gl678 is committed to protecting the personal data of every player on the platform. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have under Philippine law as a gl678 account holder.
gl678 processes all personal data in strict compliance with Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations as enforced by the National Privacy Commission (NPC) of the Philippines.
All data transmitted between your device and gl678's servers is encrypted using industry-standard SSL/TLS technology. Your login credentials, payment details, and personal information travel over a secure, encrypted connection at all times.
Philippine law grants you specific rights over your personal data — including the right to access, correct, object to processing, and request deletion. gl678 provides accessible tools and a dedicated contact channel for exercising all of these rights.
gl678 does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Data sharing with third parties is limited to what is required by PAGCOR, Philippine law, or the technical operation of the platform by vetted service providers.
As a PAGCOR-licensed operator, gl678 is legally required to collect and verify identity information for KYC purposes and to report certain transactions to the Anti-Money Laundering Council (AMLC). These obligations are non-negotiable and override individual data preferences where required by law.
In the event of a personal data breach that poses a real risk to affected individuals, gl678 will notify the National Privacy Commission within 72 hours of discovery and will directly notify affected Account Holders without undue delay, in accordance with NPC requirements.
gl678 takes data privacy seriously. As a PAGCOR-licensed online gaming platform operating in the Philippines, gl678 is subject to both PAGCOR's licensing requirements and the National Privacy Commission's enforcement of the Data Privacy Act of 2012 (Republic Act No. 10173). These two regulatory frameworks together define the minimum standard of data protection that gl678 is legally required to meet — and gl678 treats them as a baseline rather than a ceiling.
This Privacy Policy is designed to give every gl678 Account Holder a clear, honest account of what personal data the platform collects, why it collects it, how it is used and protected, and what rights you can exercise as a data subject under Philippine law. If you have questions that this Policy does not answer clearly, you can contact gl678's Data Protection Officer directly using the contact information in Section 17.
For the purposes of the Data Privacy Act of 2012, gl678 is the Personal Information Controller (PIC) in respect of the personal data collected through the gl678.org platform. As the PIC, gl678 determines the purposes for which and the manner in which personal data is processed.
gl678 has appointed a Data Protection Officer (DPO) responsible for overseeing the Platform's compliance with the Data Privacy Act, the NPC's issuances, and this Privacy Policy. Contact details for gl678's DPO are provided in Section 17 of this Policy.
gl678 collects the following categories of personal data from Account Holders and Platform users:
gl678 collects personal data through the following channels:
Under the Data Privacy Act of 2012, gl678's processing of personal data is based on the following legal grounds:
| Processing Purpose | Legal Basis |
|---|---|
| Account creation and management | Contractual necessity (performance of the account agreement) |
| Age verification (21+ requirement) | Legal obligation (PAGCOR regulatory requirement) |
| KYC identity verification | Legal obligation (PAGCOR and AMLC requirements) |
| Processing deposits and withdrawals | Contractual necessity |
| AML transaction monitoring and reporting | Legal obligation (RA 9160 as amended) |
| Responsible gaming monitoring | Legal obligation (PAGCOR responsible gaming requirements) |
| Customer support | Contractual necessity and legitimate interest |
| Platform security and fraud prevention | Legitimate interest |
| Marketing communications | Consent (opt-in at registration or subsequently) |
| Platform analytics and improvement | Legitimate interest |
gl678 uses the personal data it collects for the following purposes:
gl678 does not sell your personal data. Data is shared with third parties only as described below:
gl678 is legally required to disclose personal data and transaction records to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, and courts of competent jurisdiction when required by Philippine law, regulation, or lawful order. Such disclosures are mandatory and cannot be withheld based on individual player preferences.
To process your deposits and withdrawals, gl678 shares necessary financial data with payment service providers including GCash, PayMaya, and the respective banking institutions for bank-transfer transactions. All payment partners are required to process data in accordance with applicable Philippine financial regulations and data protection law.
gl678 may use third-party KYC technology providers to assist with identity document verification and liveness detection. These providers process identity data solely for the purpose of KYC verification and are bound by data processing agreements and applicable data protection law.
gl678 works with technology vendors — including cloud hosting providers, analytics platforms, and customer support software providers — who may process personal data as Personal Information Processors (PIP) on gl678's behalf. All PIPs are engaged under written contracts that mandate data protection standards consistent with the Data Privacy Act.
Game providers whose titles are available on gl678 may receive limited gameplay data (session identifiers, wager amounts, game outcomes) necessary for game function, RNG certification, and dispute resolution. No identity data beyond an anonymized player identifier is shared with game providers for routine game delivery.
Some of gl678's third-party service providers — particularly cloud infrastructure and analytics vendors — may process data on servers located outside the Philippines. Where such international data transfers occur, gl678 ensures that the transfer is subject to appropriate safeguards, including contractual clauses that impose data protection standards equivalent to those required by the Data Privacy Act of 2012.
gl678 evaluates the data protection laws of recipient jurisdictions and, where required by the NPC, implements additional safeguards to protect Philippine residents' personal data transferred outside the country.
gl678 retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods required by law:
| Data Category | Minimum Retention Period | Basis |
|---|---|---|
| Account registration data | 5 years after account closure | PAGCOR regulatory requirement |
| KYC and identity verification documents | 5 years after account closure | AMLC / RA 9160 requirement |
| Transaction records | 5 years after account closure | AMLC / RA 9160 requirement |
| Gaming activity logs | 5 years after account closure | PAGCOR regulatory requirement |
| Customer support records | 3 years after account closure | Legitimate interest / dispute resolution |
| Marketing consent records | Duration of consent + 3 years | NPC compliance requirement |
Following the expiry of applicable retention periods, personal data is securely deleted or anonymized in accordance with gl678's data disposal procedures.
gl678 uses cookies and similar tracking technologies on the gl678.org platform to support the following functions:
gl678 does not use third-party advertising cookies or allow external advertising networks to set cookies on gl678.org. Players may manage cookie preferences through their browser settings. Note that disabling essential cookies may prevent access to core Platform features including the login portal and game lobby.
gl678 sends marketing communications — including promotional offers, new game announcements, bonus notifications, and seasonal campaigns — only to Account Holders who have provided explicit consent to receive such communications. Consent is obtained at the point of account registration and can be withdrawn at any time.
To opt out of marketing communications from gl678, you may:
Opting out of marketing communications does not affect the delivery of transactional communications, which are sent on the basis of contractual necessity (e.g., deposit confirmations, withdrawal notifications, account security alerts, and mandatory responsible gaming notifications).
Age verification is a mandatory step of the KYC process. gl678 will not permit real-money wagering until age has been positively verified against a government-issued identity document confirming the Account Holder is 21 years of age or older.
As a data subject under the Data Privacy Act of 2012, gl678 Account Holders have the following rights with respect to their personal data:
You have the right to be informed of the personal data being collected, the purposes of processing, and your rights as a data subject — all of which are addressed by this Privacy Policy.
You have the right to request a copy of the personal data gl678 holds about you, including information on how it is being processed and with whom it has been shared.
You have the right to request correction of inaccurate, incomplete, or outdated personal data held in your gl678 account. Many details can be updated directly in account settings; others require a support request.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to gl678's legal retention obligations under PAGCOR and AMLC requirements.
You have the right to object to the processing of your personal data where that processing is based on legitimate interest, including objecting to direct marketing communications at any time.
You have the right to receive a copy of the personal data you have provided to gl678 in a structured, commonly used, machine-readable format for transfer to another service provider where technically feasible.
If you believe gl678 has not handled your personal data in compliance with the Data Privacy Act, you have the right to file a complaint with the National Privacy Commission of the Philippines.
The Data Privacy Act provides the right to claim compensation for damages sustained due to inaccurate, incomplete, false, unlawfully obtained, or unauthorized use of personal data where such damage is attributable to gl678.
To exercise any of the above rights, please contact gl678's Data Protection Officer at the contact details provided in Section 17. gl678 will respond to verified data subject requests within thirty (30) days of receipt, as required by NPC regulations.
gl678 implements the following technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, or destruction:
No security system is impenetrable. In the event of a data breach that poses a real risk of serious harm to Account Holders, gl678 will follow the breach notification procedures described in the introduction to this Policy.
The gl678 platform may contain links to third-party websites or resources for informational purposes. gl678 is not responsible for the privacy practices, content, or data security of any third-party website. Players who navigate away from gl678.org to a third-party site do so at their own discretion, and the privacy practices of that third-party site are governed by its own privacy policy rather than this one.
gl678 recommends that players review the privacy policies of any third-party sites they visit, particularly those involving financial transactions or personal data submission.
gl678 reserves the right to update this Privacy Policy at any time in response to changes in Philippine privacy law, NPC guidance, PAGCOR regulatory requirements, or gl678's internal data practices. The effective date at the top of this Policy will be updated to reflect the date on which any revised version takes effect.
Material changes to this Privacy Policy — meaning changes that significantly affect your rights or how your data is used — will be communicated to all Account Holders via registered email at least fourteen (14) days before the changes take effect. Non-material clarifications or corrections may be published without prior notice.
Continued use of the gl678 platform following the effective date of an updated Privacy Policy constitutes acknowledgment of the revised terms. If you do not agree with a material change, you have the right to close your account before the change takes effect.
For any questions, concerns, or requests relating to this Privacy Policy or gl678's handling of your personal data, please contact gl678's Data Protection Officer through the following channel:
gl678 will acknowledge receipt of privacy requests within two (2) business days and respond to verified requests within thirty (30) days in accordance with NPC requirements. Where a request requires additional verification of identity, gl678 may request supporting documentation before processing.
gl678 is a PAGCOR-licensed platform that handles your personal data with the same seriousness it applies to every peso you deposit. Join Filipino players who game with confidence on a regulated, transparent platform.