gogoph Privacy Policy

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, gogoph acts as the Personal Information Controller in respect of the personal data collected from registered members and visitors to the Platform. gogoph determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with applicable Philippine data privacy law.

The gogoph Platform is operated for the benefit of Filipino players, with game offerings, payment integrations, and customer support specifically designed for the Philippine market. Our primary payment integrations include GCash, Maya (PayMaya), BPI, BDO, and Metrobank, all of which are Philippine-based financial service providers.

This Privacy Policy applies to all personal data collected by gogoph through the following touchpoints:

• The gogoph.club website and all subdomains;
• The gogoph mobile application (Android), if and when made available;
• Registration, KYC verification, and account management processes;
• Deposit and withdrawal transactions processed through Philippine payment gateways;
• Participation in any game, promotion, bonus programme, or tournament on the Platform;
• All communications between you and gogoph customer support via live chat, Messenger, Viber, or email.

This Policy does not apply to third-party websites, payment providers, or services that may be linked to or integrated with the Platform. Those third parties maintain their own privacy policies, and gogoph is not responsible for their data practices. We encourage you to review the privacy policies of all third-party services you interact with in connection with your gogoph account.

gogoph collects the following categories of personal data from registered members. The specific data collected depends on how you use the Platform and what verification steps apply to your account.

gogoph collects personal data through the following mechanisms:

Data You Provide Directly

When you register for a gogoph account, complete KYC verification, use the Platform Cashier, set responsible gaming limits, contact gogoph support, or participate in promotions, you provide personal data directly to gogoph. This is the primary source of identity and financial data held on your account.

Data Collected Automatically

When you visit the gogoph Platform or use the mobile application, certain data is collected automatically through server logs, cookies, and similar tracking technologies. This includes your IP address, device information, session duration, pages visited, and game interaction data. This automated collection occurs regardless of whether you are logged in to your account.

Data from Payment Providers

When you complete a GCash or Maya deposit or withdrawal, the relevant payment provider shares confirmation data with gogoph — including transaction reference numbers, amounts, timestamps, and the e-wallet number used — to facilitate account crediting and withdrawal processing. gogoph does not receive your GCash PIN or full payment credentials.

Data from Third-Party Verification Services

gogoph may engage third-party KYC and identity verification service providers to assist with document authentication, liveness detection, and fraud prevention screening. These providers process the documents and images you submit for verification on gogoph's behalf, acting as personal information processors under data processing agreements consistent with the Data Privacy Act.

gogoph processes your personal data only for the specific purposes listed below, each of which is supported by a lawful basis under the Data Privacy Act of 2012.

gogoph does not sell your personal data to any third party. We may share your personal data only in the following limited and specific circumstances:

Service Providers and Processors

gogoph engages trusted third-party service providers who process personal data on gogoph's behalf under written data processing agreements. These include: KYC verification providers; payment gateway operators (GCash, Maya, and banking integrations); cloud infrastructure and hosting providers; customer support platform operators; and fraud detection and cybersecurity service providers. All processors are required to process personal data only on gogoph's documented instructions and to implement appropriate security measures.

Game Providers

To deliver game sessions on the Platform, gogoph shares limited technical data (such as player session tokens and bet data) with game providers including JILI Games. This sharing is limited to the technical minimum required to operate the game session and does not include identity documents or financial account details.

Regulatory and Law Enforcement Authorities

gogoph will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities where required by law, court order, or lawful regulatory direction. Such disclosures are made in accordance with applicable legal requirements and will be logged in gogoph's disclosure register.

Business Transfers

In the event of a merger, acquisition, or sale of substantially all of gogoph's assets, your personal data may be transferred to the successor entity. gogoph will provide notice of any such transfer and the applicable privacy protections before the transfer is completed.

gogoph uses cookies and similar technologies to operate the Platform, remember your preferences, detect fraud, and understand how Filipino players interact with the site and game lobby. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Required for the Platform to function correctly — session management, authentication, security tokens, and payment flow continuity. These cannot be disabled without breaking core Platform functionality.
• Performance & Analytics Cookies: Used to collect aggregate, anonymised data about page visits, load times, and user navigation paths. This data helps gogoph identify and fix friction points in the player journey.
• Functional Cookies: Remember your language preference, last login, and game lobby personalisation settings across sessions.
• Security Cookies: Detect and mitigate automated threats, credential stuffing, and suspicious login patterns to protect your account.

You may control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the gogoph Platform. gogoph does not use third-party advertising cookies to serve gambling advertisements on other websites.

gogoph retains personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable Philippine law. The following retention periods apply:

• Active Account Data: Retained for the duration of your gogoph account plus a minimum of five (5) years after account closure, in compliance with AMLC record-keeping requirements.
• KYC Documents and Identity Data: Retained for a minimum of five (5) years following account closure, as required under anti-money laundering regulations.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of the transaction, consistent with AMLC and tax record requirements.
• Gaming Activity Records: Retained for a minimum of three (3) years to support dispute resolution, responsible gaming monitoring, and regulatory reporting.
• Customer Support Communications: Retained for two (2) years from the date of the conversation unless a longer retention period is required in connection with a live dispute or regulatory inquiry.
• Cookies and Technical Logs: Session cookies are deleted upon browser closure. Persistent analytics cookies expire within twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction. You may request early deletion of your personal data by submitting a Data Erasure Request (see Section 11), subject to our legal retention obligations.

gogoph implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and gogoph servers is encrypted using industry-standard TLS encryption. This applies to all Platform pages, login sessions, deposits, and withdrawal requests.
• Password Hashing: Your account password is stored in a one-way hashed format using a secure cryptographic algorithm. gogoph personnel cannot read your actual password.
• Access Controls: Access to personal data is restricted to gogoph personnel who require it to perform their specific job functions. All access is logged and subject to periodic review.
• SMS OTP Authentication: Sensitive account actions — including password resets, withdrawal method changes, and security modifications — require OTP verification to your registered Philippine mobile number.
• Fraud Detection Systems: Real-time monitoring identifies unusual login patterns, suspicious transaction activity, and potential account compromise, triggering automated protective responses where appropriate.
• Data Segregation: Player funds and player personal data are held in systems segregated from gogoph's operational infrastructure, reducing exposure in the event of any system incident.

gogoph's primary data processing infrastructure is designed to serve the Philippine market. In some cases, personal data may be processed by gogoph's cloud infrastructure or third-party service providers whose servers are located outside the Philippines — for example, global cloud providers or game platform technology providers.

Where personal data is transferred outside the Philippines, gogoph ensures that:

• The receiving country or organisation provides an adequate level of protection for personal data, comparable to the standards established under the Data Privacy Act of 2012;
• Appropriate contractual safeguards — including data processing agreements and standard contractual clauses — are in place between gogoph and the receiving party;
• Such transfers are made only to the extent necessary to deliver the services available on the Platform; and
• All cross-border data transfer arrangements are consistent with NPC guidance on international data transfers.

If you would like further information about the specific international transfer safeguards applicable to your personal data, you may submit a request to the gogoph Data Privacy Officer.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights as a data subject. gogoph is committed to facilitating the exercise of these rights promptly and without undue burden.

To exercise any of the above rights, submit a written request to the gogoph Data Privacy Officer at [email protected] with the subject line "Data Subject Rights Request — [Right Type]". Include your full name, registered mobile number, and a brief description of your request. gogoph will acknowledge your request within five (5) business days and will respond substantively within fifteen (15) business days, or within the timeframe prescribed by applicable NPC rules.

If gogoph discovers that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, refund any real-money balance to the payment source, delete all personal data associated with the account to the extent permitted by our legal obligations, and report the matter in accordance with applicable regulations.

If you believe that a person under 21 has registered for a gogoph account, please contact gogoph support immediately via live chat or email so that the matter can be investigated and addressed promptly.

gogoph may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law or NPC guidance, PAGCOR licensing requirements, or Platform functionality. The "Last Updated" date at the top of this document will always reflect when the most recent revision was made.

When material changes are made to this Privacy Policy — particularly changes that affect how your sensitive personal information is processed or that affect your data subject rights — gogoph will notify registered members through one or more of the following channels:

• An in-Platform notification displayed upon next login;
• An SMS to your registered Philippine mobile number;
• A prominent notice on the gogoph.club homepage for a period of at least thirty (30) days.

Your continued use of the Platform following the effective date of any material change constitutes your acknowledgement of the revised Privacy Policy. If you do not accept the changes, you should discontinue use and contact gogoph to arrange account closure and data handling consistent with your rights under Section 11.

If you have any questions, concerns, or requests relating to this Privacy Policy or gogoph's handling of your personal data, you may contact us through the following channels. All communications should be in English or Tagalog.

• Data Privacy Officer Email: [email protected] — subject line "Data Privacy Request — Attention DPO"
• Live Chat: Available 24/7 via the gogoph Platform. State your query as a data privacy matter for routing to the appropriate team member.
• Messenger & Viber: Available daily via gogoph's official accounts.

If you are not satisfied with gogoph's response to your data privacy concern, you have the right to escalate the matter to the National Privacy Commission of the Philippines through its official complaints mechanism. gogoph will cooperate fully with any NPC investigation into the handling of your personal data.