gopaldo Privacy Policy

This Privacy Policy ("Policy") describes how gopaldo ("we," "us," "our," "the Platform") collects, uses, stores, shares, and protects personal information provided by users ("you," "Player," "User") of the gopaldo online gaming platform accessible at gopaldo.vip and all associated services, applications, and features (collectively, the "Services").

gopaldo is committed to protecting the privacy and personal information of every Filipino player who uses the platform. We recognise that trust begins with transparency — so this Policy is written to be as clear and direct as possible about exactly what data we collect, why we collect it, and what rights you have over it at every stage of your relationship with gopaldo.

By registering a gopaldo account or using the Services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal information as described herein. If you do not agree with any part of this Policy, you must not register an account or continue using the gopaldo platform.

This Policy applies to all personal information processed by gopaldo in connection with the following activities:

• Account registration, login, and ongoing account management;
• Identity verification and KYC (Know Your Customer) processes;
• Deposit and withdrawal transactions using GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods;
• Participation in any game or wagering activity on the gopaldo platform;
• Customer support interactions via live chat, email, or any other communication channel;
• Participation in gopaldo promotions, loyalty programmes, and tournaments;
• Visits to and navigation of the gopaldo.vip website and any related subdomains;
• Receipt of marketing communications from gopaldo (where consent has been provided).

This Policy does not apply to the privacy practices of third-party game providers, payment processors, or other external services whose platforms you may access via links from gopaldo. Those parties operate under their own privacy policies, which gopaldo does not control.

For the purposes of the Philippine Data Privacy Act of 2012 and this Policy, the data controller responsible for your personal information is gopaldo, operating the platform at gopaldo.vip.

As the data controller, gopaldo determines the purposes and means of processing your personal data and bears primary responsibility for ensuring that all processing activities comply with applicable Philippine privacy law. Questions, requests, and complaints regarding data processing can be directed to gopaldo's Data Protection Officer (DPO) as specified in Section 17 of this Policy.

gopaldo collects the following categories of personal information from Players. The specific data collected varies depending on how you interact with the platform and the stage of your account relationship with gopaldo:

4.1 Registration & Identity Data

• Full legal name (as it appears on government-issued ID);
• Date of birth (for mandatory age verification — gopaldo requires Players to be 21 years of age or older);
• Philippine mobile number (used as primary account identifier and for OTP verification);
• Chosen username and encrypted password;
• Email address (if provided during registration);
• Residential address (barangay, city/municipality, province).

4.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., PhilSys national ID, passport, driver's license, UMID, SSS/GSIS card, voter's ID);
• Proof of address documentation (e.g., utility bill, bank statement dated within 90 days);
• Selfie or live photo for liveness verification where required;
• Source of funds documentation where enhanced due diligence is required.

4.3 Financial Transaction Data

• Deposit and withdrawal amounts, dates, and transaction reference numbers;
• Payment method details (GCash mobile number, PayMaya account details, bank account details — full card or account numbers are not stored by gopaldo);
• Account wallet balance and transaction history.

4.4 Gaming Activity Data

• Game sessions participated in (game name, provider, duration, timestamp);
• Wager amounts, game outcomes, and winnings per session;
• Sports betting selections and results;
• Bonus activations, wagering requirement progress, and promotional participation history.

4.5 Technical & Device Data

• IP address at time of registration and each login;
• Device type, operating system, and browser information;
• Geographic location data (country and region, derived from IP address);
• Session timestamps and duration;
• Cookies and similar tracking technology data (see Section 12).

4.6 Communications Data

• Records of live chat interactions with gopaldo support agents;
• Email correspondence with gopaldo;
• Content of any formal complaints or feedback submitted to gopaldo.

gopaldo collects personal data through the following channels and mechanisms:

• Directly from you: When you register a gopaldo account, complete KYC verification, make deposits or withdrawal requests, contact support, or participate in promotions;
• Automatically through platform use: Technical and device data is collected automatically as you navigate the gopaldo platform using cookies, server logs, and similar tracking technologies;
• From payment processors: Transaction confirmation data is received from GCash, PayMaya, BPI, BDO, and other payment service providers when you initiate a deposit or withdrawal;
• From identity verification services: Where gopaldo uses third-party KYC verification providers, identity data returned from document verification processes is received and stored;
• From fraud prevention and compliance tools: gopaldo uses automated screening systems that may cross-reference account data against regulatory watchlists, politically exposed persons (PEP) databases, and sanctions lists as required by anti-money laundering obligations.

gopaldo processes your personal data for the following clearly defined purposes:

Under the Philippine Data Privacy Act of 2012, gopaldo processes your personal data on the following legal grounds:

• Performance of Contract: Processing necessary to fulfil our obligations to you under the gopaldo Terms and Conditions — including account management, payment processing, and delivery of gaming services;
• Legal Obligation: Processing required to comply with applicable Philippine laws, including gaming regulations, anti-money laundering obligations (R.A. 9160, as amended), and the Data Privacy Act itself;
• Legitimate Interests: Processing necessary for gopaldo's legitimate interests in fraud prevention, platform security, and responsible gaming compliance, where such interests are not overridden by your rights and freedoms;
• Consent: Processing for marketing communications and certain non-essential cookies, where we rely on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

gopaldo does not sell, rent, or trade your personal data to third parties for their own independent commercial use. We share your personal information only in the following limited and controlled circumstances:

• Game Providers: Licensed game providers (e.g., JILI, PG Soft, Evolution, Pragmatic Play) receive the minimum data necessary to deliver game sessions — typically a session token and account identifier. Game providers do not receive your full identity data;
• Payment Processors: GCash, PayMaya, BPI, BDO, and other payment service providers receive transaction data necessary to process deposits and withdrawals in PHP. These providers operate under their own regulatory frameworks and privacy policies;
• KYC Verification Providers: Third-party identity verification service providers may receive your identity documents and selfie data for automated document verification. These providers are contractually bound to process your data solely for verification purposes;
• Fraud Prevention and AML Services: Automated compliance screening services receive relevant account and transaction data to perform sanctions checks, PEP screening, and fraud risk assessments;
• Regulatory and Law Enforcement Authorities: gopaldo is required to disclose personal data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction in the Philippines where required or compelled by law;
• Professional Advisors: Legal counsel, auditors, and other professional service providers may receive limited personal data where necessary for the provision of professional services to gopaldo, subject to strict confidentiality obligations.

gopaldo retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law. The following general retention guidelines apply:

• Active Account Data: Retained for the full duration of the account relationship plus a minimum of five (5) years following account closure, to meet anti-money laundering and regulatory record-keeping obligations;
• KYC Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant business relationship, in accordance with Philippine AML requirements;
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years following each transaction date;
• Support Communications: Customer support records are retained for up to three (3) years following the closure of the relevant support interaction;
• Marketing Consent Records: Records of marketing consent and withdrawal are retained for the full period during which they may be needed to demonstrate compliance;
• Technical Logs: Server and access logs are retained for up to twelve (12) months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised such that it can no longer be attributed to a specific individual.

gopaldo implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your browser or device and the gopaldo platform is encrypted using Transport Layer Security (TLS 1.2 or higher) with 256-bit encryption;
• Encryption at Rest: Sensitive personal data fields stored in gopaldo's databases (including identity documents, financial account identifiers, and authentication credentials) are encrypted at rest;
• Password Security: Account passwords are stored using strong one-way cryptographic hashing. gopaldo does not store passwords in plain text under any circumstances;
• Access Controls: Access to personal data within gopaldo's internal systems is restricted on a need-to-know basis, with role-based access controls, multi-factor authentication for administrative access, and comprehensive access logging;
• Two-Factor Authentication: Players may enable two-factor authentication (2FA) on their gopaldo accounts, which requires an OTP delivered to the registered Philippine mobile number for each login;
• Regular Security Audits: gopaldo conducts regular internal and third-party security assessments to identify and remediate vulnerabilities;
• Data Breach Response: In the event of a personal data breach affecting Players' rights, gopaldo will notify affected individuals and the National Privacy Commission within 72 hours of becoming aware of the breach, in accordance with NPC Circular 16-03.

While gopaldo takes all reasonable and proportionate technical measures to protect your data, no internet-based platform can guarantee absolute security. Players are encouraged to maintain strong, unique passwords for their gopaldo accounts and to enable 2FA for maximum protection.

Under the Philippine Data Privacy Act of 2012, you hold the following rights with respect to your personal data processed by gopaldo. These rights may be exercised by submitting a verified request to gopaldo's Data Protection Officer through the support channel specified in Section 17:

gopaldo will respond to all verified data rights requests within fifteen (15) business days of receipt. Requests that are complex or numerous may require an extended response period of up to thirty (30) business days, in which case you will be notified promptly.

gopaldo may decline requests where processing is required by law, where erasure would conflict with mandatory retention obligations, or where the exercise of a right conflicts with the rights and freedoms of other individuals.

gopaldo uses cookies and similar tracking technologies (including local storage, session tokens, and pixel tags) to operate the platform, maintain your session, prevent fraud, and improve user experience. The following categories of cookies are used on the gopaldo platform:

You can manage your cookie preferences through your browser settings. Disabling essential cookies will affect the functionality of the gopaldo platform and may prevent successful login. Disabling functional or analytics cookies will not affect your ability to use core gaming features.

If gopaldo becomes aware that personal data has been collected from an individual who does not meet the minimum age requirement, all associated data will be immediately deleted and the account permanently closed. Any balances held in such accounts will be returned to the originating payment method following identity verification, with any bonus funds forfeited.

If you believe that a minor has registered a gopaldo account, please contact gopaldo's support team immediately via the official live chat channel so that the account can be investigated and closed without delay.

The gopaldo platform and its primary data infrastructure are operated with the Philippines as the primary jurisdiction. However, some of gopaldo's service providers — including game providers, payment processors, and KYC verification services — may process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, gopaldo ensures that appropriate safeguards are in place in compliance with the Data Privacy Act, including:

• Contractual data processing agreements that impose equivalent data protection obligations on the receiving party;
• Transfers only to jurisdictions recognised by the National Privacy Commission as providing an adequate level of data protection;
• Implementation of technical security measures consistent with those applied within the Philippines.

The gopaldo platform integrates third-party services including licensed game providers, payment processors, and analytics tools. Each of these services operates under its own privacy policy and data protection framework. gopaldo is not responsible for the privacy practices of third-party providers.

gopaldo does not embed third-party social media tracking pixels or advertising network scripts on the platform that would transmit your personal gaming activity data to external advertising platforms. Any analytics data collected is processed for internal platform improvement purposes only.

gopaldo reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. Material changes will be communicated to registered Players via platform notification, email, or SMS to your registered contact details, with a minimum notice period of fourteen (14) days before the amended Policy takes effect.

The current effective version of this Policy is always accessible at gopaldo.vip/privacy-policy and is identified by the version number and effective date at the top of the document. Continued use of the gopaldo platform following the effective date of any amended Policy constitutes your acceptance of the changes.

For any queries, requests, or concerns relating to this Privacy Policy or the processing of your personal data by gopaldo, please contact our Data Protection Officer (DPO) or customer support team:

If you believe that gopaldo has processed your personal data in a manner inconsistent with the Philippine Data Privacy Act of 2012 and you are not satisfied with gopaldo's response to your complaint, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Republic of the Philippines.

This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions of the gopaldo Privacy Policy.