gmazone Privacy Policy

01 Who We Are

gmazone is an online casino and sports betting platform operating at gmazone.net, designed specifically for the Philippine market and targeting adult Filipino players aged 21 years and above. gmazone operates within a PAGCOR-aligned regulatory framework and is committed to responsible, transparent, and legally compliant operations.

For the purposes of the Philippine Data Privacy Act of 2012, gmazone acts as the Personal Information Controller (PIC) for the personal data it collects directly from players and website visitors. Where gmazone engages third-party service providers who process data on its behalf — such as payment processors, game providers, and analytics services — those third parties act as Personal Information Processors (PIP) under appropriate data processing agreements.

For all privacy-related inquiries, data subject requests, or complaints, please contact our Data Protection Officer at [email protected].

02 Personal Data We Collect

gmazone collects the minimum personal data necessary to provide a safe, secure, and legally compliant gaming and betting service. The categories of personal data we collect are set out below:

Registration Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (for age verification — players must be 21 or above)
• Email address
• Mobile phone number (Philippine number)
• Username and hashed password
• City / region of residence (e.g., Manila, Cebu, Davao, Quezon City, Makati)

KYC / Identity Verification Data

• Government-issued photo identification document (Philippine National ID, passport, driver's license, SSS/UMID card, or voter's ID) — including the document number, issuing authority, and expiry date
• Selfie photograph taken alongside the submitted ID
• Proof of payment method ownership (e.g., GCash wallet name screenshot, bank statement header)
• Additional documentation may be requested for enhanced due diligence in compliance with Anti-Money Laundering Act (AMLA) requirements

Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts (in PHP ₱), dates, and payment method references
• GCash wallet reference numbers and PayMaya transaction IDs (not full credentials)
• Bank account names associated with BPI, BDO, or Metrobank transactions (not full account numbers)
• Bonus and promotional credit history
• Account balance history

Gameplay & Betting Data

• Full wagering history across all games (JILI slots, live casino, bingo, sportsbook)
• Session duration and frequency data
• Game preferences and betting patterns
• Responsible gaming tool settings (deposit limits, self-exclusion status)

Technical & Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser information
• Session timestamps and login history
• Cookie identifiers and session tokens

Communications Data

• Support ticket content and chat transcripts from interactions with gmazone's customer service team
• Email correspondence records
• Responses to surveys or feedback forms (where voluntarily submitted)

03 How We Collect Your Data

gmazone collects personal data through the following channels:

04 How We Use Your Personal Data

gmazone uses the personal data it collects for the following specific purposes:

• Account creation and management: To register your account, verify your identity, maintain your player profile, and provide access to gmazone's gaming and betting services.
• Age verification and regulatory compliance: To confirm you meet the 21+ age requirement mandated by PAGCOR and Philippine gaming regulations before allowing participation in real-money games.
• Payment processing: To facilitate deposits via GCash, PayMaya, BPI, BDO, and Metrobank, and to process withdrawal requests to your verified payment method.
• Anti-Money Laundering (AML) compliance: To monitor transactions for suspicious activity and fulfill gmazone's obligations under the Philippine Anti-Money Laundering Act (AMLA) and related regulations.
• Fraud prevention and account security: To detect unauthorized access, identify suspicious betting patterns, and protect both the Platform and individual players from fraud.
• Responsible gaming: To monitor play patterns for signs of problem gambling, enforce player-requested limits and self-exclusions, and proactively reach out to players exhibiting at-risk behaviors.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance with your gmazone account.
• Platform improvement and analytics: To understand how players use the Platform, identify technical issues, and improve the user experience — using aggregated, anonymized data where possible.
• Marketing communications: To send you promotional offers, bonus notifications, and news about new games or features — but only where you have consented to receive such communications. You may opt out at any time.
• Legal compliance and dispute resolution: To comply with court orders, regulatory requests, or other legal obligations, and to defend gmazone's legal interests in the event of a dispute.

05 Legal Basis for Processing

Under the Data Privacy Act of 2012, gmazone processes personal data on the following legal bases:

• Contractual necessity: Processing your registration data, KYC documents, transaction data, and gameplay records is necessary to fulfill gmazone's contractual obligations to you as a registered player under the Terms & Conditions.
• Legal obligation: Processing data for AML compliance, age verification, regulatory reporting to PAGCOR, and responses to lawful requests from Philippine authorities is required by applicable law.
• Legitimate interests: Fraud prevention, platform security monitoring, anonymized analytics, and responsible gaming monitoring are pursued as gmazone's legitimate interests in operating a safe and compliant platform, where those interests are not overridden by your rights.
• Consent: Sending direct marketing communications and using non-essential cookies is done on the basis of your consent, which you may withdraw at any time without affecting the lawfulness of processing carried out before withdrawal.

06 Data Sharing & Third Parties

gmazone does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances and only to the extent necessary for each purpose:

Payment Processors

Transaction data is shared with GCash, PayMaya, BPI, BDO, and Metrobank — or their respective payment gateway intermediaries — solely for the purpose of processing deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine financial regulations.

Game Providers

Where you play games powered by third-party providers (such as JILI Games or live dealer studios), a pseudonymous player identifier and relevant session data may be shared with those providers to enable gameplay. Full identity data is not shared with game providers.

Identity Verification Services

KYC documents may be shared with certified identity verification service providers for automated document authentication and facial recognition matching. These providers operate under strict data processing agreements and are prohibited from using your data for any purpose other than completing the verification.

Regulatory and Law Enforcement Authorities

gmazone is legally obligated to share personal data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities upon lawful request or where required by applicable law. gmazone will notify affected players of such disclosures where legally permitted to do so.

Legal and Professional Advisors

In the context of legal proceedings, dispute resolution, or obtaining professional advice, personal data may be shared with gmazone's legal counsel, auditors, or other professional advisors, under strict confidentiality obligations.

07 Cookies & Tracking Technologies

gmazone uses cookies and similar technologies (such as local storage and session tokens) to operate and improve the Platform. The types of cookies used are described below:

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to and using the Platform. Disabling other cookie categories may limit certain features but will not affect your core gaming experience.

08 Data Retention

gmazone retains personal data for as long as is necessary to fulfill the purposes described in this Privacy Policy and to comply with applicable legal obligations. The general retention periods applicable to different categories of data are:

• Account and registration data: Retained for the lifetime of your active account, plus 5 years following account closure, in compliance with PAGCOR operational requirements and applicable Philippine law.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of verification, in compliance with AMLA record-keeping requirements.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction, as required by AMLA and BIR regulations.
• Gameplay and betting history: Retained for a minimum of 2 years from the date of the activity for dispute resolution purposes, and up to 5 years for regulatory compliance purposes.
• Customer support records: Retained for 3 years from the date of the support interaction.
• Marketing consent records: Retained for as long as you remain subscribed and for 1 year following unsubscription, as evidence of consent.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in a manner that prevents re-identification.

09 Data Security

gmazone implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and the gmazone Platform is encrypted using TLS (Transport Layer Security). Personal data stored on gmazone's systems is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within gmazone's systems is restricted to authorized personnel on a need-to-know basis, enforced through role-based access controls and multi-factor authentication for administrative access.
• Password security: Player passwords are stored as salted cryptographic hashes — gmazone staff cannot view your password in plain text.
• Two-factor authentication (2FA): Players are encouraged to enable SMS OTP-based 2FA on their accounts for an additional layer of login security.
• Regular security audits: gmazone conducts periodic security assessments of its infrastructure and application code to identify and remediate vulnerabilities.
• Incident response: gmazone maintains a data breach incident response plan. In the event of a personal data breach that is likely to result in significant harm to affected individuals, gmazone will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay.

10 Children & Minors

The gmazone Platform is strictly intended for adults aged 21 years and above, in compliance with PAGCOR's age requirements for online gambling in the Philippines. gmazone does not knowingly collect personal data from individuals under the age of 21.

11 Exercising Your Data Subject Rights

To exercise any of your rights under the Data Privacy Act of 2012 — including the right to access, rectify, erase, object to processing, or obtain a portable copy of your data — please submit a written request to our Data Protection Officer using the following contact:

• Email: [email protected]
• Subject line: "Data Subject Request – [Your Account ID]"

To protect your privacy, we will verify your identity before processing any data subject request. We will acknowledge your request within 3 business days and provide a substantive response within 15 business days. If your request is complex or you have submitted multiple requests, we may extend this period by a further 15 business days, in which case we will notify you of the extension and the reasons for it.

If you are not satisfied with gmazone's response to your data subject request, or if you believe your rights under the DPA have been violated, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

12 Updates to This Privacy Policy

gmazone may update this Privacy Policy from time to time to reflect changes in our data practices, applicable Philippine law, or NPC guidance. When we make material changes to this policy, we will notify registered players by email and by displaying a prominent notice on the Platform at least 14 days before the changes take effect.

The updated policy will always be accessible at gmazone.net/privacy-policy. The effective date at the top of this policy reflects the date of the most recent version. Your continued use of the gmazone Platform after the effective date of any updated policy constitutes your acceptance of the revised terms.

For any questions about this Privacy Policy or gmazone's data practices, please contact us at [email protected]. We are committed to handling your privacy concerns promptly, transparently, and in full compliance with Philippine data protection law.