At gc88, your privacy is not an afterthought — it is a core part of how we build and operate the platform. This Privacy Policy explains exactly what personal data gc88 collects, why we collect it, how we use it, and the rights you have over your own information as a player in the Philippines.
Welcome to the gc88 Casino Privacy Policy. gc88 Casino ("gc88," "we," "us," or "our") operates the online gaming platform accessible at gc88.app and is committed to protecting the personal data of every player who registers and plays on the gc88 platform. This Privacy Policy applies to all users of gc88.app, including registered players, visitors who browse the platform without registering, and any person who contacts gc88 support.
This Privacy Policy has been prepared in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations. gc88 is committed to upholding the rights of Filipino data subjects as defined under the DPA and the regulations of the National Privacy Commission ("NPC").
By accessing gc88.app, creating a gc88 account, or using any feature of the gc88 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with this Privacy Policy, you must discontinue use of the gc88 platform immediately.
For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, the data controller responsible for your personal data is gc88 Casino, operating the platform at gc88.app and serving the Philippine market.
gc88 has designated a Data Protection Officer ("DPO") who is responsible for overseeing compliance with the DPA and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data, you may contact the gc88 DPO using the contact details provided in Section 14 of this Policy.
gc88 collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is collected and processed. The categories of personal data gc88 may collect include:
gc88 does not collect full payment card numbers, CVV codes, or online banking passwords. gc88 processes payments exclusively through GCash, PayMaya, and bank transfer integrations that handle payment credentials on their own secure platforms. gc88 never has access to your GCash PIN, PayMaya PIN, or online banking login credentials.
gc88 collects personal data through the following channels:
| Collection Method | Data Collected |
|---|---|
| Account Registration | Name, date of birth, email address, mobile number, residential address |
| KYC Verification | Government ID documents, proof of address, selfie/liveness images |
| Deposits & Withdrawals | GCash/PayMaya account numbers, bank account details, transaction records |
| Platform Usage | IP address, device info, session data, game history, login logs |
| Cookies & Tracking | Cookie IDs, session tokens, analytics data (see Section 10) |
| Support Interactions | Live chat transcripts, email correspondence, complaint records |
| Third-Party Verification | Identity verification results from KYC service providers |
gc88 uses your personal data only for the purposes for which it was collected and for compatible purposes that you would reasonably expect. The primary purposes for which gc88 processes your personal data are:
Under the Data Privacy Act of 2012, gc88 processes your personal data on the following legal bases:
gc88 does not sell, rent, or trade your personal data to any third party for commercial purposes. gc88 may share your personal data with the following categories of third parties only to the extent necessary for the purposes described in this Privacy Policy:
gc88 engages trusted third-party service providers who process personal data on gc88's behalf under strict data processing agreements. These include KYC and identity verification providers, payment processing partners (GCash, PayMaya, BPI, BDO, Metrobank), cloud hosting and infrastructure providers, and customer support platform providers. All service providers are contractually required to process your data only on gc88's instructions and to maintain appropriate security standards.
gc88 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government authorities where required by law, court order, or lawful regulatory request. gc88 will notify you of such disclosures where legally permitted to do so.
In the event of a merger, acquisition, or sale of all or substantially all of gc88's assets, your personal data may be transferred to the acquiring entity as part of that transaction. gc88 will notify you of any such transfer and the privacy practices of the acquiring entity before your data is transferred.
gc88 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | AML regulations, legal obligation |
| KYC Documents | Duration of account + 5 years after closure | PAGCOR compliance, AML regulations |
| Transaction Records | Duration of account + 5 years after closure | AMLC reporting requirements |
| Game Session Data | Duration of account + 2 years after closure | Dispute resolution, regulatory audit |
| Support Communications | 3 years from date of communication | Dispute resolution, legitimate interests |
| Technical & Usage Logs | 13 months from collection | Security, fraud prevention |
| Cookie Data | As specified in cookie settings (max 13 months) | Consent, legitimate interests |
Upon expiry of the applicable retention period, gc88 will securely delete or anonymize your personal data in accordance with its data disposal procedures. Where data is anonymized rather than deleted, the anonymized data may be retained indefinitely for statistical and analytical purposes, as it can no longer be used to identify you.
gc88 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:
gc88.app uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and analyze how the platform is used. A cookie is a small text file placed on your device by a website you visit.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your login session, prevent fraud, enable core platform functions | Session / up to 24 hours |
| Functional | Remember your language preference, game settings, and display preferences | Up to 12 months |
| Analytics | Understand how players use gc88.app to improve platform performance (aggregated, anonymized data only) | Up to 13 months |
You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling strictly necessary cookies may affect the functionality of gc88.app, including your ability to log in and play games.
gc88 does not use third-party advertising cookies or tracking pixels that share your data with external advertising networks.
Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by gc88. To exercise any of these rights, contact the gc88 Data Protection Officer using the details in Section 14. gc88 will respond to all data subject requests within thirty (30) calendar days of receipt, as required by the DPA.
Request a copy of the personal data gc88 holds about you, including information on how it is being used and with whom it has been shared.
Request correction of any inaccurate or incomplete personal data gc88 holds about you. Some corrections may require supporting documentation.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to gc88's legal retention obligations.
Object to the processing of your personal data where gc88 relies on legitimate interests as the legal basis, including profiling for responsible gaming purposes.
Request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
Withdraw your consent to data processing at any time where consent is the legal basis. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
The gc88 platform is strictly intended for adults aged 21 years and above, in accordance with PAGCOR regulations governing online casino gaming in the Philippines. gc88 does not knowingly collect personal data from individuals under the age of 21.
Age verification is conducted as part of the gc88 account registration and KYC process. Any account found to belong to a person under 21 years of age will be immediately suspended, all associated personal data will be securely deleted (subject to any legal retention obligations), and any deposited funds will be returned to the original payment source.
If you are a parent or guardian and believe that a minor has registered a gc88 account or provided personal data to gc88 without your consent, please contact the gc88 Data Protection Officer immediately using the contact details in Section 14. gc88 will investigate and take appropriate action promptly.
gc88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When material changes are made to this Privacy Policy, gc88 will notify registered players via the email address associated with their gc88 account and/or by displaying a prominent notice on gc88.app.
The updated Privacy Policy will display the revised effective date at the top of this page. Your continued use of the gc88 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the amended Privacy Policy, you must cease using gc88 and may request account closure and data deletion in accordance with Section 11.
gc88 recommends that you review this Privacy Policy periodically to stay informed of how your personal data is being protected. The current version of this Privacy Policy is always available at gc88.app/privacy-policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by gc88, please contact the gc88 Data Protection Officer. All data subject requests and privacy-related inquiries are handled by the DPO and will be responded to within thirty (30) calendar days of receipt.
For general support queries unrelated to data privacy, the gc88 support team is available 24/7 via live chat from within your account dashboard.
When submitting a data subject request, please include your full name, your gc88 registered email address, and a clear description of your request. gc88 may require you to verify your identity before processing your request to ensure that personal data is not disclosed to unauthorized parties.
Six core commitments that define how gc88 handles your personal information every single day.
Every connection between your device and gc88.app is secured with bank-grade 256-bit SSL/TLS encryption. Your login credentials, KYC documents, and financial data are protected in transit and at rest using AES-256 encryption.
gc88 does not sell, rent, or trade your personal data to any third party for commercial purposes — ever. Your data is used exclusively to operate the gc88 platform and comply with Philippine law. No data brokers, no ad networks.
gc88 operates in full compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines. A dedicated Data Protection Officer oversees all data processing activities and handles your data subject requests.
Filipino players have the right to access, correct, delete, and port their personal data held by gc88. Submit a data subject request to the gc88 DPO and receive a response within 30 calendar days as required by the DPA.
gc88 keeps your data only as long as legally required — typically five years after account closure for KYC and transaction records under AMLC regulations. After that, your data is securely deleted or anonymized.
gc88 does not use third-party advertising cookies, tracking pixels, or behavioral profiling tools that share your data with external ad networks. The only analytics gc88 uses are aggregated and anonymized platform performance data.
Your data is protected, your rights are respected, and your privacy is our priority. Join thousands of Filipino players who trust gc88 for a safe, fair, and secure online gaming experience.
Must be 21+ to play · Play responsibly · gc88 operates in alignment with PAGCOR guidelines