g perya Privacy Policy

1. Overview and Scope

This Privacy Policy ("Policy") applies to all personal data collected, processed, stored, or shared by g perya ("we," "us," "our") in connection with your use of the website gperya.lat and any related services, features, games, and communications (collectively, the "Platform").

By registering for a g perya account, accessing the Platform, or submitting any personal information to us, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not use the g perya Platform.

This Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which form part of the overall legal framework governing your relationship with g perya. In the event of any inconsistency between this Policy and any supplementary notice issued in connection with a specific product or service, the specific notice shall prevail.

2. Personal Data We Collect

g perya collects personal data that is necessary, adequate, and not excessive relative to the purposes for which it is processed. The categories of personal data we collect include:

2.1 Identity and Contact Data

• Full legal name as it appears on your government-issued Philippine ID
• Date of birth (for age verification — players must be 21 years or older)
• Residential address within the Philippines
• Valid Philippine mobile number (used for OTP and account security)
• Email address
• Government-issued ID type and number (e.g., PhilSys National ID, UMID, Passport, Driver's License)

2.2 Financial Data

• GCash or PayMaya account identifiers (mobile number linked to your e-wallet)
• BPI, BDO, or Metrobank account details used for deposits or withdrawals (account name and last four digits only — full account numbers are not stored)
• Transaction history: deposit amounts, timestamps, withdrawal requests, and game wagering records
• Source of funds declarations submitted during enhanced KYC verification

2.3 Technical and Usage Data

• IP address and approximate geolocation (province/city level)
• Device type, operating system, and browser version
• Session start/end times, pages visited, and game sessions accessed
• Login timestamps and authentication logs
• Cookies and similar tracking technologies (see Section 7)

2.4 Communications Data

• Records of support chat conversations, email correspondence, and any written complaints or feedback submitted to g perya
• Preferences and consents recorded (e.g., marketing opt-in/out, responsible gaming settings)

3. How We Collect Your Data

g perya collects personal data through the following channels:

• Direct submission: Information you provide when registering, completing KYC verification, depositing, requesting withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including via cookies, server logs, and analytics tools.
• Third-party verification: Identity verification data returned from PAGCOR-approved KYC service providers and Philippine government database checks where applicable.
• Payment processors: Transaction confirmation data from GCash, PayMaya, BPI, BDO, and Metrobank to verify and reconcile deposits and withdrawals.
• Fraud and AML screening: Data from anti-fraud and anti-money laundering screening services used to fulfill our PAGCOR compliance obligations.

4. Purposes of Data Processing

g perya processes your personal data only for specific, lawful, and legitimate purposes. The table below sets out the primary purposes for which your data is used and the corresponding data categories involved:

g perya does not engage in profiling of players for automated decision-making that produces significant legal effects, beyond the fraud and AML screening processes required under PAGCOR licensing conditions and Philippine law.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012 (RA 10173), g perya processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfill our obligations under the Terms and Conditions agreed to at registration (account management, transaction processing, game delivery).
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, Anti-Money Laundering Act obligations (RA 9160 as amended by RA 10365), and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, and operational analytics, where these interests are not overridden by your data protection rights.
• Consent: Processing for optional purposes such as marketing communications and promotional personalization, where your explicit consent has been obtained and can be withdrawn at any time.

6. Data Sharing and Third-Party Disclosure

g perya does not sell, rent, or trade your personal data to third parties for commercial purposes. Data may be shared in the following limited circumstances:

• Regulatory authorities: g perya is obligated to disclose certain player data to PAGCOR, the Anti-Money Laundering Council (AMLC), and law enforcement authorities upon lawful demand or as required by our PAGCOR license.
• Payment service providers: GCash, PayMaya, BPI, BDO, and Metrobank receive the minimum necessary data to process your deposits and withdrawals. These providers operate under their own privacy policies and Philippine BSP regulatory requirements.
• KYC and fraud screening vendors: Approved service providers performing identity verification or fraud screening receive identity data strictly for those purposes and are contractually bound to confidentiality and data protection obligations.
• Game software providers: Game session data (excluding personal identity) may be shared with licensed game providers (e.g., JILI, PG Soft) for operational and technical support purposes only.
• Legal proceedings: g perya may disclose personal data as required by Philippine court order, subpoena, or other compulsory legal process.

All third parties who receive personal data from g perya are required to maintain appropriate data security standards and are prohibited from using your data for purposes other than those for which it was shared.

7. Cookies and Tracking Technologies

g perya uses cookies and similar technologies to operate the Platform, remember your preferences, and improve your experience. The types of cookies used include:

• Strictly necessary cookies: Required for the Platform to function. These enable session authentication, security features, and basic navigation. They cannot be disabled without rendering the Platform non-functional.
• Performance and analytics cookies: Used to understand how players interact with the Platform — which pages are visited most, where errors occur, and how load times can be improved. Data collected is aggregated and anonymized where possible.
• Functional cookies: Used to remember your preferences (e.g., language, display settings) between sessions.
• Responsible gaming cookies: Used to track session duration for the purpose of displaying time reminders and enforcing cooling-off periods set by the player.

g perya does not use advertising or third-party tracking cookies that share your data with external advertising networks. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies may impair Platform functionality.

8. Data Retention

g perya retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Specific retention periods are as follows:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and RA 9160 (AMLA) obligations.
• Transaction records: Retained for a minimum of five (5) years, or longer where required by AMLC or PAGCOR investigation.
• Support communications: Retained for three (3) years following the resolution of the relevant interaction.
• Technical logs: Retained for twelve (12) months for security and operational purposes.
• Marketing preferences: Retained until you withdraw consent, after which your opt-out preference is retained indefinitely to prevent inadvertent re-engagement.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with g perya's data destruction protocols.

9. Data Security

g perya implements technical and organizational security measures appropriate to the sensitivity of the personal data we process. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the g perya Platform.
• Encrypted storage of all sensitive personal data and financial records at rest.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Multi-factor authentication for all administrative access to player data systems.
• Regular security audits, penetration testing, and vulnerability assessments.
• Incident response procedures aligned with the National Privacy Commission's (NPC) breach notification requirements under RA 10173.

In the event of a personal data breach that poses a real risk to your rights and freedoms, g perya will notify you and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular 16-03.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by g perya:

• Right to be informed: You have the right to know whether g perya holds personal data about you and to receive this Privacy Policy.
• Right of access: You may request a copy of the personal data g perya holds about you, along with information about how it is processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. You may update basic account information directly in your account settings.
• Right to erasure or blocking: You may request deletion or blocking of your personal data where it is no longer necessary for the purposes collected, subject to g perya's legal retention obligations.
• Right to object: You may object to processing of your personal data for direct marketing purposes at any time. You may also object to other processing based on legitimate interests.
• Right to data portability: You may request a copy of personal data you have provided to g perya in a structured, commonly used, machine-readable format.
• Right to damages: You are entitled to claim compensation for damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data.

To exercise any of the above rights, please contact g perya's Data Protection Officer at support@gperya.lat with the subject line "Data Subject Rights Request." g perya will respond within fifteen (15) business days of receiving a verifiable request.

11. Children's Privacy and Age Verification

The g perya Platform is strictly intended for adults who are at least 21 years of age, in compliance with Philippine gaming law and PAGCOR licensing requirements. g perya does not knowingly collect personal data from individuals under the age of 21.

Age verification is conducted during the KYC registration process. If g perya discovers that a player account has been created by a person under 21 years of age, the account will be immediately suspended, all associated funds will be returned to the depositing payment method, and the relevant personal data will be deleted within the timeframe required by law.

If you have reason to believe that a minor has registered on the g perya Platform, please contact us immediately at support@gperya.lat.

12. Cross-Border Data Transfers

Where g perya engages service providers whose data processing infrastructure is located outside the Philippines (for example, cloud hosting providers or certain game software vendors), any transfer of personal data to such providers is subject to appropriate contractual safeguards, including data processing agreements that require the receiving party to maintain data protection standards equivalent to those required under RA 10173.

g perya will not transfer personal data to countries or jurisdictions that do not provide an adequate level of data protection without first implementing appropriate protective measures. Players who wish to obtain information about specific cross-border transfers may contact our Data Protection Officer.

13. Changes to This Privacy Policy

g perya reserves the right to update or amend this Privacy Policy at any time in response to changes in Philippine law, PAGCOR regulatory requirements, or the Platform's operational practices. The date of the most recent revision is displayed at the top of this page.

Material changes to this Policy — particularly any changes that expand the categories of data collected or the purposes for which it is processed — will be communicated to registered players via email or prominent notice on the Platform at least 15 days before taking effect. Your continued use of the g perya Platform following the effective date of any amended Policy constitutes your acceptance of the changes.

14. Contact and Data Protection Officer

g perya has designated a Data Protection Officer (DPO) as required under the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact:

If you are not satisfied with g perya's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission through their official channels.