gl96 Privacy Policy

1 Introduction & Scope

gl96 ("we", "us", "our", "the Platform") respects the privacy of every individual who accesses gl96.org. This Privacy Policy describes in clear and complete terms how we handle the personal data of players who register an account, deposit funds, participate in games, access customer support, or interact with any feature of the gl96 platform.

This policy applies to:

• All registered gl96 players and former players whose data is retained in accordance with applicable law;
• Individuals who visit gl96.org without registering, to the extent that technical data is collected during the visit;
• Individuals who contact gl96 customer support without holding a registered account.

This policy does not apply to third-party websites linked from gl96 content, or to the data practices of game providers whose software is integrated into the gl96 platform. Those providers operate under their own privacy frameworks.

By creating a gl96 account and using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein to the extent required by applicable law.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, gl96 is the personal information controller in respect of the personal data of all registered players on the gl96 platform.

gl96 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with applicable data protection laws and handling data subject requests. Contact details for the gl96 DPO are provided in Section 16 of this policy.

Where gl96 engages third-party processors to carry out data processing activities on its behalf — such as KYC verification services, payment processors, or analytics providers — gl96 remains the data controller and those third parties act as personal information processors bound by data processing agreements that impose obligations equivalent to those applicable to gl96.

3 Personal Data We Collect

3.1 Identity and Registration Data

When you register a gl96 account, we collect your full legal name, date of birth, email address, and Philippine mobile number. For KYC verification purposes, we additionally collect copies of a valid Philippine government-issued photo identification document, proof of address, and a biometric selfie photograph used for identity confirmation.

3.2 Financial and Payment Data

To process deposits and withdrawals, gl96 collects details of the payment methods you register against your account — including GCash account numbers, PayMaya account numbers, and bank account details (BSB and account number) for BPI, BDO, and Metrobank transactions. gl96 does not store full payment card numbers. Full transaction records, including amounts, timestamps, and payment method references, are retained as required for regulatory and AML compliance.

3.3 Technical and Device Data

When you access gl96.org, our systems automatically collect technical data including your IP address, device type and model, operating system and version, browser type and version, and session duration information. This data is used for platform security, fraud prevention, and service improvement purposes.

3.4 Gaming and Behavioural Data

gl96 maintains records of all gaming activity on the platform, including game titles accessed, bets placed, game outcomes, session durations, and bonus utilisation history. This data is required for regulatory reporting under PAGCOR obligations and for the operation of responsible gaming monitoring systems.

3.5 Communications Data

Records of all communications between you and gl96 — including live chat transcripts, support ticket content, email exchanges, and any correspondence submitted through the platform — are retained for support quality monitoring, dispute resolution, and compliance purposes.

4 How We Collect Your Data

gl96 collects personal data through the following channels:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting support, or updating your account profile;
• Automated Collection: Technical and usage data collected automatically as you interact with the gl96 platform, via server logs, session tracking, and cookie technologies (see Section 7);
• Third-Party KYC Providers: Identity verification data returned by our KYC processing partners when you submit verification documents. gl96 receives a verification result and, where applicable, a processed copy of your identity document;
• Payment Processors: Transaction confirmation data returned by GCash, PayMaya, BPI, BDO, Metrobank, and other payment gateways following a successful deposit or withdrawal;
• Regulatory Authorities: In limited circumstances, gl96 may receive data from PAGCOR or other regulatory bodies in connection with compliance inquiries or investigations.

5 How We Use Your Personal Data

gl96 processes your personal data for the following specific purposes:

• Account Management: Creating and maintaining your gl96 account, authenticating your login, and managing account settings and preferences;
• Identity and Age Verification: Confirming that you satisfy the 21-years-of-age minimum and the identity requirements imposed by PAGCOR regulations before permitting real-money gambling;
• Payment Processing: Executing your deposit and withdrawal requests through your registered Philippine payment methods, and reconciling transaction records;
• Regulatory Compliance: Meeting gl96's obligations under the PAGCOR regulatory framework, including transaction reporting, player activity monitoring, and anti-money laundering (AML) requirements;
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, and unauthorised account access;
• Responsible Gaming: Monitoring gambling patterns to identify potential problem gambling behaviours, administering player-activated limits and self-exclusion tools, and fulfilling responsible gaming obligations;
• Customer Support: Responding to your support queries, resolving disputes, and maintaining records of interactions for quality and compliance purposes;
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the gl96 platform, optimise game recommendations, and enhance the player experience;
• Marketing Communications: Where you have provided consent, sending promotional emails or SMS messages about gl96 bonuses, new games, and special offers.

6 Legal Bases for Processing

Under the Philippine Data Privacy Act of 2012, gl96 processes personal data under one or more of the following lawful bases:

7 Cookies and Tracking Technologies

7.1 Types of Cookies Used

gl96.org uses the following categories of cookies and similar tracking technologies:

• Strictly Necessary Cookies: Required for the platform to function — including session authentication, account security tokens, and load-balancing cookies. These cannot be disabled without affecting platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised data about how players navigate the platform — including pages visited, time on site, and error events — to enable ongoing improvement of the gl96 experience.
• Functional Cookies: Used to remember your preferences such as language settings, preferred game categories, and login persistence settings.
• Marketing Cookies: Used, where you have consented, to display relevant promotional content and measure the effectiveness of gl96's marketing activities.

7.2 Cookie Management

You can manage cookie preferences through your browser settings. Most modern browsers allow you to refuse non-essential cookies. Note that disabling strictly necessary cookies will impair your ability to use the gl96 platform, including logging into your account. gl96's cookie consent interface is presented on first visit and can be revisited at any time.

8 Sharing Your Personal Data

gl96 may share your personal data with the following categories of recipient:

• KYC and Identity Verification Providers: Third-party services that process your identity documents and selfie photographs to produce a verified identity check result. These providers are contractually bound to process data only for verification purposes.
• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and USDT gateway operators — to the extent necessary to execute your payment instructions. These processors operate under their own regulatory frameworks and privacy policies.
• Game Content Providers: Game suppliers (including live dealer and slot providers) may receive pseudonymised player identifiers and wager data for the purpose of game delivery, RNG certification, and dispute resolution. No directly identifying personal data is shared beyond what is contractually necessary.
• Regulatory and Law Enforcement Authorities: gl96 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities when required by law, court order, or valid regulatory demand;
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by gl96 on a confidential basis as necessary for the operation of the platform;
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of gl96's business, personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

9 Data Retention

gl96 retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable Philippine law. The principal retention periods applied are:

• Account and Identity Data: Retained for the duration of the account relationship and for a minimum of 5 years following account closure, in compliance with PAGCOR record-keeping requirements and AML obligations under Republic Act No. 9160;
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, as required by AML legislation;
• KYC Documentation: Retained for a minimum of 5 years following account closure or the last transaction, whichever is later;
• Customer Support Communications: Retained for a maximum of 3 years from the date of the interaction, unless retention is required in connection with an ongoing dispute;
• Technical and Log Data: Retained for a maximum of 12 months in active systems, after which it is archived or anonymised;
• Marketing Preferences: Retained until withdrawn by the data subject, plus a reasonable period for administrative processing.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with gl96's data lifecycle management procedures.

10 Security Measures

gl96 implements technical and organisational measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• Encryption: 256-bit TLS/SSL encryption for all data transmitted between your device and the gl96 platform;
• Access Controls: Role-based access controls limiting internal access to personal data to authorised personnel with a documented business need;
• Two-Factor Authentication: Available for player accounts and required for all internal administrative access to personal data systems;
• Payment Security: Payment processing conducted through PCI-DSS compliant gateways; gl96 does not store full card numbers or CVV data;
• Security Monitoring: Continuous monitoring of platform systems for intrusion attempts, anomalous access patterns, and potential data breaches;
• Penetration Testing: Regular third-party security assessments of the gl96 platform infrastructure;
• Incident Response: Documented procedures for responding to personal data breaches, including notification obligations to the National Privacy Commission as required by the Data Privacy Act.

While gl96 takes all reasonable precautions, no internet-based platform can guarantee absolute security. Players are responsible for maintaining the security of their own account credentials and devices.

11 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by gl96:

• Right to Be Informed: The right to know how your personal data is collected, processed, and used — as described in this Privacy Policy;
• Right to Access: The right to obtain a copy of the personal data gl96 holds about you and information about how it is processed;
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected. You may update most account information directly through your gl96 account settings; for KYC-related corrections, please contact support;
• Right to Erasure / Right to be Forgotten: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to gl96's legal retention obligations under PAGCOR regulations and AML law — which may require retention for a minimum of 5 years;
• Right to Object: The right to object to processing based on legitimate interest, including direct marketing;
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe gl96 has processed your data unlawfully or in breach of the Data Privacy Act.

To exercise any of the above rights, please contact the gl96 Data Protection Officer using the details in Section 16. We will respond to all verifiable requests within 30 days. Identity verification may be required before processing certain requests.

12 Children and Minors

gl96 implements age verification procedures during account registration and KYC processes specifically to prevent minors from accessing the platform. If gl96 becomes aware that personal data has been collected from an individual under 21 years of age, that data will be deleted immediately and the associated account will be permanently closed.

If you have reason to believe that a minor has registered a gl96 account or provided personal data to the platform, please contact our support team immediately through the live chat service at gl96.org.

13 Cross-Border Data Transfers

Some of the third-party service providers engaged by gl96 — including KYC verification providers, game content suppliers, and cloud infrastructure providers — may process personal data in jurisdictions outside the Philippines. Where this occurs, gl96 ensures that:

• Transfers are made only to countries or organisations that provide an adequate level of data protection comparable to the standards required by the Philippine Data Privacy Act;
• Appropriate contractual safeguards — including standard data processing clauses — are in place with all overseas processors;
• The volume of personal data transferred overseas is limited to the minimum necessary for the service in question.

For enquiries about specific cross-border transfers or the safeguards in place, please contact the gl96 Data Protection Officer.

14 Marketing Communications

gl96 may send you promotional communications about bonuses, new game releases, sports betting promotions, and special offers via email or SMS, provided that:

• You have given explicit consent to receive marketing communications during registration or via your account settings; or
• You are an existing gl96 player and the communication relates to similar services, where applicable law permits this.

You may withdraw consent to marketing communications at any time by:

• Updating your communication preferences in your gl96 account settings under "Notifications";
• Clicking the unsubscribe link included in every gl96 promotional email;
• Replying STOP to any gl96 promotional SMS message;
• Contacting gl96 support via live chat and requesting removal from all marketing lists.

Opt-out requests will be processed within 5 business days. Withdrawing marketing consent does not affect service-related communications about your account, transactions, or security.

15 Amendments to This Privacy Policy

gl96 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform functionality, or our data processing practices. Material changes will be communicated to registered players via the email address on file or through a prominent notice on the gl96 platform prior to the changes taking effect.

The effective date of the current version of this policy is displayed at the top of this page. We recommend reviewing this policy periodically. Your continued use of the gl96 platform following the effective date of any revision constitutes your acknowledgement of the updated policy.

Prior versions of this Privacy Policy are available upon request by contacting the gl96 Data Protection Officer.

16 Contact Information & Data Protection Officer

For all privacy-related enquiries, data subject right requests, or complaints regarding gl96's handling of your personal data, please contact:

If you are not satisfied with gl96's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines through official NPC channels.

This Privacy Policy was last reviewed and updated in January 2026. This version supersedes all previously published versions. Your continued use of the gl96 platform constitutes acceptance of the current policy.