Last updated: January 2026 | Applies to all gl99 platform users in the Philippines
Your privacy matters to gl99. This Privacy Policy explains what personal data we collect from you when you use the gl99 platform, why we collect it, how we use and protect it, and what rights you have over your own information. Please read this document carefully. By registering an account or using any part of the gl99 platform, you acknowledge that you have read and understood this Privacy Policy.
gl99 ("gl99," "we," "us," or "our") operates the online gaming platform accessible at gl99.app (the "Platform"). As a platform serving Filipino players, gl99 is committed to handling your personal data responsibly and in accordance with applicable Philippine data protection laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.
This Privacy Policy applies to all personal data collected through the gl99 Platform — including the website, any associated mobile interface, customer support channels, and promotional communications. It covers data collected from registered players, visitors who browse the Platform without registering, and individuals who contact gl99 through any support channel.
This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. Capitalised terms not defined in this Policy have the meanings given to them in the Terms & Conditions.
gl99 acts as the data controller in respect of the personal data described in this Policy. This means we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers to process data on our behalf, those providers act as data processors and are bound by contractual obligations consistent with this Policy.
gl99 collects personal data that is necessary for the operation of the Platform, compliance with legal obligations, and the delivery of a safe and personalised gaming experience. The categories of personal data we collect include:
We do not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. gl99 does not collect biometric data, political opinions, religious beliefs, or health information unless specifically required by law.
gl99 collects personal data through the following means:
The majority of personal data we hold is provided directly by you during the account registration process, KYC verification, deposit and withdrawal transactions, customer support interactions, and when you update your account settings or respond to promotional communications.
When you access and use the gl99 Platform, we automatically collect certain technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device identifiers, browser type, and behavioural data such as pages visited and time spent on the Platform. See Section 7 for more detail on cookies.
gl99 may receive personal data about you from third-party sources in limited circumstances, including:
Data received from third parties is handled with the same level of care and protection as data collected directly from you.
gl99 uses your personal data for the following purposes:
| Purpose | Data Used |
|---|---|
| Account registration and management | Identity, contact, and KYC data |
| Age and identity verification (21+ compliance) | Date of birth, government-issued ID, KYC documents |
| Processing deposits and withdrawals | Financial data, identity data |
| Delivering gaming services | Gaming activity data, technical data |
| Anti-money laundering and fraud prevention | Identity, financial, and transaction data |
| Responsible gaming monitoring | Gaming activity data, responsible gaming settings |
| Customer support | Identity, contact, and communications data |
| Personalised promotions and bonuses | Gaming activity, contact, and preference data |
| Platform security and technical maintenance | Technical and usage data |
| Regulatory reporting and legal compliance | Identity, financial, and gaming activity data |
gl99 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Where profiling is used — for example, to identify responsible gaming concerns or detect unusual account activity — a member of our team reviews flagged cases before any action is taken on your account.
Under the Data Privacy Act of 2012 and its implementing rules, gl99 processes your personal data on the following legal bases:
gl99 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Your data is shared only as described in this Policy and only to the extent necessary for the stated purpose.
gl99 engages trusted third-party service providers to assist in operating the Platform. These providers act as data processors under our instruction and are contractually bound to process your data only for the purposes we specify and to maintain appropriate security standards. Categories of service providers include:
gl99 may disclose your personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable Philippine law, a valid legal order, or where disclosure is necessary to protect the rights, property, or safety of gl99, its players, or the public.
In the event of a merger, acquisition, restructuring, or sale of all or part of gl99's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to how your data is handled as a result.
Cross-border transfers: Some of gl99's service providers may be located outside the Philippines. Where personal data is transferred internationally, gl99 ensures that appropriate safeguards are in place — including contractual data protection clauses — consistent with the requirements of the Data Privacy Act of 2012.
Cookies are small text files placed on your device when you visit the gl99 Platform. They allow the Platform to recognise your device, remember your preferences, and collect usage data to improve your experience. gl99 also uses similar technologies such as web beacons and local storage objects.
You can manage your cookie preferences through the cookie settings panel available on the Platform. You may also configure your browser to block or delete cookies; however, disabling strictly necessary cookies will affect your ability to use the Platform. Note that blocking cookies does not prevent gl99 from collecting server-side log data associated with your IP address.
gl99 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
When personal data is no longer required, gl99 securely deletes or anonymises it in a manner that prevents reconstruction or identification.
gl99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
While gl99 takes data security seriously and applies industry-standard protections, no method of electronic transmission or storage is completely immune to risk. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, gl99 will notify you and the National Privacy Commission (NPC) in accordance with the requirements of the Data Privacy Act of 2012.
Protect your own account. gl99 will never ask for your password via email, live chat, or phone. If you receive any communication claiming to be from gl99 and requesting your login credentials, treat it as fraudulent and contact our support team immediately. Always use a strong, unique password for your gl99 account.
Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by gl99. To exercise any of these rights, contact our Data Privacy Officer using the details in Section 14.
Request a copy of the personal data gl99 holds about you and information about how it is being used.
Request correction of inaccurate or incomplete personal data held in your gl99 account.
Request deletion of your personal data where it is no longer necessary, subject to legal retention obligations.
Object to processing of your data for direct marketing or where processing is based on legitimate interests.
Receive a copy of your personal data in a structured, machine-readable format for transfer to another controller.
Withdraw consent for marketing communications or non-essential cookies at any time without penalty.
gl99 will respond to all data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, and you will be notified of the extension. There is no fee for exercising your rights, unless requests are manifestly unfounded or excessive.
If you are not satisfied with gl99's response to a data rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
The gl99 Platform is strictly restricted to individuals who are 21 years of age or older in accordance with Philippine gaming regulations. gl99 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the data, and take appropriate action in accordance with our Terms & Conditions.
If you are a parent or guardian and believe that a minor has registered on the gl99 Platform or provided personal data to us, please contact our support team immediately so that we can investigate and take corrective action.
The gl99 Platform may contain references to third-party game providers and payment services. gl99 is not responsible for the privacy practices of any third-party service, and this Privacy Policy does not apply to data collected by third parties through their own platforms or interfaces. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of gl99.
gl99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, we will notify registered users via the email address on file or through a prominent notice on the Platform. The "Last updated" date at the top of this page will always reflect the most recent revision.
Your continued use of the gl99 Platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised Policy, you should cease using the Platform and may request account closure by contacting our support team.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way gl99 handles your personal data, please contact our Data Privacy Officer. Our DPO is responsible for overseeing gl99's compliance with the Data Privacy Act of 2012 and will handle all data rights requests and privacy-related complaints.
Data Privacy Officer — gl99
Support Email: [email protected]
Please include "Privacy Request" or "Data Rights" in the subject line of your email so that your message is directed to the correct team promptly.
Response time: Within 30 days of receipt, Monday to Sunday, 9:00 AM – 11:00 PM (Philippine Standard Time).
For unresolved complaints, you may also contact the National Privacy Commission of the Philippines directly. gl99 cooperates fully with NPC investigations and takes all privacy complaints seriously.
Six ways gl99 keeps your personal data safe, transparent, and firmly in your control.
Your personal information is never sold, rented, or traded to third parties for their own commercial use. Data sharing is limited strictly to service providers who help operate the gl99 Platform under binding confidentiality agreements.
Every piece of data transmitted between your device and gl99 servers is protected by SSL/TLS encryption. Sensitive records including KYC documents and financial data are also encrypted at rest on our secure infrastructure.
Under the Data Privacy Act of 2012, you have the right to access, correct, delete, and port your personal data. gl99 responds to all data rights requests within 30 days — no fees, no runaround.
gl99 operates in full compliance with the Philippine Data Privacy Act of 2012 and its implementing rules. Our Data Privacy Officer oversees all data handling practices and is your direct point of contact for privacy concerns.
gl99 collects only the personal data that is genuinely necessary for account management, regulatory compliance, and service delivery. We do not collect sensitive categories of data beyond what KYC and AML obligations require.
In the unlikely event of a data breach affecting your personal information, gl99 will notify you and the National Privacy Commission within the timeframes required by Philippine law — keeping you informed and protected at every step.
Your data is protected, your identity is verified, and your winnings are yours. Join thousands of Filipino players who trust gl99 for a fair, transparent, and secure online gaming experience.
21+ only. Please gamble responsibly. gl99 complies with the Philippine Data Privacy Act of 2012 and PAGCOR regulations.