Game Zones Privacy Policy — Your Data, Explained Clearly

1 Who We Are and Who Controls Your Data

Game Zones is the trade name of the online gaming platform operating at gamezones.app. As a personal information controller under the Philippine Data Privacy Act of 2012 (Republic Act 10173), Game Zones is responsible for determining how and why your personal data is processed.

Our designated Data Protection Officer (DPO) oversees all data privacy matters and serves as your point of contact for exercising your rights under RA 10173. You can reach the DPO at privacy@gamezones.app.

2 Personal Data We Collect

Game Zones collects personal data across several categories. The specific data collected depends on how you interact with the platform.

3 How We Collect Your Data

Game Zones collects personal data through the following means:

• Directly from you — when you register, complete KYC verification, deposit, withdraw, contact support, or submit any form on the platform
• Automatically — through cookies, session tracking, and server logs as you use the Game Zones website
• From payment providers — GCash, Maya, and bank partners confirm transaction status and may share transaction reference data with Game Zones for reconciliation purposes
• From identity verification services — third-party KYC and AML screening services used to verify documents and check against watchlists as required by law
• From referral activity — if you were referred by an existing Game Zones member, the referral link or code used during your registration is recorded

4 How and Why We Use Your Personal Data

Game Zones uses your personal data for specific, legitimate purposes. We do not use it beyond what is necessary for these purposes.

Account Operation

Your registration data is used to create and maintain your Game Zones account, authenticate your identity when you log in, process deposits and withdrawals, and communicate with you about account-related matters. Without this data, we cannot operate your account.

Regulatory Compliance

Philippine gaming regulations and anti-money laundering laws require Game Zones to collect and retain certain member data, conduct identity verification, and maintain records of all transactions. This is not optional — it is a legal obligation. Non-compliance would put our operating licence at risk and would ultimately harm all members who use the platform.

Fraud Prevention and Security

We use device data, IP addresses, and behavioural patterns to detect and prevent fraud, money laundering, underage gaming, and account abuse. This protects both individual members and the integrity of the platform as a whole.

Platform Improvement

Aggregated, anonymised usage data helps us understand how members interact with Game Zones — which games are popular, where members encounter problems, and how the platform performs on different devices and connection speeds. This data informs product decisions.

Responsible Gaming

Gaming history and session data are used to power responsible gaming tools — including session time reminders, reality checks, and deposit limit tracking — and to identify members who may show signs of problem gaming behaviour so we can intervene appropriately.

Marketing (Where You've Opted In)

If you have consented to receive marketing communications, Game Zones may use your email address and mobile number to send you information about promotions, new games, and platform updates. You can withdraw this consent at any time — see Section 11 for details.

5 Legal Basis for Processing

Under the Data Privacy Act of 2012, Game Zones processes your personal data on the following legal bases depending on the purpose:

• Contractual necessity — processing needed to perform our obligations under your membership agreement (operating your account, processing payments, providing games)
• Legal obligation — processing required to comply with Philippine gaming regulations, AML laws, tax reporting, and NPC requirements
• Legitimate interests — processing for fraud prevention, security, and platform improvement, where these interests do not override your rights
• Consent — processing for marketing communications, where you have explicitly opted in. Consent can be withdrawn at any time without affecting other processing

6 Who We Share Your Data With

Game Zones shares your personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

Payment Processors

GCash, Maya, GrabPay, Coins.ph, BDO, BPI, UnionBank, and card processing partners receive the minimum data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and data processing agreements with Game Zones.

Identity and KYC Verification Services

Third-party providers used for document verification, liveness checks, and AML watchlist screening receive identity data as required to complete the verification process. These providers are bound by confidentiality agreements and may not use your data for their own purposes.

Game Providers

Third-party game developers and live casino operators who supply games to the Game Zones platform may receive a pseudonymised member identifier to support game session management. They do not receive your real name, contact details, or payment information.

Regulatory and Law Enforcement Authorities

Game Zones will share data with Philippine gaming regulatory authorities, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and law enforcement agencies where legally required or where we are subject to a lawful order. We will notify you of any such disclosure to the extent permitted by law.

Platform Service Providers

Technical service providers such as cloud hosting, customer support software, and analytics platforms may process data on our behalf as personal information processors under data processing agreements. They are contractually prohibited from using your data for any purpose other than delivering the specified service to Game Zones.

7 International Data Transfers

Some of Game Zones' service providers — including certain game providers, cloud infrastructure providers, and security vendors — may process data outside the Philippines. When this occurs, Game Zones ensures that adequate safeguards are in place to protect your data, including:

• Data processing agreements with contractual clauses equivalent to Philippine data privacy standards
• Transfers only to jurisdictions assessed to have an adequate level of data protection
• Technical and organisational security measures commensurate with the sensitivity of the data transferred

The majority of your personal data — particularly financial records and KYC documents — is stored on servers located within or accessible from the Philippines. Cross-border transfers are limited to specific technical processing functions.

8 How Long We Keep Your Data

Game Zones retains personal data for as long as is necessary for the purpose it was collected, and as required by applicable Philippine law. The following retention periods apply:

• Active account data — retained for the duration of your Game Zones membership
• Transaction and financial records — retained for a minimum of 5 years after the transaction, as required by Philippine AML regulations
• KYC and identity documents — retained for a minimum of 5 years after account closure, as required by AMLC regulations
• Support communications — retained for 2 years from the date of the interaction
• Marketing data — retained until you withdraw consent, after which your details are removed from all marketing lists within 14 days
• Fraud and security records — retained for up to 7 years where required for ongoing investigations or legal proceedings

After the applicable retention period, your personal data is securely deleted or anonymised. Anonymised data may be retained indefinitely for aggregated analytical purposes.

9 Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by Game Zones:

To exercise any of these rights, submit a written request to privacy@gamezones.app with your registered email address or mobile number for account identification. Game Zones will respond to all data subject requests within 15 business days in accordance with NPC guidelines. Some requests may require identity verification before we can fulfil them.

10 Cookies and Tracking Technologies

Game Zones uses cookies and similar tracking technologies to operate the platform and improve your experience. Here is what they do and how you can control them.

Essential Cookies

These cookies are strictly necessary for the Game Zones platform to function. They maintain your login session, remember your preferences, enable secure transactions, and support fraud detection. You cannot opt out of essential cookies without disabling the platform entirely.

Analytics Cookies

We use anonymised analytics data to understand how members use Game Zones — which pages are most visited, where users encounter difficulty, and how performance varies across devices. This information helps us improve the platform. You can opt out of analytics cookies in your browser settings or through our cookie preferences panel.

Marketing Cookies

If you have consented to receive personalised marketing, we may use cookies to track interactions with Game Zones promotional content. These cookies are only active where you have explicitly opted in to marketing communications. You can withdraw consent at any time.

Managing Your Cookie Preferences

Most browsers allow you to view, disable, and delete cookies through browser settings. Note that disabling certain cookies may affect platform functionality. Game Zones also provides a cookie preferences panel accessible from the footer of the website.

11 Marketing Communications

Game Zones may send you promotional emails and SMS messages about new games, bonuses, and platform updates if you have given your consent during registration or subsequently through your account settings.

Opting Out

You can withdraw your marketing consent at any time by:

• Updating your notification preferences in your Game Zones account dashboard
• Clicking the unsubscribe link in any marketing email
• Replying STOP to any marketing SMS
• Contacting our support team at support@gamezones.app with the subject line "Marketing Opt-Out"

Opting out of marketing will not affect transactional notifications — you will still receive account activity alerts, payment confirmations, and security notifications. These are essential for operating your account safely.

12 How We Keep Your Data Secure

Game Zones takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it.

• Encryption in transit — all data transmitted between your device and Game Zones servers is encrypted using TLS (Transport Layer Security). You can verify this by the HTTPS indicator in your browser address bar.
• Encryption at rest — sensitive personal data including KYC documents and financial information is encrypted when stored on our servers.
• Access controls — personal data is accessible only to Game Zones staff who need it to perform their specific functions. Access is role-based and logged.
• Two-factor authentication — available for all Game Zones members to add an extra layer of protection to account login.
• Regular security reviews — Game Zones conducts periodic security assessments and penetration testing to identify and address vulnerabilities before they can be exploited.
• Data breach response — in the event of a personal data breach, Game Zones will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected members within a reasonable timeframe as required by NPC breach notification guidelines.

While we implement strong security measures, no system is completely impenetrable. You play an important role in protecting your own data by maintaining a strong, unique password for your Game Zones account and not sharing your login details with anyone.

13 Children and Minors

Game Zones does not knowingly collect personal data from individuals under 18 years of age. Our services are strictly for adults. Age verification is conducted as part of the KYC process for all members.

If Game Zones becomes aware that personal data has been collected from a person under 18 without verifiable parental consent, that data will be deleted and the associated account will be closed immediately. If you believe your minor child has registered at Game Zones, please contact us immediately at privacy@gamezones.app so we can take appropriate action.

14 Changes to This Privacy Policy

Game Zones may update this Privacy Policy from time to time to reflect changes in our data processing practices, Philippine legal requirements, or NPC guidelines. When we make material changes, we will:

• Post the updated Privacy Policy on this page with a revised effective date
• Notify all registered Game Zones members via their registered email address
• Where required by law, seek fresh consent for new processing activities

Continued use of Game Zones after the effective date of any policy update constitutes acceptance of the revised Privacy Policy. If you do not agree to the updated terms, you have the right to close your account — contact support@gamezones.app to do so.

15 Contact and Data Protection Officer

If you have any questions, concerns, or requests related to this Privacy Policy or the personal data Game Zones holds about you, please contact us through the following channels:

• Data Protection Officer: privacy@gamezones.app — for privacy-specific enquiries, data subject requests, and breach notifications
• General Support: support@gamezones.app — for account and platform support
• Live Chat: Available 24/7 from within your Game Zones account dashboard
• FAQ: Visit our FAQ page for answers to common questions

If you are not satisfied with our response to a privacy concern, you have the right to file a complaint directly with the National Privacy Commission of the Philippines at privacy.gov.ph.