goldph Privacy Policy

1 Who We Are

This Privacy Policy is issued by goldph ("goldph," "we," "us," or "our"), the operator of the online gaming platform accessible at goldph.app and its associated mobile applications and services (collectively, the "goldph Platform").

goldph acts as the data controller in respect of the personal data of players and visitors to the goldph Platform. This means goldph determines the purposes and means by which your personal data is processed.

For all privacy-related inquiries, requests, or complaints, you may contact goldph's designated Data Protection Officer (DPO) using the contact details provided in Section 14 of this Privacy Policy.

2 Personal Data We Collect

goldph collects the following categories of personal data, depending on how you interact with the goldph Platform:

goldph does not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, unless specifically required for responsible gaming assessments or as mandated by Philippine law.

3 How We Collect Your Data

goldph collects personal data through the following means:

• Direct interactions: Data you provide when registering a goldph account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated technologies: Technical data collected automatically when you access the goldph Platform, including through cookies, web beacons, server logs, and similar tracking technologies (see Section 7);
• Third-party sources: Identity and fraud-check data received from KYC verification providers, payment processors (such as GCash and PayMaya), and fraud prevention services, where permitted by applicable Philippine law;
• Publicly available sources: In limited circumstances, goldph may supplement your profile with information from publicly available sources for fraud prevention or regulatory compliance purposes.

4 How We Use Your Personal Data

goldph uses your personal data only for the purposes described below. We do not use your data for any purpose that is incompatible with the reason it was originally collected.

• Account management: To create, maintain, and administer your goldph account, including processing your goldph Login and verifying your identity;
• Service delivery: To provide access to goldph Casino games, Slot, Bingo, Rummy, Dragon Gate, and all other goldph Platform features;
• Financial transactions: To process deposits and withdrawals in Philippine Peso (₱) via your chosen payment method, and to maintain accurate transaction records;
• KYC and AML compliance: To verify your identity and comply with Philippine anti-money laundering (AML) and counter-terrorism financing (CTF) obligations;
• Responsible gaming: To monitor gaming patterns, enforce self-exclusion requests, apply deposit limits, and identify players who may need support;
• Customer support: To respond to your inquiries, resolve disputes, and improve the quality of goldph's support services;
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other prohibited conduct;
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given your consent to receive such communications;
• Platform improvement: To analyze usage patterns, conduct A/B testing, and improve the goldph Platform's features, performance, and user experience;
• Legal compliance: To comply with applicable Philippine laws, regulations, court orders, and requests from regulatory authorities including PAGCOR.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 (RA 10173), goldph processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your goldph account and deliver the services you have signed up for;
• Legal obligation: Processing required to comply with Philippine laws, including AML/CTF regulations, PAGCOR licensing requirements, and tax reporting obligations;
• Legitimate interests: Processing necessary for goldph's legitimate business interests, such as fraud prevention, platform security, and service improvement, where these interests are not overridden by your privacy rights;
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Personal Data

goldph may share your personal data with the following categories of recipients:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors, solely to facilitate deposits and withdrawals on your goldph account;
• Identity verification providers: Third-party KYC and AML screening services used to verify your identity and comply with Philippine regulatory requirements;
• Technology and hosting providers: Cloud infrastructure and software providers who host and support the goldph Platform under strict data processing agreements;
• Customer support platforms: Third-party helpdesk and live chat tools used to manage goldph's customer support operations;
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where disclosure is required by law or court order;
• Professional advisers: Lawyers, auditors, and accountants engaged by goldph, subject to professional confidentiality obligations;
• Business successors: In the event of a merger, acquisition, or sale of goldph's business, your data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom goldph shares personal data are required to process that data only for the specified purpose and in accordance with goldph's instructions and applicable Philippine data protection law.

7 Cookies and Tracking Technologies

goldph uses cookies and similar tracking technologies to operate and improve the goldph Platform. A cookie is a small text file placed on your device when you visit a website. goldph uses the following types of cookies:

• Strictly necessary cookies: Essential for the goldph Platform to function. These include session cookies that maintain your goldph Login state and security tokens. These cookies cannot be disabled without affecting platform functionality.
• Performance and analytics cookies: Used to collect anonymized data about how players use the goldph Platform, which pages are visited most frequently, and where errors occur. This data helps goldph improve platform performance.
• Functional cookies: Used to remember your preferences, such as your preferred language, display settings, and notification preferences on goldph.
• Marketing cookies: Used, with your consent, to deliver relevant goldph promotional content and to measure the effectiveness of goldph's marketing campaigns. These cookies may be set by goldph or by trusted advertising partners.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the goldph Platform. For detailed information on the specific cookies used by goldph, please refer to our Cookie Notice, available within the goldph Platform settings.

8 Data Retention

goldph retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account data: Retained for the duration of your goldph account and for a period of five (5) years following account closure, in accordance with Philippine AML record-keeping requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act of 2001 (RA 9160, as amended);
• KYC documents: Retained for five (5) years following the end of the business relationship, or longer if required by a specific regulatory directive;
• Customer support records: Retained for three (3) years from the date of the last interaction, to support dispute resolution;
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of compliance;
• Technical and log data: Retained for up to twelve (12) months for security monitoring and fraud prevention purposes.

Upon expiry of the applicable retention period, goldph will securely delete or anonymize your personal data in accordance with its data disposal procedures.

9 Data Security

goldph's security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the goldph Platform;
• Encryption of sensitive data at rest, including financial data and identity documents;
• Role-based access controls ensuring that goldph staff can only access personal data necessary for their specific job function;
• Regular security audits, vulnerability assessments, and penetration testing of the goldph Platform;
• Multi-factor authentication requirements for goldph staff accessing systems that process personal data;
• Incident response procedures to detect, contain, and report personal data breaches in accordance with the National Privacy Commission's breach notification requirements.

While goldph takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for keeping your goldph Login credentials confidential and for notifying goldph immediately if you suspect unauthorized access to your account.

10 Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by goldph:

To exercise any of these rights, please contact goldph's Data Protection Officer using the details in Section 14. goldph will respond to all verified requests within thirty (30) days. In complex cases, this period may be extended by a further thirty (30) days, with prior notice to you.

goldph will not charge a fee for exercising your data rights unless your request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

11 Children's Privacy

If you are a parent or guardian and believe that your child has registered on the goldph Platform, please contact goldph's support team immediately using the contact details in Section 14. goldph will take prompt action to verify the situation and, where confirmed, to close the account and delete all associated personal data.

12 Cross-Border Data Transfers

goldph primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to and processed in countries outside the Philippines — for example, where goldph uses cloud infrastructure providers or technology partners with servers located abroad.

Where such transfers occur, goldph ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under the Philippine Data Privacy Act of 2012. These safeguards may include:

• Contractual clauses approved by the National Privacy Commission;
• Transfers to countries recognized by the NPC as providing an adequate level of data protection;
• Binding corporate rules or equivalent data transfer mechanisms.

You may request further information about the specific safeguards applicable to any cross-border transfer of your personal data by contacting goldph's Data Protection Officer.

13 Updates to This Privacy Policy

goldph may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When material changes are made, goldph will notify registered players via the email address associated with their goldph account and/or by displaying a prominent notice on the goldph Platform.

The date of the most recent revision is displayed at the top of this page. Your continued use of the goldph Platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes.

We encourage you to review this Privacy Policy periodically to stay informed about how goldph protects your personal data. If you have any concerns about a change to this Privacy Policy, please contact our Data Protection Officer before continuing to use the goldph Platform.

14 Contact Us and Complaints

For any questions, concerns, or requests relating to this Privacy Policy or goldph's handling of your personal data, please contact goldph's designated Data Protection Officer:

• Data Protection Officer: goldph DPO
• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 via the goldph Platform
• Response Time: goldph aims to acknowledge all privacy-related inquiries within 72 hours and to provide a substantive response within 30 days.

Right to Lodge a Complaint: If you are not satisfied with goldph's response to your privacy concern, you have the right to lodge a complaint with the Philippine National Privacy Commission (NPC). The NPC is the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012 in the Philippines.

goldph takes all privacy complaints seriously and is committed to resolving them fairly and promptly. We encourage you to contact goldph directly in the first instance so that we have the opportunity to address your concern before you escalate to the NPC.