gstar28 Privacy Policy

1. Scope and Application

This Privacy Policy ("Policy") is issued by gstar28 ("gstar28," "we," "us," or "our") and applies to all personal data collected, processed, stored, and used in connection with your access to and use of the gstar28 website at https://gstar28.app and all associated services, features, and communications (collectively, the "Platform").

This Policy applies to all registered players, prospective players who browse the Platform without registering, and any other individuals whose personal data gstar28 processes in connection with the operation of the Platform. It should be read together with our Terms & Conditions and any game-specific terms published on the Platform.

gstar28 is committed to protecting the privacy and security of your personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission (NPC).

2. Personal Data We Collect

gstar28 collects the following categories of personal data in connection with the operation of the Platform:

gstar28 does not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. Where sensitive data is collected (such as government ID details), it is handled with heightened security measures and access controls.

3. How We Collect Your Data

gstar28 collects personal data through the following means:

• Direct Collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Third-Party Sources: Identity verification data from KYC service providers; fraud and risk data from payment processors; geolocation data from IP verification services used to confirm you are accessing the Platform from within the Philippines.

4. Purpose of Processing

gstar28 processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your gstar28 player account.
• Identity Verification (KYC): Verifying your identity and age (21+) as required by PAGCOR regulations and Philippine law.
• Payment Processing: Processing deposits and withdrawals via GCash, PayMaya/Maya, bank transfer, and debit card.
• Platform Operation: Delivering gaming services, calculating results, crediting winnings, and managing bonuses and promotions.
• Regulatory Compliance: Meeting obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, cheating, money laundering, and unauthorized account access.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behavior and administering self-exclusion and limit-setting tools.
• Customer Support: Responding to your inquiries, resolving disputes, and providing technical assistance.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates, where you have provided consent or where permitted by law.
• Platform Improvement: Analyzing usage patterns to improve the functionality, performance, and user experience of the gstar28 Platform.

5. Legal Basis for Processing

gstar28 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration, including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, AMLA obligations, and NPC directives.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your data privacy rights.
• Consent: Processing for direct marketing communications and non-essential cookies, where you have provided explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

gstar28 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where required by law or regulatory obligation.
• KYC and Identity Verification Providers: Third-party service providers engaged to verify your identity and age in compliance with PAGCOR requirements.
• Payment Processors: GCash, PayMaya/Maya, and banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for the purpose of processing your deposits and withdrawals.
• Technology and Infrastructure Providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on our behalf under strict data processing agreements.
• Game Content Providers: Third-party game studios whose games are available on the gstar28 Platform, to the extent necessary for game delivery and result verification.
• Professional Advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third parties with whom gstar28 shares personal data are required to implement appropriate technical and organizational security measures and to process data only in accordance with gstar28's instructions and applicable Philippine law.

7. Data Retention

gstar28 retains your personal data for the following periods:

• Account Data: For the duration of your active account, plus a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AMLA obligations.
• Financial and Transaction Records: A minimum of five (5) years from the date of each transaction, in compliance with AMLA and tax record-keeping requirements.
• KYC and Identity Verification Documents: For the duration of your account plus five (5) years, or longer if required by applicable law or ongoing regulatory investigation.
• Gaming History: For the duration of your account plus three (3) years, for dispute resolution and responsible gaming monitoring purposes.
• Marketing Consent Records: Until you withdraw consent, plus a reasonable period thereafter to demonstrate compliance.
• Support Communications: Three (3) years from the date of the relevant interaction.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with gstar28's data disposal procedures.

8. Security Measures

gstar28 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the gstar28 Platform.
• Encryption of sensitive data at rest, including financial data and government ID details.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Multi-factor authentication for all administrative access to systems containing personal data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• 24/7 security monitoring and intrusion detection systems.
• Regular staff training on data privacy obligations and information security best practices.
• Documented incident response procedures for data breach detection, containment, and notification.

While gstar28 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying gstar28 immediately if you suspect unauthorized access to your account.

9. Cookies and Tracking Technologies

gstar28 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function, including session management, login authentication, and security features. These cannot be disabled.
• Functional Cookies: Remember your preferences (such as language settings and display options) to provide a more personalized experience.
• Analytics Cookies: Collect aggregated, anonymized data about how players use the Platform to help us improve performance and user experience. Used only with your consent.
• Marketing Cookies: Used to deliver relevant promotional content. Used only with your explicit consent.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the gstar28 Platform. For more information, refer to the cookie management options available within the Platform.

10. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by gstar28:

• Right to Be Informed: The right to be informed of how your personal data is collected, processed, and used — which this Policy fulfills.
• Right of Access: The right to request a copy of the personal data gstar28 holds about you, along with information about how it is processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data held by gstar28.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to gstar28's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer using the details provided in Section 14. gstar28 will respond to all verified requests within the timeframes prescribed by the Data Privacy Act and NPC regulations.

11. Minors and Age Restriction

The gstar28 Platform is strictly intended for individuals aged 21 years and above, in accordance with Philippine gaming regulations. gstar28 does not knowingly collect personal data from persons under the age of 21.

If gstar28 discovers that personal data has been collected from a person under 21, the relevant account will be immediately closed, all data will be deleted, and any funds held in the account will be handled in accordance with applicable regulatory requirements.

12. Third-Party Links and Services

The gstar28 Platform may contain references to third-party services (such as payment providers). gstar28 is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the gstar28 Platform.

13. Changes to This Privacy Policy

gstar28 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where changes are material, gstar28 will notify registered players via email or an on-Platform notification prior to the changes taking effect. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy. If you do not agree to the amended Policy, you may request account closure in accordance with the Terms & Conditions.

14. Contact Us and Data Protection Officer

gstar28 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and the Philippine Data Privacy Act. If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. For more information about your rights and the NPC's complaint process, please refer to the NPC's official resources.

For general information about gstar28, visit our About Us page. For responsible gaming support, visit our Responsible Gaming page.