Privacy Policy

This Privacy Policy ("Policy") describes how gba333 ("gba333," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you," "Player," or "User") who access or use the gba333 online casino and sports betting platform, including all games, features, and services available at gba333.com and its associated mobile interfaces (collectively, the "Platform").

gba333 is committed to protecting the privacy and personal data of all Filipino players in accordance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

By registering an account on gba333 or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please discontinue use of the Platform and contact our support team to close your account.

For the purposes of the Data Privacy Act of 2012 and this Policy, gba333 acts as the Personal Information Controller (PIC) in respect of the personal data collected through the Platform. As PIC, gba333 determines the purposes and means of processing your personal information.

gba333 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA and this Policy. You may contact the gba333 DPO for any privacy-related inquiries, requests, or complaints at the contact details provided in Section 15 of this Policy.

Where gba333 engages third-party service providers to process personal data on its behalf, those providers act as Personal Information Processors (PIPs) and are contractually bound to process data only in accordance with gba333's instructions and applicable data protection law.

gba333 collects personal data through various means, including directly from you during registration and account use, automatically through your interaction with the Platform, and from third parties where permitted by law. The categories of personal data we collect include:

gba333 does not intentionally collect sensitive personal information (as defined under the DPA) beyond what is strictly necessary for identity verification and responsible gaming compliance. Where sensitive data is collected, it is processed under the applicable lawful basis and with appropriate safeguards.

gba333 processes your personal data for the following specific, legitimate purposes:

• Account Management: Creating, verifying, and maintaining your gba333 account, including authentication and security.
• Payment Processing: Facilitating deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported Philippine payment channels.
• KYC & Compliance: Verifying your identity and age (21+) to comply with Philippine gaming regulations and anti-money laundering (AML) obligations.
• Game Delivery: Providing access to casino games, sports betting markets, live dealer tables, bingo, slots, and all other Platform features.
• Customer Support: Responding to your inquiries, resolving disputes, and providing technical assistance through live chat and email.
• Responsible Gaming: Monitoring gaming patterns to identify problem gambling indicators and administering self-exclusion, deposit limits, and cooling-off requests.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, money laundering, and other prohibited conduct.
• Legal Compliance: Meeting obligations under Philippine law, including the DPA, AML regulations, and any directions from PAGCOR or other competent authorities.
• Platform Improvement: Analyzing aggregated usage data to improve game offerings, Platform performance, and user experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and Platform updates — only where you have provided explicit consent and subject to your opt-out rights.

gba333 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing a separate lawful basis for processing.

Under the Data Privacy Act of 2012, gba333 relies on the following lawful bases for processing your personal data:

• Contractual Necessity: Processing required to perform our contract with you — including account registration, game access, and payment processing — is carried out on the basis that it is necessary for the performance of the agreement between you and gba333.
• Legal Obligation: Processing necessary to comply with applicable Philippine law, including KYC verification, AML reporting, age verification (21+), and regulatory record-keeping requirements.
• Legitimate Interests: Processing carried out for gba333's legitimate business interests, including fraud prevention, Platform security, responsible gaming monitoring, and internal analytics — provided these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where your freely given, specific, and informed consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

gba333 does not sell, rent, or trade your personal data to third parties. We may share your data only in the following limited circumstances:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers receive the minimum data necessary to process your transactions securely.
• KYC & Identity Verification Providers: Third-party identity verification services that assist gba333 in fulfilling its age verification and AML compliance obligations.
• Game Software Providers: Game providers may receive anonymized or pseudonymized session data necessary to deliver their games on the Platform. They do not receive your full identity or financial data.
• IT & Cloud Infrastructure Providers: Hosting, database, and security service providers who process data on gba333's behalf under strict data processing agreements.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies, where disclosure is required by law or regulatory direction.
• Law Enforcement: Philippine law enforcement agencies, where gba333 is legally compelled to disclose data in connection with a criminal investigation or court order.
• Business Transfers: In the event of a merger, acquisition, or sale of gba333's business assets, your data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party service providers engaged by gba333 are contractually required to maintain the confidentiality and security of your personal data and to process it only for the purposes specified by gba333.

gba333 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. Our general retention periods are as follows:

• Account & Identity Data: Retained for the duration of your account and for a minimum of 5 years following account closure, in compliance with AML record-keeping requirements under Philippine law.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, as required by the Anti-Money Laundering Act (AMLA) and its amendments.
• KYC Documents: Retained for a minimum of 5 years after the end of the business relationship, or longer if required by a regulatory authority.
• Gaming Activity Logs: Retained for 3 years from the date of each gaming session for dispute resolution and responsible gaming monitoring purposes.
• Customer Support Records: Retained for 2 years from the date of the last interaction, unless the matter relates to an ongoing dispute or legal proceeding.
• Marketing Consent Records: Retained for the duration of your consent and for 1 year following withdrawal of consent, as evidence of compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with gba333's data disposal procedures. Anonymized data may be retained indefinitely for statistical and analytical purposes.

gba333 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game display options, and responsible gaming limit configurations to provide a personalized experience.
• Analytics Cookies: Collect aggregated, anonymized data about how players use the Platform — such as pages visited, session duration, and error reports — to help gba333 improve performance and user experience.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and unauthorized account access attempts.

gba333 does not use third-party advertising cookies or behavioral tracking cookies that build profiles for targeted advertising purposes.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair your ability to log in and use the Platform. For more information on managing cookies in your browser, refer to your browser's help documentation.

gba333 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and gba333 servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Data Encryption at Rest: Sensitive personal and financial data stored on gba333 servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All gba333 staff with data access undergo background checks and regular privacy training.
• Two-Factor Authentication (2FA): Available for all player accounts to provide an additional layer of login security.
• Intrusion Detection Systems: Continuous monitoring of Platform infrastructure for unauthorized access attempts, anomalous activity, and security threats.
• Regular Security Audits: gba333 conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, gba333 will notify the National Privacy Commission within 72 hours and affected players without undue delay, in accordance with NPC Circular 16-03.

While gba333 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your gba333 login credentials and for notifying us immediately if you suspect unauthorized access to your account.

Under the Data Privacy Act of 2012, Filipino players have the following rights with respect to their personal data held by gba333. You may exercise any of these rights by contacting our Data Protection Officer at the details in Section 15:

gba333 will respond to all verified data rights requests within 30 calendar days of receipt. We may request proof of identity before processing your request to protect against unauthorized access to your data.

The gba333 Platform is strictly intended for individuals aged 21 years and above. gba333 does not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory step in the gba333 registration and KYC process.

If gba333 discovers or is notified that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data in question, and void any associated transactions or balances.

If you are a parent or guardian and believe that a minor in your care has registered on gba333, please contact our support team immediately at [email protected] so that we can take prompt corrective action.

gba333 primarily stores and processes personal data within the Philippines. In certain circumstances, personal data may be transferred to and processed in countries outside the Philippines — for example, where gba333 uses cloud infrastructure providers or game software vendors with servers located abroad.

Where personal data is transferred outside the Philippines, gba333 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012. These safeguards may include:

• Contractual clauses approved by the National Privacy Commission
• Transfers to countries recognized by the NPC as providing adequate data protection
• Binding corporate rules where applicable within a corporate group

You may request information about the specific safeguards applicable to any international transfer of your personal data by contacting our Data Protection Officer.

The gba333 Platform may contain links to third-party websites or services, such as payment provider portals or game provider information pages. This Privacy Policy applies solely to the gba333 Platform and does not govern the privacy practices of any third-party websites.

gba333 is not responsible for the content, privacy policies, or data practices of any third-party websites. We encourage you to review the privacy policy of any third-party site you visit before providing your personal information.

gba333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify registered players via email or a prominent notice on the Platform at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the gba333 Platform after the effective date of any amendment constitutes your acknowledgment of the updated Policy.

We encourage you to review this Policy periodically to stay informed about how gba333 protects your personal data.

For any privacy-related inquiries, data rights requests, or complaints regarding gba333's handling of your personal data, please contact our Data Protection Officer through the following channels: