g0123 Casino — Privacy Policy

This Privacy Policy ("Policy") describes the personal data practices of g0123 ("g0123," "we," "us," "our") in connection with the operation of the g0123 online gaming platform accessible at g0123.net ("the Platform"). This Policy applies to all personal data collected from registered players, prospective players, and visitors to the Platform, whether in the Philippines or elsewhere.

g0123 is committed to processing personal data lawfully, fairly, and transparently in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), and relevant issuances of the National Privacy Commission ("NPC") of the Philippines.

This Policy should be read alongside the g0123 Terms and Conditions available at /terms-conditions, which constitute the broader agreement governing your use of the Platform. By creating a g0123 account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

g0123 acts as the personal information controller ("PIC") in respect of the personal data it collects directly from players through the Platform. Where g0123 engages third-party processors — such as payment gateways, identity verification providers, or game providers — those entities act as personal information processors ("PIPs") under instructions from g0123 and are contractually bound to process personal data only in accordance with g0123's instructions and applicable data protection law.

For all data privacy inquiries, rights requests, complaints, and breach notifications, players may contact g0123 at the contact details specified in Section 15 of this Policy.

g0123 collects the following categories of personal data, depending on your interaction with the Platform:

g0123 does not collect sensitive personal information (as defined under the DPA, including information about health, race, religion, sexual orientation, or political affiliation) unless specifically required by law (for example, age-related medical self-exclusion requests) and with your explicit written consent.

g0123 collects personal data through the following means:

• Direct submission by you — through account registration forms, KYC submission portals, deposit and withdrawal request forms, support contact submissions, and responsible gaming tool configurations.
• Automated technical collection — through server logs, browser cookies, session tracking, and analytics tools when you access or use the Platform. See Section 8 for full details on cookies.
• Third-party verification providers — g0123 uses licensed KYC and identity verification service providers to validate government-issued Philippine identification documents. These providers process identity data under contractual instruction from g0123.
• Payment processors — GCash, PayMaya, BPI, BDO, Metrobank, and cryptocurrency gateway processors provide transaction confirmation data to g0123 in connection with the processing of deposits and withdrawals.
• Fraud and AML compliance systems — risk monitoring systems may generate derived data (such as risk scores or transaction pattern flags) from your gaming and payment activity for the purpose of AML compliance and fraud prevention.

g0123 shares personal data with the following categories of third-party processors, each engaged under a data processing agreement that obliges them to: process data only on g0123's documented instructions; implement appropriate technical and organizational security measures; not engage sub-processors without prior written authorization from g0123; and assist g0123 in meeting its obligations under applicable data protection law.

• Payment processors: GCash (Mynt — Globe Fintech Innovations), PayMaya (Maya Philippines, Inc.), BPI, BDO, Metrobank, and selected cryptocurrency payment gateway providers — for deposit and withdrawal processing.
• KYC / identity verification providers: Licensed identity verification service providers for government ID document authentication and liveness detection.
• Game providers: JILI Games, Pragmatic Play, PG Soft, and other licensed game developers — for game content delivery and bet settlement. Game providers receive game session data to the extent necessary for game function and audit purposes.
• IT infrastructure and hosting providers: Cloud hosting and infrastructure providers that store Platform data on servers located in data centers meeting applicable security standards.
• Analytics and fraud prevention providers: Providers that assist in risk scoring, technical fraud detection, and platform performance analytics using pseudonymized or aggregated data where possible.

g0123 will disclose personal data to Philippine government authorities, regulatory bodies, or law enforcement agencies where required by law or a valid legal process, including: the Philippine Amusement and Gaming Corporation (PAGCOR); the Anti-Money Laundering Council (AMLC); the National Privacy Commission (NPC); and courts of competent jurisdiction pursuant to lawful orders. g0123 will, where legally permissible, notify you of any such disclosure.

g0123 does not sell, rent, license, or otherwise commercially transfer your personal data to third-party advertisers, data brokers, or marketing companies. Any sharing of data is limited to the operational and legal purposes described in this Policy.

Some of g0123's third-party service providers — including certain game providers and cloud infrastructure partners — may process personal data in jurisdictions outside the Philippines. Where such cross-border data transfers occur, g0123 ensures that appropriate safeguards are in place in accordance with Section 21 of the DPA and NPC regulations governing cross-border data flows. These safeguards include contractual data transfer agreements incorporating the NPC's prescribed standard contractual clauses or equivalent protections.

g0123 will not transfer personal data to a jurisdiction that does not provide an adequate level of protection for personal data without first implementing appropriate safeguards and, where required, obtaining regulatory approval or your consent.

g0123 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable Philippine law. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship with g0123, plus a minimum of five (5) years following account closure, in compliance with PAGCOR regulatory requirements and the Anti-Money Laundering Act (AMLA) record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years following the conclusion of your account relationship, in accordance with AMLC regulations.
• Financial transaction records: Retained for a minimum of five (5) years, in accordance with AMLA and tax record-keeping requirements.
• Gaming activity logs: Retained for the duration of your active account, plus two (2) years following closure, for dispute resolution and regulatory audit purposes.
• Customer support communications: Retained for two (2) years following the closure of the relevant support interaction, unless related to an unresolved dispute.
• Technical / server log data: Retained for ninety (90) days in standard logs; flagged security-relevant log data may be retained longer pending investigation completion.
• Marketing consent records: Retained for the duration of your marketing subscription plus three (3) years, as evidence of consent.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in a manner that prevents recovery or re-identification.

g0123 implements a layered approach to personal data security that includes both technical and organizational measures proportionate to the risks posed by the categories of personal data processed. These measures include, without limitation:

• Transport encryption: All data transmitted between the player's device and the g0123 Platform is encrypted using TLS 1.2 or higher with 256-bit encryption.
• Password security: Passwords are stored using one-way cryptographic hashing with salting. g0123 does not store plaintext passwords and cannot retrieve your password on request.
• Access controls: Access to personal data systems is restricted to authorized personnel with documented business need. Access is subject to role-based permissions, multi-factor authentication, and audit logging.
• KYC data handling: Identity verification documents are processed in an isolated environment with enhanced access restrictions and are not accessible to general operational staff.
• Incident response: g0123 maintains a documented personal data breach response procedure. Breach scenarios are tested through regular tabletop exercises. Notification obligations to the NPC and affected data subjects are documented and rehearsed.
• Vendor security requirements: Third-party processors are contractually required to maintain security standards at least equivalent to those applied by g0123 for the categories of personal data they process on g0123's behalf.

Despite these measures, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords and to enable two-factor authentication on their g0123 accounts. If you suspect your account has been compromised, contact g0123 immediately at [email protected].

The g0123 Platform is strictly for individuals aged 21 years and above. g0123 does not knowingly collect personal data from any individual under the age of 21. The minimum age requirement is enforced through KYC identity verification prior to withdrawal access.

If g0123 becomes aware that personal data has been collected from an individual under 21, that data will be deleted promptly, the associated account will be suspended, and any funds in the account will be handled in accordance with applicable PAGCOR guidelines.

g0123 encourages parents and guardians to use parental control software on devices shared with minors. If you believe a minor has created a g0123 account using your details or a family member's information, contact [email protected] immediately.

g0123 will send you promotional emails, SMS messages, and in-platform notifications about bonuses, new games, and platform updates only where you have provided your explicit consent to receive such communications during the registration process or subsequently through your account notification settings.

You may withdraw your marketing consent at any time by: (a) updating your notification preferences in your account settings; or (b) clicking the unsubscribe link in any marketing email from g0123; or (c) submitting a written opt-out request to [email protected]. Opt-out requests are processed within five (5) business days. Withdrawal of marketing consent does not affect g0123's right to send you service-related communications (such as account security alerts, transaction confirmations, and KYC requests), which are not promotional in nature and cannot be unsubscribed.

g0123 reserves the right to update or revise this Privacy Policy at any time in response to changes in applicable law, platform features, or data processing practices. The most recent revision date is displayed at the top of this page.

Where a material change to this Policy affects how your personal data is processed, g0123 will notify you by email or in-platform notification at least fourteen (14) days prior to the change taking effect, except where an immediate change is required to comply with a legal obligation, in which case the change may take effect immediately with concurrent notification.

Your continued use of the g0123 Platform following notification of a material change constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you should close your account and cease using the Platform. Account closure requests submitted within fourteen (14) days of a material policy change will be processed without the standard account closure notice period.

For all data privacy inquiries, rights requests, complaints, and consent withdrawals, please contact g0123's designated Data Protection Officer (DPO) using the details below. Please include your registered mobile number or email address in all correspondence to facilitate identity verification.

• Email: [email protected] — Subject line: "Data Privacy Inquiry"
• Response Time: 15 business days for standard inquiries; 25 business days for complex or high-volume requests
• NPC Complaints: If you are dissatisfied with g0123's handling of your data privacy request, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines

g0123 takes all data privacy complaints seriously and will acknowledge receipt of your complaint within three (3) business days. We are committed to resolving data privacy matters fairly and in accordance with Philippine law.