gopeso Privacy Policy

1. About This Privacy Policy

This Privacy Policy applies to all personal data collected, processed, and stored by gopeso in connection with the operation of the gopeso.org platform, including its website, mobile interface, games, payment systems, promotional communications, and customer support services.

gopeso is committed to protecting the privacy and personal data of every player who uses our platform. We operate in accordance with the Republic Act No. 10173 — Data Privacy Act of 2012 of the Philippines, along with its Implementing Rules and Regulations issued by the National Privacy Commission (NPC).

This Privacy Policy should be read together with the gopeso Terms & Conditions, which govern your overall use of the platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a data privacy matter, this Privacy Policy shall prevail.

2. Data We Collect

gopeso collects personal data in the following categories, depending on your interactions with the platform:

Registration & Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Nationality and country of residence
• Email address and mobile phone number
• Username and encrypted password

Identity Verification (KYC) Data

• Copies of government-issued Philippine identification documents (e.g., PhilSys National ID, UMID, Passport, Driver's License)
• Selfie or liveness check images submitted during verification
• Proof of address documents where required for enhanced due diligence

Financial & Transaction Data

• GCash or Maya mobile wallet account details (masked for display)
• Bank account name and number for BPI, BDO, or Metrobank transfers
• USDT wallet addresses used for cryptocurrency deposits and withdrawals
• Deposit and withdrawal transaction history, amounts, timestamps, and statuses
• Wagering history, game session data, and betting activity records

Technical & Usage Data

• IP address and approximate geolocation derived from your IP
• Device type, operating system, and browser version
• Session duration, pages visited, and features accessed on the platform
• Login timestamps and authentication logs
• Error logs and crash reports used for platform stability improvements

Communication Data

• Live chat transcripts with gopeso support agents
• Email correspondence with the gopeso support team
• Records of any complaints, disputes, or feedback submitted to gopeso

3. How We Collect Your Data

gopeso collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion.
• Automatically: When you browse or use the gopeso platform, we automatically collect technical and usage data through cookies, server logs, and similar technologies.
• From payment processors: When you initiate a transaction via GCash, Maya, BPI, BDO, Metrobank, or a USDT network, our payment processing partners share transaction confirmation data with gopeso to credit or debit your account.
• From identity verification providers: When you complete KYC, we work with certified identity verification service providers who process your documents and return a verification result to gopeso. These providers are contractually bound to handle your data in compliance with the Philippine DPA.
• From fraud prevention and AML screening services: gopeso uses third-party tools to screen player activity against regulatory watchlists and detect patterns associated with money laundering or fraudulent behaviour, as required under Philippine anti-money-laundering regulations.

4. Why We Use Your Data

gopeso processes your personal data for the following clearly defined purposes:

gopeso will not use your personal data for any purpose not listed in this Privacy Policy without first obtaining your explicit consent, except where required by applicable Philippine law or a valid regulatory or court order.

5. Legal Bases for Processing

Under the Philippine Data Privacy Act of 2012, gopeso processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create and operate your account, execute transactions, and provide the services you have requested from gopeso.
• Legal obligation: Processing required to comply with Philippine anti-money-laundering laws (AMLA and its amendments), PAGCOR regulatory requirements, tax obligations, and any other applicable Philippine legislation.
• Legitimate interests: Processing undertaken for gopeso's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and improving our services — provided these interests do not override your fundamental data privacy rights.
• Consent: Processing based on your explicit, freely given, and informed consent — primarily for sending promotional communications and non-essential cookies. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Data Sharing & Disclosure

gopeso does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances, and only to the extent necessary for the specified purpose:

• Payment processors: GCash (G-Xchange Inc.), Maya (PayMaya Philippines Inc.), major Philippine banks (BPI, BDO, Metrobank), and blockchain network operators for USDT — solely to process your financial transactions.
• Identity verification providers: Certified KYC and document verification service providers who process your identity documents on gopeso's behalf under strict data processing agreements.
• Fraud prevention and AML screening services: Third-party compliance tools used to meet Philippine anti-money-laundering obligations and detect fraudulent activity.
• Game content providers: Where necessary for the operation of third-party games on the gopeso platform, limited session and transaction data may be shared with certified game studios. No personally identifiable information is shared beyond what is strictly necessary.
• Regulatory and law enforcement authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), Philippine National Police, or other competent authorities — where required by a valid legal order, regulatory directive, or applicable Philippine law.
• Professional advisers: Lawyers, auditors, and accountants engaged by gopeso under strict professional confidentiality obligations, only where necessary for legal, compliance, or financial audit purposes.

7. Data Retention

gopeso retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law — whichever period is longer.

• Account data and KYC records: Retained for a minimum of five (5) years from the date of account closure or the last transaction, as required under Philippine anti-money-laundering regulations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLA requirements and Bureau of Internal Revenue (BIR) record-keeping obligations.
• Support communications: Retained for two (2) years from the date of the communication, or longer if the matter is subject to ongoing dispute resolution or legal proceedings.
• Technical and usage data: Retained in aggregate, anonymised form for platform analytics purposes indefinitely. Personally identifiable technical data (e.g., IP logs) is retained for no longer than twelve (12) months unless required for fraud investigation.
• Marketing consent records: Retained for the duration of your account plus three (3) years after account closure, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, gopeso will securely delete or anonymise your personal data in a manner that prevents reconstruction or identification.

8. Data Security

gopeso implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• Encryption: All data in transit is protected by TLS 1.2 or higher (256-bit SSL). All sensitive data at rest is encrypted using AES-256 encryption.
• Password security: Passwords are stored using bcrypt hashing with individual salts. Plain-text password storage is strictly prohibited within gopeso's systems.
• Access controls: Strict role-based access controls (RBAC) ensure that only authorised gopeso personnel can access personal data, and only to the extent required for their job function.
• Two-factor authentication: gopeso strongly recommends enabling 2FA on your account. Internal systems also require multi-factor authentication for all staff access.
• Regular security audits: gopeso conducts periodic penetration testing and security audits on its platform infrastructure.
• Incident response: gopeso maintains a documented data breach response procedure. In the event of a breach that affects your personal data, we will notify the National Privacy Commission and affected players in accordance with the timelines prescribed by the Philippine DPA.

9. Cookies & Tracking Technologies

gopeso uses cookies and similar technologies (such as local storage and session tokens) to operate the platform effectively and provide you with a seamless gaming experience. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and responsible gaming limits you have set. These improve your experience but are not strictly required for the platform to operate.
• Analytics cookies: gopeso uses first-party analytics tools to collect aggregate, anonymised data about how players navigate the platform. This data helps us identify bugs, improve page performance, and prioritise feature development. We do not use Google Analytics or other third-party analytics services that share data externally.

You can manage your cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in to your gopeso account. Functional and analytics cookies can be disabled without affecting your ability to play.

10. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by gopeso:

• Right to be informed: You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfils that obligation.
• Right of access: You may request a copy of the personal data gopeso holds about you at any time. We will respond to verified access requests within fifteen (15) business days.
• Right to rectification: If any personal data gopeso holds about you is inaccurate or incomplete, you have the right to request correction. You can update basic profile details directly in your account settings, or contact support for KYC record corrections.
• Right to erasure: You may request deletion of your personal data. Note that gopeso may be legally required to retain certain data for the mandatory periods described in Section 7 (Data Retention) above, and erasure requests cannot override those legal obligations.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time by unsubscribing from promotional emails or contacting support. You may also object to processing based on legitimate interests, though such objections are subject to assessment against gopeso's regulatory and operational requirements.
• Right to data portability: You may request that gopeso provide your personal data in a structured, commonly used, machine-readable format to enable transfer to another service provider, where technically feasible.
• Right to lodge a complaint: If you believe gopeso has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact gopeso support via live chat inside your account dashboard or by email at [email protected]. We may need to verify your identity before processing any data rights request.

11. Children & Minors

The gopeso platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law governing online gambling and casino-style gaming. gopeso does not knowingly collect personal data from individuals under the age of 21.

If gopeso discovers or is notified that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account, delete the personal data in question, and void any transactions or balances associated with that account without recourse.

12. Cross-Border Data Transfers

gopeso primarily stores and processes your personal data within the Philippines. In certain cases, data may be transferred to or processed by service providers operating in other jurisdictions — for example, cloud infrastructure providers or international game studios whose servers are located outside the Philippines.

Where such cross-border transfers occur, gopeso ensures that adequate safeguards are in place in accordance with the requirements of the Philippine Data Privacy Act of 2012 and NPC regulations, including:

• Contractual clauses requiring the recipient to maintain data protection standards equivalent to those under Philippine law.
• Transfers only to jurisdictions or service providers that the NPC has recognised as offering adequate data protection.
• Your explicit consent, where required and where the above safeguards are not sufficient.

gopeso will not transfer your personal data internationally in a manner that undermines your rights under the Philippine DPA.

13. Third-Party Links

The gopeso platform may contain links to third-party websites or services — for example, payment provider portals or game studio websites — that operate independently of gopeso. This Privacy Policy applies solely to gopeso.org and the services directly operated by gopeso.

gopeso is not responsible for the privacy practices, data collection methods, or content of any third-party website or service. We strongly recommend that you review the privacy policy of any third-party site you visit before submitting personal data to it.

14. Changes to This Privacy Policy

gopeso reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, or regulatory requirements. The updated policy will always be published at gopeso.org/privacy-policy, with the effective date revised accordingly.

For material changes — those that significantly affect how we collect, use, or share your personal data — gopeso will provide prior notice to registered players via email or a prominent in-platform notification before the changes take effect. For non-material clarifications or minor amendments, the updated policy will be published without individual notice.

Your continued use of the gopeso platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you disagree with any changes, you should cease using the platform and request account closure prior to the effective date.

15. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data privacy rights, or want to raise a concern about how gopeso handles your personal data, please contact our Data Privacy team:

• Live Chat: Available 24/7 directly inside your gopeso account dashboard. This is the fastest way to reach our support team.
• Email: [email protected] — responses within 24 hours on Philippine business days.

gopeso will acknowledge all data privacy requests within three (3) business days and aim to resolve them within fifteen (15) business days of receipt. Complex requests involving large volumes of data or legal review may require additional time, in which case we will notify you of the extended timeline.

For complete details on your rights and how to use the platform responsibly, please also review our Terms & Conditions and Responsible Gaming pages.