Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by panalo Casino through our website at panalo.asia, our mobile platform, customer support channels, and any other services we operate (collectively, the "Platform"). It applies to all registered players, visitors, and any individual whose personal data we process in connection with the panalo Platform.

Panalo Casino acts as the Personal Information Controller (as defined under the Data Privacy Act of 2012) with respect to the personal data collected through the Platform. We are registered with the National Privacy Commission (NPC) of the Philippines and maintain a designated Data Protection Officer (DPO) responsible for overseeing our data privacy compliance program.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Personal Data We Collect

Panalo collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is collected. The categories of personal data we collect include:

2.1 Registration and Identity Data

• Full legal name, date of birth, and gender
• Philippine residential address (barangay, city/municipality, province)
• Email address and mobile number
• Username and encrypted password
• Government-issued ID details (for KYC verification): ID type, ID number, and ID images

2.2 Financial and Transaction Data

• GCash or PayMaya account number (masked)
• Bank account details for withdrawal processing (masked)
• Deposit and withdrawal transaction history
• Bonus and promotional activity records

2.3 Gaming Activity Data

• Game session logs, bet history, and win/loss records
• Responsible gaming tool usage (deposit limits, self-exclusion requests)
• Game preferences and platform interaction history

2.4 Technical and Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session timestamps and platform access logs
• Cookie identifiers and analytics data (see Section 6)

2.5 Communications Data

• Customer support chat and email correspondence
• Survey responses and feedback submissions
• Marketing communication preferences

3. How We Use Your Personal Data

Panalo processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your panalo player account, including identity verification and KYC compliance.
• Service Delivery: To provide access to panalo's gaming platform, process deposits and withdrawals, and deliver customer support.
• Regulatory Compliance: To comply with PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) obligations, and other applicable Philippine laws and regulations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct on the panalo platform.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion.
• Marketing and Promotions: To send you information about panalo promotions, bonuses, and new games, where you have consented to receive such communications. You may withdraw this consent at any time.
• Platform Improvement: To analyse usage patterns, improve platform performance, and develop new features for Filipino players.
• Legal Proceedings: To establish, exercise, or defend legal claims in connection with the panalo platform.

4. Legal Basis for Processing

Panalo processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform our obligations under the panalo Terms & Conditions, including account management, payment processing, and game delivery.
• Legal Obligation: Processing is required to comply with PAGCOR regulations, AMLA obligations, NPC requirements, and other applicable Philippine laws.
• Legitimate Interests: Processing is necessary for panalo's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, provided such interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

Panalo does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment Service Providers: GCash, PayMaya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for the purpose of processing deposits and withdrawals.
• Game Technology Providers: Licensed game studios and live dealer platform operators who supply games available on panalo, subject to strict data processing agreements.
• Identity Verification Services: Third-party KYC and age verification providers engaged to assist with PAGCOR compliance obligations.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where required by law or regulatory directive.
• Legal and Professional Advisors: Lawyers, auditors, and other professional advisors engaged by panalo in connection with legal proceedings or compliance reviews.
• IT and Cloud Service Providers: Hosting, infrastructure, and cybersecurity service providers engaged to operate and secure the panalo platform, all of whom are bound by confidentiality obligations.

6. Cookies and Tracking Technologies

Panalo uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function, including session management and security tokens. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and responsible gaming tool configurations.
• Analytics Cookies: Help us understand how Filipino players use the panalo platform so we can improve performance and user experience. These are only set with your consent.
• Marketing Cookies: Used to deliver relevant panalo promotions. These are only set with your explicit consent and can be withdrawn at any time via your account settings.

You can manage your cookie preferences through your panalo account settings or your browser settings. Note that disabling strictly necessary cookies may affect the functionality of the Platform.

7. Data Retention

Panalo retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention periods:

• Account and KYC Data: Retained for the duration of your panalo account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLA record-keeping requirements.
• Transaction and Gaming Records: Retained for a minimum of five (5) years from the date of the transaction or game session, as required by applicable Philippine law.
• Customer Support Records: Retained for three (3) years from the date of the last interaction.
• Marketing Preferences: Retained until you withdraw consent or request deletion, subject to any overriding legal retention obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with NPC guidelines.

8. Data Security

Panalo implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the panalo platform.
• Encryption of sensitive data at rest, including KYC documents and financial information.
• Multi-factor authentication options for player accounts.
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists.
• Strict access controls limiting employee access to personal data on a need-to-know basis.
• Incident response procedures aligned with NPC breach notification requirements.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, panalo will notify the NPC within seventy-two (72) hours of becoming aware of the breach and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012.

9. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by panalo:

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 12. We will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request.

10. Children's Privacy and Age Restriction

Panalo Casino is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. We do not knowingly collect personal data from persons under 21 years of age. If we become aware that personal data has been collected from an underage individual, we will immediately suspend the relevant account, delete the personal data, and report the matter to the appropriate authorities where required by law.

Parents and guardians who believe that a minor may have registered a panalo account are encouraged to contact our support team immediately at [email protected].

11. Changes to This Privacy Policy

Panalo reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. Where changes are material, we will notify registered players by email or via a prominent notice on the panalo platform prior to the changes taking effect. The date of the most recent revision is displayed at the top of this page. Your continued use of the panalo platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

12. Contact and Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or panalo's data processing practices, or if you wish to exercise your data privacy rights, please contact our Data Protection Officer:

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.