gopaldo Privacy Policy

01 Introduction

gopaldo is an online gaming platform serving Filipino players across the Philippines, including Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond. As a platform that processes financial transactions and verifies player identities, we necessarily collect and handle personal data as part of our day-to-day operations.

This Privacy Policy explains in plain, straightforward language: what personal data gopaldo collects from you; the purposes for which that data is collected and used; the legal bases on which we rely to process your data; how long we retain your data; who we share it with and why; the security measures we have in place to protect it; and the rights you have over your own personal information under Philippine law.

By registering on gopaldo, accessing the platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you should not use the gopaldo platform.

This Privacy Policy should be read together with the gopaldo Terms & Conditions, which govern your use of the platform as a whole.

02 Personal Data We Collect

gopaldo collects personal data through several channels: directly from you when you register or use the platform, automatically through your use of the platform, and from third-party verification and payment service providers. The categories of personal data we collect are described below.

2.1 Registration & Account Data

When you create a gopaldo account, we collect:

• Full legal name as it appears on your government-issued ID
• Date of birth (for age verification — you must be 21 or older)
• Philippine mobile number
• Email address
• Username and encrypted password
• Residential address in the Philippines
• Nationality and citizenship status

2.2 Identity Verification (KYC) Data

To comply with PAGCOR regulations and Philippine anti-money laundering laws, we may collect:

• Copies of government-issued Philippine IDs (PhilSys National ID, passport, driver's license, UMID, SSS ID, or PRC ID)
• Proof of address documents (utility bills, bank statements dated within three months)
• Selfie photographs for liveness verification
• Source of funds declarations where required by law

2.3 Financial & Transaction Data

• GCash account number or PayMaya account details
• BPI, BDO, Metrobank, or other Philippine bank account details used for deposits and withdrawals
• Deposit and withdrawal history
• Transaction amounts in Philippine Peso (PHP / ₱)
• Payment method ownership verification records

2.4 Gaming Activity Data

• Game session logs, including games played, wagers placed, and outcomes
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, self-exclusion status)
• Customer support interaction records

2.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Session timestamps and duration
• Cookie identifiers and similar tracking data (see Section 6)
• Platform access logs

03 How We Use Your Personal Data

gopaldo uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed here without first obtaining your explicit consent.

If you have opted in to receive marketing communications from gopaldo, we may send you promotional emails or SMS messages about new games, bonuses, and platform updates. You can opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting our support team.

04 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 (RA 10173), gopaldo relies on the following legal bases to process your personal data:

• Contractual Necessity: Processing your registration data, KYC information, and financial data is necessary to perform our contract with you — that is, to provide you with access to the gopaldo platform and to process your deposits and withdrawals.
• Legal Obligation: We are required by Philippine law — including the Anti-Money Laundering Act (AMLA), PAGCOR regulations, and the National Privacy Commission's guidelines — to collect and retain certain categories of personal data. This processing is mandatory and cannot be opted out of.
• Legitimate Interests: We process technical and device data to protect the security and integrity of the gopaldo platform, to detect and prevent fraud, and to improve our services. These legitimate interests do not override your fundamental privacy rights.
• Consent: Where we rely on your consent as the legal basis for processing — such as for marketing communications or optional analytics — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

05 Data Sharing & Disclosure

gopaldo does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share your personal data only in the following limited and controlled circumstances:

5.1 Service Providers

We engage carefully selected third-party service providers who process personal data on our behalf under strict data processing agreements. These include: identity verification and KYC providers; payment processors and e-wallet operators (GCash, PayMaya, BPI, BDO, Metrobank); cloud hosting and infrastructure providers; customer support platform providers; and fraud detection and cybersecurity services. All service providers are contractually bound to process your data only on gopaldo's instructions and in accordance with applicable Philippine data privacy law.

5.2 Regulatory & Law Enforcement Authorities

gopaldo is legally required to disclose personal data to Philippine regulatory and law enforcement authorities in certain circumstances, including: reports to the Anti-Money Laundering Council (AMLC) as required under the AMLA; disclosures to PAGCOR in connection with licensing compliance and player protection obligations; responses to valid court orders, subpoenas, or other legal process issued by Philippine courts; and cooperation with the National Privacy Commission (NPC) in connection with data privacy investigations.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of gopaldo's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity before your data is transferred, and you will have the opportunity to request deletion of your data if you do not wish it to be transferred.

06 Cookies & Tracking Technologies

gopaldo uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, remember your preferences, and analyze how the platform is used. We do not use third-party advertising cookies, retargeting pixels, or social media tracking scripts.

6.1 Types of Cookies We Use

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your gopaldo account and using the platform. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

07 Data Retention

gopaldo retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

After the applicable retention period expires, your personal data will be securely deleted or anonymized so that it can no longer be associated with you. Where anonymization is not technically feasible, data will be securely destroyed using industry-standard methods.

08 Data Security

gopaldo implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security framework includes:

• Encryption in Transit: All data transmitted between your device and gopaldo's servers is encrypted using TLS 1.3 protocol. We enforce HTTPS across all platform endpoints.
• Encryption at Rest: All personal data stored on gopaldo's servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All gopaldo staff with access to personal data undergo background checks and regular data privacy training.
• Two-Factor Authentication: gopaldo supports and encourages the use of two-factor authentication (2FA) for all player accounts to prevent unauthorized access.
• Penetration Testing: gopaldo's systems undergo regular penetration testing and security audits by independent cybersecurity professionals.
• Incident Response: gopaldo maintains a documented data breach response plan. In the event of a data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay.

09 Your Data Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by gopaldo. To exercise any of these rights, contact our Data Protection Officer using the details in Section 14.

gopaldo will respond to all data rights requests within fifteen (15) business days of receipt. In complex cases, this period may be extended by a further fifteen (15) business days, and you will be notified of the extension and the reason for it. There is no charge for exercising your data rights, unless requests are manifestly unfounded or excessive.

If you are not satisfied with gopaldo's response to a data rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act.

10 Children's Privacy

The gopaldo platform is strictly intended for adults aged 21 years and above in accordance with Philippine law and PAGCOR regulations. gopaldo does not knowingly collect personal data from any individual under the age of 21.

If gopaldo discovers or is notified that personal data has been collected from an individual under the age of 21, we will immediately close the associated account, void any winnings, return any deposits to the originating payment account, and permanently delete all personal data associated with that account from our systems.

If you are a parent or guardian and believe that your child under the age of 21 has registered on gopaldo or provided personal data to us, please contact our Data Protection Officer immediately using the contact details in Section 14. We will take prompt action to address the situation.

11 International Data Transfers

gopaldo's primary data processing infrastructure is located within the Philippines. However, some of our third-party service providers — including cloud infrastructure providers and certain KYC verification services — may process data in other countries.

Where personal data is transferred outside the Philippines, gopaldo ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Philippine Data Privacy Act. These safeguards include: contractual clauses in data processing agreements that impose data protection obligations on the receiving party; transfers only to countries or organizations that the National Privacy Commission has determined provide an adequate level of data protection; and technical security measures that apply regardless of where data is processed.

You may request information about the specific safeguards in place for any international data transfer by contacting our Data Protection Officer.

12 Third-Party Links

The gopaldo platform may contain links to third-party websites or services, such as payment provider portals (GCash, PayMaya, BPI, BDO, Metrobank). These third-party sites have their own privacy policies, which are entirely independent of this Privacy Policy. gopaldo has no control over and accepts no responsibility for the privacy practices or content of any third-party website.

We encourage you to review the privacy policy of any third-party website you visit through a link on the gopaldo platform before providing any personal data to that site.

13 Updates to This Privacy Policy

gopaldo reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When material changes are made, we will notify registered players via email or in-platform notification at least seven (7) days before the changes take effect.

The updated Privacy Policy will be posted on this page with a revised "Last Updated" date. Your continued use of the gopaldo platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated policy, you should stop using the platform and may request account closure.

We recommend bookmarking this page and reviewing it periodically, especially after receiving any notification of changes from gopaldo.

14 Contact Us & Data Protection Officer

gopaldo has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO using the details below.

When submitting a data rights request, please include your full name, registered email address, and a clear description of your request. We may need to verify your identity before processing your request to ensure we do not disclose your personal data to an unauthorized person.

If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for administering and enforcing the Data Privacy Act of 2012.

This Privacy Policy was last updated on January 1, 2026. All previous versions of the gopaldo Privacy Policy are superseded by this version.