ggpnalo Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how ggpnalo ("ggpnalo", "we", "us", "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "your", "Player", "User") who access or use the ggpnalo online casino and sports betting platform at ggpnalo.net and any associated applications or services (collectively, the "Platform").

ggpnalo operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is committed to full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and all issuances of the National Privacy Commission (NPC). This Policy reflects those legal obligations and our own commitment to transparent, responsible data practices.

By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform.

02 Who We Are

ggpnalo is the data controller responsible for the personal data of all registered Players on the Platform. As data controller, ggpnalo determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with the Data Privacy Act of 2012 and all applicable PAGCOR regulations.

For all data privacy inquiries, requests to exercise your rights, or formal complaints, you may contact our designated Data Protection Officer (DPO) using the contact details set out in Section 14 of this Policy.

03 Personal Data We Collect

ggpnalo collects personal data through several channels: directly from you when you register an account or interact with the Platform, automatically through your use of the Platform, and from authorized third-party sources where permitted by law.

3.1 Data You Provide Directly

When you register an account or interact with ggpnalo's services, you provide us with the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification details (e.g., Philippine passport, PhilSys National ID, SSS ID, or driver's license number) required for KYC verification and PAGCOR compliance.
• Contact Data: Email address, mobile phone number, and residential address, used for account communications, security alerts, and transaction notifications.
• Financial Data: GCash account number, Maya (PayMaya) account details, BPI, BDO, or Metrobank account information, and full transaction records, used for processing deposits, withdrawals, and meeting Anti-Money Laundering Council (AMLC) reporting obligations.
• Account Credentials: Your chosen username and encrypted password, used solely to authenticate your access to the Platform.
• Communications Data: The content of any support chat conversations, emails, or formal complaints you submit to ggpnalo.

3.2 Data Collected Automatically

When you access and use the Platform, ggpnalo automatically collects certain technical and usage data, including:

• Technical Data: IP address, device identifier, browser type and version, operating system, and network information.
• Usage Data: Pages visited, games played, wagers placed, session start and end times, in-game actions, and betting history.
• Cookie and Tracking Data: Information collected via cookies, web beacons, and similar technologies as described in Section 6 of this Policy.

3.3 Data From Third Parties

ggpnalo may receive personal data about you from authorized third-party sources, including identity verification service providers, payment processors (e.g., GCash, Maya), fraud prevention databases, and PAGCOR where required for regulatory compliance purposes.

04 How We Use Your Personal Data

ggpnalo processes your personal data for the following clearly defined purposes:

• Account Management: To create, maintain, and administer your ggpnalo account, including processing your registration and verifying your identity in compliance with PAGCOR's KYC requirements.
• Transaction Processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, InstaPay, and other supported Philippine payment methods.
• Regulatory Compliance: To fulfill our legal obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and reportable transaction requirements to the AMLC.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other illegal conduct on the Platform.
• Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling behavior, and to enforce any deposit limits, cooling-off periods, or self-exclusion requests made by you or required under PAGCOR responsible gaming guidelines.
• Customer Support: To respond to your inquiries, resolve disputes, and process formal complaints submitted through our support channels.
• Platform Improvement: To analyze aggregate, anonymized usage patterns to improve the performance, features, and user experience of the Platform.
• Legal Proceedings: To establish, exercise, or defend legal claims in connection with the Platform or your account.

05 Sharing Your Personal Data

ggpnalo does not sell, rent, or trade your personal data. We may share your personal data only in the following limited circumstances and only to the extent necessary for the stated purpose:

• PAGCOR and Regulatory Authorities: We are legally required to share certain player data and transaction records with PAGCOR, the AMLC, the National Privacy Commission, or other competent Philippine government authorities upon lawful request or as part of our licensing obligations.
• Payment Processors: We share relevant financial data with GCash, Maya, BPI, BDO, Metrobank, and other payment service providers solely for the purpose of processing your deposits and withdrawals.
• Identity Verification Providers: We share identity documents and personal details with licensed KYC and anti-fraud service providers for the purpose of verifying your identity and preventing fraud.
• Game Software Providers: Certain gameplay data may be shared with our licensed game providers to the minimum extent necessary for game operation, dispute resolution, and audit compliance.
• Legal Advisors and Courts: We may disclose your data to legal counsel or courts in the Philippines where required to establish, exercise, or defend legal claims involving ggpnalo.

All third parties with whom ggpnalo shares personal data are required to process such data in accordance with applicable Philippine data protection laws and under written data processing agreements that impose obligations equivalent to those in this Policy.

06 Cookies & Tracking Technologies

ggpnalo uses cookies and similar tracking technologies on the Platform to ensure core functionality, maintain your session, prevent fraud, and improve platform performance. The following types of cookies may be placed on your device when you visit ggpnalo.net:

You may manage cookie preferences through your browser settings. Note that disabling essential cookies may prevent you from accessing certain features of the Platform, including your account dashboard and the cashier. ggpnalo does not use cookies to serve third-party advertisements.

07 Data Security

ggpnalo implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• TLS (Transport Layer Security) encryption for all data transmitted between your device and our servers.
• AES-256 encryption for sensitive personal data and financial information stored in our databases.
• Multi-factor authentication options for player accounts and mandatory multi-factor authentication for all internal administrative access.
• Role-based access controls ensuring that only authorized personnel can access personal data, and only to the extent required for their specific duties.
• Regular security audits, penetration testing, and vulnerability assessments of Platform infrastructure.
• Incident response procedures to detect, contain, and notify affected parties of any data security breach in accordance with NPC reporting requirements.

08 Data Retention

ggpnalo retains your personal data only for as long as is necessary to fulfill the purpose for which it was collected, subject to the following minimum retention periods required by law and PAGCOR regulations:

• Account and Identity Data: Retained for a minimum of five (5) years following account closure, as required under PAGCOR licensing conditions and the Anti-Money Laundering Act.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLC record-keeping requirements.
• KYC Documentation: Retained for the duration of your account and for a minimum of five (5) years after account closure.
• Support and Communications Data: Retained for up to three (3) years from the date of last communication, for dispute resolution and quality assurance purposes.
• Technical and Usage Logs: Typically retained for up to twelve (12) months for security and fraud investigation purposes, after which they are anonymized or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted from ggpnalo's systems or irreversibly anonymized so that it can no longer be associated with an identifiable individual.

09 Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ggpnalo. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14:

• Right to Be Informed: You have the right to be informed of how your personal data is being processed, including the purposes, legal bases, and recipients of such processing — which this Policy fulfills.
• Right to Access: You may request a copy of the personal data ggpnalo holds about you, along with information about how it is being processed.
• Right to Correction: If any personal data we hold about you is inaccurate, incomplete, or outdated, you may request that it be corrected. For most account data, you can update it directly through your account profile settings.
• Right to Erasure or Blocking: You may request the deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under PAGCOR and AMLA requirements.
• Right to Object: You may object to the processing of your personal data where such processing is based on legitimate interests, provided that no overriding legal basis requires continued processing.
• Right to Data Portability: You may request a copy of the personal data you have provided to ggpnalo in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: If you believe ggpnalo has not processed your personal data in accordance with the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

ggpnalo will respond to all verified data privacy rights requests within fifteen (15) business days of receipt. We may need to verify your identity before processing certain requests to prevent unauthorized disclosure.

10 Children & Minors

The ggpnalo Platform is strictly intended for individuals who are 21 years of age or older, in compliance with PAGCOR regulations governing online gambling in the Philippines. ggpnalo does not knowingly collect personal data from persons under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data in question, and, where required, report the matter to PAGCOR. If you believe a minor has registered an account on the Platform, please notify us immediately at the contact details provided in Section 14.

11 Cross-Border Data Transfers

Where ggpnalo engages third-party service providers — including game software providers, fraud prevention vendors, or cloud infrastructure providers — whose operations are based outside the Philippines, your personal data may be transferred to and processed in jurisdictions other than the Philippines.

ggpnalo ensures that all such cross-border transfers of personal data are conducted in compliance with Section 21 of the Data Privacy Act of 2012 and the NPC's rules on cross-border data transfers. This means that personal data is only transferred to countries or organizations that provide an adequate level of data protection, or where appropriate contractual safeguards (such as standard contractual clauses approved by the NPC) are in place.

12 Third-Party Links

The ggpnalo Platform may contain references or links to third-party services, such as licensed game providers' interfaces or PAGCOR informational pages. This Privacy Policy applies only to data processed by ggpnalo directly. Any personal data you provide to third-party platforms or services — including payment providers such as GCash or Maya — is governed by their own respective privacy policies, over which ggpnalo has no control. We encourage you to review the privacy policy of any third-party service before providing your personal data.

13 Amendments to This Policy

ggpnalo reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. When material changes are made, ggpnalo will notify registered Players via email or a prominent notice on the Platform at least seven (7) days prior to the changes taking effect.

The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data privacy rights, or wish to submit a formal data privacy complaint, please contact ggpnalo's designated Data Protection Officer through the following channels:

• Support Email: [email protected]
• Live Chat: Available 24/7 through the in-platform live chat feature after logging in to your ggpnalo account.

ggpnalo will acknowledge all data privacy requests within three (3) business days and endeavor to resolve them within fifteen (15) business days. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the government body responsible for enforcing the Data Privacy Act of 2012.