gl888 Privacy Policy

1.1 For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, gl888 acts as the personal information controller with respect to the personal data of players and visitors to the gl888 platform at https://gl888.cam.

1.2 As a personal information controller, gl888 determines the purposes and means of processing your personal data and is responsible for ensuring that processing activities comply with applicable Philippine data privacy law, including registration with the National Privacy Commission (NPC) where required.

1.3 gl888 has appointed a Data Protection Officer (DPO) to oversee compliance with this Policy and applicable data privacy law. Contact details for the DPO are provided in Section 14 of this Policy.

1.4 gl888 operates as an online gaming platform under PAGCOR's regulatory framework. Certain data processing activities — particularly those related to KYC verification and anti-money laundering compliance — are mandated by PAGCOR regulations and the Anti-Money Laundering Act (Republic Act No. 9160, as amended), and in those cases, gl888 processes personal data as both a personal information controller and, where required, as a reporting entity to regulatory authorities.

2.1 gl888 collects and processes the following categories of personal data, depending on the nature of your interaction with the platform:

2.2 gl888 does not collect special categories of personal data (as defined under RA 10173, such as health data, political opinions, religious beliefs, or biometric data) except where biometric data is incidentally provided as part of a government-issued ID submitted for KYC purposes, in which case it is treated with heightened protection.

2.3 Where collection of certain data is mandatory (e.g., for KYC compliance), failure to provide the requested information may result in gl888 being unable to process withdrawals or, in some cases, unable to maintain the player's account in active status.

3.1 gl888 collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions
• Automated collection: Technical data including IP addresses, device identifiers, session cookies, and browsing behavior on the gl888 platform, collected automatically through server logs and analytics tools
• Third-party sources: Identity verification data from KYC partners; payment verification data from GCash, PayMaya, and banking partners; fraud risk signals from third-party fraud prevention services; public records for AMLA compliance screening
• Inferred data: Player preference profiles derived from gaming activity, which are used exclusively for personalizing the player experience on gl888 and are not shared with third parties for independent profiling purposes

3.2 gl888 does not collect personal data from individuals without their knowledge through covert means, and does not purchase personal data lists from data brokers or any third party for direct marketing purposes.

4.1 Under the Data Privacy Act of 2012, gl888 processes personal data only where a lawful basis for processing exists. The following bases apply to gl888's processing activities:

• Contractual necessity: Processing of identity, contact, financial, and gaming activity data is necessary for the performance of the player agreement (Terms and Conditions) between gl888 and the player — including account management, game provision, and payment processing
• Legal obligation: KYC/AML-related processing is required by PAGCOR regulations and the Anti-Money Laundering Act. Reporting obligations to regulatory authorities are mandatory under Philippine law and cannot be overridden by player consent or objection
• Legitimate interests: Processing of technical data for fraud prevention, platform security, and abuse detection is based on gl888's legitimate interests in protecting the platform and its players, provided those interests are not overridden by the player's privacy rights
• Consent: Processing for direct marketing communications (promotional emails, SMS) is based on the player's explicit opt-in consent, which may be withdrawn at any time through account settings without affecting any other aspect of the player's account

5.1 gl888 uses the personal data it collects for the following purposes:

• Creating, managing, and maintaining your gl888 player account
• Processing deposits, withdrawals, and bonus transactions in Philippine Peso
• Completing identity verification (KYC) and ongoing compliance monitoring as required by PAGCOR and AMLA regulations
• Delivering gaming services including slots, live casino, bingo, sports betting, and specialty games
• Providing customer support via live chat and email, including maintaining support interaction records for quality assurance
• Detecting, investigating, and preventing fraudulent transactions, multi-accounting, bonus abuse, and other prohibited conduct under the gl888 Terms and Conditions
• Personalizing your gaming experience — such as displaying games in categories you frequently visit or surfacing relevant promotions based on your gaming history
• Sending transactional communications: account verification emails, OTP messages, withdrawal confirmations, and security alerts
• Sending marketing communications (promotional offers, new game announcements, VIP program updates) to players who have opted in to receive them
• Fulfilling gl888's reporting obligations to PAGCOR and other Philippine government authorities as required by law
• Improving the gl888 platform through analysis of aggregated, anonymized usage data

5.2 gl888 does not use personal data for automated decision-making that produces legal effects concerning players, except in the context of automated fraud detection and AML screening, where decisions may be reviewed by gl888 compliance staff before account action is taken.

6.1 gl888 uses cookies and similar tracking technologies on the gl888 platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for core platform functionality including session management, login authentication, and security token validation. These cookies cannot be disabled without impairing platform operation.
• Functional cookies: Enable personalization features such as remembering your preferred game categories, language settings, and responsible gaming limit configurations.
• Analytics cookies: Used by gl888 to understand aggregate platform usage patterns — such as which game categories are most popular, average session lengths, and device type distribution — using anonymized data. These analytics are used for platform improvement only.
• Security cookies: Used to detect and prevent fraudulent access, identify suspicious login patterns, and flag unusual account activity for review.

6.2 gl888 does not use third-party advertising cookies or cross-site tracking cookies that would track your activity on websites other than gl888.cam.

6.3 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the gl888 platform. Disabling other cookie categories will not affect your ability to play but may reduce personalization features.

7.1 gl888 does not sell, rent, or trade your personal data to any third party. Data sharing occurs only in the following circumstances and with the following categories of recipients:

• Payment processors and e-wallet providers: GCash (Mynt / Globe Fintech), PayMaya (Voyager Innovations / Maya Bank), BPI, BDO, and Metrobank — for the purpose of processing deposits and withdrawals. Data shared is limited to what is necessary to complete the specific financial transaction.
• KYC and identity verification partners: Third-party identity verification service providers engaged by gl888 to perform document verification and liveness checks. These partners act as personal information processors under gl888's instruction and are bound by data processing agreements.
• Game software providers: Live casino and specialty game studios (including but not limited to Evolution Gaming and Pragmatic Play) receive session and technical data necessary to deliver the game experience. They do not receive KYC or financial account data.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, and courts — where disclosure is required by Philippine law, PAGCOR regulation, court order, or legal process.
• Professional advisors: Lawyers, auditors, and compliance consultants engaged by gl888, subject to professional confidentiality obligations.

7.2 In the event that gl888 undergoes a business transaction such as a merger, acquisition, or asset sale, player personal data may be transferred as part of that transaction. Players will be notified via email prior to any such transfer, and the incoming entity will be required to honor the commitments made in this Privacy Policy.

8.1 gl888 retains personal data only for as long as is necessary for the purposes set out in this Policy, taking into account applicable legal, regulatory, and business requirements. The following retention periods apply:

8.2 Upon expiry of the applicable retention period, gl888 will securely delete, anonymize, or destroy the relevant personal data in accordance with its data disposal procedures. Secure deletion uses industry-standard methods that render the data unrecoverable.

9.1 Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights as a data subject. gl888 will respond to all valid data subject requests within thirty (30) days of receipt.

10.1 gl888 implements a comprehensive set of technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between user devices and gl888 servers is encrypted using TLS 1.3 with 256-bit AES cipher suites
• Encryption at rest: Stored personal data and KYC documents are encrypted using AES-256 encryption with access-controlled key management
• Access controls: Role-based access controls (RBAC) ensure that gl888 staff can only access personal data that is necessary for their specific job function. All access to sensitive data is logged and auditable
• Password security: Player passwords are stored as salted bcrypt hashes. gl888 staff cannot view plain-text passwords under any circumstances
• Two-factor authentication: 2FA via OTP is available for all player accounts and is strongly recommended
• Penetration testing: gl888 conducts regular third-party penetration tests and vulnerability assessments of its platform infrastructure
• Incident response: gl888 maintains a documented data breach incident response plan in compliance with NPC Circular No. 16-03
• Staff training: All gl888 staff who handle personal data receive regular training on data privacy obligations and security best practices

10.2 Despite these measures, no internet-based system is 100% secure. gl888 encourages players to maintain strong, unique passwords for their accounts, enable 2FA, and report any suspicious account activity to support immediately.

11.1 gl888 is an adult online gaming platform and is strictly intended for individuals who are 21 years of age or older. gl888 does not knowingly collect personal data from individuals under the age of 21.

11.2 If gl888 becomes aware that personal data has been collected from an individual under 21 years of age — whether through registration, KYC review, or any other means — gl888 will immediately suspend the associated account, delete the collected personal data to the extent permitted by applicable law, and take appropriate action in accordance with PAGCOR underage access protocols.

11.3 Parents and guardians who believe that a minor under their care has registered on gl888 or provided personal data to gl888 are encouraged to contact the gl888 Data Protection Officer immediately using the contact details in Section 14.

12.1 gl888 operates primarily within the Philippines and stores the majority of player personal data on servers located in the Philippines or in data centers that are contractually bound to Philippine data protection standards.

12.2 Certain third-party service providers engaged by gl888 (including some game software studios and technical infrastructure providers) may process personal data in jurisdictions outside the Philippines. Where such cross-border processing occurs, gl888 ensures that:

• The recipient jurisdiction provides an adequate level of data protection as recognized by the National Privacy Commission of the Philippines, or
• Appropriate safeguards are in place in the form of contractual clauses that impose data protection obligations equivalent to those under Philippine law, or
• The transfer is necessary for the performance of the player agreement and you have been informed of the transfer and its risks

12.3 Players may request information about the specific countries in which their personal data may be processed by contacting the gl888 Data Protection Officer.

13.1 gl888 may update this Privacy Policy from time to time to reflect changes in applicable law, NPC guidance, PAGCOR regulatory requirements, or gl888's data processing practices. The current version of this Policy, including the effective date and version number displayed at the top of this page, is always accessible at https://gl888.cam/privacy-policy.

13.2 Material changes to this Policy — defined as changes that affect the rights of players or the purposes for which personal data is processed — will be communicated to registered players via email to the address on file no less than fourteen (14) days before the amended Policy takes effect, except where an immediate amendment is required by law.

13.3 Your continued use of the gl888 platform following the effective date of a revised Privacy Policy constitutes acceptance of the revised Policy. If you do not accept the changes, you should cease using the platform and request account closure before the new Policy takes effect.

14.1 If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how gl888 handles your personal data, please contact the gl888 Data Protection Officer:

14.2 National Privacy Commission (NPC): If you are not satisfied with gl888's response to a privacy concern or data subject request, you have the right to file a complaint with the National Privacy Commission of the Philippines. The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012. NPC contact details and complaint procedures are available on the NPC's official government website.

14.3 This Privacy Policy was last reviewed and updated on 1 January 2026 (Version 3.1). It supersedes all prior versions of the gl888 Privacy Policy in their entirety.