This Privacy Policy explains how gamph collects, uses, stores, shares, and protects your personal information when you use the gamph platform — including the website, account services, casino games, sports betting, and payment features. Your privacy is important to us and we are committed to handling your personal data responsibly.
gamph ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of every person who uses the gamph platform. This Privacy Policy (hereinafter "Policy") describes how gamph collects, processes, stores, discloses, and protects personal data in connection with your use of gamph's website and services, including the gamph Login portal, casino games, sports betting, bingo, dice games, payment and cashier services, customer support interactions, and marketing communications.
This Policy applies to all registered account holders, visitors to the gamph website, and any individual whose personal data gamph processes in connection with the services described above. It should be read together with gamph's Terms and Conditions and Responsible Gaming Policy, both of which are available on this platform.
By registering a gamph account or by continuing to use the gamph platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree to this Policy, you must not use gamph's services.
This Policy is written in English. In the event of any inconsistency arising from translation, the English-language version shall prevail in all circumstances.
For the purposes of applicable data protection legislation, gamph is the data controller responsible for the personal data collected and processed through the gamph platform. gamph operates as an online casino and sports betting platform serving players in the Philippines, operating within PAGCOR's licensing framework for online gaming.
As data controller, gamph is responsible for determining the purposes and means of processing your personal data. gamph is accountable for ensuring that personal data is processed lawfully, fairly, and transparently, in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and any other applicable data protection regulations.
For all privacy-related enquiries, you may contact gamph's designated data protection contact via the channels set out in Section 16 of this Policy.
gamph collects the following categories of personal data in the course of providing its services:
| Category | Examples of Data | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, government ID details, photograph | Account registration, age and identity verification (KYC) |
| Contact Data | Philippine mobile number, email address | Account creation, OTP verification, support communications |
| Account Data | Username, password (hashed), account preferences, VIP tier | Account management and authentication |
| Financial Data | GCash number, Maya account, bank account details, transaction history | Payment processing, withdrawals, AML compliance |
| Gaming Data | Game history, bet amounts, win/loss records, session durations, wagering patterns | Game provision, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, device type, browser, operating system, login timestamps, cookies | Platform security, fraud detection, performance optimisation |
| Communications Data | Live chat transcripts, support tickets, emails, SMS records | Customer support, quality assurance, dispute resolution |
| Marketing Data | Promotional opt-in preferences, bonus claim history | Marketing communications (only where consent is given) |
Sensitive Personal Data: gamph may collect government-issued identification documents as part of its Know Your Customer (KYC) obligations. These documents constitute sensitive personal data and are handled with heightened security measures in accordance with the Data Privacy Act of 2012.
gamph collects personal data through the following means:
gamph uses the personal data it collects for the following purposes:
gamph processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012 and applicable data protection principles:
gamph does not sell your personal data to third parties for commercial marketing purposes. gamph may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:
gamph engages third-party service providers who process personal data on gamph's behalf as data processors. These include payment processors (GCash, Maya, BPI, BDO, Metrobank), game software providers (including Playtech and other certified developers), identity verification and KYC service providers, fraud detection and AML screening providers, IT infrastructure and hosting providers, and customer support technology platforms. All service providers are contractually required to process data only in accordance with gamph's instructions and to maintain appropriate security measures.
gamph will disclose personal data to PAGCOR, law enforcement agencies, the Anti-Money Laundering Council (AMLC) of the Philippines, the Bureau of Internal Revenue (BIR), and other competent authorities where required to do so by applicable Philippine law, regulation, court order, or regulatory direction. Such disclosures will be made to the minimum extent necessary to fulfil the applicable legal obligation.
In the event of a merger, acquisition, restructuring, or sale of all or part of gamph's business, personal data held by gamph may be transferred to the relevant successor entity. You will be notified of any such transfer and its implications for your personal data by notice on the platform or by direct communication to your registered contact details.
No Data Sales: gamph does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing companies. Any third-party access to your data is strictly limited to what is necessary to provide gamph's services.
In the course of providing its services, gamph may transfer your personal data to recipients located outside the Republic of the Philippines — for example, to international game software providers, cloud infrastructure providers, or technology service partners operating in other countries.
Where such international transfers occur, gamph ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under the Data Privacy Act of 2012. Safeguards may include data processing agreements incorporating standard contractual clauses, assessments of the recipient country's data protection standards, or other legally recognised transfer mechanisms.
By using the gamph platform, you acknowledge that your personal data may be transferred to, stored in, and processed in countries other than the Philippines. gamph will always handle such transfers in compliance with its obligations under applicable Philippine data protection law.
gamph retains personal data for no longer than is necessary for the purposes for which it was collected, taking into account gamph's legal and regulatory obligations. The following general retention principles apply:
Upon expiry of the applicable retention period, gamph will securely delete or anonymise personal data in accordance with its data disposal procedures.
gamph uses cookies and similar tracking technologies on its platform for the following purposes:
These cookies are essential for the gamph platform to function correctly. They enable core features such as maintaining your gamph Login session, storing your account preferences during a session, and ensuring the security of your account interactions. These cookies cannot be disabled without significantly impairing your ability to use the platform.
gamph uses performance cookies to collect aggregate, anonymised data about how users interact with the platform — including which pages are visited most frequently, how long sessions last, and where technical errors occur. This data is used solely to improve platform performance and the player experience. This data does not identify you personally.
Functional cookies allow the gamph platform to remember your preferences — such as your preferred language, display settings, and last-visited game category — to provide a more personalised experience during your session.
You may manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the gamph platform. Instructions for managing cookies are available in your browser's help documentation. Disabling strictly necessary cookies will impair your ability to use the gamph Login system and other core platform features.
gamph implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
Your Responsibility: While gamph maintains robust security measures, the security of your gamph account also depends on your own actions. You are responsible for maintaining the confidentiality of your login credentials and for notifying gamph immediately if you suspect any unauthorised access to your account.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, gamph will notify the National Privacy Commission of the Philippines and affected data subjects in accordance with the notification requirements of the Data Privacy Act of 2012 and its implementing rules.
Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to the personal data gamph holds about you. To exercise any of these rights, please contact gamph through the channels set out in Section 16:
You have the right to request confirmation of whether gamph holds personal data about you, and to request a copy of that data in an intelligible format, together with information about how it is being used.
You have the right to request correction of any inaccurate or incomplete personal data that gamph holds about you. For basic account details, you can update information directly through your gamph account settings.
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to gamph's overriding legal and regulatory retention obligations — including PAGCOR's record-keeping requirements.
You have the right to object to the processing of your personal data where gamph relies on legitimate interests as the legal basis, and where you believe your fundamental rights and freedoms override those interests. You may also object to processing for direct marketing purposes at any time.
Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that gamph transmit that data to another controller where technically feasible.
Where processing is based on your consent — such as marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent can be managed through your account settings.
If you believe that gamph has processed your personal data in violation of the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Details of the NPC's complaint process are available through the NPC's official channels.
gamph will respond to data subject rights requests within thirty (30) calendar days of receipt. In cases of complexity or high volume, this period may be extended by a further sixty (60) days, with prior notification to you. gamph will not charge a fee for responding to rights requests unless requests are manifestly unfounded, excessive, or repetitive.
21+ Only — Strict Age Enforcement: The gamph platform is restricted to individuals who are at least 21 years of age. gamph does not knowingly collect personal data from persons under 21 years of age. If gamph discovers or reasonably suspects that personal data has been collected from a person under 21, it will take immediate steps to delete that data and close the associated account.
If you are a parent or guardian and believe that a person under 21 years of age has registered a gamph account or provided personal data to gamph, please contact gamph support immediately via the channels in Section 16. gamph will investigate and take appropriate action promptly upon receiving such a notification.
This age restriction reflects both gamph's legal obligations under PAGCOR's framework for online gaming in the Philippines and gamph's genuine commitment to the protection of minors from gambling-related harm.
The gamph platform may contain integrations with third-party services — including payment providers such as GCash and Maya, and game software provided by third-party developers such as Playtech. While gamph selects its service providers carefully and requires contractual data protection commitments, gamph is not responsible for the privacy practices of third-party organisations operating their own independent platforms and services.
This Privacy Policy applies solely to personal data collected and processed by gamph in connection with the gamph platform. It does not apply to third-party platforms or services that you may access through payment gateways, game studios, or other third-party integrations. gamph encourages you to review the privacy policies of any third-party services you use in connection with your gamph account.
gamph reserves the right to amend or update this Privacy Policy at any time to reflect changes in its data processing activities, legal obligations, regulatory requirements, or business operations. The date of the most recent revision is displayed at the top of this page.
Where amendments to this Policy are material — meaning they significantly change the way gamph collects or uses your personal data — gamph will provide advance notice by posting a prominent notice on the platform or by direct communication to your registered contact details before the changes take effect.
Your continued use of the gamph platform following the effective date of any revised Privacy Policy constitutes your acknowledgement and acceptance of the updated Policy. If you do not agree with any changes to this Policy, you must cease using the gamph platform and may request account closure.
It is your responsibility to review this Policy periodically for any updates. gamph recommends checking this page each time you use the platform.
For all privacy-related enquiries, data subject rights requests, or concerns regarding gamph's handling of your personal data, please contact gamph through the following channels:
When submitting a data subject rights request, please include your registered mobile number or username and a clear description of your request. gamph may need to verify your identity before processing your request to protect your data from unauthorised disclosure.
gamph's support team is available in both Filipino and English. All privacy requests are handled confidentially and with appropriate urgency. gamph aims to acknowledge all data subject rights requests within seventy-two (72) hours of receipt.
National Privacy Commission: If you are unsatisfied with gamph's response to a privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines. The NPC provides independent oversight of data protection compliance under the Data Privacy Act of 2012.
gamph treats data protection as a genuine obligation — not a compliance box. Here's what that means in practice for every Filipino player on the platform.
Every connection to gamph — from your gamph Login to cashier transactions — is encrypted with 256-bit SSL. Your credentials, financial data, and personal information are never transmitted in plain text.
gamph does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Period. Any access by third parties is limited strictly to what's needed to provide gamph's services to you.
Under the Data Privacy Act of 2012, you have the right to access, correct, delete, and port your data. gamph processes all data subject rights requests within 30 days, at no charge.
gamph collects only the personal data necessary to provide its services and meet its legal obligations. Data that is no longer needed is securely deleted in accordance with defined retention schedules.
Your gamph account is protected by mobile OTP verification for high-risk actions. Even if your password is compromised, a second factor tied to your Philippine number protects your account.
gamph processes data in compliance with PAGCOR's licensing requirements and the Data Privacy Act of 2012. Regulatory requests from the NPC and competent Philippine authorities are handled promptly and in full accordance with the law.
Your data is protected, your funds are secure, and your privacy is respected. gamph Casino is built for Filipino players who want a transparent, trustworthy online casino. 21+ only.