gl678 Privacy Policy — How We Protect Your Personal Data

This Privacy Policy is issued by gl678, the operator of the online casino and sports betting platform accessible at gl678.vip and all associated subdomains (collectively, "the Platform"). gl678 acts as the data controller in respect of all personal data collected from users, registrants, and Members of the gl678 platform.

For the purposes of this Policy, "gl678," "we," "us," and "our" all refer to the gl678 operating entity. "You," "your," "User," or "Member" refers to any individual who accesses or uses the gl678 platform in any capacity, whether as a registered Member or as an anonymous visitor.

gl678 operates under the regulatory framework of the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to Philippine law, including the Data Privacy Act of 2012 (Republic Act No. 10173).

This Privacy Policy applies to all personal data collected, processed, stored, or transferred by gl678 in connection with:

• Account registration and the creation of a gl678 Member profile.
• Use of any game, service, or feature made available through the gl678 platform.
• All financial transactions on the Platform, including deposits and withdrawals via GCash, Maya, BPI, BDO, UnionBank, and other accepted payment channels.
• Identity verification (KYC) processes conducted by gl678 or its designated verification partners.
• All communications between you and gl678's customer support team.
• Access to and browsing of the gl678 website, whether or not you are a registered Member.

This Policy is incorporated by reference into the gl678 Terms & Conditions. By registering a gl678 Account or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

gl678 collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Registration and Identity Data

• Full legal name (as it appears on a Philippine government-issued ID)
• Date of birth (to verify minimum age requirement of 21 years)
• Mobile number (Philippine format: +63 or 09XX)
• Username selected during registration
• Email address (where provided)

3.2 KYC and Verification Data

• Government-issued identification document (PhilSys ID, Passport, SSS ID, UMID, Driver's License, or Voter's ID)
• Selfie photograph taken as part of the KYC verification process
• Address information where required for identity verification purposes

3.3 Financial and Transaction Data

• GCash account number or Maya account number (for cashier processing)
• Bank account details (BPI, BDO, UnionBank) where bank transfer is selected
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used
• Account balance history

3.4 Gaming and Behavioural Data

• Wagering history (games played, bet amounts, outcomes, session durations)
• Bonus and promotion participation records
• VIP tier history and loyalty point accumulation
• Responsible gaming tool settings (deposit limits, session timers, self-exclusion status)

3.5 Technical and Device Data

• IP address at time of login and during active sessions
• Device type, operating system, and browser version
• Session timestamps and duration logs
• Cookie data and similar tracking identifiers (see Section 8)

3.6 Communication Data

• Records of live chat conversations with gl678 customer support
• Email correspondence where initiated by the Member
• Feedback and complaint submissions

gl678 collects personal data through the following channels and mechanisms:

4.1 Directly From You

The primary source of personal data is information you provide directly to gl678 during Account registration, the KYC verification process, payment transactions, customer support interactions, and any voluntary communication with the gl678 team.

4.2 Automatically During Platform Use

gl678's platform technology automatically collects technical and behavioural data when you access and use the Platform. This includes session logs, IP address records, device fingerprinting data, and in-game activity records. This data collection is inherent to the operation of a real-time online gaming platform and is necessary for security, fraud prevention, and service delivery purposes.

4.3 From Third-Party Service Providers

gl678 may receive supplementary data from third-party service providers engaged to assist with specific Platform functions, including:

• KYC Verification Providers: Third-party identity verification platforms that cross-reference your submitted documents against government databases to confirm authenticity.
• Payment Processors: GCash, Maya, BPI, BDO, UnionBank, and other payment gateway operators may transmit transaction confirmation and account status data to gl678 as part of deposit and withdrawal processing.
• Fraud Detection Services: Automated fraud detection and anti-money laundering (AML) screening tools that analyse transaction patterns against known risk indicators.

gl678 processes your personal data under the following lawful bases, as recognised under the Data Privacy Act of 2012 (RA 10173):

gl678 uses the personal data collected for the following specific purposes:

• Platform Operation: Creating and maintaining your gl678 Account, verifying your identity, processing login authentication, and enabling access to all Platform features and games.
• Financial Transactions: Processing deposits and withdrawals via GCash, Maya, BPI, BDO, UnionBank, and other supported Philippine payment channels. Maintaining accurate transaction records for your account statement.
• KYC and Compliance: Conducting identity verification as required by PAGCOR regulations and the Anti-Money Laundering Act (RA 9160). Screening Member information against sanctions and watchlists as required by applicable Philippine law.
• Security and Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, account takeover attempts, money laundering, and other prohibited conduct on the Platform.
• Responsible Gaming: Monitoring gaming patterns that may indicate problem gambling behaviour, administering self-exclusion requests, and enforcing responsible gaming tools activated by the Member.
• Customer Support: Investigating and resolving support queries, complaints, and disputes. Maintaining records of support interactions for quality assurance and dispute resolution purposes.
• Promotions and VIP Program: Administering bonus offers, VIP tier progression, cashback calculations, and other promotional activities available to registered Members.
• Communication: Sending Account-related notifications (deposit confirmations, withdrawal status, security alerts, KYC status updates). Sending marketing communications where you have opted in. gl678 does not send unsolicited marketing to Members who have not opted in.
• Platform Improvement: Analysing aggregated, de-identified usage data to improve game selection, platform performance, user interface design, and customer support quality.
• Legal and Regulatory: Meeting reporting obligations to PAGCOR and other Philippine regulatory bodies. Cooperating with law enforcement investigations where legally required.

gl678 does not sell your personal data to third parties. Your personal data may be shared with the following categories of recipients, strictly for the purposes described in this Policy:

7.1 Service Providers

gl678 engages trusted third-party service providers to perform specific functions on our behalf. These include KYC verification platforms, payment gateway operators (GCash, Maya, banks), fraud detection technology providers, cloud infrastructure providers, and customer support platform vendors. All service providers are bound by contractual obligations to handle your data only as instructed by gl678 and in accordance with RA 10173.

7.2 Game Software Providers

gl678 partners with game software studios — including JILI Games, Pragmatic Play, PG Soft, and others — to deliver game content on the Platform. These studios may receive anonymised session and wagering data for game performance and certification audit purposes. Personally identifiable information is not shared with game software providers beyond what is technically necessary for game delivery.

7.3 Regulatory Authorities

gl678 may be required to disclose Member data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities where required by law, court order, or regulatory obligation.

7.4 Law Enforcement

gl678 may disclose personal data to Philippine law enforcement agencies where required to comply with a lawful request, court order, or where disclosure is necessary to prevent or investigate suspected criminal activity involving the Platform.

gl678 uses cookies and similar tracking technologies on the Platform to ensure proper functionality, maintain session security, and analyse usage patterns. The following types of cookies are used:

8.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They manage your login session, maintain authentication state, and enable core features such as the cashier and game lobby. These cookies cannot be disabled without preventing basic Platform functionality.

8.2 Performance and Analytics Cookies

These cookies collect aggregated, anonymised data about how Members use the Platform — which pages are visited, which games are played, how long sessions last, and where users navigate. This data helps gl678 identify performance issues and improve the overall platform experience.

8.3 Security Cookies

gl678 uses cookies to support fraud detection and account security monitoring, including device fingerprinting to identify unusual login patterns and potential account takeover attempts.

8.4 Managing Cookies

You may adjust your browser settings to block or delete cookies at any time. However, disabling strictly necessary cookies will impair or prevent access to the gl678 platform. Blocking performance cookies does not affect Platform access but reduces gl678's ability to identify and fix technical issues.

gl678 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law, whichever is longer.

Upon expiry of the applicable retention period, gl678 will securely delete or anonymise personal data so that it can no longer be associated with an identifiable individual.

gl678 implements the following technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the gl678 servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Access Controls: Access to databases containing personal data is restricted to authorised gl678 personnel on a strict need-to-know basis. Role-based access controls are applied and reviewed regularly.
• Data Minimisation: gl678 limits the personal data accessible to any single system or team member to what is strictly necessary for their specific function.
• Password Security: Account passwords are stored using one-way cryptographic hashing algorithms. gl678 does not store raw passwords in any system.
• Two-Factor Authentication: gl678 offers Two-Factor Authentication (2FA) via SMS OTP to all Members. Enabling 2FA significantly reduces the risk of unauthorised Account access.
• Security Audits: gl678's security infrastructure is subject to periodic internal and third-party security assessments to identify and remediate vulnerabilities.
• Incident Response: gl678 maintains a documented data breach response procedure. In the event of a data breach that poses risk to Members, gl678 will notify affected individuals and the National Privacy Commission (NPC) within the timeframes required by RA 10173.

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights in respect of your personal data held by gl678. To exercise any of these rights, contact gl678 via the live chat support function on the Platform or at [email protected]. gl678 will respond to valid data rights requests within 30 calendar days.

If gl678 discovers that an Account has been created by or on behalf of a person under the minimum age, that Account will be immediately suspended and all associated data reviewed. Any personal data of a minor collected unintentionally will be deleted upon discovery, except where retention is required for regulatory compliance or investigation purposes.

If you believe that a minor has registered a gl678 Account, please notify gl678 support immediately so the Account can be reviewed and closed.

The gl678 platform may contain operational integrations with third-party payment services (such as GCash and Maya) and game content providers. When you interact with these third-party services — for example, when you are redirected to the GCash app to confirm a deposit — you are subject to that third party's own privacy policy and data handling practices.

gl678 is not responsible for the privacy practices or data security measures of any third-party service provider, payment processor, or game software studio. gl678 recommends reviewing the privacy policies of any third-party service you use in connection with the Platform.

gl678 contracts with all service providers to ensure they handle any gl678 Member data they receive in accordance with RA 10173 and gl678's data protection standards, but ultimate responsibility for third-party compliance rests with those parties.

gl678 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, PAGCOR regulatory requirements, or operational developments of the Platform.

When material changes are made to this Policy — changes that affect how your personal data is used or shared in ways that may materially impact your interests — gl678 will:

• Update the Effective Date displayed at the top of this document.
• Increment the Policy version number.
• Notify registered Members via in-platform notification or email prior to the changes taking effect, where technically feasible.

Your continued use of the gl678 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree to the updated terms, you should cease using the Platform and contact gl678 support to close your Account.

We encourage you to review this Privacy Policy periodically. The current version is always available at gl678.vip/privacy-policy.

gl678 has designated a Data Privacy Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act of 2012 (RA 10173). For any inquiries, concerns, or requests relating to your personal data or this Privacy Policy, please contact gl678 through the following channels:

• Live Chat Support: Available 24/7 through the gl678 platform at gl678.vip. This is the fastest channel for data rights requests during platform operating hours.
• Email: [email protected] — For formal data rights requests, please include "Data Privacy Request" in the subject line and provide your registered username and mobile number for identity verification.

gl678 will acknowledge receipt of your data rights request within 3 business days and provide a substantive response within 30 calendar days. If gl678 requires additional time to process a complex request, we will notify you within the initial 30-day period and provide an estimated completion date.

If you are not satisfied with gl678's response to your data rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing RA 10173.