gl55 Privacy Policy

This Privacy Policy ("Policy") describes how gl55 ("gl55", "we", "us", "our"), the operator of the online gaming platform accessible at gl55.app and its associated mobile and web applications, collects, uses, stores, shares, and protects the personal information of its registered players and website visitors ("you", "your", "Data Subject").

gl55 is committed to upholding your right to privacy and to processing your personal data lawfully, fairly, and transparently in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. This Policy also reflects gl55's obligations as a PAGCOR-regulated gaming operator with respect to data security, anti-money laundering (AML) record-keeping, and responsible gaming monitoring.

This Policy applies to all personal data collected by gl55 through the following channels:

• The gl55 website at gl55.app and all subdomains
• The gl55 mobile application (iOS and Android)
• Customer support communications via live chat, email, and in-platform messaging
• KYC and identity verification processes
• Financial transactions processed through integrated payment gateways
• Promotional campaigns, surveys, and competitions operated by gl55

This Policy does not apply to third-party websites or services that may be referenced on the gl55 platform. gl55 is not responsible for the privacy practices of any third party, and we encourage you to review the privacy policies of any external services you use.

gl55 collects personal data in several categories depending on how you interact with the platform:

gl55 processes your personal data only for the following specific, legitimate purposes:

• Account creation and management — to register, verify, maintain, and secure your gl55 player account.
• KYC and identity verification — to comply with PAGCOR's player registration and Know Your Customer requirements before processing withdrawals.
• Transaction processing — to facilitate deposits and withdrawals through GCash, Maya, BPI, BDO, Metrobank, and other approved Philippine payment channels.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, account misuse, money laundering, and prohibited conduct on the platform.
• PAGCOR and AMLC regulatory compliance — to fulfil mandatory reporting obligations to the Philippine Amusement and Gaming Corporation and the Anti-Money Laundering Council under applicable Philippine law.
• Responsible gaming — to monitor gameplay patterns, enforce deposit and loss limits, administer self-exclusion requests, and identify players who may need support.
• Customer support — to respond to your queries, resolve disputes, and improve our service delivery to Filipino players.
• Platform improvement — to analyse aggregated usage data, optimise game performance, and enhance the overall player experience.
• Marketing communications — to send you personalised promotions, bonus offers, and platform updates where you have explicitly opted in to receive such communications.

gl55 does not process your personal data for any purpose not listed above without obtaining your prior explicit consent or as otherwise required by law.

gl55 relies on one or more of the following lawful bases when processing your personal data, as established under the Data Privacy Act of 2012:

• Contractual necessity — processing required to fulfil the Terms and Conditions between you and gl55, including account registration, deposit/withdrawal processing, and gameplay facilitation.
• Legal obligation — processing required to comply with PAGCOR licensing conditions, AMLA reporting obligations, NPC directives, and other applicable Philippine statutes.
• Legitimate interests — processing necessary for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your privacy rights.
• Consent — processing for optional purposes such as direct marketing and personalised promotions, where you have provided a freely given, specific, informed, and unambiguous opt-in.

gl55 does not sell, rent, or trade your personal data to any third party for commercial gain. We share personal data only in the following controlled circumstances:

• Payment service providers — GCash, Maya, GrabPay, InstaPay, PesoNet, BPI, BDO, Metrobank, and 7-Eleven CLiQQ, solely for the purpose of processing your financial transactions. These providers are bound by their own regulatory and data protection obligations under Bangko Sentral ng Pilipinas (BSP) guidelines.
• Certified game providers — JILI, Pragmatic Play, PG Soft, Evolution Gaming, and other licensed game studios, who receive session and bet data necessary to operate the games you play. All providers operate under data processing agreements with gl55.
• KYC and identity verification services — third-party identity verification platforms used to validate government-issued IDs and conduct liveness checks as part of the KYC process.
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government bodies, where disclosure is mandated by law, court order, or regulatory directive.
• Law enforcement — Philippine National Police (PNP), National Bureau of Investigation (NBI), or other law enforcement agencies where gl55 is legally compelled to disclose information in the course of a criminal investigation.
• Internal group entities — affiliated companies within the gl55 group, strictly for platform administration and regulatory compliance purposes, subject to the same data protection standards as this Policy.

gl55 implements a multi-layered security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the gl55 platform.
• AES-256 encryption for sensitive data stored in gl55 databases, including KYC documents and financial records.
• Role-based access controls (RBAC) ensuring that only authorised gl55 personnel with a verified business need can access personal data, with full audit trail logging.
• Multi-factor authentication (MFA) for all internal gl55 systems that process personal data.
• Regular penetration testing and independent security audits conducted by certified third-party security firms.
• Data breach response procedures — in the event of a personal data breach affecting your information, gl55 will notify you and the NPC within seventy-two (72) hours of becoming aware of the breach, as required under NPC Circular 16-03.

While gl55 takes all reasonable technical and organisational measures to protect your data, no method of electronic storage or internet transmission is completely secure. You are also responsible for maintaining the confidentiality of your account login credentials.

gl55 retains your personal data for as long as your player account remains active and for a defined period thereafter, in compliance with applicable Philippine legal and regulatory requirements:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification, using approved data destruction procedures consistent with NPC guidelines.

The gl55 platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and analyse platform usage. The types of cookies we use include:

• Strictly necessary cookies — essential for platform functionality, including maintaining your login session, processing transactions securely, and enabling responsible gaming controls. These cannot be disabled.
• Analytics cookies — used to collect anonymised data about how players navigate the platform, which games are most popular, and where technical issues may occur. This data helps us improve the gl55 experience.
• Preference cookies — used to remember your language preferences, game display settings, and notification choices between sessions.
• Marketing cookies — used only where you have given explicit consent, to personalise promotional offers and measure the effectiveness of marketing campaigns targeted at Filipino players.

You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use the core features of the gl55 platform, though some personalisation features may be limited.

The gl55 platform is strictly restricted to individuals who are 21 years of age or older, in accordance with Philippine law governing casino-style online gambling. This age restriction is enforced at the point of registration through date-of-birth verification and KYC identity checks.

gl55 does not knowingly collect, store, or process personal data from individuals under the age of 21. If we become aware that personal data of a minor has been collected on the platform, we will immediately suspend the relevant account, delete the data, and report the incident to PAGCOR as required under our licensing obligations.

To exercise any of your rights under the Data Privacy Act of 2012, submit a written request to our Data Protection Officer using the contact details in Section 14. Your request must include:

• Your full registered name and gl55 username
• A clear description of the right you wish to exercise
• A valid Philippine government-issued ID for identity verification
• Any additional information relevant to your request

gl55 will acknowledge your request within three (3) business days and provide a substantive response within fifteen (15) business days. Where a request is complex or involves a large volume of data, we may extend this period by a further fifteen (15) business days, notifying you of the extension and the reason for it.

Where gl55 is unable to fulfil a data subject request — for example, because retention is required by PAGCOR or AMLC regulations — we will explain the specific legal basis for our inability to comply in full. You retain the right to file a complaint with the National Privacy Commission at www.privacy.gov.ph if you are dissatisfied with our response.

As an online gaming platform operating with internationally licensed game providers, gl55 may transfer certain personal data — specifically gameplay session data — to servers or data processors located outside the Philippines. Such transfers occur only when:

• The receiving country provides an adequate level of data protection as recognised by the NPC, or
• Appropriate safeguards are in place, including binding data processing agreements that impose obligations equivalent to those required under Philippine law, or
• The transfer is necessary for the performance of a contract between you and gl55 (i.e., to facilitate gameplay on a provider's certified platform).

Your core personal data — including KYC documents, financial records, and registration information — is stored on servers located within the Philippines or in jurisdictions with equivalent data protection standards approved by the NPC.

gl55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, Philippine legal requirements, PAGCOR regulatory updates, or NPC guidance. When material changes are made, gl55 will:

• Post the updated Privacy Policy on this page with a revised effective date
• Notify registered players via email or in-platform notification at least seven (7) days before the changes take effect
• Where required by the Data Privacy Act, seek fresh consent for any new processing purposes introduced by the amendment

Your continued use of the gl55 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree to the changes, you may request account closure by contacting our support team before the effective date.

gl55 has appointed a Data Protection Officer (DPO) in accordance with Section 21 of the Data Privacy Act of 2012 and NPC Circular 17-01. The DPO is responsible for overseeing gl55's compliance with this Policy and applicable data privacy laws, and serves as the primary point of contact for all data subject requests and privacy-related concerns.

To contact the gl55 Data Protection Officer or our general support team regarding any privacy matter, please use the following:

If you wish to escalate a privacy complaint beyond gl55, you may contact the National Privacy Commission (NPC) of the Philippines, the independent government body responsible for administering and enforcing the Data Privacy Act of 2012.