This Privacy Policy explains how panako collects, uses, stores, and protects the personal information of players and visitors in accordance with Republic Act No. 10173 — the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations.
Six core commitments that guide every data practice at panako.
panako operates fully within the framework of RA 10173 — the Philippine Data Privacy Act of 2012. Your rights as a data subject are respected and enforced, including your right to access, correct, and erase your personal data.
All data transmitted between your device and panako's servers is encrypted using 256-bit SSL — the same standard used by major Philippine banks like BPI and BDO. Your login details and payment data are never sent in plain text.
panako does not sell, rent, or trade your personal information to third parties for commercial purposes. Your data is used solely for the operation of your panako account and fulfilment of our regulatory obligations.
Registered panako players can request access to, correction of, or deletion of their personal data at any time. Data portability requests are also honoured in accordance with NPC regulations.
panako only collects the personal data that is necessary for the purpose being served — account registration, identity verification, payment processing, or regulatory compliance. We do not collect data speculatively.
In the event of a personal data breach that poses a real risk to players, panako will notify affected individuals and the National Privacy Commission (NPC) within the timeframes required by Philippine law.
The Philippine Data Privacy Act grants you the following rights as a data subject at panako.
Know what data panako collects and why before it is collected.
Request a copy of the personal data panako holds about you.
Correct inaccurate or incomplete personal data in your panako account.
Request deletion of your data where no lawful basis for retention remains.
Receive your personal data in a structured, machine-readable format.
Object to the processing of your data for direct marketing at any time.
1.1 panako ("panako", "we", "us", "our") is committed to protecting the privacy and personal data of every person who accesses, registers with, or uses the panako Platform located at panako.co ("Platform"). This Privacy Policy ("Policy") describes how panako processes personal data, the purposes for which it is used, the parties with whom it may be shared, and the rights available to data subjects.
1.2 This Policy is issued in compliance with Republic Act No. 10173, known as the Data Privacy Act of 2012, its Implementing Rules and Regulations, and the relevant issuances of the National Privacy Commission of the Philippines (NPC).
1.3 By accessing or using the panako Platform — whether as a guest or as a registered player — you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.
1.4 This Policy should be read together with panako's Terms & Conditions and Responsible Gaming Policy, which together constitute the full framework governing your relationship with panako.
2.1 For the purposes of the Philippine Data Privacy Act, panako is the personal information controller in respect of the personal data processed through the Platform. panako determines the purposes and means of processing your personal information.
2.2 panako has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection law. Contact details for the DPO are set out in Section 17 of this Policy.
2.3 Where panako engages third-party service providers that process personal data on its behalf — such as payment processors, identity verification services, or cloud infrastructure providers — those parties act as personal information processors and are bound by contractual obligations of confidentiality and data protection no less stringent than those in this Policy.
3.1 panako collects the following categories of personal data, to the extent necessary for the purposes described in Section 5:
| Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government-issued ID type and number (passport, PhilSys ID, driver's licence, UMID) | Registration; KYC verification |
| Contact Data | Philippine mobile number, email address, residential address in the Philippines | Registration |
| Financial Data | GCash account reference, Maya account reference, bank account name and number (masked), transaction history, deposit and withdrawal records | First deposit; KYC; ongoing transactions |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, session duration, login timestamps | Each platform session |
| Gameplay Data | Game history, bet amounts, win/loss records, RNG seed references (non-identifiable), live game session logs | During gameplay |
| Communications Data | Live chat transcripts, support email correspondence, any voluntary information provided during support interactions | Customer support interactions |
| Responsible Gaming Data | Self-exclusion records, deposit limit settings, cooling-off period records, problem gambling self-assessment responses (if completed) | When responsible gaming tools are activated |
3.2 panako does not collect sensitive personal information — as defined in Section 3(l) of RA 10173 — except where strictly necessary for identity verification or responsible gaming purposes and where a lawful basis exists for such processing. Sensitive personal information collected for KYC is stored in encrypted form and access is restricted to authorised compliance personnel only.
4.1 panako collects personal data through the following means:
5.1 panako processes personal data for the following purposes:
6.1 panako processes personal data on the following lawful bases, as applicable under RA 10173:
7.1 panako may share your personal data with the following categories of recipients:
panako engages third-party service providers who process personal data on panako's behalf, strictly for the delivery of services to panako. These include payment processors (GCash, Maya, BDO, BPI, and others), KYC/identity verification platforms, cloud infrastructure and hosting providers, fraud detection and cybersecurity vendors, and customer support software providers. All processors are bound by data processing agreements that require them to process data only as instructed and to maintain appropriate security measures.
panako may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, the Bureau of Internal Revenue, Philippine law enforcement agencies, or courts of competent jurisdiction where required by law, valid legal process, or a binding regulatory order.
In the event of a merger, acquisition, sale of substantially all assets, or similar corporate transaction involving panako, personal data held by panako may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to how your data will be processed as a result.
7.2 In all cases where personal data is shared outside the Philippines, panako will ensure that adequate safeguards are in place to protect your data in accordance with RA 10173 and NPC standards for cross-border data transfers.
8.1 panako uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that help the Platform function correctly, remember your preferences, and collect analytics data.
8.2 The categories of cookies used by panako are:
8.3 panako does not use third-party advertising cookies or allow advertising networks to place tracking pixels on the Platform.
8.4 You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform, including panako login functionality.
9.1 panako retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable Philippine law, whichever is longer.
9.2 The following general retention periods apply:
9.3 Following the applicable retention period, personal data is securely deleted, anonymised, or archived in a form that does not identify individual data subjects, in accordance with panako's data lifecycle management procedures.
10.1 panako implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
10.2 Notwithstanding these measures, no data transmission over the internet or electronic storage system is 100% secure. While panako takes all reasonable precautions, it cannot guarantee absolute security of personal data.
11.1 Some of panako's third-party service providers — including cloud infrastructure, identity verification, and fraud prevention vendors — may process personal data on servers located outside the Philippines. Where such cross-border transfers occur, panako ensures they are conducted only:
11.2 panako will not transfer personal data internationally to any recipient that cannot demonstrate adequate data protection measures consistent with Philippine law.
12.1 As a data subject under RA 10173, you have the rights described in Section 6 of this Policy (and summarised in the cards displayed above). To exercise any of these rights in relation to personal data held by panako, you may:
12.2 panako will acknowledge receipt of a data subject request within three (3) business days and will respond substantively within fifteen (15) calendar days, extendable by a further fifteen (15) days for complex requests with prior notification to you.
12.3 panako may require identity verification before processing a data subject request to ensure that personal data is not disclosed to an unauthorised person. This is a protective measure, not an obstacle.
12.4 If you are dissatisfied with how panako has handled your personal data or your data subject request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC).
13.1 If you are a parent or guardian and believe that a person under 21 years of age has registered a panako account or provided personal data to panako without your consent, please contact panako's support team at [email protected] immediately. panako will investigate the matter promptly and take the appropriate action including account closure and deletion of collected data.
14.1 panako may send you marketing communications — including promotions, bonus offers, game announcements, and platform news — via SMS to your registered Philippine mobile number and/or via email, in the following circumstances:
14.2 You may opt out of marketing communications at any time by:
14.3 Opting out of marketing communications does not affect the delivery of transactional and service communications — such as withdrawal confirmations, OTP codes, and security alerts — which are necessary for account operation and cannot be disabled.
15.1 The panako Platform does not contain links to third-party websites, social media platforms, or external services, except as may be required for payment processing (redirect to GCash or Maya confirmation screens). This Policy does not apply to third-party platforms or services, including payment providers' own privacy practices.
15.2 When you are redirected to a payment provider's interface during a deposit or withdrawal transaction, you are subject to that provider's own privacy policy and terms of service. panako does not control the data practices of GCash, Maya, BPI, BDO, Metrobank, or any other payment provider and recommends reviewing their respective privacy policies.
16.1 panako reserves the right to update or amend this Privacy Policy at any time to reflect changes in law, regulatory guidance, panako's data practices, or Platform features.
16.2 The "Last Updated" date at the top of this Policy will reflect the date of the most recent revision. Material changes — those that substantively affect how panako uses your personal data or your rights as a data subject — will be communicated to registered players via their registered email address and/or via in-platform notification, with at least fourteen (14) days' advance notice where reasonably practicable.
16.3 Continued use of the panako Platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree to the revised Policy, you should discontinue use of the Platform and may request account closure in accordance with panako's Terms & Conditions.
17.1 For any questions, concerns, or requests regarding this Privacy Policy or panako's data processing practices, please contact panako's Data Protection Officer using the following details:
Data Protection Officer — panako
Email: [email protected]
(Please include "Privacy / DPO Request" in the subject line.)
Customer Support (General):
Via live chat on panako.co — available 8AM to midnight PHT daily.
17.2 For complaints that panako has been unable to resolve to your satisfaction, you may lodge a formal complaint with the National Privacy Commission of the Philippines (NPC) through their official channels.
Now that you know how panako handles your data, you can play with full confidence. Join over a million Filipino players who trust panako for secure GCash gaming, live casino, slots, and more — all in PHP. Must be 21 years or older.
🔞 21+ Only · 🇵🇭 Philippines · 🔒 SSL Encrypted · RA 10173 Compliant