Privacy Policy

1. Introduction and Scope

gl18 ("we", "us", "our", or "gl18") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect personal data obtained from users ("you", "your", or "Player") of the gl18 online casino and sports betting platform located at https://gl18.cam, including any associated mobile applications, services, and features (collectively, the "Platform").

This Privacy Policy applies to all users who access or use gl18 services, regardless of how you access the Platform (web browser, mobile device, application, or other technology). By registering an account, accessing the Platform, or using any gl18 services, you acknowledge that you have read, understood, and consent to the data collection, processing, and usage practices described in this Privacy Policy. This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of gl18 services.

gl18 operates in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, implementing regulations from the National Privacy Commission (NPC), and adheres to international data protection standards including GDPR principles where applicable. We are committed to transparency regarding our data practices and your rights as a data subject under Philippine law.

2. Information We Collect

gl18 collects various types of personal information necessary to provide gaming services, comply with legal obligations, prevent fraud, and enhance user experience. The categories of information we collect include:

2.1 Information You Provide Directly

When you register for a gl18 account, make deposits, request withdrawals, or interact with our services, you voluntarily provide information including:

• Account Registration Data: Full legal name, date of birth, email address, phone number (mobile), residential address (street, city, province, postal code), chosen username, password, and security questions/answers.
• Identity Verification Documents: Government-issued identification (Philippine passport, driver's license, UMID, voter's ID, postal ID, or other valid ID), proof of address documents (utility bills, bank statements, government correspondence), and selfie photographs for facial verification.
• Financial Information: Payment method details including GCash mobile number, Maya account information, bank account numbers and names (BPI, BDO, Metrobank, UnionBank, or other Philippine banks), transaction history, deposit amounts, withdrawal requests, and payment method verification documents.
• Communications: Customer support inquiries, live chat transcripts, email correspondence, feedback submissions, complaint details, and any other communications you send to gl18.
• Marketing Preferences: Communication preferences, promotional opt-in/opt-out choices, newsletter subscriptions, and SMS/email marketing consent.

2.2 Information Collected Automatically

When you access and use the gl18 Platform, we automatically collect certain technical and usage information through cookies, web beacons, log files, and similar tracking technologies:

• Device Information: Device type, operating system and version, browser type and version, screen resolution, device identifiers (IMEI, MAC address, advertising ID), mobile network information, and device settings.
• Usage Data: Pages viewed, features accessed, time spent on Platform, navigation paths, click patterns, game history, betting patterns, session duration, login/logout times, and interaction with Platform features.
• Connection Data: IP address, geographic location (country, region, city), internet service provider (ISP), connection type, network quality, timestamp of access, and referring/exit URLs.
• Gameplay Information: Games played, bets placed, bet amounts, winnings, losses, bonuses claimed, wagering activity, game results, RTP (Return to Player) statistics, and gaming behavior patterns.

2.3 Information from Third-Party Sources

gl18 may receive information about you from third-party sources including payment processors (GCash, Maya, banks), identity verification services, credit reference agencies, fraud prevention databases, social media platforms (if you choose to link accounts), and publicly available sources for compliance and verification purposes.

3. How We Use Your Information

gl18 processes your personal information for specific, legitimate purposes necessary to provide gaming services, comply with legal obligations, and maintain Platform security. We use your data for the following purposes:

Purpose	Legal Basis
Account registration, authentication, and management	Contract performance, legitimate interests
Processing deposits, withdrawals, and financial transactions	Contract performance, legal obligation
Identity verification and KYC (Know Your Customer) compliance	Legal obligation, legitimate interests
Age verification to prevent underage gambling (21+ enforcement)	Legal obligation, legitimate interests
Fraud detection, prevention, and security monitoring	Legitimate interests, legal obligation
Anti-money laundering (AML) compliance and suspicious activity reporting	Legal obligation
Providing customer support and resolving disputes	Contract performance, legitimate interests
Responsible gaming monitoring and problem gambling prevention	Legitimate interests, legal obligation
Personalizing user experience and game recommendations	Legitimate interests, consent (where required)
Sending promotional communications, bonuses, and marketing materials	Consent, legitimate interests (with opt-out option)
Analyzing Platform usage, improving services, and product development	Legitimate interests
Complying with regulatory requirements and responding to legal requests	Legal obligation

We process personal data only to the extent necessary for the identified purposes. Data minimization principles ensure we collect and retain only information required to fulfill legitimate business, legal, or security needs. Automated decision-making systems (including fraud detection algorithms, bonus abuse detection, and responsible gaming triggers) may affect your account status, but you have the right to request human review of such decisions.

4. Information Sharing and Disclosure

gl18 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information with carefully selected third parties under strict contractual obligations to protect your data:

• Payment Service Providers: GCash, Maya (PayMaya), banks (BPI, BDO, Metrobank, UnionBank), payment gateways, and financial institutions that process deposits and withdrawals. Information shared is limited to transaction processing requirements.
• Identity Verification Services: Third-party KYC providers that verify your identity, age, and address using government databases and document authentication technology.
• Game Providers: Software developers (JILI Games, Pragmatic Play, Evolution Gaming, and others) receive anonymized gameplay data to operate games, calculate RTPs, and ensure fair play. Personal identifying information is not shared unless required for jackpot verification.
• Fraud Prevention Partners: Security specialists, fraud detection services, and databases that help identify suspicious activity, prevent account takeovers, and combat money laundering.
• Customer Support Tools: Live chat platforms, email service providers, and CRM systems used to deliver customer support. Support staff access your information only to assist with inquiries.
• Analytics and Performance Monitoring: Analytics platforms that help us understand Platform usage, identify technical issues, and improve user experience. Data is typically anonymized or pseudonymized.
• Legal and Regulatory Authorities: Philippine government agencies (National Privacy Commission, PAGCOR, Bureau of Internal Revenue), law enforcement, courts, and regulatory bodies when legally required or to protect our rights and comply with legal obligations.
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties that process your data on behalf of gl18 are contractually obligated to maintain confidentiality, implement appropriate security measures, use data only for specified purposes, and comply with applicable data protection laws. We conduct due diligence to ensure third-party partners meet our privacy and security standards.

5. Data Security and Protection

gl18 implements comprehensive technical, organizational, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security infrastructure includes:

• Encryption: Industry-standard SSL/TLS encryption (256-bit) for all data transmitted between your device and gl18 servers. Sensitive financial data and passwords are encrypted at rest using AES-256 encryption.
• Access Controls: Role-based access controls ensure only authorized personnel can access personal data on a need-to-know basis. Multi-factor authentication is required for administrative access.
• Network Security: Firewalls, intrusion detection systems (IDS), intrusion prevention systems (IPS), and distributed denial-of-service (DDoS) protection safeguard Platform infrastructure.
• Regular Security Audits: Third-party penetration testing, vulnerability assessments, and security audits are conducted regularly to identify and remediate potential weaknesses.
• Employee Training: All gl18 staff receive mandatory data protection training and are bound by confidentiality agreements prohibiting unauthorized disclosure of customer information.
• Data Segregation: Personal data, financial data, and gameplay data are stored in separate, secure environments with restricted cross-access to minimize exposure in the event of a security incident.
• Monitoring and Logging: Continuous monitoring of Platform activity, automated threat detection, and comprehensive audit logs enable rapid identification and response to security incidents.

While we implement robust security measures, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your login credentials and immediately notifying gl18 of any suspected unauthorized access to your account. We recommend using strong, unique passwords, enabling two-factor authentication where available, and logging out after each session, especially on shared devices.

6. Data Retention

gl18 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, enforce agreements, and maintain business records required by law. Retention periods vary based on data type and regulatory requirements:

• Account Data: Active account information is retained for the duration of your relationship with gl18 plus a minimum of five (5) years after account closure to comply with anti-money laundering and tax regulations.
• Financial Transaction Records: Deposit, withdrawal, and betting transaction records are retained for at least seven (7) years to comply with financial record-keeping requirements under Philippine law.
• Identity Verification Documents: KYC documents are retained for five (5) years following account closure as required by AML regulations and to prevent re-registration during self-exclusion periods.
• Communications: Customer support transcripts, email correspondence, and complaints are retained for three (3) years for dispute resolution and quality assurance purposes.
• Marketing Data: Marketing preferences and communication history are retained until you withdraw consent or for three (3) years of inactivity, whichever comes first.
• Gameplay Logs: Anonymized or aggregated gameplay data may be retained indefinitely for analytics, game fairness verification, and regulatory reporting purposes.

After the applicable retention period expires, personal data is securely deleted or anonymized so that it can no longer identify you. Data deletion involves cryptographic erasure of encryption keys, rendering data permanently unrecoverable. If you request account closure, you may also request expedited deletion of non-essential personal data, subject to our legal obligations to retain certain records.

7. Your Privacy Rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173) and implementing regulations, you have the following rights regarding your personal information:

• Right to Be Informed: You have the right to be informed about the collection, use, disclosure, and processing of your personal data. This Privacy Policy fulfills that obligation.
• Right to Access: You may request a copy of the personal information we hold about you, including details about how it is processed, who it is shared with, and retention periods.
• Right to Rectification: You can request correction of inaccurate, incomplete, or outdated personal information. Most account information can be updated directly through your account settings.
• Right to Erasure (Right to Be Forgotten): You may request deletion of your personal data when it is no longer necessary for the purposes it was collected, you withdraw consent, or you object to processing. This right is subject to legal retention obligations.
• Right to Object: You can object to processing of your personal information for direct marketing purposes, including profiling for marketing. You may also object to processing based on legitimate interests by providing specific grounds.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Right to Lodge a Complaint: You have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact gl18's Data Protection Officer using the contact details provided in Section 12. We will respond to verified requests within thirty (30) days. Identity verification may be required to protect your information from unauthorized access. In some cases, legal obligations may limit our ability to fulfill certain requests, such as deletion of financial transaction records required for tax compliance.

8. Cookies and Tracking Technologies

gl18 uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance user experience, analyze Platform usage, deliver personalized content, and support advertising. Cookies are small text files stored on your device that enable us to recognize your browser and capture certain information.

Types of cookies we use:

• Essential Cookies: Necessary for Platform operation, enabling core functionality such as user authentication, security features, and session management. These cookies cannot be disabled without severely affecting Platform functionality.
• Performance Cookies: Collect information about how you use the Platform, including pages visited, time spent, and errors encountered. This data helps us improve Platform performance and user experience.
• Functional Cookies: Remember your preferences (language, currency, region) and personalize your experience. These cookies enhance convenience but are not essential for basic Platform operation.
• Advertising Cookies: Used to deliver relevant advertisements, track campaign effectiveness, and limit ad frequency. These cookies may be set by gl18 or third-party advertising partners.

You can control cookie preferences through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling essential cookies will prevent you from accessing certain Platform features and may affect functionality. Third-party advertising cookies can be managed through your browser's privacy settings or industry opt-out mechanisms. For more information about cookies and how to manage them, visit www.aboutcookies.org or www.allaboutcookies.org.

9. International Data Transfers

gl18 primarily operates within the Philippines and stores data on servers located in secure data centers within the Philippines or in jurisdictions with adequate data protection standards. In some cases, your personal information may be transferred to, processed, or stored in countries outside the Philippines, including third-party service providers located in jurisdictions such as Singapore, European Union member states, or the United States.

When we transfer personal data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with Philippine data protection laws, including:

• Ensuring the recipient country has been recognized by the National Privacy Commission as providing adequate data protection
• Implementing Standard Contractual Clauses (SCCs) or equivalent data transfer agreements
• Verifying that third-party processors maintain security standards equivalent to those required under Philippine law
• Obtaining your explicit consent where required by law

You may request information about international data transfers and the safeguards in place by contacting our Data Protection Officer using the details provided in Section 12.

10. Children's Privacy

gl18 services are strictly intended for individuals aged 21 years or older, consistent with Philippine gambling laws. We do not knowingly collect, use, or maintain personal information from individuals under the age of 21. Our registration process includes age verification mechanisms, and we implement age-gate technology to prevent access by minors.

If we become aware that we have inadvertently collected personal information from an individual under 21 years of age, we will take immediate steps to delete such information, terminate the account, confiscate any funds deposited, and implement measures to prevent future underage access. Parents or guardians who believe their child has provided personal information to gl18 should contact us immediately using the contact details in Section 12.

We encourage parents and guardians to monitor their children's internet usage, implement parental control software, and educate minors about the risks of sharing personal information online and the age restrictions governing online gambling.

11. Changes to This Privacy Policy

gl18 reserves the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our data practices, legal obligations, business operations, or technological capabilities. Material changes will be notified to users through prominent notices on the Platform, email notifications to registered users, or push notifications through mobile applications, where applicable.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal information. Continued use of gl18 services after changes to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you must stop using gl18 services and may close your account in accordance with our Terms and Conditions.

For significant changes that materially affect your rights or how we process your data, we may require explicit consent or provide an opportunity to opt out before the changes take effect, as required by applicable law.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, our data practices, or your privacy rights, please contact gl18's Data Protection Officer or customer support team:

• Data Protection Officer: [email protected]
• General Customer Support: [email protected]
• Live Chat: Available 24/7 through the Platform
• Response Time: We aim to respond to privacy inquiries within 72 hours and fulfill data subject rights requests within 30 days

When contacting us about privacy matters, please provide sufficient detail to allow us to verify your identity and address your inquiry effectively. For security reasons, we may request additional information to confirm your identity before disclosing personal data or fulfilling certain requests.

National Privacy Commission (Philippines): If you believe your data protection rights have been violated and you are not satisfied with our response, you may file a complaint with the National Privacy Commission at www.privacy.gov.ph or by mail at 5th Floor, Philippine International Convention Center (PICC), Vicente Sotto Street, Pasay City, Metro Manila 1307, Philippines.