Privacy Policy
At gpeeya, your privacy is not an afterthought — it is built into how we operate. This Privacy Policy explains exactly what personal data we collect from Filipino players, why we collect it, how we use it, who we share it with, and how we keep it secure. We operate in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).
How gpeeya Keeps Your Data Safe
Six core principles that define how gpeeya handles your personal information — from the moment you register to every transaction you make.
Encrypted at Every Step
All data transmitted between your device and gpeeya's servers is protected by industry-standard TLS/SSL encryption. Your login credentials, personal details, and payment information never travel in plaintext — ever.
No Selling of Your Data
gpeeya does not sell, rent, or trade your personal information to third-party marketers. Your data is yours. We only share what is legally required for regulatory compliance, KYC verification, and fraud prevention — nothing more.
RA 10173 Compliance
gpeeya fully complies with the Philippine Data Privacy Act of 2012 and its implementing rules. We have registered with the National Privacy Commission (NPC) and appointed a Data Protection Officer (DPO) responsible for overseeing all privacy matters.
You Stay in Control
Filipino players registered on gpeeya have the right to access, correct, and request the deletion of their personal data at any time, subject to our legal retention obligations. Submit a request through our 24/7 support team and we will respond within 15 business days.
Minimal Data Collection
gpeeya applies the principle of data minimization — we only collect the personal information that is strictly necessary for account registration, identity verification, regulatory compliance, and service delivery. No unnecessary data is requested or stored.
Marketing Opt-Out Anytime
If you opted in to receive promotional emails or SMS from gpeeya, you can withdraw that consent at any time. Simply update your notification preferences inside your account dashboard, or contact our support team and we will process your opt-out request immediately.
Summary: gpeeya collects only the personal data it needs to operate a safe, PAGCOR-compliant online gaming platform for Filipino players. We never sell your data. We protect it with industry-standard security. You have full rights over your information under Philippine law. This policy tells you everything — in plain language, not just legalese.
1 Who We Are
gpeeya is a PAGCOR-licensed online gaming platform operating at gpeeya.net, serving Filipino players across the Philippines — from Metro Manila and Cebu to Davao and beyond. We offer online bingo, live casino games, slots, and sports betting to registered users who are 21 years of age or older.
For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), gpeeya acts as the Personal Information Controller (PIC) — meaning we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers to process data on our behalf, those parties act as Personal Information Processors (PIP) and are bound by strict data processing agreements.
gpeeya has appointed a Data Protection Officer (DPO) who is responsible for ensuring our compliance with RA 10173 and its implementing rules and regulations. You can reach our DPO directly at [email protected] with the subject line "DPO Inquiry."
2 Personal Data We Collect
gpeeya collects personal data from you in three ways: data you provide directly, data collected automatically when you use our platform, and data received from third-party sources such as payment processors and identity verification providers.
Data You Provide Directly:
- Registration data: Full name, date of birth, nationality, email address, mobile number, and username.
- KYC verification data: Government-issued photo ID (Philippine passport, driver's license, or UMID), proof of address, and selfie verification images.
- Payment data: GCash or Maya account numbers, bank account details (BPI, BDO, Metrobank), or cryptocurrency wallet addresses. We do not store full card numbers — payment tokenization is handled by our licensed payment processors.
- Communications data: Messages, complaints, or inquiries you send to our customer support team via live chat, email, or Messenger.
- Responsible gaming data: Deposit limits, loss limits, session reminders, or self-exclusion requests you set within your account.
Data Collected Automatically:
- Device and browser data: IP address, browser type and version, operating system, device identifiers, and screen resolution.
- Usage and behavioral data: Pages visited, games played, wagers placed, session duration, click patterns, and navigation paths within the gpeeya platform.
- Transaction logs: Full records of all deposits, withdrawals, bonus claims, and game outcomes associated with your account.
- Location data: Approximate geographic location derived from your IP address, used solely for regulatory compliance and geo-restriction enforcement.
Data From Third-Party Sources:
- Identity verification results from our licensed KYC/AML service providers.
- Fraud risk scores and device fingerprinting data from our security partners.
- Payment confirmation data from GCash, Maya, InstaPay, PesoNet, and other payment processors.
Sensitive Personal Information: Under RA 10173, government ID numbers and financial account details are classified as sensitive personal information. gpeeya handles this data with heightened security controls and processes it only where strictly required for identity verification and regulatory compliance. We never process sensitive personal information for marketing purposes.
3 How We Use Your Personal Data
gpeeya uses the personal data it collects for the following specific, legitimate purposes:
- Account creation and management: To register your gpeeya account, verify your identity, and maintain your player profile in compliance with PAGCOR requirements.
- Service delivery: To provide access to our bingo, live casino, slot, and sports betting products; to process your bets; and to credit winnings to your account.
- Payment processing: To facilitate deposits via GCash, Maya, BPI, BDO, Metrobank, InstaPay, PesoNet, GrabPay, 7-Eleven CLiQQ, USDT TRC20, and Coins.ph, and to process withdrawal requests to your registered payout method.
- KYC and AML compliance: To verify your age (21+ as required by PAGCOR), confirm your identity, and screen transactions for anti-money laundering (AML) compliance as mandated by Philippine law.
- Fraud prevention and security: To detect and prevent unauthorized account access, bonus abuse, collusion, payment fraud, and other prohibited activities described in our Terms & Conditions.
- Customer support: To respond to your inquiries, resolve complaints, and provide assistance in English and Filipino.
- Responsible gaming: To honor the deposit limits, loss limits, session reminders, and self-exclusion settings you have established, and to identify and assist players who may be showing signs of problem gambling.
- Legal and regulatory compliance: To maintain records required by PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine regulatory authorities.
- Platform improvement: To analyze usage patterns and game performance data in order to improve the gpeeya platform and user experience. This analysis uses aggregated, anonymized data wherever possible.
- Marketing communications (with consent only): To send you promotional offers, bonus notifications, and tournament announcements via email or SMS, only if you have opted in to receive such communications.
Purpose Limitation: gpeeya will not use your personal data for any purpose other than those listed above without first obtaining your explicit consent or a valid legal basis under RA 10173. If we need to use your data for a new purpose that is materially different from those above, we will notify you and, where required by law, seek your consent.
4 Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012, gpeeya processes your personal data on one or more of the following legal bases:
- Contractual necessity: Processing your registration data, KYC information, and payment details is necessary to create and maintain your gpeeya account and to deliver the gaming services you have contracted for.
- Legal obligation: gpeeya is required by PAGCOR licensing conditions, Philippine AML regulations (RA 9160 as amended), and other applicable laws to collect, verify, and retain certain categories of player data.
- Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform analytics is carried out on the basis of gpeeya's legitimate business interests, balanced against your privacy rights. These interests do not override your fundamental rights and freedoms.
- Consent: Marketing communications, optional cookies beyond those strictly necessary for platform function, and any other processing not covered by the bases above is carried out only on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
5 Sharing Your Personal Data
gpeeya does not sell, rent, or trade your personal data. We share your information only in the following limited circumstances, and only to the extent necessary for the stated purpose:
- Payment processors: GCash, Maya, GrabPay, BancNet (InstaPay/PesoNet), BPI, BDO, Metrobank, and other licensed payment service providers receive the transaction data necessary to process your deposits and withdrawals.
- KYC and identity verification providers: Licensed third-party identity verification and AML screening services receive your KYC documents and personal details for the purpose of verifying your identity and screening against watchlists as required by Philippine law.
- Game content providers: Where you play games powered by third-party software providers (such as live dealer studios or slot developers), those providers receive the minimum game session data necessary to operate the game. They are contractually prohibited from using this data for any other purpose.
- Fraud prevention and security partners: We share device fingerprint data and behavioral signals with licensed fraud detection services to protect our platform and its players.
- Regulatory authorities: gpeeya is legally obligated to share certain player data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities upon lawful request or as required by our licensing conditions.
- Professional advisors: Our legal counsels, auditors, and compliance consultants may have access to your data to the extent necessary for them to provide their professional services, subject to confidentiality obligations.
No Cross-Border Transfers Without Safeguards: If any of the above third parties are located outside the Philippines, gpeeya ensures that adequate data protection safeguards are in place — including contractual clauses that meet NPC standards — before any cross-border transfer of personal data takes place. We will not transfer your personal data to any country or territory that does not provide an adequate level of data protection without your explicit consent or a valid legal basis.
6 Cookies & Tracking Technologies
gpeeya uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyze how Filipino players use our services. Here is a breakdown of the types of cookies we use:
- Strictly necessary cookies: These are essential for the gpeeya platform to function. They maintain your login session, remember your language preference, and enable core security features. These cookies cannot be disabled without breaking basic site functionality.
- Performance and analytics cookies: These cookies collect aggregated, anonymized data about how visitors navigate gpeeya — which pages are visited most, where users drop off, and how long sessions last. This information helps us improve the platform experience for all players.
- Functional cookies: These remember choices you make on gpeeya, such as your preferred deposit method or game lobby filter settings, so you do not have to re-enter them every visit.
- Marketing and targeting cookies: These cookies are only set with your explicit consent. They allow gpeeya to show you relevant promotional content within the platform based on your gaming activity. You can opt out of these at any time via your cookie preferences.
You can manage your cookie preferences through your browser settings or through the cookie preferences panel accessible from the gpeeya website. Please note that disabling strictly necessary cookies will affect your ability to log in and use the platform.
7 Data Retention
gpeeya retains your personal data only for as long as it is necessary for the purposes described in this Privacy Policy, or as required by applicable Philippine law and our PAGCOR licensing conditions. The following retention periods apply:
- Account and KYC data: Retained for a minimum of five (5) years after account closure, as required by Philippine AML regulations and PAGCOR licensing terms. This includes your registration details, identity documents, and KYC verification records.
- Transaction and game history: Retained for a minimum of five (5) years from the date of each transaction, for AML compliance and dispute resolution purposes.
- Customer support records: Retained for three (3) years after the resolution of the relevant support interaction.
- Marketing consent records: Retained for as long as your account is active, or until you withdraw consent — whichever comes first. Proof of consent is retained for one (1) year after consent is withdrawn, for compliance purposes.
- Usage and analytics data: Aggregated, anonymized analytics data may be retained indefinitely as it can no longer be linked to an identifiable individual.
When your personal data is no longer required and no legal retention obligation applies, gpeeya will securely delete or anonymize it so that it can no longer be linked to you as an individual.
8 Data Security
gpeeya implements a comprehensive set of technical, organizational, and administrative security measures designed to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our security program includes:
- Encryption in transit: All data transmitted between your device and gpeeya's servers is encrypted using TLS 1.2 or higher. Our platform is served exclusively over HTTPS.
- Encryption at rest: Sensitive personal data stored in gpeeya's databases — including KYC documents and financial account details — is encrypted at rest using AES-256 or equivalent standards.
- Access controls: Access to personal data is restricted to gpeeya employees and contractors who have a legitimate business need. Role-based access controls and multi-factor authentication are enforced for all internal systems that process personal data.
- Security monitoring: gpeeya operates 24/7 security monitoring of its platform infrastructure. Anomalous access patterns and potential breaches trigger automated alerts for immediate investigation.
- Penetration testing: gpeeya engages independent security firms to conduct regular penetration testing and vulnerability assessments of its platform.
- Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, gpeeya will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required by RA 10173. Affected individuals will be notified promptly where the breach is likely to result in a high risk to their rights.
Your Role in Security: While gpeeya takes extensive measures to protect your data, account security is a shared responsibility. Please use a strong, unique password for your gpeeya account, enable two-factor authentication (2FA), and never share your login credentials with anyone. If you suspect your account has been compromised, contact gpeeya support at [email protected] immediately.
9 Your Rights Under RA 10173
As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by gpeeya. To exercise any of these rights, contact our Data Protection Officer at [email protected]. We will acknowledge your request within 5 business days and provide a full response within 15 business days.
| Your Right | What It Means |
|---|---|
| Right to be Informed | You have the right to know what personal data gpeeya collects about you, why we collect it, and how we use it. This Privacy Policy fulfills that obligation. |
| Right to Access | You may request a copy of the personal data gpeeya holds about you, including your registration details, KYC records, and transaction history. |
| Right to Correction | If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Some corrections may require re-submission of KYC documents. |
| Right to Erasure | You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent. This right is subject to our legal retention obligations under Philippine AML and gaming regulations. |
| Right to Object | You have the right to object to processing of your personal data for direct marketing purposes. Upon receiving an objection to marketing, gpeeya will stop processing your data for that purpose immediately. |
| Right to Data Portability | Where technically feasible, you may request a copy of your personal data in a structured, commonly used, machine-readable format. |
| Right to Complain | If you believe gpeeya has violated your data privacy rights, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. |
Identity Verification: To protect your privacy and prevent unauthorized access to your data, gpeeya will verify your identity before processing any data subject rights request. We may ask you to confirm your registered email address or provide a valid government-issued ID. We will never charge a fee for processing a data subject rights request made in good faith.
10 Children & Minors
gpeeya is strictly an adult gaming platform. As mandated by PAGCOR and Philippine law, all registered players must be 21 years of age or older. gpeeya does not knowingly collect personal data from any person under the age of 21.
If gpeeya discovers that a registered account belongs to a person under 21 years of age, the account will be immediately suspended, all related personal data will be deleted from our active systems (subject to any legally mandated retention obligations), and any deposits will be returned to the original payment method after applicable processing fees.
If you are a parent or guardian and you believe your child has registered on gpeeya, please contact our support team at [email protected] immediately. We take underage access extremely seriously and will act on all reports promptly.
Age Verification: gpeeya uses a combination of self-declaration at registration and mandatory KYC document verification to enforce the 21+ age requirement. We conduct random age verification checks in addition to the standard KYC process. Providing a false date of birth at registration is a material breach of our Terms & Conditions and may result in permanent account closure and forfeiture of funds.
11 Third-Party Links & Integrations
The gpeeya platform may contain references to or integrations with third-party services — such as payment processors, game content providers, and identity verification platforms — that have their own privacy policies. gpeeya is not responsible for the privacy practices of these third parties.
When you interact with a third-party service through gpeeya — for example, when completing a GCash deposit or a Maya withdrawal — your transaction is processed directly by that third party and is subject to their own privacy policy and terms of service. We encourage you to review the privacy policies of any third-party services you use in connection with your gpeeya account.
gpeeya does not endorse and is not liable for the content, privacy practices, or security measures of any third-party service providers. If you have concerns about how a third-party provider handles your data, please contact that provider directly.
12 Changes to This Privacy Policy
gpeeya reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR requirements, or NPC guidance. When we make material changes — meaning changes that significantly affect how we process your personal data or your rights as a data subject — we will provide advance notice through one or more of the following channels:
- A prominent notice on the gpeeya homepage or login page.
- An email notification to your registered email address.
- An in-account notification visible upon your next login.
Minor changes — such as corrections of typographical errors, clarifications that do not affect the substance of the policy, or updates to contact details — may be made without advance notice. The "Effective Date" at the top of this page will always reflect the date of the most recent revision.
Your continued use of the gpeeya platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Privacy Policy, you must stop using the gpeeya platform and may request account closure by contacting our support team.
Previous Versions: If you would like to review a previous version of this Privacy Policy, please contact our Data Protection Officer at [email protected] and we will provide the requested version subject to reasonable availability.
13 Contact Us & Data Protection Officer
If you have any questions, concerns, or requests relating to this Privacy Policy or to how gpeeya processes your personal data, please contact our Data Protection Officer (DPO) using the details below. Our support team is available 24/7 in English and Filipino to assist you.
- Email: [email protected] (subject line: "Privacy / DPO Inquiry")
- Live Chat: Available 24/7 directly on the gpeeya platform
- Messenger / Viber: Via official gpeeya pages only
If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing RA 10173.
Reminder: If you are reading a cached or printed version of this page, please visit gpeeya.net/privacy-policy to ensure you are reading the most current Privacy Policy.
Play with Confidence on gpeeya
Now that you know exactly how gpeeya protects your personal data, you can play with full confidence. Our PAGCOR-licensed platform gives Filipino players fast payouts, real jackpots, and privacy protection you can actually count on.