At gpreya, we take the privacy of every Filipino player seriously. This Privacy Policy explains exactly what personal information we collect when you use our platform, why we collect it, how we use and protect it, and what rights you have over your own data. Please read this carefully before creating an account.
Before the full policy details, here are the six core commitments that gpreya makes to every player regarding their personal data.
All personal data transmitted between your device and gpreya is protected by industry-standard SSL encryption. This applies to everything — registration details, payment information, and account activity. No plaintext transmission, ever.
gpreya does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes. Your data belongs to you — we use it to run your account and improve your experience, nothing more.
As a gpreya player, you have the right to access, correct, and request deletion of your personal data. You can also opt out of marketing communications at any time. Your preferences are respected promptly.
gpreya operates in compliance with Republic Act 10173 — the Philippine Data Privacy Act of 2012 — and its Implementing Rules and Regulations. Your rights as a Filipino data subject are fully recognised and upheld.
gpreya collects only the personal information that is genuinely necessary to provide you with a safe, compliant, and functional gaming experience. We don't gather data for the sake of it — every data point has a specific, lawful purpose.
Personal data held by gpreya is stored on secured servers with access controls, intrusion detection, and regular security audits. Only authorised gpreya personnel with a legitimate need can access player data, and all access is logged.
This Privacy Policy applies to the gpreya online casino platform, accessible at gpreya.com and all associated sub-domains. For the purposes of this policy, "gpreya," "we," "us," and "our" refer to the operator of the gpreya platform.
As the data controller for the personal information collected through the gpreya platform, we are responsible for determining how and why that data is processed. We take that responsibility seriously and have implemented appropriate technical and organisational measures to protect your information in accordance with Philippine law and applicable data protection standards.
If you have any questions about how gpreya handles your personal data that aren't answered in this policy, please contact us directly using the details in Section 15.
gpreya collects personal data in two broad categories: information you provide directly to us, and information we collect automatically when you use the platform.
| Category | Data Points | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, government ID number, nationality | Registration and KYC verification |
| Contact Data | Email address, Philippine mobile number, residential address | Registration |
| Financial Data | GCash number, Maya account, bank account details, card number (last four digits only) | Deposit and withdrawal processing |
| Verification Data | Copies of government-issued ID, proof of address documents, selfie for liveness checks | KYC and AML compliance |
| Communications Data | Live chat transcripts, support emails, complaint records | When you contact our support team |
When you access and use the gpreya platform, we automatically collect certain technical and behavioural data including:
gpreya collects personal data through the following channels:
gpreya processes your personal data for the following specific purposes. Each purpose has a defined legal basis, detailed in Section 5.
Under the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules, gpreya relies on the following legal grounds for processing your personal data:
Your right to object: Where gpreya relies on legitimate interests as a legal basis, you have the right to object to that processing. Contact us as described in Section 15 to exercise this right, and we will review and respond to your objection.
gpreya does not sell your personal data to any third party. We do share your data with certain categories of recipients where it is necessary to operate the platform and comply with our legal obligations:
gpreya works with carefully selected third-party service providers who process personal data on our behalf under strict data processing agreements. These include:
All service providers are bound by contractual obligations to process your data only for the purpose for which it was shared and to maintain appropriate security measures.
gpreya may be required to disclose personal data to Philippine regulatory bodies, law enforcement agencies, or courts of law where required by a lawful order or legal obligation. In such cases, gpreya will disclose only the minimum data necessary to satisfy the requirement and will notify you where legally permitted to do so.
In the event of a merger, acquisition, or sale of all or part of the gpreya business, personal data held by gpreya may be transferred to the acquiring entity. Affected players will be notified in advance and the acquiring entity will be required to honour the privacy commitments set out in this policy.
No third-party marketing sharing: gpreya does not share your contact details or any other personal data with third-party companies for the purpose of their own marketing activities. Any promotional communications you receive claiming to be from gpreya will originate from gpreya itself.
gpreya retains personal data for as long as is necessary for the purpose for which it was collected, and for as long as required by applicable law. The following general retention periods apply:
When personal data is no longer required for any lawful purpose and the applicable retention period has expired, gpreya will securely delete or anonymise the data in accordance with its data disposal procedures.
gpreya implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:
While gpreya takes every reasonable precaution to protect your data, no online system is completely immune to security threats. In the event of a data breach that is likely to result in a risk to your rights, gpreya will notify you and the National Privacy Commission (NPC) in accordance with applicable Philippine law and within the required timeframes.
Your responsibility: You play a role in data security too. Keep your gpreya login credentials confidential, use a strong and unique password, and notify gpreya support immediately if you suspect your account has been accessed without your permission.
gpreya uses cookies and similar technologies to make the platform work correctly, improve your experience, and — where you have consented — to deliver relevant promotional content. Here is what you should know:
Cookies are small text files stored on your device by your browser when you visit a website. They allow the website to remember certain information about your visit — such as your login session and preferences — so you don't have to re-enter it every time.
You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling functional or analytics cookies may affect how some parts of the gpreya platform work. Instructions for managing cookies are available in your browser's help section.
Under the Philippine Data Privacy Act and its Implementing Rules, you have the following rights as a gpreya player with respect to your personal data. You can exercise any of these rights by contacting us as described in Section 15.
Request a copy of the personal data gpreya holds about you and information about how it is being processed.
Request correction of any inaccurate or incomplete personal data gpreya holds about you.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Object to processing based on legitimate interests, including direct marketing. gpreya will review and respond to all objections.
Request your personal data in a structured, machine-readable format so you can transfer it to another service where technically feasible.
Where processing is based on your consent — such as marketing emails — you can withdraw that consent at any time without affecting prior lawful processing.
How to exercise your rights: Contact the gpreya Data Privacy Officer at privacy@gpreya.com with your request. We will respond within 15 business days. We may need to verify your identity before processing the request. Exercising your rights is always free of charge.
gpreya may send you promotional emails, SMS messages, and in-platform notifications about new games, bonuses, tournaments, and other offers available on the platform. We will only send marketing communications where you have given your explicit opt-in consent during registration or at a later point through your account settings.
You can unsubscribe from marketing communications at any time by:
After you opt out, gpreya will stop sending marketing communications within a reasonable period. Please note that you may still receive transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — even after opting out of marketing messages. These are service communications, not marketing, and cannot be disabled while your account is active.
Where you have consented, gpreya may personalise the promotional content you see on the platform — for example, showing you offers related to game categories you play most frequently. This personalisation is based on your gpreya account activity only. We do not use third-party behavioural advertising networks for this purpose.
gpreya is strictly for adults aged 21 and above. The platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21. Age verification is a core part of the gpreya registration and KYC process.
If gpreya becomes aware that personal data has been collected from a person under 21 years of age, the account will be immediately suspended, all deposits will be returned, and any winnings will be voided. The personal data of the minor will be deleted from gpreya's systems as promptly as possible, except where retention is required for legal or regulatory reasons.
If you believe a minor has created a gpreya account, please contact the support team immediately at support@gpreya.com.
gpreya primarily processes and stores your personal data within the Philippines. However, some of the third-party service providers we work with — particularly cloud infrastructure, analytics, and KYC verification providers — may process data in other countries.
Where personal data is transferred outside the Philippines, gpreya ensures that appropriate safeguards are in place in accordance with the Philippine Data Privacy Act, including data processing agreements that require the recipient to maintain equivalent levels of data protection. gpreya will not transfer your data to a jurisdiction with inadequate data protection standards without your explicit consent or without ensuring appropriate contractual protections are in place.
gpreya may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. When we make material changes, we will notify you by email to your registered address and by a prominent notice on the gpreya platform before the changes take effect.
The "Last updated" date at the top of this policy reflects the most recent revision. Your continued use of the gpreya platform after changes take effect constitutes your acknowledgment of the updated policy. If you do not agree with material changes to this policy, you should close your account before they take effect.
The current version of this Privacy Policy is always available at gpreya.com/privacy-policy. We recommend reviewing it periodically to stay informed about how gpreya protects your personal information.
If you have any questions about this Privacy Policy, want to exercise any of your data subject rights, or wish to raise a concern about how gpreya handles your personal data, please contact the gpreya Data Privacy Officer directly:
We will acknowledge your request promptly and provide a substantive response within 15 business days. Complex requests may take longer, in which case we will keep you informed of progress.
If you are not satisfied with gpreya's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.
For responsible gaming and self-exclusion requests, please visit our Responsible Gaming page or raise the matter directly in live chat. Your request will be actioned immediately.