Privacy Policy

1 Who We Are

This Privacy Policy is issued by ggslots ("ggslots", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at ggslots.app and all associated subdomains and mobile-optimised pages (collectively, the "Platform"). ggslots serves Filipino players across Manila, Cebu, Davao, Quezon City, Makati, and beyond.

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, ggslots acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes through the Platform.

2 Personal Data We Collect

The categories of personal data that ggslots collects depend on the nature of your interaction with the Platform. The following table summarises what we collect and why:

2.1 Sensitive Personal Information

Under RA 10173, certain categories of data are classified as sensitive personal information and afford a higher level of protection. Where ggslots processes sensitive personal information — such as government-issued ID numbers or financial account details — we do so only where strictly necessary and with appropriate safeguards in place.

3 How We Collect Your Data

ggslots collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or responding to promotions;
• Automated technologies: Technical data collected automatically when you access the Platform, including via cookies, web beacons, server logs, and similar tracking technologies (see Section 7);
• Third-party payment providers: Transaction data received from GCash, PayMaya, BPI, BDO, Metrobank, and InstaPay in connection with deposits and withdrawals;
• Identity verification services: Data from third-party KYC and identity verification providers used to confirm your identity and age in compliance with Philippine regulations;
• Fraud prevention partners: Risk signals and device intelligence data from fraud detection services used to protect the security of your account.

4 How We Use Your Personal Data

ggslots uses the personal data it collects for the following specific purposes:

4.1 Account Management & Service Delivery

To create and maintain your ggslots account, verify your identity and age (21+ requirement), process your deposits and withdrawals in Philippine Peso, deliver the games and betting services you use, and provide customer support.

4.2 Legal & Regulatory Compliance

To comply with applicable Philippine laws and regulations, including the Data Privacy Act of 2012, Anti-Money Laundering Act (AMLA), and any applicable gaming regulatory requirements. This includes conducting Know Your Customer (KYC) checks, reporting suspicious transactions to the Anti-Money Laundering Council (AMLC), and maintaining records as required by law.

4.3 Security & Fraud Prevention

To protect the security and integrity of the Platform, detect and prevent fraudulent activity, identify unauthorised account access, and investigate breaches of our Terms & Conditions.

4.4 Responsible Gaming

To monitor gameplay patterns that may indicate problem gambling behaviour, enforce player-requested limits and self-exclusion requests, and provide responsible gaming interventions where appropriate.

4.5 Communications & Marketing

To send you transactional communications (account activity, deposit confirmations, withdrawal updates) and, where you have given explicit consent, to send you promotional offers, VIP programme updates, and personalised bonus notifications. You may withdraw your marketing consent at any time by updating your communication preferences in your account settings or contacting our support team.

4.6 Platform Improvement

To analyse usage patterns, measure the performance of features and games, conduct internal research, and improve the overall ggslots experience for Filipino players.

5 Legal Basis for Processing

Under the Data Privacy Act of 2012, ggslots relies on the following lawful bases for processing your personal data:

• Contractual necessity: Processing required to perform the contract between you and ggslots — i.e., to provide you with the platform services, process your payments, and manage your account;
• Legal obligation: Processing necessary for ggslots to comply with its obligations under Philippine law, including AMLA, tax regulations, and gaming regulatory requirements;
• Legitimate interests: Processing that serves ggslots's legitimate business interests — such as fraud prevention, security monitoring, and platform improvement — where these interests are not overridden by your privacy rights;
• Consent: Where we rely on your consent — most notably for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Personal Data

ggslots does not sell your personal data. We share your data only in the limited circumstances described below, and only with parties who are contractually bound to handle it with appropriate confidentiality and security:

6.1 Service Providers (Personal Information Processors)

We engage third-party service providers — known as Personal Information Processors under RA 10173 — to support the operation of the Platform. These include payment processors (GCash, PayMaya, BPI, BDO, Metrobank), KYC verification providers, cloud hosting providers, customer support platforms, and fraud detection services. All processors are bound by data processing agreements that restrict their use of your data to the specific services they provide to ggslots.

6.2 Regulatory & Legal Authorities

We may disclose your personal data to Philippine government agencies, regulatory bodies, law enforcement, or courts where we are legally required to do so — for example, reporting obligations to the Anti-Money Laundering Council (AMLC) or responses to lawful court orders.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of ggslots's assets, your personal data may be transferred to the acquiring entity. We will notify you by email and via an in-platform notice before your data is transferred and becomes subject to a different privacy policy.

6.4 With Your Consent

We may share your data with additional third parties where you have given us your explicit, informed consent to do so. You may withdraw this consent at any time.

7 Cookies & Tracking Technologies

ggslots uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device when you visit a website. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function — these enable you to log in, navigate between pages, and use core features. They cannot be disabled.
• Functional cookies: Remember your preferences (such as language and display settings) to provide a more personalised experience.
• Analytics cookies: Help us understand how players use the Platform by collecting aggregated, anonymised data on page visits, session duration, and feature usage.
• Security cookies: Used to detect and prevent fraudulent activity, including session hijacking and credential stuffing attacks.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. ggslots does not use third-party advertising or behavioural tracking cookies.

8 Data Retention

ggslots retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures.

9 Your Data Privacy Rights

Under the Data Privacy Act of 2012 (RA 10173), Filipino players have the following rights regarding their personal data held by ggslots:

9.1 Exercising Your Rights

To exercise any of your data privacy rights, please submit a written request to our Data Protection Officer (DPO) using the contact details provided in Section 14. We will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) calendar days, or notify you if an extension is required.

9.2 Right to Lodge a Complaint

If you believe that ggslots has not handled your personal data in accordance with the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint is available on the NPC's official website.

10 Children's Privacy

The ggslots Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, use, or store personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person below this age threshold, we will immediately suspend the associated account and permanently delete all related personal data.

11 International Data Transfers

Some of the third-party service providers engaged by ggslots — such as cloud infrastructure providers and KYC verification platforms — may process your personal data outside of the Philippines. Where such transfers occur, ggslots ensures that appropriate safeguards are in place, consistent with the requirements of the Data Privacy Act of 2012 and NPC guidelines on cross-border data transfers.

These safeguards may include standard contractual clauses, data processing agreements, or transfers to countries that have been recognised as providing an adequate level of data protection. ggslots will not transfer your personal data to a jurisdiction that does not provide appropriate protections without your explicit consent or a valid legal basis.

12 Security Measures

ggslots implements a layered set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• Encryption: AES-256 encryption at rest for stored personal data; TLS 1.3 for all data in transit;
• Access controls: Role-based access controls (RBAC) ensuring that ggslots staff can only access personal data relevant to their job function, on a strict need-to-know basis;
• Multi-factor authentication: Required for all administrative access to systems that store or process personal data;
• Regular security testing: Periodic penetration testing and vulnerability assessments conducted by independent security specialists;
• Incident response: A documented data breach response plan aligned with NPC Circular 16-03 breach notification requirements;
• Staff training: Regular data privacy and security awareness training for all ggslots personnel who handle personal data.

While ggslots employs robust security measures, no system is completely immune to security risks. We encourage players to use strong, unique passwords and to enable two-factor authentication on their accounts to further protect their personal data.

13 Changes to This Privacy Policy

ggslots may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, we will notify registered players via email and/or a prominent in-platform notification at least seven (7) calendar days before the changes take effect.

The "Last Updated" date at the top of this page will always reflect when the most recent changes were made. We encourage you to review this Privacy Policy periodically to stay informed about how ggslots protects your personal data. Your continued use of the Platform after any updated Privacy Policy takes effect constitutes your acknowledgement of the revised policy.

14 Contact Us & Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact ggslots's designated Data Protection Officer (DPO):

• Email: [email protected]
• Subject Line: Please mark your message "Data Privacy Request – [Your Full Name]" for prompt routing to the DPO
• Live Chat: Available 24/7 on the ggslots Platform for general enquiries
• Response Time: Written data privacy requests are acknowledged within 5 business days and resolved within 30 calendar days

For complaints that have not been satisfactorily resolved by ggslots, you may escalate your concern to the National Privacy Commission (NPC) of the Philippines, which serves as the supervisory authority for data protection matters in the country.