gpeeya Privacy Policy – How We Protect Your Personal Information

1. Introduction and Scope

This Privacy Policy ("Policy") governs the collection, processing, use, storage, disclosure, and protection of personal information by gpeeya ("Company," "we," "us," "our") from users ("Player," "User," "you") of the gpeeya website located at gpeeya.cam and all related services, games, mobile applications, and features (collectively, the "Services").

By accessing, registering an account with, or using any portion of the gpeeya platform, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with these practices, you must immediately discontinue use of our Services and may not create an account or participate in gaming activities offered by gpeeya.

gpeeya complies with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations issued by the National Privacy Commission of the Philippines. We are committed to handling your personal data responsibly, transparently, and in accordance with applicable Philippine law.

2. Information We Collect

2.1 Information You Provide Directly

When you register an account with gpeeya, we collect personal information that you voluntarily provide, including but not limited to:

• Identity Information: Full legal name, date of birth, gender, nationality
• Contact Information: Email address, Philippine mobile telephone number, residential address
• Identification Documents: Government-issued photo ID (Philippine passport, driver's license, UMID, PRC ID, SSS ID, or other acceptable forms), selfie photograph holding ID for identity verification
• Financial Information: Payment method details (GCash mobile number, Maya account, bank account numbers for BPI, BDO, Metrobank, UnionBank, and other Philippine banks), transaction history including deposits, withdrawals, and wagers
• Account Credentials: Username, password (stored in encrypted form), security questions and answers
• Communications: Messages sent to customer support, chat transcripts, email correspondence, survey responses, feedback submissions

2.2 Information Collected Automatically

When you access or use gpeeya's Services, we automatically collect certain technical and usage information through cookies, web beacons, log files, and similar tracking technologies:

• Device Information: Device type (smartphone, tablet, desktop), operating system (iOS, Android, Windows, macOS), browser type and version, screen resolution, device identifiers (IMEI, UDID, Android ID)
• Connection Information: IP address, geolocation data (country, region, city derived from IP address or GPS with your consent), internet service provider
• Usage Information: Pages visited, games played, time spent on platform, clickstream data, referring/exit pages, date and time stamps, search queries, bet history, win/loss records
• Performance Data: Error reports, crash logs, loading times, system performance metrics

2.3 Information from Third-Party Sources

gpeeya may collect information about you from third-party sources to verify your identity, prevent fraud, and comply with legal obligations:

• Payment Processors: Transaction confirmation, payment status, fraud risk scores from GCash, Maya, Philippine banks, and other payment service providers
• Identity Verification Services: Results of identity checks, age verification, sanctions screening, adverse media screening
• Fraud Prevention Services: Device fingerprinting data, fraud risk assessments, duplicate account detection
• Marketing Partners: Referral source, affiliate identifier (only if you accessed gpeeya through a marketing partner link)

3. How We Use Your Information

gpeeya processes your personal information for the following purposes, each with a specific legal basis under the Data Privacy Act of 2012:

3.1 Account Management and Service Provision (Contractual Performance)

• Create and maintain your gpeeya account
• Authenticate your identity and verify your age (21+ requirement)
• Process deposits, withdrawals, and other financial transactions
• Enable gameplay across slots, live dealer games, bingo, fishing arcade, Callbreak, and sports betting
• Track your gaming activity, bet history, winnings, and losses
• Provide customer support and respond to your inquiries
• Send transactional communications (account confirmations, withdrawal approvals, password resets)

3.2 Legal and Regulatory Compliance (Legal Obligation)

• Verify your identity and age in accordance with PAGCOR regulations
• Comply with anti-money laundering (AML) and counter-terrorism financing (CTF) requirements under Republic Act No. 9160 as amended
• Conduct Know Your Customer (KYC) due diligence and enhanced due diligence when required
• Report suspicious transactions to the Anti-Money Laundering Council (AMLC) when legally obligated
• Maintain records as required by gaming regulations and tax authorities
• Respond to lawful requests from law enforcement, regulators, and courts

3.3 Fraud Prevention and Security (Legitimate Interest)

• Detect and prevent fraudulent transactions, multiple accounts, and abuse of bonuses
• Monitor for unusual betting patterns, collusion, and cheating
• Protect against unauthorized access to accounts and data breaches
• Verify geolocation to ensure players are physically located in the Philippines
• Conduct internal security audits and risk assessments

3.4 Marketing and Promotions (Consent / Legitimate Interest)

• Send promotional emails about bonuses, tournaments, and new games (with your consent)
• Deliver personalized bonus offers based on your gameplay preferences
• Notify you of loyalty program rewards and VIP tier upgrades
• Conduct market research, surveys, and user experience studies

Note: You may opt out of marketing communications at any time by clicking "Unsubscribe" in emails or adjusting your communication preferences in account settings. Opting out will not affect transactional communications.

3.5 Platform Improvement and Analytics (Legitimate Interest)

• Analyze usage patterns to improve game selection, user interface, and performance
• Conduct A/B testing for features, layouts, and promotional campaigns
• Generate aggregated statistics and reports (anonymized data with no personal identifiers)
• Troubleshoot technical issues, bugs, and system errors
• Optimize mobile app performance and loading speeds

4. How We Share Your Information

gpeeya does not sell your personal information to third parties for their own marketing purposes. However, we may share your information with specific categories of recipients under the following circumstances:

4.1 Service Providers and Business Partners

We share personal data with trusted third-party service providers who assist us in operating the gpeeya platform:

Category	Purpose	Examples
Payment Processors	Process deposits and withdrawals	GCash, Maya, Philippine banks, payment gateways
Game Providers	Deliver casino games and live dealer streams	Evolution Gaming, Pragmatic Play, NetEnt, others
Identity Verification	Verify age, identity, and compliance	KYC/AML verification service providers
Fraud Prevention	Detect fraud and duplicate accounts	Device fingerprinting and fraud detection services
Cloud Hosting	Store data and host platform infrastructure	Secure cloud service providers
Customer Support	Provide live chat, email support, ticketing	Customer service platform providers
Marketing & Analytics	Analyze usage, send emails, track campaigns	Email service providers, analytics platforms

All service providers are contractually bound to protect your personal data, use it only for the specified purposes, and comply with applicable data protection laws. We conduct due diligence before engaging service providers and regularly audit their security practices.

4.2 Legal and Regulatory Authorities

We may disclose your personal information to government agencies, regulators, and law enforcement when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests
• Report suspicious transactions to the Anti-Money Laundering Council (AMLC)
• Cooperate with PAGCOR investigations and audits
• Respond to lawful requests from Philippine National Police (PNP), National Bureau of Investigation (NBI), or other law enforcement
• Protect the rights, property, or safety of gpeeya, our users, or the public

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, bankruptcy, or other business transaction involving gpeeya, your personal information may be transferred to the acquiring entity or successor organization. You will be notified of any such change via email or prominent notice on the gpeeya website.

4.4 With Your Consent

In situations not covered above, we will seek your explicit consent before sharing your personal information with third parties.

5. Data Security Measures

gpeeya implements robust technical, organizational, and administrative security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

5.1 Technical Security

• Encryption: All data transmitted between your device and gpeeya servers is encrypted using 256-bit SSL/TLS protocols (the same standard used by banks)
• Data at Rest Encryption: Sensitive personal data stored in databases is encrypted using AES-256 encryption
• Password Protection: User passwords are hashed using bcrypt with salt, making them unreadable even to gpeeya employees
• Firewalls and Intrusion Detection: Multi-layered firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) protect against cyberattacks
• Regular Security Audits: Third-party cybersecurity firms conduct penetration testing and vulnerability assessments quarterly

5.2 Organizational Security

• Access Controls: Personal data is accessible only to authorized gpeeya employees who require access to perform their job duties
• Role-Based Permissions: Employees are granted the minimum necessary access based on their role (principle of least privilege)
• Employee Training: All staff receive mandatory data privacy and security training upon hiring and annually thereafter
• Confidentiality Agreements: Employees and contractors sign non-disclosure agreements (NDAs) prohibiting unauthorized use or disclosure of personal data

5.3 Data Retention and Deletion

gpeeya retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations:

• Active Accounts: Personal data is retained for the duration of your account's active status and for a reasonable period thereafter to resolve disputes or comply with legal requirements
• Closed Accounts: After voluntary account closure, personal data is retained for seven (7) years to comply with anti-money laundering record-keeping requirements under Philippine law
• Marketing Data: If you opt out of marketing communications, your email address is retained in a suppression list to ensure you do not receive further marketing (but is not used for any other purpose)
• Inactive Accounts: Accounts with no login activity for 24 consecutive months may be deemed inactive. You will receive notice via email before any account closure or data deletion

6. Cookies and Tracking Technologies

gpeeya uses cookies, web beacons, pixels, and similar tracking technologies to enhance user experience, analyze platform performance, and deliver personalized content.

6.1 Types of Cookies We Use

• Essential Cookies: Required for platform functionality, including account login, session management, security, and fraud prevention. These cannot be disabled.
• Performance Cookies: Collect anonymous data on how users interact with gpeeya, including pages visited, load times, and errors. Used to improve platform performance.
• Functional Cookies: Remember your preferences (language, currency display, game favorites) to provide a personalized experience.
• Marketing Cookies: Track referral sources and measure effectiveness of marketing campaigns. These cookies may be set by third-party advertising partners.

6.2 Managing Cookie Preferences

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may prevent you from accessing certain features of gpeeya. Disabling performance and marketing cookies will not affect core functionality.

6.3 Third-Party Cookies

Some third-party service providers (such as analytics platforms and advertising networks) may place cookies on your device when you use gpeeya. These third parties have their own privacy policies, and gpeeya does not control their data practices. We encourage you to review the privacy policies of these third parties.

7. International Data Transfers

gpeeya is a Philippine-based platform serving Filipino players. However, some of our service providers (such as cloud hosting, payment processors, and game providers) may store or process data on servers located outside the Philippines.

When personal data is transferred internationally, gpeeya ensures that appropriate safeguards are in place, including:

• Contractual data protection clauses with service providers
• Verification that the recipient country provides adequate data protection under Philippine law
• Use of secure, encrypted data transmission protocols

8. Your Privacy Rights

Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights regarding your personal data:

8.1 Right to Access

You have the right to request a copy of the personal information gpeeya holds about you. Upon request, we will provide a summary of your personal data in a commonly used electronic format.

8.2 Right to Correction

If your personal information is inaccurate, incomplete, or outdated, you have the right to request correction or update. You can update most information directly in your account settings, or contact customer support for assistance.

8.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data in the following circumstances:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent (where processing is based on consent)
• You object to processing and there are no overriding legitimate grounds for continued processing
• The data has been unlawfully processed

However, gpeeya may retain certain data to comply with legal obligations (e.g., anti-money laundering record-keeping requirements, tax records, dispute resolution) even after a deletion request.

8.4 Right to Object

You have the right to object to processing of your personal data when such processing is based on legitimate interest or for direct marketing purposes. Upon receiving an objection, gpeeya will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller without hindrance from gpeeya.

8.6 Right to Lodge a Complaint

If you believe gpeeya has violated your privacy rights or failed to comply with the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Contact details for the National Privacy Commission can be found at their official website.

8.7 How to Exercise Your Rights

To exercise any of the rights above, please contact gpeeya's Data Protection Officer via email at [email protected] with the subject line "Data Privacy Request." Include your full name, registered email address, and a clear description of the right you wish to exercise. We will respond to verified requests within fifteen (15) business days.

9. Children's Privacy

gpeeya's services are intended exclusively for individuals aged 21 years and above. We do not knowingly collect personal information from individuals under 21. If you are under 21, you must not access, register, or use any portion of gpeeya's platform.

If we become aware that we have collected personal information from a person under 21 without verification of parental consent, we will take steps to delete that information immediately. If you believe a minor has provided personal information to gpeeya, please contact us at [email protected] so we can take appropriate action.

10. Changes to This Privacy Policy

gpeeya reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Any changes will be effective immediately upon posting the revised Privacy Policy on the gpeeya.cam website.

Material changes that significantly affect your rights will be communicated via email to your registered email address or through prominent notice on the platform. Your continued use of gpeeya's services following the posting of changes constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. The "Last Updated" date at the top of this document indicates when the most recent revision was made.

11. Contact Information

If you have questions, concerns, or complaints regarding this Privacy Policy or gpeeya's data practices, please contact us:

• Email: [email protected]
• Subject Line: "Privacy Policy Inquiry" or "Data Protection Request"
• Live Chat: Available 24/7 through the gpeeya website

gpeeya is committed to addressing your privacy concerns promptly and transparently. We aim to respond to all privacy-related inquiries within 48 hours and resolve data subject requests within fifteen (15) business days.