Privacy Policy - gfplay Data Protection

1. Introduction

This Privacy Policy ("Policy") describes how gfplay.cam ("gfplay", "we", "us", "our") collects, uses, stores, shares, and protects your personal information when you access or use our website located at https://gfplay.cam and all related services, features, content, and applications (collectively, the "Service").

gfplay is committed to protecting your privacy and ensuring the security of your personal data in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012, and all implementing rules and regulations issued by the National Privacy Commission of the Philippines. We are also bound by the privacy and data protection requirements established by the Philippine Amusement and Gaming Corporation (PAGCOR) as part of our licensing obligations.

By creating an account, accessing the Website, or using any of our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with any provision of this Policy, you must immediately discontinue use of the Service.

2. Information We Collect

2.1 Personal Information You Provide

When you register for an account, use our Service, or communicate with us, we collect personal information that you voluntarily provide, including but not limited to:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (passport number, driver's license number, national ID number).
• Contact Information: Email address, mobile phone number, residential address, city, province, postal code, and country.
• Account Credentials: Username, password, and security questions/answers.
• Financial Information: Payment method details (GCash account information, Maya/PayMaya details, bank account numbers), billing address, transaction history, deposit and withdrawal records.
• Verification Documents: Copies of government-issued identification documents, utility bills, bank statements, or other documents required for Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance.
• Communication Data: Messages, emails, chat transcripts, and other communications you send to our customer support team or share through the Service.

2.2 Information Automatically Collected

When you access or use the gfplay Service, we automatically collect certain technical and usage information, including:

• Device Information: Device type, operating system, browser type and version, device identifiers, mobile network information.
• Usage Data: IP address, login times, pages viewed, games played, betting history, time spent on pages, clickstream data, referring/exit pages.
• Location Information: Approximate geographic location based on IP address to verify that you are accessing the Service from within the Philippines.
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixels, and similar technologies to enhance your experience and gather analytics data.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction verification and fraud prevention information from GCash, Maya, banks, and other payment service providers.
• Identity Verification Services: Age verification, identity authentication, and fraud detection services that confirm the accuracy of information you provide.
• Public Databases: Information from publicly available sources to verify your identity and comply with regulatory obligations.
• Gaming Providers: Game session data, betting patterns, and gameplay information from third-party game suppliers integrated into the gfplay platform.

3. How We Use Your Information

gfplay uses the personal information we collect for the following legitimate business purposes:

3.1 Account Management and Service Provision

• Create, maintain, and administer your gfplay account
• Process your registration and verify your identity and age
• Authenticate your access to the Service
• Provide customer support and respond to your inquiries
• Personalize your experience and display customized content
• Enable gameplay, place bets, and process gaming transactions

3.2 Financial Transactions

• Process deposits, withdrawals, and other financial transactions
• Verify payment methods and detect fraudulent transactions
• Maintain accurate financial records and transaction history
• Calculate, track, and distribute bonuses and promotional offers
• Conduct financial reconciliation and accounting

3.3 Legal and Regulatory Compliance

• Comply with PAGCOR licensing requirements and regulations
• Fulfill Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations
• Prevent underage gambling and verify that all players are 21 years or older
• Detect, prevent, and investigate fraud, money laundering, and other illegal activities
• Respond to legal requests, court orders, and law enforcement inquiries
• Maintain records required by gaming regulators and tax authorities
• Enforce our Terms and Conditions and other policies

3.4 Security and Fraud Prevention

• Monitor account activity for suspicious or unauthorized behavior
• Implement security measures to protect against hacking, phishing, and cyberattacks
• Detect and prevent bonus abuse, collusion, and other forms of gaming fraud
• Verify the legitimacy of transactions and payment sources
• Protect the integrity of our games and betting markets

3.5 Marketing and Communications

• Send promotional emails, SMS messages, and notifications about bonuses, tournaments, and special offers (with your consent)
• Provide updates about new games, features, and platform improvements
• Conduct surveys and gather feedback to improve our Service
• Segment users for targeted marketing campaigns based on gaming preferences and behavior

3.6 Analytics and Service Improvement

• Analyze usage patterns, gaming behavior, and platform performance
• Optimize website functionality and user experience
• Develop new features, games, and services
• Conduct research and statistical analysis
• Test new technologies and innovations

4. How We Share Your Information

gfplay does not sell your personal information to third parties. However, we may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment processors (GCash, Maya, banking partners) to process financial transactions
• Gaming software providers to deliver game content and functionality
• Identity verification services to conduct KYC and age verification
• Customer support platforms to provide technical assistance
• Email and SMS marketing services to deliver communications
• Data analytics and hosting providers to maintain platform infrastructure
• Cybersecurity firms to protect against threats and vulnerabilities

These service providers are bound by contractual obligations to protect your data and may only use your information to perform services on behalf of gfplay.

4.2 Legal and Regulatory Authorities

We may disclose your personal information to government agencies, regulators, and law enforcement when required by law or when we believe disclosure is necessary to:

• Comply with PAGCOR reporting and audit requirements
• Respond to subpoenas, court orders, or legal processes
• Cooperate with law enforcement investigations
• Report suspicious transactions to the Anti-Money Laundering Council (AMLC)
• Fulfill tax reporting obligations to the Bureau of Internal Revenue (BIR)
• Protect gfplay's legal rights and interests

4.3 Business Transfers

In the event of a merger, acquisition, asset sale, bankruptcy, or other corporate transaction, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Policy.

4.4 With Your Consent

We may share your information with third parties when you provide explicit consent for such disclosure.

5. Data Security

gfplay implements industry-standard technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security practices include:

• Encryption: All sensitive data is encrypted in transit using 256-bit SSL/TLS encryption and at rest using advanced encryption standards.
• Access Controls: Strict role-based access controls limit employee access to personal data on a need-to-know basis.
• Authentication: Multi-factor authentication and strong password requirements protect account access.
• Monitoring: Continuous security monitoring and intrusion detection systems identify and respond to threats in real-time.
• Regular A I'm Claude Code, Anthropic's official CLI for Claude; the underlying model is Claude by Anthropic. I don't have a reliable way to see the exact model version, so I won't guess. What can I help you with? udits: Regular third-party security audits and penetration testing to identify vulnerabilities.
• Employee Training: Comprehensive data protection training for all employees with access to personal information.
• Incident Response: Documented incident response procedures to address security breaches promptly and effectively.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. You acknowledge that you provide your personal information at your own risk.

6. Data Retention

gfplay retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Active Accounts: Personal information is retained for the duration of your active account plus any period required by regulatory obligations.
• Closed Accounts: After account closure, we retain certain information for seven (7) years to comply with PAGCOR record-keeping requirements, tax obligations, and to defend against potential legal claims.
• Transaction Records: Financial transaction records are retained for ten (10) years in accordance with Anti-Money Laundering regulations.
• Marketing Communications: Contact information for marketing purposes is retained until you withdraw consent or unsubscribe from communications.
• Technical Data: Server logs and technical data are typically retained for ninety (90) days unless required for security investigations or legal proceedings.

After the applicable retention period expires, personal information is securely deleted or anonymized in accordance with our data destruction procedures.

7. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request confirmation of whether gfplay is processing your personal data and to obtain a copy of your personal information. You may access most of your account information by logging into your account dashboard.

7.2 Right to Correction

You have the right to request correction of inaccurate or incomplete personal information. You can update most account information directly through your account settings or by contacting customer support.

7.3 Right to Erasure

You have the right to request deletion of your personal information, subject to certain exceptions. We may retain information required by law, for regulatory compliance, or to resolve disputes and enforce agreements.

7.4 Right to Object

You have the right to object to the processing of your personal information for direct marketing purposes. You can opt out of marketing communications by using the unsubscribe link in emails or contacting customer support.

7.5 Right to Data Portability

You have the right to request a copy of your personal information in a structured, commonly used, and machine-readable format.

7.6 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.

To exercise any of these rights, please contact our Data Protection Officer using the contact information provided in Section 12 below. We will respond to your request within thirty (30) days of verification of your identity.

8. Cookies and Tracking Technologies

gfplay uses cookies, web beacons, pixels, and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver personalized content. Types of cookies we use include:

• Essential Cookies: Required for basic website functionality, authentication, and security. These cannot be disabled without affecting service availability.
• Functional Cookies: Remember your preferences, settings, and choices to provide enhanced features.
• Analytics Cookies: Collect anonymous usage data to understand how visitors interact with the website and improve performance.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising and promotional content.

You can control cookie preferences through your browser settings. However, disabling certain cookies may limit your ability to use some features of the Service. For more information about cookies, visit www.allaboutcookies.org.

9. Third-Party Links and Services

The gfplay Service may contain links to third-party websites, applications, or services that are not operated or controlled by gfplay. This Privacy Policy does not apply to third-party websites or services. We encourage you to review the privacy policies of any third-party services you access through our platform. We are not responsible for the privacy practices or content of third-party websites.

10. International Data Transfers

Your personal information is primarily stored and processed within the Philippines. However, some of our service providers and business partners may be located in other countries. When we transfer personal information outside the Philippines, we ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

11. Children's Privacy

The gfplay Service is strictly intended for users who are twenty-one (21) years of age or older. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that we have inadvertently collected information from a minor, we will take immediate steps to delete such information from our systems. Parents or guardians who believe their child has provided personal information to gfplay should contact us immediately.

12. Changes to This Privacy Policy

gfplay reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other operational needs. When we make material changes to this Policy, we will notify you by posting the updated Policy on the Website with a new "Last Updated" date and, where appropriate, through email notification or prominent notice on the platform.

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal information.

13. Contact Information and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: Privacy Inquiry / Data Protection Request
• Live Chat: Available 24/7 through the gfplay website

For complaints or concerns regarding our privacy practices, you may also file a complaint with the National Privacy Commission of the Philippines:

• National Privacy Commission
• 5th Floor, Philippine International Convention Center (PICC)
• Vicente Sotto Street, Pasay City, Metro Manila, Philippines
• Email: [email protected]
• Website: www.privacy.gov.ph

We are committed to working with you and regulatory authorities to resolve any privacy concerns in a fair and expeditious manner.