🔒 palago Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how palago ("we," "us," "our," or "Company"), operating the website https://palago.cam and associated mobile applications and services (collectively, the "Platform"), collects, uses, stores, protects, and discloses your personal information.

This Policy applies to all users who access or use the palago Platform, including registered account holders, website visitors, and individuals who interact with our customer support, marketing communications, or other services. By using palago, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

palago is committed to protecting your privacy in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable international data protection standards. We recognize the importance of safeguarding your personal information and maintain robust security measures to protect your data from unauthorized access, disclosure, or misuse.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a palago account or use our services, you voluntarily provide us with personal information, including:

• Account Registration Information: Full legal name, date of birth, gender, email address, mobile phone number, residential address, username, and password
• Identity Verification Documents: Government-issued identification such as Philippine passport, driver's license, national ID, or other documents required for Know Your Customer (KYC) compliance
• Financial Information: Payment method details including bank account numbers, e-wallet account information (GCash, Maya), credit/debit card details, transaction history, deposit and withdrawal records
• Communications: Content of messages you send to customer support, survey responses, feedback, complaints, or other communications with palago
• Voluntary Information: Any additional information you choose to provide through your profile, preferences, or optional survey responses

2.2 Information Collected Automatically

When you access or use the palago Platform, we automatically collect certain technical and usage information through various technologies:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers, mobile network information
• Usage Data: Pages visited, games played, betting history, session duration, clickstream data, navigation patterns, feature usage statistics
• Location Information: IP address, approximate geographic location derived from IP address, time zone settings
• Log Information: Access times, error logs, system activity, hardware settings
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, pixel tags, and similar technologies (see Section 9 for detailed information)

2.3 Information from Third-Party Sources

We may receive information about you from third-party sources to verify your identity, prevent fraud, or comply with legal obligations:

• Payment Processors: Transaction verification, payment status, fraud detection signals from GCash, Maya, banks, and other payment providers
• Identity Verification Services: Age verification, identity authentication, address verification from licensed third-party verification providers
• Game Providers: Gaming activity, session data, technical performance data from our licensed game content partners
• Fraud Prevention Services: Risk assessment data, fraud scores, device fingerprinting information from security and anti-fraud service providers
• Public Records: Publicly available information necessary to comply with anti-money laundering regulations and responsible gaming policies

3. How We Use Your Information

palago uses your personal information for the following legitimate business purposes:

3.1 Service Delivery and Account Management

• Create, maintain, and manage your palago account
• Process your registration and verify your identity and age (21+ requirement)
• Provide access to gaming services, sports betting, and casino games
• Process deposits, withdrawals, and other financial transactions
• Manage bonuses, promotions, loyalty rewards, and tournament participation
• Maintain accurate gaming records and transaction history as required by law
• Respond to your inquiries and provide customer support

3.2 Security, Fraud Prevention, and Compliance

• Verify your identity to prevent unauthorized account access
• Detect and prevent fraud, money laundering, collusion, bonus abuse, and other prohibited activities
• Monitor platform security and protect against cyber threats
• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Enforce our Terms and Conditions and investigate violations
• Comply with legal obligations, court orders, and regulatory requirements
• Cooperate with law enforcement agencies when legally required

3.3 Service Improvement and Personalization

• Analyze usage patterns to improve Platform functionality and user experience
• Personalize content, game recommendations, and promotional offers based on your preferences and gaming history
• Conduct internal research, analytics, and statistical analysis
• Test new features, games, and platform enhancements
• Optimize platform performance, speed, and reliability

3.4 Marketing and Communications

• Send promotional emails, SMS messages, and push notifications about bonuses, tournaments, and new games (with your consent)
• Provide information about service updates, new features, and platform changes
• Deliver personalized marketing communications based on your gaming preferences
• Conduct surveys and gather feedback to improve our services

You may opt out of marketing communications at any time by following unsubscribe instructions in emails, adjusting your account communication preferences, or contacting customer support.

3.5 Responsible Gaming

• Monitor gaming behavior to identify signs of problem gambling
• Implement self-exclusion, deposit limits, and other responsible gaming tools
• Provide access to responsible gaming resources and support services
• Comply with responsible gaming regulations and industry best practices

4. Legal Basis for Processing

palago processes your personal information based on the following legal grounds under the Philippine Data Privacy Act:

• Consent: You have provided explicit consent for specific processing activities, such as receiving marketing communications
• Contract Performance: Processing is necessary to fulfill our contractual obligations to provide gaming services under our Terms and Conditions
• Legal Obligation: Processing is required to comply with Philippine laws, regulations, court orders, or governmental requests, including KYC, AML, and tax reporting requirements
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, service improvement, and business operations, provided such interests are not overridden by your fundamental rights and freedoms

5. Data Sharing and Disclosure

palago does not sell your personal information to third parties. We share your information only in the following limited circumstances:

5.1 Service Providers and Business Partners

We share information with trusted third-party service providers who perform services on our behalf, including:

• Payment Processors: GCash, Maya, banks, and payment gateways to process deposits and withdrawals
• Gaming Providers: Licensed game developers and software providers to deliver gaming content
• Identity Verification Services: KYC and AML compliance providers for age and identity verification
• Cloud Hosting Providers: Secure data storage and hosting infrastructure providers
• Customer Support Tools: Live chat, email, and ticketing system providers
• Marketing Platforms: Email service providers and marketing automation tools (only if you've consented to marketing communications)
• Analytics Services: Website analytics and performance monitoring tools

All service providers are contractually obligated to protect your information, use it only for specified purposes, and maintain confidentiality in accordance with this Privacy Policy and applicable data protection laws.

5.2 Legal and Regulatory Authorities

We may disclose your information to government authorities, regulators, law enforcement agencies, or courts when:

• Required by Philippine law, regulation, court order, subpoena, or legal process
• Necessary to comply with PAGCOR regulations or other gaming regulatory requirements
• Required to report suspicious financial transactions under Anti-Money Laundering laws
• Necessary to protect our legal rights, enforce our Terms and Conditions, or defend against legal claims
• Required to protect the safety, security, or rights of palago, our users, or the public

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor organization. You will be notified of any such change in ownership or control of your personal information.

5.4 With Your Consent

We may share your information with third parties when you have provided explicit consent for such sharing, such as participating in third-party promotions or integrations.

6. International Data Transfers

palago primarily stores and processes your personal information within the Philippines. However, some of our service providers and business partners may be located outside the Philippines, which may result in your information being transferred to, stored, or processed in other countries.

When we transfer your information internationally, we ensure that appropriate safeguards are in place to protect your data in accordance with Philippine data protection standards. These safeguards may include:

• Contractual clauses requiring equivalent data protection standards
• Transfers to countries with adequate data protection frameworks
• Certification under recognized data protection frameworks
• Your explicit consent for specific international transfers

By using palago, you acknowledge and consent to such international data transfers where necessary for service delivery.

7. Data Security Measures

palago implements industry-leading technical, physical, and administrative security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

7.1 Technical Security

• Encryption: All sensitive data is encrypted in transit using SSL/TLS protocols and at rest using AES-256 encryption
• Secure Infrastructure: Multi-layered firewall protection, intrusion detection systems, and regular security audits
• Access Controls: Role-based access controls limiting employee access to personal information on a need-to-know basis
• Authentication: Strong password requirements, account lockout policies, and optional two-factor authentication
• Monitoring: 24/7 security monitoring, automated threat detection, and incident response protocols

7.2 Organizational Security

• Employee training on data protection and privacy best practices
• Confidentiality agreements for all employees and contractors with access to personal information
• Regular security assessments and penetration testing
• Data breach response plan and notification procedures
• Secure disposal procedures for data that is no longer needed

7.3 Your Responsibility

While we implement strong security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and never share it with anyone
• Enable two-factor authentication if available
• Log out of your account when using shared or public devices
• Keep your contact information current so we can reach you about security issues
• Report any suspicious activity or unauthorized access immediately
• Be cautious of phishing attempts and never provide your password in response to unsolicited communications

Despite our best efforts, no security system is impenetrable. In the unlikely event of a data breach affecting your personal information, we will notify you and relevant authorities as required by Philippine law.

8. Data Retention and Deletion

palago retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

8.1 Retention Periods

• Account Information: Retained for the duration of your account plus 5 years after account closure to comply with Philippine gaming regulations, tax laws, and Anti-Money Laundering requirements
• Transaction Records: Retained for 5-10 years as required by Philippine financial regulations and tax laws
• Identity Verification Documents: Retained for 5 years after account closure to comply with KYC and AML regulations
• Gaming Activity Logs: Retained for 5 years to comply with gaming regulations and dispute resolution requirements
• Marketing Communications: Retained until you withdraw consent or for 2 years after your last interaction with marketing content
• Customer Support Records: Retained for 3 years after case closure for quality assurance and dispute resolution

8.2 Account Closure and Data Deletion

When you close your palago account, we will:

• Mark your account as closed and disable login access
• Stop sending marketing communications (if you were subscribed)
• Retain necessary information for the legally required retention periods described above
• Delete or anonymize information that is no longer required after retention periods expire

You may request account closure and data deletion by contacting customer support. However, we may retain certain information as required by law or for legitimate business purposes such as fraud prevention, financial audits, and regulatory compliance.

9. Cookies and Tracking Technologies

palago uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content.

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the palago Platform. They help us recognize your device, remember your preferences, and provide a more personalized experience.

9.2 Types of Cookies We Use

• Essential Cookies: Required for platform functionality, account authentication, security, and basic service delivery. These cannot be disabled without affecting site functionality.
• Performance Cookies: Collect anonymous usage data to analyze platform performance, identify errors, and improve user experience.
• Functional Cookies: Remember your preferences, language settings, and personalization choices to enhance your experience.
• Marketing Cookies: Track your interaction with marketing content and promotional offers to deliver relevant personalized marketing (only with your consent).

9.3 Third-Party Cookies

Some cookies are placed by third-party service providers, including:

• Analytics providers (e.g., Google Analytics) to measure site traffic and usage patterns
• Gaming providers to deliver and optimize game content
• Advertising networks to display relevant promotional content (only with your consent)

9.4 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies, though this may affect platform functionality. You can manage cookie preferences for marketing and analytics cookies through your palago account settings.

To learn more about cookies and how to manage them, visit www.allaboutcookies.org or your browser's help documentation.

10. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal information:

10.1 Right to Access

You have the right to request access to the personal information we hold about you. You can view much of your information directly in your palago account dashboard, or you may request a copy by contacting customer support.

10.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information. You can update most account information directly through your account settings, or contact customer support for assistance.

10.3 Right to Erasure

You have the right to request deletion of your personal information, subject to legal retention requirements. We will delete or anonymize your data when legally permitted, but may retain information necessary for regulatory compliance, fraud prevention, or legitimate business purposes.

10.4 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes. You can opt out of marketing communications at any time through your account settings or by following unsubscribe links in marketing emails.

10.5 Right to Data Portability

You have the right to request a copy of your personal information in a structured, commonly used, and machine-readable format, and to transmit that information to another service provider where technically feasible.

10.6 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

10.7 Right to Lodge a Complaint

If you believe your privacy rights have been violated, you have the right to file a complaint with the Philippine National Privacy Commission (NPC). Contact information for the NPC is available at www.privacy.gov.ph.

10.8 Exercising Your Rights

To exercise any of your privacy rights, please contact palago customer support with your request. We will respond within the timeframe required by Philippine law (typically 15 days) and may request additional information to verify your identity before processing your request.

11. Children's Privacy

palago is an adult gaming platform restricted to individuals 21 years of age or older in compliance with Philippine gambling laws. We do not knowingly collect personal information from individuals under 21 years of age.

If we become aware that we have inadvertently collected personal information from someone under 21, we will take immediate steps to delete such information and close the associated account. If you believe we have collected information from an underage individual, please contact us immediately at [email protected].

Parents and guardians should monitor their children's internet usage and prevent access to age-restricted gaming sites.

12. Changes to This Policy

palago reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. We will notify you of material changes by:

• Posting the updated Privacy Policy on this page with a new "Last Updated" date
• Sending email notification to your registered email address for significant changes
• Displaying prominent notice on the Platform for major changes affecting your rights

Your continued use of palago after the effective date of the updated Privacy Policy constitutes acceptance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you do not agree with the updated Privacy Policy, you should stop using the Platform and may request account closure.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact palago:

• Email: [email protected] (for general privacy inquiries)
• Data Privacy Officer: [email protected] (for formal privacy rights requests)
• Live Chat: Available 24/7 through the Platform for immediate assistance
• Response Time: We aim to respond to privacy inquiries within 15 days as required by Philippine law

For formal complaints or legal notices regarding data protection, please address correspondence to our Data Privacy Officer at the email address above.

Thank you for trusting palago with your personal information. We are committed to protecting your privacy and providing transparent, secure gaming services to all Filipino players.