ggslot Privacy Policy

1 Who We Are

ggslot is a PAGCOR-licensed online gaming platform operating at ggslot.vin, offering bingo, slots, live dealer casino games, and sports betting to players across the Philippines — from Manila and Makati to Cebu, Davao, Quezon City, and beyond. ggslot is operated by a PAGCOR-licensed gaming entity incorporated and operating under the laws of the Republic of the Philippines.

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173), ggslot acts as the Personal Information Controller (PIC) with respect to the personal data it collects directly from players through the platform. Where ggslot engages third-party service providers (such as payment processors or game software providers) to process data on its behalf, those providers act as Personal Information Processors (PIPs) under binding data processing agreements.

ggslot has appointed a Data Protection Officer (DPO) as required under the Data Privacy Act. You may contact the DPO through the support channels listed in Article 13 of this Privacy Policy.

2 Personal Data We Collect

ggslot collects personal data that is necessary to provide you with a safe, regulated, and enjoyable gaming experience. We collect data in the following categories:

2.1 Registration & Account Data

When you create a ggslot account, we collect: your full legal name, date of birth, residential address in the Philippines, a valid mobile number registered to a Philippine SIM card, email address, and a username of your choosing. This information is mandatory — without it, we cannot open an account for you or verify your eligibility to play.

2.2 Identity Verification (KYC) Data

As required by PAGCOR regulations and the Philippine Anti-Money Laundering Act (Republic Act No. 9160, as amended), ggslot collects copies of government-issued identity documents for KYC purposes. Accepted documents include the Philippine passport, SSS ID, UMID, PhilSys National ID, driver's license, and PRC ID. We may also collect proof of address and, where required, proof of payment method ownership (e.g., a screenshot of your GCash or Maya account showing your name).

2.3 Financial & Transaction Data

ggslot records all deposit and withdrawal transactions, including the amount, date and time, payment method used (e.g., GCash, Maya, BPI, BDO, Metrobank), and transaction reference numbers. We do not store full payment card numbers; only masked or tokenized payment identifiers are retained in our systems.

2.4 Gaming Activity Data

We collect detailed records of your gaming activity on ggslot, including game sessions, bet amounts, wagering history, wins and losses, bonus utilization, and responsible gaming tool settings. This data is required for regulatory reporting to PAGCOR and to detect and prevent problem gambling, fraud, and collusion.

2.5 Technical & Device Data

When you access the ggslot platform, our servers automatically collect certain technical data, including your IP address, browser type and version, device type and operating system, session timestamps, and referring URL. This information is used for security monitoring, fraud prevention, and platform optimization.

2.6 Communications Data

If you contact ggslot support via Live Chat or email, we retain records of those communications, including the content of your messages, timestamps, and the identity of the support agent who assisted you. These records are kept for quality assurance, dispute resolution, and regulatory compliance purposes.

3 How We Use Your Personal Data

ggslot uses your personal data for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed below:

ggslot does not use automated decision-making or profiling that produces legal or similarly significant effects on players without human review. Where automated systems flag an account for review (e.g., potential fraud or problem gambling), a qualified ggslot team member reviews the case before any action is taken.

4 Legal Basis for Processing

Under the Data Privacy Act of 2012 and applicable NPC regulations, ggslot processes your personal data on the following legal grounds:

• Contract Performance: Processing is necessary to perform our obligations under the ggslot Terms & Conditions, including registering your account, processing payments, and delivering gaming services.
• Legal Obligation: Processing is required to comply with our legal obligations under PAGCOR regulations, the Anti-Money Laundering Act, the Tax Code, and other applicable Philippine laws.
• Legitimate Interest: Processing is necessary for our legitimate business interests, such as fraud prevention, security monitoring, and platform improvement — provided those interests are not overridden by your privacy rights.
• Consent: For processing that is not strictly necessary for contract performance or legal compliance — such as sending you promotional emails and SMS notifications — we rely on your freely given, specific, and informed consent. You may withdraw your consent for marketing communications at any time by contacting our support team.

5 Data Sharing & Third Parties

5.1 Who We Share Data With

ggslot does not sell your personal data. We share your data only with the following categories of recipients, and only to the extent strictly necessary for the purposes described:

• PAGCOR and Regulatory Authorities: ggslot is legally required to submit player data and transaction reports to PAGCOR as part of our license obligations. We also report suspicious transactions to the Anti-Money Laundering Council (AMLC) as required by law.
• Payment Processors: To process your deposits and withdrawals via GCash, Maya, QR Ph, GrabPay, BPI, BDO, Metrobank, and 7-Eleven CLiQQ, we share the minimum necessary financial and identity data with the relevant payment service providers.
• Game Software Providers: Certain games on the ggslot platform are provided by licensed third-party game studios. These providers may receive your player ID and session data as part of game delivery. They are contractually prohibited from using this data for any purpose other than delivering the game service.
• IT Infrastructure Providers: ggslot engages reputable cloud infrastructure and cybersecurity providers to host and protect its platform. These providers act as Personal Information Processors under binding data processing agreements and may not use your data for any independent purpose.
• Law Enforcement: ggslot may disclose personal data to Philippine law enforcement agencies where required by a valid court order, warrant, or other lawful legal process.

5.2 No Sale of Data

ggslot strictly prohibits the sale, rental, or licensing of player personal data to third-party advertisers, data brokers, marketing agencies, or any other commercial third party. This prohibition applies without exception.

6 Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit the ggslot website. ggslot uses cookies and similar technologies (such as local storage and session tokens) to enable core platform functionality, maintain your login session, remember your preferences, and collect analytics data to improve the platform.

6.2 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the ggslot platform to function. They include session authentication tokens, security cookies, and load-balancing cookies. You cannot opt out of these cookies while continuing to use the platform.
• Functional Cookies: These remember your preferences, such as your preferred language, currency display, and responsible gaming settings, to personalize your experience across sessions.
• Analytics Cookies: These collect aggregated, anonymized data about how players use the ggslot platform — such as which pages are visited most often and where players encounter errors — to help us improve the service.
• Security Cookies: These are used by our fraud detection systems to identify unusual access patterns, protect against credential stuffing attacks, and detect the use of VPNs or proxies in restricted jurisdictions.

6.3 Managing Cookies

You may configure your browser settings to refuse or delete cookies at any time. Note that disabling strictly necessary cookies may prevent you from logging in to or using certain features of the ggslot platform. ggslot does not currently respond to browser Do Not Track (DNT) signals, as no industry-wide standard for DNT compliance has been established in the Philippines.

7 Data Retention

ggslot retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods mandated by applicable Philippine law:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR license conditions and the Anti-Money Laundering Act.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in line with AMLC record-keeping requirements.
• Gaming activity records: Retained for a minimum of three (3) years from the date of each gaming session, for regulatory audit and dispute resolution purposes.
• Customer support communications: Retained for a minimum of two (2) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Technical and device logs: Retained for a maximum of twelve (12) months from the date of collection, unless a longer retention period is required by an active security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC-approved data disposal procedures. Anonymized or aggregated data that can no longer identify individual players may be retained indefinitely for statistical and analytical purposes.

8 Your Privacy Rights

Under the Data Privacy Act of 2012 and applicable NPC regulations, you have the following rights with respect to your personal data held by ggslot. You may exercise any of these rights at any time by contacting our support team via Live Chat:

ggslot will respond to all data rights requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. Where a request is complex or involves a large volume of data, we may extend this period by a further fifteen (15) business days, with notice to you. We may ask you to verify your identity before processing a rights request to prevent unauthorized access to your data.

Please note that certain rights — particularly the right to erasure and the right to restriction — may be limited where ggslot is legally required to retain your data under PAGCOR license conditions, the Anti-Money Laundering Act, or other applicable Philippine law.

9 Children & Minors

The ggslot platform is strictly prohibited for persons under 21 years of age in accordance with PAGCOR regulations. ggslot does not knowingly collect personal data from anyone under the age of 21.

Our registration process and KYC verification are specifically designed to prevent minors from accessing the platform. Where ggslot discovers or is notified that a player is under 21 — whether through KYC review, a report from a concerned family member, or any other means — the following steps will be taken immediately:

• The account will be permanently suspended pending full review.
• All personal data associated with the account will be identified and flagged for deletion.
• Any real-money deposits will be returned to the originating payment method, subject to legal and regulatory requirements.
• The incident will be reported to PAGCOR as required by our license conditions.

10 Security Measures

ggslot implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, and destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data in transit between your device and ggslot's servers is encrypted using industry-standard SSL/TLS protocols.
• Encryption at Rest: Sensitive personal data, including KYC documents and financial records, is stored in encrypted form on ggslot's servers.
• Access Controls: Access to personal data is restricted to ggslot employees who have a legitimate business need to access it. All access is logged and subject to regular audit.
• Two-Factor Authentication (2FA): ggslot's internal systems require multi-factor authentication for all staff who access personal data.
• Regular Security Audits: ggslot conducts periodic penetration testing and vulnerability assessments conducted by independent cybersecurity professionals.
• Incident Response Plan: ggslot maintains a documented data breach response plan. In the event of a personal data breach, we will notify affected players and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by the Data Privacy Act.
• Staff Training: All ggslot employees who handle personal data receive regular training on data protection obligations and secure data handling practices.

While ggslot takes all reasonable steps to protect your personal data, no online system is completely immune from security risks. You also have a role to play in keeping your account secure — please use a strong, unique password for your ggslot account and never share your login credentials with anyone.

11 Cross-Border Data Transfers

ggslot's primary operations and data storage are based in the Philippines. However, some of our third-party service providers — including certain game software providers and cloud infrastructure partners — may process or store data in servers located outside the Philippines.

Where personal data is transferred outside the Philippines, ggslot ensures that appropriate safeguards are in place in accordance with Section 21 of the Data Privacy Act of 2012 and NPC Circular 16-01. These safeguards include:

• Binding contractual clauses requiring overseas processors to apply data protection standards equivalent to those required under Philippine law.
• Verification that the receiving country or organization provides an adequate level of protection for personal data as assessed by the NPC.
• Where required, obtaining your explicit consent for international data transfers prior to the transfer taking place.

ggslot does not transfer personal data to jurisdictions known for inadequate data protection standards without implementing the above safeguards. You may request details of specific cross-border transfers affecting your data by contacting the DPO.

12 Changes to This Privacy Policy

ggslot reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, NPC guidelines, or PAGCOR requirements. The effective date of the most recent version is clearly stated at the top of this page.

Where changes to this Privacy Policy are material — meaning they significantly affect how we collect, use, or share your personal data — ggslot will notify you in advance by posting a prominent notice on the ggslot website and, where we hold a valid email address for you, by sending a notification to that address. We recommend that you review this Privacy Policy periodically to stay informed of any updates.

Your continued use of the ggslot platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of and agreement to the revised terms, to the extent permitted by applicable Philippine law.

13 Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the way ggslot processes your personal data, you may contact us through the following channels:

• Live Chat: Available 24/7 through the ggslot platform — response within 5 minutes.
• Email: support@ggslot.vin — please include "Privacy" in your subject line for faster routing to the DPO team.

ggslot's Data Protection Officer (DPO) oversees all privacy-related matters and is responsible for ensuring compliance with the Data Privacy Act of 2012 and NPC regulations. The DPO can be reached through the same support channels listed above by specifying that your inquiry is directed to the Data Protection Officer.

If you are not satisfied with ggslot's response to your privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines, which is the independent regulatory body responsible for administering and enforcing the Data Privacy Act of 2012.