gosloto Privacy Policy

This Privacy Policy ("Policy") describes how gosloto ("gosloto," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "your," or "Player") who access or use the gosloto online gaming platform available at gosloto.club (the "Platform").

This Policy applies to all personal data processed by gosloto in connection with your use of the Platform, including data collected during account registration, identity verification, gameplay, financial transactions, customer support interactions, and marketing communications.

gosloto is committed to protecting the privacy and personal data of all players, particularly those based in the Philippines. This Policy is drafted in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR"), as enforced by the National Privacy Commission ("NPC") of the Philippines.

By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform and contact us to close your account.

For the purposes of the Data Privacy Act of 2012 and this Policy, gosloto acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes from players using the Platform.

As Personal Information Controller, gosloto determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with applicable Philippine data protection law.

Where gosloto engages third-party service providers to process personal data on its behalf (for example, payment processors, identity verification providers, or cloud hosting services), those providers act as Personal Information Processors (PIPs) and are bound by contractual obligations to process data only in accordance with gosloto's instructions and applicable law.

For all data protection inquiries, please contact our Data Protection Officer (DPO) using the contact details provided in Section 15 of this Policy.

gosloto collects the following categories of personal data from players:

gosloto does not intentionally collect sensitive personal information (as defined under the DPA) beyond what is strictly necessary for identity verification and regulatory compliance purposes. Where sensitive data is collected (e.g., government ID numbers), it is handled with heightened security measures.

gosloto collects personal data through the following means:

• Direct Collection: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or updating your account profile.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar tracking technologies (see Section 7).
• Third-Party Sources: Identity and fraud-check data received from identity verification providers, payment processors (such as GCash, PayMaya, BPI, BDO, and Metrobank), and anti-money laundering screening services, where necessary to comply with our legal obligations.
• Publicly Available Sources: In limited circumstances, gosloto may verify information against publicly available records or databases for fraud prevention and regulatory compliance purposes.

gosloto processes your personal data for the following purposes, each supported by a lawful basis under the Data Privacy Act of 2012:

• Account Registration & Management – To create and maintain your gosloto player account. Legal basis: Performance of contract.
• Identity Verification (KYC) – To verify your identity and age (21+) in compliance with Philippine gaming regulations and anti-money laundering laws. Legal basis: Legal obligation.
• Payment Processing – To process deposits, withdrawals, and refunds through your chosen payment method. Legal basis: Performance of contract.
• Fraud Prevention & Security – To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the Platform. Legal basis: Legitimate interest / Legal obligation.
• Responsible Gaming – To monitor gameplay patterns and enforce responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion. Legal basis: Legal obligation / Legitimate interest.
• Customer Support – To respond to your inquiries, complaints, and support requests. Legal basis: Performance of contract / Legitimate interest.
• Platform Improvement – To analyze usage patterns and improve the functionality, performance, and content of the Platform. Legal basis: Legitimate interest.
• Marketing Communications – To send you promotional offers, bonus notifications, and news about gosloto, where you have provided consent. Legal basis: Consent.
• Legal & Regulatory Compliance – To comply with applicable Philippine laws, regulations, court orders, and regulatory directives. Legal basis: Legal obligation.

gosloto does not sell, rent, or trade your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently regulated.
• Identity Verification Providers: Third-party KYC and AML screening services receive identity documents and personal details to verify your identity and screen against sanctions and watchlists, as required by Philippine law.
• Cloud & Hosting Providers: gosloto uses reputable cloud infrastructure providers to host the Platform and store data securely. These providers act as Personal Information Processors under binding data processing agreements.
• Customer Support Tools: Support platform providers may process communications data to facilitate customer service delivery.
• Regulatory Authorities: gosloto may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government authorities when required by law, court order, or regulatory directive.
• Law Enforcement: In cases of suspected fraud, money laundering, or other criminal activity, gosloto may disclose relevant data to Philippine law enforcement agencies.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of gosloto's business, personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

All third-party service providers who process personal data on gosloto's behalf are required to enter into data processing agreements that obligate them to process data only in accordance with gosloto's instructions and applicable Philippine data protection law.

gosloto uses cookies and similar tracking technologies (collectively, "Cookies") on the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and improve your experience.

We use the following categories of Cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in to your gosloto account. These cannot be disabled without affecting Platform functionality.
• Performance & Analytics Cookies: Collect anonymized data about how players use the Platform (e.g., pages visited, time spent, errors encountered) to help us improve performance and user experience.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of marketing campaigns. These are only set with your consent.

You can manage your Cookie preferences through your browser settings. Most browsers allow you to refuse or delete Cookies. Please note that disabling certain Cookies may affect the functionality of the Platform, including your ability to log in to your gosloto account.

gosloto retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account & Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by Philippine AML regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act (AMLA) and its amendments.
• KYC Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the transaction for which verification was conducted.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, or longer if the matter is subject to ongoing legal proceedings.
• Marketing Data: Retained until you withdraw consent for marketing communications, after which it is deleted or anonymized within thirty (30) days.
• Technical & Usage Data: Retained in identifiable form for up to twelve (12) months, after which it is anonymized for aggregate analytics purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized using industry-standard data destruction methods.

gosloto implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data in transit is protected using 256-bit SSL/TLS encryption. Sensitive data at rest (including financial data and identity documents) is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data undergo background checks and regular data protection training.
• Two-Factor Authentication: gosloto systems require multi-factor authentication for all administrative access to systems containing personal data.
• Penetration Testing: The Platform undergoes regular security assessments and penetration testing by independent cybersecurity professionals.
• Incident Response: gosloto maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and affected players will be notified without undue delay.
• Vendor Security: All third-party service providers who process personal data on our behalf are assessed for security compliance before engagement and are subject to ongoing monitoring.

While gosloto takes all reasonable steps to protect your personal data, no security system is completely impenetrable. You are also responsible for maintaining the security of your gosloto account credentials as described in our Terms & Conditions.

gosloto primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to, or accessed from, servers or service providers located outside the Philippines (for example, cloud infrastructure providers with data centers in other countries).

Where such international transfers occur, gosloto ensures that appropriate safeguards are in place to protect your personal data, including:

• Transferring data only to countries or organizations that provide an adequate level of data protection as recognized by the National Privacy Commission;
• Implementing contractual clauses in agreements with overseas service providers that require them to protect personal data to standards equivalent to those required under Philippine law;
• Conducting transfer impact assessments where required to ensure that transferred data will not be subject to processing that would be unlawful under Philippine law.

By using the Platform, you acknowledge and consent to the transfer of your personal data outside the Philippines where necessary for the delivery of gosloto services, subject to the safeguards described above.

The gosloto Platform is strictly intended for individuals aged 21 years and above, in accordance with Philippine gaming regulations. gosloto does not knowingly collect personal data from individuals under the age of 21.

If gosloto becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the relevant account, delete all associated personal data, and refund any deposits made, in accordance with our Terms & Conditions and applicable law.

If you are a parent or guardian and believe that your child has registered an account on the Platform, please contact our support team immediately at [email protected] so that we can take prompt action.

With your consent, gosloto may send you promotional communications about bonuses, new games, special events, and other gosloto offers via email or SMS to your registered Philippine mobile number.

You can withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email you receive from gosloto;
• Updating your communication preferences in your gosloto account settings;
• Contacting our support team at [email protected] with a request to opt out of marketing communications.

Withdrawal of consent for marketing communications will not affect the lawfulness of processing carried out before the withdrawal, and will not affect your ability to use the Platform or receive transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts) that are necessary for the operation of your account.

gosloto does not engage in unsolicited bulk marketing and will never share your contact details with third-party marketers for their own promotional purposes.

To exercise any of your data subject rights under the Data Privacy Act of 2012 (as described in the "Your Data Rights" section above), please submit a written request to our Data Protection Officer using the contact details in Section 15.

Your request should include:

• Your full name and registered gosloto account username;
• A clear description of the right you wish to exercise and the specific data concerned;
• A copy of a valid government-issued ID to verify your identity (required for access, rectification, and erasure requests).

gosloto will acknowledge your request within five (5) business days and provide a substantive response within fifteen (15) business days of receipt of a complete request. Where a request is complex or involves a large volume of data, we may extend this period by a further fifteen (15) business days, in which case we will notify you of the extension and the reasons for it.

gosloto will not charge a fee for processing data subject rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied.

If you are not satisfied with gosloto's response to your data rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

gosloto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this Policy;
• Post a prominent notice on the Platform informing players of the changes;
• Where required by law, seek fresh consent from players for any new processing activities.

We encourage you to review this Privacy Policy periodically to stay informed about how gosloto protects your personal data. Your continued use of the Platform following the posting of changes constitutes your acknowledgment of the updated Policy.

For all data protection inquiries, requests to exercise your data subject rights, or complaints regarding gosloto's handling of your personal data, please contact our Data Protection Officer (DPO):

• Email: [email protected]
• Subject Line: Please use "Data Privacy Request – [Your Name]" for all DPO correspondence
• Response Hours: 8:00 AM – 12:00 MN Philippine Standard Time (PHT), daily

If you believe that gosloto has violated your data privacy rights under the Data Privacy Act of 2012, you may also file a complaint directly with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official website.

gosloto takes all data privacy complaints seriously and is committed to resolving them promptly and fairly in accordance with applicable Philippine law.