gslot Privacy Policy

1. Introduction

Welcome to the gslot Privacy Policy. This document describes how gslot ("we," "us," "our," or "the Platform") collects, uses, stores, shares, and protects the personal information of players and visitors who access the gslot online casino platform.

gslot operates as an online casino platform serving Filipino players across the Philippines, including Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond. We understand that your personal data is sensitive, and we take our obligations as a personal information controller seriously under Philippine law.

By registering an account with gslot, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you should not use the gslot Platform.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, gslot acts as the Personal Information Controller in respect of the personal data collected through the Platform.

Our designated Data Protection Officer (DPO) is responsible for overseeing gslot's data protection strategy and ensuring compliance with applicable Philippine privacy laws. You may contact the DPO directly using the contact details provided in Section 15 of this policy.

3. Personal Data We Collect

gslot collects the following categories of personal data from players and platform visitors:

3.1 Identity & Registration Data

• Full legal name as it appears on a government-issued ID
• Date of birth (to verify the 21+ age requirement)
• Nationality and country of residence
• Government-issued ID number (PhilSys National ID, driver's license, or passport)
• Profile photograph (where submitted for KYC purposes)

3.2 Contact Data

• Email address
• Philippine mobile number
• Residential address (barangay, city/municipality, province)

3.3 Financial Data

• GCash or Maya account number (for deposit and withdrawal processing)
• Bank account details (for bank transfer transactions via BPI, BDO, Metrobank, UnionBank, Landbank, PNB, or Security Bank)
• Debit card details (card number, expiry — processed securely via our payment processor)
• Transaction history, including deposit amounts, withdrawal amounts, and dates

3.4 Gaming Activity Data

• Game session logs, including games played, wager amounts, and outcomes
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, session timers, self-exclusion status)

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Mobile network operator (Globe, Smart, DITO, etc.)
• Session timestamps and login history
• Cookie identifiers and similar tracking technologies (see Section 8)

3.6 Communications Data

• Records of your communications with gslot customer support via live chat or email
• Feedback, complaints, and dispute records

4. How We Collect Your Data

gslot collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, or contacting support.
• Automated collection: Technical and device data collected automatically when you access the Platform, including through cookies and similar technologies.
• Third-party sources: Identity verification data from KYC service providers; payment confirmation data from GCash, Maya, and banking partners; fraud detection signals from security service providers.
• Regulatory sources: Information received from PAGCOR or other competent authorities in connection with regulatory compliance obligations.

5. Purpose of Processing

gslot processes your personal data for the following specific, legitimate purposes:

gslot will not use your personal data for any purpose incompatible with those listed above without first obtaining your explicit consent.

6. Legal Basis for Processing

gslot processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA) obligations, and the Data Privacy Act of 2012.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent for specific processing activities (such as marketing communications), you may withdraw that consent at any time by contacting gslot support or updating your account preferences.

7. Data Sharing & Disclosure

gslot does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

7.1 Service Providers

Third-party vendors engaged by gslot to provide services on our behalf, including KYC and identity verification providers, payment processors (GCash, Maya, banking partners), IT infrastructure and hosting providers, and customer support platform operators. All service providers are contractually bound to process your data only on gslot's instructions and in compliance with applicable privacy laws.

7.2 Regulatory Authorities

PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other competent Philippine government authorities, where disclosure is required by law, court order, or regulatory directive.

7.3 Fraud Prevention & Security

Fraud detection and cybersecurity service providers engaged to protect the integrity of the gslot Platform and its players. Data shared for this purpose is limited to technical and transactional data necessary for threat detection.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of gslot's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy. You will be notified of any such transfer in advance.

8. Cookies & Tracking Technologies

gslot uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the gslot website. We use the following types of cookies:

• Essential cookies: Required for the Platform to function correctly, including session management, login authentication, and security features. These cannot be disabled.
• Analytics cookies: Used to understand how players interact with the Platform, including pages visited, session duration, and navigation paths. This data is aggregated and anonymized.
• Preference cookies: Used to remember your language, display, and responsible gaming settings across sessions.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and suspicious login monitoring.

You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the gslot Platform. gslot does not use cookies to serve third-party advertising.

9. Data Retention

gslot retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law. Specific retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, in compliance with PAGCOR licensing requirements and AMLA obligations.
• Financial and transaction data: Retained for a minimum of 5 years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Gaming activity logs: Retained for 2 years from the date of the session, unless required for longer retention by regulatory directive.
• Customer support communications: Retained for 2 years from the date of the last communication, or longer if the communication relates to an unresolved dispute.
• Technical and device data: Retained for 12 months from collection, unless required for active fraud investigation.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with gslot's data disposal procedures.

10. Data Security

gslot implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include:

• TLS/SSL encryption for all data transmitted between your device and the gslot Platform.
• AES-256 encryption for personal and financial data stored in our databases.
• Multi-factor authentication (MFA) for player accounts and internal administrative access.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• 24/7 security monitoring and intrusion detection systems.

While gslot takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying gslot immediately of any suspected unauthorized access to your account.

11. Your Data Subject Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by gslot:

• Right to be informed: The right to know what personal data gslot collects about you and how it is processed — which this Privacy Policy fulfills.
• Right of access: The right to request a copy of the personal data gslot holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to gslot's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe gslot has violated your data privacy rights.

To exercise any of these rights, please contact gslot's Data Protection Officer using the details in Section 15. gslot will respond to all data subject requests within 15 business days of receipt.

12. Children's Privacy

The gslot Platform is strictly intended for individuals aged 21 years and above, in accordance with Philippine gaming regulations. gslot does not knowingly collect personal data from individuals under the age of 21.

If gslot becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the data, and report the incident to PAGCOR as required. If you believe a minor has registered on the gslot Platform, please contact us immediately at the details provided in Section 15.

13. Cross-Border Data Transfers

gslot primarily processes and stores personal data within the Philippines. Where it is necessary to transfer personal data to service providers or infrastructure located outside the Philippines — for example, cloud hosting or KYC verification services — gslot ensures that such transfers are subject to appropriate safeguards, including:

• Contractual data processing agreements incorporating the standard data protection clauses recognized by the National Privacy Commission.
• Transfers only to jurisdictions that provide an adequate level of data protection as assessed by the NPC.
• Your explicit consent where required for specific cross-border transfers.

14. Updates to This Privacy Policy

gslot reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, gslot will notify you via email to your registered address or via a prominent notice on the Platform at least 14 days before the changes take effect.

The effective date at the top of this policy indicates when it was last updated. Your continued use of the gslot Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically.

15. Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or gslot's data processing practices, please contact our Data Protection Officer:

• Email: [email protected]
• General Support: [email protected]
• Response Time: Within 15 business days for data subject requests; within 24 hours for general privacy inquiries

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. Information on how to file a complaint is available on the NPC's official website.