ylaro Privacy Policy

1. Information We Collect

ylaro collects various types of personal information to deliver secure, compliant, and personalized gaming experiences. The categories of data we collect include:

• Registration Information: Full name, date of birth, email address, mobile phone number, home address, and government-issued identification documents used to verify your identity and age (21+ requirement).
• Financial Information: Payment method details including GCash account, Maya wallet, bank account numbers (BPI, BDO, Metrobank), 7-Eleven transaction codes, USDT wallet addresses, and Coins.ph identifiers, as well as transaction history (deposits, withdrawals, bonus claims).
• Device and Usage Data: IP address, browser type, device identifiers, operating system, session duration, pages visited, games played, bet history, win/loss records, and interactions with customer support.
• Communication Records: Live chat logs, email correspondence, Messenger and Viber messages, and support ticket histories to assist with account inquiries and resolve disputes.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to track user preferences, enhance platform functionality, and prevent fraud. You may adjust browser settings to refuse cookies, but this may limit certain features.

We only collect information that is necessary for regulatory compliance, account security, payment processing, and service improvement.

2. How We Use Your Information

ylaro uses your personal data for the following lawful purposes:

• Account Management: To create, maintain, and authenticate your ylaro player account, verify your identity, and enforce age restrictions (21+ only).
• Payment Processing: To facilitate deposits and withdrawals through GCash, Maya, BPI, BDO, Metrobank, 7-Eleven, USDT, Coins.ph, and other approved payment channels.
• Regulatory Compliance: To fulfill obligations under PAGCOR licensing requirements, including anti-money laundering (AML) monitoring, Know Your Customer (KYC) verification, and reporting suspicious activity to relevant authorities.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, multiple account abuse, bonus manipulation, and unauthorized access to player accounts.
• Customer Support: To respond to inquiries via live chat, email, Messenger, Viber, and support tickets; troubleshoot technical issues; and resolve disputes.
• Marketing Communications: To send promotional offers, bonus announcements, new game launches, and newsletters — only with your consent. You may opt out of marketing emails at any time.
• Platform Improvement: To analyze user behavior, optimize game performance, improve site navigation, and develop new features tailored to Filipino players.

We do not sell, rent, or share your personal information with third parties for their own marketing purposes without your explicit consent.

3. How We Protect Your Data

ylaro employs industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All sensitive data — including passwords, payment details, and transaction records — is encrypted using SSL/TLS protocols during transmission and AES-256 encryption at rest.
• Access Controls: Only authorized ylaro personnel with a legitimate business need can access your data, and all access is logged and monitored.
• Secure Payment Gateways: All financial transactions are processed through PCI-DSS compliant payment providers trusted by millions of Filipino users (GCash, Maya, major Philippine banks).
• Regular Security Audits: ylaro undergoes periodic third-party security audits and vulnerability assessments to maintain the highest protection standards.
• Two-Factor Authentication (2FA): We strongly encourage players to enable 2FA for an additional layer of account security.

While no system is 100% secure, ylaro continuously invests in security infrastructure to safeguard your information against evolving threats.

4. Sharing Your Information

ylaro may share your personal information with third parties only in the following limited circumstances:

• Service Providers: We work with trusted third-party vendors who assist with payment processing (GCash, Maya, BPI, BDO), identity verification, customer support software, hosting, and analytics. These providers are contractually bound to protect your data and use it only for the specific services they provide to ylaro.
• Regulatory and Law Enforcement: We may disclose your information to PAGCOR, the National Privacy Commission (NPC), Philippine law enforcement agencies, or courts when required by law, subpoena, or regulatory investigation.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the new owner, subject to continued compliance with this Privacy Policy.
• Fraud Prevention Networks: We participate in industry fraud-prevention networks and may share anonymized or hashed data to detect multi-account abuse and protect the integrity of the gaming ecosystem.

ylaro will never sell your personal information to third-party marketers or data brokers.

5. Data Retention

ylaro retains your personal information only for as long as necessary to fulfill the purposes outlined in this Policy and to comply with legal obligations:

• Active Accounts: Personal and financial data for active accounts is retained for the duration of your relationship with ylaro.
• Closed or Inactive Accounts: After account closure or prolonged inactivity, we retain data for a period required by PAGCOR regulations and Philippine law — typically up to five (5) years — for audit, dispute resolution, and regulatory compliance purposes.
• Transaction Records: Financial transaction logs are retained for seven (7) years to comply with anti-money laundering (AML) and tax reporting requirements.
• Marketing Consent: If you opt out of marketing communications, we retain only the minimum data necessary to honor your opt-out request.

Once retention periods expire, your data is securely deleted or anonymized.

6. Your Data Privacy Rights

Under the Data Privacy Act of 2012, Filipino citizens and residents have the following rights regarding their personal information:

• Right to Access: You may request a copy of the personal data ylaro holds about you.
• Right to Rectification: You may request that we correct inaccurate or incomplete information in your profile.
• Right to Erasure: You may request deletion of your personal data, subject to legal retention obligations (e.g., PAGCOR compliance, AML regulations).
• Right to Object: You may object to the processing of your data for direct marketing or other specific purposes.
• Right to Data Portability: You may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact ylaro's Data Protection Officer at [email protected]. We will respond to your request within the timeframe prescribed by Philippine law (typically 15 working days).

7. Cookies and Tracking Technologies

ylaro uses cookies — small text files stored on your device — to enhance your experience on our platform. Types of cookies we use include:

• Essential Cookies: Required for login authentication, session management, and security. These cannot be disabled without affecting site functionality.
• Performance Cookies: Collect anonymous data on how players use ylaro (e.g., most popular games, navigation paths) to help us improve the platform.
• Functional Cookies: Remember your preferences such as language, currency display (PHP), and favorite games for a personalized experience.
• Advertising Cookies: Track your activity across the web to serve relevant ylaro promotions (only with your consent).

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may limit your ability to access some features of ylaro's platform.

8. International Data Transfers

ylaro primarily serves Filipino players and stores data on servers located within the Philippines or in jurisdictions with equivalent data protection standards. In limited cases — such as when using third-party service providers (payment processors, cloud hosting) — your data may be transferred to countries outside the Philippines. In such instances, we ensure that appropriate safeguards are in place (e.g., Standard Contractual Clauses, adequacy decisions) to protect your information in accordance with the Data Privacy Act of 2012.

9. Children's Privacy

ylaro's services are strictly restricted to individuals aged 21 years and older. We do not knowingly collect personal information from minors. If we discover that a player under the age of 21 has created an account, we will immediately suspend the account, void any winnings, and delete all associated personal data. Parents or guardians who believe their child has registered on ylaro should contact us immediately at [email protected].

10. Changes to This Privacy Policy

ylaro reserves the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other operational factors. When we make material changes, we will notify you via email, in-platform notification, or by updating the "Last Updated" date at the top of this page. Your continued use of ylaro's platform following any revisions constitutes your acceptance of the updated Policy. We encourage you to review this page periodically to stay informed about how we protect your data.

11. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or how ylaro handles your personal data, please reach out to our Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 via the ylaro platform
• Messenger & Viber: Available — details on the platform

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. We are committed to working with you and the NPC to resolve any concerns promptly and in good faith.