A licence or list entry does not tell you how a website collects, stores, shares, or protects personal data. Those are separate questions. Before entering identity details, contact information, or financial information on any gambling-related site, read its privacy notice and decide whether the requested data and stated purpose make sense to you.
Start with basic transparency. Can you identify the legal entity responsible for the service? Does the privacy notice explain what information is collected, why it is needed, how long it is retained, and whom it may be shared with? Is there a clear route for privacy questions or requests? If those details are absent, confusing, or inconsistent with the hostname you expected, do not assume the gaps are harmless.
Treat requests arriving through unexpected messages or lookalike domains with particular care. Compare the address bar with the exact domain printed in the relevant official record, but remember what that comparison can and cannot show. The October 29, 2026 PAGCOR lists are dated snapshots of certain operator or brand-domain entries. They are not privacy audits, cybersecurity certificates, or proof that a particular page is operated by the listed entity today.
Avoid sending sensitive documents through unsolicited links or channels. Do not share passwords or one-time codes with a person claiming to “verify” a licence or unlock an account. If you need to contact a company, independently locate its documented official route and verify the hostname rather than using a link from an advertisement. The compliance corpus does not establish the privacy practices of any named operator, so no site-specific guarantee is made here.
For a publisher, the same restraint applies: do not collect more information than the stated purpose requires, and do not imply that a regulator listing guarantees secure data handling. This article cannot substitute for a privacy policy review, a security assessment, or legal advice.
Eligibility is also separate from privacy and licensing. The cited PAGCOR code excludes persons under 21 and students at Philippine schools, colleges, or universities; age 21 alone is not sufficient. If you are unsure whether a service is appropriate or whether a data request is legitimate, pause rather than disclose more information.
Sources: PAGCOR Electronic Gaming Licensing index https://www.pagcor.ph/regulatory/cegs.php; PAGCOR Responsible Gaming Code https://www.pagcor.ph/regulatory/pdf/RG-Code-of-Practice-v6.pdf
Also consider the path by which a request arrived. A message may imitate a familiar company while directing you to an unrelated host. Compare the full hostname, not just the text before the first dot, and close unsolicited pages before independently finding an official contact route. Never use a licensing claim as a reason to ignore an unexpected request for credentials or verification codes.