panalko Privacy Policy

1 Who We Are

panalko ("we," "us," "our," or "the Platform") operates an online casino and sports betting platform accessible at panalko.net, providing gaming services to players in the Philippines. For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173, or "DPA") and its Implementing Rules and Regulations, panalko acts as the Personal Information Controller (PIC) in respect of personal data collected through the Platform.

Our designated Data Protection Officer (DPO) can be contacted via the support channels listed in Section 13 of this Policy.

2 Scope of This Policy

This Privacy Policy applies to all personal information collected by panalko through:

• The panalko website at panalko.net and all associated subdomains
• Account registration and verification processes
• Deposit, withdrawal, and payment transactions
• Customer support interactions via live chat and email
• Participation in promotions, tournaments, and the panalko VIP programme
• Cookies, analytics tools, and other tracking technologies used on the Platform

This Policy does not apply to third-party websites or services that may be linked from the Platform. panalko is not responsible for the privacy practices of any third-party service provider, payment processor, or game content provider. We encourage you to review the privacy policies of any third party whose services you access.

3 Information We Collect

panalko collects personal information through different channels and at different stages of the player journey. The categories of information we collect are described below.

3.1 Information You Provide Directly

• Identity Information: Full legal name, date of birth, nationality, and government-issued identification number (e.g., PhilSys, passport, driver's licence, SSS/GSIS ID)
• Contact Information: Email address, mobile number, and residential address in the Philippines
• Account Credentials: Username, password (stored in hashed form), and security questions
• Financial Information: Payment method details (GCash number, PayMaya number, bank account details with BPI, BDO, Metrobank, or UnionBank) used for deposits and withdrawals
• Verification Documents: Copies of government-issued IDs and proof-of-address documents submitted for KYC verification
• Responsible Gaming Information: Deposit limits, self-exclusion elections, and session time preferences set within your account

3.2 Information Collected Automatically

• Device and Technical Data: IP address, device type, operating system, browser type and version, and screen resolution
• Usage Data: Pages visited, games played, bet history, session duration, clicks, and navigation paths on the Platform
• Geolocation Data: Approximate location derived from IP address, used to verify that you are accessing the Platform from within the Philippines
• Cookie Data: Information stored via cookies and similar tracking technologies as described in Section 7

3.3 Information from Third Parties

• Identity Verification Providers: Results of identity and age verification checks conducted through third-party KYC service providers
• Fraud Prevention Services: Risk scoring and fraud signals from anti-fraud and anti-money laundering screening tools
• Payment Processors: Transaction status and confirmation data from GCash, PayMaya, and participating banks

4 How We Use Your Information

panalko uses the personal information it collects for the following purposes:

5 Legal Basis for Processing

Under the Data Privacy Act of 2012, panalko processes your personal information on the following legal bases:

• Contractual Necessity: Processing necessary to perform our contract with you — including operating your account, processing payments, and providing gaming services.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including PAGCOR licensing requirements, AMLA obligations, and mandatory reporting duties.
• Legitimate Interests: Processing carried out in panalko's legitimate interests, such as fraud prevention, platform security, and Platform improvement, where these interests are not overridden by your fundamental rights.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — particularly for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Information

panalko does not sell, rent, or transfer your personal information to third parties for their own marketing or commercial purposes. We may share your information with the following categories of recipients only to the extent necessary for the stated purpose:

6.1 Service Providers and Processors

panalko engages trusted third-party service providers who process personal data on our behalf under written data processing agreements. These include KYC and identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank, UnionBank), cloud infrastructure providers, customer support platforms, and anti-fraud service providers. All processors are required to maintain confidentiality and implement appropriate security measures.

6.2 Regulatory and Law Enforcement Authorities

panalko may disclose personal information to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or other Philippine government authorities where disclosure is required by law, regulation, court order, or lawful government request.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of panalko's business assets, your personal information may be transferred to the successor entity. You will be notified of any such transfer and the applicable privacy terms via email or a prominent Platform notice prior to your data becoming subject to a different privacy policy.

6.4 With Your Consent

panalko may share your information with third parties not described above where you have provided explicit, informed consent to that specific sharing.

7 Cookies and Tracking Technologies

panalko uses cookies and similar tracking technologies on the Platform to enhance functionality, maintain session state, and analyse usage patterns. The categories of cookies we use are as follows:

You can manage your cookie preferences through your browser settings or through the cookie preference centre available on the Platform. Disabling non-essential cookies will not prevent you from using the core features of panalko, though some functionality may be affected.

8 Data Retention

panalko retains personal information for the periods set out below, after which data is securely deleted or anonymised unless a longer retention period is required by law:

• Account and Identity Data: Retained for the duration of your active account plus five (5) years following account closure, in compliance with PAGCOR licensing conditions and AMLA record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the AMLA and BIR regulations.
• Customer Support Records: Retained for three (3) years from the date of the support interaction.
• Marketing Preferences: Retained until you withdraw consent or request deletion, whichever is earlier.
• Cookie and Analytics Data: Analytical and marketing cookie data is retained for a maximum of thirteen (13) months from collection.

Where panalko is required to retain data for regulatory purposes, this obligation takes precedence over any data deletion request. We will inform you if a deletion request cannot be fulfilled due to a legal retention obligation.

9 Security Measures

panalko implements a comprehensive set of technical and organisational security measures to protect your personal information against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmissions between your device and panalko's servers
• Encryption of sensitive data at rest, including financial information and verification documents
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis
• Regular penetration testing and vulnerability assessments conducted by qualified security professionals
• Intrusion detection and prevention systems monitoring for unauthorised access attempts
• Two-factor authentication (2FA) available to all registered players as an optional but strongly recommended account security feature
• Staff training on data protection and information security obligations

10 Your Data Subject Rights

Under the Data Privacy Act of 2012, as a Filipino data subject you hold the following rights in respect of your personal information held by panalko:

• Right to be Informed: The right to be told what personal information is being collected, the purposes of processing, and your rights as a data subject — as fulfilled by this Privacy Policy.
• Right of Access: The right to obtain a copy of your personal information held by panalko and information about how it is processed.
• Right to Rectification: The right to correct inaccurate or incomplete personal information. You may update most account details directly through your panalko account settings.
• Right to Erasure: The right to request deletion of your personal information where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Object: The right to object to the processing of your personal information for direct marketing purposes or on grounds relating to your particular situation.
• Right to Data Portability: The right to receive your personal information in a structured, commonly used, and machine-readable format where processing is carried out by automated means.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of the rights listed above, please contact panalko's Data Protection Officer using the details provided in Section 13. panalko will respond to all verifiable data subject requests within thirty (30) days of receipt.

11 Children and Minors

The panalko Platform is strictly intended for adults aged twenty-one (21) years and above, in accordance with PAGCOR regulations governing online gaming in the Philippines. panalko does not knowingly collect personal information from individuals under the age of 21.

If panalko becomes aware that personal information has been collected from a person under 21 years of age, the relevant account will be immediately suspended, all associated personal data will be securely deleted, and any funds held in the account will be handled in accordance with applicable regulatory requirements.

If you believe that a minor has registered on the panalko Platform, please notify us immediately at [email protected] so that we can take prompt remedial action.

12 Changes to This Policy

panalko reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. Where a material change is made, panalko will provide advance notice to registered players by email and by posting a prominent notice on the Platform at least fourteen (14) days before the change takes effect.

Your continued use of the panalko Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. We encourage you to review this page periodically to stay informed of how panalko protects your information.

13 Contact and Data Protection Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal information by panalko, please contact us through the following channels:

• Data Protection Officer / General Privacy Enquiries: [email protected]
• VIP Account & Partnerships: [email protected]
• Live Chat: Available 24/7 directly on the panalko Platform
• Email Support Hours: 8:00 AM – 12:00 AM Philippine Time (PHT)

If you are not satisfied with panalko's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines through the NPC's official channels.