gembet Privacy Policy

01 Introduction

gembet is committed to protecting the privacy and personal data of every player who uses our platform. We understand that trust is the foundation of any relationship between a gaming platform and its players — and that trust starts with being completely transparent about how we handle your information.

This Policy applies to all personal data collected through the gembet website, mobile application, customer support channels, and any other touchpoint through which you interact with gembet. It covers data collected from registered players, prospective players who browse the platform without registering, and individuals who contact gembet support.

Please read this Policy carefully. If you have questions about any part of it, you can reach our Data Protection Officer using the contact details in Section 15 of this Policy.

02 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, gembet is the personal information controller responsible for the personal data collected through the gembet platform. This means gembet determines the purposes and means of processing your personal data.

gembet operates the platform at gembet.run and is responsible for ensuring that all personal data processing activities comply with applicable Philippine data protection law. Where gembet engages third-party service providers to process data on its behalf, those providers act as personal information processors and are bound by data processing agreements that require them to handle your data in accordance with this Policy and applicable law.

03 Personal Data We Collect

gembet collects the following categories of personal data:

3.1 Identity and Contact Data

• Full legal name;
• Date of birth (for age verification — you must be 21 or older);
• Residential address in the Philippines (e.g., Metro Manila, Cebu, Davao, Quezon City);
• Email address;
• Mobile phone number.

3.2 Account and Authentication Data

• Username and encrypted password;
• Security questions and answers;
• Account preferences and settings;
• Login history, including timestamps and IP addresses.

3.3 Financial and Transaction Data

• GCash account details (mobile number linked to GCash);
• PayMaya account details;
• Bank account details for BPI, BDO, or Metrobank transfers;
• Deposit and withdrawal history;
• Transaction amounts in Philippine Peso (PHP / ₱);
• Payment method verification documents.

3.4 Identity Verification (KYC) Data

• Government-issued identification documents (e.g., Philippine passport, driver's licence, SSS ID, PhilHealth ID, UMID);
• Proof of address documents;
• Selfie or facial image for identity verification purposes.

3.5 Gaming and Behavioural Data

• Game history, including bets placed, games played, and outcomes;
• Bonus and promotion usage history;
• Session duration and activity timestamps;
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status).

3.6 Technical and Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser type;
• Unique device identifiers;
• Referring URLs and pages visited on the gembet platform;
• Cookie identifiers and similar tracking data (see Section 8).

3.7 Communications Data

• Records of communications with gembet customer support, including live chat transcripts and email correspondence;
• Feedback, complaints, and dispute records;
• Marketing preferences and opt-in/opt-out records.

04 How We Collect Your Data

gembet collects personal data through the following means:

• Direct collection: Data you provide when registering for a gembet account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions;
• Automated collection: Data collected automatically when you use the gembet platform, including through cookies, web beacons, and server logs (see Section 8);
• Third-party sources: Data received from payment processors (GCash, PayMaya, BPI, BDO, Metrobank) to verify transactions; identity verification service providers; fraud detection and anti-money laundering screening services; and regulatory authorities where required by law.

05 How We Use Your Personal Data

gembet uses your personal data for the following purposes:

gembet will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

06 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, gembet processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — including account management, payment processing, and delivery of gaming services;
• Legal obligation: Processing required to comply with applicable Philippine law, including anti-money laundering regulations, PAGCOR licensing requirements, and tax obligations;
• Legitimate interests: Processing necessary for gembet's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights;
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

07 Sharing Your Personal Data

gembet does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

7.1 Service Providers and Processors

gembet engages trusted third-party service providers to assist in operating the platform. These include payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, cloud hosting and infrastructure providers, customer support software providers, and analytics platforms. All processors are bound by contractual obligations to process your data only on gembet's instructions and in accordance with this Policy.

7.2 Regulatory and Law Enforcement Authorities

gembet may disclose your personal data to Philippine government authorities, including the Anti-Money Laundering Council (AMLC), PAGCOR, the National Privacy Commission (NPC), and law enforcement agencies, where required by law, court order, or regulatory directive. gembet will notify you of such disclosures where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of gembet's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Policy that result from it.

7.4 With Your Consent

gembet may share your data with other third parties where you have given your explicit consent to such sharing.

08 Cookies & Tracking Technologies

gembet uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit the gembet website. The following types of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that keep you logged in to your gembet account. These cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings and responsible gaming tool configurations.
• Analytics cookies: Help gembet understand how players use the platform so we can improve the experience. Data collected is aggregated and anonymised where possible.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the gembet platform. Strictly necessary and security cookies cannot be disabled without impairing your ability to use the platform.

09 Data Retention

gembet retains your personal data for as long as necessary to fulfil the purposes for which it was collected, and for as long as required by applicable Philippine law. The following general retention periods apply:

• Account data: Retained for the duration of your gembet account and for a minimum of five (5) years after account closure, in accordance with anti-money laundering record-keeping requirements;
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction;
• KYC and identity verification data: Retained for a minimum of five (5) years after account closure or the completion of the relevant transaction;
• Customer support records: Retained for three (3) years from the date of the interaction;
• Marketing data: Retained until you withdraw your consent or opt out of marketing communications;
• Technical and device data: Retained for up to twelve (12) months from collection, unless required for longer for security or fraud investigation purposes.

When personal data is no longer required, gembet will securely delete or anonymise it in accordance with its data disposal procedures.

10 Data Security

gembet implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the gembet platform;
• Encryption of sensitive data at rest, including financial account details and identity documents;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing of the gembet platform;
• Multi-factor authentication options for player accounts;
• Continuous monitoring for suspicious activity and potential data breaches;
• Staff training on data protection and information security obligations.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, gembet will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay where required by law.

11 Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by gembet:

• Right to be informed: The right to know whether gembet holds personal data about you and how it is being processed — which is the purpose of this Policy;
• Right of access: The right to request a copy of the personal data gembet holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure or blocking: The right to request deletion or blocking of your personal data where it is no longer necessary for the purpose for which it was collected, or where processing is unlawful;
• Right to object: The right to object to the processing of your personal data, including for direct marketing purposes;
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to damages: The right to claim compensation for any damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data.

To exercise any of these rights, please contact gembet's Data Protection Officer using the details in Section 15. gembet will respond to your request within 15 business days. In some cases, gembet may need to verify your identity before processing your request. gembet may also decline requests where an exemption applies under the Data Privacy Act, such as where processing is required for compliance with a legal obligation.

12 Minors and Age Restriction

The gembet platform is strictly for persons aged 21 years and older. gembet does not knowingly collect personal data from individuals under the age of 21. If gembet becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and believe that a minor has registered for a gembet account or provided personal data to gembet, please contact our support team immediately at the contact details provided in Section 15. gembet takes underage access extremely seriously and will act promptly on any such report.

13 International Data Transfers

gembet primarily processes and stores personal data within the Philippines. In some cases, personal data may be transferred to and processed in countries outside the Philippines — for example, where gembet uses cloud infrastructure or service providers with operations in other jurisdictions.

Where such transfers occur, gembet ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require the recipient to apply data protection standards equivalent to those required under Philippine law. gembet will not transfer your personal data to a country that does not provide an adequate level of protection without first implementing appropriate safeguards and, where required, obtaining your consent.

14 Changes to This Privacy Policy

gembet reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the gembet platform. When we make material changes to this Policy, we will notify you by posting a prominent notice on the gembet platform and, where appropriate, by sending an email to your registered address.

The updated Policy will be effective from the date it is published on the gembet platform. Your continued use of the platform after that date constitutes your acknowledgement of the updated Policy. We encourage you to review this Policy periodically to stay informed about how gembet protects your personal data.

15 Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or gembet's data processing practices, please contact our Data Protection Officer (DPO):

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that gembet has not handled your personal data in accordance with the Data Privacy Act of 2012. For more information about your rights and how to file a complaint, visit the NPC's official resources.

For questions about responsible gaming, self-exclusion, or account controls, please visit the gembet Responsible Gaming page or contact our support team directly.