This Privacy Policy explains what personal data ph laro collects from registered players, how it is used, who it may be shared with, how it is protected, and what rights you have over your own information under Philippine law.
Effective Date: January 1, 2026Our Commitments
Before reading the full policy, here are the six core commitments ph laro makes to every registered player regarding their personal data.
ph laro collects personal data only to the extent required to operate your Account, process payments, verify your identity, and comply with Philippine regulatory requirements. We do not collect data speculatively or for undefined future use.
All personal data held by ph laro is protected by industry-standard security measures including 256-bit SSL encryption, access controls, and regular security reviews. Only authorised personnel access player data, and only for legitimate purposes.
ph laro does not sell, rent, or trade your personal information to third parties for marketing or commercial purposes. Your data is yours. We share it only where operationally necessary or legally required — and nothing more.
Under the Philippine Data Privacy Act of 2012, you have the right to access, correct, and request deletion of your personal data. ph laro provides clear channels to exercise these rights without unnecessary barriers.
This Privacy Policy is governed by and complies with Republic Act No. 10173, the Data Privacy Act of 2012, and its implementing rules and regulations as administered by the National Privacy Commission of the Philippines.
If ph laro makes material changes to this Privacy Policy, we will communicate those changes to you via a prominent notice on the Platform and, where practicable, via your registered email address before the changes take effect.
ph laro ("we", "us", "our") operates the online gaming platform accessible at phlaro.lat. In the course of operating this Platform and providing services to registered players, ph laro collects and processes personal data relating to those players.
This Privacy Policy sets out, in clear terms, what personal data we collect, why we collect it, how it is used, who may have access to it, how long we retain it, and what rights you hold in relation to your own data under the Republic Act No. 10173, the Data Privacy Act of 2012 (the "DPA") and its Implementing Rules and Regulations.
By registering an Account on ph laro, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Privacy Policy should be read together with ph laro's Terms & Conditions, which are incorporated by reference.
If you have questions about any aspect of this Privacy Policy before registering, contact ph laro's privacy team at [email protected] before creating an Account.
For the purposes of the Philippine Data Privacy Act of 2012, ph laro is the Personal Information Controller (PIC) responsible for the personal data of registered players and website visitors. ph laro determines the purposes and means by which personal data is processed in connection with the Platform.
Where ph laro engages third-party service providers to process data on its behalf — such as payment processors, identity verification providers, or analytics platforms — those parties act as Personal Information Processors (PIPs) under ph laro's instructions and are contractually bound to process data only as directed by ph laro and in compliance with the DPA.
ph laro collects the following categories of personal data from or about registered players and Platform visitors:
ph laro does not collect full payment card numbers. Card transactions are processed by PCI-DSS compliant payment processors. ph laro receives only transaction confirmation data, not raw card details.
ph laro collects personal data through the following channels:
ph laro uses the personal data it collects for the following purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Identity, contact, date of birth |
| Age and identity verification (KYC) | Identity, KYC documents, date of birth |
| Processing deposits and withdrawals | Financial, identity, KYC documents |
| Delivering gaming services and maintaining game history | Gaming activity, technical data |
| Fraud prevention and security monitoring | Identity, financial, technical, gaming activity |
| Anti-money laundering compliance | Identity, financial, KYC documents |
| Customer support and dispute resolution | Identity, communications, gaming activity, financial |
| Responsible gaming monitoring and tool delivery | Gaming activity, Account settings, communications |
| Platform performance, analytics, and improvement | Technical, usage data (anonymised where possible) |
| Regulatory reporting obligations | Identity, financial, KYC documents, gaming activity |
ph laro does not use your personal data for unsolicited direct marketing without your prior consent. Where you have opted in to marketing communications from ph laro, you may withdraw that consent at any time by contacting [email protected].
ph laro processes personal data on the following legal bases as recognised under the Philippine Data Privacy Act of 2012:
ph laro does not sell, rent, or trade your personal data to any third party. We may share your personal data with the following categories of recipients, solely for the purposes described in this Privacy Policy:
GCash, PayMaya, Visa, Mastercard, and Philippine banking partners (BPI, BDO, Metrobank) receive the minimum financial data required to process deposit and withdrawal transactions. These providers operate under their own privacy policies and are independently regulated.
Third-party KYC service providers may receive copies of identity documents and personally identifiable information to carry out age and identity verification. These providers are contractually bound to use such data solely for verification purposes on ph laro's behalf.
Cloud hosting, data storage, cybersecurity, and platform infrastructure providers may have access to personal data as a function of providing their services. Access is limited to what is technically necessary and is governed by data processing agreements.
Where live casino or other game content is delivered by a licensed third-party provider, that provider may receive session-level data such as game played, bet amounts, and outcomes to resolve disputes or verify game integrity. No additional personal data is shared beyond what is technically required.
ph laro may disclose personal data to Philippine government agencies, PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or law enforcement bodies where required by law, court order, or regulatory directive. ph laro will notify affected players of such disclosures where legally permitted to do so.
All third parties who process personal data on ph laro's behalf are subject to written data processing agreements that restrict their use of that data to the specific purpose for which it was shared.
ph laro retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law and regulation. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account identity and contact data | Duration of Account plus 5 years post-closure | Regulatory and legal obligation |
| KYC documents | Duration of Account plus 5 years post-closure | AMLA compliance requirement |
| Financial transaction records | Duration of Account plus 5 years post-closure | AMLA and tax compliance |
| Gaming activity records | Duration of Account plus 2 years post-closure | Dispute resolution and regulatory audit |
| Customer support communications | 3 years from last interaction | Legitimate interests (dispute resolution) |
| Technical and usage data (logs) | Up to 12 months | Fraud prevention and security |
When personal data is no longer required, ph laro destroys or anonymises it in a secure manner. Anonymised data — where it can no longer be used to identify any individual — may be retained indefinitely for statistical or analytical purposes.
The ph laro Platform uses cookies and similar tracking technologies to operate core platform functions and improve the player experience. The following categories of cookies are used:
These cookies are essential for the Platform to function. They maintain your login session, remember your language preference, and ensure that the cashier and game lobby operate correctly. These cookies cannot be disabled without breaking core Platform functionality.
ph laro uses analytics tools to understand how players interact with the Platform — which pages are visited most, where players spend time, and where technical issues occur. This data is used in aggregate to improve Platform performance and game availability. Where possible, analytics data is anonymised or pseudonymised.
Functional cookies remember your preferences — such as saved payment methods, notification settings, and responsible gaming configurations — so you do not have to re-enter them on each visit. These cookies persist between sessions if you have selected "Remember me" at login.
You can manage or disable non-essential cookies through your browser settings. Note that disabling cookies may affect the functionality of certain Platform features. Strictly necessary cookies cannot be disabled via browser settings without impairing Platform access.
Under the Philippine Data Privacy Act of 2012, as a data subject you hold the following rights in relation to your personal data held by ph laro. To exercise any of these rights, contact ph laro at [email protected] with your registered Account email and a description of your request.
You have the right to be informed about what personal data ph laro collects, why it is collected, how it is used, and who it may be shared with. This Privacy Policy fulfils that obligation. You may request a summary of data processing activities at any time.
You have the right to request a copy of the personal data ph laro holds about you. ph laro will respond to verified access requests within thirty (30) days of receipt, subject to identity verification.
If any personal data ph laro holds about you is inaccurate or incomplete, you have the right to request correction. You can update some data directly from your Account settings. For corrections requiring document re-submission, contact ph laro support.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis applies. Note that erasure may not be possible where data must be retained to comply with Philippine AML or gaming regulatory requirements.
You have the right to object to processing of your personal data where ph laro relies on legitimate interests as the legal basis. ph laro will cease such processing unless it can demonstrate compelling legitimate grounds that override your privacy rights.
If you believe ph laro has handled your personal data unlawfully, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). ph laro encourages you to contact ph laro first to resolve concerns directly before escalating to the NPC.
All privacy rights requests must be submitted from your registered Account email address for identity verification purposes. ph laro will acknowledge your request within five (5) business days and respond substantively within thirty (30) days.
ph laro implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, ph laro will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach and will notify affected players without undue delay, as required by the Data Privacy Act of 2012.
The ph laro Platform is strictly for persons aged 21 years or older. ph laro does not knowingly collect personal data from anyone under the age of 21. If ph laro becomes aware that personal data has been submitted by a person under 21 during the registration process or otherwise, that Account will be immediately closed, all data associated with it will be deleted as far as permitted by law, and any deposited funds will be returned via the original payment method.
If you are a parent or guardian and believe that a minor has registered on the ph laro Platform using your or their details, contact ph laro support at [email protected] immediately so the matter can be investigated and resolved promptly.
The ph laro Platform may contain references to third-party payment providers and game content suppliers whose own privacy policies govern their data handling practices. ph laro is not responsible for the privacy practices of any third-party service provider beyond the contractual data processing obligations it imposes on them. If you interact directly with a third-party service — such as your GCash or BDO banking app — your data handling in that interaction is governed by the relevant third party's own privacy policy.
ph laro may update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements, or Platform functionality. Material changes — those that significantly affect how your personal data is collected, used, or shared — will be communicated to you via a prominent notice on the ph laro Platform and, where practicable, via the email address registered to your Account, at least seven (7) calendar days before taking effect.
The effective date at the top of this Privacy Policy indicates when the current version took effect. Your continued use of the ph laro Platform following any revision constitutes acceptance of the updated policy. If you do not accept any material change, you must close your Account before the revised policy takes effect.
For any privacy-related enquiry, access or correction request, or to lodge a complaint about ph laro's data handling practices, please contact the ph laro Privacy Team using the details below:
ph laro Privacy Team
Email: [email protected]
Subject Line: Privacy Request – [Your Registered Email]
Available: 24 hours a day, 7 days a week
Please include your registered Account email address and, where applicable, the specific right you are seeking to exercise. Identity verification will be required before any data access or deletion request is processed.
If ph laro is unable to resolve your privacy complaint to your satisfaction, you have the right to escalate to the National Privacy Commission of the Philippines (NPC), the independent regulator responsible for enforcing the Data Privacy Act of 2012 in the Philippines. The NPC's contact information and complaints procedure are publicly available on the NPC's official website.
Now that you understand how ph laro handles your personal data, you can play with confidence. Sign in to your Account or explore what ph laro Casino has to offer. GCash deposits land instantly. 21+ only — play responsibly.