gogoph Privacy Policy

This Privacy Policy ("Policy") is issued by gogoph ("gogoph," "we," "us," "our"), the operator of the online gaming platform at gogoph.one. This Policy applies to all personal data collected from individuals ("you," "User," "Player") who access or use the gogoph Platform, register a player account, make deposits or withdrawals, contact our support team, or otherwise interact with gogoph's services. This Policy is to be read together with our Terms & Conditions and Responsible Gaming Policy, all of which form part of your agreement with gogoph.

gogoph is committed to protecting your personal information in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA) of the Philippines, its Implementing Rules and Regulations, and the regulations and guidelines issued by the National Privacy Commission (NPC). We also comply with applicable PAGCOR regulatory requirements regarding player data management.

1. Who We Are

gogoph operates the online gaming platform at gogoph.one, serving players across the Philippines including Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond. For the purposes of Philippine data privacy law, gogoph is the Personal Information Controller in respect of the personal data it collects and processes in connection with its services.

If you have any questions or concerns about how gogoph handles your personal data, or to exercise any of your data subject rights, you may contact our Data Protection Officer (DPO) at the email address listed in Section 14 of this Policy.

2. Personal Data We Collect

gogoph collects personal data from you directly (when you register, verify your identity, make transactions, or contact support), automatically (through your use of the Platform), and in limited cases from third parties (such as payment processors and identity verification services).

2.1 Registration & Account Data

• Full legal name, date of birth, and nationality
• Email address and Philippine mobile number (+63)
• Username and encrypted account password
• Residential address in the Philippines
• Account preferences and communication settings

2.2 Identity Verification (KYC) Data

• Government-issued photo identification (Philippine National ID, UMID, Driver's License, Passport, or equivalent)
• Proof of residential address (utility bill, bank statement, or barangay certification dated within 3 months)
• Source of funds documentation where required by our compliance framework or PAGCOR regulations
• Facial verification images where applicable

2.3 Financial & Transaction Data

• GCash account number and registered mobile number
• PayMaya/Maya account details where used
• Bank account details (BPI, BDO, Metrobank, or other Philippine bank) where applicable
• Deposit amounts, dates, and transaction reference numbers
• Withdrawal requests, amounts, processing status, and transaction history
• Bonus balances, wagering records, and promotional participation history

2.4 Gameplay & Activity Data

• Games played, bet amounts, game outcomes, and session duration
• Sports betting selections, wager amounts, and results
• Live chat and customer support interaction logs
• Responsible gaming tool usage (deposit limits set, self-exclusion requests, etc.)

2.5 Technical & Device Data

• IP address and approximate geolocation (province/city level)
• Device type, operating system, and browser type and version
• Mobile device identifiers (where applicable)
• Session timestamps, page visit logs, and navigation patterns on the gogoph Platform
• Cookie identifiers and similar tracking data (see Section 6)

3. How We Use Your Personal Data

gogoph uses your personal data for the following purposes:

gogoph does not use your personal data for automated decision-making that produces significant legal effects without human oversight, except where required by regulatory compliance processes.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules, gogoph processes your personal data on the following lawful bases:

• Contractual necessity: Processing required to fulfil our obligations to you under our Terms & Conditions, including account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with PAGCOR regulations, Anti-Money Laundering Act (AMLA) obligations, National Privacy Commission requirements, and other applicable Philippine law.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

gogoph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. gogoph may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to contractual data protection obligations:

• Payment processors: GCash (Mynt), PayMaya/Maya, BPI, BDO, Metrobank, and other Philippine payment providers — to process deposits and withdrawals.
• Identity verification providers: Licensed KYC service providers engaged to assist with document verification and facial recognition checks as required under PAGCOR regulations.
• Gaming software providers: Game providers (e.g., Pragmatic Play, Evolution Gaming, PG Soft) receive limited technical data necessary to deliver their games on the gogoph Platform.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government agencies, where gogoph is legally required to disclose player data.
• Law enforcement: Philippine law enforcement agencies, courts, or other public authorities where gogoph is required or permitted to disclose data under applicable law.
• IT infrastructure providers: Cloud hosting and data centre providers used to operate the gogoph Platform, under strict contractual data processing agreements.

6. Cookies & Tracking Technologies

6.1 gogoph uses cookies and similar technologies (including local storage and session storage) on the gogoph Platform. Cookies are small data files stored on your device that help gogoph recognise you, remember your preferences, maintain your login session, and analyse Platform usage.

6.2 Categories of cookies used by gogoph:

• Strictly necessary cookies: Required for the Platform to function — including maintaining your logged-in session, processing transactions, and applying security measures. These cannot be disabled.
• Functional cookies: Remember your language and display preferences to personalise your gogoph experience.
• Analytics cookies: Collect aggregated, anonymised information about how players use the gogoph Platform to help us improve it. No personally identifiable data is included in analytics reports.
• Marketing cookies: Used only with your explicit consent to deliver relevant promotional content. You may opt out at any time via your account settings.

6.3 You may control non-essential cookies through your browser settings or gogoph's cookie preference centre (accessible from the footer of the Platform). Disabling strictly necessary cookies will impair your ability to use the gogoph Platform.

7. Data Retention

7.1 gogoph retains personal data for as long as necessary to fulfil the purposes described in this Policy, and in compliance with applicable regulatory retention obligations:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, as required under PAGCOR regulations and AMLA obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support interaction logs: Retained for three (3) years from the date of the interaction.
• Marketing data: Retained until you withdraw your consent to receive marketing communications or close your account.
• Technical and device data: Retained for twelve (12) months for security and fraud prevention purposes, after which it is anonymised or deleted.

7.2 After the applicable retention period, gogoph will securely delete or irreversibly anonymise your personal data, unless continued retention is required by law.

8. Data Security

8.1 gogoph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and gogoph's servers
• Encryption at rest for sensitive personal data including KYC documents and financial records
• Role-based access controls ensuring that only authorised gogoph personnel can access personal data on a need-to-know basis
• Multi-factor authentication for all internal systems that process personal data
• Regular security audits, vulnerability assessments, and penetration testing
• 24/7 security monitoring and automated threat detection systems
• Formal data breach response procedures aligned with National Privacy Commission notification requirements

8.2 In the event of a personal data breach that poses a real risk of serious harm to you, gogoph will notify the National Privacy Commission and affected individuals within seventy-two (72) hours of becoming aware of the breach, as required under the Data Privacy Act.

9. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by gogoph:

• Right to be informed: The right to know that gogoph is processing your personal data and to be provided with this Privacy Policy.
• Right of access: The right to request a copy of the personal data gogoph holds about you.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data in your gogoph account.
• Right to erasure: The right to request deletion of your personal data, subject to gogoph's legal and regulatory retention obligations. Note that data required to be retained under PAGCOR regulations or AMLA cannot be deleted until the applicable retention period expires.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time via your account settings.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe gogoph has violated your data privacy rights.

To exercise any of these rights, please contact gogoph's Data Protection Officer using the contact details in Section 14. gogoph will respond to verified data subject requests within fifteen (15) business days. We may request proof of identity before processing your request to protect the security of your account.

10. Children & Minors

gogoph's services are strictly intended for individuals aged 21 years and above as required by PAGCOR regulations. gogoph does not knowingly collect personal data from any person under the age of 21. If gogoph discovers that it has inadvertently collected personal data from a person under 21, that account will be immediately closed and the personal data will be deleted promptly, subject only to any retention required by applicable law to document the incident.

If you believe that a minor has registered a gogoph account, please contact gogoph support or the DPO immediately so that appropriate action can be taken.

11. Cross-Border Data Transfers

11.1 The gogoph Platform is operated primarily from infrastructure located within the Philippines. However, some of our service providers — including game software providers and certain IT infrastructure partners — may process personal data on servers located outside the Philippines.

11.2 Where personal data is transferred outside the Philippines, gogoph ensures that appropriate safeguards are in place in accordance with the Data Privacy Act, including contractual clauses that impose data protection obligations on the recipient equivalent to those applicable in the Philippines.

11.3 By using the gogoph Platform, you acknowledge and consent to the transfer of your personal data to service providers operating outside the Philippines where necessary to provide gogoph's services, subject to the safeguards described in this Section.

12. Third-Party Links

The gogoph Platform may contain references to third-party services such as payment processors. gogoph is not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party services you access in connection with your use of gogoph.

13. Changes to This Privacy Policy

gogoph may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. Material changes will be notified via a prominent notice on the gogoph Platform and/or by email to your registered address at least fourteen (14) days before the changes take effect. Your continued use of the gogoph Platform after the effective date of any revised Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, you must cease using gogoph's services and close your account.

14. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or gogoph's data processing practices, please contact our Data Protection Officer:

Email: [email protected]
Subject line: Data Privacy / DPO Request
Support hours: 24/7 — Filipino-speaking agents available at all times
Service coverage: All players in the Philippines — Manila, Cebu, Davao, Quezon City, Makati, and nationwide

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph if you believe your data rights have been violated and gogoph has not adequately addressed your concern.