gl678 Privacy Policy

1 Introduction

gl678 ("gl678", "we", "us", or "our") operates the online casino and sports betting platform accessible at https://gl678.app (the "Platform"). We are committed to protecting the privacy and personal data of all Players and visitors who use the Platform.

This Privacy Policy ("Policy") describes the types of personal information we collect, the purposes for which we collect and process it, the parties with whom we may share it, and the rights available to you as a data subject under applicable Philippine law — including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

By registering on or using the gl678 Platform, you acknowledge that you have read and understood this Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree to this Policy, you must cease using the Platform immediately.

2 Personal Data We Collect

gl678 collects personal data that is necessary for the operation of the Platform and compliance with our regulatory obligations under PAGCOR licensing requirements. The categories of personal data we collect include:

We do not collect special categories of personal data (such as racial or ethnic origin, religious beliefs, or health data) except where required by law or where you voluntarily disclose such information in the context of a responsible gaming self-exclusion request.

3 How We Collect Your Data

gl678 collects personal data through the following means:

• Direct interactions: When you register a gl678 account, complete KYC verification, make deposits or withdrawal requests, contact support, or submit any form on the Platform;
• Automated technologies: When you browse or use the Platform, we automatically collect technical and usage data through cookies, server logs, and similar tracking technologies;
• Third-party payment processors: When you transact via GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard, or USDT, relevant transaction data is shared between gl678 and your payment provider as necessary to process the transaction;
• Identity verification services: gl678 may use third-party KYC and anti-money laundering (AML) service providers to verify the authenticity of identity documents submitted during account verification;
• PAGCOR and regulatory bodies: We may receive information from PAGCOR or other regulatory authorities in connection with our licensing obligations or player protection requirements.

4 How We Use Your Personal Data

gl678 processes your personal data for the following purposes:

• Account management: To create, maintain, and secure your gl678 Player account, including verifying your identity and enforcing the 21+ age requirement;
• Platform operation: To provide access to all games, process bets, calculate and distribute winnings, and maintain your account balance;
• Financial transactions: To process deposits and withdrawal requests via GCash, PayMaya, and bank transfers in Philippine Peso;
• Regulatory compliance: To fulfill our obligations under PAGCOR licensing, Philippine anti-money laundering laws, and the Data Privacy Act of 2012, including mandatory record-keeping and reporting;
• Fraud prevention and security: To detect and prevent unauthorized account access, fraudulent transactions, money laundering, and other prohibited activities;
• Responsible gaming: To monitor gaming patterns for signs of problem gambling, enforce self-exclusion arrangements, and administer deposit and loss limit controls set by Players;
• Customer support: To respond to inquiries, resolve disputes, and provide assistance to Players;
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may opt out of marketing communications at any time by contacting [email protected];
• Platform improvement: To analyze usage patterns and technical performance data to improve the gl678 user experience.

5 Legal Basis for Processing

gl678 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you — specifically, operating your Player account and delivering the gaming services you have registered for;
• Legal obligation: Processing required to comply with PAGCOR regulatory requirements, Philippine AML/CTF laws, and data privacy regulations;
• Legitimate interests: Processing for fraud detection, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and any other processing activities for which you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

gl678 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa/Mastercard networks, and cryptocurrency processors, to facilitate deposits and withdrawals;
• KYC and AML service providers: Third-party identity verification and anti-money laundering screening services engaged by gl678 for PAGCOR compliance purposes;
• Game content providers: Licensed game developers and live dealer studios whose content is distributed through the gl678 Platform, to the minimum extent required for game operation and fairness auditing;
• Regulatory authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other Philippine government bodies, where we are legally required to disclose data;
• IT and hosting service providers: Cloud infrastructure, cybersecurity, and technical service providers engaged to operate and secure the Platform, under binding data processing agreements;
• Professional advisers: Legal counsel, auditors, and insurers, under obligations of confidentiality.

All third-party service providers engaged by gl678 are required to process personal data only on our documented instructions and in compliance with applicable Philippine data privacy laws.

7 Data Retention

gl678 retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods:

• Active account data: Retained for the duration of your active Player account plus a minimum of five (5) years following account closure, as required by PAGCOR and Philippine AML regulations;
• Transaction records: Financial transaction data is retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act;
• KYC documents: Identity verification documents are retained for a minimum of five (5) years following account closure;
• Support communications: Customer support correspondence is retained for three (3) years from the date of each interaction;
• Marketing consent records: Records of your consent to or withdrawal from marketing communications are retained for the duration of your account and two (2) years thereafter.

Upon expiration of applicable retention periods, personal data is securely deleted or anonymized in accordance with gl678's data destruction procedures.

8 Cookies & Tracking Technologies

The gl678 Platform uses cookies and similar tracking technologies to operate core Platform functions, maintain your login session, and analyze usage patterns for Platform improvement. The following categories of cookies are used:

• Essential cookies: Required for the Platform to function. These include session management cookies that keep you logged in to your gl678 account across pages. These cannot be disabled without impairing Platform functionality;
• Analytics cookies: Used to collect aggregated, anonymized data about how Players use the Platform, which pages are most visited, and where errors occur. This data is used solely to improve the Platform;
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and CSRF attacks.

You may control cookie settings through your browser preferences. Please note that disabling essential cookies will prevent you from logging in to your gl678 account. gl678 does not use third-party advertising or retargeting cookies.

9 Your Data Privacy Rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal data held by gl678:

• Right to be informed: You have the right to be informed of how your personal data is collected and processed, as described in this Policy;
• Right of access: You may request a copy of the personal data gl678 holds about you, along with information about how it is being used;
• Right to rectification: You may request correction of any inaccurate or incomplete personal data in your gl678 account;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under PAGCOR and AML regulations;
• Right to object: You may object to the processing of your personal data for marketing purposes at any time. You may also object to processing based on legitimate interests where your privacy rights override those interests;
• Right to data portability: You may request a structured, machine-readable copy of personal data you have directly provided to gl678;
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe gl678 has violated your data privacy rights.

To exercise any of the above rights, please contact the gl678 Data Privacy Officer at [email protected]. We will respond to verified requests within thirty (30) days.

10 Data Security

gl678 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Industry-standard TLS encryption for all data transmitted between your device and the gl678 Platform;
• Encryption of sensitive stored data, including financial account details and government ID information;
• Role-based access controls limiting internal access to personal data to employees with a documented operational need;
• Multi-factor authentication for gl678 administrative systems;
• Regular vulnerability assessments and penetration testing by qualified cybersecurity professionals;
• Incident response procedures, including mandatory breach notification to the National Privacy Commission where required.

11 Minors & Age Restriction

The gl678 Platform is strictly intended for individuals aged 21 years and above, as required by PAGCOR for all licensed online gambling platforms in the Philippines. gl678 does not knowingly collect personal data from individuals under 21 years of age.

If gl678 discovers that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, void any transactions, and delete the personal data in question. If you believe a minor has registered on the gl678 Platform, please notify us at [email protected] immediately.

12 Changes to This Privacy Policy

gl678 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. Material changes to this Policy will be communicated to registered Players via the email address or mobile number on their account at least seven (7) days before the revised Policy takes effect.

Non-material changes (such as clarifications or formatting updates) may be made without prior notice. The "Last Updated" date at the top of this page will reflect the date of the most recent revision. Continued use of the gl678 Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

13 Contact & Data Privacy Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by gl678, please contact our Data Privacy Officer:

We will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) days. Complex requests may require additional time, in which case we will notify you of the expected timeline.