GG PH Privacy Policy

Scope & Data Controller

This Privacy Policy applies to all personal data collected, processed, and stored by GG PH in connection with the operation of its online gaming platform at ggph.app, including all games, account services, payment systems, customer support interactions, and marketing communications directed at Philippine members.

Data Controller. For the purposes of applicable Philippine data protection legislation, GG PH operates as the data controller responsible for the personal data of its members. GG PH determines the purposes and means by which your personal information is processed. Our data protection contact details are provided in Section 15 of this Policy.

Applicable Law. GG PH processes personal data in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its implementing rules and regulations, together with any other applicable Philippine legislation governing the collection and processing of personal information.

Personal Data We Collect

GG PH collects different categories of personal data depending on your interaction with the platform. The following table summarises the main categories of information we may hold about you as a registered member:

GG PH does not intentionally collect sensitive personal information — such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data — from its members, except where a document provided for KYC purposes incidentally contains such information. Where this occurs, the information is used only for identity verification and is not processed for any other purpose.

How We Collect Your Data

GG PH collects personal data through the following means:

• Direct Registration: When you create a GG PH account, you provide your name, date of birth, mobile number, and email address directly to us through the registration form.
• KYC Verification: When submitting identity documents for verification, you provide scans or photographs of government-issued identification and, where required, proof of address and proof of payment method ownership.
• Transactions: Deposit and withdrawal requests generate financial data automatically, including transaction amounts, timestamps, and the payment method references used.
• Platform Usage: As you use the GG PH platform, data about your gaming activity, session behaviour, device type, and IP address is automatically recorded by the platform's logging systems.
• Support Interactions: When you contact GG PH via live chat, email, or any other support channel, the content of those communications is recorded and retained.
• Cookies and Tracking Technologies: GG PH uses cookies and similar technologies to collect technical data about your browsing behaviour on the platform, as described in Section 7 of this Policy.
• Third-Party Sources: In certain circumstances, GG PH may receive data about you from third-party payment processors, identity verification service providers, or fraud detection partners in connection with the operation of your account.

Legal Bases for Processing

GG PH processes your personal data on one or more of the following legal bases as defined under the Data Privacy Act of 2012 and its implementing rules:

• Contractual Necessity: Processing is necessary for the performance of the Member Agreement between you and GG PH, including operating your account, processing transactions, and providing the gaming services you have subscribed to.
• Legal Obligation: Processing is required to comply with legal obligations applicable to GG PH, including anti-money laundering (AML) obligations, age verification requirements, regulatory reporting, and tax compliance under Philippine law.
• Legitimate Interests: Processing is carried out in pursuit of GG PH's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of the platform — provided that these interests are not overridden by your fundamental rights and freedoms.
• Consent: For certain non-essential processing activities — in particular marketing communications by email or SMS — GG PH relies on your freely given, specific, informed consent. You may withdraw this consent at any time.

How We Use Your Personal Data

GG PH uses the personal data it collects for the following purposes:

• Account Management: Creating, maintaining, and securing your GG PH account; communicating account-related updates such as password changes, security alerts, and login notifications to your registered Philippine mobile number and email.
• Identity and Age Verification: Confirming that you meet the 21-year minimum age requirement and that your account information is accurate and consistent with the identity documents you submit for KYC.
• Transaction Processing: Facilitating deposits from GCash, PayMaya, BPI, BDO, and Metrobank; processing withdrawal requests to your verified payment method; maintaining a complete record of your financial activity on the platform.
• Regulatory Compliance and AML: Meeting GG PH's obligations under Philippine anti-money laundering legislation, including transaction monitoring, suspicious activity reporting, and co-operation with relevant Philippine regulatory and law enforcement authorities.
• Fraud Prevention and Security: Detecting and preventing unauthorised account access, fraudulent transactions, bonus abuse, and other security threats. Technical data including IP addresses and device fingerprints is used for this purpose.
• Responsible Gaming: Monitoring gaming activity patterns that may indicate problematic behaviour; applying responsible gaming limits set by you in your account settings; enforcing self-exclusion requests; and providing the support team with the information needed to respond to responsible gaming enquiries.
• Customer Support: Responding to your enquiries, resolving disputes, and improving the quality of support interactions based on communication history.
• Platform Improvement: Analysing aggregated usage data to understand how the platform is being used, identify areas for improvement, and inform product development decisions. This analysis is conducted on anonymised or pseudonymised data where practicable.
• Marketing: Sending promotional offers, bonus notifications, and platform updates to members who have opted in to marketing communications. See Section 12 for details on how to opt out.

Sharing Your Personal Data

GG PH does not sell your personal data to third parties. We share member data only in the circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Service Providers: Transaction data is shared with GCash, PayMaya, and Philippine banking partners (BPI, BDO, Metrobank) to process deposits and withdrawals. These providers act as independent data controllers for their own services.
• Identity Verification Providers: GG PH uses accredited KYC service providers to assist with document verification. These providers are bound by data processing agreements and may not use your data for any purpose other than fulfilling their contracted services.
• Game Technology Providers: Your account identifier and relevant session data are shared with game providers whose titles you play on the GG PH platform, to the extent necessary to deliver the gaming experience, resolve disputes, and ensure game fairness.
• Fraud and Security Partners: Technical data may be shared with fraud detection technology providers to identify suspicious activity patterns. These partners process data under strict contractual controls.
• Regulatory and Law Enforcement Authorities: GG PH may be required by Philippine law or by court order to disclose member information to regulatory bodies, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or other government authorities. Such disclosures are made without prior notice to the member where legally required.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of GG PH's business assets, member personal data may be transferred to the acquiring entity. Members will be notified of any such transfer and of any resulting changes to this Privacy Policy.
• Professional Advisers: GG PH may share data with lawyers, auditors, and other professional advisers where necessary for legal, regulatory, or corporate governance purposes, subject to confidentiality obligations.

Cookies & Tracking Technologies

GG PH uses cookies and similar tracking technologies on the ggph.app platform. Cookies are small text files stored on your device by your web browser. They allow the platform to remember your session state, preferences, and interactions in order to deliver a functional and personalised experience.

7.1 Essential Cookies. These are required for the platform to function and cannot be disabled. They include session authentication cookies that keep you logged in during your gg ph session, security tokens, and load-balancing cookies. No consent is required for essential cookies.

7.2 Functional Cookies. These remember your preferences — such as display settings and preferred game categories — to personalise your experience on subsequent visits. You may disable these via your browser settings, but doing so may affect platform functionality.

7.3 Analytics Cookies. GG PH uses analytics tools to collect aggregated data about how the platform is used — which pages are visited, how long sessions last, and which features are most frequently used. This data is used to improve the platform. Analytics data is pseudonymised where possible.

7.4 Managing Cookies. You may manage cookie preferences through your browser's settings. Disabling all cookies will prevent you from logging in and using the GG PH platform, as session authentication depends on essential cookies. GG PH does not use third-party advertising cookies or cross-site tracking technologies.

Data Retention

GG PH retains personal data for the periods described below. When data is no longer required for the stated purpose and no legal obligation requires its continued retention, it is securely deleted or anonymised.

• Active Account Data: Retained for the duration of your membership on GG PH and for a period of five (5) years following account closure, in line with standard Philippine financial record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission, or for such longer period as may be required by applicable Philippine anti-money laundering regulations.
• Transaction Records: Retained for five (5) years following the relevant transaction date, consistent with AMLC and tax documentation requirements under Philippine law.
• Gaming Activity Logs: Retained for three (3) years from the date of each session, unless a longer retention period is required for the resolution of a regulatory inquiry or dispute.
• Support Communications: Retained for two (2) years from the date of the last interaction in each support case.
• Marketing Preference Data: Retained until you withdraw your marketing consent or until your account is permanently closed, whichever is earlier.

Data Security

GG PH implements a range of technical and organisational measures designed to protect the personal data of its members against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• Encryption in Transit: All data exchanged between your device and ggph.app is encrypted using TLS 1.3 (Transport Layer Security). This applies to all login sessions, transactions, and API calls.
• Encryption at Rest: Sensitive personal data stored on GG PH servers — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Password Security: Member passwords are one-way hashed using a secure cryptographic algorithm. GG PH staff cannot read, retrieve, or transmit your original password under any circumstances.
• Access Controls: Access to member personal data is restricted to authorised GG PH personnel whose role requires it. All staff access is logged, audited, and governed by internal data handling policies.
• Two-Factor Authentication: GG PH offers 2FA for all member accounts. Members are strongly encouraged to enable this feature to add a layer of protection against unauthorised account access.
• Penetration Testing and Security Audits: The GG PH platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.

While GG PH takes all reasonable steps to protect your data, no internet-based system can be guaranteed to be completely secure. Members are responsible for keeping their own login credentials confidential and for notifying GG PH promptly if they suspect any unauthorised access to their account.

Your Rights as a Data Subject

Under the Data Privacy Act of 2012 of the Philippines and its implementing rules, you have the following rights in relation to the personal data GG PH holds about you. To exercise any of these rights, contact us using the details in Section 15.

Children and Minors

GG PH is strictly for adults aged twenty-one (21) years and above. The platform does not knowingly collect personal data from individuals below the age of 21. All registration processes include an age declaration, and GG PH enforces age verification through KYC document checks.

If GG PH becomes aware that personal data has been collected from a person under 21 years of age, the account will be immediately suspended, all balances will be withheld pending investigation, and the personal data of the minor will be deleted from GG PH systems within a reasonable period. Any winnings generated through an underage account will be voided.

Parents and guardians who believe a minor in their care has registered on the GG PH platform should contact our support team immediately at [email protected].

Marketing Communications

12.1 Opt-In Marketing. GG PH sends promotional emails, SMS messages, and in-platform notifications to members who have explicitly opted in to marketing communications during registration or through their account preferences settings. These communications may include bonus offers, new game announcements, VIP program updates, and other platform promotions.

12.2 Transactional Communications. Certain non-promotional communications — including account security alerts, transaction confirmations, KYC verification requests, withdrawal status updates, and material changes to these policies — are sent to all members regardless of marketing preference, as they are necessary for the operation of the Member Agreement.

12.3 Opting Out. You may withdraw your consent to receive marketing communications at any time by: updating your preferences in your GG PH account dashboard settings; clicking the unsubscribe link in any marketing email; or contacting the support team at [email protected]. Opt-out requests are processed within five (5) business days. Opting out of marketing does not affect transactional communications.

Third-Party Links

The GG PH platform may contain references or functional links to third-party services, including payment processors and game providers. This Privacy Policy applies only to the GG PH platform and the data processed directly by GG PH. Third-party services operate under their own privacy policies, which GG PH does not control.

GG PH is not responsible for the privacy practices or the content of third-party services. Members are encouraged to review the privacy policies of any third-party services they interact with in connection with their GG PH account.

Updates to This Privacy Policy

GG PH reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, applicable Philippine law, regulatory guidance from the National Privacy Commission, or operational requirements. The effective date at the top of this document indicates when the current version came into force.

When GG PH makes material changes — meaning changes that significantly affect your rights or how your data is processed — registered members will be notified via their registered email address or through a notice displayed upon login to the platform before the changes take effect. Non-material updates (such as clarifications of existing practices) may be made without prior notice.

Your continued use of the GG PH platform following the effective date of any updated Privacy Policy constitutes acceptance of the revised terms. If you do not accept the updated Policy, you must cease using the platform and request account closure before the effective date of the change.

Contact Us & Privacy Complaints

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how GG PH has handled your personal information, please contact us through the following channels:

• Data Protection Contact — Email: [email protected]
  Please mark your subject line clearly as "Data Privacy Request" or "Privacy Complaint." Responses within 30 calendar days.
• Live Chat Support: Available 24/7 on the GG PH platform after gg ph login. Suitable for general privacy queries and urgent account data concerns.

National Privacy Commission (NPC). If you believe your data privacy rights have been violated and your concern has not been resolved satisfactorily by GG PH, you have the right to file a complaint with the National Privacy Commission of the Philippines. The NPC is the Philippine government body responsible for overseeing compliance with the Data Privacy Act of 2012. For NPC contact information and complaint procedures, visit the NPC's official government channels.