gl99 Privacy Policy

This Privacy Policy describes how gl99 ("we," "us," "our," "the Platform") collects, processes, stores, shares, and protects the personal information of users ("you," "Player," "data subject") of the gl99.biz online gaming platform.

This policy has been prepared in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC) of the Philippines. It also reflects applicable requirements under PAGCOR's online gaming regulatory framework and the Philippine Anti-Money Laundering Act (AMLA) as amended.

If you are accessing or using gl99 from anywhere in the Philippines — whether from Metro Manila, Cebu, Davao, Quezon City, or any other city or province — this policy applies to you in full. This policy is written in English. In the event of any conflict between this English-language version and any translation, the English version prevails.

For the purposes of the Philippine Data Privacy Act, gl99 acts as the Personal Information Controller (PIC) in respect of the personal data collected through the gl99.biz platform. This means gl99 determines the purposes and means by which your personal data is processed.

Third-party service providers engaged by gl99 to perform specific functions (payment processors, game software providers, KYC verification services) act as Personal Information Processors (PIPs) under written agreements that bind them to process your data only as instructed by gl99 and in accordance with applicable Philippine data protection law.

The contact details of gl99's designated Data Protection Officer (DPO) are set out in Section 15 of this policy.

gl99 collects the following categories of personal information, depending on how you interact with the platform:

3.1 Registration & Identity Data

• Full legal name (as appearing on your Philippine government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Mobile number (Philippine network)
• Chosen username
• Nationality and country of residence

3.2 Identity Verification (KYC) Data

• Copies of government-issued Philippine identification documents (e.g., PhilSys ID, UMID, driver's license, passport, SSS/GSIS card, PRC ID, voter's ID)
• Proof of address documentation where requested
• Photographs or selfies submitted for facial verification
• Source-of-funds documentation where required for AML compliance

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts, timestamps, and reference numbers
• GCash account numbers, Maya account numbers, BPI/BDO/Metrobank account details used for transactions (stored in tokenized or reference format only)
• Cryptocurrency wallet addresses used for USDT transactions
• Account balance history and betting records

3.4 Usage & Technical Data

• IP address at login and transaction events
• Device type, operating system, and browser version
• Session duration, login timestamps, and geographic location data derived from IP address
• Game activity logs including bets placed, games played, win/loss records, and bonus usage

3.5 Communications Data

• Records of live chat conversations with gl99 support
• Email correspondence with gl99
• Feedback, complaints, and dispute records

gl99 collects personal data through the following channels:

gl99 processes your personal data on the following legal grounds under the Philippine Data Privacy Act of 2012:

• Consent: Where you have given clear, informed, and voluntary consent to the processing of your personal data for a specific purpose (e.g., receiving marketing communications from gl99).
• Contractual Necessity: Where processing is necessary for the performance of the contract between you and gl99 — specifically, the creation and operation of your player account, processing deposits and withdrawals, and providing access to games.
• Legal Obligation: Where processing is required to comply with applicable Philippine law, including the Data Privacy Act, AMLA, PAGCOR regulations, and tax reporting obligations.
• Legitimate Interests: Where processing is necessary for gl99's legitimate business interests, including fraud prevention, platform security, responsible gaming enforcement, and improvement of our services — provided those interests do not override your fundamental rights and freedoms as a data subject.

gl99 uses the personal data it collects for the following specific purposes:

• Account Creation & Management: To register your gl99 account, maintain your profile, process your login credentials, and manage your account settings.
• Age & Identity Verification: To verify that you meet the 21+ minimum age requirement under PAGCOR regulations and Philippine law, and to confirm your identity before processing withdrawals.
• Financial Transactions: To process deposits, withdrawals, and associated payment records accurately and securely.
• Fraud Prevention & Security: To detect, investigate, and prevent unauthorized access, fraudulent transactions, money laundering, and other prohibited activities on the gl99 platform.
• Regulatory Compliance: To fulfill our obligations under PAGCOR licensing requirements, AMLA reporting, tax reporting, and NPC directives.
• Responsible Gaming: To monitor gaming behavior for indicators of problem gambling and to administer responsible gaming tools including deposit limits, self-exclusion, and cooling-off periods.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance through our 24/7 Filipino support team.
• Marketing Communications: To send you promotional offers, new game announcements, and platform updates — only where you have provided consent or where permitted under applicable law. You may opt out at any time via your account settings.
• Platform Improvement: To analyze aggregate usage patterns, identify technical issues, and improve the overall gl99 user experience.

gl99 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share your information only in the following limited circumstances:

• Service Providers (PIPs): We engage third-party companies to provide specific services on our behalf, including payment processing (GCash, Maya, BPI, BDO partners), KYC and identity verification services, game software providers, IT infrastructure and cloud hosting providers, and fraud detection services. These parties are contractually bound to process your data only for the specified purpose and in accordance with gl99's instructions and Philippine data protection law.
• Regulatory Authorities: We are required by law to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and the National Privacy Commission (NPC) upon valid request or as part of periodic reporting obligations.
• Law Enforcement: We may disclose personal data to Philippine law enforcement agencies where required by valid legal process, court order, or to protect the rights, property, or safety of gl99, our players, or the public.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets involving gl99, player data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

The gl99 platform uses cookies and similar tracking technologies to provide a functional, secure, and personalized gaming experience. Cookies are small text files stored on your device when you visit gl99.biz.

gl99 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and remembered login details (where you have enabled "Remember Me").
• Analytics Cookies: Used to collect aggregate, anonymized data about how players use the gl99 platform — including pages visited, session duration, and feature usage — to help us improve the platform.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and suspicious account behavior.

You may manage your cookie preferences through your browser settings. Disabling certain categories of cookies may affect the functionality of the gl99 platform. Most modern browsers (Chrome, Safari, Firefox, Edge) allow you to view, delete, and block cookies from specific websites.

gl99 retains your personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable Philippine law and PAGCOR regulations. The following general retention guidelines apply:

• Active Account Data: Retained for the duration of your active gl99 account plus a period of five (5) years after account closure, in compliance with AMLA record-keeping requirements.
• KYC & Identity Documents: Retained for a minimum of five (5) years following the last transaction on the account, as required under Philippine AML regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction for regulatory and tax reporting purposes.
• Support Communications: Retained for three (3) years from the date of each interaction, or longer where a dispute or legal claim is pending.
• Marketing Consent Records: Retained for the duration of your consent and for a reasonable period thereafter as evidence of the consent given.

Upon expiry of the applicable retention period, personal data is either securely deleted or anonymized so that it can no longer be linked to an identifiable individual.

gl99 implements technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• TLS (Transport Layer Security) encryption for all data transmitted between your device and gl99 servers;
• Encryption at rest for sensitive data stored in gl99 databases;
• Hashed and salted password storage — gl99 does not store passwords in plain text;
• Role-based access controls limiting internal access to personal data on a need-to-know basis;
• Multi-factor authentication requirements for administrative access to player data systems;
• Regular security assessments and penetration testing of gl99 platform infrastructure;
• Incident response procedures for the detection, containment, and notification of personal data breaches.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in respect of your personal data held by gl99. These rights may be exercised by submitting a written request to the gl99 Data Protection Officer (see Section 15):

The gl99 platform is strictly intended for adults aged 21 years and older. Real-money gambling by persons under 21 is prohibited under PAGCOR regulations and Philippine law. gl99 does not knowingly collect personal data from individuals under 21 years of age.

Age verification is conducted as part of the KYC process prior to the processing of any withdrawal. If gl99 discovers that personal data has been collected from a person under 21 years of age, the account will be immediately suspended, all associated balances and winnings will be voided, and the personal data will be deleted in accordance with applicable law.

Some of gl99's third-party service providers — including game software providers and cloud infrastructure partners — may be located or operate servers outside the Philippines. Where personal data is transferred to recipients in other countries, gl99 ensures that such transfers are made in compliance with the Philippine Data Privacy Act, specifically:

• Transfers are made only to countries or organizations that provide an adequate level of data protection comparable to Philippine standards;
• Appropriate contractual safeguards (such as data processing agreements) are in place with the recipient before any transfer occurs;
• Sensitive personal information (KYC documents, financial data) is subject to heightened transfer controls and is processed only by vetted, compliant processors.

Where technically feasible and operationally practical, gl99 prefers to engage Philippine-based service providers to minimize the need for cross-border data transfers.

gl99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. When material changes are made, gl99 will notify registered players via the email address associated with their account and post a prominent notice on the gl99 platform prior to the changes taking effect.

The "Last Updated" date at the top of this policy indicates when the most recent revision was made. Continued use of the gl99 platform after the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy. If you do not agree with an amendment, you must cease using the platform and may close your account by contacting support.

For all data privacy-related requests, questions, or concerns — including requests to exercise your rights under RA 10173, complaints about data processing, or inquiries about this Privacy Policy — please contact the gl99 Data Protection Officer (DPO):

• Live Chat: Available 24/7 on the gl99 platform. Please identify your request as a "Data Privacy" inquiry when contacting support.
• Email: [email protected] — subject line: "Data Privacy Request"
• Response Timeframe: Data privacy requests are acknowledged within 3 business days and addressed within 15 business days, in accordance with NPC guidelines.

If you are not satisfied with the resolution of your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the government body responsible for administering and implementing the Data Privacy Act.

This Privacy Policy was last updated on 1 January 2026 and supersedes all prior versions of the gl99 Privacy Policy.