ghplay is committed to protecting the personal information of every Filipino player on our platform. This Privacy Policy explains what data we collect, why we collect it, how we protect it, and the rights you hold over your information under Philippine law.
These principles guide how every ghplay team member, system, and process handles personal information belonging to our players.
ghplay collects only the personal data that is strictly necessary to provide our services, satisfy PAGCOR regulatory requirements, and comply with Philippine Anti-Money Laundering Act obligations. We do not collect data for the sake of it.
We will always tell you what data we hold about you, why we hold it, and how long we keep it. There are no hidden data practices at ghplay. This Privacy Policy is written in plain English and kept accessible on our platform at all times.
Your personal data is protected using 256-bit SSL encryption in transit and AES-256 encryption at rest. Access to personal data within ghplay is restricted on a need-to-know basis and subject to strict internal access controls and audit logging.
Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have enforceable rights over your personal data. ghplay honours all of these rights — including access, correction, deletion, portability, and the right to object — promptly and without charge.
ghplay does not sell your personal data. We share it only with regulated service providers who need it to deliver our platform, or when required to do so by PAGCOR, the National Privacy Commission, or Philippine law enforcement with valid legal authority.
We hold your personal data only for as long as it is needed — to operate your account, to satisfy our PAGCOR regulatory obligations (typically five years from account closure), or as required by Philippine law. After that, data is securely deleted or anonymised.
This Privacy Policy is issued by ghplay ("ghplay", "we", "us", "our"), the operator of the online gaming platform accessible at ghplay.co. ghplay acts as the Personal Information Controller in respect of all personal data collected through the ghplay platform, as defined under Republic Act No. 10173, the Philippine Data Privacy Act of 2012 (the "DPA"), and its Implementing Rules and Regulations.
As a PAGCOR-regulated operator, ghplay is required to collect and process certain categories of personal data in order to verify the identity and eligibility of players, process financial transactions, comply with anti-money laundering obligations, and maintain the integrity of our gaming platform. This Privacy Policy describes how ghplay fulfils these obligations while safeguarding the privacy rights of every Filipino player.
Scope of this Policy: This Privacy Policy applies to all personal data collected by ghplay through ghplay.co, any associated mobile web interface, customer support interactions, and any other point of contact between you and ghplay. It does not apply to third-party websites, game providers, or payment processors that maintain their own separate privacy policies.
ghplay processes personal data only where a valid legal basis exists under the Data Privacy Act of 2012. The following legal bases apply to our data processing activities:
ghplay collects personal data through several channels — directly from you during account registration and ongoing platform use, automatically through your interactions with our platform, and from third parties where required for verification and regulatory compliance. The following table summarises the categories of data we collect, the source, and the purpose.
| Data Category | Examples | Source | Primary Purpose |
|---|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number and type | You (registration & KYC) | Age verification, KYC, PAGCOR compliance |
| Contact Data | Philippine mobile number, email address, residential address | You (registration) | Account communication, 2FA, support |
| Financial Data | GCash account reference, Maya account reference, bank account name and last digits, transaction records | You (deposit/withdrawal); payment processors | Payment processing, AML compliance, withdrawal verification |
| Identity Document Data | Scans or photographs of national ID, passport, driver's licence, SSS/UMID card | You (KYC submission) | Identity verification, PAGCOR regulatory requirements |
| Gaming Activity Data | Game session logs, wager amounts, win/loss records, bonus usage, session durations, game preferences | Automatically (platform) | Game provision, bonus management, responsible gaming monitoring |
| Technical Data | IP address, device type and OS, browser type, cookie identifiers, login timestamps, approximate geolocation | Automatically (platform) | Security, fraud prevention, platform optimisation |
| Support & Communications Data | Live chat transcripts, support ticket content, email correspondence | You (support interactions) | Complaint resolution, service improvement, regulatory record-keeping |
| Marketing Preference Data | Consent records, promotional opt-in/opt-out status, communication channel preferences | You (account settings) | Targeted promotions (with consent), marketing suppression lists |
ghplay does not collect special categories of sensitive personal data (as defined under Section 13 of the DPA) unless explicitly required by law. We do not collect racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data beyond standard government-issued ID photographs required for KYC.
ghplay uses personal data collected from Filipino players for the following purposes:
Account Management: Creating and maintaining your ghplay account, authenticating your identity at login, managing your account settings and preferences, and communicating important account notices including security alerts and transaction confirmations.
Regulatory Compliance: Verifying your age (21+ requirement under Philippine law), completing Know Your Customer (KYC) verification in accordance with PAGCOR requirements, performing Anti-Money Laundering (AML) transaction monitoring under the Anti-Money Laundering Act, and filing mandatory regulatory reports to PAGCOR and the Anti-Money Laundering Council (AMLC) where applicable.
Payment Processing: Processing deposits from and withdrawals to your GCash, Maya, bank account, or other verified Philippine payment method; verifying payment method ownership; maintaining transaction records required by Philippine financial regulations.
Game Delivery and Platform Operation: Delivering the ghplay casino platform, live dealer games, sports betting services, and all other features; calculating and awarding winnings; managing bonus balances and wagering requirements; providing personalised game recommendations based on your stated preferences.
Responsible Gaming: Monitoring gaming patterns to identify indicators of problem gambling; administering deposit limits, loss limits, self-exclusion, and cooling-off periods you have requested; fulfilling our obligations under PAGCOR responsible gaming guidelines.
Fraud Prevention and Security: Detecting and preventing fraudulent account activity, unauthorised access, bonus abuse, collusion, money laundering, and other prohibited conduct; maintaining platform integrity.
Marketing Communications (with Consent): Sending promotional offers, bonus notifications, and platform updates by SMS or email where you have consented to receive such communications. You may withdraw this consent at any time via your account settings or by contacting support.
ghplay uses cookies and similar tracking technologies on the ghplay.co platform. A cookie is a small text file placed on your device by a website. Cookies allow ghplay to recognise returning players, maintain session security, remember preferences, and collect platform analytics data.
Types of Cookies ghplay Uses:
ghplay does not deploy advertising cookies or allow third-party advertising networks to place tracking cookies on the platform. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the ghplay platform.
ghplay does not sell your personal data to any third party. We share personal data only where necessary to deliver our services, fulfil regulatory obligations, or protect the security of our platform. The categories of recipients with whom ghplay may share your data are:
All third-party recipients who process personal data on ghplay's behalf have entered into data processing agreements that impose obligations consistent with the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations.
Some of ghplay's service providers and game technology partners operate from outside the Philippines. Where personal data is transferred internationally in connection with such providers, ghplay ensures that appropriate safeguards are in place as required by National Privacy Commission guidelines on cross-border data transfers.
Safeguards applied to international data transfers include: contractual clauses that impose data protection obligations equivalent to those under the Philippine DPA; transfers only to jurisdictions that the NPC has recognised as providing adequate data protection; or transfers conducted in accordance with binding corporate rules where applicable.
ghplay will not transfer your personal data to a country or territory where adequate protections for your DPA rights cannot be confirmed. If you have questions about international transfers involving your data, you may contact our Data Privacy Officer using the details in Section 14 of this Policy.
ghplay implements comprehensive technical, organisational, and physical security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures are regularly reviewed and updated to reflect evolving security standards and threat landscapes.
Technical Measures include:
Organisational Measures include:
Data Breach Notification: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ghplay will notify the National Privacy Commission within 72 hours of becoming aware of the breach and will communicate directly with affected players as required by Section 20 of the DPA.
ghplay retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to satisfy ghplay's legal and regulatory obligations, or to resolve disputes and enforce ghplay's agreements. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & KYC Data | Duration of account + 5 years after closure | PAGCOR and AMLC regulatory requirements |
| Financial Transaction Records | 5 years from transaction date | AMLA record-keeping obligations |
| Gaming Session Logs | Duration of account + 5 years after closure | PAGCOR regulatory requirements |
| Identity Documents (KYC) | 5 years from account closure | PAGCOR and AMLA |
| Support Correspondence | 3 years from last interaction | Dispute resolution and complaint handling |
| Marketing Consent Records | Duration of consent + 2 years after withdrawal | DPA consent management obligations |
| Security / Fraud Logs | Up to 2 years from creation | Fraud investigation and platform security |
At the end of the applicable retention period, ghplay will securely delete or anonymise personal data in a manner that prevents reconstruction. Where anonymisation is technically feasible, ghplay may retain anonymised aggregate data for statistical and analytics purposes indefinitely.
Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, you have the following rights in respect of your personal data held by ghplay. ghplay will respond to all data rights requests within fifteen (15) business days of receipt, or within the timeframe prescribed by the NPC where that differs.
Request a copy of the personal data ghplay holds about you and information about how it is processed.
Request correction of inaccurate or incomplete personal data without undue delay.
Request deletion of your personal data where retention is no longer legally required or justified.
Object to processing based on legitimate interests or to processing for direct marketing purposes.
Receive your personal data in a structured, machine-readable format where technically feasible.
Request suspension of processing while the accuracy or legitimacy of data is being contested.
Lodge a complaint with the National Privacy Commission if you believe ghplay has breached your data rights.
Be informed of what personal data is being collected, used, and shared before or at the time of collection.
To exercise any of these rights, please contact ghplay's Data Privacy Officer using the contact details provided in Section 14 of this Policy. ghplay will not charge a fee for exercising your data rights except in circumstances of manifestly unfounded or excessive requests, as permitted under NPC guidelines.
Please note that certain rights (particularly erasure and suspension of processing) are subject to overriding legal obligations. Where ghplay is required by PAGCOR, AMLA, or other applicable Philippine law to retain personal data, we will explain this clearly in our response to your request.
ghplay will send promotional SMS messages, email communications, and in-platform notifications about bonuses, promotions, and platform updates only where you have provided explicit, informed consent to receive such communications during registration or subsequently through your account settings.
Withdrawing Marketing Consent: You may withdraw your consent to marketing communications at any time by: (a) updating your communication preferences in your ghplay account settings; or (b) contacting ghplay support via live chat and requesting removal from marketing communications. Withdrawal of marketing consent will be processed within five (5) business days. Withdrawal of marketing consent does not affect the lawfulness of any marketing communications sent before withdrawal.
ghplay will not send marketing communications to players who have activated self-exclusion or who have indicated a wish to reduce their gaming activity through responsible gaming tools. ghplay's responsible gaming commitment explicitly prohibits marketing to vulnerable players.
The ghplay platform is strictly for adults who are 21 years of age or older, as required by Philippine gaming law and PAGCOR regulations. ghplay does not knowingly collect personal data from individuals under the age of 21 and actively implements age verification measures to prevent minors from accessing the platform.
In the event that ghplay discovers that personal data belonging to a minor has been collected — for example, where a minor has provided false age information during registration — ghplay will: (a) immediately close the account; (b) void all associated wagers and forfeit all balances; (c) delete or securely destroy all personal data collected from the minor to the extent permitted by applicable law; and (d) report the matter to relevant authorities where required.
If you are the parent or guardian of a person under 21 and believe that they may have registered on the ghplay platform, please contact ghplay immediately via the contact details in Section 14 of this Policy.
ghplay reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, changes in Philippine privacy law or PAGCOR regulatory requirements, or changes to the ghplay platform. The effective date of the current version is stated at the top of this document.
When material changes are made to this Privacy Policy — changes that affect your rights or ghplay's obligations in a significant way — ghplay will notify registered players by sending a notification to their registered mobile number or email address at least fourteen (14) days before the changes take effect. Non-material changes (such as corrections to typographical errors or clarifications that do not alter the substance of the Policy) may be made without advance notice.
The current version of this Privacy Policy is always accessible at ghplay.co/privacy-policy. We encourage you to review the Policy periodically. Your continued use of the ghplay platform following the effective date of any amendment constitutes your acknowledgement of the amended Policy.
ghplay has designated a Data Privacy Officer (DPO) in accordance with Section 21 of the DPA and NPC Circular 16-01. The DPO is responsible for overseeing ghplay's compliance with the Data Privacy Act, handling data subject rights requests, and serving as the point of contact between ghplay and the National Privacy Commission.
Data Rights Requests & Privacy Queries:
To exercise your data subject rights, to report a privacy concern, or to ask questions about this Privacy Policy, please contact ghplay's Data Privacy Officer via the official customer support channel at ghplay.co. Include "Privacy Request" in your subject line, your registered mobile number or username, and a description of your request.
General Support Queries:
For non-privacy-related support, contact ghplay's customer support team via the 24/7 live chat at ghplay.co or by email at [email protected] (plain text — not a clickable link). Filipino-speaking agents are available during Philippine prime hours.
National Privacy Commission:
If you are not satisfied with ghplay's response to a data rights request or privacy complaint, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information about the NPC complaints process is publicly available through NPC's official channels.
ghplay is committed to resolving all privacy-related concerns promptly, transparently, and in full compliance with the Data Privacy Act of 2012 and its Implementing Rules and Regulations.
Now that you know how ghplay protects your data, join thousands of Filipino players enjoying 1,200+ casino games with instant GCash payouts and 24/7 Filipino support. Must be 21 years old or above to register.
21+ Only. By registering you agree to the ghplay Terms & Conditions and this Privacy Policy. Play responsibly. PAGCOR regulated.