gobetay Privacy Policy

1. Introduction and Data Controller Identity

1.1 This Privacy Policy ("Policy") describes how gobetay ("gobetay," "we," "us," or "our") collects, uses, stores, and protects the personal data of users ("you," "your," or "Data Subject") who access or use the gobetay platform at gobetay.net and all associated services (collectively, the "Platform").

1.2 gobetay acts as the Personal Information Controller (PIC) as defined under the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations. As PIC, gobetay determines the purposes and means of processing your personal data.

1.3 gobetay has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact the DPO through the contact details provided in Section 14 of this Policy.

1.4 By registering an account on gobetay or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2. Personal Data We Collect

2.1 gobetay collects the following categories of personal data:

Category	Examples	Purpose
Identity Data	Full name, date of birth, nationality, government-issued ID number	KYC verification, age verification, regulatory compliance
Contact Data	Email address, mobile number, residential address	Account communication, support, notifications
Financial Data	GCash number, bank account details, transaction history	Deposit and withdrawal processing, AML compliance
Account Data	Username, password (hashed), account preferences, betting history	Platform operation, personalisation, responsible gaming
Technical Data	IP address, device type, browser type, operating system, session logs	Security, fraud prevention, platform optimisation
Usage Data	Pages visited, games played, bet amounts, session duration	Platform improvement, responsible gaming monitoring
Communications Data	Support chat logs, email correspondence, feedback submissions	Customer support, dispute resolution, quality assurance

2.2 gobetay does not intentionally collect sensitive personal information as defined under the DPA (such as health data, political opinions, or religious beliefs) unless specifically required by law or with your explicit consent.

3. How We Collect Your Data

3.1 gobetay collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment data from GCash, Maya, and banking partners.
• Regulatory sources: Data received from PAGCOR, the AMLC, or other Philippine regulatory bodies in connection with compliance obligations.

4. Legal Basis for Processing

4.1 gobetay processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfil our obligations to you under the gobetay Terms & Conditions, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with Philippine laws and regulations, including the Anti-Money Laundering Act (RA 9160), PAGCOR licensing requirements, and the DPA itself.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and business analytics, where such interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, informed consent. You may withdraw consent at any time.

5. How We Use Your Personal Data

5.1 gobetay uses your personal data for the following purposes:

• To create, manage, and maintain your gobetay account;
• To verify your identity and age (21+) in compliance with PAGCOR requirements and Philippine law;
• To process deposits and withdrawals through approved Philippine payment methods (GCash, Maya, bank transfer, debit card);
• To detect, investigate, and prevent fraud, money laundering, and other illegal activities;
• To monitor betting patterns for responsible gaming purposes and to enforce deposit limits, loss limits, and self-exclusion requests;
• To provide customer support and resolve disputes;
• To send you transactional communications (account confirmations, deposit receipts, withdrawal notifications);
• To send you promotional communications about gobetay offers and new features, where you have consented to receive such communications;
• To improve the gobetay Platform through usage analytics and user feedback;
• To comply with applicable Philippine laws, regulations, and regulatory directives from PAGCOR, the AMLC, and the NPC.

6. Sharing and Disclosure of Personal Data

6.1 gobetay does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

6.2 gobetay may share your personal data with the following categories of recipients, strictly as necessary:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank, and debit card processors, for the purpose of processing your financial transactions;
• KYC and identity verification providers: Third-party services that assist gobetay in verifying your identity and age in compliance with PAGCOR and AML requirements;
• IT and platform service providers: Cloud hosting, cybersecurity, and technical support providers who process data on gobetay's behalf under strict data processing agreements;
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where required by law or regulatory directive;
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

6.3 All third-party service providers who process personal data on gobetay's behalf are required to implement appropriate technical and organisational security measures and to process data only in accordance with gobetay's instructions.

7. Cookies and Tracking Technologies

7.1 gobetay uses cookies and similar tracking technologies (including web beacons and local storage) to operate and improve the Platform. The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled. They include session authentication cookies and security tokens.
• Functional cookies: Remember your preferences (e.g., language, display settings) to personalise your experience.
• Analytics cookies: Collect anonymised data about how users interact with the Platform to help gobetay improve performance and usability.
• Marketing cookies: Used to deliver relevant promotional content about gobetay. These are only set with your explicit consent.

7.2 You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the gobetay Platform.

8. Data Retention

8.1 gobetay retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the duration of your account relationship with gobetay and for a period thereafter as required by law.

8.2 Specifically, gobetay retains:

• Account and identity data: For the duration of your account plus a minimum of five (5) years after account closure, in compliance with PAGCOR licensing requirements and the Anti-Money Laundering Act;
• Financial transaction records: For a minimum of five (5 ) years as required by the AMLC;
• Customer support communications: For a minimum of two (2) years from the date of the communication;
• Technical and usage logs: For up to twelve (12) months, unless retained longer for security or legal purposes.

8.3 When personal data is no longer required, gobetay will securely delete or anonymise it in accordance with industry best practices.

9. Data Security

9.1 gobetay implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• AES-256 encryption for data at rest and TLS 1.2+ encryption for data in transit;
• Multi-factor authentication for all gobetay administrative systems;
• Regular penetration testing and vulnerability assessments by independent security firms;
• Role-based access controls limiting data access to authorised personnel only;
• Continuous security monitoring and intrusion detection systems;
• Regular staff training on data protection and information security.

9.2 While gobetay takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your gobetay account credentials and for notifying gobetay immediately if you suspect any unauthorised access to your account.

10. Your Rights as a Data Subject

10.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by gobetay:

• Right to be informed: The right to know what personal data gobetay collects and how it is used — as set out in this Privacy Policy;
• Right of access: The right to request a copy of the personal data gobetay holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to gobetay's legal retention obligations;
• Right to object: The right to object to certain types of processing, including direct marketing;
• Right to data portability: The right to receive your personal data in a structured, commonly used format;
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

10.2 To exercise any of the above rights, please contact gobetay's Data Protection Officer using the contact details in Section 14. gobetay will respond to all verified data subject requests within fifteen (15) business days.

10.3 gobetay may need to verify your identity before processing a data subject request to ensure that personal data is not disclosed to unauthorised parties.

11. Children and Minors

11.1 The gobetay Platform is strictly restricted to individuals who are twenty-one (21) years of age or older. gobetay does not knowingly collect personal data from persons under 21 years of age.

11.2 If gobetay discovers that personal data has been collected from a person under 21 years of age, it will immediately suspend the relevant account, delete the data, and report the matter to the appropriate authorities where required.

11.3 If you believe that a minor has registered on the gobetay Platform, please contact gobetay support immediately so that appropriate action can be taken.

12. Cross-Border Data Transfers

12.1 gobetay primarily stores and processes personal data within the Republic of the Philippines. In certain circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international KYC verification services.

12.2 Where personal data is transferred outside the Philippines, gobetay ensures that appropriate safeguards are in place, including contractual data processing agreements that require the recipient to provide a level of data protection equivalent to that required under the DPA 2012.

12.3 gobetay will not transfer personal data to jurisdictions that do not provide adequate data protection without implementing appropriate safeguards and, where required, obtaining your consent.

13. Changes to This Privacy Policy

13.1 gobetay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The date of the most recent revision is indicated at the top of this page.

13.2 Where changes are material, gobetay will notify registered users via email or an in-Platform notification prior to the changes taking effect. Your continued use of the gobetay Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

13.3 We encourage you to review this Privacy Policy periodically to stay informed about how gobetay protects your personal data.

14. How to Contact Us

14.1 If you have any questions, concerns, or requests regarding this Privacy Policy or gobetay's data protection practices, please contact our Data Protection Officer:

Data Protection Officer — gobetay
Email: [email protected]
Support: [email protected]

14.2 gobetay's customer support team is available 24/7 via live chat on the Platform. For formal data subject requests, please use the email address above and include your full name, registered email address, and a description of your request.

14.3 You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe your data rights have been violated. The NPC can be reached through its official government channels.