GamingWeb Privacy Policy — How We Protect Your Personal Data in the Philippines

GamingWeb is the data controller responsible for the personal information you provide when using this platform. GamingWeb is a Philippine-registered company operating under a PAGCOR license, with its primary operations based in the Philippines.

As data controller, GamingWeb determines the purposes and means of processing your personal data. We are accountable under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as overseen by the National Privacy Commission (NPC).

Data Protection Officer (DPO): GamingWeb has appointed a Data Protection Officer responsible for overseeing compliance with this policy and Philippine data protection law. You can contact the DPO at any time at privacy@gamingweb.best.

GamingWeb collects the minimum personal data necessary to operate a licensed online gaming platform, meet our regulatory obligations, and provide you with a functional, secure experience. Below is a clear breakdown of what we collect and why each category is needed.

GamingWeb collects personal data through three main channels:

Directly From You

Most of your data is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, participate in a promotion, or update your account profile. You are always aware when you're providing information directly to GamingWeb.

Automatically Through Platform Use

When you visit GamingWeb and use the platform, technical data is collected automatically — including your IP address, device details, browser type, and session activity. This happens through standard web server logs and cookies. See Section 7 for full details on cookies and tracking.

From Third Parties

In limited circumstances, GamingWeb may receive data about you from third parties, including:

• Payment providers (GCash, Maya, banks) — transaction confirmation and account name verification.
• Identity verification services — to cross-check ID documents against government databases as required by PAGCOR and AMLA regulations.
• Fraud prevention services — to identify accounts associated with known fraudulent activity patterns.

GamingWeb does not purchase marketing data or build player profiles using social media scraping or third-party commercial data brokers.

GamingWeb uses your personal data for the following specific purposes. We do not use your data for purposes beyond what is listed here without your explicit consent.

• Account Management: Creating, maintaining, and securing your GamingWeb account. Processing your login, managing your wallet, and applying your preferences.
• Regulatory Compliance: Meeting our obligations under PAGCOR's licensing conditions, the Anti-Money Laundering Act (AMLA), and the Philippine Data Privacy Act. This includes identity verification, suspicious transaction monitoring, and regulatory reporting.
• Transaction Processing: Processing deposits and withdrawals via GCash, Maya, banks, and other supported Philippine payment channels. Verifying that payment method ownership matches account registration.
• Responsible Gaming: Monitoring gaming activity patterns to identify signs of problem gambling. Enforcing deposit limits, loss limits, and self-exclusion settings that you configure. Intervening proactively when GamingWeb's responsible gaming tools flag a concern.
• Security and Fraud Prevention: Detecting and preventing fraudulent accounts, bonus abuse, money laundering, and other prohibited conduct. IP monitoring, device fingerprinting, and behavioural pattern analysis serve this purpose.
• Customer Support: Resolving your queries, complaints, and disputes. Support records allow us to maintain continuity when you contact us across multiple sessions.
• Platform Improvement: Understanding how players use GamingWeb to improve the interface, fix technical issues, and develop new features that better serve Filipino players.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform news to players who have opted in. You can withdraw marketing consent at any time through your account settings or by emailing privacy@gamingweb.best.

Under the Philippine Data Privacy Act, GamingWeb must have a lawful basis for processing each category of your personal data. The bases we rely on are:

• Contractual Necessity: Processing required to fulfil our obligations under the GamingWeb Terms and Conditions — such as managing your account, processing transactions, and operating the gaming services you've signed up to use.
• Legal Obligation: Processing required to comply with Philippine law — including PAGCOR licensing conditions, AMLA reporting requirements, and tax obligations. GamingWeb cannot waive these obligations based on individual consent.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where these interests do not override your data rights.
• Consent: Processing for marketing communications and optional data uses. Consent can be withdrawn at any time without affecting your ability to use GamingWeb.

GamingWeb does not sell your personal data to anyone. Full stop. We share data only where necessary, with parties who are contractually bound to protect it, and strictly limited to what each party needs to fulfil their function.

Regulatory Authorities

PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies when required by law, court order, or regulatory obligation. GamingWeb cannot refuse these disclosures.

Payment Processors

GCash, Maya, GrabPay, InstaPay network banks, and Visa/Mastercard processing networks receive transaction data necessary to process your deposits and withdrawals. These parties handle your financial data under their own privacy policies and Philippine financial regulation.

Identity Verification Partners

Third-party KYC and identity verification services that cross-check the documents you submit against government databases as required by PAGCOR and AMLA. These partners process your identity data only for verification and are contractually prohibited from using it for any other purpose.

Game Providers

Licensed third-party game studios and live casino providers that supply games to the GamingWeb lobby. Game providers receive session identifiers and bet data necessary to run their games. They do not receive your full identity profile.

Technology Service Providers

Cloud hosting, security, and infrastructure providers that support GamingWeb's technical operations. These providers act as data processors under strict data processing agreements and have no right to use your data independently.

GamingWeb uses cookies and similar tracking technologies on its website. A cookie is a small data file stored on your device by your browser when you visit a website. Here's exactly what GamingWeb uses and why.

GamingWeb does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You will not see GamingWeb advertisements following you around the internet based on cookies placed by this platform.

To manage your cookie preferences, adjust settings in your browser. Most modern browsers allow you to block or delete cookies. Note that blocking essential cookies will prevent GamingWeb from functioning correctly.

GamingWeb retains personal data for the minimum period required to fulfil the purpose for which it was collected, or as required by Philippine law — whichever is longer.

After the applicable retention period, data is securely deleted or anonymised. Anonymised data — where individual identity cannot be recovered — may be retained for longer periods for aggregate platform analytics.

GamingWeb implements technical and organisational security measures appropriate to the sensitivity of the data we process. These measures include:

• 256-bit SSL Encryption: All data transmitted between your device and GamingWeb servers is encrypted in transit using the same TLS standard used by Philippine banks and fintech platforms.
• Encrypted Data Storage: Sensitive personal information — including KYC documents, financial data, and government ID details — is encrypted at rest on GamingWeb's secure servers.
• Access Controls: Employee access to personal data is strictly limited to those with a legitimate operational need. Access is logged, audited, and reviewed regularly. GamingWeb staff cannot access your account password — it is stored as a cryptographic hash.
• Multi-Factor Authentication: GamingWeb uses OTP-based verification for login, withdrawal requests, and account changes to prevent unauthorised access even if login credentials are compromised.
• Penetration Testing: GamingWeb's systems undergo regular security audits and penetration testing by qualified information security professionals.
• Data Breach Response: In the event of a personal data breach that poses a risk to player rights, GamingWeb will notify affected players and the National Privacy Commission within 72 hours of becoming aware of the breach, as required by the Data Privacy Act.

No internet-based system is completely immune to risk. While GamingWeb takes comprehensive precautions, we cannot guarantee absolute security. Players should also take responsibility for their account security — use a strong, unique password, enable OTP verification, and never share login credentials.

The Philippine Data Privacy Act grants you specific rights over your personal data. GamingWeb supports all of these rights and provides clear processes for exercising them. Here's what you're entitled to:

GamingWeb is strictly an adult platform. Under PAGCOR regulations and Philippine gaming law, participation in online gaming is restricted to persons aged 21 and above. GamingWeb does not knowingly collect personal data from persons under 21.

If GamingWeb becomes aware that a registered account belongs to a person under 21, the account will be immediately closed, all balances forfeited, and the data handled in accordance with applicable child data protection law. If you believe a minor has registered on GamingWeb, please report this immediately to support@gamingweb.best or privacy@gamingweb.best.

GamingWeb's primary data processing occurs within the Philippines. In some cases, data may be processed by technology service providers — such as cloud infrastructure or security services — whose servers are located outside the Philippines.

Where this occurs, GamingWeb ensures appropriate safeguards are in place, including contractual clauses that require overseas processors to maintain data protection standards equivalent to those required under Philippine law. GamingWeb will not transfer your data to a country with inadequate data protection standards without appropriate safeguards in place.

Game providers who supply live casino and slot content to GamingWeb may process session data through their own systems, which may be located in other jurisdictions. These providers operate under gaming regulatory licences that include data protection requirements.

GamingWeb reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or regulatory guidance from the National Privacy Commission. The "Last Updated" date at the top of this page reflects when the most recent changes were made.

When we make material changes to this policy — changes that meaningfully affect how we process your data or your rights — we will notify you by email at your registered address and display a notification when you next log in to GamingWeb. Your continued use of GamingWeb after the effective date of a policy update constitutes acceptance of the updated policy.

For minor or clarificatory changes, we may update the policy without individual notification. We recommend reviewing this page periodically. The current version will always be accessible at https://gamingweb.best/privacy-policy.

If you have any questions about this Privacy Policy, want to exercise your data rights, or wish to raise a privacy concern, here's how to reach us:

• Data Protection Officer: privacy@gamingweb.best (mark subject "Data Rights Request" or "Privacy Concern")
• General Support: support@gamingweb.best or 24/7 live chat on the GamingWeb website
• Response Time: Privacy requests are acknowledged within 2 business days and resolved within 10 business days.

If You Are Not Satisfied: If GamingWeb's response to your privacy concern does not resolve the matter to your satisfaction, you have the right to escalate to the National Privacy Commission (NPC) of the Philippines. The NPC oversees enforcement of the Data Privacy Act and accepts complaints from Filipino data subjects. Information on filing a complaint with the NPC is available on the NPC's official website.