Paldoph Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how paldoph ("paldoph," "we," "us," or "our") collects, uses, stores, and discloses personal information obtained from individuals ("you," "your," or "player") who access or use the paldoph online gaming platform at paldoph.net and its associated mobile applications (collectively, the "Platform").

Paldoph is committed to protecting the privacy and personal data of every Filipino player who trusts us with their information. This Policy is designed to be transparent, straightforward, and compliant with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, or "DPA") and its Implementing Rules and Regulations.

By registering on paldoph, accessing the Platform, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the paldoph Platform.

This Policy should be read together with paldoph's Terms and Conditions, which govern your use of the Platform as a whole.

2. Data Controller

Paldoph acts as the personal information controller in respect of the personal data collected through the Platform. As the controller, paldoph determines the purposes and means of processing your personal information and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

Paldoph has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with the DPA and this Policy. Contact details for the DPO are provided in Section 14 of this Policy. Players may direct any data privacy concerns, access requests, or complaints to the DPO at any time.

3. Personal Data We Collect

Paldoph collects the following categories of personal data from players:

Paldoph does not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where sensitive data is collected — such as government ID numbers — it is handled with heightened security controls.

4. How We Collect Your Data

Paldoph collects personal data through the following means:

• Direct submission: Information you provide when registering on paldoph, completing your profile, submitting identity verification documents, making deposits or withdrawal requests, or contacting our support team.
• Automated collection: Technical and usage data collected automatically when you access the paldoph Platform, including through cookies, web beacons, and server logs. See Section 11 for our full Cookies policy.
• Third-party sources: Identity verification data from accredited KYC service providers; fraud screening data from payment processors such as GCash and BDO; and publicly available information used to verify the accuracy of data you have provided.
• Regulatory sources: Information received from PAGCOR or other Philippine regulatory bodies in connection with licensing, compliance, or investigation requirements.

5. How We Use Your Personal Data

Paldoph uses the personal data we collect for the following purposes:

• Account management: To create, maintain, and secure your paldoph account, including verifying your identity and age (21+ requirement) at registration and during the account lifecycle.
• Service delivery: To provide access to games, process deposits and withdrawals in Philippine Peso (PHP), apply bonuses, and deliver the core features of the paldoph Platform.
• Regulatory compliance: To fulfill our obligations under Philippine gaming regulations, anti-money laundering (AML) laws, and the Data Privacy Act, including mandatory reporting to PAGCOR and other authorities.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, and other illegal or prohibited activities on paldoph.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling, enforce self-exclusion requests, and apply deposit or loss limits set by the player. Visit our Responsible Gaming page for more information.
• Customer support: To respond to your inquiries, resolve disputes, and improve the quality of our support services.
• Platform improvement: To analyze usage patterns, conduct internal research, and enhance the features and performance of the paldoph Platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided explicit consent. You may withdraw this consent at any time through your account settings.

6. Legal Basis for Processing

Paldoph processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our obligations under the paldoph Terms and Conditions, including account creation, game access, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, AML obligations, and tax reporting duties.
• Legitimate interests: Processing necessary for paldoph's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and optional data uses. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing and Disclosure

7.1 Service Providers. Paldoph may share your personal data with trusted third-party service providers who assist in operating the Platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), KYC verification providers, cloud hosting services, and customer support platforms. These providers are contractually bound to process your data only on paldoph's instructions and in accordance with applicable data protection law.

7.2 Regulatory Authorities. Paldoph may disclose your personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), or other Philippine government agencies where required by law, court order, or regulatory directive.

7.3 Business Transfers. In the event of a merger, acquisition, or sale of all or part of paldoph's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the applicable privacy terms prior to your data being subject to a different privacy policy.

7.4 No Sale of Data. Paldoph does not sell, rent, or otherwise commercially exploit your personal data to third parties for their own marketing or commercial purposes. This is an absolute commitment.

8. Data Retention

Paldoph retains your personal data for as long as your account remains active and for a period thereafter as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML and gaming regulatory requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine AML regulations.
• Support and communications data: Retained for two (2) years from the date of the last interaction, unless a longer period is required for dispute resolution.
• Technical and usage data: Retained for up to twelve (12) months from collection, after which it is aggregated or anonymized for analytical purposes.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal, as evidence of compliance.

Upon expiry of the applicable retention period, paldoph will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

9. Security Measures

Paldoph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• TLS 1.2 or higher encryption for all data in transit between your device and paldoph servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records.
• Multi-factor authentication (MFA) options for player accounts and mandatory MFA for all paldoph administrative systems.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Role-based access controls ensuring that paldoph staff can only access personal data necessary for their specific job functions.
• Continuous monitoring of platform systems for anomalous activity, unauthorized access attempts, and potential data breaches.
• Staff training on data protection obligations and secure data handling practices, conducted at least annually.

While paldoph takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your paldoph account credentials and for notifying us immediately if you suspect any unauthorized access to your account.

10. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by paldoph:

• Right to be informed: The right to know what personal data paldoph collects about you, how it is used, and with whom it is shared — as set out in this Policy.
• Right of access: The right to request a copy of the personal data paldoph holds about you, along with information about how it is being processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data paldoph holds about you. You may update most account information directly through your paldoph dashboard.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to paldoph's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on paldoph's legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe paldoph has violated your data privacy rights.

To exercise any of these rights, please contact paldoph's Data Protection Officer using the details in Section 14. Paldoph will respond to all verified data rights requests within fifteen (15) business days of receipt.

11. Cookies and Tracking Technologies

11.1 What Are Cookies. Cookies are small text files placed on your device when you visit the paldoph Platform. They allow paldoph to recognize your device, remember your preferences, and collect information about how you use the Platform.

11.2 Types of Cookies We Use. Paldoph uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalized experience on paldoph.
• Analytics cookies: Used to collect aggregated, anonymized data about how players use the paldoph Platform, helping us identify areas for improvement. No personally identifiable information is included in analytics reports.
• Marketing cookies: Used to deliver relevant promotional content within the paldoph Platform, based on your gameplay and browsing behavior. These are only activated with your consent.

11.3 Managing Cookies. You can manage or disable non-essential cookies through your browser settings or through the cookie preference center available on the paldoph Platform. Please note that disabling certain cookies may affect the functionality of the Platform.

12. Minors and Age Restriction

The paldoph Platform is strictly intended for individuals aged 21 years and above. Paldoph does not knowingly collect personal data from individuals under the age of 21. If paldoph becomes aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered on paldoph or provided us with personal data, please contact our support team or Data Protection Officer immediately so that we can investigate and take appropriate action.

13. Changes to This Privacy Policy

Paldoph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Material changes to this Policy will be communicated to registered players via the email address associated with their paldoph account and through a prominent notice on the Platform, at least fourteen (14) days before the changes take effect.

Your continued use of the paldoph Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how paldoph protects your personal data.

14. Contact and Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or paldoph's handling of your personal data, please contact our Data Protection Officer. Our DPO is available to assist with access requests, rectification requests, erasure requests, and any other data privacy matters.

You may reach the paldoph Data Protection Officer via our 24/7 live chat support on the Platform, or by email — our support address is displayed in the footer of this page. Paldoph aims to acknowledge all data privacy requests within three (3) business days and to resolve them within fifteen (15) business days.

If you are not satisfied with paldoph's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012.