Privacy at a Glance
Six principles that guide how gamsph handles every piece of personal information entrusted to us.
Data Security First
All personal data stored by gamsph is protected with 256-bit SSL encryption at rest and in transit. Access to player records is strictly limited to authorized personnel on a need-to-know basis.
Purpose-Limited Collection
gamsph only collects personal data that is necessary for a specific, legitimate purpose — account management, identity verification, regulatory compliance, or service improvement. We do not collect data speculatively.
No Third-Party Marketing Sales
gamsph does not sell, rent, or trade your personal information to unaffiliated third parties for their own marketing purposes. Your data stays within the gamsph ecosystem.
Your Rights Are Real
Under the Philippine Data Privacy Act of 2012, you have the right to access, correct, and request deletion of your personal data. gamsph provides clear channels to exercise every one of these rights.
Regulatory Compliance
gamsph processes personal data in compliance with the Philippine Data Privacy Act (Republic Act No. 10173), PAGCOR regulations, and applicable Anti-Money Laundering laws.
Retention with Limits
We do not keep your data longer than necessary. Retention periods are tied to specific legal and regulatory obligations. Once those periods expire, data is securely deleted or anonymized.
Contents
- 1. Introduction
- 2. Data Controller
- 3. Data We Collect
- 4. How We Collect Data
- 5. How We Use Your Data
- 6. Legal Basis
- 7. Data Sharing
- 8. Cookies & Tracking
- 9. Data Retention
- 10. Data Security
- 11. International Transfers
- 12. Children's Privacy
- 13. Your Rights
- 14. Marketing
- 15. Policy Updates
- 16. Contact & DPO
Who This Policy Applies To: This Privacy Policy applies to all individuals who access, browse, register on, or use the gamsph Platform at gamsph.net, including registered Players and unregistered visitors. By using the Platform, you acknowledge that you have read and understood this Policy.
01 Introduction
gamsph ("we," "us," "our") operates the online gaming platform accessible at gamsph.net. As a platform serving players across the Philippines — from Manila to Cebu, Davao to Quezon City — we understand that trust is the foundation of everything we do. Part of earning and keeping that trust means being completely transparent about how we handle personal information.
This Privacy Policy is issued in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines. It should be read alongside our Terms & Conditions, which govern your use of the Platform as a whole.
We review and update this Policy periodically to reflect changes in our services, technology, or legal obligations. The date at the top of this page always reflects the most recent revision.
02 Data Controller
For the purposes of the Philippine Data Privacy Act of 2012, the data controller responsible for your personal information is gamsph, operating through gamsph.net. Our designated Data Protection Officer (DPO) can be reached via the contact details provided in Section 16 of this Policy.
As data controller, gamsph determines the purposes and means of processing your personal data. We are registered with and accountable to the National Privacy Commission of the Philippines in our capacity as a personal information controller.
03 Personal Data We Collect
gamsph collects different categories of personal data depending on how you interact with the Platform. The table below outlines the main categories:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government ID number and type | Registration & KYC verification |
| Contact Data | Email address, mobile number, residential address | Registration & account updates |
| Financial Data | GCash / PayMaya account reference, bank account details (BPI, BDO, Metrobank), card last four digits, deposit and withdrawal history | Payment processing & KYC |
| Gaming Data | Bet history, game sessions, win/loss records, bonus usage, responsible gaming settings | Continuous during Platform use |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps | Automatic on Platform access |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | When you contact gamsph support |
| Document Data | Scanned copies of government IDs (passport, PhilSys ID, UMID, driver's license), utility bills, selfie photos submitted for KYC | KYC verification process |
We do not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where sensitive data (such as government ID details) is necessarily collected, it is handled with enhanced security controls.
04 How We Collect Your Data
gamsph collects personal data through the following methods:
4.1 Direct Collection
You provide data directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a promotional offer. This is the primary source of identity, contact, and financial data.
4.2 Automated Collection
When you access the Platform, our servers automatically collect technical data including your IP address, device identifiers, browser information, and session activity logs. This data is used for security monitoring, fraud prevention, and platform optimization. Cookies and similar tracking technologies also contribute to automated data collection — see Section 8 for full details.
4.3 Third-Party Sources
In limited circumstances, gamsph may receive personal data about you from third parties, including:
- Payment processors (e.g., GCash, PayMaya, InstaPay, PESONet): transaction confirmation and account reference data.
- Identity verification providers: results of automated document checks performed as part of the KYC process.
- Fraud prevention services: risk scores and flags associated with IP addresses or device fingerprints.
- Regulatory databases: watchlist screening results in compliance with Anti-Money Laundering obligations.
05 How We Use Your Personal Data
gamsph uses your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes are:
- Account creation and management: To register your account, maintain your profile, and provide you access to all Platform features.
- Identity and age verification: To confirm you are at least 21 years of age and that you are who you say you are, in compliance with PAGCOR requirements.
- Payment processing: To facilitate deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods.
- Regulatory compliance: To fulfill obligations under the Philippine Data Privacy Act, PAGCOR regulations, and the Anti-Money Laundering Act (AMLA), including transaction monitoring and suspicious activity reporting.
- Fraud and security management: To detect, investigate, and prevent fraudulent, abusive, or criminal activity on the Platform, and to protect both you and other players.
- Responsible gaming: To implement and monitor responsible gaming tools such as deposit limits, loss limits, and self-exclusion, and to identify patterns of play that may indicate problem gambling.
- Customer support: To respond to your enquiries, resolve disputes, and process complaints.
- Service improvement: To analyse usage patterns and technical performance data in order to improve the Platform, fix bugs, and develop new features.
- Marketing communications: To send you promotional offers, bonus notifications, and updates about gamsph — subject to your marketing preferences and the rules set out in Section 14.
- Legal proceedings: To establish, exercise, or defend legal claims where necessary.
06 Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012, gamsph is required to have a lawful basis for processing your personal data. The applicable legal bases are as follows:
- Contractual necessity: Processing is necessary to perform our contract with you (the Terms & Conditions). This covers account management, payment processing, and gameplay services.
- Legal obligation: Processing is required to comply with PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine laws. This covers KYC verification, transaction monitoring, and regulatory reporting.
- Legitimate interests: Processing is necessary for the legitimate interests of gamsph or a third party — specifically fraud prevention, platform security, and service analytics — where those interests are not overridden by your privacy rights.
- Consent: Where none of the above bases apply, gamsph will seek your explicit, informed consent before processing your data. You may withdraw consent at any time without affecting the lawfulness of prior processing.
07 Data Sharing & Disclosure
gamsph does not sell your personal data. We may share your data with the following categories of recipient, strictly on a need-to-know basis and under appropriate data sharing agreements:
7.1 Service Providers
Third-party vendors who provide technical and operational services to gamsph, including cloud hosting providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, PESONet, Visa, Mastercard), identity verification services, and customer support platform providers. These parties process data on our behalf and are bound by contractual obligations to maintain confidentiality and comply with the Data Privacy Act.
7.2 Game Software Providers
Licensed game developers and live casino operators whose games are available on the gamsph Platform may receive limited gameplay data necessary to deliver and audit their games. Such providers are vetted and subject to data processing agreements.
7.3 Regulatory and Law Enforcement Authorities
gamsph is required by law to disclose certain player data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government agencies when legally obligated to do so. We may also disclose data in response to a valid court order or lawful request from a law enforcement authority.
7.4 Professional Advisors
Lawyers, auditors, accountants, and insurers may receive limited personal data where necessary for the provision of professional services to gamsph, subject to professional secrecy obligations.
Cross-Border Note: Some of our service providers may be located outside the Philippines. Where personal data is transferred internationally, gamsph ensures that appropriate safeguards are in place, including contractual data transfer clauses consistent with NPC guidelines, to maintain the equivalent level of protection required under Philippine law.
08 Cookies & Tracking Technologies
The gamsph Platform uses cookies and similar technologies to deliver, secure, and improve the gaming experience. A cookie is a small text file stored on your device when you visit a website. gamsph uses the following categories of cookies:
- Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies and security tokens. You cannot opt out of these without losing access to the Platform.
- Functional Cookies: Remember your preferences such as language settings, responsible gaming limits you have set, and your last login details to streamline your experience.
- Analytics Cookies: Collect aggregated, anonymized data about how players use the Platform — which pages are visited most, where errors occur, and how navigation flows. This helps us improve the Platform over time.
- Security and Fraud Prevention Cookies: Used to detect and prevent fraudulent logins, bot activity, and other security threats. These are considered a subset of strictly necessary cookies.
gamsph does not use third-party advertising or cross-site tracking cookies. You can manage cookie preferences through your browser settings, though disabling strictly necessary cookies will impair Platform functionality. By continuing to use the Platform after our cookie notice is displayed, you consent to the use of non-essential cookies as described above.
09 Data Retention
gamsph retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to minimum retention periods required by Philippine law and regulation. Key retention periods are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity records | 5 years after account closure | AMLA / PAGCOR regulatory requirement |
| Financial transaction records | 5 years from transaction date | Anti-Money Laundering Act (RA 9160) |
| KYC documents | 5 years after account closure | PAGCOR KYC guidelines |
| Customer support records | 3 years from last interaction | Legitimate interests / dispute resolution |
| Technical / access logs | 12 months on a rolling basis | Security and fraud prevention |
| Marketing preferences | Until withdrawal of consent or account closure | Consent-based processing |
After the applicable retention period expires, personal data is either securely deleted from our systems or anonymized so that it can no longer be linked to an identifiable individual. Anonymized data may be retained indefinitely for aggregate analytics purposes.
10 Data Security
gamsph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:
- Encryption: All data transmitted between your device and the gamsph Platform is encrypted using TLS 1.2 or higher. Sensitive data stored in our databases is encrypted at rest using AES-256.
- Access controls: Access to personal data is restricted to authorized gamsph personnel and service providers who require it to perform their specific role. Access is granted on a least-privilege basis and reviewed regularly.
- Multi-factor authentication: Administrative access to systems containing personal data requires multi-factor authentication.
- Penetration testing and vulnerability management: gamsph conducts regular security assessments to identify and address potential vulnerabilities in the Platform.
- Incident response: gamsph maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to players, gamsph will notify affected individuals and the National Privacy Commission within the timeframes required by the Data Privacy Act.
- Staff training: All gamsph personnel with access to personal data receive regular training on data privacy obligations and security best practices.
While gamsph takes all reasonable measures to protect your data, no system is completely impenetrable. You are encouraged to use a strong, unique password for your gamsph account and to enable any two-factor authentication options available on the Platform.
11 International Data Transfers
gamsph is a Philippine-focused platform and stores the majority of player data within the Philippines or within data centers subject to comparable data protection standards. However, some of our technology partners and service providers — including cloud infrastructure providers and game software suppliers — may process data in other countries.
Where personal data is transferred outside the Philippines, gamsph ensures that such transfers comply with the requirements of the Data Privacy Act and NPC guidelines. Safeguards may include standard contractual clauses, adequacy determinations, or binding corporate rules, depending on the recipient country and its applicable data protection framework.
12 Children's Privacy
The gamsph Platform is strictly intended for individuals who are at least 21 years of age, consistent with PAGCOR's minimum age requirements for online gaming in the Philippines. gamsph does not knowingly collect personal data from any person under the age of 21.
If we become aware that a person under 21 has provided us with personal data or has created a gamsph account, we will immediately suspend that account, delete the associated personal data to the extent legally permissible, and — where required — report the incident to PAGCOR.
If you are a parent or guardian and believe your child may have accessed the gamsph Platform, please contact us immediately at [email protected].
13 Your Data Privacy Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by gamsph. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 16.
- Right to be Informed: The right to know that your personal data is being collected, the purposes for which it is used, and how it is shared — which this Policy provides.
- Right of Access: The right to request a copy of the personal data we hold about you, including information about the purposes and sources of that data.
- Right to Rectification: The right to have inaccurate or incomplete personal data corrected. You can update basic account information directly from your account dashboard at any time.
- Right to Erasure / Right to be Forgotten: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations (see Section 9).
- Right to Object: The right to object to the processing of your personal data on grounds relating to your particular situation, including objecting to processing based on legitimate interests.
- Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
- Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
- Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.
Response Timeframe: gamsph will respond to all data subject requests within 30 calendar days of receipt. Complex requests may take up to 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.
14 Marketing Communications
With your consent, gamsph may send you promotional communications about bonuses, new games, special events, and other gamsph offers via email or SMS. You may opt in to marketing communications during account registration or at any time through your account settings.
You may opt out of marketing communications at any time by:
- Clicking the "Unsubscribe" link in any marketing email we send you.
- Updating your communication preferences in your gamsph account settings.
- Contacting our support team and requesting removal from our marketing list.
Please note that opting out of marketing communications does not affect transactional communications, which gamsph must send in connection with your account — such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts. These are sent on the basis of contractual necessity and cannot be opted out of while your account is active.
15 Updates to This Privacy Policy
gamsph reviews this Privacy Policy periodically and may update it to reflect changes in our services, applicable law, or internal data handling practices. The effective date at the top of this page will always reflect the most recent revision.
Where changes are material — meaning they significantly affect your rights or how we use your data — gamsph will provide advance notice by posting a prominent notice on the Platform homepage and, where practicable, by notifying you via email at the address registered to your account.
Your continued use of the gamsph Platform after the effective date of any update constitutes your acknowledgment of the revised Policy. If you disagree with a material change, you have the right to close your account and request deletion of your data by contacting us before the change takes effect.
16 Contact & Data Protection Officer
If you have any questions about this Privacy Policy, wish to exercise any of your data privacy rights, or want to report a privacy concern, please contact gamsph's Data Protection Officer through the following channels:
- Email (DPO): [email protected]
- Subject Line: Please include "Data Privacy Request" or "DPO Enquiry" in the subject line of your email so we can route your message correctly.
- Live Chat: Available 24/7 from the gamsph Platform. Our support agents can escalate privacy-related matters to the DPO on your behalf.
- FAQ: Common privacy questions are also addressed on our FAQ page.
If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter to the National Privacy Commission of the Philippines at privacy.gov.ph.
This Privacy Policy was last reviewed and updated on January 1, 2026. By continuing to use the gamsph Platform after this date, you confirm your acknowledgment of this Policy as currently published.
Your Rights at a Glance
Under RA 10173, every gamsph player has these enforceable rights. Contact our DPO to exercise any of them.
Right to Access
Request a complete copy of all personal data gamsph holds about you, including the sources and purposes of collection.
Right to Rectification
Have inaccurate or outdated personal information corrected promptly, either via your account dashboard or through our support team.
Right to Erasure
Request deletion of your personal data when it is no longer necessary, subject to legal retention obligations under AMLA and PAGCOR rules.
Right to Object
Object to specific types of data processing, including processing based on legitimate interests or direct marketing purposes.
Right to Portability
Receive your personal data in a machine-readable format and request it be transferred to another service provider where technically feasible.
Right to Complain
Lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.
Play with Confidence on gamsph
Your privacy is protected every step of the way. Explore gamsph's full game library — bingo, slots, live casino, and more — knowing your data is in safe hands.
Players must be 21 years or older. Please gamble responsibly.