gpreya Privacy Policy

1. About This Privacy Policy

This Privacy Policy ("Policy") describes how gpreya ("gpreya," "we," "us," "our") collects, processes, stores, and protects the personal information of individuals ("Player," "User," "you") who access or use the gpreya online gaming platform available at gpreya.net, including all associated web pages, features, promotions, and services.

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines. By registering an account on gpreya or by continuing to use the gpreya platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside gpreya's Terms & Conditions and, where applicable, the specific terms of any promotion or loyalty programme you have opted into.

2. Personal Data We Collect

gpreya collects personal data through several means: directly from you when you register or interact with our platform, automatically through your use of our website, and occasionally from third-party sources such as payment processors and identity verification providers.

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, email address, mobile number, and residential address
• KYC documents: Government-issued Philippine ID (e.g., PhilSys National ID, Passport, Driver's License, UMID), proof of address, and selfie photographs where required for identity verification
• Payment information: GCash account reference, Maya wallet details, bank account details (BPI, BDO, Metrobank), and transaction records — note that full card numbers are never stored directly by gpreya
• Communications: Messages sent to gpreya via live chat, email, or support ticket systems, including the content and metadata of those communications
• Responsible gaming preferences: Deposit limit settings, self-exclusion requests, session time limits, and cooling-off period requests

2.2 Data Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers
• Usage data: Pages visited, games played, session duration, bet history, win/loss records, feature interactions, and navigation patterns on the gpreya platform
• Cookies and similar technologies: Session cookies, persistent cookies, and similar tracking mechanisms as described in Section 5
• Geolocation data: Approximate location derived from your IP address, used to verify that you are accessing gpreya from a permitted jurisdiction within the Philippines

2.3 Data From Third Parties

gpreya may receive personal data about you from third-party sources including identity verification service providers, payment processing partners (GCash, Maya, BPI, BDO), fraud prevention and anti-money laundering screening services, and publicly available Philippine government databases used for KYC compliance. All such data is handled in accordance with this Policy.

3. How We Use Your Personal Data

gpreya uses the personal data it collects for the following purposes. We process your data only where we have a valid legal basis to do so, as described in Section 4.

• Account creation and management: To register your gpreya player account, verify your identity, and maintain your account profile and preferences
• Service delivery: To provide access to gpreya's full suite of casino games, live dealer tables, bingo rooms, slot games, sports betting, and related platform features
• Payment processing: To process deposits and withdrawal requests via GCash, Maya, QR Ph, GrabPay, BPI, BDO, Metrobank, and 7-Eleven, and to maintain accurate transaction records
• KYC and regulatory compliance: To verify your identity and age (21+), conduct anti-money laundering (AML) screening, meet PAGCOR-aligned reporting obligations, and comply with applicable Philippine law
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, account abuse, bonus exploitation, money laundering, and other prohibited conduct on the gpreya platform
• Responsible gaming: To administer deposit limits, session limits, self-exclusion requests, cooling-off periods, and reality check features, and to identify and assist players showing signs of problem gambling
• Customer support: To respond to your queries, complaints, and account-related requests via live chat and email
• Marketing and promotions: To send you relevant offers, bonuses, and promotional communications where you have consented to receive them (see Section 11)
• Platform improvement: To analyse usage patterns, identify technical issues, test new features, and continuously improve the gpreya user experience for players across the Philippines
• Legal proceedings: To establish, exercise, or defend legal claims in the event of a dispute between you and gpreya

4. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules, gpreya relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing required to perform the contract between you and gpreya — i.e., to operate your player account and deliver gaming services. Without this processing, gpreya cannot provide its services to you.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including anti-money laundering obligations, KYC requirements, PAGCOR-aligned regulatory compliance, and any lawful orders from Philippine authorities.
• Legitimate interests: Processing carried out for gpreya's legitimate business interests where these are not overridden by your rights — including fraud prevention, platform security, responsible gaming monitoring, and improving our services.
• Consent: Where gpreya relies on your consent as the legal basis for processing — such as for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Cookies & Tracking Technologies

gpreya uses cookies and similar tracking technologies on its website to ensure the platform functions correctly, to improve the player experience, and to gather analytics data. A "cookie" is a small text file stored on your device by your web browser when you visit a website.

5.1 Types of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the gpreya platform to function. They enable you to log in, navigate between pages, and access secure areas of the site. You cannot opt out of these cookies while using gpreya.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, game lobby settings, and responsible gaming tool configurations — so you do not have to re-enter them every session.
• Analytics Cookies: These cookies help gpreya understand how players navigate the platform, which games are most popular, and where technical issues may be occurring. The data gathered is aggregated and does not identify individual players by name.
• Security Cookies: These cookies support gpreya's fraud detection and account security systems, helping us identify suspicious login patterns or unusual account activity.

5.2 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to block or delete cookies, though doing so may affect the functionality of the gpreya platform — particularly for strictly necessary cookies. For detailed instructions on managing cookies in your browser, consult your browser's help documentation.

6. Data Sharing & Disclosure

gpreya does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment service providers: GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other payment partners require transaction-level data to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• Identity verification providers: Third-party KYC and AML screening services that assist gpreya in verifying player identities, checking age (21+), and screening for money laundering risk in line with PAGCOR-aligned compliance requirements.
• Game technology providers: Providers such as JILI, Pragmatic Play, and Evolution receive limited technical session data necessary to deliver their games within the gpreya platform. These providers do not receive your full personal profile.
• IT and platform service providers: Cloud hosting, cybersecurity, fraud detection, and customer support technology providers that process personal data on gpreya's behalf under data processing agreements that require them to protect your data to the same standard as gpreya.
• Regulatory and law enforcement authorities: gpreya may be required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or Philippine law enforcement agencies where required by law, court order, or regulatory direction.
• Professional advisers: Lawyers, auditors, and accountants acting as service providers to gpreya, bound by professional confidentiality obligations.

Any third party that processes personal data on behalf of gpreya is required to do so only for the specific purpose for which the data was shared and in accordance with a written data processing agreement consistent with Philippine data privacy law.

7. Data Retention

gpreya retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

After the applicable retention period has elapsed, gpreya will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

8. Data Security

gpreya implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• TLS/SSL encryption: All data transmitted between your device and the gpreya platform is encrypted using Transport Layer Security (TLS) protocols, protecting it from interception during transit.
• Data encryption at rest: Sensitive personal data stored in gpreya's systems — including KYC documents and financial records — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within gpreya's internal systems is restricted to authorised personnel only, on a strict need-to-know basis, with role-based access controls and audit logging.
• Two-factor authentication: gpreya supports and strongly encourages players to enable two-factor authentication (2FA) via SMS OTP on their accounts to prevent unauthorised access.
• Security monitoring: gpreya operates continuous security monitoring to detect and respond to potential data breaches, intrusions, or abnormal access patterns in real time.
• Staff training: All gpreya personnel with access to personal data receive regular training on data protection obligations, information security practices, and the requirements of Philippine data privacy law.

While gpreya takes all reasonable precautions to protect your data, no digital platform can guarantee absolute security. You are also responsible for maintaining the security of your own account credentials. If you suspect unauthorised access to your gpreya account, contact our support team immediately via live chat.

9. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to the personal data gpreya holds about you:

• Right to be informed: You have the right to know what personal data gpreya collects about you, the purposes for which it is processed, and to whom it may be disclosed. This Privacy Policy serves as gpreya's primary disclosure mechanism.
• Right of access: You have the right to request a copy of the personal data gpreya holds about you, along with information about how it is being processed.
• Right to rectification: If any personal data gpreya holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For most account details, you can update your information directly through your gpreya account settings.
• Right to erasure: In certain circumstances — for example, where the personal data is no longer necessary for the purpose it was collected — you may request that gpreya delete your personal data. This right is subject to gpreya's legal obligations to retain certain data as described in Section 7.
• Right to data portability: You have the right to receive a copy of certain personal data you have provided to gpreya in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to gpreya processing your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, though gpreya may be able to demonstrate overriding grounds that justify continued processing.
• Right to withdraw consent: Where gpreya relies on your consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to file a complaint: If you believe gpreya has processed your personal data in breach of RA 10173, you have the right to file a complaint directly with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact gpreya's Data Protection Officer as described in Section 13. gpreya will respond to all valid data subject requests within thirty (30) days of receipt, or within such extended timeframe as permitted by applicable Philippine law where the request is complex or numerous.

10. Children's Privacy & Age Restriction

The gpreya platform is strictly intended for adults aged 21 years and older, in accordance with the minimum legal age for participation in casino-style gambling in the Philippines. gpreya does not knowingly collect, process, or store personal data relating to individuals under 21 years of age.

Age verification is a mandatory step during the gpreya registration process, and gpreya enforces KYC procedures specifically to confirm that all players meet the 21+ age requirement before they are permitted to deposit funds or participate in any real-money gaming activity.

If you are a parent or guardian and believe that a minor has registered on the gpreya platform or accessed it without authorisation, please contact gpreya's support team immediately via live chat so we can take appropriate action without delay.

11. Marketing Communications

gpreya may send you promotional communications — including bonus offers, free spin notifications, tournament announcements, seasonal promotions, and loyalty programme updates — via email and SMS, subject to the following conditions:

• gpreya will only send marketing communications to players who have given their explicit consent to receive them, either during registration or by updating their communication preferences in the account settings.
• Every marketing email or SMS sent by gpreya includes a clear and easy mechanism for you to opt out of future communications — either an unsubscribe link in the email or a reply instruction in the SMS.
• You may update your marketing preferences at any time through your gpreya account dashboard or by contacting the support team via live chat.
• Opting out of marketing communications will not affect gpreya's ability to send you transactional or service-related communications — such as deposit confirmations, withdrawal notifications, KYC requests, security alerts, and account updates — which are sent as part of the contractual relationship between you and gpreya.

gpreya does not share your contact details with third-party marketers for their own independent marketing campaigns. All promotional communications you receive from gpreya originate from gpreya itself and relate exclusively to gpreya's own products, services, and promotions.

12. Updates to This Privacy Policy

gpreya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, regulatory requirements, or business operations. When material changes are made to this Policy, gpreya will notify registered players via email to the address on file and/or via a prominent notice on the gpreya platform.

The "Last Updated" date at the top of this page will always reflect when the most recent version of this Policy was published. We encourage you to review this Privacy Policy periodically to stay informed about how gpreya protects your personal information.

Your continued use of the gpreya platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with any amendment to this Policy, you should stop using the gpreya platform and may request account closure by contacting our support team.

13. Contact Us & Data Protection Officer

gpreya has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, you may contact gpreya through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, via the gpreya platform — the fastest way to reach us for urgent data-related concerns
• Email (Data Privacy): support [at] gpreya.net — please include "Data Privacy Request" in the subject line of your email
• Response Time: gpreya aims to acknowledge all data subject requests within five (5) business days and to resolve them within thirty (30) days of receipt

gpreya serves players across the Philippines — from Manila and Quezon City to Cebu, Davao, Makati, and beyond. Our Data Protection Officer and support team are equipped to assist with all personal data queries, access requests, rectification requests, and responsible gaming matters.