Your privacy matters to gl99. This policy explains exactly what data we collect, why we collect it, how we use it, and your rights as a data subject under Philippine law.
This Privacy Policy ("Policy") describes how gl99 ("gl99," "we," "us," or "our") collects, processes, stores, and protects the personal information of individuals who access or use the gl99 online gaming platform at gl99.win, including all associated pages, features, and services (collectively, the "Platform").
This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. It applies to all personal data collected from players, prospective players, and visitors to the Platform located in the Philippines or whose personal data is processed in or from the Philippines.
This Policy should be read in conjunction with gl99's Terms & Conditions. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
The personal data collected through the gl99 Platform is controlled and processed by gl99, operating as a PAGCOR-regulated online gaming operator in the Philippines. gl99 serves as the Personal Information Controller (PIC) as defined under the Data Privacy Act of 2012.
For all privacy-related inquiries, requests, or complaints, you may contact our designated Data Protection Officer (DPO) at the email address listed in Section 14 of this Policy.
gl99 collects personal data through several channels: account registration forms, KYC verification submissions, payment transactions, Platform usage activity, customer support interactions, and automated technical systems. The categories of data we collect include:
gl99 processes personal data for the following specific, legitimate purposes:
Under the Philippine Data Privacy Act, gl99 processes your personal data on the following legal grounds:
gl99 shares personal data with third parties only where strictly necessary and only under the following categories of recipient:
gl99 is legally required to disclose personal data and transaction records to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and Philippine law enforcement authorities upon receipt of a lawful order, warrant, or formal regulatory request. gl99 will comply with all such mandatory disclosures.
gl99 uses certified third-party identity verification services to process KYC document submissions. These providers are contractually bound to process data solely for identity verification purposes and are prohibited from retaining or repurposing your data beyond what is required for verification.
Deposit and withdrawal transactions are processed by licensed Philippine payment service providers (GCash/GXI, PayMaya/Maya Bank, and accredited banking partners). gl99 shares only the minimum transaction data necessary to complete the payment — we do not share your full gaming history or personal profile with payment processors.
Certain game providers require a player session token to deliver their game content. gl99 provides anonymised or pseudonymised session data to game providers — your full legal name, contact details, and financial data are not shared with game providers.
gl99 uses reputable cloud infrastructure, cybersecurity, and analytics service providers to operate and secure the Platform. These providers act as Personal Information Processors (PIPs) under binding data processing agreements and may not use your data for their own purposes.
gl99 uses cookies and similar tracking technologies on the Platform for the following purposes:
You may manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in to your gl99 account or using core Platform features.
gl99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods mandated by Philippine law:
Upon expiry of the applicable retention period and in the absence of any legal hold, gl99 will securely delete or anonymise your personal data in accordance with NPC-approved data disposal procedures.
gl99 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:
In the event of a personal data breach that is likely to cause harm to affected individuals, gl99 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected data subjects without undue delay, as required by the Data Privacy Act.
Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by gl99:
| Right | What It Means | Available at gl99 |
|---|---|---|
| Right to be Informed | Know what data gl99 collects and why. | ✅ This Policy |
| Right of Access | Request a copy of your personal data held by gl99. | ✅ Via Support |
| Right to Rectification | Correct inaccurate or outdated personal data. | ✅ Via Support |
| Right to Erasure | Request deletion of data no longer necessary (subject to legal retention obligations). | ✅ Where Lawful |
| Right to Object | Object to processing based on legitimate interests or for direct marketing. | ✅ Via Support |
| Right to Data Portability | Receive your data in a structured, machine-readable format. | ✅ On Request |
| Right to Lodge a Complaint | File a complaint with the National Privacy Commission. | ✅ NPC Philippines |
To exercise any of the above rights, contact gl99's Data Protection Officer at [email protected]. We will acknowledge your request within five (5) business days and respond within thirty (30) calendar days in accordance with NPC guidelines. Certain rights may be restricted where legal obligations (such as AMLA retention requirements) require continued data processing.
The gl99 Platform is strictly intended for individuals aged 21 years and above. gl99 does not knowingly collect personal data from individuals below the age of 21. All account registrations are subject to age verification as part of the KYC process.
If gl99 determines that personal data has been collected from an individual below the age of 21, the account will be immediately closed, all data will be deleted as soon as legally permissible, and any deposits will be returned through appropriate channels. If you believe that a minor has registered an account at gl99, please contact our support team immediately so that appropriate action can be taken.
gl99 may transfer certain categories of personal data to service providers located outside the Philippines — including cloud infrastructure providers and game software platforms whose servers are located in other jurisdictions. All such cross-border transfers are conducted in compliance with Section 21 of the Data Privacy Act, which requires that the receiving jurisdiction provides an adequate level of data protection, or that appropriate contractual safeguards (such as NPC-approved standard contractual clauses) are in place.
gl99 does not transfer personal data to jurisdictions that do not provide equivalent protection without implementing additional contractual or technical safeguards. Details of specific cross-border transfer arrangements are available upon request from our Data Protection Officer.
gl99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes to this Policy will be communicated to registered players via their registered mobile number or email address at least seven (7) days before the amended Policy takes effect, and/or through a prominent notice on the gl99 Platform.
The "Last Updated" date at the top of this page will always reflect when the current version of this Policy became effective. Your continued use of the gl99 Platform following the effective date of any amendment constitutes acceptance of the updated Policy.
For all privacy-related inquiries, data subject requests, or complaints regarding gl99's data processing practices, please contact our Data Protection Officer:
Email: [email protected] (plain text — not a clickable link)
Live Chat: Available 24/7 through the gl99 Platform. For urgent privacy matters, live chat typically provides the fastest initial response.
If you are not satisfied with gl99's response to your privacy complaint, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines. The NPC accepts complaints via its official website and walk-in offices in Pasay City, Metro Manila.
gl99 processes all player data in accordance with R.A. 10173. Our Data Protection Officer is registered with the National Privacy Commission. Your rights under Philippine law are fully enforceable.
gl99 does not sell, rent, or trade your personal information to advertisers or data brokers. Your profile, contact details, gaming history, and payment data are used solely to operate your gl99 account.
Every piece of data you send to gl99 — during login, payment, or KYC — is protected by military-grade encryption. Your data is never transmitted or stored in plain text.
You can access, correct, export, or request deletion of your data at any time. Contact gl99 support and we'll respond within 30 days as required by the NPC.
In the unlikely event of a data breach, gl99 will notify the National Privacy Commission within 72 hours and affected players without undue delay — as required by NPC Circular 16-03.
gl99 only uses your data for the specific purposes described in this Policy. Your KYC documents are used for identity verification — not profiling, advertising, or purposes you haven't consented to.
Now that you know exactly how gl99 protects your privacy, sign in to your account and enjoy a safe, PAGCOR-regulated gaming experience. Your data — and your fun — are in good hands.
🔐 Go to gl99 Login