gl88 is committed to protecting the personal data of every Filipino player on our platform. This Privacy Policy explains exactly what we collect, how we use it, who we share it with, and the rights you hold under Philippine law.
This Privacy Policy ("Policy") applies to all personal data processed by gl88 ("the Company", "We", "Us", "Our") in connection with the operation of the gl88 Platform at gl88.bio. It applies to all registered Players, visitors to the Platform, and any individual whose personal data is submitted in the course of using gl88 services. By registering an Account or continuing to use the Platform, you acknowledge that you have read and understood this Policy.
gl88 takes the privacy of its players seriously. As a PAGCOR-regulated online gaming platform operating in the Philippines, gl88 is bound by the requirements of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) ("DPA"), its Implementing Rules and Regulations ("IRR"), and the circulars and issuances of the National Privacy Commission ("NPC"). This Policy has been prepared in compliance with those requirements and reflects gl88's commitment to responsible, transparent, and lawful personal data processing.
This Policy should be read together with the gl88 Terms & Conditions, which are available at /terms-conditions. Defined terms used but not defined in this Policy carry the meanings assigned to them in the Terms & Conditions.
gl88 may process personal data as both a Personal Information Controller ("PIC") — where it determines the purposes and means of processing — and, in certain service delivery contexts, as a Personal Information Processor ("PIP") acting on behalf of third-party game providers. This Policy primarily addresses gl88's processing activities in its capacity as PIC.
The Personal Information Controller responsible for the personal data collected through the gl88 Platform is:
Platform Name: gl88
Website: gl88.bio
Regulatory Authority: Philippine Amusement and Gaming Corporation (PAGCOR)
Data Protection Contact: [email protected]
Support Languages: English and Tagalog
gl88 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with the DPA and this Policy. Players may direct any data protection queries or requests to the DPO using the contact information provided in Section 15 of this Policy.
gl88 collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is processed. The categories of personal data collected include the following:
When you create a gl88 Account, we collect: full legal name, date of birth, nationality, gender, residential address, province/city, contact mobile number, and email address. This data is required to create and maintain your Account and to verify your identity in accordance with PAGCOR KYC requirements.
For account verification, withdrawal processing, and anti-money laundering compliance, gl88 may collect copies of government-issued identification documents. Acceptable documents include: Philippine System Identification (PhilSys ID), passport, driver's licence issued by the LTO, SSS card, GSIS card, PRC Professional ID, Voter's ID, and Senior Citizen ID. We may also collect proof of address and, for high-value transactions, source of funds documentation.
We collect data related to your financial interactions with the Platform, including: GCash mobile wallet number, PayMaya account details, bank account names and numbers used for withdrawals, transaction histories (deposits, withdrawals, wagers, wins, losses), and bonus and promotion activity records.
We collect records of all gaming activity conducted through your Account, including: game sessions played, bet amounts, game outcomes, session durations, and responsible gaming tool activations (deposit limits, loss limits, self-exclusion records). Gaming activity data is retained for regulatory compliance and responsible gaming monitoring purposes.
When you access the gl88 Platform, we automatically collect technical data including: IP address, device type, operating system, browser type and version, screen resolution, time zone, session timestamps, and pages visited. This data is used for security monitoring, fraud detection, and platform performance optimisation.
We retain records of communications between Players and the gl88 support team, including live chat transcripts, email correspondence, and any documentation submitted in connection with a complaint, dispute, or account query.
Where you have provided consent, we collect and process your marketing preferences, including the types of promotions and communications you wish to receive and your preferred communication channel (email, SMS, or in-platform notification).
gl88 processes personal data for the following specific, legitimate purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration data, identity data, contact data |
| Identity verification (KYC) | Identity documents, registration data, financial data |
| Processing deposits and withdrawals | Financial data, identity data, transaction records |
| Providing gaming services | Account data, gaming activity data, device data |
| Fraud detection and security monitoring | Technical data, transaction data, gaming activity data |
| Anti-money laundering compliance | Identity data, financial data, transaction data, KYC documents |
| PAGCOR regulatory reporting | Account data, gaming activity data, financial data |
| Responsible gaming monitoring | Gaming activity data, account data, responsible gaming tool records |
| Customer support | Account data, communications data, transaction data |
| Personalised promotions (with consent) | Account data, gaming activity data, marketing preferences |
| Platform analytics and improvement | Technical data, gaming activity data (aggregated/anonymised) |
| Legal dispute resolution | All relevant categories as required by the dispute |
Under the Philippine Data Privacy Act, gl88 relies on the following lawful bases for processing personal data:
Processing of Account registration data, KYC data, financial transaction data, and gaming activity data is necessary for the performance of the contract between gl88 and the Player (the gl88 Terms & Conditions). Without this processing, gl88 cannot provide the Platform services.
Processing for PAGCOR regulatory reporting, Anti-Money Laundering Council (AMLC) compliance, tax obligations under Philippine revenue law, and age verification is required by applicable Philippine law. gl88 cannot lawfully operate without conducting this processing.
Processing for fraud detection, platform security, responsible gaming monitoring, and analytics is conducted on the basis of gl88's legitimate interest in maintaining a safe, fair, and legally compliant gaming environment. In each case, gl88 has assessed that this legitimate interest is not overridden by the individual rights of affected data subjects.
Processing for direct marketing communications, personalised promotional offers, and the use of non-essential cookies is conducted on the basis of explicit consent obtained from the Player. Consent may be withdrawn at any time through Account settings or by contacting the DPO, without affecting the lawfulness of any processing conducted prior to withdrawal.
gl88 engages third-party service providers who process personal data on behalf of gl88 as Personal Information Processors under written data processing agreements. These include: payment gateway operators (GCash/GXI, Maya Philippines, local banking partners), game software providers, cloud infrastructure providers, KYC/identity verification service providers, and customer support platform operators. All processors are required to process data only on gl88's documented instructions and to implement appropriate technical and organisational security measures.
gl88 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or any other competent Philippine government authority where disclosure is required by law, court order, or regulatory obligation. Such disclosures will be made only to the extent required and will be documented in accordance with gl88's data governance procedures.
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of the assets of gl88, personal data held by gl88 may be transferred to the acquiring or successor entity, provided that such entity commits to honouring the obligations of this Privacy Policy. Players will be notified of any such change in data controller prior to their data being subject to a different privacy policy.
No Sale of Personal Data: gl88 does not sell, rent, or trade personal data to third parties for commercial purposes. Personal data is shared only as described in this Section and only where necessary for the stated purpose.
gl88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by applicable Philippine law.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of Account + 5 years after closure | PAGCOR and AML regulatory requirement |
| KYC documents | Duration of Account + 5 years after closure | AMLA Republic Act No. 9160 as amended |
| Financial transaction records | 5 years from transaction date | AMLA and BIR requirements |
| Gaming activity records | 3 years from activity date | PAGCOR reporting obligations |
| Support communications | 3 years from last interaction | Dispute resolution and legal claims |
| Marketing preferences / consent records | Until consent withdrawn + 1 year | DPA consent documentation requirement |
| Technical / access logs | 12 months from collection | Security monitoring, fraud detection |
| Self-exclusion records | Permanently retained | Responsible gaming and PAGCOR obligation |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with gl88's data disposal procedures.
gl88 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
In the event of a personal data breach that is likely to result in harm to affected Players, gl88 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected Players without undue delay, in accordance with NPC Circular 16-03 and the DPA IRR.
Cookies are small text files placed on your device by the gl88 Platform when you visit. They help the Platform remember your preferences, maintain your login session, and collect analytical information about how you use the Platform.
You may manage non-essential cookie preferences through your browser settings. Note that disabling functional cookies may affect Platform personalisation features. Disabling analytics or marketing cookies will not prevent access to any core gaming feature. Consent to non-essential cookies may be withdrawn at any time.
The gl88 Platform is strictly intended for use by individuals aged 21 years and above, in compliance with PAGCOR regulations. gl88 does not knowingly collect, store, or process personal data belonging to persons under 21 years of age.
As part of the Account registration and KYC processes, gl88 implements age verification measures to prevent underage access. Where gl88 becomes aware that personal data has been collected from an individual under 21 years of age, that data will be deleted immediately, the associated Account will be permanently closed, and any funds held will be handled in accordance with PAGCOR guidelines on underage account closure.
If you are a parent or guardian and believe that a minor in your care has registered an Account or provided personal data to gl88, please contact our Data Protection Officer immediately using the details in Section 15. We will investigate and take prompt action.
Under the Philippine Data Privacy Act, you have the following rights in respect of your personal data held by gl88. These rights may be exercised by contacting the gl88 Data Protection Officer as described in Section 15.
Request a copy of the personal data gl88 holds about you, including the purposes for which it is processed.
Request correction of inaccurate or incomplete personal data. Many fields can be updated directly in your Account settings.
Request deletion of your personal data where it is no longer necessary for the original purpose, subject to applicable legal retention requirements.
Object to processing of your personal data for direct marketing purposes at any time, with immediate effect.
Request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another controller.
Withdraw consent to marketing or non-essential cookie processing at any time without affecting prior lawful processing.
Request suspension of processing where you contest data accuracy or where processing is unlawful but you oppose erasure.
Lodge a complaint with the National Privacy Commission (NPC) if you believe your data rights under the DPA have been violated.
gl88 will respond to all data subject rights requests within thirty (30) calendar days of receipt, or notify you of any extension required for complex requests. Requests are free of charge for the first submission in any twelve-month period. Verification of identity will be required before processing any rights request.
Where gl88 engages service providers located outside the Philippines — including international game software providers and cloud infrastructure operators — personal data may be transferred outside the Philippines. Any such transfer is conducted only where:
All cross-border transfers are documented and reviewed as part of gl88's annual data protection compliance review. Players may request information about specific cross-border transfers and the safeguards in place by contacting the DPO.
If you have a concern about how gl88 handles your personal data, we encourage you to contact the gl88 Data Protection Officer in the first instance using the contact details in Section 15. We will investigate all data protection complaints and aim to provide a substantive response within fifteen (15) business days.
If you are not satisfied with gl88's response to your complaint, or if you believe that gl88 has processed your personal data in violation of the Philippine Data Privacy Act, you have the right to file a complaint with the National Privacy Commission (NPC). The NPC is the independent government body responsible for administering and implementing the DPA in the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official website.
National Privacy Commission (NPC) — Philippines
The NPC is the government authority responsible for upholding the right to data privacy in the Philippines under Republic Act No. 10173. Players may escalate data protection concerns to the NPC if they are not resolved satisfactorily through gl88's internal process.
gl88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable Philippine law, NPC guidance, PAGCOR requirements, or gl88's internal data processing practices. Material changes — those that meaningfully affect the rights of Players or the way personal data is processed — will be communicated to Players via the registered email address associated with their Account and/or through a prominently displayed notice on the Platform at least fourteen (14) days prior to the changes taking effect.
Minor or administrative changes, including corrections of typographical errors or clarifications that do not alter the substance of the Policy, may be made without prior notice. The effective date at the top of this Policy will be updated with each revision. Continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy.
All data subject rights requests, privacy queries, and data protection complaints should be directed to the gl88 Data Protection Officer through the following channels:
When submitting a data subject rights request, please include: your full name as registered on your gl88 Account, your registered email address, and a clear description of the right you wish to exercise or the concern you wish to raise. Identity verification will be required before any personal data is disclosed or modified.
This Privacy Policy was last reviewed and updated on 1 January 2026. gl88 is regulated by PAGCOR. All gaming and data processing activities comply with applicable Philippine law.
Six concrete commitments that back up this Privacy Policy — not just words, but verifiable practices built into the gl88 platform from day one.
gl88 was built from the ground up to comply with Republic Act No. 10173 — the Philippine Data Privacy Act of 2012. Data minimisation, purpose limitation, and consent management are built into the platform architecture, not retrofitted after the fact.
Every piece of data exchanged between your device and gl88 is protected by 256-bit SSL encryption — the same standard used by BDO, BPI, and Metrobank. Your personal data and payment details are never exposed in transit.
gl88 has a designated Data Protection Officer (DPO) responsible for overseeing DPA compliance and handling all data subject rights requests. You can reach the DPO directly — not through a generic contact form, but through a dedicated privacy channel.
gl88 does not sell, rent, or broker your personal data to third parties for commercial gain. Your data is shared only with service providers who process it on our behalf under contractual data processing agreements — and only as necessary to deliver our services.
Access, rectification, erasure, portability, objection, and consent withdrawal — all your rights under the DPA are exercisable at gl88 without waiting periods or administrative barriers. Submit a request via live chat or email and receive a response within 30 days.
In the event of a personal data breach, gl88 is committed to notifying the National Privacy Commission within 72 hours and informing affected players without undue delay — a legal requirement under the DPA that gl88 takes seriously as an operational standard.
Your personal data is protected by the Philippine Data Privacy Act, PAGCOR regulation, and gl88's own security infrastructure. If you have reviewed this Policy and are ready to enjoy the full gl88 experience, your account is waiting.