Your Privacy Matters
at paldofun

Introduction

paldofun ("we," "us," "our," or "the Platform") operates the online gaming platform accessible at paldofun.org and any associated mobile applications or services. We are committed to protecting the privacy and personal data of every user ("you," "your") who accesses or registers on our platform.

This Privacy Policy describes how paldofun collects, uses, stores, shares, and protects your personal information in connection with your use of our services. It also explains the rights available to you under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, or "DPA") and its Implementing Rules and Regulations.

This Privacy Policy should be read alongside the paldofun Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Privacy Policy and the Terms & Conditions on matters of data privacy, this Privacy Policy shall prevail.

Personal Data We Collect

paldofun collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect are described in the table below:

How We Collect Your Data

paldofun collects personal data through the following channels:

3.1 Direct Collection

We collect data directly from you when you register an account on paldofun, complete identity verification, make a deposit or withdrawal, contact our support team, participate in promotions, or respond to surveys. The information you provide during these interactions forms the primary basis of your paldofun profile.

3.2 Automated Collection

When you access and use the paldofun platform, we automatically collect certain technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device identifiers, browser information, and behavioral data such as pages visited and games played. See Section 7 for more detail on our use of cookies.

3.3 Third-Party Sources

paldofun may receive personal data about you from third-party sources in limited circumstances, including:

• Payment processors and e-wallet providers (GCash, PayMaya, BPI, BDO, Metrobank) for transaction verification
• Identity verification service providers used to conduct KYC checks
• Fraud prevention and anti-money laundering screening services
• Regulatory authorities, including PAGCOR and the Anti-Money Laundering Council (AMLC), where required by law

How We Use Your Personal Data

paldofun uses your personal data only for the specific, legitimate purposes described below. We do not use your data for any purpose that is incompatible with the purposes for which it was originally collected.

• Account Management: To create, maintain, and manage your paldofun account, including processing your registration, verifying your identity, and managing your account settings.
• Service Delivery: To provide you with access to paldofun's games, promotions, and features, and to process your deposits and withdrawals in Philippine Peso (PHP) via your chosen payment method.
• KYC & Age Verification: To verify that you meet the minimum age requirement of 21 years and to comply with Know Your Customer obligations under Philippine law.
• Regulatory Compliance: To comply with applicable Philippine laws and regulations, including the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and any requirements imposed by PAGCOR or other regulatory bodies.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other prohibited conduct on the platform.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, to enforce deposit and loss limits you have set, and to process self-exclusion requests in accordance with our Responsible Gaming Policy.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance through our live chat and email support channels.
• Communications: To send you transactional notifications (e.g., deposit confirmations, withdrawal updates, security alerts) and, where you have consented, promotional communications about paldofun offers and new features.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the performance, security, and user experience of the paldofun platform.

Legal Basis for Processing

paldofun processes your personal data on the following legal bases as recognized under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform the contract between you and paldofun — specifically, to provide you with access to the platform and its services as described in the Terms & Conditions.
• Legal Obligation: Processing is necessary to comply with applicable Philippine laws, including KYC requirements, AML obligations, and regulatory reporting duties.
• Legitimate Interests: Processing is necessary for paldofun's legitimate interests in operating a secure, fair, and commercially viable gaming platform — including fraud prevention, security monitoring, and platform analytics — provided these interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities — such as sending you promotional communications or using non-essential cookies — paldofun relies on your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Sharing Your Personal Data

paldofun does not sell, rent, or trade your personal data to third parties. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

6.1 Service Providers

We share personal data with trusted third-party service providers who assist us in operating the paldofun platform. These include payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, cloud hosting services, customer support platforms, and analytics providers. All service providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection law.

6.2 Regulatory Authorities

paldofun is legally obligated to share certain personal data with Philippine regulatory authorities where required by law. This includes disclosures to PAGCOR in connection with gaming license compliance, and to the Anti-Money Laundering Council (AMLC) in connection with suspicious transaction reporting under the AMLA.

6.3 Law Enforcement

paldofun may disclose personal data to law enforcement agencies, courts, or other government bodies where required to do so by a valid legal order, warrant, or subpoena issued under Philippine law.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of paldofun's assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to the transfer taking effect.

Cookies & Tracking Technologies

paldofun uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that help us recognize you, maintain your session, and understand how you use our services.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences, such as your preferred language and display settings, to provide a more personalized experience.
• Analytics Cookies: Help us understand how users interact with the paldofun platform — which games are most popular, where users encounter difficulties, and how we can improve the overall experience. Data collected is aggregated and anonymized where possible.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access attempts, and other security threats on the platform.

7.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling certain cookies may affect the functionality of the paldofun platform and your ability to access some features.

Data Retention

paldofun retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active account and for a period of five (5) years following account closure, in accordance with AML record-keeping requirements under the AMLA.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations.
• KYC Documents: Identity verification documents are retained for five (5) years following the end of the business relationship, or longer if required by a specific regulatory obligation or legal proceeding.
• Support Communications: Customer support records are retained for two (2) years from the date of the last interaction, unless a longer retention period is required for dispute resolution purposes.
• Technical & Usage Data: Server logs and usage analytics data are retained for up to twelve (12) months, after which they are anonymized or deleted.

Upon expiry of the applicable retention period, paldofun will securely delete or anonymize your personal data in accordance with its data disposal procedures.

Data Security

paldofun implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security framework includes:

• Encryption: All data transmitted between your device and the paldofun platform is encrypted using 256-bit SSL/TLS technology. Sensitive data stored on our servers is encrypted at rest.
• Access Controls: Access to personal data is restricted to authorized paldofun personnel and service providers on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Two-Factor Authentication: paldofun supports and strongly recommends two-factor authentication (2FA) for all user accounts to provide an additional layer of protection against unauthorized access.
• Security Monitoring: Our platform is continuously monitored for suspicious activity, unauthorized access attempts, and potential security vulnerabilities. We conduct regular security audits and penetration testing.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, paldofun will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected users without undue delay, in accordance with the DPA.

Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by paldofun. You may exercise any of these rights by contacting our Data Protection Officer (DPO) as described in Section 14.

Children's Privacy & Age Restriction

The paldofun platform is strictly intended for adults aged 21 years and above. paldofun does not knowingly collect personal data from any person under the age of 21. The minimum age requirement of 21 years is a strict legal requirement under Philippine gaming regulations and is rigorously enforced through our KYC verification process.

If paldofun becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the personal data in question, and take appropriate action in accordance with our legal obligations.

If you are a parent or guardian and believe that your child has registered on paldofun, please contact our Data Protection Officer immediately using the contact details provided in Section 14. We will investigate and take prompt action.

Cross-Border Data Transfers

paldofun primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to and processed in countries outside the Philippines — for example, where paldofun uses cloud infrastructure or service providers with operations in other jurisdictions.

Where personal data is transferred outside the Philippines, paldofun ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Philippine Data Privacy Act. These safeguards may include contractual data processing agreements with service providers, standard contractual clauses approved by the National Privacy Commission, or transfers to countries recognized as providing an adequate level of data protection.

By using the paldofun platform, you acknowledge and consent to the transfer of your personal data outside the Philippines where necessary for the provision of our services, subject to the safeguards described above.

Updates to This Privacy Policy

paldofun reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this policy, we will notify registered users by email and/or by posting a prominent notice on the paldofun platform at least seven (7) days before the changes take effect.

The "Effective Date" at the top of this Privacy Policy indicates when the current version came into force. We encourage you to review this policy periodically to stay informed about how paldofun protects your personal data.

Your continued use of the paldofun platform after the effective date of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated policy, you must discontinue use of the platform and may request account closure by contacting our support team.

Contact Us & Data Protection Officer

paldofun has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact our DPO using the details below:

All data subject rights requests and privacy-related inquiries will be acknowledged within three (3) business days and resolved within fifteen (15) business days, or such longer period as may be required for complex requests.

If you are not satisfied with paldofun's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.