Apalado Privacy Policy – How We Protect Your Data

Your Privacy, Our Priority

Six principles that guide how Apalado handles your personal data every single day.

Minimal Data Collection

We only collect information that's genuinely necessary to run your account, verify your identity, and process your transactions. Nothing more, nothing less.

Bank-Grade Encryption

All data transmitted between your device and Apalado is protected by TLS encryption. Your financial details never travel in plain text across our systems.

No Selling of Data

Apalado does not sell, rent, or trade your personal information to third parties for marketing purposes. Full stop. Your data is yours.

Strict Access Controls

Only authorised Apalado personnel who need access to your data to do their jobs can view it. Access logs are monitored and audited regularly.

Philippine Law Compliant

This policy is fully aligned with the Data Privacy Act of 2012 (R.A. 10173) and NPC regulations. Your rights as a Filipino data subject are fully respected here.

Data Retention Limits

We don't keep your data forever. Once it's no longer needed for legal, regulatory, or operational reasons, we delete or anonymise it securely.

Introduction

Welcome to the Apalado Privacy Policy. This document explains how Apalado ("we," "us," "our") collects, stores, uses, and protects your personal information when you use our online gaming platform at apalado.com.

We understand that trust is the foundation of any relationship — and that goes double when money and personal data are involved. As a Filipino-focused gaming platform, we are bound by the Data Privacy Act of 2012 (Republic Act No. 10173) and the regulations of the National Privacy Commission (NPC). Every data practice described in this policy has been designed with those obligations in mind.

By creating an account or accessing the Apalado platform, you acknowledge that you have read this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this policy, please discontinue use of the platform.

This Privacy Policy should be read alongside our Terms and Conditions. Both documents together form the full agreement between you and Apalado regarding your use of the platform.

Note: This policy applies to all users of the Apalado platform, including registered members, visitors browsing the site without an account, and anyone who contacts our customer support team.

What Personal Data We Collect

We collect different categories of information depending on how you interact with the Apalado platform. Below is a comprehensive breakdown of the data we gather and why.

Registration and Identity Information

When you create an Apalado account, we collect your full legal name, date of birth, email address, mobile number, and a username of your choice. This information is necessary to set up and manage your account and to comply with age verification requirements under Philippine gaming regulations.

Know Your Customer (KYC) Documents

Before you can make your first withdrawal, we are required by law to verify your identity. For this purpose, we may collect copies of your government-issued ID (such as a Philippine passport, SSS ID, UMID, PhilSys ID, or driver's licence), a selfie for liveness verification, and proof of your billing address. These documents are handled with the highest level of care and are encrypted at rest.

Financial and Transaction Data

We record all deposit and withdrawal transactions associated with your account, including amounts, dates, payment methods used, and reference numbers. For GCash, Maya, and bank transfer transactions, we store the account identifiers necessary to process your requests. We do not store full card numbers — only masked card details are retained after a transaction is completed.

Gaming Activity Data

We log your gameplay history across all Apalado products — including slots, sabong, poker, jackpot games, and boxing betting. This includes session timestamps, game names, bet amounts, and outcomes. This data is used for account integrity checks, responsible gaming monitoring, and to improve our platform.

Device and Technical Data

When you access the Apalado platform, our systems automatically collect certain technical information including your IP address, browser type and version, operating system, device identifiers, screen resolution, and pages visited. This helps us detect fraud, ensure platform security, and improve the user experience.

Communications Data

When you contact our customer support team via live chat, email, or phone, we retain records of those communications. This helps us resolve ongoing issues efficiently and maintain service quality. If you opt into marketing communications, we also store your preferences for email, SMS, and push notification contacts.

How We Use Your Personal Data

Apalado uses your personal data for specific, legitimate purposes. We do not use your data for anything that falls outside these stated purposes without your consent.

Purpose	Legal Basis
Account creation and management	Contract performance
Identity verification and KYC compliance	Legal obligation
Processing deposits and withdrawals	Contract performance
Fraud prevention and platform security	Legitimate interest
Responsible gaming monitoring	Legal obligation / Legitimate interest
Customer support and dispute resolution	Contract performance
Marketing communications (opted-in only)	Consent
Platform analytics and improvement	Legitimate interest
Compliance with PAGCOR and AMLC regulations	Legal obligation

We will never use your personal data to make automated decisions that produce significant legal effects on you without providing a mechanism for human review. If we wish to use your data for a new purpose not listed above, we will notify you and, where required, seek your fresh consent.

Who We Share Your Data With

Apalado does not sell your personal information. We may share your data with the following categories of trusted recipients strictly on a need-to-know basis:

Payment processors and e-wallet providers (GCash, Maya, GrabPay, Coins.ph, participating banks) — to process your financial transactions.
Identity verification service providers — third-party KYC partners who assist with document and liveness verification.
Game software providers — to enable access to specific games on our platform. They receive only the minimum data needed to run the game session.
Cloud hosting and IT infrastructure providers — companies that host and maintain our platform infrastructure under strict data processing agreements.
Regulatory and law enforcement authorities — including PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission, when we are legally obligated to disclose information.
Fraud prevention and analytics partners — services that help us detect unusual account activity and protect the platform from abuse.

All third-party service providers who receive your personal data are required to handle it in accordance with this Privacy Policy and applicable Philippine data protection law. We do not allow them to use your data for their own marketing or other purposes.

Cross-border transfers: Some of our service providers may be located outside the Philippines. In such cases, we ensure appropriate safeguards are in place — including contractual clauses aligned with NPC standards — to protect your data during international transfers.

Cookies and Tracking Technologies

Apalado uses cookies and similar tracking technologies to improve your experience on the platform. Cookies are small text files stored on your browser or device that help us recognise you and remember your preferences.

We use the following types of cookies:

Essential cookies — required for the platform to function. These cannot be disabled without affecting your ability to use the site (e.g., session cookies that keep you logged in).
Analytics cookies — help us understand how members use the platform, which pages are most visited, and where users encounter difficulties. This data is aggregated and anonymised.
Preference cookies — remember your settings and preferences, such as your chosen language or game category.
Marketing cookies — used only if you have opted into marketing communications, to help us deliver relevant promotional content.

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of some platform features.

Your Data Rights as a Filipino Member

Under the Data Privacy Act of 2012 and NPC regulations, you have the following rights regarding your personal information held by Apalado:

Right to Access

You can request a copy of all personal data we hold about you, along with information on how it is being processed.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to request that we correct it promptly.

Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to our legal retention obligations.

Right to Object

You can object to the processing of your personal data for direct marketing purposes at any time. We will action your request within 5 business days.

Right to Data Portability

You may request a copy of your personal data in a structured, machine-readable format to transfer to another service provider.

Right to Lodge a Complaint

If you believe your data rights have been violated, you may lodge a complaint directly with the National Privacy Commission of the Philippines.

To exercise any of the above rights, please contact our Data Protection Officer at privacy@apalado.com. We aim to respond to all data rights requests within 15 business days.

How We Keep Your Data Secure

Apalado implements a multi-layered security approach to protect your personal information from unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

TLS/SSL encryption on all data transmitted between your browser and our servers
AES-256 encryption for sensitive data stored in our databases, including KYC documents and financial records
Multi-factor authentication (MFA) available for all member accounts and mandatory for staff accessing internal systems
Regular penetration testing and vulnerability assessments conducted by independent cybersecurity firms
Role-based access control (RBAC) ensuring that only authorised personnel can access specific categories of data
24/7 security monitoring with automated alerts for suspicious activity patterns
Data breach response plan — in the event of a breach, we are committed to notifying affected users and the NPC within the timeframes required by law

While we take every reasonable precaution, no online system is completely immune to risk. We encourage all members to use strong, unique passwords and to enable two-factor authentication on their Apalado accounts.

Data Retention

We keep your personal data only for as long as it is needed to fulfil the purposes outlined in this policy, or as required by Philippine law. Our general retention periods are:

Account data: Retained for the duration of your active membership plus 5 years after account closure, in line with PAGCOR and AMLC requirements.
KYC documents: Retained for at least 5 years after the end of the business relationship, as required under the Anti-Money Laundering Act.
Transaction records: Retained for 5 years from the transaction date for anti-money laundering compliance.
Customer support communications: Retained for 3 years from the date of the last communication.
Marketing data: Retained until you withdraw consent or until the data is no longer useful for its stated purpose.

When data reaches the end of its retention period, it is either securely deleted from our systems or anonymised so that it can no longer be linked back to you as an individual.

Changes to This Privacy Policy

Apalado may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to the platform. When we make significant changes, we will post a visible notice on the platform and, where practical, send a notification to your registered email address.

The date at the top of this page always reflects when the policy was last revised. We encourage you to review this page periodically. Continued use of the Apalado platform after any updates constitutes your acceptance of the revised policy.

Contact Our Data Protection Officer

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, you can reach our Data Protection Officer directly:

Email: privacy@apalado.com
Support: support@apalado.com

For unresolved privacy concerns, you may also lodge a formal complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.