01About This Policy
This Privacy Policy explains how GemZone collects, uses, stores, and protects your personal information when you use the GemZone platform at gemzone.net and any associated mobile or web applications (collectively, the "Platform").
GemZone is committed to handling your personal data responsibly and in accordance with applicable Philippine data protection laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as the requirements of GemZone's gaming licence. The National Privacy Commission (NPC) of the Philippines is the relevant supervisory authority for Philippine players.
By registering an account on GemZone, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described here. If you do not agree with any part of this Policy, please do not use the Platform.
This Policy should be read together with GemZone's Terms and Conditions, which also govern your use of the Platform. Where there is any conflict between the two documents on a data-related matter, this Privacy Policy takes precedence.
02Data We Collect
GemZone collects only the personal data that is necessary to operate the Platform, comply with legal requirements, and provide a safe and functional gaming experience for Philippine players. The categories of personal data we collect are set out below.
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government-issued ID number | Required for account registration and KYC |
| Contact Data | Mobile number, email address, home address | Required for account communication and payouts |
| Financial Data | GCash / Maya account name and number, bank account details, transaction history | Required for deposits and withdrawals |
| Verification Documents | Scanned copy of government ID, proof of address, selfie with ID | Required to complete KYC verification |
| Gameplay & Betting Data | Bet history, game sessions, wager amounts, wins and losses | Collected automatically while using the Platform |
| Device & Technical Data | IP address, device type, operating system, browser type, session timestamps | Collected automatically |
| Cookie & Analytics Data | Session cookies, browsing behaviour on GemZone, page views | Collected automatically (see Cookie section) |
| Communications Data | Support tickets, chat logs, emails sent to GemZone | Collected when you contact GemZone |
GemZone does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is required for identity verification under applicable gaming regulations.
03How We Collect Your Data
GemZone collects your personal data through several channels, all of which operate within the scope described in this Privacy Policy:
Directly From You
When you register an account, complete identity verification, make a deposit or withdrawal, contact GemZone support, or respond to a promotional offer, you provide personal data directly to GemZone. This is the primary way we collect information about you, and the information you provide should always be accurate and up to date.
Automatically Through Platform Use
When you access and use the GemZone Platform, technical data about your session — including your IP address, device identifiers, browser type, and interaction patterns — is collected automatically. This data is necessary for the secure operation of the Platform and for detecting fraudulent or abusive activity.
From Third-Party Payment Providers
When you make a deposit or withdrawal using GCash, Maya, or a bank transfer, GemZone receives confirmation data from the payment provider sufficient to verify and process the transaction. GemZone does not receive your full payment credentials (e.g., your GCash PIN or full card number) through this process.
From Identity Verification Services
GemZone uses regulated third-party identity verification services to support its Know Your Customer (KYC) process. These services may cross-reference the documents you provide against government or commercial databases as required by anti-money laundering regulations. The data exchanged is limited to what is necessary for verification.
04Why We Use Your Data
GemZone uses your personal data only for specific, legitimate purposes directly related to operating a licensed online gaming platform for Philippine players. The purposes are:
- Account creation and management: To register your account, maintain your profile, and authenticate your identity on login.
- Identity verification (KYC): To verify your identity and age as required by our gaming licence and applicable Philippine regulations.
- Payment processing: To process deposits, withdrawals, and refunds to and from your registered payment method.
- Regulatory compliance: To meet anti-money laundering (AML) obligations, responsible gaming requirements, and reporting duties to GemZone's licensing authority.
- Platform security and fraud prevention: To monitor for suspicious activity, detect cheating, investigate security incidents, and protect the integrity of the Platform.
- Customer support: To respond to your enquiries, process complaints, and provide assistance with your account.
- Responsible gaming monitoring: To identify signs of problem gambling and fulfil our duty of care to players, including implementing limits and exclusions where required.
- Platform improvement: To analyse how players use GemZone in order to improve the product, fix bugs, and develop new features.
- Marketing communications: To send you relevant promotions and updates, but only where you have given consent and not opted out.
On marketing communications: GemZone will only send you promotional emails or messages if you have not opted out. You can unsubscribe at any time by contacting support@gemzone.net or using the unsubscribe link in any marketing email. GemZone will never send marketing communications to self-excluded players.
05Legal Bases for Processing
Under the Data Privacy Act of 2012 and applicable gaming regulations, GemZone processes your personal data on the following legal bases:
- Contractual necessity: Processing required to deliver the services you registered for — account management, payment processing, and gameplay access.
- Legal obligation: Processing required to comply with gaming licencing requirements, AML regulations, and any lawful order from a Philippine regulatory authority.
- Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
- Consent: Processing for marketing communications and non-essential analytics cookies, where you have given clear and informed consent. Consent can be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.
06Data Sharing & Disclosure
GemZone does not sell your personal data to third parties. Your data may be shared only in the following limited circumstances:
Service Providers
GemZone uses trusted third-party service providers to support Platform operations, including payment processors (GCash, Maya, banks), identity verification services, cloud infrastructure providers, and analytics platforms. These providers are contractually obligated to process your data only as instructed by GemZone and in accordance with applicable data protection law.
Regulatory Authorities
GemZone is required by law to share certain data with its gaming licencing authority and, where applicable, with the Anti-Money Laundering Council (AMLC) of the Philippines, law enforcement agencies acting under valid legal process, and the National Privacy Commission.
Business Transfers
In the event of a merger, acquisition, or sale of GemZone or its assets, your personal data may be transferred to the acquiring entity. GemZone will provide advance notice of any such transfer that materially affects how your data is handled.
With Your Consent
GemZone may share your data with other parties if you have given explicit consent to that specific sharing. You may withdraw such consent at any time by contacting support@gemzone.net.
GemZone never shares your personal data with advertisers, data brokers, or marketing companies. Your information is used to operate your account, not to be monetised by third parties.
07Data Retention
GemZone retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, comply with legal obligations, and resolve disputes. The key retention periods are:
- Active account data: Retained for the duration your GemZone account is active.
- KYC and identity documents: Retained for a minimum of five (5) years following account closure, as required by AML regulations.
- Transaction and betting records: Retained for a minimum of five (5) years from the date of each transaction, as required by gaming licence and financial regulations.
- Support communications: Retained for three (3) years following resolution of the relevant matter.
- Marketing consent records: Retained until you withdraw consent, plus a reasonable period to demonstrate prior compliance.
After applicable retention periods, your data is securely deleted or anonymised. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes, as it can no longer be linked back to you personally.
08Data Security
GemZone implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- TLS/SSL encryption on all data transmitted between your device and GemZone's servers
- Encryption at rest for sensitive personal and financial data stored on GemZone's infrastructure
- Access controls limiting internal access to personal data on a strict need-to-know basis
- Regular security assessments and penetration testing by qualified third parties
- Multi-factor authentication options for player accounts
- Monitoring systems for detecting and responding to security incidents
While GemZone takes reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, GemZone will notify you and the National Privacy Commission as required by applicable law.
You also have a role in keeping your account secure. Use a strong, unique password for your GemZone account, do not share your login credentials with anyone, and contact GemZone immediately if you suspect unauthorised access to your account.
09Cookies & Tracking
GemZone uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help the Platform function correctly and allow GemZone to understand how players interact with it.
Types of Cookies GemZone Uses
- Essential cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core Platform functionality.
- Functional cookies: Remember your preferences such as language settings and display options, so you don't have to reset them every visit.
- Analytics cookies: Help GemZone understand how players navigate the Platform — which pages are visited most, how long sessions last, and where players encounter issues. This data is used in aggregate and does not identify you personally. Analytics cookies require your consent.
- Security and fraud detection cookies: Used to identify unusual patterns of behaviour that may indicate fraudulent activity or security threats.
GemZone does not use advertising or third-party tracking cookies that follow you across other websites. You can manage cookie preferences through your browser settings, though disabling essential cookies will affect Platform functionality.
No cross-site tracking: GemZone's cookies operate only on the GemZone Platform. The platform does not participate in advertising networks or allow third-party advertisers to drop cookies on GemZone pages.
10Your Privacy Rights
As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by GemZone. To exercise any of these rights, contact GemZone's Data Protection Officer at support@gemzone.net with the subject line "Privacy Rights Request."
Right to Access
Request a copy of the personal data GemZone holds about you and information about how it is processed.
Right to Correction
Request correction of inaccurate or incomplete personal data held by GemZone.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to legal retention obligations.
Right to Object
Object to processing of your data for direct marketing purposes. GemZone will stop marketing communications upon receipt of a valid objection.
Right to Data Portability
Receive your personal data in a structured, machine-readable format where processing is based on consent or contract.
Right to Complain
Lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe GemZone has violated your data privacy rights.
GemZone will respond to all valid privacy rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days with prior notice and explanation. Requests will be processed free of charge unless they are manifestly unfounded or excessive.
Please note that certain rights are subject to limitations where GemZone is required by law to retain data, such as KYC and transaction records under AML regulations. GemZone will explain any such limitations clearly at the time of your request.
11Children's Privacy
GemZone is strictly an adult platform. The minimum age requirement for all GemZone services is 21 years of age. GemZone does not knowingly collect personal data from any person under the age of 21.
If GemZone discovers or is notified that a player is under the minimum age, the account will be immediately suspended, all gameplay voided, and any deposits returned to the source payment method. Personal data associated with underage accounts will be deleted as promptly as practicable, subject to any legal obligations to retain records of the incident.
If you believe that a person under the age of 21 has created a GemZone account, please report this immediately to support@gemzone.net.
12Changes to This Policy
GemZone may update this Privacy Policy from time to time to reflect changes in the Platform, applicable law, or our data processing practices. When changes are made, the updated Policy will be published on this page with a revised effective date at the top.
For significant changes that materially affect how your data is used or your privacy rights, GemZone will notify registered players by email at least 14 days before the changes take effect. For minor updates that do not affect your substantive rights, the revised Policy will simply be posted on this page.
Your continued use of GemZone after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you may close your account by contacting support@gemzone.net.
13Contact Us
If you have questions about this Privacy Policy, want to exercise any of your data rights, or need to report a privacy concern, please contact GemZone's Data Protection Officer:
- Email: support@gemzone.net (subject line: "Privacy Policy Enquiry" or "Privacy Rights Request")
- Response time: GemZone aims to acknowledge all privacy enquiries within 48 hours
For unresolved complaints, you may contact the National Privacy Commission of the Philippines through their official channels. GemZone cooperates fully with all NPC enquiries and investigations.
A note on data security: Never include your full GCash PIN, bank password, or full card number when contacting GemZone. Our support team will never ask for these details. If you receive a message claiming to be from GemZone and requesting sensitive credentials, please report it to support@gemzone.net immediately.