Your personal data belongs to you. This Privacy Policy explains exactly what paldo collects, why we collect it, how we protect it, and what rights you have under Philippine law.
Six key things to know about how paldo handles your personal information. The full document below has complete details.
paldo collects personal data only for specific, legitimate purposes — account operation, identity verification, payment processing, and regulatory compliance. We do not collect data speculatively or beyond what is necessary.
paldo does not sell, rent, or trade your personal data to third-party marketers or data brokers — ever. Your data is shared only with service providers who operate under strict contractual data protection obligations, and with PAGCOR as required by law.
All data transmitted between your device and paldo is encrypted using 256-bit SSL/TLS protocols. Stored personal data is protected using industry-standard encryption and access controls, accessible only to authorized personnel with a documented operational need.
Under the Philippine Data Privacy Act of 2012, you have the right to access, correct, delete, and port your personal data. You may also object to certain types of processing. paldo honors all data subject rights requests within 15 business days.
paldo retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by PAGCOR, AML regulations, and tax laws. Transaction and account records are typically retained for five (5) years post-closure.
paldo's marketing SMS and email communications require your prior consent. You may withdraw that consent at any time through your account notification settings or by contacting paldo support — no processing fee, no delay longer than 5 business days.
This Privacy Policy (hereinafter "Policy") describes how paldo (hereinafter "paldo," "we," "us," or "the Company") collects, processes, stores, uses, discloses, and protects the personal data of individuals who register accounts, use the Services, or otherwise interact with the paldo online casino and sports betting platform accessible at paldo.bio and its associated subdomains.
This Policy applies to all personal data processing activities conducted by paldo in connection with the operation of its platform, including but not limited to account registration, identity verification, payment processing, customer support, marketing communications, and responsible gaming compliance. It applies to all players and registered users whether accessing paldo via desktop, mobile browser, or any other digital interface.
By registering a paldo account, using the Services, or otherwise providing personal data to paldo, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not consent to this Policy, you must not register an account or use the paldo platform.
This Policy is to be read alongside paldo's Terms & Conditions, which are incorporated by reference. Where a conflict exists between this Policy and the Terms & Conditions on a matter relating specifically to personal data, this Policy shall prevail.
For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, the Personal Information Controller (PIC) responsible for the collection and processing of personal data in connection with the paldo platform is:
All inquiries, requests, and complaints related to data privacy and personal data processing by paldo should be directed to the Data Protection Officer (DPO) at the contact details set out in Section 15 of this Policy.
paldo collects personal data in the following categories:
| Category | Data Elements | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government-issued ID type and number (e.g., PhilSys, UMID, Passport, SSS ID), selfie photo for KYC verification | Age verification, KYC / AML compliance, account security |
| Contact Data | Mobile phone number (Philippine), email address, residential or mailing address | Account registration, OTP delivery, communications, KYC |
| Financial Data | GCash mobile number, Maya account number, bank account details (where applicable), transaction history, deposit and withdrawal records | Payment processing, AML compliance, fraud prevention, withdrawal processing |
| Gaming Data | Game play history, bet amounts, win/loss records, active bonus status, responsible gaming tool usage, session duration data | Account management, responsible gaming monitoring, PAGCOR reporting, dispute resolution |
| Technical Data | IP address, device type, browser type and version, operating system, device identifiers, cookies and session tokens | Platform security, fraud detection, geographic compliance, session management |
| Communications Data | Customer support chat logs, emails, complaint records, responsible gaming correspondence | Support resolution, dispute record-keeping, quality assurance, legal defense |
paldo does not collect sensitive personal information as defined under Section 3(l) of the Data Privacy Act (e.g., racial or ethnic origin, political affiliation, religious beliefs, health data) except where health-related information is voluntarily provided in the context of a responsible gaming or self-exclusion request, in which case it is processed solely for that purpose.
paldo collects personal data through the following channels:
Data you provide directly to paldo when you: register a paldo account; complete identity verification (KYC); make a deposit or withdrawal; contact customer support; respond to a survey or promotion; or submit a responsible gaming request. This is the primary source of personal data held by paldo.
Data collected automatically when you access and use the paldo platform: IP address and approximate geolocation; browser and device fingerprinting data for fraud prevention; session cookies; game interaction logs; and clickstream data recording navigation patterns within the platform. See Section 7 for full cookie policy details.
paldo may receive supplementary identity or fraud-related data from: identity verification service providers (e.g., document authentication APIs); payment processors such as GCash and Maya for transaction confirmation and fraud signals; PAGCOR or other regulatory bodies where required by law; and publicly available Philippine government databases accessed solely for KYC verification purposes.
Under the Data Privacy Act of 2012, paldo processes personal data only where a lawful basis exists. The following table sets out paldo's processing purposes and the corresponding legal basis under the DPA:
| Processing Purpose | Legal Basis (RA 10173) |
|---|---|
| Account registration and ongoing account management | Performance of a contract to which the data subject is a party (Sec. 13(b)) |
| Identity verification (KYC) and age verification | Legal obligation — PAGCOR licensing requirements and AML regulations (Sec. 13(c)) |
| Processing deposits, withdrawals, and financial transactions | Performance of a contract; legal obligation under RA 10927 (Sec. 13(b) and (c)) |
| Anti-money laundering monitoring and reporting | Compliance with legal obligation — RA 9160 (AMLA) as amended (Sec. 13(c)) |
| Fraud detection and platform security | Legitimate interests of paldo and the data subject (Sec. 13(f)) |
| Responsible gaming monitoring and tool administration | Legal obligation — PAGCOR responsible gaming regulations; legitimate interest (Sec. 13(c) and (f)) |
| Customer support and dispute resolution | Performance of a contract; legitimate interest (Sec. 13(b) and (f)) |
| Marketing communications (SMS, email promotions) | Consent of the data subject (Sec. 13(a)) — opt-in only |
| Platform analytics and performance improvement | Legitimate interests — aggregated and anonymized where possible (Sec. 13(f)) |
paldo engages third-party service providers who process personal data on our behalf as Personal Information Processors (PIPs) under the Data Privacy Act. These include: payment processing partners (GCash, Maya, bank payment gateways); identity verification and KYC solution providers; cloud hosting and infrastructure providers; game software studios (limited game interaction data only); and customer support platform providers. All PIPs are bound by written data processing agreements that require them to process data only under paldo's documented instructions and to maintain security standards no less stringent than those applied by paldo.
paldo discloses personal data to PAGCOR and other relevant Philippine government authorities — including the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and law enforcement agencies — where required by applicable Philippine law or PAGCOR's implementing regulations. Such disclosures are made strictly in accordance with legal requirements and only to the extent necessary.
paldo does not and will not sell, rent, trade, or otherwise commercially exploit your personal data to any third party for their own marketing or profiling purposes. This restriction applies absolutely and is not subject to any business exception.
In the event of a merger, acquisition, asset sale, or other business restructuring involving paldo, personal data held by paldo may form part of the transferred assets. In such circumstances, the acquiring entity will be required to assume paldo's obligations under this Privacy Policy and Philippine data protection law. Affected players will be notified by email or SMS prior to any such transfer taking effect.
paldo uses cookies, web beacons, local storage objects, and similar technologies on the platform. These technologies are used for the following purposes:
paldo does not place third-party advertising or retargeting tracking pixels on the platform. You will not be tracked across external websites based on your activity on paldo.bio.
paldo implements appropriate organizational and technical security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to:
paldo retains personal data only for as long as necessary to fulfill the purpose for which it was collected or as required by applicable Philippine law, PAGCOR regulations, and AML obligations. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data is securely destroyed or permanently anonymized using methods that render re-identification impossible, in accordance with NPC guidelines on data disposal.
Under Republic Act No. 10173 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by paldo:
The right to be informed whether paldo holds personal data about you, and to receive a description of that data, its source, the purpose of processing, and the recipients to whom it has been disclosed.
The right to request a copy of the personal data paldo holds about you in a commonly used electronic format, subject to identity verification and applicable legal limitations.
The right to request correction of any inaccurate, incomplete, or outdated personal data paldo holds about you. Requests will be processed within 15 business days of receipt.
The right to request deletion of personal data where processing is no longer necessary, consent has been withdrawn, or processing is unlawful — subject to overriding legal retention obligations (e.g., AML record-keeping).
The right to object to processing of your personal data for direct marketing purposes, or where processing is based on legitimate interests and you have grounds relating to your particular situation.
The right to receive personal data you have provided to paldo in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.
To exercise any of the above rights, please submit a written request to paldo's Data Protection Officer at the contact details in Section 15. paldo will acknowledge your request within 5 business days and provide a substantive response within 15 business days. Identity verification will be required before any personal data is disclosed or modified in response to a data subject request.
If you are not satisfied with paldo's response to a data subject rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at the NPC's official channels.
paldo's primary data infrastructure is located within the Philippines. Where third-party service providers process personal data on paldo's behalf from servers located outside the Philippines — for example, cloud infrastructure or KYC service providers operating regionally — paldo ensures that such transfers comply with Section 21 of the Data Privacy Act and applicable NPC guidelines on cross-border data transfers.
Specifically, paldo requires that any overseas Personal Information Processor: (a) provides equivalent levels of data protection to those required under RA 10173; (b) is bound by written data processing agreements incorporating standard contractual clauses consistent with NPC requirements; and (c) is subject to adequate security certification or regulatory oversight in the relevant jurisdiction.
The paldo platform is strictly intended for persons aged 21 years and above. paldo does not knowingly collect personal data from persons under 21 years of age. Registration requires affirmative confirmation of minimum age, and KYC verification is required to confirm that age prior to real-money gaming.
If paldo becomes aware that personal data has been collected from a person under 21 years of age, paldo will: (a) immediately close the associated account; (b) void any wagering activity; (c) return any real-money deposits to the originating payment method; and (d) permanently delete the personal data collected from that individual, except where retention is required by law.
If you believe that a minor in your household has accessed or registered on the paldo platform, please contact paldo support immediately at [email protected]. Such reports are treated as a priority and with strict confidentiality.
paldo sends marketing communications — including promotional SMS messages, email newsletters, bonus notifications, and event announcements — only to players who have provided explicit prior consent to receive such communications at the time of registration or through their account notification settings.
Withdrawing Consent: You may withdraw your consent to receive marketing communications at any time by: (a) updating your notification preferences in your paldo account settings; or (b) contacting paldo support at [email protected] with a request to unsubscribe. Unsubscribe requests will be processed within 5 business days. Withdrawal of marketing consent does not affect paldo's right to send transactional and operational communications (e.g., deposit confirmations, withdrawal notifications, security alerts, responsible gaming messages) which are essential to account management and are sent on a contract or legal obligation basis, not a consent basis.
paldo reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable Philippine law, NPC guidance, PAGCOR requirements, or paldo's data processing practices. When material changes are made to this Policy, paldo will notify registered users by SMS or email to their registered contact details at least seven (7) days before the amended Policy takes effect.
The current version of this Policy, including its effective date, is always accessible at paldo.bio/privacy-policy. Your continued use of the paldo platform following notification of an amended Policy constitutes your acceptance of the updated terms. If you do not accept the amended Policy, you must discontinue use of the platform and request account closure in accordance with the Terms & Conditions.
All queries, data subject rights requests, complaints, and privacy-related correspondence should be directed to paldo's designated Data Protection Officer:
This Privacy Policy was last reviewed and updated on 1 January 2026 and supersedes all previous versions of paldo's privacy documentation.
Now that you know how paldo handles your personal information, you can play with confidence. Your data is encrypted, never sold, and protected under Philippine law — so you can focus on the games.
21+ only · PAGCOR regulated · RA 10173 compliant · Instant GCash & Maya payouts