glboss Privacy Policy

glboss is an online gaming platform operated for the benefit of Filipino players aged 21 years and older. The platform is accessible at glboss.net and offers a full suite of online gaming products including live casino table games, online slots, sports betting, bingo, color prediction games, Fortune Dragon, and sabong.

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, glboss acts as the personal information controller in respect of the personal data it collects directly from players and site visitors. Where glboss engages third-party service providers to process data on its behalf, those providers act as personal information processors and are bound by written data processing agreements that reflect the obligations set out in this Privacy Policy.

Our designated Data Protection Officer (DPO) is responsible for overseeing glboss's compliance with applicable data protection law. You may contact the DPO at any time using the details provided in Section 14 of this Policy.

This Privacy Policy applies to all personal data collected, used, stored, or otherwise processed by glboss in connection with:

• Your registration for and use of a glboss player account.
• Your browsing or interaction with the glboss website and any associated mobile applications.
• Your participation in any glboss game, promotion, tournament, or loyalty program.
• Your communications with glboss player support, including live chat, email, and any other support channel.
• Your use of any payment service integrated within the glboss platform.

This Policy does not apply to the privacy practices of third-party websites, apps, or services that you may access via links on the glboss platform. glboss is not responsible for the privacy practices of those third parties and encourages you to review their respective privacy policies independently.

The categories of personal data that glboss may collect about you are set out in the table below. The specific data collected from you will depend on how you interact with the platform.

glboss does not intentionally collect sensitive personal information as defined under the Data Privacy Act (e.g., racial or ethnic origin, political opinions, religious beliefs, health data) unless specifically required for responsible gaming assessments or legal compliance purposes, in which case your explicit consent will be sought.

glboss collects personal data through the following means:

• Directly from you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact player support, respond to a promotion, or update your account profile.
• Automatically: When you browse or use the glboss platform, our servers and analytics tools automatically collect technical data such as your IP address, device identifiers, browser type, pages visited, and gameplay session data. This collection occurs via cookies, web beacons, server logs, and similar tracking technologies, as further described in Section 7.
• From third-party payment providers: When you use GCash, Maya, BPI, BDO, Metrobank, InstaPay, PesoNet, GrabPay, or other integrated payment services, those providers may share transaction confirmation data with glboss to facilitate deposit and withdrawal processing.
• From identity verification providers: glboss may use third-party KYC service providers to assist with the verification of your identity documents. These providers return a verification result (pass/fail) and may retain a copy of your documents in accordance with their own privacy policies.
• From regulatory and law enforcement authorities: In limited circumstances, glboss may receive data about a player from PAGCOR, the Anti-Money Laundering Council (AMLC), or other competent Philippine authorities as part of a regulatory inquiry or investigation.

glboss uses the personal data it collects for the following specific purposes:

• Account creation and management: To register your player account, verify your identity, and maintain accurate account records throughout your relationship with glboss.
• Service delivery: To allow you to play games, place wagers, participate in promotions, and use all features available on the glboss platform.
• Payment processing: To process deposits and withdrawals via your chosen Philippine payment method, verify ownership of payment accounts, and reconcile financial records.
• Regulatory compliance: To fulfill our obligations under PAGCOR's regulatory framework, the Anti-Money Laundering Act (AMLA) as amended, and the Data Privacy Act of 2012, including conducting customer due diligence and filing required reports.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, bonus abuse, collusion, money laundering, unauthorized account access, and other prohibited conduct.
• Responsible gaming: To monitor gaming behavior for signs of problem gambling, enforce player-requested self-exclusion or deposit limits, and comply with PAGCOR's responsible gaming requirements.
• Customer support: To respond to your queries, resolve complaints, and improve the quality of our support services.
• Marketing and communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may withdraw your marketing consent at any time via your account settings or by contacting support.
• Platform improvement: To analyze aggregated and anonymized usage data to improve the performance, reliability, and user experience of the glboss platform.

Under the Data Privacy Act of 2012, glboss must have a lawful basis for each processing activity involving your personal data. The legal bases on which glboss relies are:

• Contractual necessity: Processing that is necessary to perform the contract between glboss and you as a registered player — including account management, payment processing, and service delivery.
• Legal obligation: Processing that is required to comply with applicable Philippine law, including PAGCOR regulations, AMLA obligations, and NPC data protection requirements.
• Legitimate interests: Processing carried out for purposes that are reasonably necessary to protect the interests of glboss or third parties, including fraud prevention, platform security, and responsible gaming monitoring, provided that such processing does not override your fundamental rights and freedoms.
• Consent: Processing for marketing and optional communications, where glboss has obtained your prior, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Where processing is based on consent and you withdraw that consent, glboss will cease the relevant processing activity promptly. Withdrawal of marketing consent does not affect your ability to use any other part of the glboss platform.

glboss uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow glboss to recognize your device across sessions and deliver a consistent, personalized experience.

The types of cookies used by glboss are:

• Strictly necessary cookies: Required for the platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without materially impairing your ability to use glboss.
• Functional cookies: Used to remember your preferences such as language settings, preferred game categories, and responsible gaming tool configurations.
• Analytics cookies: Used to collect aggregated, anonymized data about how players use the glboss platform, which helps us identify areas for improvement. glboss uses first-party analytics only; we do not share raw analytics data with external advertising networks.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorized access attempts.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect the functionality of the glboss platform. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

glboss shares your personal data only in the limited circumstances described below. In all cases, data sharing is governed by written agreements that require recipients to protect your information to at least the same standard as glboss.

• Payment service providers: GCash, Maya, GrabPay, BPI, BDO, Metrobank, InstaPay, PesoNet, and 7-Eleven CLiQQ receive transaction data necessary to process your deposits and withdrawals. These providers are independently regulated and maintain their own privacy and security frameworks.
• Identity verification providers: Third-party KYC partners receive copies of identity documents you submit for verification. These partners are bound by strict confidentiality and data protection obligations.
• Game content providers: Where glboss offers games developed by third-party studios, those studios may receive anonymized gameplay data for the purpose of game performance monitoring. No personally identifiable information is shared with game studios beyond what is technically necessary.
• Regulatory and law enforcement authorities: glboss is legally required to disclose player information to PAGCOR, the AMLC, the National Privacy Commission, and other competent Philippine authorities upon lawful request. Such disclosures are mandatory and do not constitute a breach of this Privacy Policy.
• Professional advisers: glboss may share relevant personal data with its legal counsel, auditors, and compliance consultants on a strictly need-to-know basis, subject to professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of glboss's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

glboss implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Transport Layer Security (TLS): All data transmitted between your device and the glboss platform is encrypted using industry-standard TLS 1.2 or higher.
• Encryption at rest: Sensitive data stored on glboss servers — including financial data and identity document scans — is encrypted using AES-256 or equivalent algorithms.
• Access controls: Access to personal data within glboss's systems is restricted on a strict need-to-know basis. Staff with access to personal data are trained on data protection obligations and are subject to confidentiality agreements.
• Two-factor authentication: glboss offers OTP-based 2FA for all player accounts and requires it for high-value withdrawal requests.
• Penetration testing and vulnerability assessments: glboss's platform and infrastructure are regularly reviewed by independent security professionals to identify and remediate potential vulnerabilities.
• Incident response: glboss maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, glboss will notify the National Privacy Commission and affected players as required under the Data Privacy Act.

glboss retains your personal data for no longer than is necessary for the purposes for which it was collected, subject to any minimum retention periods required by applicable Philippine law. The following retention schedule applies:

Upon expiry of the applicable retention period, glboss will securely delete or anonymize your personal data so that it can no longer be associated with you as an identifiable individual. Where data is anonymized rather than deleted, the anonymized data may be retained and used for statistical and analytical purposes without further restriction.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by glboss:

• Right to be informed: You have the right to be informed that your personal data is being collected and processed, and to receive clear information about how it is used — which is the purpose of this Privacy Policy.
• Right of access: You have the right to request a copy of the personal data glboss holds about you, together with information about how it is processed. Requests will be fulfilled within 30 days of receipt.
• Right to rectification: You have the right to request the correction of any inaccurate or incomplete personal data glboss holds about you. You may update basic profile information directly via your account settings at any time.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to glboss's legal obligation to retain certain categories of data as described in Section 10.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though glboss may continue processing where it can demonstrate compelling legitimate grounds that override your interests.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to glboss in a structured, commonly used, machine-readable format, where processing is based on consent or contractual necessity.
• Right to file a complaint: If you believe that glboss has violated your data privacy rights, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact our Data Protection Officer as described in Section 14. glboss will respond to all data subject requests within 30 calendar days. Where a request is complex or where a large volume of requests has been received simultaneously, glboss may extend this period by a further 30 days, with prior notice to you.

glboss is strictly an adults-only platform. In accordance with Philippine law governing casino-style online gaming, only individuals aged 21 years and older are permitted to register and use the glboss platform. glboss does not knowingly collect personal data from individuals under the age of 21.

During the registration process, all applicants are required to confirm that they are at least 21 years of age and to provide a date of birth. This date of birth is verified against identity documents submitted during the KYC process. Any account found to belong to a person under 21 years of age will be immediately and permanently closed, all funds will be forfeited, and the matter will be reported to PAGCOR as required by applicable regulations.

If you are a parent or guardian and have reason to believe that a person under 21 in your care has registered or attempted to register a glboss account, please contact us immediately at [email protected] so that we can take appropriate action without delay.

glboss reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the structure of our platform. The "Last Updated" date at the top of this Policy indicates when the most recent revision was made.

Where changes to this Policy are material — meaning they significantly affect your rights or the way in which glboss processes your personal data — glboss will provide notice via email to your registered address and/or via a prominent notification on the platform at least seven (7) days before the changes take effect.

Minor, non-material changes (such as typographical corrections, clarifications that do not alter the substance of any section, or updates to reflect minor operational changes) may be made without prior notice and will take effect upon publication on this page.

We encourage you to review this Privacy Policy periodically to stay informed about how glboss protects your personal data. Your continued use of the glboss platform after any amendment has taken effect constitutes your acknowledgment of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which glboss processes your personal data, please contact our Data Protection Officer using the details below:

• Data Protection Officer: glboss Data Protection Team
• Email: [email protected] (plain text — not a clickable link)
• Subject line: Please include "Privacy / DPO Request" in your subject line to ensure your message reaches the correct team promptly.
• Response time: glboss aims to acknowledge all privacy-related inquiries within two (2) business days and to provide a substantive response within thirty (30) calendar days.

If you are not satisfied with glboss's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines: