goldph Privacy Policy

At goldph, we understand that entrusting a gaming platform with your personal information — your name, your Philippine mobile number, your GCash or bank account details — requires real trust. That trust is not something we take lightly. This Privacy Policy is our formal commitment to you regarding how we handle every piece of personal data you share with the goldph platform.

This Policy applies to all personal data collected by goldph in connection with your use of goldph.club, including account registration, KYC verification, deposits, gameplay, promotions, and customer support interactions. It applies to all players regardless of their location, with specific application to data subjects in the Republic of the Philippines.

1.1 This Privacy Policy ("Policy") describes the data processing practices of goldph Operations ("goldph", "we", "us", "our") in relation to all personal information collected from users ("you", "your", "Player") of the goldph platform accessible at goldph.club.

1.2 This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines (the "DPA"), and its Implementing Rules and Regulations (the "IRR"), as administered by the National Privacy Commission (the "NPC").

1.3 This Policy applies to all personal data collected through: (a) the goldph website at goldph.club; (b) the goldph mobile web platform; (c) communications between you and goldph via live chat, email, or SMS; and (d) any third-party payment channels or service providers used in connection with your goldph account.

1.4 This Policy should be read in conjunction with goldph's Terms and Conditions, which govern your overall use of the goldph platform. In the event of any conflict between this Policy and the Terms and Conditions on privacy-related matters, this Policy shall prevail.

2.1 The data controller responsible for the personal data processed in connection with the goldph platform is goldph Operations, the operator of goldph.club.

2.2 goldph has designated a Data Protection Officer (DPO) responsible for overseeing the implementation and compliance with this Privacy Policy and all applicable Philippine data protection legislation. The goldph DPO can be contacted via the details provided in Section 15 of this Policy.

2.3 goldph has registered as a personal information controller with the National Privacy Commission of the Philippines in accordance with Section 46 of the DPA's Implementing Rules and Regulations.

goldph collects the following categories of personal data in connection with the provision of the goldph platform:

goldph does not collect sensitive personal information beyond what is strictly necessary for KYC compliance and legal obligations. goldph does not collect or store payment card numbers — all card-based transactions are handled directly by certified payment processors under their own PCI-DSS compliance frameworks.

goldph collects personal data through the following means:

• Direct collection — information you provide when registering your goldph account, completing KYC verification, making deposits or withdrawals, contacting goldph support, or participating in promotions;
• Automated collection — technical data collected automatically when you access the goldph platform, including via cookies, session tracking, device fingerprinting, and server logs;
• Third-party payment providers — transaction confirmation and reference data received from GCash, Maya, BPI, BDO, and other payment processors when you make deposits or withdrawals via those channels;
• KYC verification partners — identity verification status data received from authorised KYC verification service providers used by goldph;
• Publicly available sources — limited public information used for AML screening purposes, including sanctions lists and politically exposed persons (PEP) databases.

goldph processes your personal data for the following purposes:

• Account creation and management — creating and administering your goldph player account, verifying your identity, and maintaining accurate account records;
• Platform operation — enabling gameplay, processing bets, recording game outcomes, and operating the goldph single-wallet system across all game sections;
• Financial transactions — processing deposits and withdrawals via GCash, Maya, BPI, BDO, and other accepted payment methods; reconciling transaction records; and investigating payment disputes;
• Legal and regulatory compliance — fulfilling goldph's obligations under Philippine AML legislation, PAGCOR requirements, NPC data protection regulations, and other applicable laws — including reporting obligations to the Anti-Money Laundering Council (AMLC);
• Security and fraud prevention — detecting and preventing unauthorised account access, fraudulent transactions, money laundering, and prohibited conduct as defined in goldph's Terms and Conditions;
• Responsible gaming — monitoring gaming behaviour to identify patterns indicative of problem gambling and administering responsible gaming tools including deposit limits, session timers, and self-exclusion;
• Customer support — responding to account queries, resolving disputes, processing complaints, and providing technical assistance;
• Communications — sending account notifications, security alerts, and — where you have consented — promotional communications about goldph offers and new games;
• Platform improvement — analysing aggregated, anonymised usage data to improve the goldph platform, game library, and user experience for Filipino players.

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, goldph processes your personal data on the following legal bases:

• Contractual necessity — processing required to fulfil goldph's contractual obligations to you under the Terms and Conditions, including account operation, payment processing, and game provision;
• Legal obligation — processing required for goldph to comply with applicable Philippine law, including AML obligations, PAGCOR requirements, NPC registration requirements, and judicial or regulatory orders;
• Legitimate interest — processing for fraud prevention, security monitoring, and platform improvement that does not override your privacy rights and interests;
• Consent — processing for marketing communications and non-essential cookies, where you have given explicit, freely given, specific, informed, and unambiguous consent. You may withdraw consent for these purposes at any time without affecting the lawfulness of prior processing.

7.1 goldph does not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances.

7.2 goldph may share your personal data with the following categories of third parties strictly as necessary for the purposes described in this Policy:

• Payment processors — GCash, Maya, BPI, BDO, Metrobank, UnionBank, and other accepted payment providers, to the extent necessary to process your deposits and withdrawals;
• KYC and identity verification providers — certified third-party KYC service providers engaged by goldph to verify the identity and age of account holders;
• Game content providers — game studios and live dealer operators (such as JILI Games and PG Soft) may receive limited technical session data necessary to deliver game content to your account;
• Regulatory authorities — the NPC, AMLC, PAGCOR, or other Philippine regulatory authorities, where goldph is required by law to disclose information or respond to a lawful order or request;
• Professional advisors — lawyers, auditors, and other professional advisors engaged by goldph, subject to professional duties of confidentiality;
• Technology service providers — cloud hosting, cybersecurity, and platform infrastructure providers engaged by goldph, bound by contractual data processing obligations consistent with this Policy.

7.3 All third parties with whom goldph shares personal data are required to maintain the confidentiality and security of that data and are prohibited from using it for any purpose other than those for which it was shared.

8.1 The goldph platform operates using cloud infrastructure that may process and store data in locations outside the Philippines, including data centres in Singapore, Japan, and the United States operated by goldph's hosting partners.

8.2 Where personal data is transferred outside the Philippines, goldph implements appropriate safeguards to ensure the transferred data receives a standard of protection consistent with the Philippine Data Privacy Act of 2012 and the NPC's guidelines on cross-border data transfers. These safeguards include contractual data transfer agreements with receiving parties.

8.3 Transfers of personal data to third-party game providers and live dealer studios located outside the Philippines are made on the basis of contractual data processing agreements that impose data protection obligations on those providers consistent with Philippine law.

9.1 goldph retains personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with applicable legal obligations, resolve disputes, and enforce goldph's agreements.

9.2 The following general retention periods apply:

9.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes re-identification impossible.

goldph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the goldph platform;
• AES-256 encryption for personal data stored in goldph's databases, including KYC documents and financial information;
• Role-based access controls that restrict employee access to personal data strictly to those with a business need to access it;
• Multi-factor authentication required for all goldph staff accessing systems containing personal data;
• Continuous security monitoring including intrusion detection systems, anomaly detection, and real-time IP monitoring;
• Regular penetration testing and third-party security audits of goldph's infrastructure;
• Documented incident response procedures for personal data breaches, including NPC notification protocols consistent with Section 38 of the DPA's IRR.

11.1 goldph uses cookies and similar tracking technologies on the goldph platform. Cookies are small data files placed on your device that help goldph remember your preferences, maintain your session, and improve platform performance.

11.2 goldph uses the following categories of cookies:

• Strictly necessary cookies — required for the platform to function, including session management, login persistence, and security features. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings and game display options. These enhance your experience but are not strictly required.
• Analytics cookies — collect anonymised data about how players use the goldph platform to help us improve it. No personally identifiable information is collected for analytics purposes.
• Security cookies — used for device fingerprinting and IP monitoring to detect unauthorised access and prevent fraud.

11.3 You may manage non-essential cookie preferences through your browser settings. Note that disabling functional or security cookies may impair certain platform features or the platform's ability to protect your account.

Under the Philippine Data Privacy Act of 2012 and its IRR, you have the following rights in relation to your personal data held by goldph:

To exercise any of the above rights, contact goldph's Data Protection Officer as described in Section 15. goldph will respond to all data rights requests within thirty (30) days of receipt. Where a request is complex or relates to a large volume of data, goldph may extend this period by a further thirty (30) days, with prior written notice.

13.1 The goldph platform is strictly restricted to persons aged 21 years or older in accordance with PAGCOR's minimum age requirements for casino-style gaming in the Philippines. goldph does not knowingly collect personal data from persons under 21 years of age.

13.2 goldph implements mandatory KYC age verification through government-issued Philippine identification documents before any withdrawal is processed. This verification process serves as goldph's primary technical measure for preventing underage access to real-money gaming.

13.3 If goldph discovers or receives credible notification that personal data has been collected from a person under 21 years of age, goldph will: (a) immediately suspend the relevant account; (b) delete or anonymise the personal data of the minor; and (c) return any deposited funds via the original payment method to the extent technically possible.

13.4 If you are aware of a minor accessing the goldph platform, please contact goldph's support team immediately via live chat or at [email protected].

14.1 goldph reserves the right to update or amend this Privacy Policy at any time to reflect changes in: (a) applicable Philippine data protection law or NPC guidance; (b) goldph's data processing practices; (c) the services or features available on the goldph platform; or (d) goldph's third-party service provider relationships.

14.2 The "Last Updated" date at the top of this Policy reflects the most recent revision. For material changes — including changes that significantly affect your rights or how goldph processes sensitive personal information — goldph will provide at least seven (7) days' prior notice via SMS to your registered Philippine mobile number or via email notification.

14.3 Your continued use of the goldph platform after any update to this Policy constitutes your acknowledgment of the updated Policy. If you do not accept the updated terms of this Policy, you should cease use of the goldph platform and contact support to request account closure.

For any privacy-related enquiries, data rights requests, or complaints relating to goldph's handling of your personal data, please contact goldph's Data Protection Officer through the following channels:

• DPO Email: [email protected] — mark your subject line "Data Privacy Request" for priority routing to the DPO.
• Live Chat: Available 24/7 via the goldph platform. Identify your query as a "data privacy matter" at the start of the conversation for routing to a qualified support agent.
• Response time: goldph acknowledges all privacy requests within 72 hours and completes substantive responses within 30 days in accordance with DPA requirements.

If you believe goldph has not adequately addressed your privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines.