glboss Privacy Policy

1 Introduction

glboss is committed to protecting the privacy and security of your personal information. This Privacy Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, as well as applicable guidelines issued by the National Privacy Commission of the Philippines.

This Privacy Policy should be read in conjunction with the glboss Terms and Conditions, which govern your overall use of the platform. Where terms are not defined in this Privacy Policy, they carry the meaning assigned in the Terms and Conditions.

2 Data Controller

For the purposes of the Data Privacy Act of 2012, glboss is the data controller responsible for the personal information collected and processed through the glboss platform. As data controller, glboss determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection law.

All data inquiries and privacy-related requests should be directed to the glboss Data Protection Officer via the contact details provided in Clause 14 of this Privacy Policy.

3 Personal Data We Collect

glboss collects personal information from you in the following categories:

3.1 Registration Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify compliance with the 21+ age requirement);
• Email address and mobile phone number;
• Residential address, city, and province within the Philippines;
• Username and encrypted account password.

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification documents (e.g., PhilSys National ID, UMID, Passport, Driver's License);
• Proof of address documentation where required;
• Source of funds documentation requested in compliance with Anti-Money Laundering obligations;
• Facial verification data where used during KYC processing.

3.3 Financial Data

• GCash or PayMaya account reference numbers linked to deposit and withdrawal transactions;
• BPI, BDO, or Metrobank bank account details used for transfers;
• Masked Visa or Mastercard details (full card numbers are not stored by glboss);
• Transaction history, including deposit amounts, withdrawal requests, and gaming activity records.

3.4 Gaming Activity Data

• Game session logs including game type, wager amounts, outcomes, and session duration;
• Bonus and promotional activity records;
• Responsible gaming tool usage, including any deposit limits, cooling-off periods, or self-exclusion requests.

3.5 Technical Data

• IP address and approximate geolocation at time of access;
• Device type, operating system, and browser information;
• Cookie identifiers and session tokens;
• Platform interaction logs used for security monitoring and fraud prevention.

3.6 Communications Data

• Records of live chat conversations with glboss support agents;
• Email correspondence between you and glboss;
• Records of any complaint or dispute submitted to glboss.

4 How We Use Your Personal Data

glboss uses your personal data for the following purposes:

• To create, maintain, and administer your glboss player account;
• To verify your identity and age in compliance with PAGCOR licensing requirements and the 21+ eligibility rule;
• To process deposits, withdrawals, and other financial transactions via GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard;
• To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct as required by the Anti-Money Laundering Act of the Philippines;
• To provide customer support through our 24/7 live chat and email channels;
• To deliver platform notifications, account updates, and communications directly related to your gaming activity;
• To administer glboss Rewards, promotions, bonuses, and loyalty program benefits;
• To monitor gameplay activity in support of responsible gaming obligations, including identification of patterns that may indicate problem gambling;
• To fulfil regulatory reporting obligations to PAGCOR and other competent Philippine authorities;
• To improve platform performance, game offerings, and the overall user experience through aggregated, anonymized analytics;
• To enforce the glboss Terms and Conditions and protect the legal rights of glboss and other platform users.

glboss does not use your personal data for automated decision-making that produces legal or similarly significant effects, except where such processing is required for fraud detection or regulatory compliance, in which case you retain the right to request human review of the decision.

5 Legal Basis for Processing

Under the Data Privacy Act of 2012, glboss processes your personal information on the following lawful bases:

• Contractual necessity: Processing required to perform the contract between you and glboss, including account registration, transaction processing, and the delivery of gaming services;
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act itself;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided such interests are not overridden by your privacy rights;
• Consent: Where processing is not covered by the above bases — such as optional marketing communications — glboss will request your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

6 Disclosure & Data Sharing

glboss does not sell or rent your personal data to third parties. We may share your personal information with the following categories of recipients, strictly to the extent necessary for the stated purpose:

• PAGCOR and regulatory authorities: Disclosure of player data as required under our gaming licence, including for regulatory inspections, dispute resolution, and mandatory reporting under the AMLA;
• Payment processors: Financial details necessary for processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard. These processors operate under their own privacy frameworks and are bound by data processing agreements with glboss;
• KYC verification providers: Identity documents and verification data shared with licensed identity verification service providers for age and identity confirmation purposes;
• Game software providers: Aggregated and pseudonymized session data shared with third-party game developers solely for the purpose of resolving technical disputes or game malfunction investigations;
• Fraud prevention and security services: Technical and account data shared with security service providers for the purposes of detecting and preventing fraudulent activity on the platform;
• Legal and law enforcement: Personal data disclosed where required by court order, subpoena, or lawful request from Philippine law enforcement agencies, the National Privacy Commission, or other competent authorities.

All third parties with whom glboss shares personal data are contractually required to maintain appropriate technical and organizational security measures and to process data only in accordance with glboss's instructions and applicable Philippine law.

7 Cookies & Tracking Technologies

glboss uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files placed on your device when you access the glboss website. The types of cookies we use include:

• Strictly necessary cookies: Essential for the platform to function, including session management, authentication, and security. These cookies cannot be disabled without affecting core platform functionality;
• Functional cookies: Used to remember your preferences, language settings, and previous activity to provide a more personalized experience;
• Analytics cookies: Aggregated, anonymized data used to understand how players interact with the glboss platform, which pages are most visited, and where technical improvements are needed;
• Security cookies: Used to detect and prevent fraudulent login attempts, unauthorized account access, and bot activity on the platform.

glboss does not use third-party advertising or behavioral tracking cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to log in and use the glboss platform. Continued use of the platform constitutes consent to our use of the cookies described above.

8 Data Security

glboss implements comprehensive technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the glboss platform;
• AES-256 encryption for sensitive data stored in glboss databases, including identity documents and financial records;
• Multi-factor authentication options available for all player accounts;
• Regular independent security audits and penetration testing conducted by qualified cybersecurity professionals;
• Role-based access controls limiting internal employee access to personal data on a strict need-to-know basis;
• Continuous security monitoring and intrusion detection systems operating 24/7;
• Secure data backup procedures with tested recovery protocols.

While glboss takes every reasonable precaution to protect your data, no system can guarantee absolute security. In the event of a personal data breach that is likely to result in serious harm to your rights and freedoms, glboss will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the requirements of the Data Privacy Act of 2012.

9 Data Retention

glboss retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and regulatory obligations. Specific retention periods are governed by the following principles:

• Active account data: Retained for the duration of your account's existence on the glboss platform;
• KYC and identity verification records: Retained for a minimum of five (5) years following account closure, as required by the Anti-Money Laundering Act of the Philippines;
• Financial transaction records: Retained for a minimum of five (5) years in compliance with PAGCOR record-keeping requirements and AMLA obligations;
• Responsible gaming records: Self-exclusion and limit records retained for the duration required to enforce ongoing restrictions, and for a minimum period after expiry to prevent circumvention;
• Communications and support records: Retained for three (3) years from the date of last interaction to support dispute resolution and regulatory investigations;
• Technical and log data: Retained for twelve (12) months for security monitoring purposes, after which it is securely deleted or anonymized.

Upon expiry of the applicable retention period, glboss will securely delete or irreversibly anonymize your personal data so that it can no longer be attributed to you as an individual.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by glboss:

• Right to be informed: The right to know what personal data glboss collects about you and how it is used, as set out in this Privacy Policy;
• Right of access: The right to request a copy of the personal data glboss holds about you, along with information about how it is processed;
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data glboss holds about you;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations;
• Right to object: The right to object to certain types of processing of your personal data, including processing based on legitimate interests;
• Right to data portability: The right to receive your personal data in a structured, commonly used format where processing is based on consent or contract;
• Right to file a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data has been processed in violation of the Data Privacy Act.

To exercise any of these rights, please contact the glboss Data Protection Officer using the contact details in Clause 14. glboss will respond to all data subject requests within fifteen (15) business days of receipt, or within the timeframes required by the National Privacy Commission where different. We may request verification of your identity before processing any data subject request to ensure the security of your information.

11 Third-Party Links

The glboss platform may contain references to third-party game providers and payment processors whose services integrate with the glboss platform. These third parties operate under their own privacy policies and data processing frameworks. glboss is not responsible for the privacy practices of third-party service providers, and we encourage you to review the relevant privacy policies of any third-party services you interact with in connection with your use of glboss.

glboss does not include external website links within the platform that would redirect you away from the glboss domain for marketing or informational purposes. Any third-party integrations on the platform are strictly functional — for payment processing or game delivery — and are governed by the data processing agreements described in Clause 6.

12 Children's Privacy

The glboss platform is strictly intended for persons aged 21 years and above, in accordance with PAGCOR regulations and Philippine law governing casino-style gambling. glboss does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under the age of 21, we will immediately close the associated account, refund any deposited funds to the payment method of origin, delete all associated personal data to the extent permitted by applicable law, and where required, report the matter to PAGCOR. If you believe that glboss may have inadvertently collected data from an underage individual, please contact us immediately using the details in Clause 14.

13 Changes to This Privacy Policy

glboss reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes to this Privacy Policy will be communicated to registered players via the email address on file or via an in-platform notification prior to the changes taking effect.

The "Last Updated" date at the top of this document indicates when the most recent revision was made. Your continued use of the glboss platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes and your acceptance of the revised policy. If you do not agree with any changes to this Privacy Policy, you must cease using the glboss platform and may request account closure in accordance with the Terms and Conditions.

14 Contact Our Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by glboss, please contact our designated Data Protection Officer through the following channels:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the glboss platform

Please mark any data privacy-related correspondence with the subject line "Data Privacy Request — [Your Full Name]" to ensure prompt routing to the Data Protection Officer. glboss aims to acknowledge all privacy-related requests within three (3) business days and to provide a substantive response within fifteen (15) business days.

If you are not satisfied with our response, you have the right to escalate your concern to the National Privacy Commission of the Philippines, the independent government body responsible for enforcing the Data Privacy Act of 2012.