This Privacy Policy explains how panako collects, uses, stores, shares, and protects the personal data of its users. It is written in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and PAGCOR's player data obligations.
panako processes all personal data in accordance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012, and its implementing rules and regulations.
All personal data transmitted to and from panako.vip is protected by 256-bit SSL/TLS encryption, the same standard used by Philippine banking and government portals.
panako does not sell, rent, or commercially trade your personal data to third parties for their independent marketing purposes. Your data is used only for the purposes stated in this Policy.
Identity verification data is collected exclusively to comply with PAGCOR's player verification obligations and the Anti-Money Laundering Act (AMLA). It is not used beyond these defined purposes.
Filipino players hold enforceable rights over their personal data under the Data Privacy Act, including the rights to access, correct, erase, and object to processing. panako honours all these rights.
Personal data is retained only for as long as necessary for the purposes for which it was collected or as required by PAGCOR regulations, AMLA obligations, and Philippine law.
panako ("panako", "we", "us", "our", "the Company") is the operator of panako.vip and the provider of all associated online gaming services including panako Casino, slots, live dealer games, sports betting, bingo, and online sabong. We are committed to protecting the personal data of all users — registered players, visitors, and prospective customers — in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations ("IRR"), and all applicable issuances of the National Privacy Commission ("NPC").
This Privacy Policy ("Policy") governs all personal data that panako collects, processes, stores, and shares in connection with the operation of the panako platform and the provision of services to players across the Philippines — including Metro Manila (Makati, Quezon City, Pasay, Taguig), Cebu, Davao, Iloilo, Cagayan de Oro, Baguio, and all other regions. This Policy should be read alongside panako's Terms & Conditions and Responsible Gaming page.
For the purposes of the Philippine Data Privacy Act of 2012, the personal information controller responsible for your data is panako, the operator of panako.vip. Our designated Data Protection Officer ("DPO") can be contacted via the email address listed in Section 16 of this Policy. The DPO is responsible for overseeing panako's data protection compliance, handling data subject rights requests, and serving as the primary liaison with the National Privacy Commission.
This Policy applies to all personal data processed by panako in connection with the operation of panako.vip and all services accessible through a registered panako account. It applies to:
This Policy does not apply to third-party websites, applications, or services that may be linked to or from panako.vip. panako is not responsible for the privacy practices of any third-party operator, payment provider, or game developer whose services are accessed in connection with the panako platform.
panako collects the following categories of personal data in connection with account registration, KYC verification, platform use, and customer support interactions:
| Data Category | Specific Data Points | Classification |
|---|---|---|
| Identity Data | Full legal name, date of birth, government ID type and number, nationality, photograph (from ID document and selfie verification) | Sensitive Personal Information |
| Contact Data | Email address, Philippine mobile number, residential address | Personal Information |
| Account Data | Username, hashed password, account creation date, account status, KYC verification status, responsible gaming settings | Personal Information |
| Financial Data | Deposit and withdrawal history, payment method identifiers (e.g., last four digits of linked GCash or bank account number), transaction timestamps and amounts, balance history | Sensitive Personal Information |
| Gaming Activity Data | Game history (titles played, stakes, outcomes), session durations, betting patterns, sports markets wagered on, bingo card purchase records | Personal Information |
| Technical Data | IP address, device type and operating system, browser type and version, geolocation data (country/region level), session identifiers, login timestamps | Personal Information |
| Communication Data | Records of live chat, email, and support ticket interactions with panako's customer support team; marketing communication preferences | Personal Information |
| Source of Funds Data | Employment status, income source, and supporting documentation where requested for enhanced due diligence purposes under AMLA obligations | Sensitive Personal Information |
The majority of personal data panako holds is provided directly by you during account registration, the KYC identity verification process, deposit and withdrawal transactions, participation in promotional activities, and interactions with panako's customer support team. You also provide data when you update your account settings, set responsible gaming limits, or submit feedback or complaints.
When you access panako.vip or use any game or service on the platform, certain technical and usage data is collected automatically through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device and browser information, pages visited, game sessions initiated, and time spent on different sections of the platform. See Section 12 of this Policy for more detail on cookies and tracking technologies.
panako may receive personal data about you from third parties in limited circumstances, including:
panako processes your personal data for the following clearly defined purposes:
Under the Philippine Data Privacy Act of 2012, panako processes your personal data on the following lawful bases:
| Processing Activity | Legal Basis (DPA Section) |
|---|---|
| Account registration, KYC, payment processing, game delivery | Performance of contract (Section 12(b)) — necessary to deliver the services you signed up for |
| PAGCOR compliance, AMLA reporting, age verification | Legal obligation (Section 12(c)) — required by law or PAGCOR regulatory directive |
| Fraud prevention, security monitoring | Legitimate interests (Section 12(f)) — protecting panako and its players from fraud and prohibited conduct |
| Responsible gaming monitoring | Legal obligation and legitimate interests — PAGCOR requires responsible gaming compliance; panako has a genuine interest in player welfare |
| Marketing communications | Consent (Section 12(a)) — you must opt in to receive marketing from panako; consent may be withdrawn at any time |
| Platform analytics and improvement | Legitimate interests (Section 12(f)) — improving platform quality benefits all players; processing uses anonymised or aggregated data where possible |
panako shares your personal data with third-party service providers who process data on panako's behalf, under written data processing agreements that require them to maintain appropriate security standards and use the data only for the specified purpose. These include identity verification providers, payment processors (GCash, Maya, BPI, BDO, UnionBank, Coins.ph), cloud hosting providers, fraud detection vendors, and customer support platform providers.
Certain game providers — including Ezugi for live dealer games and slot developers whose titles are available in the panako Casino library — may receive limited technical and session data necessary to deliver and settle game rounds. These providers are bound by data processing terms consistent with the DPA.
panako is required to disclose player data to PAGCOR upon request as a condition of its operating licence. panako may also be required to report player transaction data to the Anti-Money Laundering Council (AMLC) under the Anti-Money Laundering Act. These disclosures are made strictly in accordance with applicable law and PAGCOR directives.
panako may disclose personal data to law enforcement agencies, courts, or government authorities where required by a valid legal process — including a court order, subpoena, or official request from a Philippine law enforcement body — or where panako has a good-faith belief that disclosure is necessary to protect the rights, property, or safety of panako, its players, or the public.
panako does not and will never sell, rent, or commercially exchange your personal data with third parties for their independent marketing or commercial purposes.
Some of panako's service providers — including cloud infrastructure operators and certain game software developers — may be located or process data outside the Republic of the Philippines. Where cross-border personal data transfers occur, panako ensures that appropriate safeguards are in place to protect your personal data consistent with the standards required under the Philippine Data Privacy Act, including contractual clauses that impose DPA-equivalent data protection obligations on receiving parties in the destination country.
panako does not transfer personal data to jurisdictions that the National Privacy Commission has determined to provide an inadequate level of personal data protection without implementing the additional safeguards required under NPC guidelines.
panako retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following retention schedule applies:
| Data Category | Retention Period | Basis |
|---|---|---|
| KYC identity documents | 5 years from account closure or last transaction date | AMLA obligation (RA 9160, as amended) |
| Financial transaction records | 5 years from transaction date | AMLA obligation and PAGCOR requirement |
| Account data (active accounts) | For the duration of the account's active status plus 5 years | Contract performance and regulatory |
| Gaming activity data | 3 years from session date for active accounts; 5 years from closure for closed accounts | PAGCOR audit obligations |
| Customer support records | 3 years from last interaction | Legitimate interests (dispute resolution) |
| Marketing preference records | Until consent is withdrawn or account is closed | Consent |
| Technical and device logs | 12 months from collection | Fraud prevention and security |
At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders it impossible to re-identify. Where anonymised data is retained for analytical purposes, it no longer constitutes personal data subject to this Policy.
panako implements the following technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:
As a data subject under the Philippine Data Privacy Act of 2012, you hold the following enforceable rights in relation to your personal data held by panako:
You have the right to request a copy of the personal data panako holds about you and information about how it is being processed. Requests will be responded to within 15 business days.
You have the right to request correction of inaccurate or incomplete personal data. Some corrections (e.g., name changes) may require supporting documentary evidence.
You may request deletion of your personal data where it is no longer necessary for the purpose collected, where consent is withdrawn, or where processing is unlawful — subject to panako's overriding legal retention obligations.
You may object to the processing of your personal data based on legitimate interests, including direct marketing. Objection to marketing takes effect immediately upon receipt.
You may request that panako suspend processing of your personal data while a rectification or objection request is being evaluated, without requiring deletion of the data.
Under Section 16(f) of the DPA, you have the right to be indemnified for damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data.
To exercise any of the above rights, please contact panako's Data Protection Officer at the contact details provided in Section 16. panako will respond to all verified data subject rights requests within the timeframe specified under NPC regulations. We may require proof of identity before processing requests to protect against unauthorized data access.
Cookies are small text files placed on your device when you visit a website. panako uses cookies and similar tracking technologies (web beacons, session tokens, local storage) on panako.vip to enable core platform functionality, maintain session security, and collect anonymised analytics data.
You can manage non-essential cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent your ability to log in and use the panako platform. For information on managing cookies in specific browsers, refer to your browser's help documentation.
panako's services are strictly restricted to individuals who are 21 years of age or older. panako does not knowingly collect personal data from individuals under 21 years of age. If panako becomes aware that personal data has been provided by a person under 21, that account will be immediately closed, all associated data will be securely deleted, and any deposits made will be refunded in accordance with panako's policies.
If you are a parent or guardian and have reason to believe that a person under 21 in your care has attempted to register a panako account or has provided personal data to panako, please contact the DPO immediately using the contact details in Section 16 so that the matter can be investigated and resolved without delay.
If you have a complaint or concern about how panako has handled your personal data, we encourage you to contact panako's Data Protection Officer in the first instance using the contact details in Section 16. panako will acknowledge receipt of your complaint within two (2) business days and will provide a substantive response within fifteen (15) business days.
If you are not satisfied with panako's response to your complaint, or if you believe that panako has not complied with the Philippine Data Privacy Act, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the supervisory authority responsible for enforcement of the DPA and can be reached through its official government channels.
panako may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, PAGCOR regulatory requirements, or NPC guidance. Where material changes are made to this Policy, panako will notify registered Players via their registered email address before the updated Policy takes effect. The effective date of the current version is indicated at the top of this page.
Continued use of the panako platform following notification of an updated Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree with a material change, you have the right to close your account and request deletion of your personal data, subject to panako's legal retention obligations as described in Section 9.
For all data privacy enquiries, data subject rights requests, and privacy-related complaints, please contact panako's Data Protection Officer:
Play at a platform that takes your data as seriously as your gaming experience. Create a verified panako account and access 500+ games with the confidence that your personal information is handled lawfully, securely, and transparently.
21+ Only. Please play responsibly. PAGCOR regulated. Visit our Responsible Gaming page if gambling affects your life.