, games, and related services.
This Privacy Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Philippine Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). By registering for a phkidlat account or continuing to use our platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy.
This Privacy Policy should be read together with our Terms & Conditions, which govern your overall use of the phkidlat platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions on matters relating to personal data, this Privacy Policy shall prevail.
Plain Language Summary: We collect your data to run your account, process payments, comply with Philippine law, and keep the platform safe. We do not sell your personal data to third parties. You have the right to access, correct, and delete your data at any time by contacting us at [email protected].
Data Controller
For the purposes of the Philippine Data Privacy Act of 2012 and this Privacy Policy, the data controller responsible for your personal information is phkidlat, the operator of the phkidlat.club platform. As data controller, phkidlat determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is carried out lawfully, fairly, and transparently.
Data Controller Contact:
Platform: phkidlat.club
Email: [email protected]
Data Protection Officer inquiries: [email protected]
phkidlat has designated a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act. The DPO is responsible for overseeing phkidlat's data protection strategy, ensuring compliance with applicable privacy laws, and serving as the primary point of contact for data subjects and the National Privacy Commission.
Data We Collect
phkidlat collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is collected. The categories of personal data we collect include the following:
3.1 Identity & Contact Data
- Full legal name as it appears on your government-issued identification
- Date of birth (used to verify the 21+ age requirement)
- Nationality and country of residence
- Email address and mobile number
- Residential address, including barangay, city or municipality, province, and postal code
3.2 Identity Verification (KYC) Data
- Copies of government-issued photo identification (Philippine passport, UMID, SSS ID, PhilHealth ID, Voter's ID, or driver's license)
- Proof of address documents (utility bills, bank statements, or barangay certificates)
- Selfie or liveness verification images where required for enhanced KYC
3.3 Financial & Transaction Data
- GCash account number or registered mobile number
- PayMaya account details
- BPI, BDO, or Metrobank account details (account name and number only — we do not store full card numbers)
- Deposit and withdrawal history, including amounts, timestamps, and payment method used
- Wagering history, game session records, and account balance information
3.4 Technical & Usage Data
- IP address and approximate geolocation derived from IP
- Device type, operating system, and browser information
- Session duration, pages visited, and features used on the phkidlat platform
- Login timestamps and access logs
- Cookie identifiers and similar tracking technologies (see Section 8)
3.5 Communications Data
- Records of your communications with phkidlat customer support, including live chat transcripts and email correspondence
- Feedback, complaints, and dispute records
- Marketing preferences and communication opt-in or opt-out records
Sensitive Personal Information: Under the Philippine Data Privacy Act, certain categories of data are classified as sensitive personal information and are subject to heightened protection. phkidlat collects government ID numbers solely for KYC verification purposes and processes this data with strict access controls. We do not collect health data, religious beliefs, political affiliations, or other sensitive personal information beyond what is strictly required for identity verification and regulatory compliance.
How We Collect Data
phkidlat collects your personal data through the following means:
4.1 Directly From You
The majority of the personal data phkidlat holds about you is provided directly by you during the account registration process, KYC verification, deposit and withdrawal transactions, customer support interactions, and when you update your account profile. You are not obligated to provide this data, but failure to do so may prevent you from accessing certain features of the phkidlat platform, including the ability to deposit, withdraw, or play games.
4.2 Automatically Through Platform Use
When you access and use the phkidlat platform, we automatically collect technical and usage data through server logs, cookies, and similar technologies. This includes your IP address, device information, browser type, session data, and gameplay activity. This data is collected to ensure the security and proper functioning of the platform, to detect fraud, and to improve the user experience for Filipino players.
4.3 From Third-Party Service Providers
phkidlat may receive personal data about you from third-party service providers engaged to support our operations, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification service providers, fraud detection and anti-money laundering screening services, and game software providers. Data received from these third parties is used solely for the purposes described in this Privacy Policy.
4.4 From Regulatory and Law Enforcement Authorities
In limited circumstances, phkidlat may receive information about you from PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other Philippine regulatory or law enforcement authorities in connection with our legal and regulatory compliance obligations.
How We Use Your Data
phkidlat uses your personal data only for the purposes described below. We do not use your data for any purpose that is incompatible with the original purpose for which it was collected without first obtaining your consent or establishing a separate legal basis.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, contact, KYC data | Contract performance |
| Age verification (21+ requirement) | Date of birth, government ID | Legal obligation |
| Processing deposits and withdrawals | Financial, transaction data | Contract performance |
| Anti-money laundering (AML) compliance | Identity, financial, transaction data | Legal obligation |
| Fraud detection and platform security | Technical, usage, financial data | Legitimate interest |
| Customer support and dispute resolution | Identity, communications data | Contract performance |
| Responsible gaming monitoring | Usage, transaction, wagering data | Legal obligation / legitimate interest |
| Marketing communications (opt-in only) | Contact, preference data | Consent |
| Platform improvement and analytics | Technical, usage data (aggregated) | Legitimate interest |
| Regulatory reporting to PAGCOR / AMLC | Identity, financial, transaction data | Legal obligation |
Marketing Opt-Out: If you have consented to receive marketing communications from phkidlat, you may withdraw that consent at any time by clicking the unsubscribe link in any marketing email, updating your communication preferences in your account dashboard, or contacting us at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.
Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012, phkidlat is required to establish a lawful basis for each category of personal data processing. phkidlat relies on the following legal bases:
- Contract Performance: Processing is necessary for the performance of the contract between you and phkidlat — specifically, to operate your account, process transactions, and deliver gaming services.
- Legal Obligation: Processing is required to comply with applicable Philippine laws and regulations, including the Data Privacy Act, Anti-Money Laundering Act, PAGCOR regulations, and age verification requirements.
- Legitimate Interest: Processing is necessary for phkidlat's legitimate interests in fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights and interests.
- Consent: For marketing communications and certain non-essential cookies, phkidlat relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time.
Data Sharing & Disclosure
phkidlat does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following limited circumstances:
7.1 Service Providers (Data Processors)
phkidlat engages trusted third-party service providers to assist in operating the platform. These providers act as data processors under our instruction and are contractually bound to process your data only for the purposes specified by phkidlat and in compliance with the Philippine Data Privacy Act. Categories of service providers include:
- Payment processors: GCash, PayMaya, BPI, BDO, Metrobank
- Identity verification and KYC service providers
- Fraud detection and anti-money laundering screening services
- Game software and platform technology providers
- Cloud hosting and data storage providers
- Customer support platform providers
- Email and SMS communication service providers
7.2 Regulatory and Law Enforcement Authorities
phkidlat is required by Philippine law to disclose certain personal data to regulatory and law enforcement authorities, including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government agencies. Such disclosures are made only to the extent required by applicable law and in accordance with proper legal process.
7.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of phkidlat's assets, your personal data may be transferred to the acquiring entity as part of that transaction. phkidlat will notify you of any such transfer and ensure that the acquiring entity is bound by privacy obligations no less protective than those set out in this Privacy Policy.
No Sale of Data: phkidlat strictly prohibits the sale of player personal data to data brokers, advertisers, or any other third party for commercial purposes. Your data is used exclusively to operate your phkidlat account and comply with our legal obligations.
Cookies & Tracking Technologies
phkidlat uses cookies and similar tracking technologies to operate the platform, remember your preferences, detect fraud, and analyze how Filipino players use our services. A cookie is a small text file placed on your device when you visit phkidlat.club.
8.1 Types of Cookies We Use
- Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
- Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations.
- Analytics Cookies: Help us understand how players navigate the platform so we can improve the user experience. Data collected is aggregated and anonymized where possible.
- Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access, and bot traffic.
8.2 Managing Cookies
You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use the phkidlat platform, including logging in and processing transactions. For analytics and functional cookies, you may opt out without affecting core platform functionality.
Note: phkidlat does not use third-party advertising cookies or cross-site tracking cookies. We do not participate in behavioral advertising networks or share cookie data with advertisers.
Data Retention
phkidlat retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration and identity data | Duration of account + 5 years after closure | PAGCOR / AML regulatory requirement |
| KYC verification documents | Duration of account + 5 years after closure | Anti-Money Laundering Act (RA 9160) |
| Financial transaction records | Duration of account + 5 years after closure | Anti-Money Laundering Act (RA 9160) |
| Customer support communications | 3 years from date of communication | Legitimate interest / dispute resolution |
| Technical and usage logs | 12 months from collection | Security and fraud prevention |
| Marketing preference records | Until consent is withdrawn + 1 year | Consent / legal compliance |
Upon expiry of the applicable retention period, phkidlat will securely delete or anonymize your personal data in accordance with our data disposal procedures. Where data is anonymized rather than deleted, the anonymized data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data under the Philippine Data Privacy Act.
Data Security
phkidlat implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:
- Encryption in Transit: All data transmitted between your device and phkidlat's servers is encrypted using TLS 1.2 or higher (256-bit SSL encryption), the same standard used by Philippine banks and financial institutions.
- Encryption at Rest: Sensitive personal data stored on phkidlat's servers, including KYC documents and financial data, is encrypted at rest using industry-standard encryption algorithms.
- Access Controls: Access to personal data is restricted to phkidlat personnel and authorized service providers who have a legitimate need to access it. All access is logged and subject to regular review.
- Two-Factor Authentication: phkidlat supports and encourages the use of two-factor authentication (2FA) for player accounts to reduce the risk of unauthorized access.
- Regular Security Audits: phkidlat conducts regular security assessments, penetration testing, and vulnerability scans to identify and remediate potential security weaknesses.
- Incident Response: phkidlat maintains a documented data breach response procedure. In the event of a personal data breach that poses a real risk to your rights and freedoms, phkidlat will notify the National Privacy Commission within 72 hours and affected players without undue delay, in accordance with the Philippine Data Privacy Act.
Your Responsibility: While phkidlat takes extensive measures to protect your data, the security of your account also depends on you. You are responsible for keeping your phkidlat login credentials confidential and for using a strong, unique password. Never share your password with anyone, including phkidlat support staff — we will never ask for your password.
Your Rights as a Data Subject
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phkidlat. These rights may be exercised by contacting our Data Protection Officer at [email protected]. phkidlat will respond to all data subject requests within thirty (30) days of receipt.
National Privacy Commission: If you are not satisfied with phkidlat's response to your data subject request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC can be reached through its official website at privacy.gov.ph or by visiting its offices in Pasay City, Metro Manila.
Children's Privacy
phkidlat strictly prohibits the use of its platform by individuals under the age of 21, in accordance with PAGCOR regulations governing casino-style online gambling in the Philippines. phkidlat does not knowingly collect personal data from individuals under 21 years of age.
If phkidlat discovers or is notified that personal data has been collected from an individual under the age of 21 , phkidlat will immediately suspend the relevant account, delete all personal data associated with that account, and refund any deposits made, in accordance with our legal obligations and responsible gaming commitments.
Age Verification: phkidlat conducts mandatory age verification for all new accounts. You must be at least 21 years old to register and play on phkidlat. Providing false information about your age during registration is a serious violation of our Terms & Conditions and may result in permanent account closure and forfeiture of funds.
Cross-Border Data Transfers
In the course of operating the phkidlat platform, your personal data may be transferred to and processed in countries outside the Philippines, including countries where our cloud hosting providers, game software providers, or other service providers maintain their infrastructure. Such transfers may occur to countries that do not have data protection laws equivalent to those of the Philippines.
Where phkidlat transfers personal data outside the Philippines, we ensure that appropriate safeguards are in place to protect your data, including:
- Contractual clauses requiring the recipient to process your data in accordance with standards equivalent to those required by the Philippine Data Privacy Act
- Transfers only to countries or organizations that have been assessed as providing an adequate level of data protection
- Binding corporate rules where transfers occur within a corporate group
Your Rights on Cross-Border Transfers: You may request information about the specific safeguards in place for cross-border transfers of your personal data by contacting our Data Protection Officer at [email protected].
Updates to This Privacy Policy
phkidlat reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When we make material changes to this Privacy Policy, we will notify you by posting a prominent notice on the phkidlat platform and, where required by law, by sending you a direct notification via email or SMS to the contact details registered on your account.
The "Last Updated" date at the top of this Privacy Policy indicates when the most recent changes were made. We encourage you to review this Privacy Policy periodically to stay informed about how phkidlat protects your personal data. Your continued use of the phkidlat platform following the posting of an updated Privacy Policy constitutes your acceptance of the changes, to the extent permitted by applicable law.
Material Changes: For changes that significantly affect your rights or how we process your personal data, phkidlat will provide at least 30 days' advance notice before the changes take effect, giving you the opportunity to review the updated policy and, where applicable, withdraw consent or close your account.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the way phkidlat processes your personal data, please contact our Data Protection Officer using the details below. We are committed to addressing all privacy-related inquiries promptly and transparently.
Data Protection Officer — phkidlat
Platform: phkidlat.club
Email: [email protected]
Response time: Within 30 days of receipt of your request, as required by the Philippine Data Privacy Act of 2012.
For complaints that have not been resolved to your satisfaction by phkidlat, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, the independent authority responsible for administering and implementing the Data Privacy Act of 2012 and ensuring compliance of the country with international standards set for data protection.