gl888 Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how gl888 ("we," "us," "our," or "the Company") collects, uses, stores, and discloses personal information obtained from players, visitors, and users ("you" or "Player") who access the gl888 online casino platform at https://gl888.pro and all associated pages, mobile interfaces, and related services (collectively, the "Platform").

This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations. It applies to all personal data processed by gl888 in connection with the registration, operation, and management of player accounts on the Platform.

By creating an account on gl888 or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please stop using the Platform and contact our support team to close your account.

2. Data We Collect

gl888 collects personal data that is necessary to provide you with a secure, compliant, and enjoyable online casino experience. The categories of personal data we collect include:

gl888 does not collect sensitive personal information such as biometric data, political opinions, religious beliefs, or health records, unless specifically required for a particular compliance obligation and with your explicit consent.

3. How We Collect Your Data

gl888 collects your personal data through the following channels:

• Direct registration: When you create a gl888 account, you voluntarily provide identity, contact, and payment information via our registration form.
• KYC submission: When we request identity or payment verification documents, you upload or submit these directly to our compliance team.
• Platform usage: As you navigate and use the gl888 Platform, we automatically collect technical and usage data through server logs, cookies, and similar technologies.
• Payment transactions: When you make a deposit or request a withdrawal via GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, Visa, or Mastercard, transaction data is generated and recorded.
• Customer support interactions: When you contact our support team via live chat or email, the content of your communications is collected and stored.
• Third-party game providers: Game session data, including wager amounts, game outcomes, and session durations, is transmitted to gl888 by our certified third-party game providers such as JILI and similar certified studios.
• Device and browser signals: Your device automatically sends technical information (IP address, browser type, operating system) when you access the gl888 Platform.

4. Purpose & Legal Basis for Processing

gl888 processes your personal data only when there is a lawful basis for doing so under the Data Privacy Act of 2012. The following table sets out our processing purposes and their corresponding legal bases:

• Account creation and management: Processing is necessary for the performance of our contract with you as a registered player on the gl888 Platform.
• Identity verification and KYC: Processing is required to comply with PAGCOR regulations and the Anti-Money Laundering Act (AMLA) of the Philippines, which impose mandatory identity verification obligations on licensed gambling operators.
• Payment processing: Processing is necessary to fulfill deposit and withdrawal transactions as part of the contract between you and gl888.
• Fraud prevention and security: Processing is justified by our legitimate interest in protecting the integrity of the gl888 Platform and the financial interests of all players.
• Responsible gaming monitoring: Processing is carried out in accordance with PAGCOR's responsible gaming obligations and in the legitimate interest of player welfare.
• Marketing and personalized promotions: Processing is based on your consent, which you may withdraw at any time by updating your communication preferences in your account settings or by contacting support.
• Regulatory reporting: Processing is required to comply with PAGCOR reporting obligations, Anti-Money Laundering Council (AMLC) requirements, and any other applicable Philippine regulatory mandates.

Where consent is the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

5. Cookies & Tracking Technologies

The gl888 Platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and collect usage analytics. Cookies are small data files stored on your device when you visit the Platform.

We use the following categories of cookies:

• Strictly necessary cookies: These are essential for the Platform to function. They enable core features such as account login sessions, security tokens, and payment gateway handoffs. These cookies cannot be disabled without impairing Platform functionality.
• Performance and analytics cookies: These cookies collect aggregated, anonymized information about how players interact with the Platform — which pages are visited most, how long sessions last, and where players encounter errors. This data helps us improve the Platform experience.
• Functionality cookies: These cookies remember your preferences, such as language settings and game lobby filters, to provide a more personalized experience on your next visit.
• Security cookies: These cookies help detect and prevent fraudulent behavior, unauthorized account access, and bot activity on the Platform.

You may manage or disable non-essential cookies through your browser settings at any time. However, disabling strictly necessary cookies will affect your ability to log in and use the gl888 Platform normally. A full cookie preference management tool is available in your account settings.

6. Sharing & Disclosure of Personal Data

gl888 does not sell, rent, or trade your personal data to unaffiliated third parties for their independent commercial use. We may share your personal data only in the following circumstances and only to the extent necessary:

• Game providers: Certified third-party game studios (such as those providing JILI slots, live dealer tables, and bingo games) receive limited gameplay-related data necessary to operate their games within the gl888 Platform. These providers are contractually bound to handle data in accordance with applicable privacy law.
• Payment processors: When you make a deposit or withdrawal via GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, Visa, or Mastercard, your relevant financial information is transmitted to the applicable payment processor to complete the transaction. These processors operate under their own regulatory obligations and security standards.
• PAGCOR and regulatory authorities: gl888 is required by law to report certain player activity and transaction data to PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory bodies. We comply fully with all mandatory reporting obligations.
• Law enforcement and courts: gl888 will disclose personal data to law enforcement agencies, courts, or government bodies when required to do so by a valid legal order, court subpoena, or applicable Philippine law.
• Service providers: gl888 engages third-party service providers for functions such as cloud hosting, customer support platform software, KYC verification services, and cybersecurity monitoring. These providers act as data processors on our behalf and are bound by strict data processing agreements requiring them to protect your information and use it only for the purposes we specify.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of gl888's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

7. International Data Transfers

Some of gl888's service providers and game partners may be located outside of the Philippines. Where your personal data is transferred to countries that may not have equivalent data protection laws to those of the Philippines, gl888 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual data protection clauses that impose obligations on the receiving party equivalent to those under the Data Privacy Act of 2012.
• Restricting international transfers to jurisdictions that have been assessed as providing an adequate level of protection for personal data.
• Implementing additional technical security measures such as end-to-end encryption for data transmitted across international networks.

By using the gl888 Platform, you acknowledge and consent to the potential transfer of your personal data to service providers located in other countries, subject to the safeguards described above. gl888 will not transfer your data internationally where doing so would violate applicable Philippine data privacy law.

8. Data Retention

gl888 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, subject to any longer retention periods required by law or regulatory obligation. Our general data retention practices are as follows:

• Active account data: Retained for the duration of your account's active status on the gl888 Platform, plus any applicable post-closure retention period.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of account closure, in compliance with PAGCOR AML regulations and the Anti-Money Laundering Act of the Philippines.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required for financial regulatory compliance and audit purposes.
• Customer support communications: Retained for two (2) years from the date of the last interaction, or longer if the communication is relevant to an ongoing dispute or legal proceeding.
• Technical and usage logs: Retained for up to twelve (12) months for security analysis and platform performance monitoring, unless a longer period is required for fraud investigation.
• Marketing consent records: Retained for the duration of your account plus a reasonable period thereafter, as evidence of consent.

When personal data is no longer required, gl888 securely deletes or anonymizes it in accordance with recognized data destruction standards. Anonymized data — from which you cannot be identified — may be retained indefinitely for statistical and analytical purposes.

9. Security Measures

gl888 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organizational measures to protect it against unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

• SSL/TLS encryption: All data transmitted between your device and the gl888 Platform is encrypted using Transport Layer Security (TLS) protocols, ensuring that your login credentials, financial information, and personal data cannot be intercepted in transit.
• Encryption at rest: Sensitive personal data stored in gl888's systems — including KYC documents, financial records, and account credentials — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within gl888 is restricted on a strict need-to-know basis. Only authorized personnel who require access to perform their job functions are permitted to handle player data, and all access is logged and audited.
• Multi-factor authentication: gl888's internal systems require multi-factor authentication for all staff accessing player data management tools.
• Regular security audits: gl888 conducts periodic internal and third-party security assessments, penetration testing, and vulnerability scans to identify and remediate potential security weaknesses before they can be exploited.
• Incident response plan: gl888 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and interests, we will notify the National Privacy Commission (NPC) within 72 hours and notify affected players promptly, as required under RA 10173.

10. Your Rights Under RA 10173

As a data subject under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal data held by gl888:

• Right to be Informed: You have the right to know whether gl888 holds personal data about you, and to be informed about how that data is being processed — which is the primary purpose of this Privacy Policy.
• Right to Access: You have the right to request a copy of the personal data gl888 holds about you, and to receive information about the purposes and manner of its processing.
• Right to Rectification: If any personal data gl888 holds about you is inaccurate, incomplete, or outdated, you have the right to request correction. You can update most account information directly in your account settings, or by contacting our support team.
• Right to Erasure (Right to be Forgotten): You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under PAGCOR and AML regulations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest, subject to our ability to demonstrate compelling legitimate grounds.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another personal information controller where technically feasible.
• Right to File a Complaint: If you believe gl888 has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the rights listed above, please contact our Data Protection Officer at [email protected]. We will respond to all verified requests within fifteen (15) business days of receipt, as required under RA 10173. We may need to verify your identity before processing your request to ensure we do not disclose data to unauthorized parties.

11. Children & Minors

The gl888 Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law and PAGCOR regulations governing casino-style online gambling. gl888 does not knowingly collect, process, or store personal data from individuals under the age of 21.

As part of our mandatory KYC process, all players are required to verify their age before making a first withdrawal. Any account where the player is found to be under 21 years of age will be immediately suspended, and the account's data will be handled in accordance with applicable legal requirements for underage data subjects.

If you are a parent or guardian and believe that a minor has registered an account on the gl888 Platform without your knowledge, please contact our support team immediately at [email protected]. We will investigate promptly and take appropriate action, including account closure and data deletion where permitted by law.

12. Third-Party Links & Services

The gl888 Platform may contain references to third-party services, including certified game providers and payment gateways, that operate under their own independent privacy policies. gl888 is not responsible for the privacy practices or content of these third parties.

When you interact with a third-party payment gateway (such as GCash or PayMaya) to complete a transaction, you are subject to that provider's terms and privacy policy in addition to gl888's. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the gl888 Platform.

gl888 does not endorse and takes no responsibility for any data handling practices of third-party services that are not acting as data processors on gl888's behalf under a formal data processing agreement.

13. Changes to This Policy

gl888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or the features and functionality of the Platform.

Material changes — those that significantly affect your rights or the way we use your personal data — will be communicated to you by email to the address registered on your account and/or by a prominent notice displayed on the gl888 Platform, at least fourteen (14) days before the changes take effect.

Non-material changes, such as typographical corrections or minor clarifications that do not alter the substance of any provision, may be made without prior individual notice. The effective date at the top of this Policy will always reflect when it was last updated. We encourage you to review this page periodically.

Your continued use of the gl888 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, please stop using the Platform and contact support to close your account.

14. Contact & Data Protection Officer

gl888 has designated a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and the National Privacy Commission's registration and compliance guidelines. If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, you may contact the gl888 DPO through the following channel:

• Email: [email protected]
• Subject Line: "Data Privacy Request – [Your Registered Email]"
• Response Time: Within fifteen (15) business days of receipt of your verified request.
• Platform: You may also submit privacy-related requests via the Live Chat feature available 24/7 on the gl888 Platform.

For complaints that cannot be resolved directly with gl888, you may escalate your concern to the National Privacy Commission (NPC) of the Philippines through their official government channels.