Your Privacy Matters to gili58

1 Scope and Application

This Policy applies to all personal data collected and processed by gili58 in connection with the operation of the gili58 platform, including the website at gili58.net, related mobile-optimised interfaces, and any communications between gili58 and its registered players located in the Philippines.

This Policy does not apply to third-party websites, payment processors, or service providers who operate their own privacy practices. Where gili58 directs you to a third-party service — such as your GCash or Maya application to complete a deposit — you should review that provider's own privacy policy, as gili58 has no control over how those third parties handle your data.

By using the gili58 platform, you confirm that you are at least 21 years of age, consistent with the eligibility requirements set out in the gili58 Terms & Conditions, and that you consent to your personal data being processed in the manner described in this Policy.

2 Information We Collect

gili58 collects personal information that is necessary to operate player accounts, comply with regulatory obligations, prevent fraud, and provide a safe gaming environment. The categories of personal data we collect are set out below.

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth (for age verification — players must be 21 or older)
• Residential address, including barangay, city or municipality, province, and postal code
• Philippine mobile number
• Email address
• Username and encrypted password

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., Philippine passport, PhilSys National ID, SSS ID, UMID, driver's licence, or PRC ID)
• Proof of residential address (e.g., utility bill, bank statement, or barangay clearance)
• Selfie photographs submitted for identity verification purposes
• Source of funds declarations where required by anti-money laundering regulations

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method references
• GCash or Maya account reference numbers (we do not store full wallet credentials)
• Bank account name and last four digits of account number where applicable
• Cryptocurrency wallet addresses for USDT TRC20 transactions
• Bonus and promotion redemption history

2.4 Gaming Activity Data

• Game session logs, including games played, wager amounts, outcomes, and timestamps
• Responsible gaming tool settings (deposit limits, self-exclusion status, cooling-off periods)
• Bonus wagering progress and promotional participation records

2.5 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session cookies and authentication tokens
• Platform usage logs, including pages visited and features accessed

2.6 Communications Data

• Records of support communications, including live chat transcripts and email exchanges with the gili58 support team
• Feedback and survey responses where voluntarily submitted

3 How We Collect Your Information

gili58 collects your personal information through the following means:

• Directly from you — when you complete the registration form, submit KYC documents, contact support, or update your account profile
• Automatically — through cookies, server logs, and analytics tools when you access and navigate the gili58 platform
• From payment providers — transaction confirmation data received from GCash, Maya, BPI, BDO, Metrobank, and other accepted payment channels when you make a deposit or withdrawal
• From identity verification services — where third-party KYC providers are used to assist with document verification, they may return verification results and risk scores to gili58
• From anti-fraud and compliance systems — automated risk and fraud detection systems may generate derived data points based on your activity patterns on the platform

4 How We Use Your Information

gili58 processes your personal data for the following purposes:

gili58 does not use your personal data for automated individual decision-making that produces significant legal effects on you, except where this is required for fraud prevention or regulatory compliance purposes, in which case you have the right to request human review of any such decision.

5 Legal Bases for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, gili58 processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform the contract between you and gili58, including account creation, transaction processing, and platform access
• Legal obligation — processing required to comply with applicable Philippine laws and regulations, including AML obligations, PAGCOR reporting requirements, and tax record-keeping
• Legitimate interests — processing carried out for fraud prevention, platform security, and the improvement of gili58 services, where those interests are not overridden by your fundamental rights and freedoms
• Consent — where gili58 relies on your consent as the basis for processing (for example, for optional marketing communications), you may withdraw that consent at any time by contacting support or updating your account preferences

6 Sharing and Disclosure of Your Information

6.1 Third-Party Service Providers

gili58 may share your personal data with carefully selected third-party service providers who assist us in operating the platform. These include payment processors, identity verification providers, cloud hosting providers, fraud detection services, and customer support tools. All such providers are contractually required to process your data only on gili58's instructions and to implement appropriate security measures.

6.2 Regulatory and Law Enforcement Authorities

gili58 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable Philippine law, court order, or regulatory instruction. Such disclosures will be limited to the minimum information necessary to satisfy the applicable legal requirement.

6.3 Business Transfers

In the event that gili58 undergoes a merger, acquisition, or transfer of all or substantially all of its business assets, your personal data may be transferred as part of that transaction. gili58 will notify affected players of any such transfer and the applicable privacy protections that will continue to apply to their data.

6.4 No Sale of Personal Data

gili58 does not sell, rent, or otherwise commercially transfer your personal data to third parties for their own marketing or commercial purposes. Your information is used solely to operate your account and meet our legal obligations.

6.5 Aggregated and Anonymised Data

gili58 may share aggregated, anonymised, or de-identified data — which cannot reasonably be used to identify you — with analytics partners or in published platform reports. Such data is not personal data and is not subject to this Policy.

7 Cookies and Tracking Technologies

gili58 uses cookies and similar technologies (such as local storage and session tokens) to operate the platform and deliver a smooth experience for Filipino players. The types of cookies we use are described below:

gili58 does not use third-party advertising cookies or cross-site tracking cookies. You may manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in to your gili58 account.

8 Data Retention

gili58 retains your personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable Philippine law. The following retention periods apply as a general guide:

• Account registration and KYC data — retained for the lifetime of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR and AMLC record-keeping requirements
• Transaction records — retained for a minimum of five (5) years following each transaction, as required under anti-money laundering regulations
• Gaming activity logs — retained for a minimum of two (2) years following each session
• Support communications — retained for a minimum of two (2) years following resolution of the relevant enquiry
• Technical and device data — retained for up to twelve (12) months from collection, unless required for ongoing fraud or security investigations

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Where deletion is not immediately possible due to backup or archival constraints, the data is isolated and protected from further active processing until deletion can be completed.

9 Data Security

gili58 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include, but are not limited to:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and gili58 servers
• Encryption of stored sensitive personal data at rest
• Role-based access controls limiting internal access to personal data on a need-to-know basis
• Multi-factor authentication for administrative access to systems containing personal data
• Regular security assessments and vulnerability monitoring of gili58 infrastructure
• Staff training on data privacy obligations under Philippine law

While gili58 takes all reasonable precautions to safeguard your data, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying gili58 immediately if you suspect any unauthorised access to your account.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by gili58. You may exercise any of these rights by contacting the gili58 support team:

gili58 will respond to all data subject rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, and you will be informed of any such extension. Identity verification may be required before a request is actioned to ensure your data is not disclosed to an unauthorised person.

11 Children and Minors

The gili58 platform is strictly intended for players who are 21 years of age or older, in accordance with Philippine gaming regulations. gili58 does not knowingly collect personal data from persons under the age of 21. If you believe that a minor has registered an account or submitted personal data to gili58, please contact our support team immediately at [email protected]. Upon confirmation, any account created by a person under 21 will be immediately closed, all associated data will be deleted to the extent permitted by law, and any funds involved will be reviewed in accordance with applicable regulations.

If you share a device with minors, gili58 strongly recommends enabling device-level parental controls and ensuring that your gili58 account credentials are not accessible to persons under 21.

12 Cross-Border Data Transfers

Certain third-party service providers used by gili58 — including cloud infrastructure providers, identity verification services, and game software providers — may process or store data outside the Philippines. Where such cross-border data transfers occur, gili58 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under Philippine law, including the Data Privacy Act of 2012 and NPC regulations on cross-border data flows.

gili58 requires all third-party processors outside the Philippines to comply with contractual data protection obligations consistent with Philippine data privacy standards. You may request information about the safeguards applicable to specific cross-border transfers by contacting the gili58 support team.

13 Changes to This Policy

gili58 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or the gili58 platform. Material changes to this Policy will be communicated to registered players via email or through a prominent notice on the gili58 platform at least seven (7) days before the updated Policy takes effect.

The effective date at the top of this Policy indicates when the current version was last updated. Your continued use of the gili58 platform after the effective date of any update constitutes your acknowledgment of the revised Policy. We encourage you to review this Policy periodically. The most current version will always be accessible at gili58.net/privacy-policy.

14 Contact and Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by gili58, please contact our Data Protection Officer through the gili58 support team. Our support email address is displayed as plain text in the footer of every page on gili58.net.

gili58 aims to respond to all privacy-related enquiries within five (5) Philippine business days. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the independent supervisory authority responsible for enforcing the Data Privacy Act of 2012. Information about how to file a complaint with the NPC is available through official Philippine government channels.