GBA333 Privacy Policy — How We Keep Your Personal Data Safe

This Privacy Policy applies to all personal data processed by GBA333 in connection with the operation of the GBA333 online gaming platform at gba333.net. It applies to all registered members, visitors to the website, and anyone who interacts with GBA333's customer support services.

GBA333 is the data controller for the personal information described in this policy. As data controller, GBA333 is responsible for determining the purposes and means of processing your personal data, and for ensuring that processing is carried out lawfully, fairly, and transparently in accordance with Republic Act No. 10173 — the Philippine Data Privacy Act of 2012 — and its Implementing Rules and Regulations.

By registering a GBA333 account, using the GBA333 platform, or submitting any personal information to GBA333, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing practices described herein. If you do not agree with any part of this policy, please do not use the GBA333 platform.

GBA333 collects personal data in several categories. The table below summarises what we collect and why each category is necessary for the operation of your GBA333 account.

GBA333 collects personal data through the following means:

• Registration form: When you create your GBA333 account, you provide your name, date of birth, mobile number, and email address directly.
• KYC verification process: When you submit identity documents for account verification prior to your first withdrawal, GBA333 collects images of your government-issued ID and related materials.
• Deposits and withdrawals: When you fund your GBA333 account or request a withdrawal, transaction data including payment account references is recorded.
• Platform usage: GBA333 automatically collects technical data including your IP address, device type, operating system, browser version, and session activity as you use the platform.
• Cookies and similar technologies: GBA333 uses cookies and tracking pixels to maintain session state, analyse platform performance, and detect fraudulent activity. See Section 8 for full details.
• Customer support interactions: When you contact GBA333 via live chat, email, or Viber, the content of those communications is recorded for quality assurance and dispute resolution purposes.
• Third-party sources: In limited circumstances, GBA333 may receive data from identity verification service providers used for KYC checks, or from payment processors involved in your transactions.

GBA333 uses your personal data only for the purposes for which it was collected, or for purposes compatible with those original purposes. The principal uses of your data at GBA333 are as follows:

4.1 Account Operation and Service Delivery

The primary use of your personal data at GBA333 is to create and maintain your player account, process deposits and withdrawals, record your betting and gaming activity, and deliver the services you have requested. Without this processing, GBA333 cannot operate your account.

4.2 Identity Verification and Regulatory Compliance

GBA333 is required by Philippine gaming regulations and anti-money laundering laws to verify the identity of all players before processing withdrawals. Your identity documents and KYC data are used solely for this purpose and for ongoing compliance monitoring. GBA333 retains KYC records for the periods mandated by applicable law.

4.3 Fraud Prevention and Platform Security

GBA333 uses usage data, IP addresses, device fingerprints, and transaction patterns to detect and prevent fraudulent activity, bonus abuse, multi-accounting, money laundering, and other prohibited conduct. This processing is essential for protecting all GBA333 members and the integrity of the platform.

4.4 Customer Support

Communication data collected through our support channels is used to assist you with your queries, resolve disputes, and improve the quality of GBA333's support services. Support interactions may be reviewed by supervisors for training and quality assurance purposes.

4.5 Responsible Gaming

GBA333 uses gaming activity data — including bet frequency, session duration, and deposit patterns — to identify members who may be at risk of problem gambling and to operate responsible gaming tools such as deposit limits and self-exclusion. This processing is in the interest of player welfare and is required by responsible gaming obligations under our gaming licence.

4.6 Marketing Communications

Where you have opted in to receive marketing communications from GBA333, we may use your email address or mobile number to send you information about promotions, new games, and special offers. You can opt out of marketing communications at any time by updating your notification preferences in your GBA333 account settings or by contacting support@gba333.net.

4.7 Platform Improvement and Analytics

GBA333 uses aggregated and anonymised usage data to understand how members interact with the platform, identify areas for improvement, and develop new features. This analytics processing does not involve personally identifiable information in its reported form.

GBA333 does not sell your personal data. We share your information only with the categories of recipients described below, and only to the extent necessary for the stated purpose.

• Payment processors: GBA333 shares necessary transaction data with licensed payment service providers — including GCash, Maya, BDO, BPI, UnionBank, and card payment processors — to process your deposits and withdrawals. These providers are subject to their own privacy policies and data protection obligations.
• Identity verification providers: GBA333 uses licensed third-party KYC services to verify the identity of members as required by gaming regulations. These providers process only the data necessary to complete the verification check.
• Gaming platform and software providers: GBA333's casino games and sportsbook are powered by licensed game providers and platform software companies. These providers may receive anonymised session and gameplay data for technical purposes.
• Regulatory authorities: GBA333 may be required to disclose member data to the relevant Philippine gaming regulatory authority, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or courts as required by applicable Philippine law.
• Professional advisers: GBA333 may share relevant data with lawyers, auditors, accountants, and insurance providers as necessary for the operation of our business, all of whom are subject to confidentiality obligations.

GBA333 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine laws and regulations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your GBA333 account and for a minimum of 5 years after account closure, in accordance with anti-money laundering record-keeping requirements under Philippine law.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction, as required by financial record-keeping regulations.
• KYC documents: Retained for the period required by applicable gaming regulations, typically a minimum of 5 years after account closure.
• Customer support communications: Retained for 2 years from the date of the interaction, or longer if the interaction relates to a dispute or legal matter.
• Usage and technical data: Typically retained for 12 months from collection for fraud detection and analytics purposes.
• Marketing preferences: Retained until you withdraw consent or update your preferences.

When the retention period for a category of data expires, GBA333 will securely delete or anonymise the data so that it can no longer be associated with an individual.

GBA333 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect your information against unauthorised access, accidental loss, alteration, or disclosure.

• TLS/SSL encryption: All data transmitted between your device and GBA333 servers is protected using Transport Layer Security encryption. You will always see HTTPS in your browser's address bar when using GBA333.
• Data encryption at rest: Sensitive data stored in GBA333 databases — including identity documents and financial data — is encrypted using industry-standard algorithms.
• Access controls: Access to personal data within GBA333's systems is restricted on a strict need-to-know basis. Staff access to member data is logged and regularly audited.
• Regular security audits: GBA333 undergoes regular independent security assessments including penetration testing and vulnerability scanning to identify and address potential weaknesses.
• Two-factor authentication: GBA333 offers two-factor authentication for member accounts. We strongly encourage all members to enable 2FA in their account settings for an additional layer of protection.
• Incident response: GBA333 maintains a documented data breach incident response procedure. In the event of a breach that poses a risk to your rights and freedoms, you and the National Privacy Commission will be notified within the timeframes required by Philippine law.

GBA333 uses cookies and similar tracking technologies on the gba333.net website. Cookies are small text files stored on your device by your browser. They help GBA333 remember your session, maintain security, and understand how you use our platform.

Types of Cookies Used by GBA333

• Strictly necessary cookies: These cookies are essential for the GBA333 website to function. They maintain your login session, security tokens, and language preferences. These cannot be disabled without breaking core functionality.
• Functional cookies: These remember your preferences and settings — such as your preferred games, responsible gaming limits, and notification settings — to personalise your GBA333 experience.
• Analytics cookies: GBA333 uses anonymised analytics data to understand how members navigate the platform, which pages are most visited, and where improvements can be made. This data does not identify individual users.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats to your GBA333 account.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the GBA333 platform. Most browsers allow you to refuse new cookies, delete existing cookies, and browse in private mode. For instructions specific to your browser, refer to its help documentation.

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, GBA333 members have the following rights with respect to their personal data. To exercise any of these rights, contact us at support@gba333.net with the subject line "Data Privacy Request".

GBA333 will respond to all valid data subject requests within 30 days. If a request is complex or numerous, we may extend this period by a further 30 days but will notify you of the extension and the reason for it. There is no charge for exercising your rights, unless requests are manifestly unfounded, excessive, or repetitive.

If you believe GBA333 has not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

The GBA333 platform is strictly for adults. In the Philippines, the minimum age for participation in online gaming is 21 years old. GBA333 does not knowingly collect personal data from individuals under the age of 21.

If GBA333 discovers that a minor has registered an account, the account will be closed immediately, all balances will be forfeited, and any personal data associated with the account will be deleted. If you believe a minor may have registered a GBA333 account, please contact us immediately at support@gba333.net.

GBA333 recommends that all adults in households with minors use parental control software to restrict access to online gambling websites. Information on parental controls for common devices and browsers is available through the National Telecommunications Commission of the Philippines.

GBA333 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws, or the services we provide. When we make significant changes, GBA333 will notify registered members via email and/or a prominent notice on the gba333.net website at least 7 days before the changes take effect.

Minor updates — such as corrections of typographical errors or clarifications that do not affect your rights — may be made without prior notice. The "Last Updated" date at the top of this policy always reflects the most recent revision date.

Your continued use of GBA333 after an updated Privacy Policy takes effect constitutes your acceptance of the updated terms. If you do not agree with any change to this policy, you should cease using GBA333 and may request closure of your account at any time.

GBA333 has a designated Data Privacy Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data at GBA333, please contact us through the following channels:

• Email (Data Privacy): support@gba333.net — Subject: "Data Privacy Request"
• Live Chat: Available 24/7 on the GBA333 website — ask to be connected to the data privacy team
• Response time: GBA333 acknowledges data privacy requests within 5 business days and resolves most requests within 30 days

If you are not satisfied with GBA333's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines at privacy.gov.ph.