phl11 Privacy Policy

phl11 ("phl11", "we", "us", "our") operates the online gaming platform accessible at phl11.net, offering Filipino players a comprehensive suite of casino games, sports betting, bingo, color prediction, and promotional services. phl11 is the data controller responsible for the personal data of registered players and website visitors processed through this platform.

phl11 is committed to protecting the privacy and personal data of every individual who interacts with our platform. This Privacy Policy sets out, in a transparent and accessible manner, how phl11 collects, uses, stores, shares, and safeguards your personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC).

phl11 collects only the personal data that is necessary and proportionate to the purposes described in this policy. The categories of personal data we collect include:

• Full legal name (as it appears on your government-issued Philippine ID)
• Date of birth (to verify the 21+ age requirement)
• Philippine mobile number and email address
• Residential address in the Philippines
• Government-issued ID type and number (e.g., PhilSys, passport, driver's license, SSS, GSIS, PRC ID)

• GCash, PayMaya, BPI, BDO, Metrobank, 7-Eleven, or Cebuana account details used for deposits and withdrawals
• Transaction history, including deposit amounts, withdrawal requests, bet amounts, and winnings
• Source of funds documentation where required by AMLC regulations

• IP address and approximate geographic location
• Device type, operating system, and browser type
• Session data including login timestamps and session duration
• Game play history, betting patterns, and platform activity logs
• Cookie identifiers and similar tracking technologies (see Section 7)

• Records of live chat and support ticket conversations
• Email correspondence with phl11 support or compliance teams
• Feedback, complaints, and dispute records

• Self-exclusion preferences and cooling-off period settings
• Deposit limit, loss limit, and session time limit configurations
• Responsible gaming flag notes where intervention is appropriate

phl11 collects personal data through the following channels:

• Direct registration: Information you provide when creating a phl11 account, including name, contact details, date of birth, and chosen payment methods.
• KYC verification submissions: Copies of government-issued Philippine IDs and any supporting documents you upload during the identity verification process.
• Platform use: Data generated automatically as you navigate the platform, place bets, interact with games, and use account features.
• Payment processing: Transaction details received from GCash, PayMaya, BPI, BDO, Metrobank, 7-Eleven, Cebuana, and other integrated payment partners when you deposit or withdraw funds.
• Customer support interactions: Information you share when contacting phl11 via live chat, email, or other support channels.
• Cookies and tracking technologies: Technical data collected via cookies, web beacons, and similar tools as described in Section 7.
• Third-party verification services: Identity and fraud screening data from licensed KYC and AML service providers engaged by phl11 to meet PAGCOR and AMLC compliance requirements.

phl11 uses your personal data only for specific, legitimate purposes. The table below outlines each purpose and the corresponding data categories involved:

phl11 does not use your personal data for automated decision-making that produces significant legal effects without human review, except where expressly required for fraud detection or regulatory compliance, in which case you retain the right to request human review of any such decision.

Under the Philippine Data Privacy Act of 2012, phl11 processes your personal data on the following legal grounds:

• Consent: For marketing communications, cookies beyond strictly necessary functionality, and any processing not covered by the grounds below. You may withdraw consent at any time.
• Contractual necessity: Processing required to create and manage your account, provide gaming services, and facilitate deposits and withdrawals under the phl11 Terms and Conditions.
• Legal obligation: Processing required to comply with PAGCOR regulations, AMLC anti-money laundering reporting requirements, and the Philippine Data Privacy Act itself.
• Legitimate interests: Fraud prevention, platform security monitoring, and responsible gaming oversight — where phl11's interests and the safety of the Philippine gaming community are balanced against your privacy rights.

phl11 does not sell, rent, or trade your personal data to third parties for commercial purposes. Your data may be shared only in the following limited circumstances:

phl11 is legally required to disclose certain player data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where mandated by law or regulatory directive. Such disclosures are made only to the extent required and in the manner prescribed by applicable regulations.

To process your deposits and withdrawals, phl11 shares the minimum necessary financial and identity information with payment partners including GCash, PayMaya, BPI, BDO, Metrobank, 7-Eleven, and Cebuana. These providers are bound by their own data protection obligations and are prohibited from using your data for any purpose other than processing your transaction.

phl11 engages licensed third-party KYC verification and AML screening services to fulfill our PAGCOR and AMLC compliance obligations. These vendors are contracted data processors and are only permitted to process your data on phl11's documented instructions.

phl11 works with hosting, cloud infrastructure, and cybersecurity service providers who may have limited, controlled access to platform data as part of their service delivery. All such providers are bound by strict data processing agreements and confidentiality obligations.

phl11 uses cookies and similar tracking technologies on phl11.net to ensure the platform functions correctly, to protect security, and to improve your experience. The types of cookies we use are:

• Strictly necessary cookies: Required for core platform functionality such as keeping you logged in, maintaining your session, and processing transactions. These cannot be disabled without impairing your ability to use phl11.
• Security cookies: Used to detect and prevent fraud, bot activity, and unauthorized access attempts. These are essential to our security infrastructure.
• Functional cookies: Remember your preferences such as language settings, preferred payment methods, and responsible gaming limit configurations, to give you a more personalized platform experience.
• Analytics cookies: Used with your consent to understand how players navigate the platform, which game categories are most popular, and where technical improvements are needed. Analytics data is aggregated and does not identify you personally.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary or security cookies may affect your ability to access and use phl11's services. phl11 does not use third-party advertising cookies.

phl11 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, phl11 will securely delete or anonymize your personal data so that it can no longer be linked to you as an individual.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phl11. You may exercise any of these rights by contacting our Data Protection Officer at the details provided in Section 14.

phl11 implements a layered approach to data security, combining technical and organizational measures designed to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include:

• SSL/TLS encryption for all data transmitted between your browser or device and phl11's servers
• One-way cryptographic hashing for stored account passwords — phl11 staff cannot view your password
• Secure, access-controlled server infrastructure hosted in reputable data centers
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular security audits, vulnerability assessments, and penetration testing
• Automated fraud detection and anomaly monitoring systems operating 24/7
• Formal data breach response procedures aligned with NPC Circular 16-03

While phl11 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You also play an important role in keeping your account secure — please use a strong, unique password and enable any two-factor authentication options available in your phl11 account settings. Notify our support team immediately if you suspect unauthorized access to your account.

phl11 is strictly an adults-only platform. In accordance with PAGCOR regulations and Philippine gambling laws, phl11 services are available exclusively to individuals who are 21 years of age or older. phl11 does not knowingly collect personal data from individuals under the age of 21.

Parents and guardians in the Philippines are encouraged to use parental control tools and to engage in open conversations with young adults about responsible gaming. PAGCOR's responsible gaming resources are available to assist families with concerns about underage gambling access.

phl11 is a Philippines-focused platform and processes the majority of player data within Philippine or ASEAN-region infrastructure. In limited circumstances, personal data may be transferred to or accessed from locations outside the Philippines — for example, where phl11 engages a cloud infrastructure or KYC technology provider whose systems are hosted in another jurisdiction.

Where such transfers occur, phl11 ensures that adequate safeguards are in place in accordance with Section 21 of the Philippine Data Privacy Act, including the use of contractual data transfer agreements that require recipient parties to apply data protection standards equivalent to those mandated under Philippine law.

phl11 will not transfer your personal data to a jurisdiction that the NPC has determined to lack adequate data protection standards without first implementing appropriate contractual or technical safeguards and, where required, obtaining your explicit consent.

phl11 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new regulatory requirements under Philippine law, or platform developments. Any material changes will be communicated to registered players via email to the address on file, via a prominent notice on phl11.net, or both, at least fourteen (14) days before the changes take effect.

The updated policy will always be accessible at phl11.net/privacy-policy with the effective date clearly stated at the top. Your continued use of phl11 after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to a material change, you may request account closure prior to the effective date by contacting our support team via live chat or email.

We encourage all phl11 players to review this Privacy Policy periodically to stay informed about how your personal data is being protected. The "Last Updated" date at the top of this document reflects the most recent revision.

phl11 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act of 2012 and NPC regulations. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO through the following channels:

If you are not satisfied with phl11's response to your privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines. The NPC is the independent regulatory body responsible for administering and implementing the Data Privacy Act of 2012 in the Philippines.