Privacy Policy – legitlink Philippines Online Gaming Platform

1. Policy Overview

This Privacy Policy describes how legitlink ("we," "us," "the Platform") collects, processes, stores, and protects the personal information of players and visitors who use the legitlink website and mobile application.

By registering an account or using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. This Policy applies alongside our Terms and Conditions.

This Policy applies to all personal data collected by legitlink in connection with the provision of online gaming services, including sports betting, live casino, and slot games, to players in the Philippines.

2. Data We Collect

We collect personal data through the following channels: your account registration, KYC identity verification process, deposit and withdrawal transactions, your interactions with the platform during gameplay, and your communications with our support team.

We do not collect sensitive personal information beyond what is required for identity verification purposes. We do not store full payment card numbers.

3. How We Use Your Data

Your personal data is used for specific, defined purposes. We do not use data for purposes incompatible with the reasons for which it was originally collected. Primary uses include:

• Creating and managing your player account, including authentication and access control via OTP.
• Processing deposits and withdrawals in Philippine Peso through our supported local payment channels.
• Verifying your identity (KYC) as required before processing your first withdrawal.
• Monitoring and enforcing compliance with our Terms and Conditions, including fraud detection and anti-money laundering obligations.
• Delivering customer support and responding to your enquiries and complaints.
• Sending transactional notifications related to your account activity, such as deposit confirmations and withdrawal status updates.
• Improving platform performance, game functionality, and user experience based on anonymised usage analytics.
• Meeting our legal, regulatory, and audit obligations under Philippine law.

Where we intend to use your data for direct marketing or promotional communications, we will seek your consent separately and provide an opt-out at any time.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, we rely on the following lawful bases for processing your personal data:

• Contractual necessity: Processing your data is necessary to fulfil the contract between you and legitlink — specifically, to provide you with access to the platform and process your transactions.
• Legal obligation: We are required to collect and retain certain data to comply with Philippine law, including anti-money laundering regulations and our obligations related to identity verification.
• Legitimate interests: We process some data on the basis of our legitimate interests in operating a secure and fraud-resistant platform — for example, monitoring login activity and detecting unusual patterns.
• Consent: For any processing not covered by the above — such as optional marketing communications — we rely on your explicit, informed consent, which you may withdraw at any time.

5. Data Sharing and Third Parties

We do not sell your personal data to any third party. Data may be shared with carefully selected service providers who assist in running the platform, strictly for the purposes described in this Policy:

• Payment processors: Philippine bank transfer and e-wallet services require us to share necessary transaction details to process deposits and withdrawals in PHP.
• Identity verification providers: KYC checks may involve a third-party verification service provider who processes your identification documents under confidentiality obligations.
• Technology and hosting providers: Our platform infrastructure partners who store and process data on our behalf, under binding data processing agreements.
• Legal and regulatory authorities: We may disclose data to government agencies, law enforcement, or regulators in the Philippines where required by law or in response to a valid legal order.

6. Data Security

legitlink takes the security of your personal data seriously and applies a range of technical and organisational measures designed to protect it from unauthorised access, loss, or misuse:

• SSL (Secure Socket Layer) encryption on all data transmitted between your device and the platform.
• OTP (one-time password) authentication required for account login and sensitive account changes.
• Access to personal data within our organisation is restricted to authorised personnel with a defined need for that information.
• Regular internal security reviews and monitoring of account activity for suspicious patterns.
• Secure data storage with access controls and audit logging.

While we take these precautions, no internet transmission or electronic storage system is completely secure. We encourage you to use a strong, unique password for your legitlink account and to contact support immediately if you suspect any unauthorised access to your account.

7. Data Retention

We retain your personal data for as long as your account is active and for a defined period after account closure, as required by Philippine law and our internal compliance requirements. Specific retention periods include:

• Account and identity data is retained for the duration of your active account and for a minimum period after closure as required under applicable anti-money laundering and gaming-related regulations.
• Transaction records (deposit and withdrawal history) are retained for the period required by Philippine financial record-keeping obligations.
• Gaming activity data is retained to support dispute resolution, responsible gaming monitoring, and compliance audit trails.
• Support communications are retained for a reasonable period to enable follow-up and quality assurance.

Once data is no longer required for its stated purpose and the applicable retention period has elapsed, it is securely deleted or irreversibly anonymised. Anonymised, aggregated data may be retained indefinitely for analytics purposes.

8. Your Data Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights regarding your personal data held by legitlink:

• Right to be informed: You have the right to know what personal data we collect and how it is used — this Policy is the primary means by which we fulfil this obligation.
• Right of access: You may request a copy of the personal data we hold about you at any time by contacting our support team.
• Right to correction: If any of your personal data is inaccurate or incomplete, you have the right to request that we correct it.
• Right to erasure: In certain circumstances, you may request that we delete your personal data. Note that some data must be retained to meet legal obligations regardless of this request.
• Right to object: You may object to the processing of your data for direct marketing purposes at any time.
• Right to data portability: Where technically feasible and legally required, you may request a copy of your data in a structured, commonly used format.

To exercise any of these rights, contact us at [email protected]. We will respond to your request within a reasonable period in accordance with the requirements of Philippine data privacy law.

9. Cookies and Tracking Technologies

The legitlink website and mobile app use cookies and similar tracking technologies to support platform functionality, maintain your session, and understand how the platform is used. The types of cookies we use include:

• Essential cookies: Required for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without affecting your ability to use the platform.
• Functional cookies: Remember your preferences such as language settings and display options to improve your experience on return visits.
• Analytics cookies: Collect anonymised data about how players navigate the platform — such as which pages are visited most and how long sessions last. This data is used only to improve the platform experience and is not linked back to individual identifiable users.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the platform but may affect some convenience features. Note that essential cookies cannot be disabled via browser settings while using the platform.

10. Minors and Under-Age Players

legitlink is strictly a 21+ platform. We do not knowingly collect personal data from individuals under 21 years of age. Age verification is part of the KYC process and is a mandatory step before any withdrawal can be processed.

If we discover that personal data has been collected from a person under the age of 21, we will take immediate steps to close the account, cancel any pending transactions, and delete the personal data associated with that account.

If you are aware of a minor who has registered on the platform, please notify us at [email protected] immediately so we can act on it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify you through a notice on the platform or by email to your registered address.

The date of the most recent revision is always shown at the top of this page. Continued use of the platform after an updated Policy has been published constitutes your acceptance of the changes. If you do not agree to the revised Policy, please stop using the platform and contact support to close your account.

We encourage you to review this page periodically, particularly before making a new deposit or updating your account information.

12. Contact Us About Privacy

If you have questions about this Privacy Policy, want to exercise your data rights, or have a concern about how your personal data is being handled, please reach out to our privacy team:

For formal data subject access requests, please include your full registered name, account email or mobile number, and a clear description of the data you are requesting access to or the action you are requesting. We will verify your identity before processing the request.