Your privacy matters to us. This Privacy Policy explains exactly what personal data palago collects, why we collect it, how we use and protect it, and what rights you have under Philippine law.
palago operates the online casino platform accessible at palago.org (the "Platform"). For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173), palago is the Personal Information Controller responsible for the personal data you provide when using the Platform.
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, you may contact our Data Protection Officer (DPO) at the following address (plain text – not a clickable link):
We aim to acknowledge all privacy-related enquiries within five (5) business days and to provide a substantive response within fifteen (15) business days.
palago collects personal data in the following categories, depending on how you interact with the Platform:
palago processes your personal data for the following purposes and on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Creating and managing your palago Account | Performance of contract |
| Processing deposits and withdrawals via GCash, Maya, and bank transfer | Performance of contract |
| Verifying your identity and age (21+) through KYC procedures | Legal obligation (RA 9160 AMLA, PAGCOR regulations) |
| Detecting and preventing fraud, money laundering, and prohibited conduct | Legal obligation / Legitimate interest |
| Providing customer support and resolving disputes | Performance of contract / Legitimate interest |
| Administering bonuses, promotions, and loyalty programmes | Performance of contract |
| Monitoring responsible gaming compliance and enforcing self-exclusion | Legal obligation / Legitimate interest |
| Sending transactional communications (account alerts, payment confirmations) | Performance of contract |
| Sending marketing communications (with your consent) | Consent |
| Improving Platform performance and user experience | Legitimate interest |
| Complying with PAGCOR reporting obligations and other regulatory requirements | Legal obligation |
palago does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following limited circumstances:
We share necessary transaction data with GCash, PayMaya / Maya, and participating Philippine banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process your deposits and withdrawals. These processors are bound by their own privacy policies and applicable Philippine financial regulations.
We use licensed third-party KYC service providers to verify your identity documents and perform facial verification. These providers process your data solely for verification purposes and are contractually prohibited from using it for any other purpose.
Live dealer and digital game content is provided by licensed third-party studios. These providers may receive anonymised session data necessary to deliver game content but do not receive your full personal profile.
palago is required by Philippine law to report certain transactions and player data to PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent authorities. We will also disclose personal data in response to valid legal process, court orders, or government requests.
In the event of a merger, acquisition, or sale of all or part of palago's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights under this Privacy Policy will continue to apply.
palago retains your personal data for as long as your Account is active and for such additional periods as are required by applicable Philippine law and regulation. Specific retention periods include:
When personal data is no longer required for its original purpose and no legal retention obligation applies, palago will securely delete or anonymise it.
palago implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
While palago takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your Account login credentials confidential and for notifying palago immediately if you suspect unauthorised access to your Account.
As a data subject under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by palago:
To exercise any of these rights, please contact our Data Protection Officer at the email address provided in Section 1. We will respond to all verified requests within fifteen (15) business days. We may need to verify your identity before processing your request.
palago uses cookies and similar tracking technologies on the Platform to ensure it functions correctly, to remember your preferences, and to analyse how the Platform is used. The categories of cookies we use are:
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the palago Platform. For full details on the cookies we use, please refer to our Cookie Notice, available in your Account settings.
The palago Platform is strictly restricted to individuals who are 21 years of age or older, in accordance with Philippine law and PAGCOR regulations. palago does not knowingly collect personal data from individuals under the age of 21.
Age verification is conducted as part of the KYC process during Account registration. If palago discovers that personal data has been collected from an individual under 21, the Account will be immediately closed, all funds will be returned (net of any bonuses received), and the personal data will be securely deleted in accordance with applicable law.
If you believe that a minor has registered an Account on the palago Platform, please contact our support team immediately.
palago's primary data processing operations are conducted within the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines (for example, certain KYC verification or game content providers), palago ensures that such transfers are subject to appropriate safeguards, including contractual data protection clauses that meet the standards required by the National Privacy Commission.
palago will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards and, where required, obtaining your consent.
palago may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes, we will notify you by posting a prominent notice on the Platform or by sending an email to your registered address at least fourteen (14) days before the changes take effect.
The "Last Updated" date at the top of this page indicates when the most recent revision was made. Your continued use of the palago Platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated policy, you should stop using the Platform and may close your Account in accordance with the Terms & Conditions.
Your Data Rights
Under RA 10173, you have the right to access, correct, delete, and port your personal data. Contact our DPO at [email protected] to exercise your rights.
21+ Only: palago is strictly for players aged 21 and above. We do not knowingly collect data from minors. Gambling is addictive. Know when to stop.
"At palago, your personal data is treated with the same care and security as your funds. We collect only what we need, protect it with industry-leading encryption, and never sell it to anyone."
— palago Data Protection Team, Manila
Our Privacy Commitments
Beyond the legal language, here is what palago's privacy commitments mean in practice for every Filipino player on the platform.
All data transmitted between your device and palago is protected by TLS/SSL encryption. Sensitive data at rest – including KYC documents and payment references – is encrypted using AES-256 standards.
palago does not sell, rent, or trade your personal information to third-party advertisers or data brokers. Your data is used only to operate your account, process payments, and comply with Philippine law.
palago's data practices are fully aligned with the Philippine Data Privacy Act of 2012 and the National Privacy Commission's guidelines. Your rights as a Filipino data subject are respected and upheld.
Full GCash, Maya, and debit card details are never stored on palago's servers. Payment references are tokenised, meaning your financial credentials remain with your payment provider – not with us.
Access, correct, delete, or export your personal data at any time by contacting our Data Protection Officer. Marketing communications can be opted out of instantly from your Account settings.
palago undergoes regular independent security audits and penetration testing. Any data breach is handled under a strict incident response plan, with NPC notification within the legally required timeframe.
Your privacy is protected, your data is secure, and your rights are respected. Register your palago account today and enjoy a safe, fair, and responsible online casino experience built for Filipino players. Must be 21 or older.
21+ only · PAGCOR regulated · Gambling is addictive. Know when to stop.