gpera Privacy Policy
At gpera, your privacy is not an afterthought — it is a core part of how the platform is built and operated. This Privacy Policy explains exactly what personal data gpera collects from Filipino players, why it is collected, how it is used, and the rights you hold as a data subject under Philippine law.
How gpera Handles Your Personal Data
These highlights summarize gpera's core privacy principles. They do not replace the full policy below — please read all sections for complete information on how your data is collected, processed, and protected.
Compliant with Philippine Law
gpera processes all personal data in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and the implementing rules issued by the National Privacy Commission (NPC) of the Philippines.
Encrypted & Secured
All data transmitted between your device and the gpera platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive account data is stored with additional encryption layers at rest.
No Data Selling
gpera does not sell your personal information to third parties for their own marketing purposes — ever. Your data is used only to operate and improve the gpera platform and to fulfill our legal obligations under PAGCOR regulations.
You Control Your Data
As a data subject under Philippine law, you have the right to access, correct, delete, and port your personal data. gpera provides clear processes for exercising each of these rights, outlined in full in Section 10 of this policy.
Defined Retention Periods
gpera does not hold your personal data indefinitely. Retention periods are defined for each data category and are based on legal requirements, regulatory obligations under PAGCOR, and legitimate business necessity — nothing more.
Breach Notification
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, gpera will notify affected players and the National Privacy Commission within the timeframes required by Philippine law and NPC regulations.
1Who We Are
gpera is an online gaming platform operating at gpera.net, providing Filipino players with access to slots, live casino games, sports betting, bingo, and other gaming entertainment. gpera operates under the regulatory authority of the Philippine Amusement and Gaming Corporation (PAGCOR) and is committed to maintaining the highest standards of data privacy for all users of the platform.
For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, gpera acts as the Personal Information Controller (PIC) in respect of the personal data collected from players and visitors to the gpera platform. As PIC, gpera determines the purposes and means by which your personal data is processed.
2Scope of This Policy
This Privacy Policy applies to all personal data collected and processed by gpera in connection with:
- The registration and maintenance of player accounts on the gpera platform.
- The use of any game, betting market, promotional offer, or other feature available on gpera.net.
- Financial transactions, including deposits, withdrawals, and bonus processing.
- Communications between you and the gpera customer support team through any channel.
- Visits to the gpera website, including passive data collected through cookies and analytics tools.
- Participation in any survey, feedback request, or research activity conducted by gpera.
This Policy does not apply to third-party websites, services, or applications that may be linked to or integrated with the gpera platform. Those third parties operate under their own privacy policies, and gpera bears no responsibility for their data practices.
3Personal Data We Collect
gpera collects the following categories of personal data from players and platform visitors. The specific data collected may vary depending on how you interact with the platform and which services you use.
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, government-issued ID number, selfie/photo for KYC | Registration & KYC verification |
| Contact Data | Email address, mobile number, home address (city, province) | Registration & account updates |
| Financial Data | GCash/Maya account reference, bank account details (masked), transaction history | Deposits & withdrawals |
| Gaming Data | Game sessions, bet history, win/loss records, bonus usage, wagering patterns | During platform use |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Automatic — on each visit |
| Communication Data | Support chat transcripts, email correspondence, feedback submissions | When you contact us |
| Marketing Preferences | Opt-in/opt-out choices for email, SMS, and push notifications | Registration & account settings |
gpera does not intentionally collect sensitive personal information such as racial or ethnic origin, religious beliefs, health data, or political affiliations, except where specifically required for responsible gaming assessments or as mandated by PAGCOR regulations.
4How We Collect Your Data
gpera collects personal data through the following means:
- Directly from you: When you register an account, complete KYC verification, make a financial transaction, contact customer support, respond to a survey, or update your account preferences.
- Automatically: When you visit or use the gpera platform, certain technical data is collected automatically through cookies, web beacons, log files, and similar tracking technologies (see Section 8 for full details).
- From third-party verification providers: gpera uses licensed KYC and identity verification partners to confirm the identity and age of players in compliance with PAGCOR's Know Your Customer requirements. These providers share verification results with gpera under data processing agreements.
- From payment processors: When you make a deposit or withdrawal using GCash, Maya, BPI, BDO, Metrobank, or other supported payment methods, transaction confirmation data is shared with gpera by the relevant payment processor.
- From regulatory and fraud-prevention services: gpera may receive data from anti-money laundering screening services and responsible gaming registries as required by law and PAGCOR regulations.
5Why We Use Your Personal Data
gpera uses your personal data only for clearly defined, legitimate purposes. The table below sets out the primary purposes for which gpera processes player data and the corresponding legal basis for each purpose.
| Purpose | Data Used |
|---|---|
| Create and manage your gpera player account | Identity, Contact |
| Verify your age (21+) and identity per PAGCOR KYC requirements | Identity, Financial |
| Process deposits, withdrawals, and bonus transactions | Financial, Identity |
| Provide customer support and resolve disputes | Identity, Communication, Gaming |
| Monitor for fraud, collusion, and money laundering (AML compliance) | Financial, Technical, Gaming |
| Apply responsible gaming tools and safeguards | Gaming, Identity, Communication |
| Send promotional communications (where you have opted in) | Contact, Marketing Preferences |
| Improve platform performance, personalize your experience | Technical, Gaming |
| Comply with legal and regulatory obligations | All categories as required |
gpera does not use your personal data for automated decision-making that produces significant legal effects without human review, except where such processing is expressly required by PAGCOR's regulatory framework or Philippine law.
6Legal Basis for Processing
Under the Data Privacy Act of 2012, gpera relies on the following legal bases for processing your personal data:
- Contractual necessity: Processing required to enter into and perform the player account agreement with you, including account creation, KYC verification, game access, and financial transactions.
- Legal obligation: Processing required to comply with applicable Philippine laws, including the Anti-Money Laundering Act (RA 9160), the Data Privacy Act (RA 10173), and PAGCOR's licensing conditions and operating guidelines.
- Legitimate interests: Processing necessary for gpera's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided that these interests are not overridden by your data protection rights.
- Consent: For processing that is not covered by the above bases — specifically, the sending of marketing communications via email, SMS, or push notification — gpera relies on your freely given, specific, and informed consent. You may withdraw this consent at any time through your account settings or by contacting support.
7Sharing Your Personal Data
gpera does not sell or rent your personal data to third parties. However, gpera may share your data with carefully selected third parties in the following circumstances:
- Service providers and processors: Third-party companies engaged by gpera to perform specific functions on its behalf, including KYC verification providers, payment processors (GCash, Maya, BPI, BDO, Metrobank, etc.), cloud hosting providers, customer support platform operators, and analytics services. These parties process data only on gpera's documented instructions under binding data processing agreements.
- Regulatory and law enforcement authorities: gpera is legally required to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities upon lawful request or as mandated by its operating license conditions.
- Responsible gaming registries: Where a player has been self-excluded or is the subject of a regulatory exclusion order, certain data may be shared with industry-wide responsible gaming registries as required by PAGCOR.
- Business transfers: In the event of a merger, acquisition, or sale of all or part of gpera's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights in connection with it.
All third parties with whom gpera shares personal data are required to respect its confidentiality and security and to process it only for the specified, lawful purpose for which it was shared.
8Cookies and Tracking Technologies
gpera uses cookies and similar tracking technologies to operate the platform, improve user experience, and collect analytics data. A cookie is a small text file placed on your device by the gpera website when you visit it. The following types of cookies are used on gpera.net:
- Strictly necessary cookies: Essential for the platform to function correctly. These include session authentication cookies and security tokens. These cannot be disabled without affecting platform functionality.
- Functional cookies: Remember your preferences such as language settings, display options, and last-used payment method to improve your experience across sessions.
- Analytics cookies: Collect anonymized data about how visitors use the gpera platform — which pages are visited most frequently, session duration, and error reports. This data helps gpera improve the platform experience for all Filipino players.
- Marketing cookies: Used only where you have given consent, to show you relevant gpera promotions and to measure the effectiveness of marketing campaigns. You may opt out of marketing cookies at any time.
You may manage your cookie preferences through your browser settings or through the cookie consent tool available on the gpera website. Please note that disabling strictly necessary cookies may impair your ability to use the platform.
9Data Retention
gpera retains personal data only for as long as is necessary for the purposes described in this Privacy Policy, or as required by Philippine law and PAGCOR regulations. The following general retention periods apply:
- Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, as required by PAGCOR's record-keeping obligations and the Anti-Money Laundering Act.
- Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AML and PAGCOR regulatory requirements.
- Gaming and bet history: Retained for a minimum of three (3) years from the date of each gaming session, for dispute resolution and regulatory audit purposes.
- Customer support communications: Retained for two (2) years from the date of each interaction, unless a longer retention period is required by an ongoing dispute or regulatory matter.
- Marketing preferences and communications: Retained until you withdraw consent or close your account, whichever occurs first.
- Technical and log data: Retained for up to twelve (12) months from collection, unless required for an active security investigation.
When personal data is no longer required, gpera will securely delete or anonymize it in accordance with industry best practices and NPC guidelines.
10Your Rights as a Data Subject
Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights in relation to your personal data held by gpera. You may exercise any of these rights by contacting gpera's Data Protection Officer at [email protected].
Right to Access
Request a copy of the personal data gpera holds about you and information about how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your gpera account.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Right to Data Portability
Receive a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service.
Right to Object
Object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
Right to Lodge a Complaint
File a complaint with the National Privacy Commission (NPC) of the Philippines if you believe gpera has not handled your data lawfully.
11Data Security
gpera implements a comprehensive set of technical, organizational, and physical security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:
- TLS encryption for all data transmitted between your device and the gpera platform.
- Encryption of sensitive data stored in gpera's databases, including financial account details and government ID information.
- Role-based access controls ensuring that only authorized gpera personnel with a defined business need can access player personal data.
- Regular security assessments, penetration testing, and vulnerability scanning of the gpera platform and underlying infrastructure.
- Two-factor authentication (2FA) options available to players for account login security.
- Staff training on data privacy and security obligations under Philippine law, conducted regularly.
- A documented incident response plan for managing personal data breaches in accordance with NPC notification requirements.
While gpera takes every reasonable precaution to protect your data, no system can guarantee absolute security. You also play an important role in keeping your account secure by maintaining a strong, unique password and not sharing your login credentials with anyone.
12Children's Privacy
The gpera platform is strictly for persons aged 21 years and above. gpera does not knowingly collect personal data from individuals under the age of 21. This restriction is a legal requirement under PAGCOR regulations governing online gaming in the Philippines.
If gpera becomes aware that it has inadvertently collected personal data from a person under the age of 21, it will immediately close the relevant account, delete the personal data in question, and report the incident to PAGCOR in accordance with its regulatory obligations.
If you believe that a minor has registered on the gpera platform, please contact us immediately at [email protected] so that appropriate action can be taken without delay.
13Updates to This Privacy Policy
gpera may update this Privacy Policy from time to time to reflect changes in applicable law, NPC regulations, PAGCOR requirements, or the way the gpera platform operates. When material changes are made, gpera will notify registered players via email to their registered address and/or via a prominent notice on the gpera platform, at least seven (7) days before the updated policy takes effect.
The "Last updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how gpera protects your personal data. Your continued use of the gpera platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.
If you do not agree with any changes to this Privacy Policy, you should discontinue use of the platform and may request account closure as described in the gpera Terms & Conditions.
14Contact and Data Protection Officer
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by gpera, please contact us through the following channel:
Email: [email protected] (Subject: "Attention: Data Protection Officer")
Language: English and Filipino
Response time: Within 3 business days (acknowledgment); within 15 business days (full response)
If you are not satisfied with gpera's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012.
This Privacy Policy was last reviewed and updated in January 2026. The most current version is always available at gpera.net/privacy-policy.
Your Privacy is Protected on gpera
Now that you know how gpera handles your data, you can play with confidence. gpera offers over 1,000 games for Filipino players — all within a secure, PAGCOR-regulated environment. Must be 21 or older to play.
PAGCOR regulated · 21+ only · Data Privacy Act compliant