Your personal data belongs to you. Here is exactly how gamph collects, uses, stores, and protects it — in plain language, no legal jargon.
Last Updated: January 2026 | Effective Date: January 1, 2026
This Privacy Policy ("Policy") describes how gamph ("gamph," "we," "us," or "our") collects, uses, discloses, stores, and protects the personal information of individuals ("you," "your," or "Player") who access or use the gamph online gaming platform, including the gamph website and any associated mobile-optimised interfaces (collectively, the "Platform").
gamph is committed to protecting the privacy and personal data of every Filipino player who trusts us with their information. This Policy is designed to comply with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission ("NPC").
By registering an account with gamph or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the gamph Platform.
This Policy should be read alongside the gamph Terms & Conditions, which govern your use of the Platform as a whole. Defined terms used in this Policy have the same meaning as in the Terms & Conditions unless otherwise stated.
Before diving into the full legal text, here is a plain-language summary of gamph's core privacy commitments to every Filipino player on the Platform.
All data transmitted between your device and the gamph Platform is encrypted using industry-standard 256-bit SSL technology. Your login credentials, financial details, and personal information are protected in transit at all times.
gamph does not sell, rent, or trade your personal data to third-party marketers. Your information is used exclusively to operate your gamph account, comply with PAGCOR and NPC regulations, and improve your experience on the Platform.
gamph collects only the personal data that is strictly necessary for account registration, identity verification, payment processing, and regulatory compliance. We do not collect data beyond what is needed to deliver the Platform safely.
gamph retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by Philippine law and PAGCOR regulations. Data that is no longer needed is securely deleted or anonymised.
Under the Data Privacy Act of 2012, you have the right to access, correct, delete, and object to the processing of your personal data. gamph makes it straightforward to exercise these rights through your account settings or by contacting our Data Protection Officer.
gamph's data practices are designed to comply with the National Privacy Commission's guidelines under RA 10173 and PAGCOR's data handling requirements for licensed online gaming operators in the Philippines.
For the purposes of the Data Privacy Act of 2012 and this Policy, gamph acts as the personal information controller ("PIC") in respect of the personal data collected from Players through the Platform. As PIC, gamph determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.
gamph has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and with applicable data protection laws. Contact details for the DPO are provided in Section 14 of this Policy.
gamph collects the following categories of personal data from Players, depending on how you interact with the Platform:
gamph collects personal data through the following channels:
gamph processes your personal data for the following purposes:
| Purpose | Data Categories Used |
|---|---|
| Account registration and management | Registration data, device data |
| Identity verification (KYC) and age verification (21+) | Identity data, KYC documents |
| Processing deposits and withdrawals in PHP | Financial data, identity data |
| Delivering and improving gaming services | Gaming activity data, technical data |
| Fraud prevention and anti-money laundering (AML) compliance | All categories as required |
| Regulatory reporting to PAGCOR and NPC | Identity data, financial data, gaming data |
| Customer support and dispute resolution | Communications data, account data |
| Responsible gaming monitoring and intervention | Gaming activity data, account settings |
| Sending service notifications and account alerts | Registration data, communications data |
| Sending promotional communications (with consent) | Registration data, gaming activity data |
| Platform security and technical maintenance | Technical data, device data |
Under the Data Privacy Act of 2012, gamph processes your personal data on the following legal bases:
gamph does not sell your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:
gamph engages third-party service providers who process personal data on our behalf as personal information processors ("PIPs") under the DPA. These include:
All third-party processors engaged by gamph are bound by data processing agreements that require them to process personal data only on gamph's documented instructions and to implement appropriate security measures.
gamph may disclose personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), or other Philippine government authorities where required by law, court order, or regulatory directive. gamph will notify affected Players of such disclosures where legally permitted to do so.
In the event of a merger, acquisition, or sale of all or substantially all of gamph's assets, your personal data may be transferred to the acquiring entity. gamph will notify Players of any such transfer and ensure that the receiving entity is bound by privacy obligations no less protective than those in this Policy.
gamph may share your data with other third parties where you have given your explicit consent to such sharing. You may withdraw this consent at any time by contacting the gamph Data Protection Officer.
gamph retains personal data for the periods set out below, after which data is securely deleted, anonymised, or archived in accordance with applicable law:
| Data Category | Retention Period |
|---|---|
| Account registration and identity data | Duration of account plus 5 years after closure |
| KYC documents and verification records | Duration of account plus 5 years after closure |
| Financial transaction records | 10 years from transaction date (AMLC requirement) |
| Gaming activity logs | 5 years from the date of each session |
| Customer support communications | 3 years from the date of the last interaction |
| Cookie and technical data | As specified in the Cookie settings (typically 13 months) |
| Marketing consent records | Until consent is withdrawn, plus 3 years |
Where gamph is required by law to retain data for a longer period, the statutory retention period will apply. Data retained solely for legal compliance purposes will be restricted from active processing and accessible only to authorised compliance personnel.
gamph implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
The gamph Platform uses cookies and similar tracking technologies to operate core platform functions, analyse usage patterns, and — where you have consented — deliver relevant promotional content. The following categories of cookies are used:
These cookies are essential for the Platform to function and cannot be disabled. They include session authentication tokens, security cookies, and load-balancing cookies. No consent is required for strictly necessary cookies.
These cookies remember your preferences and settings — such as your preferred language, responsible gaming tool configurations, and display preferences — to provide a more personalised experience on gamph.
With your consent, gamph uses analytics cookies to collect aggregated, anonymised data about how Players use the Platform. This data helps gamph identify areas for improvement and optimise the gaming experience. Analytics data does not identify individual Players.
With your explicit consent, gamph may use cookies to track your interactions with promotional content on the Platform and to measure the effectiveness of gamph's marketing activities. You may withdraw consent for marketing cookies at any time through your account cookie settings.
You can manage your cookie preferences at any time through the cookie settings panel accessible from the footer of the gamph Platform. Note that disabling certain cookies may affect the functionality of the Platform.
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by gamph. To exercise any of these rights, please contact the gamph Data Protection Officer using the details in Section 14.
Philippine law gives you meaningful control over your personal data. Here is what you can ask gamph to do — and how to do it.
You have the right to request a copy of the personal data gamph holds about you, along with information about how it is being processed. gamph will respond to access requests within 15 business days.
If any personal data gamph holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details directly through your gamph account settings.
You may request that gamph delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to gamph's legal retention obligations under PAGCOR and AMLC regulations.
You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where your rights override those interests.
You have the right to receive a copy of the personal data you provided to gamph in a structured, commonly used, machine-readable format, and to request that it be transmitted to another controller where technically feasible.
If you believe gamph has not handled your personal data in accordance with the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
The gamph Platform is strictly restricted to individuals who are 21 years of age or older, in accordance with PAGCOR regulations governing online gaming in the Philippines. gamph does not knowingly collect personal data from individuals under the age of 21.
As part of the registration process, gamph requires all Players to confirm that they meet the 21+ age requirement. gamph further verifies age through its KYC process, which requires submission of a government-issued identification document showing the Player's date of birth.
If gamph becomes aware that personal data has been collected from an individual under the age of 21, gamph will immediately suspend the associated account, delete the personal data collected, and handle any funds in the account in accordance with applicable regulations. Players who are aware of a minor accessing the gamph Platform should notify the gamph Data Protection Officer immediately.
Some of gamph's third-party service providers — including cloud infrastructure providers and certain technology partners — may process personal data outside the Philippines. Where such cross-border transfers occur, gamph ensures that appropriate safeguards are in place to protect your personal data, including:
gamph will not transfer your personal data to jurisdictions that do not provide adequate data protection safeguards without your prior consent or a lawful basis for doing so under the DPA.
gamph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we provide. Where changes are material, gamph will notify registered Players by email and by displaying a prominent notice on the Platform at least seven (7) days before the updated Policy takes effect.
The "Last Updated" date at the top of this Policy will be revised whenever changes are made. Players are encouraged to review this Policy periodically. Continued use of the gamph Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by gamph, please contact the gamph Data Protection Officer using the details below. gamph will acknowledge your request within five (5) business days and provide a substantive response within fifteen (15) business days.
This Privacy Policy was last reviewed and updated in January 2026. It is effective as of January 1, 2026, and supersedes all previous versions of the gamph Privacy Policy.
Now that you know exactly how gamph protects your personal data, join thousands of Filipino players from Manila to Cebu who trust gamph for a secure, fair, and transparent online gaming experience.
Go to gamph Login21+ only. Gambling is addictive. Know when to stop. Play responsibly.