Privacy Policy

1. Introduction

gbetcom ("we", "us", "our") is committed to protecting the personal data of every player who uses the gbetcom Platform. This Privacy Policy ("Policy") explains how gbetcom collects, uses, stores, shares, and protects personal information in connection with the operation of our online casino and sports betting services available at gbetcom.bet.

This Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all relevant issuances of the National Privacy Commission (NPC) of the Philippines. It reflects gbetcom's recognition that Filipino players are entitled to transparency, control, and security regarding their personal information.

We encourage you to read this Policy carefully and in full before creating your gbetcom account. If you have questions at any point, our Data Protection Officer is available at the contact details provided in Section 15 of this document.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, gbetcom is the personal information controller in respect of the personal data you provide when using the gbetcom Platform. As personal information controller, gbetcom determines the purposes and means of processing your personal data.

gbetcom has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data privacy laws. Contact details for our DPO are provided in Section 15. You may contact the DPO directly for any privacy-related inquiry, complaint, or request to exercise your data subject rights.

3. Data We Collect

gbetcom collects personal data through multiple touchpoints. The categories of personal data we collect include, but are not limited to, the following:

3.1 Registration and Identity Data

• Full legal name as it appears on a government-issued ID
• Date of birth (to verify the 21+ age requirement)
• Nationality and country of residence
• Email address and mobile number
• Username and encrypted password
• Residential address (for KYC and AML compliance)

3.2 Identity Verification (KYC) Documents

• Copies of government-issued photo identification (e.g., Philippine passport, driver's license, UMID card, SSS/GSIS ID, PhilSys National ID)
• Proof of address (e.g., utility bill, bank statement dated within three months)
• Source-of-funds documentation (e.g., payslip, bank statement) where required by AML procedures
• Selfie or facial verification image for identity matching

3.3 Financial and Transaction Data

• Deposit and withdrawal history, including amounts, timestamps, and payment methods used
• GCash or PayMaya mobile number or account reference
• BPI, BDO, or Metrobank account reference (last four digits and account name only; never full account numbers)
• Cryptocurrency wallet addresses used for USDT, BTC, or ETH transactions
• Transaction identifiers and on-chain hashes for crypto deposits and withdrawals

3.4 Gaming and Behavioral Data

• Game history, including games played, bet amounts, outcomes, and session timestamps
• Sports betting selections, stakes, and settlement records
• Bonus usage and wagering requirement progress
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

3.5 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session duration and page interaction data
• Cookie identifiers and similar tracking technologies (see Section 9)

3.6 Communications Data

• Records of live chat conversations with gbetcom support agents
• Email correspondence with gbetcom's support or DPO team
• Feedback, complaints, and dispute records

gbetcom does not collect sensitive personal information as defined under RA 10173 (such as health data, political opinions, or religious beliefs) unless specifically required and with your explicit consent. The collection of age-related data (date of birth) is necessary to comply with the 21+ age restriction mandated by PAGCOR guidelines.

4. How We Use Your Data

gbetcom processes your personal data for the following purposes:

Purpose	Data Used
Account creation and management	Registration data, identity data
Identity verification (KYC)	KYC documents, facial verification
Processing deposits and withdrawals	Financial data, transaction records
Anti-money laundering (AML) monitoring	Financial data, gaming data, identity data
Delivering casino and sportsbook services	Gaming data, technical data
Customer support and dispute resolution	Communications data, account data
Responsible gaming compliance	Gaming data, account data
Marketing communications (with consent)	Email address, game preferences
Platform security and fraud prevention	Technical data, financial data, gaming data
Legal and regulatory compliance	All categories as required

gbetcom will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.

5. Legal Basis for Processing

gbetcom processes your personal data on one or more of the following legal bases, as applicable under RA 10173:

• Contractual necessity: Processing is necessary to perform the contract we have with you when you create a gbetcom account and use the Platform — including managing your account, processing bets, and handling payments.
• Legal obligation: Processing is required for gbetcom to comply with applicable laws including AML regulations, KYC obligations, PAGCOR licensing requirements, and the Data Privacy Act itself.
• Legitimate interests: Processing is necessary for gbetcom's legitimate interests in operating a secure and fair Platform, preventing fraud and abuse, and improving our services — provided that these interests are not overridden by your fundamental rights.
• Consent: For marketing communications and optional analytics cookies, processing is based on your freely given and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.

6. Data Sharing & Disclosure

gbetcom does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and cryptocurrency processing partners require transaction data to process deposits and withdrawals on your behalf.
• Identity verification providers: Third-party KYC and AML compliance partners process identity documents and facial verification data to satisfy our regulatory obligations.
• Game providers: Licensed game studios including Pragmatic Play, JILI, and Evolution Gaming receive minimal technical data (e.g., session tokens) necessary to deliver their games through the gbetcom Platform.
• Regulatory and law enforcement authorities: gbetcom may be legally required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or Philippine law enforcement agencies pursuant to lawful orders or subpoenas.
• IT and infrastructure partners: Hosting, cloud storage, and security service providers process data on gbetcom's behalf under strict data processing agreements that prohibit any use of your data beyond the scope of the services they provide to gbetcom.
• Professional advisors: Legal counsel, auditors, and compliance consultants may access personal data to the minimum extent necessary to provide their professional services to gbetcom.

All third-party service providers who process personal data on gbetcom's behalf are required to comply with data privacy standards consistent with RA 10173. gbetcom remains accountable for ensuring that such providers handle your data appropriately.

7. International Data Transfers

Some of gbetcom's third-party service providers, including cloud infrastructure and game providers, may be located outside the Philippines. Where personal data is transferred to countries that may not have equivalent levels of data protection legislation, gbetcom implements appropriate safeguards to protect your information — including contractual clauses requiring recipients to adhere to data protection standards consistent with Philippine law.

gbetcom only transfers data to jurisdictions or entities that can provide an adequate level of protection for your personal information. If you have questions about the safeguards applied to specific transfers, you may contact our DPO using the details in Section 15.

8. Data Retention

gbetcom retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and KYC data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations under Philippine law.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, consistent with AMLC reporting requirements.
• Gaming history: Retained for a minimum of three (3) years from the date of each session.
• Support communications: Retained for two (2) years from the date of the last communication, or longer where the subject matter relates to a formal dispute or legal proceeding.
• Marketing consent records: Retained until consent is withdrawn, plus an additional one (1) year for compliance record-keeping purposes.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual. Anonymised or aggregated data may be retained indefinitely for statistical analysis and Platform improvement purposes.

9. Cookies & Tracking Technologies

gbetcom uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device when you visit gbetcom.bet. Cookies help the Platform function correctly, remember your preferences, and provide gbetcom with information about how the Platform is used.

9.1 Types of Cookies We Use

• Strictly necessary cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session management cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. No consent is required for these cookies as they are technically necessary.
• Functional cookies: These cookies remember your language preference, currency display, and responsible gaming settings. Disabling them may affect your user experience but will not prevent you from using the Platform.
• Analytics cookies: gbetcom uses anonymised analytics to understand which pages and games are most popular, how players navigate the Platform, and where technical issues occur. These cookies do not identify you personally. They are set only with your consent.
• Fraud prevention cookies: These cookies help gbetcom's security systems detect and prevent fraudulent activity, including account takeover attempts and automated bot activity. They form part of our legitimate interest in securing the Platform.

9.2 Managing Cookies

You may manage your cookie preferences through your browser settings at any time. Most browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent the Platform from functioning correctly. For analytics cookies, you may withdraw consent at any time by adjusting your browser settings or contacting our support team.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by gbetcom:

• Right to be informed: You have the right to be informed of how your personal data is being collected and processed. This Policy fulfils that obligation.
• Right of access: You may request a copy of the personal data gbetcom holds about you, including information about how it is being used and with whom it has been shared.
• Right to rectification: If any personal data gbetcom holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account information directly within your gbetcom account dashboard.
• Right to erasure: You may request that gbetcom delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to gbetcom's legal obligations to retain certain data (see Section 8).
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though gbetcom may continue processing where there are compelling legitimate grounds that override your interests.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that gbetcom provide your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: If you believe gbetcom has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact gbetcom's Data Protection Officer using the details in Section 15. gbetcom will respond to all verified requests within 30 calendar days of receipt. In complex cases, this may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

11. Data Security

gbetcom implements comprehensive technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption in transit: All data transmitted between your device and gbetcom's servers is protected using TLS 1.3 encryption, the current industry standard for secure web communications.
• Encryption at rest: Sensitive personal data stored in gbetcom's databases — including KYC documents and financial records — is encrypted using AES-256.
• Access controls: Access to personal data is restricted to gbetcom employees and contractors who require it to perform their specific job functions. All staff with data access undergo regular privacy and security training.
• Two-factor authentication: gbetcom's internal systems require multi-factor authentication for all staff accessing personal data repositories.
• Regular security audits: gbetcom conducts regular vulnerability assessments and independent penetration testing of its Platform infrastructure.
• Incident response: In the event of a personal data breach that is likely to result in risk to your rights, gbetcom will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected individuals without undue delay where required.

While gbetcom takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. You also play a role in keeping your data safe by maintaining the confidentiality of your gbetcom login credentials and reporting any suspected unauthorized account access to our support team immediately.

12. Children's Privacy

The gbetcom Platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR responsible gaming guidelines and applicable Philippine gambling regulations. gbetcom does not knowingly collect personal data from individuals under the age of 21.

gbetcom verifies the age of all registering players during the KYC process. If gbetcom discovers that personal data has been collected from a player who is under the age of 21, the account will be immediately suspended, any deposits will be returned to the originating payment method, and all personal data associated with the account will be securely deleted without undue delay.

If you believe that a minor has registered on the gbetcom Platform, please contact our support team at [email protected] immediately. We take such reports seriously and will act on them promptly.

13. Marketing Communications

gbetcom may send you promotional emails, SMS notifications, or in-Platform messages about bonuses, new games, and special offers — but only where you have given your explicit consent to receive such communications during registration or subsequently through your account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link in any gbetcom marketing email;
• Updating your notification preferences in your gbetcom account dashboard; or
• Contacting gbetcom support at [email protected] with a written request to opt out.

Withdrawal of marketing consent does not affect your ability to use the Platform or receive transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts — these are sent on the basis of contractual necessity and cannot be opted out of while your account remains active.

14. Changes to This Privacy Policy

gbetcom reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or improvements to our Platform. When material changes are made, gbetcom will notify registered players via the email address associated with their account and/or through a prominent notice on the Platform.

The "Last Updated" date at the top of this Policy indicates when the most recent version took effect. Your continued use of the gbetcom Platform after the effective date of any amendment constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically.

If you do not agree to the updated Privacy Policy, you must cease using the gbetcom Platform and may request account closure by contacting our support team. gbetcom will retain your data for the legally required periods described in Section 8 even after account closure.

15. Contact & Data Protection Officer

For any questions, concerns, or requests regarding this Privacy Policy or gbetcom's data practices, please contact our Data Protection Officer (DPO):

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe gbetcom has not handled your personal data in accordance with RA 10173. The NPC can be reached through their official website at privacy.gov.ph (please note: gbetcom cannot provide a clickable link to external sites, but you may visit the NPC website directly in your browser).