g0123 Privacy Policy

Last Updated: December 15, 2024

This Privacy Policy (hereinafter the "Policy") explains how g0123 (the "Company," "we," "us," or "our"), operating the online gaming platform accessible at https://g0123.cam and associated mobile applications (collectively, the "Platform" or "Service"), collects, uses, processes, stores, discloses, and protects personal information of users (the "User," "you," or "your") in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, its Implementing Rules and Regulations, and relevant issuances of the National Privacy Commission of the Philippines. By accessing or using the g0123 Platform, creating an account, or providing personal information to us, you acknowledge that you have read, understood, and consent to the data processing practices described in this Policy.

1. Information We Collect

1.1 Personal Information Provided Directly by You

When you register for an account, use our services, or communicate with us, we collect personal information that you voluntarily provide, including but not limited to:

• Identity Information: Full legal name as it appears on government-issued identification, date of birth, gender, nationality, and identification numbers
• Contact Information: Email address, mobile phone number, residential address, postal code, and city of residence
• Account Credentials: Username, password (stored in encrypted form), security questions and answers, and two-factor authentication details
• Financial Information: Payment method details including GCash account information, bank account numbers, payment card information, transaction history, deposit and withdrawal records, and financial transaction identifiers
• Verification Documents: Government-issued photo identification (passport, driver's license, UMID card), proof of address documents (utility bills, bank statements), proof of payment method ownership, and selfie photographs for identity verification
• Communication Data: Messages exchanged with customer support, chat transcripts, email correspondence, feedback, and survey responses

1.2 Information Collected Automatically

When you access and use the g0123 Platform, we automatically collect certain technical and usage information through cookies, web beacons, and similar tracking technologies:

• Device Information: Device type, operating system and version, browser type and version, device identifiers, screen resolution, and hardware specifications
• Connection Data: IP address, geolocation data (derived from IP address), internet service provider, connection type, and network information
• Usage Information: Pages visited, features accessed, games played, time spent on the Platform, clickstream data, navigation patterns, search queries, and referral sources
• Gaming Activity: Game selections, wager amounts, betting patterns, win/loss records, bonus utilization, session duration, and gameplay statistics
• Marketing Data: Response to promotional campaigns, affiliate source information, marketing preferences, and communication engagement metrics

1.3 Information from Third-Party Sources

We may receive personal information from third-party sources including payment processors, identity verification services, fraud prevention services, credit reference agencies, and publicly available databases to verify information you provide, prevent fraud, and comply with legal obligations.

2. How We Use Your Information

2.1 Legal Bases for Processing

We process your personal information based on one or more of the following legal grounds under the Data Privacy Act:

• Consent: You have given explicit consent for specific processing activities
• Contract Performance: Processing is necessary for the performance of our Terms and Conditions to which you are a party
• Legal Obligation: Processing is required to comply with Philippine laws, including anti-money laundering regulations, tax laws, and gaming regulations
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, and service improvement, provided such interests do not override your fundamental rights and freedoms

2.2 Purposes of Data Processing

g0123 processes your personal information for the following purposes:

Purpose	Description	Legal Basis
Account Management	Create, maintain, and administer your user account; authenticate identity; process login credentials; manage account settings	Contract Performance, Consent
Service Provision	Provide gaming services; process wagers; calculate and pay winnings; manage bonuses and promotions; deliver customer support	Contract Performance
Financial Transactions	Process deposits and withdrawals; verify payment methods; maintain transaction records; issue receipts and statements	Contract Performance, Legal Obligation
Identity Verification (KYC)	Verify identity and age; confirm source of funds; prevent duplicate accounts; comply with regulatory requirements	Legal Obligation, Legitimate Interests
Compliance & AML	Comply with anti-money laundering laws; report suspicious activities; respond to regulatory inquiries; maintain required records	Legal Obligation
Fraud Prevention	Detect and prevent fraudulent activities; identify suspicious betting patterns; protect against security threats; investigate violations	Legitimate Interests, Legal Obligation
Responsible Gaming	Monitor gaming behavior; enforce deposit and loss limits; implement self-exclusion; identify problem gambling patterns	Legal Obligation, Legitimate Interests
Marketing Communications	Send promotional offers; notify about new games and features; deliver newsletters; conduct surveys (with your consent)	Consent
Service Improvement	Analyze Platform usage; improve user experience; develop new features; optimize performance; conduct research	Legitimate Interests
Legal Proceedings	Establish, exercise, or defend legal claims; comply with court orders; cooperate with law enforcement	Legal Obligation, Legitimate Interests

3. Data Sharing and Disclosure

3.1 Third-Party Service Providers

We may share your personal information with trusted third-party service providers who assist us in operating the Platform and providing services. These service providers are contractually bound to protect your information and use it only for the purposes we specify. Categories of service providers include:

• Payment Processors: GCash, PayMaya, bank partners, and other payment gateway providers for processing deposits and withdrawals
• Identity Verification Services: Third-party KYC and AML compliance providers for verifying your identity and screening against sanctions lists
• Game Providers: Software providers and game developers whose games are featured on our Platform
• Cloud Hosting and IT Infrastructure: Service providers hosting our servers, databases, and backup systems
• Customer Support Tools: Live chat providers, email service providers, and customer relationship management platforms
• Marketing and Analytics: Marketing automation platforms, email marketing services, and analytics providers (only with your consent for marketing purposes)
• Security and Fraud Prevention: Cybersecurity firms, fraud detection services, and risk management providers

3.2 Legal and Regulatory Authorities

We may disclose your personal information to regulatory bodies, law enforcement agencies, courts, and other government authorities when required by law or when necessary to:

• Comply with legal obligations, including reporting requirements under the Anti-Money Laundering Act (AMLA) and Tax Reform for Acceleration and Inclusion (TRAIN) Law
• Respond to valid legal processes such as subpoenas, court orders, or regulatory inquiries
• Report suspicious transactions to the Anti-Money Laundering Council (AMLC)
• Cooperate with investigations by the Philippine Amusement and Gaming Corporation (PAGCOR) or other regulatory authorities
• Protect our rights, property, or safety, or the rights, property, or safety of our users or the public

3.3 Business Transfers

In the event of a merger, acquisition, reorganization, asset sale, or similar corporate transaction, your personal information may be transferred to the successor entity, subject to substantially similar privacy protections.

3.4 No Sale of Personal Information

g0123 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Any data sharing is strictly for the purposes described in this Policy and subject to appropriate safeguards.

4. Data Security Measures

4.1 Technical Security Controls

We implement industry-standard technical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data at rest, including passwords and financial information, is encrypted using AES-256 encryption
• Secure Authentication: Multi-factor authentication (MFA) options, strong password requirements, account lockout mechanisms after failed login attempts, and session timeout controls
• Network Security: Firewall protection, intrusion detection and prevention systems (IDS/IPS), regular security monitoring, and vulnerability assessments
• Access Controls: Role-based access restrictions ensuring only authorized personnel can access personal data, with all access logged and audited
• Data Backup: Regular automated backups with encrypted storage and secure off-site backup locations

4.2 Organizational Security Measures

In addition to technical controls, we implement organizational measures including:

• Mandatory data protection and security training for all employees with access to personal information
• Confidentiality agreements binding all employees and contractors
• Strict access control policies limiting data access to personnel with legitimate business needs
• Incident response procedures for addressing security breaches promptly
• Regular third-party security audits and penetration testing
• Data Protection Officer oversight of compliance with this Policy

4.3 Data Breach Notification

In the event of a personal data breach that is reasonably believed to have caused, or will cause, harm to you or is of a serious nature, we will notify the National Privacy Commission and affected individuals within seventy-two (72) hours of becoming aware of the breach, in accordance with National Privacy Commission Circular No. 16-03. Notification will include the nature of the breach, categories of data affected, measures taken to mitigate harm, and recommended actions for affected individuals.

5. Data Retention and Deletion

5.1 Retention Periods

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Information: Retained for the duration of your active account plus seven (7) years after account closure for legal and regulatory compliance
• Financial Records: Retained for ten (10) years in accordance with Bureau of Internal Revenue (BIR) requirements and anti-money laundering regulations
• Transaction History: Retained for ten (10) years for audit, dispute resolution, and compliance purposes
• Identity Verification Documents: Retained for seven (7) years after account closure for KYC/AML compliance
• Communication Records: Retained for three (3) years for customer service quality assurance and dispute resolution
• Marketing Data: Retained until you withdraw consent or for three (3) years of inactivity, whichever comes first
• Technical Logs: Retained for one (1) year for security monitoring and troubleshooting purposes

5.2 Secure Deletion

Upon expiration of the applicable retention period, we securely delete or anonymize your personal information using industry-standard data destruction methods to ensure data cannot be reconstructed or recovered.

6. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal information:

6.1 Right to be Informed

You have the right to be informed about the collection, use, and processing of your personal information. This Policy serves to inform you of our data processing practices.

6.2 Right to Access

You have the right to request access to your personal information in our possession, including reasonable information about the manner by which it is processed. You may access and review most of your information through your account dashboard. For additional information, contact our Data Protection Officer.

6.3 Right to Rectification

You have the right to dispute inaccurate or incomplete personal information and request correction or completion. You may update most information directly through your account settings, or contact customer support for assistance.

6.4 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal information when: (a) it is no longer necessary for the purposes for which it was collected; (b) you withdraw consent and there is no other legal ground for processing; (c) you object to processing and there are no overriding legitimate grounds; or (d) personal information was unlawfully processed. This right is subject to legal retention obligations and legitimate interests.

6.5 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes at any time, without charge. You may opt out of marketing communications by following the unsubscribe link in emails or adjusting your communication preferences in your account settings.

6.6 Right to Data Portability

You have the right to request a copy of your personal information in a structured, commonly used, and machine-readable format, and to transmit such data to another controller, where technically feasible.

6.7 Right to Lodge a Complaint

You have the right to lodge a complaint with the National Privacy Commission if you believe your data protection rights have been violated. Contact information for the NPC:

• National Privacy Commission
• 5th Floor, Philippine International Convention Center (PICC), Vicente Sotto St., Pasay City 1307, Philippines
• Email: [email protected]
• Hotline: (+63 2) 8234-2228

6.8 Exercising Your Rights

To exercise any of these rights, please submit a written request to our Data Protection Officer at [email protected]. We will respond to your request within a reasonable timeframe, not exceeding thirty (30) days. Identity verification may be required to prevent unauthorized disclosure of your personal information.

7. Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work efficiently, provide analytics, and deliver personalized experiences. g0123 uses cookies and similar tracking technologies to enhance your experience on the Platform.

7.2 Types of Cookies We Use

• Essential Cookies: Necessary for the Platform to function properly, including authentication, security, and session management. These cannot be disabled without affecting core functionality.
• Performance Cookies: Collect anonymous information about how visitors use the Platform, helping us improve user experience and identify technical issues.
• Functionality Cookies: Remember your preferences and choices (language, region, display settings) to provide enhanced, personalized features.
• Marketing Cookies: Track your activity across websites to deliver relevant advertisements and measure campaign effectiveness. These require your consent.

7.3 Managing Cookie Preferences

You can control cookie settings through your browser settings. Most browsers allow you to refuse or delete cookies. However, blocking essential cookies may affect your ability to use certain features of the Platform. You may manage marketing and analytics cookies through the cookie consent banner displayed upon your first visit to the Platform.

8. International Data Transfers

Your personal information is primarily stored and processed on servers located within the Republic of the Philippines. However, some of our third-party service providers may be located outside the Philippines, resulting in international data transfers. When we transfer personal information internationally, we implement appropriate safeguards including:

• Ensuring the receiving country has adequate data protection laws as determined by the National Privacy Commission
• Entering into Standard Contractual Clauses with third-party processors
• Requiring third parties to implement technical and organizational security measures equivalent to those required under Philippine law

9. Children's Privacy

The g0123 Platform is not intended for individuals under twenty-one (21) years of age. We do not knowingly collect personal information from minors. If you are under 21, do not use the Platform or provide any personal information to us. If we discover that we have inadvertently collected personal information from an individual under 21, we will delete such information immediately. Parents or guardians who believe their child has provided personal information to g0123 should contact us immediately at [email protected].

10. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. Material changes will be communicated through prominent notice on the Platform, email notification to your registered address, or notification upon login. The "Last Updated" date at the top of this Policy indicates when the most recent changes were made. Your continued use of the Platform following notification of changes constitutes acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how we protect your personal information.

11. Contact Information

11.1 Data Protection Officer

For questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: "Data Privacy Inquiry" or "Data Subject Rights Request"
• Response Time: We will respond to all inquiries within fifteen (15) business days

11.2 Customer Support

For general questions or account-related assistance:

• Email: [email protected]
• Live Chat: Available 24/7 through the Platform
• Customer Support Hours: 24 hours a day, 7 days a week

By using the g0123 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, processing, and disclosure of your personal information as described herein. If you do not agree with this Policy, please discontinue use of the Service immediately.