ggplay Privacy Policy

1. Introduction

ggplay is committed to protecting the privacy and personal data of all players who use our online casino and gaming platform. This Privacy Policy applies to all personal information collected through the ggplay website, mobile interface, and related services (collectively, the "Platform"). By creating an account or using any part of the ggplay Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

As a PAGCOR-regulated gaming operator within the Republic of the Philippines, ggplay is subject to Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), and all implementing rules and regulations issued by the National Privacy Commission (NPC). We process personal data only in accordance with these legal obligations and recognized principles of data protection, including lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.

2. Data Controller

For purposes of the Data Privacy Act of 2012, ggplay acts as the data controller with respect to all personal information collected through the Platform. As the data controller, ggplay determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data protection laws.

ggplay's designated Data Protection Officer (DPO) oversees our compliance with the DPA and serves as the primary point of contact for privacy-related inquiries, data subject requests, and complaints. Contact information for our DPO is provided in Section 13 below.

3. Information We Collect

3.1 Personal Information Provided by You

When you register an account on ggplay, we collect the following categories of personal information that you voluntarily provide:

• Identity Information: Full legal name, date of birth, gender, and nationality as reflected on your government-issued identification documents
• Contact Information: Email address, Philippine mobile phone number, and residential address within the Philippines
• Account Credentials: Username and hashed password (we do not store passwords in plain text)
• Financial Information: Payment method details including GCash or PayMaya account identifiers, bank account numbers for BPI, BDO, or Metrobank transfers, and cryptocurrency wallet addresses where applicable
• Verification Documents: Copies of government-issued IDs (Philippine passport, driver's license, UMID, national ID, or other PAGCOR-acceptable identification), proof of address documents, and selfie photographs for identity verification (KYC) purposes

3.2 Information Automatically Collected

When you access or use the ggplay Platform, we automatically collect certain technical and usage information through cookies, web beacons, and similar tracking technologies:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers
• Connection Data: IP address, geographic location data derived from IP address, internet service provider, connection timestamps
• Usage Data: Pages visited, games played, bet history, deposit and withdrawal transactions, session duration, clickstream data, referring URLs
• Performance Data: Platform load times, error messages, application crashes, and other technical diagnostics

3.3 Information from Third Parties

In limited circumstances, ggplay may receive personal information about you from third-party sources, including payment processors (for transaction verification), identity verification services (for KYC compliance), and fraud prevention services. All third-party data sources are contractually required to process your data in accordance with applicable Philippine data protection laws.

4. How We Use Your Data

ggplay processes your personal information for the following specific, legitimate purposes:

4.1 Account Management & Service Provision

We use your identity and contact information to create and maintain your ggplay account, authenticate your identity when you log in, provide customer support, process your deposits and withdrawals, and deliver the gaming services you have requested. This processing is necessary for the performance of our contract with you as set forth in our Terms & Conditions.

4.2 Regulatory & Legal Compliance

As a PAGCOR-regulated operator, ggplay is required by law to verify the identity and age of all players, maintain records of gaming transactions, report suspicious financial activity under the Anti-Money Laundering Act (AMLA) as amended, and cooperate with lawful requests from PAGCOR, the National Privacy Commission, and other Philippine regulatory authorities. This processing is necessary to comply with legal obligations to which ggplay is subject.

4.3 Fraud Prevention & Platform Security

We process device information, IP addresses, and usage patterns to detect and prevent fraudulent activity, unauthorized account access, bonus abuse, collusion, and other violations of our Terms & Conditions. This processing is based on our legitimate interest in protecting the Platform, our players, and ourselves from fraud and misuse.

4.4 Responsible Gaming

ggplay uses gameplay and transaction data to monitor for signs of problem gambling behavior, enforce deposit and loss limits set by players, implement self-exclusion requests, and fulfill our responsible gaming obligations under PAGCOR regulations. This processing is based on both legal obligation and our legitimate interest in promoting player welfare.

4.5 Platform Improvement & Analytics

We analyze aggregated and anonymized usage data to understand how players interact with the Platform, identify technical issues, improve game offerings, optimize user experience, and develop new features. Where possible, this analysis is conducted on de-identified data that cannot reasonably be re-associated with an individual player.

4.6 Marketing & Promotional Communications

With your explicit consent, ggplay may use your email address and mobile number to send promotional offers, bonus notifications, and other marketing communications. You may wi thdraw consent to marketing communications at any time by updating your notification preferences in your account settings or by contacting our customer support team. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal, and it does not affect our ability to send you essential account-related communications such as transaction confirmations, security alerts, and policy update notices.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, ggplay processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration, including account management, game provision, and payment processing
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AMLA reporting requirements, tax regulations, court orders, and other applicable Philippine laws
• Legitimate Interest: Processing for fraud prevention, platform security, responsible gaming monitoring, and analytics — where our legitimate interests do not override your fundamental rights and freedoms
• Consent: Processing for direct marketing and non-essential cookies, where you have provided freely given, specific, informed, and unambiguous consent which you may withdraw at any time

6. Data Sharing & Disclosure

6.1 Service Providers

ggplay engages carefully selected third-party service providers to support the operation of the Platform. These providers act as data processors on our behalf and are only permitted to process your personal data in accordance with our documented instructions and applicable Philippine data protection law. Categories of service providers include:

• Payment processors and e-wallet operators (GCash, PayMaya, and banking partners)
• Identity verification and KYC service providers
• Fraud detection and anti-money laundering analytics providers
• Game content providers and platform technology vendors
• Customer support software providers
• Cloud infrastructure and data storage providers operating within secure data centers

6.2 Regulatory Authorities

ggplay will disclose personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities where required by law, court order, or regulatory directive. We will not disclose personal data to law enforcement authorities except where legally compelled to do so through proper legal process.

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or substantially all of ggplay's assets, personal data held by ggplay may be transferred to the successor entity as part of the transaction. You will be notified of any such transfer and the privacy terms applicable to your data under the new entity in accordance with the requirements of the Data Privacy Act of 2012.

7. Data Security

ggplay implements a multi-layered information security program designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our technical and organizational security measures include:

• Encryption: All data transmitted between your browser and ggplay's servers is protected using industry-standard TLS (Transport Layer Security) encryption. Sensitive data at rest, including financial information and identification documents, is stored in encrypted form using AES-256 encryption
• Access Controls: Access to personal data is restricted to ggplay employees and contractors who require it to perform their duties. All access is subject to role-based access controls, multi-factor authentication, and detailed audit logging
• Password Security: Account passwords are hashed using industry-standard cryptographic algorithms. Plain-text passwords are never stored or transmitted by ggplay
• Infrastructure Security: ggplay's servers and cloud infrastructure are hosted in facilities with physical security controls, network perimeter defenses, intrusion detection systems, and regular security assessments
• Employee Training: All ggplay personnel who handle personal data receive regular data protection and information security training
• Incident Response: ggplay maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission and affected players within the timeframes required by the Data Privacy Act

8. Data Retention

ggplay retains your personal data for as long as your account remains active and for such additional periods as are required by applicable law, regulatory obligation, or legitimate business purpose. Specific retention periods include:

• Account & Transaction Data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and Philippine anti-money laundering regulations
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure or the conclusion of any regulatory investigation, whichever is later
• Financial Records: Retained for a minimum of ten (10) years as required under applicable Philippine tax and financial recordkeeping laws
• Technical Logs: Retained for twelve (12) months from the date of generation, after which they are securely deleted or anonymized
• Marketing Preferences: Retained until you withdraw consent and for a reasonable period thereafter to demonstrate compliance with your withdrawal request

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Anonymized data that can no longer reasonably be associated with an identifiable individual is not subject to this Privacy Policy and may be retained for statistical and analytical purposes without time limit.

9. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ggplay:

• Right to be Informed: You have the right to be informed of how your personal data is collected, used, and disclosed. This Privacy Policy fulfills that obligation
• Right to Access: You may request a copy of the personal data ggplay holds about you, together with information about how it is processed
• Right to Correction: You have the right to request correction of inaccurate, incomplete, or outdated personal data held in your ggplay account. For minor corrections, you can update your profile directly through account settings
• Right to Erasure or Blocking: Under certain circumstances, you may request deletion or blocking of your personal data — for example, where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain data under Philippine law
• Right to Data Portability: You may request a copy of personal data that you directly provided to ggplay in a structured, commonly used, machine-readable format
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to our ability to demonstrate compelling legitimate grounds
• Right to Damages: You have the right to be indemnified for any damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data under Section 16 of the Data Privacy Act
• Right to File a Complaint: You have the right to file a complaint with the National Privacy Commission if you believe your data privacy rights have been violated

To exercise any of the above rights, please submit a written request to our Data Protection Officer using the contact details provided in Section 13. We will respond to all verified requests within fifteen (15) business days. We may require proof of identity before processing your request to prevent unauthorized disclosure of personal data to third parties.

10. Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. ggplay uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the Platform, remember your preferences, analyze usage patterns, and deliver relevant content.

10.2 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled. They enable core features such as account authentication, session management, security controls, and responsive gaming features
• Performance & Analytics Cookies: These cookies help us understand how players interact with the Platform by collecting aggregated, anonymized usage data. We use this information to identify and resolve technical issues and improve the overall player experience
• Functional Cookies: These cookies remember your language preferences, display settings, and other customizations to provide a more personalized experience
• Marketing Cookies: With your consent, these cookies track your browsing activity to help us deliver relevant promotional content. You may opt out of marketing cookies at any time through your browser settings or account preferences

10.3 Managing Cookies

You can control cookies through your browser's settings. Most browsers allow you to view, delete, and block cookies. Please note that disabling strictly necessary cookies may impair the functionality of the ggplay Platform, including the ability to log in and play games. For specific instructions on managing cookies, consult your browser's help documentation.

11. Protection of Minors

The ggplay Platform is strictly intended for individuals aged twenty-one (21) years and above. ggplay does not knowingly collect personal data from persons under 21 years of age. Our registration process includes mandatory age verification mechanisms designed to prevent access by underage individuals.

If ggplay becomes aware that personal data has been inadvertently collected from a person under the age of 21, we will take immediate steps to delete such data from our records, terminate the associated account, and refund any deposits made, as required by applicable PAGCOR regulations and the Data Privacy Act of 2012.

Parents and guardians are encouraged to monitor device usage and employ parental control software to prevent minors from accessing online gambling platforms. If you believe that a minor has registered an account on ggplay, please contact our Data Protection Officer immediately using the details in Section 13.

12. Changes to This Privacy Policy

ggplay reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Material changes to this Privacy Policy will be communicated to registered players via email to the address on file and through a prominent notice on the Platform, not less than seven (7) days before the changes take effect, except where immediate changes are required by law or urgent security concerns.

Your continued use of the ggplay Platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. We encourage you to review this Privacy Policy periodically. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

13. Contact & Complaints

For any privacy-related inquiries, data subject access requests, or complaints regarding ggplay's handling of your personal data, please contact our Data Protection Officer:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please include "Data Privacy Request" or "DPO Inquiry" in your subject line
• Live Chat: Available 24/7 through the ggplay Platform for general privacy questions

ggplay will acknowledge all data privacy requests within three (3) business days and will endeavor to provide a substantive response within fifteen (15) business days. For complex requests, we may require additional time, in which case we will notify you of the expected timeline.

If you are not satisfied with ggplay's response to your privacy complaint or believe that your rights under the Data Privacy Act of 2012 have been violated, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available through the NPC's official government channels.