Your personal data belongs to you. This Privacy Policy explains exactly what information gpeya collects, why we collect it, how we use and protect it, and what rights you have under Philippine law.
Effective Date: January 1, 2026 · Last Updated: January 1, 2026
Six core commitments that define how gpeya handles your personal information — clearly stated, not buried in legalese.
gpeya collects only the personal data that is strictly necessary for account registration, identity verification, payment processing, and compliance with PAGCOR and Philippine AML regulations. We do not collect data speculatively or for purposes beyond what is stated in this policy.
gpeya does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Data is shared only with licensed service providers operating under binding data processing agreements, and with regulatory authorities as required by Philippine law.
gpeya processes all personal data in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and the implementing rules issued by the National Privacy Commission (NPC) of the Philippines. A registered Data Protection Officer oversees all data handling practices.
All personal data stored by gpeya is protected using industry-standard encryption at rest and in transit. Access to player data is restricted to authorized gpeya personnel on a strict need-to-know basis. Security protocols are reviewed and updated regularly.
As a Filipino player, you have the right to access, correct, delete, and port your personal data under the DPA 2012. gpeya provides clear mechanisms for exercising all of these rights. Requests are acknowledged within 72 hours and resolved within 15 business days.
If you have consented to receive marketing communications from gpeya, you can withdraw that consent at any time. Opt-out instructions are included in every marketing message, and you can also manage your communication preferences directly in your Account settings.
Your privacy matters to gpeya. This Privacy Policy describes how gpeya collects, uses, stores, and protects your personal information when you use our platform at gpeya.net. By registering an account or using any gpeya service, you acknowledge that you have read and understood this Privacy Policy. Please read it carefully alongside our Terms & Conditions.
gpeya ("gpeya," "we," "us," "our") is a PAGCOR-licensed online gaming operator offering casino games, sports betting, bingo, and related entertainment services to Filipino players through the platform accessible at gpeya.net. In the course of providing these services, gpeya collects and processes personal data about registered players, prospective players, and visitors to the Platform.
This Privacy Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173, hereinafter "DPA 2012"), its Implementing Rules and Regulations, and relevant issuances of the National Privacy Commission (NPC) of the Philippines. It applies to all personal data collected through gpeya's website, mobile interfaces, customer support channels, and related services.
This policy should be read together with the gpeya Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference. Where this Privacy Policy conflicts with any other gpeya document, this Privacy Policy prevails with respect to privacy and data protection matters.
2.1 Identity of the Controller. For the purposes of the DPA 2012, gpeya is the personal information controller (PIC) in respect of the personal data it collects and processes. As a PAGCOR-licensed operator, gpeya's data handling practices are subject to both NPC oversight and PAGCOR's regulatory requirements concerning player data.
2.2 Data Protection Officer. gpeya has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA 2012 and this Privacy Policy. The DPO can be contacted via the email address listed in Section 15 of this Policy. Players may direct privacy rights requests, complaints, and inquiries to the DPO directly.
2.3 NPC Registration. gpeya's personal data processing systems are registered with the National Privacy Commission of the Philippines in accordance with NPC Circular No. 16-01 and applicable registration requirements.
gpeya collects the following categories of personal data, limited to what is necessary for the purposes described in this Policy:
| Category | Data Elements | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government-issued ID type and number | Account registration, KYC identity verification, age verification (21+ requirement) |
| Contact Data | Email address, mobile number, residential address (including city, province, ZIP code) | Account communications, transaction notifications, customer support |
| Financial Data | E-wallet account references (GCash, PayMaya), bank account details (BPI, BDO, Metrobank, UnionBank, PNB), transaction history | Deposit and withdrawal processing, AML compliance, fraud detection |
| Gameplay Data | Bet history, game session logs, win/loss records, responsible gaming tool settings | Service delivery, regulatory reporting, responsible gaming compliance |
| Technical Data | IP address, device type and identifiers, browser type and version, operating system, geolocation (city/region level) | Fraud prevention, security monitoring, restricted territory compliance |
| Communications Data | Customer support chat logs, email correspondence, feedback submissions | Support delivery, dispute resolution, quality assurance |
| Marketing Data | Communication preferences, promotional opt-in status, marketing interaction history | Sending relevant promotions and offers where consent has been given |
gpeya does not collect sensitive personal information as defined under Section 3(l) of the DPA 2012 (such as health data, religious beliefs, or political affiliation) unless specifically required for responsible gaming assessments, in which case explicit consent will be obtained.
gpeya collects personal data through the following means:
Under the DPA 2012, gpeya relies on the following legal bases for processing your personal data:
gpeya uses the personal data described in Section 3 for the following purposes:
7.1 Service Providers. gpeya shares personal data with carefully selected third-party service providers who assist in delivering the Platform's services. These include: KYC and identity verification providers; payment processors and e-wallet operators (GCash, PayMaya, and Philippine banking partners); game software providers; IT infrastructure and cloud hosting providers; and customer support technology providers. All service providers are bound by data processing agreements that restrict their use of your data to the specific services they provide to gpeya.
7.2 Regulatory and Law Enforcement Authorities. gpeya will disclose personal data to PAGCOR, the AMLC, the NPC, law enforcement agencies, and other competent Philippine authorities where required or permitted by law, including in response to lawful requests, court orders, or regulatory investigations.
7.3 Business Transfers. In the event of a merger, acquisition, or sale of all or a material portion of gpeya's business assets, personal data held by gpeya may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices of the successor entity.
7.4 No Sale of Personal Data. gpeya does not sell, rent, lease, or otherwise transfer your personal data to any third party for their independent marketing or commercial purposes. This commitment is unconditional and applies regardless of the value or volume of data involved.
7.5 Aggregated and Anonymized Data. gpeya may share aggregated, anonymized, or de-identified data — from which individual players cannot be identified — with business partners, researchers, or regulatory bodies for analytical or reporting purposes. Such data does not constitute personal data under the DPA 2012.
8.1 What Are Cookies. Cookies are small text files placed on your device when you visit the gpeya Platform. They help gpeya recognize your device, maintain your session, remember your preferences, and collect analytical information about Platform usage.
8.2 Types of Cookies Used by gpeya.
8.3 Managing Cookies. You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the gpeya Platform. A cookie consent banner is displayed on your first visit to gpeya.net, through which you can manage your cookie preferences.
8.4 No Third-Party Advertising Cookies. gpeya does not allow third-party advertising networks to place tracking cookies on your device through the Platform for the purpose of serving you targeted advertising on other websites.
gpeya retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods:
At the expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents recovery and re-identification.
gpeya implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Key security measures include:
Data Breach Notification: In the event of a personal data breach that poses a real risk of serious harm to affected players, gpeya will notify the NPC within seventy-two (72) hours of discovery, and will notify affected players without undue delay, in accordance with NPC Circular No. 16-03 and applicable DPA 2012 requirements.
As a data subject under the DPA 2012, you have the following rights in relation to your personal data held by gpeya:
To exercise any of the above rights, please contact gpeya's Data Protection Officer using the contact details in Section 15. gpeya will acknowledge your request within seventy-two (72) hours and will provide a substantive response within fifteen (15) business days, or within the period prescribed by the NPC for complex requests.
gpeya will not discriminate against you for exercising your privacy rights. Exercising your rights will not affect your ability to use the Platform, subject to any processing that is strictly required for service delivery or regulatory compliance.
gpeya's services are strictly prohibited for individuals under the age of 21 years, in accordance with PAGCOR's minimum age requirements for online gambling participation in the Philippines. gpeya does not knowingly collect personal data from any individual under 21 years of age.
If gpeya becomes aware that personal data has been collected from a person under 21 years of age, the relevant account will be immediately closed, all data associated with the account will be deleted in accordance with legal obligations, and any funds held will be dealt with in accordance with applicable PAGCOR requirements.
If you believe that gpeya may have inadvertently collected personal data from a minor, please contact us immediately via the details in Section 15 so that we can take prompt remedial action.
gpeya is a Philippines-based operator and processes the majority of player data within the Philippines. In limited circumstances, personal data may be transferred to and processed in jurisdictions outside the Philippines — for example, where gpeya's licensed game software providers or cloud infrastructure providers operate servers in other countries.
Any cross-border transfer of personal data by gpeya is subject to the following safeguards in accordance with Section 21 of the DPA 2012:
By using gpeya's services, you acknowledge that your personal data may be transferred outside the Philippines subject to the safeguards described above.
gpeya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. Material changes to this Policy will be communicated to registered players via email notification and/or a prominent notice on the Platform prior to the changes taking effect.
The updated Privacy Policy will be published on this page with a revised effective date. We encourage you to review this Privacy Policy periodically to stay informed about how gpeya protects your personal data. Your continued use of the Platform following the effective date of any amendments constitutes your acceptance of the revised Privacy Policy.
If you disagree with any material changes to this Privacy Policy, you have the right to close your gpeya account and request deletion of your personal data, subject to gpeya's mandatory legal retention obligations.
For any questions, concerns, or requests relating to this Privacy Policy or gpeya's data handling practices, please contact the gpeya Data Protection Officer through the following channels:
For complaints that cannot be resolved directly with gpeya, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines (NPC). Information about filing a complaint with the NPC is available through official Philippine government channels.
For more information about gpeya's regulatory standing and PAGCOR licensing, please visit the About Us page. For information about responsible gaming tools and self-exclusion, please visit the Responsible Gaming page.
Regulatory Notice: gpeya is a PAGCOR-licensed online gaming operator. This Privacy Policy is subject to the Data Privacy Act of 2012, NPC implementing rules, and PAGCOR data handling directives. It may be amended at any time to reflect regulatory updates. The current version is always available at gpeya.net/privacy-policy.
We're committed to protecting your privacy while delivering the best Filipino online gaming experience. Log in to manage your data preferences, or explore what gpeya has to offer.
Log In to gpeya Learn About Us