Privacy Policy

1. Introduction

Welcome to the gpirya Privacy Policy. gpirya is committed to protecting the privacy and personal data of every Filipino player who visits, registers with, or otherwise interacts with our platform at gpirya.net. This Privacy Policy describes how gpirya collects, uses, stores, and protects your personal information in connection with the operation of our online sportsbook, casino, slot games, bingo, and sabong services.

This policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and the implementing rules and regulations issued by the National Privacy Commission (NPC) of the Philippines. By creating a gpirya account or continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This Privacy Policy should be read together with the gpirya Terms & Conditions, which govern the overall use of the platform. In the event of any conflict between this policy and a more specific notice provided to you at the point of data collection, the more specific notice shall take precedence for that particular processing activity.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and all applicable Philippine data protection legislation, gpirya acts as the personal information controller (PIC) in respect of the personal data collected through the gpirya platform. This means gpirya is the entity that determines the purposes and means of processing your personal information.

gpirya is an online gaming platform operating in alignment with applicable Philippine regulations and the regulatory framework established by the Philippine Amusement and Gaming Corporation (PAGCOR) as it pertains to online gaming services targeting Filipino players.

For all data privacy enquiries, rights requests, and complaints, please contact our designated Data Protection Officer (DPO) using the contact details provided in Section 15 of this policy.

3. Personal Data We Collect

gpirya collects the following categories of personal data in the course of providing our services to Filipino players. The specific data collected depends on how you interact with the platform.

4. How We Collect Your Data

gpirya collects personal data through the following means:

4.1 Directly From You

• When you register a gpirya account and complete the sign-up form.
• When you submit identity verification documents as part of our KYC process.
• When you make a deposit or request a withdrawal and provide payment details.
• When you contact our customer support team via live chat or email.
• When you update your account profile, responsible gaming settings, or communication preferences.
• When you participate in surveys, competitions, or promotional activities on the platform.

4.2 Automatically Through Platform Use

• Via cookies, web beacons, and similar tracking technologies when you browse gpirya.net.
• Through server logs that record IP addresses, device identifiers, and session activity.
• Via our gaming and sportsbook systems that record all bet placements, game sessions, and transaction events.

4.3 From Third Parties

• From payment processors (e.g., GCash, PayMaya, BDO) for the purposes of transaction verification and fraud prevention.
• From identity verification service providers we engage to assist with KYC compliance.
• From fraud detection and anti-money laundering screening partners.

5. How gpirya Uses Your Personal Data

gpirya uses the personal data we collect for the following purposes. We will only process your data where we have a lawful basis to do so, as described in Section 6 below.

• Account Registration & Management: To create, maintain, and administer your gpirya player account, including verifying your identity and age (21+) in accordance with applicable regulations.
• Service Delivery: To provide access to our sportsbook (NBA, PBA, UFC, baseball, and more), casino games, slots, bingo, and sabong offerings, and to process your bets and gaming sessions.
• Payment Processing: To process deposits and withdrawals in Philippine Peso (₱) via GCash, PayMaya, BDO, BPI, Metrobank, and UnionBank.
• KYC & AML Compliance: To verify your identity, screen against relevant watchlists, and comply with our anti-money laundering and counter-terrorism financing obligations under Philippine law.
• Fraud Prevention & Platform Security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, and other illegal or abusive behaviour on the platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance through our 24/7 live chat and email support channels.
• Responsible Gaming: To monitor gaming patterns, enforce account-level responsible gaming tools such as deposit limits and self-exclusion, and identify players who may require additional support.
• Regulatory Compliance: To meet our obligations to PAGCOR and other applicable Philippine regulatory bodies, including reporting requirements.
• Platform Improvement: To analyse usage patterns, run A/B tests, and improve the performance, design, and content of gpirya.net for Filipino players.
• Marketing & Promotions: To send you promotional offers, bonus notifications, and updates about gpirya — but only where you have given your explicit consent to receive such communications and have not subsequently opted out.

6. Legal Basis for Processing

Under the Data Privacy Act of 2012, gpirya processes your personal information on one or more of the following lawful bases:

• Consent: You have given gpirya your free, specific, informed, and unambiguous consent to process your personal data for a stated purpose — for example, when you opt in to receive marketing communications at registration.
• Contractual Necessity: Processing is necessary for the performance of the contract between you and gpirya — specifically, the gaming services contract established when you create an account and accept our Terms & Conditions.
• Legal Obligation: Processing is required to comply with Philippine law, including the Anti-Money Laundering Act, data reporting obligations under PAGCOR, and the Data Privacy Act itself.
• Legitimate Interests: Processing is necessary for the legitimate interests of gpirya or a third party (such as fraud prevention, platform security, and improving our services) provided those interests are not outweighed by your privacy rights and freedoms.

Where we rely on consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

7. Sharing Your Personal Data

gpirya does not sell your personal data to any third party. We share your information only in the following circumstances and only to the extent necessary for the stated purpose:

7.1 Service Providers and Processors

We engage carefully selected third-party service providers who process personal data on our behalf and under our instructions. These include payment gateway operators (GCash, PayMaya, BDO, BPI, Metrobank, UnionBank), KYC and identity verification providers, fraud detection and AML screening platforms, cloud hosting and server infrastructure providers, and customer support technology platforms.

All service providers are contractually required to maintain the confidentiality of your data and are prohibited from using it for any purpose other than providing services to gpirya.

7.2 Regulatory and Law Enforcement Authorities

gpirya may disclose your personal information to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the National Bureau of Investigation (NBI), or other competent Philippine government authorities where required by law, court order, or regulatory directive. We will notify you of such disclosures where permitted by law.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of gpirya's business, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify affected users prior to any such transfer and inform them of their choices.

7.4 With Your Consent

We may share your data with other third parties in circumstances not described above where you have provided your explicit prior consent to that specific disclosure.

8. Data Retention

gpirya retains your personal data for as long as necessary to fulfil the purposes for which it was collected, to maintain your active player account, and to comply with our legal, regulatory, tax, and accounting obligations under Philippine law.

As a general rule, gpirya retains account and transaction records for a minimum period of five (5) years following account closure, in line with record-keeping requirements applicable to gaming platforms and anti-money laundering obligations. KYC documentation may be retained for a longer period where required by specific regulatory obligations.

After the applicable retention period has elapsed, we will securely delete or anonymise your personal data so that it can no longer be associated with you as an identifiable individual. Anonymised, aggregated data (which cannot identify you) may be retained indefinitely for statistical and platform improvement purposes.

9. Data Security

gpirya implements appropriate technical and organisational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Our security measures include, but are not limited to:

• Transport Layer Security (TLS / SSL) encryption for all data transmitted between your browser and gpirya.net.
• Encryption of sensitive data fields at rest in our database systems.
• Strict access controls ensuring that only authorised gpirya personnel can access player data, on a need-to-know basis.
• Regular penetration testing and vulnerability assessments of our platform infrastructure.
• Multi-factor authentication requirements for internal system access by gpirya staff.
• Automated monitoring systems that detect and alert on anomalous login or transaction activity.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, gpirya will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012 and NPC Circular No. 16-03.

10. Cookies and Tracking Technologies

gpirya uses cookies and similar technologies (such as web beacons and local storage) when you visit gpirya.net. Cookies are small text files stored on your device that help us deliver a functional, personalised, and secure platform experience.

10.1 Types of Cookies We Use

10.2 Managing Cookies

You can manage non-essential cookie preferences through your browser settings or our on-site cookie preference centre. Please note that disabling strictly necessary or security cookies will impair the functionality of gpirya.net and may prevent you from logging into your account or completing transactions.

gpirya does not use cookies for cross-site behavioural advertising or to track your activity on websites other than gpirya.net.

11. Your Privacy Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights in relation to the personal data gpirya holds about you:

• Right to Be Informed: You have the right to be told what personal data gpirya collects about you and how it is used. This Privacy Policy fulfils that obligation.
• Right of Access: You may request a copy of the personal data gpirya holds about you and information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. You can update many details directly in your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal or regulatory retention obligations.
• Right to Object: You may object to the processing of your personal data where we rely on legitimate interests as the legal basis, and you may withdraw marketing consent at any time.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Lodge a Complaint: If you believe gpirya has violated your privacy rights, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the rights listed above, please contact our Data Protection Officer using the contact details in Section 15 of this policy. We will respond to all valid rights requests within thirty (30) days, as required by the Data Privacy Act.

12. Minors and Age Verification

gpirya's platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect, process, or store the personal data of individuals under the age of 21 in connection with our gaming services.

As part of our registration and KYC processes, gpirya collects date-of-birth information and requires submission of a valid government-issued ID to verify that every player meets the 21+ age requirement before being permitted to deposit funds or place bets on the platform.

If gpirya becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on gpirya, please contact our support team immediately at [email protected].

13. International Data Transfers

gpirya primarily processes and stores personal data within secure data centre infrastructure. In certain circumstances, personal data may be transferred to, and processed in, countries outside the Philippines — for example, where we engage cloud infrastructure or technology service providers whose systems are hosted in other jurisdictions.

Where personal data is transferred outside the Philippines, gpirya ensures that appropriate safeguards are in place to protect your data to a standard that is at least equivalent to the protections afforded under the Data Privacy Act of 2012. Such safeguards may include contractual data processing agreements incorporating the NPC's standard contractual clauses, or transfers to recipients in jurisdictions that the NPC has recognised as providing an adequate level of data protection.

If you would like further information about the specific safeguards applicable to any international transfer of your personal data, please contact our Data Protection Officer.

14. Amendments to This Policy

gpirya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or regulatory requirements. The most current version of this policy will always be accessible at gpirya.net/privacy-policy, with the effective date clearly indicated at the top of the document.

Where changes to this policy are material — meaning they significantly affect how we process your personal data or your rights as a data subject — gpirya will notify registered players via email or a prominent in-platform notification at least fourteen (14) days before the changes take effect. Your continued use of the gpirya platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

If you do not agree to a material change in this Privacy Policy, you may close your account by contacting our customer support team prior to the effective date of the change.

15. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gpirya processes your personal data, you may contact our designated Data Protection Officer (DPO) through the following channels:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the gpirya platform
• Operating Hours: 24 hours a day, 7 days a week

We are committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the competent supervisory authority for data protection matters in the Philippines.