gamasph Privacy Policy
Your privacy matters at gamasph. This policy explains exactly what personal data we collect, why we collect it, how we use it, and the rights you hold as a registered player in the Philippines.
Effective Date: 1 January 2026Summary: gamasph collects personal data to operate your Account, verify your identity, process transactions, and comply with PAGCOR and Philippine anti-money laundering regulations. We do not sell your personal information to third parties. By registering and using gamasph, you consent to the data practices described in this Privacy Policy.
1 Introduction
gamasph ("we," "us," "our") is committed to protecting the privacy and personal data of every individual who visits, registers on, or interacts with the gamasph platform at gamasph.net. This Privacy Policy has been prepared in accordance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC).
This Privacy Policy applies to all personal data collected through the gamasph website, mobile-optimized interfaces, live chat, email correspondence, and any other channel through which you interact with gamasph. It applies to registered Players, prospective registrants, and visitors to the site alike.
Please read this Privacy Policy carefully alongside our Terms & Conditions and Responsible Gaming policy. Together, these documents govern your relationship with gamasph. If you have questions about anything in this policy, you may contact our Data Protection Officer using the details in Section 14.
Philippine Data Privacy Act: As a platform serving Filipino players, gamasph fully complies with RA 10173 and the NPC's registration requirements for personal information controllers. Your rights under Philippine law are described in Section 10 of this policy.
2 Data Controller Information
gamasph operates as the Personal Information Controller (PIC) in respect of the personal data it processes about you, as defined under RA 10173. This means gamasph determines the purposes for which and the means by which your personal data is processed.
gamasph has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection law. You may contact the DPO at any time using the contact details set out in Section 14 of this policy.
Where gamasph engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, or analytics platforms — those parties act as Personal Information Processors (PIPs) and are bound by data processing agreements that require them to handle your data only in accordance with gamasph's instructions and applicable law.
3 Personal Data We Collect
3.1 Data You Provide Directly
When you register an Account, interact with gamasph's support team, or complete any verification process, we collect personal data including but not limited to:
- Identity Data: Full legal name, date of birth, gender, and nationality;
- Contact Data: Residential address, email address, and mobile number;
- Identity Verification Documents: Copies of government-issued Philippine ID (e.g., Philippine passport, driver's license, PhilSys National ID, SSS/UMID card, Voter's ID);
- Financial Data: GCash number, PayMaya account details, bank account name and number (BPI, BDO, Metrobank), deposit and withdrawal history;
- Account Credentials: Username and hashed password (we never store your password in plain text);
- Support Communications: Records of live chat conversations, emails, or other correspondence you send to gamasph.
3.2 Data Collected Automatically
When you use the gamasph platform, certain technical and behavioral data is collected automatically:
- Device & Technical Data: IP address, browser type and version, operating system, device identifiers, and screen resolution;
- Usage Data: Pages visited, session duration, games played, wagers placed, game outcomes, and navigation patterns;
- Location Data: General geographic location inferred from your IP address, used for regulatory compliance and fraud prevention;
- Cookie Data: Information stored in cookies and similar tracking technologies as described in Section 7.
3.3 Data from Third Parties
gamasph may receive personal data about you from third-party sources in limited circumstances, including:
- KYC and identity verification service providers who confirm the authenticity of identification documents;
- Payment processors and e-wallet operators (GCash, PayMaya) who confirm transaction status;
- Fraud detection and anti-money laundering screening services;
- PAGCOR or other regulatory authorities where disclosure is legally required.
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity | Full name, date of birth, nationality | Registration form, KYC upload |
| Contact | Email, mobile number, address | Registration form |
| Financial | GCash number, bank account details, transaction records | Cashier, payment gateway |
| Technical | IP address, device type, browser | Automatic — platform logs |
| Behavioral | Games played, session duration, wager history | Automatic — platform analytics |
| Verification | Government ID documents, selfie verification | KYC submission process |
4 How We Use Your Personal Data
gamasph uses the personal data it collects for the following purposes:
- Account Registration and Management: To create, activate, and maintain your gamasph Account, and to authenticate your identity when you log in;
- KYC and Age Verification: To verify that you are at least 21 years of age and to comply with PAGCOR's identity verification requirements before activating full account functionality;
- Transaction Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank, and to maintain accurate financial records of all transactions on your Account;
- Regulatory Compliance: To fulfill our obligations under PAGCOR regulations, RA 10173, the Anti-Money Laundering Act (AMLA) of the Philippines, and any other applicable laws;
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, account hacking, and other prohibited conduct as described in our Terms & Conditions;
- Customer Support: To respond to your inquiries, complaints, and support requests submitted via live chat or email;
- Responsible Gaming: To monitor gameplay patterns, apply responsible gaming limits you have set, and identify potential indicators of problem gambling behavior in accordance with our duty of care;
- Promotions and Communications: To send you information about bonuses, promotions, and platform updates — but only where you have consented to marketing communications. You may withdraw this consent at any time;
- Platform Improvement: To analyze aggregated, anonymized usage data to improve the gamasph platform, optimize game performance, and enhance the overall player experience;
- Legal Proceedings: To establish, exercise, or defend legal claims involving gamasph, its players, or regulators.
We do not sell your data. gamasph does not sell, rent, or otherwise commercially exploit your personal information to third-party marketers or data brokers. Your data is used exclusively for the purposes described in this Privacy Policy.
5 Legal Basis for Processing
Under the Data Privacy Act of 2012 (RA 10173), gamasph relies on the following legal bases when processing your personal data:
- Contractual Necessity: Processing required to perform our obligations under the gamasph Terms & Conditions — including account management, transaction processing, and KYC verification — is carried out on the basis that it is necessary to fulfill our contract with you;
- Legal Obligation: Processing carried out to comply with PAGCOR requirements, Anti-Money Laundering Act obligations, NPC registration requirements, and other applicable Philippine legal and regulatory obligations;
- Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where our legitimate business interests are not overridden by your data protection rights;
- Consent: Processing for direct marketing communications and non-essential cookies is based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
6 Data Sharing and Disclosure
6.1 Service Providers
gamasph shares personal data with carefully selected third-party service providers who assist in operating the platform. These include payment processors (GCash, PayMaya, BPI, BDO, Metrobank), KYC identity verification providers, fraud detection services, cloud infrastructure providers, and customer support platform operators. All service providers are bound by contractual obligations to process your data only on gamasph's instructions and in compliance with RA 10173.
6.2 Regulatory and Law Enforcement Authorities
gamasph may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, or courts where such disclosure is required by applicable Philippine law, a court order, or a lawful regulatory directive. gamasph will, where legally permitted, notify you of any such disclosure.
6.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of gamasph's assets, personal data held about registered players may be transferred to the acquiring entity, subject to that entity assuming the same data protection obligations described in this Privacy Policy. Affected players will be notified prior to any such transfer.
6.4 No Third-Party Marketing Disclosure
gamasph does not share your personal data with third parties for their own direct marketing purposes. Any promotional communications you receive will come from gamasph directly and only where you have consented to receive them.
7 Cookies and Tracking Technologies
gamasph uses cookies and similar tracking technologies to operate the platform, improve user experience, and comply with regulatory requirements. A cookie is a small text file stored on your device when you visit a website.
The types of cookies gamasph uses include:
- Strictly Necessary Cookies: Required for the platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without impairing platform functionality;
- Functional Cookies: Remember your preferences such as language settings, game lobby view, and responsible gaming limits you have configured;
- Analytics Cookies: Collect anonymized data about how Players use the platform, which pages are visited most, and where technical errors occur. This data helps gamasph improve the platform experience;
- Security and Fraud Prevention Cookies: Assist in detecting suspicious login attempts, account takeover patterns, and bot activity to protect your Account.
You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent the gamasph platform from functioning correctly. For analytics and functional cookies, you may opt out through the cookie preferences tool available on the platform.
8 Data Retention
gamasph retains your personal data only for as long as is necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable law and regulation. The following general retention periods apply:
- Active Account Records: Retained for the duration of your Account's active status plus a minimum of five (5) years following Account closure, in compliance with PAGCOR and AMLA requirements;
- Transaction and Financial Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act of the Philippines;
- KYC and Identity Documents: Retained for a minimum of five (5) years following Account closure or the last transaction, whichever is later;
- Support and Communication Records: Retained for three (3) years from the date of the communication, unless a longer period is required for ongoing dispute resolution;
- Marketing Consent Records: Retained for the duration of your consent plus three (3) years, to demonstrate that marketing was conducted on a valid consent basis.
When personal data is no longer required and no legal retention obligation applies, gamasph will securely delete or anonymize the data in accordance with its data disposal procedures.
9 Data Security
gamasph implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:
- Encryption: All data transmitted between your device and the gamasph platform is encrypted using TLS (Transport Layer Security). Sensitive data stored in our systems — including payment information and identity documents — is encrypted at rest;
- Access Controls: Access to personal data is restricted on a strict need-to-know basis. gamasph staff who handle personal data are subject to confidentiality obligations and regular data privacy training;
- Password Security: Account passwords are stored using industry-standard cryptographic hashing. gamasph never stores passwords in plain text and will never ask you to provide your password via email or live chat;
- Fraud Monitoring: Automated systems monitor Account activity for signs of unauthorized access, unusual transaction patterns, and other security anomalies in real time;
- Penetration Testing: gamasph conducts periodic security assessments to identify and remediate vulnerabilities in the platform's infrastructure.
Despite these measures, no data transmission over the internet or electronic storage system is guaranteed to be 100% secure. If you become aware of any unauthorized use of your Account, please contact gamasph's support team immediately via live chat.
Data Breach Response: In the event of a personal data breach that poses a real risk to your rights and freedoms, gamasph will notify the National Privacy Commission and affected individuals within the timeframes prescribed by RA 10173 and NPC regulations.
10 Your Data Privacy Rights
Under the Data Privacy Act of 2012 (RA 10173) of the Philippines, you have the following rights with respect to your personal data held by gamasph. To exercise any of these rights, please contact our Data Protection Officer as described in Section 14.
Your Privacy Rights at gamasph
As a Filipino player, the Data Privacy Act of 2012 grants you these enforceable rights over your personal data held by gamasph.
Right to Be Informed
You have the right to know whether gamasph holds personal data about you, and to receive clear information about how it is being used — which is the primary purpose of this Privacy Policy.
Right of Access
You may request a copy of the personal data gamasph holds about you, along with information about the sources of that data, the purposes of processing, and any third parties to whom it has been disclosed.
Right to Correction
If any personal data gamasph holds about you is inaccurate, incomplete, or outdated, you have the right to request that it be corrected. You may update certain information directly within your Account settings.
Right to Erasure
You may request the deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to gamasph's legal retention obligations under PAGCOR and AMLA regulations.
Right to Object
You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on gamasph's legitimate interests, subject to our overriding legal and regulatory obligations.
Right to Data Portability
Where technically feasible and where processing is based on your consent or a contract, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
To exercise any of the rights above, contact gamasph's Data Protection Officer at [email protected]. gamasph will respond to verified requests within thirty (30) days as required by RA 10173. If you are unsatisfied with gamasph's response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
11 Children's Privacy
The gamasph platform is strictly prohibited for individuals under the age of 21 years, in compliance with PAGCOR regulations and applicable Philippine law. gamasph does not knowingly collect personal data from any individual below this age threshold.
If gamasph discovers or is notified that personal data has been collected from a person under 21 years of age, the relevant Account will be immediately suspended, all associated personal data will be securely deleted, and any deposited funds will be returned to the verified source of payment following appropriate investigation.
If you believe that a minor has registered on the gamasph platform, please contact our support team immediately via live chat so that appropriate action can be taken without delay.
12 Cross-Border Data Transfers
gamasph's primary operations and data processing activities are based in the Philippines. However, certain third-party service providers engaged by gamasph — such as cloud infrastructure providers or KYC verification platforms — may process personal data in jurisdictions outside the Philippines.
Where personal data is transferred outside the Philippines, gamasph ensures that appropriate safeguards are in place to protect your data, including:
- Contractual clauses in data processing agreements requiring the recipient to uphold data protection standards equivalent to those required under RA 10173;
- Transfers only to jurisdictions or recipients assessed by gamasph as providing an adequate level of data protection;
- Compliance with any NPC-issued guidelines on cross-border data transfers.
For further information about the specific safeguards applicable to any cross-border transfer of your personal data, please contact gamasph's Data Protection Officer.
13 Changes to This Privacy Policy
gamasph reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The Effective Date at the top of this page will be updated to reflect the date of the most recent revision.
Where changes are material — for example, where we introduce a new category of personal data processing or a new type of data sharing — gamasph will provide prominent notice on the platform prior to the change taking effect, and where appropriate, will seek fresh consent from registered Players.
Your continued use of the gamasph platform following publication of any revised Privacy Policy constitutes your acknowledgment of the updated policy. We encourage you to review this page periodically to stay informed about how gamasph protects your personal data.
14 Contact & Data Protection Officer
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by gamasph, please contact our Data Protection Officer through the following channels:
- Live Chat: Available 24 hours a day, 7 days a week through the gamasph platform
- Support Email: [email protected]
gamasph commits to acknowledging all data privacy requests within five (5) business days and providing a substantive response within thirty (30) days of receipt, as required under RA 10173.
National Privacy Commission: If you are not satisfied with gamasph's response to your data privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines. The NPC can be reached through official Philippine government channels.
gamasph's Privacy Commitments
Six principles that define how gamasph handles your personal data — every day, on every transaction.
Philippine Law Compliance
gamasph processes all personal data in full compliance with the Data Privacy Act of 2012 (RA 10173) and the guidelines of the National Privacy Commission. Your rights as a Filipino data subject are central to everything we do.
End-to-End Data Encryption
All data transmitted between your device and gamasph is protected by TLS encryption. Financial data, identity documents, and Account credentials are encrypted at rest. Your sensitive information is never exposed in plain text on our systems.
We Never Sell Your Data
gamasph does not sell, rent, or trade your personal information to third-party marketers or data brokers — full stop. Your data is used only to operate your Account, process transactions, and comply with PAGCOR and Philippine legal requirements.
Purpose Limitation
gamasph collects only the personal data that is genuinely necessary for a specific, declared purpose. We do not collect data speculatively or retain it beyond the minimum period required by law. Less data collected means less risk for you.
Dedicated Data Protection Officer
gamasph has appointed a Data Protection Officer responsible for overseeing compliance with RA 10173, handling player data requests, and managing our NPC registration. Your privacy concerns have a dedicated point of accountability.
Responsible Gaming Data Use
gamasph uses behavioral data to support responsible gaming — monitoring for signs of problem gambling, applying self-imposed limits, and protecting vulnerable players. This use of data is in your best interest, not just ours.
Play with Confidence at gamasph
Your data is protected. Your identity is verified. Your transactions are secured. Explore everything gamasph has to offer — from Fortune Gems 2 and live dealer tables to daily bingo draws and PBA sports betting, all PAGCOR regulated.
21+ gamasph is strictly for players aged 21 years and above, in compliance with PAGCOR regulations. By using gamasph, you confirm you meet this requirement. Please play responsibly. Visit our Responsible Gaming page if you need support.