gamezom Privacy Policy

gamezom is an online gaming platform operated for the benefit of Filipino players, offering slots, live casino, sports betting, bingo, and sabong products. For the purposes of the Data Privacy Act of 2012, gamezom acts as the Personal Information Controller (PIC) in respect of all personal data collected through the gamezom.net platform and its associated mobile applications.

gamezom has appointed a Data Protection Officer (DPO) responsible for overseeing this Policy and for handling data subject requests. Contact details for the DPO are provided in Section 14 of this Policy.

gamezom collects the minimum personal data necessary to provide its services in a secure, compliant, and personalised manner. The categories of personal data we collect are set out in the table below:

gamezom collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC, making a deposit or withdrawal, contacting support, or responding to surveys.
• Automated collection: Technical data collected automatically when you visit the gamezom.net platform, including IP addresses, device fingerprints, and session logs generated by our security and fraud detection systems.
• Payment processors: Transaction reference data received from GCash, PayMaya, BPI, BDO, Metrobank, and other payment partners following a deposit or withdrawal instruction initiated by you.
• Identity verification partners: Confirmation signals from third-party KYC and document verification services engaged by gamezom to authenticate government-issued IDs submitted during account verification.
• Regulatory sources: Information received from PAGCOR or law enforcement authorities in connection with regulatory compliance, fraud investigations, or responsible gaming enforcement actions.

gamezom processes your personal data only for the specific, legitimate purposes listed below. We do not use personal data for any purpose incompatible with the purpose for which it was originally collected without first obtaining your additional consent or identifying an alternative legal basis.

• Account management: Creating, maintaining, and securing your gamezom player account, including password management, two-factor authentication, and session control.
• Identity and age verification: Confirming that you are at least 21 years of age and that the identity information you have provided is accurate, as required under Philippine gaming regulations.
• Payment processing: Executing deposits and withdrawals via your chosen payment method (GCash, PayMaya, BPI, BDO, Metrobank, or bank transfer) and maintaining an accurate transaction history in your account ledger.
• Fraud prevention and AML compliance: Monitoring account activity for signs of fraud, money laundering, and other financial crimes in accordance with the Anti-Money Laundering Act (RA 9160) and its amendments.
• Responsible gaming: Tracking gameplay patterns and session data to identify potential problem gambling behaviour, enforce self-exclusion requests, and comply with PAGCOR responsible gaming directives.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining support records for quality assurance purposes.
• Regulatory compliance: Meeting reporting and record-keeping obligations to PAGCOR, the National Privacy Commission, and other applicable Philippine regulatory authorities.
• Platform improvement: Analysing aggregated, anonymised usage data to improve game performance, user interface design, and the overall player experience for Filipino users.
• Marketing communications: Sending promotional offers, bonus notifications, and event announcements to players who have provided explicit consent. You may withdraw this consent at any time through your account dashboard or by contacting support.

Under the Data Privacy Act of 2012, gamezom processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations to you under the gamezom Terms & Conditions — including account creation, payment processing, KYC verification, and dispute resolution.
• Legal obligation: Processing required to comply with applicable laws and regulations, including PAGCOR licensing conditions, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate interests: Processing necessary for gamezom's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. You may withdraw consent at any time without detriment to your account status.

gamezom does not sell, rent, or trade your personal data to any third party. Data is shared only where strictly necessary, with the following categories of recipients, and always subject to appropriate data processing agreements or legal obligations:

• Payment processors: GCash (Mynt — Globe Fintech Innovations, Inc.), PayMaya (Voyager Innovations, Inc.), BPI, BDO Unibank, Metrobank, and other licensed payment service providers, solely to execute your deposit and withdrawal instructions.
• KYC and identity verification partners: Licensed third-party document verification services engaged to authenticate government-issued IDs and proof of address documents submitted during KYC. These partners process data under strict confidentiality obligations and are not permitted to use your data for any other purpose.
• Fraud prevention and AML services: Specialist fraud detection and anti-money laundering monitoring providers who analyse transaction and behaviour data on gamezom's behalf to identify suspicious activity.
• Regulatory and law enforcement authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), the Philippine National Police Anti-Cybercrime Group (PNP-ACG), and other competent authorities, where disclosure is required by law, court order, or regulatory direction.
• Professional advisers: Legal counsel, auditors, and compliance consultants acting on gamezom's behalf, subject to binding professional confidentiality obligations.
• Technology service providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on gamezom's instructions under data processing agreements that prohibit independent use of your data.

gamezom primarily stores and processes personal data within the Philippines. Where data is transferred to service providers or infrastructure partners located outside the Philippines — for example, in connection with cloud hosting or international fraud prevention services — gamezom ensures that such transfers are made only to recipients in countries or organisations that provide an adequate level of data protection, consistent with the requirements of the Data Privacy Act of 2012 and the National Privacy Commission's guidelines on cross-border data transfers.

All international data transfers are governed by appropriate contractual safeguards, including data processing agreements with standard contractual clauses approved by the National Privacy Commission where applicable.

gamezom retains personal data for the period necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the duration of your active account relationship with gamezom, plus a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AML record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years from the date of submission or from the date of the last transaction on the account, whichever is later, in accordance with the Anti-Money Laundering Act requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support correspondence: Retained for three (3) years from the date of the last communication, or for the duration of any unresolved dispute, whichever is longer.
• Marketing consent records: Retained for the duration of the consent period plus two (2) years to demonstrate compliance with consent requirements.
• Technical and log data: Retained for twelve (12) months from the date of generation, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard methods. Anonymised data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data for the purposes of the Data Privacy Act.

gamezom uses cookies and similar technologies (including local storage and session storage) on the gamezom.net platform. The following categories of cookies are in use:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies, CSRF protection tokens, and load balancing cookies. These cannot be disabled without impairing platform functionality. No consent is required for strictly necessary cookies under applicable law.
• Functional cookies: Remember your preferences such as language settings, remembered device for two-factor authentication, and responsible gaming tool configurations. Disabling these cookies may reduce platform convenience but will not prevent access.
• Analytics cookies: First-party analytics cookies that help gamezom understand how players navigate the platform, which games are most popular, and where technical issues occur. Data collected is aggregated and not linked to your individual identity in analytics reports. gamezom uses its own first-party analytics infrastructure and does not use Google Analytics or other third-party analytics services.
• Security cookies: Used by gamezom's fraud detection systems to identify unusual login patterns, detect bot activity, and protect accounts from unauthorised access.

You can manage or delete cookies through your browser's settings at any time. Note that disabling strictly necessary cookies will prevent you from logging into your gamezom account. For guidance on managing cookies in your specific browser, consult your browser's help documentation.

Under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, you have the following rights in respect of your personal data held by gamezom:

• Right to be informed: The right to know whether gamezom holds personal data about you, and to receive clear information about how it is collected, used, and shared — as provided in this Policy.
• Right of access: The right to obtain a copy of the personal data gamezom holds about you, including information about the categories of data held, the purposes for which it is processed, and the recipients with whom it has been shared.
• Right to rectification: The right to have inaccurate or incomplete personal data corrected without undue delay. You can update most account information directly from your gamezom account dashboard.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to gamezom's legal and regulatory retention obligations (see Section 8).
• Right to object: The right to object to the processing of your personal data where gamezom relies on legitimate interests as the legal basis, or where processing is for direct marketing purposes. An objection to direct marketing will always be honoured immediately.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller, where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated. The NPC can be contacted through its official website at privacy.gov.ph.

Identity verification may be required before gamezom can fulfil a data subject request, to ensure that personal data is not disclosed to an unauthorised third party.

gamezom's services are strictly for individuals who are 21 years of age or older, consistent with applicable Philippine gaming regulations. gamezom does not knowingly collect personal data from persons under the age of 21.

Age verification is conducted as a mandatory step during the KYC process. Any account found to belong to a person under 21 years of age will be immediately closed, all funds will be returned to the originating payment source, and any data collected will be deleted as soon as the verification process is complete.

gamezom implements technical and organisational security measures appropriate to the nature and volume of personal data processed, in compliance with the security standards required by the Data Privacy Act of 2012 and the National Privacy Commission's guidelines. These measures include:

• Encryption in transit: All data transmitted between your device and gamezom's servers is encrypted using TLS 1.3 or higher. Connections that do not support TLS 1.2 or above are rejected.
• Encryption at rest: Sensitive personal data, KYC documents, and financial records stored on gamezom's servers are encrypted using AES-256 encryption.
• Access controls: Personal data is accessible only to gamezom staff and authorised third-party processors who have a legitimate need to access it in the course of their duties. Access is governed by role-based access control (RBAC) and logged for audit purposes.
• Two-factor authentication: All gamezom staff accounts with access to production systems require two-factor authentication. Players are also encouraged to enable 2FA on their accounts from the account dashboard.
• Penetration testing and vulnerability management: gamezom conducts regular penetration tests and vulnerability assessments of its platform infrastructure. Identified vulnerabilities are remediated in accordance with a risk-based patching schedule.
• Incident response: gamezom maintains a documented data breach response plan. In the event of a personal data breach that poses a real risk to data subjects, gamezom will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay.

gamezom reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform features, or our data processing practices. When material changes are made, gamezom will:

• Update the "Last Updated" date at the top of this Policy;
• Post a notice on the gamezom.net platform informing players of the change;
• Where required by law or where the change significantly affects your rights, send a direct notification to your registered email address.

Your continued use of the gamezom platform after the effective date of any updated Policy constitutes your acknowledgement of the changes. If you do not agree with a material change to this Policy, you have the right to close your account and request deletion of your personal data, subject to gamezom's legal retention obligations as set out in Section 8.

gamezom encourages you to review this Policy periodically to stay informed about how we protect your personal data. The most current version of this Policy is always available at gamezom.net/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way gamezom processes your personal data, please contact our Data Protection Officer using the details below:

If you are not satisfied with gamezom's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory body responsible for administering and implementing the Data Privacy Act of 2012, and it can be reached through its official government website.