gbc2 Privacy Policy
How We Handle Your Personal Data

1. Information We Collect

gbc2 collects personal information in three broad categories: information you provide directly, information generated automatically by your use of the platform, and information received from third parties where permitted by law.

1.1 Information You Provide Directly

• Account Registration: Full legal name, date of birth, email address, mobile number, residential address, nationality, and a government-issued ID (such as a Philippine passport, SSS/GSIS card, UMID, driver's license, or PhilSys national ID) for identity verification purposes.
• Financial Information: GCash account number, PayMaya account number, BPI/BDO/Metrobank account details (as applicable), and transaction records associated with deposits and withdrawals on gbc2.
• KYC Documentation: Photographs of identity documents and, where required by PAGCOR's anti-money laundering (AML) compliance rules, source-of-funds documentation.
• Communications: Messages sent to our live chat support team, emails addressed to [email protected], and feedback submitted through any gbc2 support form.
• Responsible Gaming Declarations: Self-reported information provided when setting deposit limits, activating cool-off periods, or initiating a self-exclusion request.

1.2 Information Collected Automatically

• Device and Technical Data: IP address, device type, operating system version, browser type, screen resolution, and mobile carrier information.
• Usage and Behavioral Data: Pages visited on gbc2, games launched, session duration, bet amounts, game outcomes, and feature interactions.
• Cookies and Similar Technologies: Session cookies, persistent cookies, and local storage identifiers as described in Section 5 of this policy.
• Geolocation: Approximate location derived from IP address, and precise location if you grant permission on your mobile device, used for compliance with Philippine jurisdictional requirements.

1.3 Information from Third Parties

• Identity verification providers engaged by gbc2 to cross-reference your submitted ID documents against official databases.
• Payment processors and e-wallet providers (GCash, PayMaya) for transaction confirmation and fraud detection.
• PAGCOR's regulatory reporting systems, where cross-referencing is required by law.

2. How We Use Your Information

gbc2 uses personal data for the following purposes:

• Account creation and management: Setting up and maintaining your gbc2 player account, verifying your identity, and managing authentication.
• Transaction processing: Processing deposits and withdrawals in Philippine Peso through GCash, PayMaya, and supported banking channels.
• Regulatory compliance: Meeting PAGCOR's licensing obligations, including AML/CTF (Anti-Money Laundering / Counter-Terrorism Financing) requirements under Philippine law.
• Customer support: Responding to your inquiries, resolving account disputes, and providing technical assistance through our 24/7 support team.
• Platform improvement: Analyzing aggregated, anonymized usage data to improve game selection, site performance, and user experience on gbc2.
• Responsible gaming: Monitoring play patterns to identify potentially problematic behavior, enforcing player-set limits, and communicating with players who may require support resources.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent account activity, bonus abuse, and unauthorized access.
• Marketing communications: Sending promotional emails and in-platform messages about gbc2 offers, new games, and VIP benefits — only where you have consented or where permitted under Philippine law. You may opt out at any time.

3. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 (RA 10173), gbc2 relies on the following lawful bases for processing your personal information:

• Consent: Where you have given clear, informed consent — for example, receiving promotional communications from gbc2 or sharing optional profile data.
• Contractual Necessity: Processing required to fulfill the agreement between you and gbc2 when you create an account and use the platform's services.
• Legal Obligation: Processing mandated by PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and other applicable Philippine law.
• Legitimate Interest: Processing for fraud prevention, security monitoring, and platform improvement, where such interests do not override your fundamental privacy rights.

Where consent is the basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4. Sharing and Disclosure

gbc2 does not sell your personal data. We share your information only in the following limited circumstances:

• Service Providers: Third-party vendors who assist gbc2 in delivering its services — such as payment processors, KYC verification providers, cloud hosting partners, and customer support platform providers. All service providers are contractually bound to process data only on gbc2's instructions and to maintain appropriate security standards.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies, where disclosure is required by applicable law or court order.
• Corporate Transactions: In the event of a merger, acquisition, or sale of gbc2's assets, your data may be transferred to the successor entity, subject to equivalent privacy protections.
• With Your Consent: Any other sharing is done only with your explicit prior consent.

5. Cookies and Tracking Technologies

gbc2 uses cookies and similar technologies to operate and improve the platform. The types of cookies we use are:

• Strictly Necessary Cookies: Required for the platform to function — including session authentication, security tokens, and load-balancing identifiers. These cannot be disabled without impairing site functionality.
• Functional Cookies: Remember your preferences, language settings, and session state to provide a more personalized gbc2 experience.
• Analytics Cookies: Collect aggregated, anonymized data about how players navigate gbc2 — used to identify performance bottlenecks and improve the user experience. No personally identifiable information is transmitted through analytics cookies.
• Marketing Cookies: Used only where you have consented, to deliver relevant gbc2 promotional content. You may withdraw consent for marketing cookies at any time through your browser settings or the gbc2 cookie preference center.

Most browsers allow you to control cookie settings. Disabling certain cookies may affect the functionality of the gbc2 platform. For more information on managing cookies on popular Philippine mobile browsers (Chrome for Android, Safari for iOS), refer to your browser's help documentation.

6. Data Retention

gbc2 retains your personal data for as long as necessary to fulfill the purposes outlined in this policy, comply with legal and regulatory obligations, and resolve disputes.

• Active Accounts: Personal data is retained for the duration of your active gbc2 account relationship.
• Closed Accounts: Following account closure, gbc2 retains transaction records, identity verification documents, and account history for a minimum of five (5) years, as required by PAGCOR licensing conditions and Philippine AML regulations.
• Self-Excluded Players: Records of self-exclusion are retained for the full exclusion period and for a minimum of three (3) years after exclusion ends, to prevent re-registration in violation of the exclusion period.
• Support Communications: Chat and email records with our support team are retained for up to two (2) years for quality assurance and dispute resolution purposes.

When data is no longer required, gbc2 securely destroys or anonymizes it in accordance with the NPC's guidelines on personal data disposal.

7. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by gbc2:

• Right to be Informed: You have the right to know that gbc2 is collecting and processing your personal information, and to be provided with this Privacy Policy.
• Right to Access: You may request a copy of the personal data gbc2 holds about you, the purposes for which it is processed, and the parties to whom it has been disclosed.
• Right to Rectification: If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. Minor corrections (name spelling, contact number) can be made through your gbc2 account settings; significant changes require identity re-verification.
• Right to Erasure / Right to be Forgotten: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal and regulatory retention obligations.
• Right to Object: You may object to the processing of your personal data for direct marketing at any time. You may also object to processing based on legitimate interest where you believe your privacy rights override gbc2's interest.
• Right to Data Portability: You may request a machine-readable copy of the personal data you provided to gbc2, where technically feasible.
• Right to Lodge a Complaint: If you believe gbc2 has violated your privacy rights, you may file a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.

To exercise any of these rights, contact gbc2's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." We will acknowledge your request within 72 hours and respond substantively within fifteen (15) business days.

8. Security Measures

gbc2 implements technical, organizational, and administrative security measures appropriate to the sensitivity of the personal data it holds:

• AES-256 encryption for all personally identifiable data stored on gbc2 servers.
• TLS 1.2+ encryption for all data in transit between the user's device and gbc2's infrastructure.
• Multi-factor authentication (MFA) options for player accounts.
• Role-based access controls limiting internal employee access to personal data to those with a legitimate operational need.
• Regular penetration testing and security audits conducted by independent third-party security firms.
• Incident response protocols aligned with the NPC's mandatory data breach notification requirements — gbc2 will notify affected players and the NPC within 72 hours of discovering a breach that poses a real risk to data subjects.

While gbc2 takes strong precautions, no online platform can guarantee absolute security. Players are encouraged to use unique, strong passwords for their gbc2 account and to enable two-factor authentication where available.

9. Children and Minors

gbc2 is strictly an adult platform. In accordance with PAGCOR regulations and Philippine law, all players must be at least 21 years of age to register and participate in any real-money gaming activity on gbc2. We do not knowingly collect personal data from individuals under 21 years of age.

During registration, gbc2 requires date-of-birth verification and government-issued ID submission to confirm player age. If gbc2 discovers that a player account has been registered by or on behalf of a person under 21 years of age, that account will be suspended immediately, all funds will be returned in accordance with applicable regulations, and the personal data of the underage individual will be securely deleted.

Parents and guardians who believe a minor has registered on gbc2 should contact [email protected] immediately.

10. Cross-Border Data Transfers

Some of gbc2's service providers and technical infrastructure partners are located outside the Philippines. Where personal data is transferred to recipients in other countries, gbc2 ensures that appropriate safeguards are in place, including:

• Contractual clauses that require overseas recipients to apply data protection standards equivalent to those required under Philippine law (RA 10173).
• Transfers only to jurisdictions or service providers with recognized equivalent data protection frameworks, where applicable.
• Data processing agreements that expressly prohibit sub-processing without gbc2's prior written authorization.

gbc2 does not transfer personal data to jurisdictions with no meaningful data protection framework without implementing additional contractual and technical safeguards.

11. Changes to This Privacy Policy

gbc2 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, regulatory requirements, or platform functionality. When material changes are made, gbc2 will:

• Update the "Effective Date" at the top of this page.
• Send a notification email to all registered gbc2 accounts at least fourteen (14) days before the updated policy takes effect, where the change is material.
• Display a prominent notice within the gbc2 platform for at least thirty (30) days following publication of a material update.

Your continued use of gbc2 after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you have the right to close your account and request erasure of your data (subject to mandatory retention obligations).

12. Contact and Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or gbc2's data processing practices, please contact our Data Protection Officer: