ggplay Privacy Policy

1. Who We Are

ggplay ("we," "us," or "our") operates the online gaming platform accessible at ggplay.club, offering casino games, sports betting, bingo, and related services to players in the Philippines. ggplay acts as the Personal Information Controller (PIC) with respect to the personal data collected through the platform, as defined under the Data Privacy Act of 2012.

This Privacy Policy applies to all personal data collected from registered players, platform visitors, and any individual who interacts with ggplay's services, website, live chat, or customer support channels. It should be read together with our Terms and Conditions and Responsible Gaming Policy.

2. Personal Data We Collect

2.1 Registration and Identity Data

When you register a ggplay account, we collect:

• Full legal name as it appears on your government-issued ID
• Date of birth (to verify you are 21 years of age or older)
• Philippine mobile number
• Email address
• Username and encrypted password
• Residential address in the Philippines

2.2 Identity Verification (KYC) Data

To comply with PAGCOR regulations and Philippine Anti-Money Laundering Act (AMLA) requirements, we may collect:

• Copies of valid Philippine government-issued IDs (PhilSys ID, passport, driver's license, UMID, SSS ID, voter's ID, or PRC ID)
• Proof of address documents (utility bills, bank statements)
• Selfie photographs for identity verification purposes
• Proof of payment method ownership (e.g., screenshot of GCash account showing your registered name)

2.3 Financial and Transaction Data

We collect records of all financial transactions on your account, including:

• Deposit amounts, dates, and payment methods used (GCash, PayMaya, BPI, BDO, Metrobank)
• Withdrawal requests, amounts, and processing status
• Bonus credits, wagering activity, and promotional participation
• Account balance history

2.4 Gaming Activity Data

We collect detailed records of your gaming activity, including game sessions, bet amounts, game outcomes, and session durations. This data is used for account management, responsible gaming monitoring, and regulatory compliance.

2.5 Technical and Device Data

When you access the ggplay platform, we automatically collect:

• IP address and approximate geographic location
• Device type, operating system, and browser information
• Session timestamps and platform interaction logs
• Cookie identifiers and similar tracking technologies

2.6 Communications Data

We retain records of your communications with ggplay, including live chat transcripts, email correspondence, and support ticket history, for quality assurance and dispute resolution purposes.

3. How We Collect Your Data

ggplay collects personal data through the following means:

• Directly from you: When you register, complete KYC verification, make deposits or withdrawals, contact support, or participate in promotions.
• Automatically: Through cookies, web beacons, and server logs when you access the ggplay platform.
• From third parties: From payment processors (GCash, PayMaya, BPI, BDO, Metrobank) to verify transaction details; from identity verification service providers; and from fraud prevention and AML screening services.

4. How We Use Your Personal Data

ggplay uses your personal data for the following purposes:

• Account management: To create, maintain, and manage your ggplay player account.
• Identity verification: To verify your age (21+), identity, and eligibility to use the platform in compliance with PAGCOR regulations and Philippine law.
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, and Philippine bank transfers.
• Regulatory compliance: To comply with PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and other applicable Philippine laws.
• Responsible gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits and self-exclusion.
• Customer support: To respond to your inquiries, resolve disputes, and provide 24/7 Filipino-language support.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, and unauthorized account access.
• Platform improvement: To analyze usage patterns and improve the ggplay platform, game library, and user experience.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may opt out at any time.

5. Legal Basis for Processing

ggplay processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfill our obligations under the ggplay Terms and Conditions, including account management and payment processing.
• Legal obligation: Processing required to comply with PAGCOR regulations, AMLA requirements, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

ggplay does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors: GCash (Mynt – Globe Fintech Innovations, Inc.), PayMaya (Voyager Innovations, Inc.), BPI, BDO, and Metrobank, for the purpose of processing deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML screening services used to verify player identity and comply with regulatory requirements.
• Game software providers: Licensed game providers whose software powers the ggplay game library, to the extent necessary for game operation and audit purposes.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where required by law or regulatory obligation.
• IT and infrastructure providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on our behalf under strict data processing agreements.

All third-party service providers who process personal data on behalf of ggplay are required to implement appropriate technical and organizational security measures and to process data only in accordance with ggplay's instructions.

7. Data Retention

ggplay retains your personal data for as long as your account is active and for a period of at least five (5) years after account closure, in accordance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act. Financial transaction records are retained for a minimum of five years as required by AMLA. KYC documents are retained for the same period.

After the applicable retention period, personal data is securely deleted or anonymized. You may request early deletion of certain data categories where no legal retention obligation applies; however, deletion of data required for regulatory compliance cannot be accommodated.

8. Data Security

ggplay implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the ggplay platform
• Encryption of sensitive data at rest, including passwords (stored as salted hashes) and financial data
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Regular security audits and penetration testing of the ggplay platform
• Two-factor authentication options for player accounts
• 24/7 monitoring for suspicious account activity and unauthorized access attempts

While ggplay takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, ggplay will notify the National Privacy Commission (NPC) and affected players in accordance with the Data Privacy Act of 2012 and NPC Circular 16-03.

9. Cookies and Tracking Technologies

ggplay uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyze usage, and deliver relevant content. The types of cookies we use include:

• Essential cookies: Required for the platform to function, including session management and security. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and login status.
• Analytics cookies: Collect anonymized data about how players use the platform to help us improve the user experience.
• Marketing cookies: Used to deliver relevant promotional content. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use the core ggplay platform features.

10. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ggplay:

• Right to be informed: The right to know what personal data we collect and how we use it – which this Privacy Policy fulfills.
• Right of access: The right to request a copy of the personal data we hold about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to legal retention obligations.
• Right to object: The right to object to processing of your personal data for direct marketing purposes.
• Right to data portability: The right to receive your personal data in a structured, commonly used format.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact ggplay's Data Protection Officer via live chat or by emailing [email protected]. We will respond to all verified requests within fifteen (15) business days, in accordance with NPC guidelines.

11. Children's Privacy

The ggplay platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from persons under 21 years of age. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the account, delete the data, and return any deposits in accordance with applicable law. If you believe a minor has registered on the ggplay platform, please contact us immediately via live chat.

12. Changes to This Privacy Policy

ggplay reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform features. Material changes will be communicated to registered players via the mobile number or email address on file, or via a prominent notice on the platform, at least seven (7) days before the changes take effect. The "Last updated" date at the top of this page will always reflect the most recent revision. Your continued use of the ggplay platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact the ggplay Data Protection Officer:

• Live Chat: Available 24/7 via the ggplay platform
• Email: [email protected] (response within 1 hour)

You also have the right to file a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights under RA 10173 have been violated.