gba333 Privacy Policy

This Privacy Policy ("Policy") describes how gba333 Casino ("gba333," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you," "Player," or "User") who access or use the gba333 platform available at gba333.cam, including all associated mobile and web-based services.

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, or "DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC"). It applies to all personal data processed by gba333 in the context of delivering its online gaming and sports betting services to players across the Philippines — from Manila and Makati to Cebu, Davao, and beyond.

By registering a gba333 account or continuing to use the platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you should discontinue use of the gba333 platform.

gba333 collects personal data through several channels: information you provide directly during registration and account use, data generated automatically through your interaction with the platform, and information received from third-party service providers in connection with payment processing and identity verification.

Information you provide directly:

• Full legal name, date of birth, and gender;
• Philippine mobile number and email address;
• Residential address in the Philippines;
• Government-issued identification documents submitted for KYC purposes (e.g., PhilSys National ID, passport, UMID, driver's license);
• Payment method details necessary to process deposits and withdrawals (e.g., GCash account number, Maya account number, bank account details for BPI, BDO, UnionBank, or Metrobank);
• Communications you send to gba333 customer support, including chat transcripts and emails.

Information generated automatically:

• Device identifiers, IP address, browser type and version, and operating system;
• Session data including login timestamps, session duration, pages visited, and features used;
• Geolocation data derived from your IP address (country and region level only — gba333 does not collect precise GPS-level location data);
• Game history, betting activity, transaction records, and account balance movements;
• Cookies and similar tracking technologies as described in Section 6.

Information from third parties:

• Identity verification results from accredited KYC service providers;
• Transaction confirmation data from payment processors including GCash, Maya, and local banks;
• Fraud screening and sanctions-list screening results from compliance service providers.

gba333 uses the personal data collected for the following purposes:

• Account management: Creating, maintaining, verifying, and securing your gba333 account;
• Service delivery: Enabling you to access games, place bets, deposit funds, and withdraw winnings;
• KYC and compliance: Verifying your identity and age (21+) as required by PAGCOR regulations and the Anti-Money Laundering Act of the Philippines (RA 9160, as amended);
• Payment processing: Facilitating deposits and withdrawals via GCash, Maya, and other approved payment channels;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, and unauthorized account access;
• Responsible gaming: Monitoring account activity to identify potential problem gambling behavior and applying safeguards where necessary;
• Communications: Sending account notifications, transaction confirmations, security alerts, and support responses;
• Marketing: Sending promotional offers, bonus notifications, and platform updates — where you have provided consent and subject to your marketing preferences;
• Legal compliance: Meeting reporting obligations to PAGCOR, the AMLC, the NPC, and other regulatory bodies as required by Philippine law;
• Platform improvement: Analysing aggregated usage data to improve the gba333 platform's performance, features, and user experience.

gba333 does not use your personal data for automated decision-making that produces significant legal effects on you without appropriate human oversight and the right to seek a review.

Under the Philippine Data Privacy Act of 2012, gba333's processing of your personal data is based on one or more of the following lawful bases:

• Contractual necessity: Processing required to fulfil the Terms and Conditions you accepted when registering your gba333 account — including account creation, payment processing, and game access;
• Legal obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act, the DPA, and other applicable Philippine laws and regulations;
• Legitimate interest: Processing for fraud prevention, security monitoring, platform analytics, and responsible gaming monitoring — where gba333's legitimate interests are not overridden by your fundamental rights and freedoms;
• Consent: Processing for marketing communications and non-essential cookies — where you have given freely, informed, and specific consent, which you may withdraw at any time.

gba333 does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. Your data is shared only in the following limited and controlled circumstances:

• Payment processors: GCash, Maya, BPI, BDO, UnionBank, Metrobank, and other approved payment service providers require transaction data to process your deposits and withdrawals;
• KYC and identity verification providers: Accredited third-party KYC service providers receive identity document data to verify your identity as required by PAGCOR and the AMLC;
• Game providers: Certified game providers integrated into the gba333 platform receive session-level data necessary to deliver gameplay. These providers are contractually prohibited from using this data for their own marketing purposes;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council ("AMLC"), the National Privacy Commission ("NPC"), and other Philippine regulatory bodies may receive data as required by law or in response to lawful regulatory requests;
• Law enforcement: gba333 may disclose personal data to law enforcement agencies in response to valid legal process under Philippine law;
• Professional advisers: Legal counsel, auditors, and compliance consultants who are bound by confidentiality obligations.

gba333 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session, and analyze platform usage. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the operation of the gba333 platform — including session management, login state, and security functions. These cannot be disabled without impairing core functionality;
• Functional cookies: Remember your preferences such as language settings, display preferences, and previously used payment methods to improve your experience;
• Analytics cookies: Collect aggregated, anonymized data about how players interact with the gba333 platform to help us improve performance and user experience. These are deployed only with your consent;
• Security cookies: Used for fraud detection, account security monitoring, and bot prevention.

You may manage non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the gba333 platform. gba333 does not use third-party advertising cookies or cross-site behavioral tracking cookies.

gba333 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to applicable legal retention requirements. The following retention periods apply:

• Account data: Retained for the duration of your active gba333 account and for a period of five (5) years following account closure, as required by PAGCOR regulation and the Anti-Money Laundering Act;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction in compliance with the AMLA and PAGCOR reporting requirements;
• KYC documents: Retained for five (5) years following the conclusion of the business relationship;
• Communications (support records): Retained for three (3) years from the date of last communication;
• Marketing consent records: Retained for the duration of your account or until you withdraw consent, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC-approved disposal procedures.

gba333 implements a comprehensive information security program designed to protect the confidentiality, integrity, and availability of personal data held on the platform. Key security measures include:

• SSL/TLS 1.3 encryption for all data in transit between your device and gba333 servers;
• AES-256 encryption for personal data and payment information stored at rest;
• Bcrypt hashing for all account passwords — gba333 staff cannot read or retrieve your password;
• Role-based access controls that restrict employee access to personal data to those with a documented operational need;
• Multi-factor authentication for all gba333 administrative system access;
• Regular independent security audits and penetration testing;
• 24/7 security monitoring with automated anomaly detection.

In the event of a personal data breach that is likely to result in significant harm to affected individuals, gba333 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected individuals without undue delay, in accordance with the DPA and NPC Circular No. 16-03.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by gba333:

To exercise any of the above rights, submit a written request to gba333's Data Protection Officer using the contact details in Section 13 below. gba333 will respond to all data subject requests within fifteen (15) working days of receipt, or within such extended period as permitted by the NPC where the complexity of the request requires it.

Requests may be subject to identity verification to protect against unauthorized disclosure. In cases where a request is declined, gba333 will provide a written explanation and inform you of your right to escalate the matter to the NPC.

The gba333 platform is strictly restricted to individuals who are 21 years of age or older under Philippine gaming law and PAGCOR regulations. gba333 does not knowingly collect, process, or retain the personal data of individuals below the age of 21.

Age verification is conducted as part of the account registration and KYC process. Any account discovered to be held by or on behalf of a person under 21 years of age will be immediately closed, all funds will be returned to the deposit source, and all data will be deleted except where retention is required for legal compliance purposes.

If you believe a person under 21 has registered an account with gba333, please contact the Data Protection Officer at the address in Section 13 immediately.

The gba333 platform is operated primarily from infrastructure located within or serving the Philippines. In certain circumstances, your personal data may be processed by service providers whose servers are located outside the Philippines — for example, internationally-based cloud infrastructure providers, game providers operating European or Asian data centers, or KYC technology providers.

Where such international transfers occur, gba333 ensures that adequate safeguards are in place in accordance with the DPA and NPC guidelines, including contractual clauses that impose data protection standards equivalent to those required by Philippine law on the receiving party.

gba333 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate supplementary safeguards as required by the NPC.

gba333 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform services. Material changes — those that significantly affect your rights or the way your personal data is processed — will be communicated to you by email to your registered address and via a prominent notice on the gba333 platform at least fourteen (14) days before taking effect.

Non-material amendments (such as clarifications, typographic corrections, or updates to reflect changes in Philippine law that do not affect your substantive rights) may take effect immediately upon publication. The effective date at the top of this Policy will always reflect the date of the most recent version.

Your continued use of the gba333 platform following the effective date of an updated Policy constitutes acceptance of the changes. If you do not accept the updated Policy, you should discontinue use of the platform and may request account closure.

gba333 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with this Privacy Policy and the Philippine Data Privacy Act. You may contact the DPO to exercise your data subject rights, raise privacy concerns, or request further information about gba333's data processing practices.

If you are not satisfied with gba333's response to a privacy complaint or data subject request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information on the NPC's complaint process is available on the NPC's official channels.

This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions. The English-language version of this Policy is the governing version for all purposes.