ggrasia Casino Privacy Policy

Last Updated: May 2026

1. Introduction and Scope

ggrasia ("ggrasia," "we," "us," or "our") is committed to protecting the privacy and personal data of all users of the ggrasia Casino platform available at ggrasia.net and any associated applications (collectively, the "Platform"). This Privacy Policy ("Policy") describes how ggrasia collects, uses, stores, shares, and protects personal information in connection with your use of the Platform.

This Policy applies to all registered players, visitors, and any other individuals whose personal data ggrasia processes in the course of operating the Platform. By registering an account or using the ggrasia Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read together with ggrasia's Terms & Conditions and Responsible Gaming Policy, both of which are available on ggrasia.net.

2. Data Controller Information

For the purposes of applicable data protection laws, ggrasia acts as the data controller in respect of personal data collected through the Platform. If you have any questions about how ggrasia handles your personal data, you may contact us using the details provided in Section 13 of this Policy.

3. Personal Data We Collect

ggrasia collects the following categories of personal data from players and Platform users:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification number (e.g., Philippine National ID, passport, driver's license).
• Contact Data: Email address, mobile phone number, and residential address (including city, province, and postal code).
• Account Data: Username, account ID, account creation date, login history, and account preferences.
• Financial Data: Payment method details (e.g., GCash account reference, bank account details for BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank, or debit card information), deposit and withdrawal history, and transaction records. ggrasia does not store full card numbers — payment processing is handled by certified third-party payment processors.
• Gaming Data: Game history, wagering activity, session duration, win/loss records, and bonus usage.
• Technical Data: IP address, device type, browser type and version, operating system, screen resolution, and referring URL.
• Usage Data: Pages visited, features used, time spent on the Platform, and click-stream data.
• Communications Data: Records of your correspondence with ggrasia customer support, including live chat transcripts and email exchanges.
• Responsible Gaming Data: Self-exclusion requests, deposit limit settings, cooling-off period activations, and any problem gambling disclosures you make to ggrasia.

4. How We Collect Your Data

ggrasia collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or updating your profile.
• Automated collection: Technical and usage data collected automatically when you access the Platform, via cookies, web beacons, and similar tracking technologies (see Section 6).
• Third-party sources: Identity verification data from KYC service providers; fraud and risk signals from payment processors; and publicly available information used for compliance screening.

5. Purposes and Legal Basis for Processing

ggrasia processes your personal data for the following purposes, each supported by a lawful basis:

• Account registration and management — necessary for the performance of our contract with you as a registered player.
• Identity verification (KYC) — necessary for compliance with anti-money laundering (AML) and know-your-customer obligations under Philippine law.
• Processing deposits and withdrawals — necessary for the performance of our contract with you.
• Providing gaming services — necessary for the performance of our contract with you.
• Customer support — necessary for the performance of our contract and our legitimate interest in resolving player issues efficiently.
• Fraud prevention and security — necessary for compliance with legal obligations and our legitimate interest in protecting the Platform and its users.
• Responsible gaming monitoring — necessary for compliance with regulatory requirements and our legitimate interest in player welfare.
• Marketing communications — based on your consent, where you have opted in to receive promotional emails or notifications from ggrasia. You may withdraw consent at any time.
• Platform analytics and improvement — based on our legitimate interest in understanding how the Platform is used and improving the player experience.
• Legal and regulatory compliance — necessary for compliance with applicable Philippine laws and regulatory requirements, including PAGCOR-related obligations.

6. Cookies and Tracking Technologies

ggrasia uses cookies and similar tracking technologies on the Platform to enhance your experience, maintain session state, and collect analytics data. The types of cookies used include:

• Strictly necessary cookies: Required for the Platform to function, including session management and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options.
• Analytics cookies: Collect aggregated, anonymized data about how players use the Platform, helping ggrasia identify areas for improvement.
• Marketing cookies: Used to deliver relevant promotional content to you based on your activity on the Platform, subject to your consent.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the ggrasia Platform.

7. Data Sharing and Third Parties

ggrasia does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: To facilitate deposits and withdrawals via GCash, PayMaya, Philippine banks, and debit card networks.
• KYC and identity verification providers: To verify your identity and comply with AML obligations.
• Game content providers: Limited technical data may be shared with licensed game studios to deliver game content and resolve disputes.
• IT and infrastructure providers: Cloud hosting, security, and platform maintenance providers operating under strict data processing agreements.
• Regulatory authorities: PAGCOR and other competent Philippine authorities, where required by law or regulatory instruction.
• Law enforcement: Where required by a valid legal order, court order, or to prevent fraud or criminal activity.

All third-party service providers engaged by ggrasia are contractually required to process personal data only for the specified purpose and to maintain appropriate security standards.

8. Data Retention

ggrasia retains personal data for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting requirements. Specific retention periods include:

• Account and transaction records: Retained for a minimum of five (5) years following account closure, in compliance with Philippine AML regulations.
• KYC documents: Retained for a minimum of five (5) years following the end of the business relationship.
• Customer support communications: Retained for three (3) years from the date of the interaction.
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year thereafter for compliance purposes.

When personal data is no longer required, ggrasia will securely delete or anonymize it in accordance with our data retention procedures.

9. Data Security

ggrasia implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ggrasia Platform.
• Encryption of sensitive data at rest, including financial and identity information.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing.
• Multi-factor authentication for administrative access to systems containing personal data.

While ggrasia takes all reasonable steps to protect your data, no system is completely immune to security risks. You are responsible for maintaining the security of your ggrasia Login credentials and for notifying us immediately if you suspect unauthorized access to your account.

10. Your Rights as a Data Subject

Under applicable Philippine data protection law (Republic Act No. 10173, the Data Privacy Act of 2012), you have the following rights in relation to your personal data held by ggrasia:

• Right to be informed: The right to know how your personal data is being collected and processed — which this Policy fulfills.
• Right of access: The right to request a copy of the personal data ggrasia holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to legal retention obligations.
• Right to object: The right to object to processing based on legitimate interests, including direct marketing.
• Right to data portability: The right to receive your personal data in a structured, commonly used format.
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact ggrasia using the details in Section 13. ggrasia will respond to verified requests within thirty (30) days. Identity verification may be required before processing your request.

11. Children and Minors

The ggrasia Platform is strictly for individuals aged 21 years and above. ggrasia does not knowingly collect personal data from individuals under the age of 21. If ggrasia becomes aware that personal data has been collected from a minor, the account will be immediately suspended and the data will be deleted. If you believe a minor has registered on the Platform, please contact us immediately at the details provided in Section 13.

12. Changes to This Privacy Policy

ggrasia may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform features. The updated Policy will be posted on ggrasia.net with a revised "Last Updated" date. For material changes, ggrasia will notify registered players via the email address associated with their account or via a prominent notice on the Platform.

Your continued use of the ggrasia Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms.

13. Contact and Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or ggrasia's data practices, please contact our Data Protection team:

Email: [email protected]

If you are not satisfied with ggrasia's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing the Data Privacy Act of 2012.

This Privacy Policy was last updated in May 2026. By using the ggrasia Platform, you confirm that you have read and understood this Privacy Policy.