gpera Privacy Policy — How We Handle Your Personal Information

gpera operates the online gaming platform accessible at gpera.best. In the context of this Privacy Policy, "gpera," "we," "us," and "our" refer to the operator of the gpera platform serving members in the Philippines.

This Privacy Policy applies to all personal data collected through the gpera website, mobile web platform, and any related services offered to registered members. It covers the personal information of prospective, current, and former gpera members.

By registering for a gpera account or continuing to use the platform after this Privacy Policy has been published or updated, you acknowledge that you have read and understood how your personal data is processed as described here.

gpera collects personal data through several channels: information you provide directly when registering or operating your account, data generated automatically through your use of the platform, and information received from third-party service providers as part of payment processing or identity verification.

gpera does not collect sensitive personal information — such as biometric data, political opinions, religious beliefs, or health records — unless specifically required to do so under Philippine law in the context of responsible gaming obligations.

Every use of your personal data at gpera has a specific, legitimate purpose. We do not use data collected for one purpose to serve a completely different and unrelated function without your knowledge.

• Account registration and management: Creating and maintaining your gpera account, verifying your identity, and enabling access to the platform's features.
• Processing deposits and withdrawals: Executing financial transactions between your gpera wallet and your nominated Philippine payment accounts via GCash, Maya, banks, and other supported methods.
• KYC and regulatory compliance: Meeting the identity verification obligations required by applicable Philippine gaming and financial regulations, including anti-money laundering requirements.
• Fraud prevention and security: Detecting and investigating suspicious account activity, unauthorised access attempts, and any behaviour that may indicate fraud or cheating.
• Responsible gaming monitoring: Identifying indicators of problem gambling behaviour so that appropriate tools or interventions can be offered in line with our responsible gaming obligations.
• Customer support: Responding to your queries, resolving disputes, and maintaining records of support interactions for quality and training purposes.
• Service improvement: Analysing aggregated and anonymised usage patterns to improve the gpera platform, fix issues, and develop new features that better serve Filipino players.
• Communications: Sending transactional emails related to your account (e.g. deposit confirmations, withdrawal notifications) and, where you have opted in, promotional updates about gpera offers.

Under the Data Privacy Act of 2012 (Republic Act 10173) and its implementing rules, gpera processes your personal data on the following legal bases depending on the specific processing activity.

• Contractual necessity: Processing required to perform the contract between you and gpera — including account registration, deposits, withdrawals, and bet processing — is carried out because it is necessary to deliver the service you signed up for.
• Legal obligation: Processing required to comply with applicable Philippine law, including anti-money laundering regulations, identity verification obligations, and tax reporting requirements.
• Legitimate interests: Processing conducted in gpera's legitimate interests where those interests are not overridden by your privacy rights — specifically fraud detection, security monitoring, and platform improvement based on anonymised data.
• Consent: Where required and for activities not covered by the above bases, gpera will seek your explicit consent before processing. You may withdraw consent at any time, although withdrawal does not affect the lawfulness of processing conducted before withdrawal.

gpera shares personal data only in specific, limited circumstances. We do not sell personal data under any circumstances. The following categories of third parties may receive your data only to the extent necessary for the stated purpose.

• Payment processors: GCash, Maya, GrabPay, Coins.ph, InstaPay/PESONet operators, BDO, BPI, UnionBank, Visa/Mastercard network processors — receive your account name and transaction details to execute deposits and withdrawals.
• Identity verification providers: Regulated third-party KYC service providers receive your government ID and selfie data to complete identity verification. These providers are bound by confidentiality agreements and Philippine privacy law.
• Fraud detection and security services: Specialised providers that help gpera identify suspicious behaviour and protect the platform from fraudulent activity. These providers process data under strict contractual restrictions.
• Regulatory bodies: Philippine government agencies and gaming regulators may receive information where required by law, court order, or lawful regulatory request. gpera complies with all valid legal and regulatory data requests.
• Cloud and infrastructure providers: Data hosting, backup, and infrastructure service providers who process data on gpera's behalf and are contractually required to maintain appropriate security standards.

All third parties who receive personal data from gpera are required to handle it in accordance with applicable Philippine data protection law. gpera does not share personal data with advertisers, data brokers, or marketing companies.

gpera retains personal data for as long as necessary to fulfil the purpose for which it was collected, plus any additional period required by Philippine law or regulation. The following principles guide our retention decisions.

• Active accounts: Personal data is retained for the duration of your membership with gpera. Your data remains on file while your account is open, as it is needed to provide the service and comply with ongoing regulatory obligations.
• Closed accounts: After account closure, gpera retains identity data, transaction records, and account history for a minimum of five years to comply with anti-money laundering and gaming regulatory requirements under Philippine law.
• Communication records: Support interactions are retained for up to three years after the last communication for quality assurance and dispute resolution purposes.
• Technical and usage data: Anonymised or aggregated usage data may be retained indefinitely for platform analysis. Personal technical data such as login logs is retained for up to 12 months.

When retention periods expire, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual. You may request early deletion in certain circumstances — see Section 9 for your rights.

gpera takes the security of your personal data seriously and implements technical and organisational measures appropriate to the nature and sensitivity of the information we hold.

• Encryption: All data transmitted between your device and gpera is encrypted using TLS. Stored sensitive data including identity documents and financial records is encrypted at rest.
• Access controls: Personal data is accessible only to gpera staff and service providers who require it to perform specific, authorised functions. All access is logged and monitored.
• Segregated accounts: Player funds are kept separate from gpera's operational funds in dedicated accounts. This protects your balance in the unlikely event of operational issues.
• Incident response: gpera maintains a data breach response procedure. In the event of a breach that affects your personal data, you will be notified in accordance with the requirements of the Data Privacy Act of 2012 and the National Privacy Commission's guidelines.
• Regular security reviews: gpera's security posture is reviewed regularly to identify and address vulnerabilities before they can be exploited.

gpera uses cookies and similar tracking technologies on its website to ensure the platform works correctly, understand how members use it, and deliver a consistent experience across sessions. Below is a breakdown of the types of cookies used.

Most modern browsers allow you to control cookie behaviour through browser settings. Disabling essential cookies will affect your ability to log in and use the gpera platform normally. Disabling analytics or functional cookies will not prevent access to your account.

Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights regarding the personal data gpera holds about you. gpera respects each of these rights and will respond to valid requests within a reasonable timeframe.

The gpera platform is strictly for adults aged 21 and above. gpera does not knowingly collect or process personal data belonging to minors. If we become aware that personal data has been collected from a person below the minimum age, that account will be immediately closed and the associated data deleted as soon as practically possible.

If you are a parent or guardian and believe a minor has registered on gpera, please contact us immediately at support@gpera.best. We take this matter seriously and will act promptly.

gpera may update this Privacy Policy from time to time to reflect changes in the platform, applicable Philippine law, or how we process personal data. When material changes are made, the following process applies.

• The updated Privacy Policy will be published on this page with a revised "last updated" date.
• For significant changes affecting your rights or how we use your data, gpera will send a notification to your registered email address before the update takes effect.
• Continued use of the gpera platform after the effective date of a change constitutes your acceptance of the updated Privacy Policy.

We recommend checking this page periodically, especially before making significant account decisions like adding a new payment method or updating your personal details.

If you have questions about this Privacy Policy, want to exercise your data rights, or need to report a potential data security issue, gpera's support team is the right starting point.