Privacy Policy

1 Who We Are & How to Reach Us

gbet.com (operated under the domain gbetcom.org) is an online casino and sports betting platform serving registered players in the Philippines. For the purposes of the Philippine Data Privacy Act of 2012, gbet.com is the Personal Information Controller (PIC) responsible for the personal data collected through the gbet.com platform.

Our designated Data Protection Officer (DPO) oversees all data privacy matters and can be reached at [email protected] with the subject line "Data Privacy Inquiry." We aim to respond to all privacy-related inquiries within five (5) business days.

This Privacy Policy applies to all personal data collected through the gbet.com website, mobile application, progressive web application, customer support channels, and any other digital touchpoint operated by gbet.com. It does not apply to third-party websites or services that may be linked from our platform.

2 Personal Data We Collect

gbet.com collects personal data in the following categories. We collect only what is necessary for the specific purposes described in Section 4 of this Policy.

We do not collect sensitive personal information as defined under the Philippine Data Privacy Act (such as health data, political opinions, or religious beliefs) unless you voluntarily provide it in the context of a responsible gaming self-assessment or support interaction, in which case it is treated with the highest level of protection.

3 How We Collect Your Data

gbet.com collects personal data through the following means:

• Direct Collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion;
• Automated Collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access and use the gbet.com platform (see Section 8 for details);
• Third-Party Sources: Identity verification data from KYC service providers; fraud risk signals from payment processors; regulatory data from PAGCOR and the Anti-Money Laundering Council (AMLC) as required by law.

All data collection is conducted transparently and in accordance with the principles of the Philippine Data Privacy Act. You will always be informed of the purpose of data collection at the point of collection.

4 Purpose & Legal Basis for Processing

gbet.com processes your personal data only for specific, legitimate purposes. The legal basis for each processing activity under the Philippine Data Privacy Act is indicated below:

• Account Registration & Management – To create and maintain your gbet.com account, verify your identity, and provide access to the platform. Legal basis: Performance of contract.
• Payment Processing – To process deposits, withdrawals, and refunds securely. Legal basis: Performance of contract; legal obligation (BSP regulations).
• KYC & Age Verification – To verify that you are at least 21 years of age and to comply with PAGCOR's player registration requirements. Legal basis: Legal obligation (PAGCOR regulations).
• Anti-Money Laundering (AML) Compliance – To monitor transactions for suspicious activity and report to the AMLC as required by Republic Act No. 9160 (Anti-Money Laundering Act). Legal basis: Legal obligation.
• Fraud Prevention & Security – To detect, investigate, and prevent fraudulent activity, cheating, and unauthorized account access. Legal basis: Legitimate interest; legal obligation.
• Customer Support – To respond to your inquiries, resolve disputes, and improve our support services. Legal basis: Performance of contract; legitimate interest.
• Responsible Gaming – To monitor gaming patterns for signs of problem gambling and to administer self-exclusion and limit-setting tools. Legal basis: Legal obligation (PAGCOR responsible gaming requirements); legitimate interest.
• Platform Improvement – To analyze usage patterns and improve the gbet.com platform's performance, features, and user experience. Legal basis: Legitimate interest.
• Marketing Communications – To send you promotional offers, bonus notifications, and platform updates, where you have opted in to receive such communications. Legal basis: Consent. You may withdraw consent at any time by updating your communication preferences in your account settings.

gbet.com will not process your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

5 Data Sharing & Third-Party Disclosure

gbet.com shares personal data with third parties only in the following limited circumstances:

• Regulatory Authorities: PAGCOR, the AMLC, the National Privacy Commission (NPC), and other Philippine government agencies, where required by law or regulatory directive;
• Payment Processors: GCash (Mynt), Maya (Voyager Innovations), and partner banks, solely for the purpose of processing your financial transactions;
• KYC & Identity Verification Providers: Accredited third-party identity verification services used to fulfill our KYC obligations under PAGCOR regulations;
• Technology Service Providers: Cloud hosting providers, cybersecurity firms, and platform infrastructure vendors who process data on our behalf under strict data processing agreements that prohibit independent use of your data;
• Game Providers: Third-party game studios whose games are integrated into the gbet.com platform may receive anonymized or pseudonymized gameplay data for game performance and fairness auditing purposes;
• Legal Proceedings: Courts, law enforcement agencies, or legal advisors where disclosure is required by a valid court order, subpoena, or applicable law.

All third parties with whom gbet.com shares personal data are required to maintain appropriate technical and organizational security measures and to process data only for the specified purpose. Where required by the Philippine Data Privacy Act, gbet.com enters into formal data sharing agreements with recipient organizations.

6 Data Retention

gbet.com retains your personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law:

• Account and KYC records: Retained for a minimum of five (5) years from the date of account closure, in compliance with PAGCOR's record-keeping requirements and the Anti-Money Laundering Act;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with BSP and AMLC regulations;
• Customer support communications: Retained for three (3) years from the date of the last interaction;
• Marketing consent records: Retained for the duration of your account plus two (2) years after account closure, to demonstrate compliance with consent requirements;
• Technical and usage logs: Retained for twelve (12) months on a rolling basis for security and fraud detection purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with gbet.com's data disposal procedures. Anonymized data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.

7 Security Measures

gbet.com implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and gbet.com servers is encrypted using TLS 1.2 or higher (SSL);
• Encryption at Rest: Sensitive data fields, including passwords (hashed with bcrypt), financial account details, and government ID numbers, are encrypted at rest using AES-256;
• Access Controls: Access to personal data is restricted to gbet.com personnel who require it to perform their job functions, governed by role-based access control (RBAC) and the principle of least privilege;
• Two-Factor Authentication: All internal systems containing personal data require multi-factor authentication for staff access;
• Regular Security Audits: gbet.com conducts regular penetration testing and vulnerability assessments by accredited third-party security firms;
• Incident Response: gbet.com maintains a documented data breach response plan. In the event of a personal data breach that poses a real risk to your rights and freedoms, we will notify the National Privacy Commission (NPC) within 72 hours and affected players without undue delay, as required by the Philippine Data Privacy Act.

While gbet.com takes all reasonable steps to protect your data, no internet transmission or electronic storage system is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorized access to your account.

8 Cookies & Tracking Technologies

gbet.com uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyze usage patterns, and detect fraud. The following categories of cookies are used:

gbet.com does not use third-party advertising cookies or share cookie data with external advertising networks. You can manage your cookie preferences at any time through the cookie settings panel accessible from the footer of the gbet.com platform. Note that disabling strictly necessary cookies will prevent you from logging in and using the platform.

Most web browsers also allow you to control cookies through browser settings. Refer to your browser's help documentation for instructions on how to manage cookie preferences at the browser level.

9 Your Privacy Rights Under Philippine Law

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by gbet.com:

• Right to Be Informed: The right to know what personal data gbet.com collects about you, why it is collected, and how it is used – which is the purpose of this Privacy Policy;
• Right of Access: The right to request a copy of the personal data gbet.com holds about you, including information on how it has been processed;
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure / Right to be Forgotten: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations under PAGCOR and AML regulations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interest;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller;
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

Please note that certain rights are subject to limitations under Philippine law. For example, we cannot delete data that we are legally required to retain under PAGCOR regulations or the Anti-Money Laundering Act, even if you request erasure.

10 Minors & Age Policy

The gbet.com platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine law. gbet.com does not knowingly collect personal data from individuals under the age of 21.

If we become aware that we have inadvertently collected personal data from a person under 21, we will immediately delete that data and close the associated account. Any deposits made by an underage user will be returned to the original payment source after deducting applicable processing fees, and any winnings will be forfeited.

If you are a parent or guardian and believe that your child under the age of 21 has registered on gbet.com, please contact us immediately at [email protected] so that we can take prompt action.

11 Cross-Border Data Transfers

gbet.com primarily processes and stores personal data within the Philippines. In limited circumstances, personal data may be transferred to or accessed from servers or service providers located outside the Philippines – for example, where a cloud infrastructure provider operates data centers in other countries.

Any cross-border transfer of personal data is conducted in compliance with Section 21 of the Philippine Data Privacy Act and the NPC's guidelines on cross-border data transfers. Specifically, gbet.com ensures that:

• The recipient country provides an adequate level of data protection, or
• Appropriate safeguards are in place, such as contractual clauses approved by the NPC, binding corporate rules, or your explicit consent to the transfer.

gbet.com will not transfer your personal data to a jurisdiction that does not provide adequate protection without first implementing appropriate safeguards and, where required, obtaining your consent.

12 Changes to This Privacy Policy

gbet.com reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When we make material changes, we will notify you by posting a prominent notice on the gbet.com platform and, where practicable, by sending an email notification to your registered email address at least seven (7) days before the changes take effect.

The updated Privacy Policy will be effective from the date specified in the notice. Your continued use of the gbet.com platform after the effective date constitutes your acknowledgment of the updated Policy. If you do not agree with the changes, you may request account closure in accordance with our Terms & Conditions.

The version date at the top of this page always reflects when the Policy was last updated. We recommend reviewing this page periodically to stay informed of how gbet.com protects your data.

13 Contact Us & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact gbet.com's Data Protection Officer through the following channels:

• Email (DPO): [email protected] — Subject: "Data Privacy Inquiry" or "Data Privacy Request"
• Live Chat: Available 24/7 on the gbet.com platform — ask to be connected to the Data Privacy team
• Registered Address: gbet.com Data Protection Office, Makati City, Metro Manila, Philippines

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the independent authority responsible for enforcing the Data Privacy Act of 2012.