gglot Privacy Policy

gglot is a premium online gaming platform serving Filipino players across the Philippines. We are committed to protecting the privacy and personal data of every player who registers or interacts with the gglot platform. This Privacy Policy sets out in full detail how we collect, use, store, share, and protect your personal information in connection with your use of gglot.org and all associated services.

This policy should be read together with the gglot Terms & Conditions, which also govern your use of the platform. Where any conflict exists between this Privacy Policy and the Terms & Conditions on matters relating to personal data, this Privacy Policy shall prevail.

If you have questions about this policy or wish to exercise any of your data rights, please refer to Section 14 (Contact Us) for the appropriate channels.

gglot collects the following categories of personal data from players, depending on the nature of your interaction with the platform:

gglot does not intentionally collect sensitive personal information such as racial or ethnic origin, religious beliefs, or health data, unless specifically required for responsible gaming or regulatory compliance purposes and with your explicit consent.

gglot collects your personal data through the following means:

• Direct interactions: Data you provide when creating an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated technologies: As you navigate and interact with the gglot platform, we automatically collect Technical Data and Usage Data through cookies, server logs, and similar tracking technologies. See Section 7 for full details on our cookie practices.
• Third-party sources: We may receive data about you from identity verification partners (for KYC), payment processors (GCash, PayMaya, BDO, BPI, Metrobank), fraud prevention services, and regulatory authorities where legally required.
• Publicly available sources: In limited circumstances related to fraud prevention or regulatory compliance, we may cross-reference data against publicly available records or government databases.

Under Republic Act 10173 (Philippine Data Privacy Act of 2012) and its Implementing Rules and Regulations, gglot processes your personal data on the following legal bases:

• Contractual necessity: Processing required to register your account, operate it, process your transactions, and deliver the services described in our Terms & Conditions.
• Legal obligation: Processing required to comply with PAGCOR regulations, anti-money laundering (AML) requirements under Republic Act 9160 (Anti-Money Laundering Act), and other applicable Philippine law.
• Legitimate interests: Processing carried out for fraud detection, platform security, responsible gaming monitoring, and improving our services, where such interests are not overridden by your privacy rights.
• Consent: Where required by law, we will obtain your explicit consent before processing certain categories of data — for example, for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

gglot uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your gglot account, including processing deposits, withdrawals, and wagers.
• Identity and age verification: To confirm that you are who you say you are and that you are at least 21 years of age, as required under PAGCOR regulations.
• Transaction processing: To facilitate deposits and withdrawals through GCash, PayMaya, BDO, BPI, Metrobank, and other supported payment methods.
• Regulatory compliance: To meet our obligations under PAGCOR rules, the Anti-Money Laundering Act, and other applicable Philippine regulations, including the filing of required reports with relevant authorities.
• Fraud and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other unlawful conduct on the platform.
• Responsible gaming: To monitor gaming patterns and identify players who may be at risk of problem gambling, and to give effect to self-exclusion, deposit limit, and session control requests.
• Customer support: To respond to your queries, complaints, and feedback in a timely and effective manner.
• Platform improvement: To analyse usage data and improve the functionality, performance, and user experience of the gglot platform.
• Marketing communications: To send you promotional offers, bonuses, and news about gglot — only where you have opted in to receive such communications. You may unsubscribe at any time.

gglot will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing a separate valid legal basis.

gglot does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BDO, BPI, Metrobank, and other payment service providers, solely for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification services used to confirm player identity and comply with regulatory requirements.
• Fraud prevention services: Third-party providers who assist gglot in detecting and preventing fraudulent transactions and account abuse.
• Game content providers: Software providers whose games are hosted on the gglot platform may receive limited technical data (such as session tokens) necessary to deliver the game experience. They do not receive your identity or financial data.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where disclosure is required by law, court order, or regulatory direction.
• Professional advisers: Legal counsel, accountants, and auditors who are bound by professional confidentiality obligations, where required for legitimate business purposes.

All third parties with whom gglot shares personal data are required to handle that data in accordance with applicable Philippine data protection law and gglot's data processing requirements.

The gglot platform uses cookies and similar tracking technologies to provide a functional, personalised, and secure gaming experience. The following types of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These enable secure login sessions, account authentication, and fraud prevention. They cannot be disabled without impairing your use of the platform.
• Functional cookies: Remember your preferences such as language settings, game history, and responsible gaming limits to provide a more personalised experience.
• Analytical cookies: Collect anonymised or aggregated data about how players use the gglot platform, enabling us to identify performance issues and improve the overall user experience.
• Session cookies: Temporary cookies that expire when you close your browser, used to maintain your active session and cart state during a single visit.

You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the gglot platform. By continuing to use gglot after being informed of our cookie use, you consent to the placement of cookies on your device in accordance with this policy.

gglot does not use third-party advertising cookies or permit ad networks to place tracking cookies on the gglot platform.

gglot implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and gglot servers;
• AES-256 encryption for sensitive data stored in gglot databases;
• Multi-factor authentication options for player accounts;
• Role-based access controls limiting internal access to personal data to authorised personnel only;
• Regular third-party security audits and penetration testing of the gglot platform infrastructure;
• Automated fraud and anomaly detection systems monitoring account activity in real time.

While gglot takes all reasonable measures to protect your data, no system is entirely immune to security threats. In the unlikely event of a data breach that poses a risk to your rights and freedoms, gglot will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of the Philippine Data Privacy Act.

You are also responsible for maintaining the security of your own account by keeping your login credentials confidential and notifying gglot immediately if you suspect any unauthorised access to your account.

gglot retains your personal data for the period necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law, whichever is longer. The following general retention periods apply:

• Active account data: Retained for the full duration of your active gglot account relationship.
• Closed account data: Following voluntary or involuntary account closure, identity, transaction, and financial data is retained for a minimum of five (5) years in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• KYC and verification documents: Retained for five (5) years from the date of submission or account closure, whichever is later.
• Technical and usage data: Retained for up to twenty-four (24) months for platform analytics and security purposes, after which it is anonymised or deleted.
• Support and communications records: Retained for three (3) years from the date of the last communication, or longer where the record is relevant to an active dispute or legal matter.

Upon expiry of the applicable retention period, your personal data will be securely deleted or irreversibly anonymised, unless retention is required to comply with a court order or ongoing regulatory investigation.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by gglot:

• Right to be informed: The right to be told what personal data gglot holds about you, where it came from, and how it is being used — which is fulfilled by this Privacy Policy.
• Right of access: The right to request a copy of the personal data gglot holds about you, along with information about how it is processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data held by gglot.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes at any time, and to object to other processing carried out on the basis of legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe that gglot has violated your data privacy rights.

To exercise any of these rights, please contact gglot's Data Privacy Officer using the details in Section 14. We will respond to all verified requests within thirty (30) days of receipt. In complex cases, this period may be extended by an additional thirty (30) days, with notice provided to you.

Please note that certain rights may be limited where gglot is required by law to retain or process your data — for example, for AML compliance or in connection with an ongoing investigation.

The gglot platform is strictly for individuals who are at least 21 years of age, in accordance with PAGCOR regulations. gglot does not knowingly collect personal data from anyone under the age of 21.

During registration and KYC verification, gglot implements age verification procedures to identify and exclude underage applicants. If gglot discovers that personal data has been collected from an individual who is under 21 years of age, that account will be immediately suspended, all associated data will be deleted, and the matter may be referred to the relevant authorities.

If you are a parent or guardian and believe that your child has registered on the gglot platform, please contact our support team immediately at [email protected] so that the account can be closed and the data removed without delay.

gglot primarily stores and processes player data on servers located within or serving the Southeast Asian region. In some cases, it may be necessary to transfer data to third-party service providers or infrastructure partners located outside the Philippines — for example, for the purposes of cloud hosting, technical support, or game content delivery.

Where such international transfers occur, gglot takes appropriate steps to ensure that your personal data receives an equivalent level of protection to that afforded under Philippine law, including through:

• Contractual data processing agreements incorporating standard data protection clauses;
• Transfer only to jurisdictions that the National Privacy Commission has recognised as providing an adequate level of data protection;
• Applying encryption and pseudonymisation measures to data in transit.

By using the gglot platform, you acknowledge and consent to such transfers where they are carried out in accordance with the safeguards described above.

gglot may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, regulatory requirements, or the evolution of the gglot platform. The date of the most recent revision is indicated in the "Last Updated" notice at the top of this page.

Where changes to this policy are material — meaning they significantly affect your rights or the way we process your data — gglot will notify you via the email address registered on your account or through a prominent notice on the platform prior to the changes taking effect. For minor or clarificatory changes, the updated policy will simply be published on this page.

Your continued use of the gglot platform after any update to this Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any change, you should discontinue use of the platform and may request account closure in accordance with the gglot Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data gglot holds about you, please contact us through the following channels:

• Data Privacy Officer Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week
• Website: gglot.org

Please include "Data Privacy Request" in the subject line of your email and provide sufficient detail to allow us to identify your account and respond effectively to your request. We may ask you to verify your identity before processing certain requests.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.

For information on your gaming rights and responsible gaming support, please visit our Responsible Gaming page. For the full rules governing your account, please read our Terms & Conditions.