- 1. Introduction
- 2. Data Controller
- 3. Data We Collect
- 4. How We Collect Data
- 5. How We Use Your Data
- 6. Legal Basis for Processing
- 7. Sharing Your Data
- 8. Cookies & Tracking
- 9. Data Retention
- 10. Data Security
- 11. Your Privacy Rights
- 12. Minors & Under-Age Users
- 13. International Transfers
- 14. Changes to This Policy
- 15. Contact & Complaints
1. Introduction
This Privacy Policy explains how Garogem ("we", "us", "our") collects, uses, stores, and protects personal information provided by members and visitors of the Garogem platform at garogem.best. It also outlines your rights under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.
Garogem takes data privacy seriously. We understand that our members trust us with sensitive personal and financial information, and we handle that responsibility carefully. We don't collect data we don't need, we don't keep it longer than necessary, and we don't sell it to third parties for profit.
By registering an account on Garogem or using the platform, you consent to the collection and use of your personal data as described in this policy. If you have questions about anything here, our Data Protection Officer is reachable at the contact details provided in Section 15.
This policy is written to be understood, not to confuse. If something here is unclear to you as a Garogem member, please reach out — we're happy to explain in plain Tagalog-English if that helps.
2. Data Controller
For the purposes of the Philippine Data Privacy Act of 2012, Garogem is the personal information controller responsible for your personal data. This means Garogem determines the purposes and means of processing personal information collected through the garogem.best platform.
Garogem has designated a Data Protection Officer (DPO) to oversee compliance with this policy and applicable data protection laws. The DPO can be reached using the contact information in Section 15 of this document.
3. Data We Collect
Garogem collects the minimum data necessary to provide a safe, functional, and legally compliant gaming platform. The categories of personal data we collect are summarised below.
Registration & Identity Data
Full name, date of birth, email address, mobile number, and a username selected by you at registration. This information is used to create and manage your Garogem account.
Government ID & Verification Data
For KYC (Know Your Customer) purposes, we may collect copies of government-issued IDs — such as PhilSys, passport, driver's licence, UMID, or voter's ID — along with supporting documents confirming your address and payment method ownership.
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, government ID | Account creation, KYC verification |
| Contact Data | Email address, mobile number | Account communications, 2FA, support |
| Financial Data | GCash number, bank account details, transaction history | Deposits, withdrawals, fraud prevention |
| Gaming Activity Data | Bets placed, games played, win/loss records | Account management, responsible gaming |
| Technical Data | IP address, device type, browser, OS | Security, fraud detection, platform optimisation |
| Usage Data | Pages visited, session duration, feature use | Platform improvement, user experience |
| Communication Data | Support chat logs, emails, complaint records | Customer support, dispute resolution |
4. How We Collect Your Data
Garogem collects personal data through the following channels:
- Direct input: Information you provide when registering, updating your profile, making a deposit, submitting a withdrawal request, or contacting our support team.
- Automated collection: Technical and usage data gathered automatically through cookies, server logs, and analytics tools when you interact with the Garogem platform. See Section 8 for more on cookies.
- Verification partners: Identity verification services and payment processors may share data with us as part of the KYC and payment authentication process.
- Third-party platforms: If you connect Garogem with a third-party service (such as GCash or Maya), limited transaction reference data may be received from that service.
Garogem does not purchase personal data from data brokers, marketing lists, or any other external commercial data sources. All data we hold about you comes directly from your interactions with the Garogem platform or from service providers acting on our behalf.
5. How We Use Your Data
Garogem uses your personal data for the following purposes:
Account Management
To create, maintain, and manage your Garogem account. This includes processing registrations, updating account settings, applying responsible gaming limits you have requested, and managing account closures or suspensions in accordance with our Terms and Conditions.
Transaction Processing
To process deposits, withdrawals, and any other financial transactions on Garogem. This requires sharing relevant data with our payment processing partners — GCash, Maya, bank networks, and card processors — solely for the purpose of completing transactions.
Identity Verification & Compliance
To verify your identity and age in accordance with Philippine gaming regulations and anti-money laundering laws. Garogem is legally required to carry out KYC checks and to maintain records for a defined period. Failure to complete verification may restrict access to certain platform features.
Security & Fraud Prevention
To protect Garogem members and the platform from fraud, account takeover, bonus abuse, and other harmful activities. Technical and behavioural data is analysed to detect unusual patterns. Suspected fraudulent activity may be reported to relevant authorities.
Customer Support
To respond to your enquiries, resolve disputes, and provide assistance with account or technical issues. Support communications are logged to maintain quality and for training purposes.
Responsible Gaming
Your gaming activity data is used to monitor for signs of problem gambling behaviour, enforce self-imposed limits, and comply with our Responsible Gaming obligations under Philippine regulations.
Platform Improvement
Aggregated and anonymised usage data is used to understand how members use the Garogem platform, identify areas for improvement, and develop new features. This analysis does not identify individual users.
Marketing Communications
With your consent, Garogem may send you information about promotions, bonuses, and new features by email or in-platform notification. You can opt out of marketing communications at any time through your account settings or by emailing our support team. Opting out will not affect your ability to use the platform.
6. Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012, Garogem processes your personal data on the following legal grounds:
- Contractual necessity: Processing required to fulfil the terms of your Garogem account agreement — such as processing deposits and withdrawals or managing account settings.
- Legal obligation: Processing required for compliance with Philippine law, including KYC obligations under anti-money laundering regulations and gaming licence conditions.
- Legitimate interests: Processing for security monitoring, fraud prevention, and platform improvement, where these interests are balanced against and do not override your privacy rights.
- Consent: Processing for optional activities such as marketing communications, where you have given clear, informed consent that you can withdraw at any time.
Where Garogem relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing that occurred before withdrawal. It will not affect processing carried out on other legal grounds.
7. Sharing Your Data
Garogem does not sell, rent, or trade your personal data with third parties for commercial purposes. Your data is only shared with the categories of recipients described below, and only to the extent necessary for the stated purpose.
Payment Processors
GCash, Maya, GrabPay, Coins.ph, InstaPay, BDO, BPI, UnionBank, and Visa/Mastercard card processors receive the minimum data necessary to authenticate and complete financial transactions. These providers process your payment data under their own privacy policies and are contractually bound to maintain appropriate security standards.
Identity Verification Services
Garogem uses third-party KYC verification providers to validate government-issued ID documents. These providers act as processors and are only permitted to use your data for Garogem's verification purposes.
Regulatory & Legal Authorities
Garogem is legally required to disclose certain information to Philippine gaming regulators and law enforcement authorities upon valid request. This includes anti-money laundering transaction reports filed with the Anti-Money Laundering Council (AMLC) where applicable.
Platform Technology Providers
Cloud hosting providers, game technology vendors, and analytics service providers may process limited data as part of delivering the Garogem platform. All such providers are vetted and bound by data processing agreements.
Garogem will never sell your personal information to advertising networks, data brokers, or any commercial third party. This is a firm commitment — it is not subject to exceptions based on business needs.
8. Cookies & Tracking Technologies
Garogem uses cookies and similar tracking technologies to make the platform work correctly, keep you logged in between sessions, and understand how members use the site.
Types of Cookies Used
- Strictly Necessary Cookies: Required for the platform to function. These cannot be disabled. They include session authentication cookies that keep you logged in to Garogem.
- Functional Cookies: Remember your preferences such as language settings, preferred payment method, and display options on the Garogem platform.
- Analytics Cookies: Help us understand how members navigate Garogem so we can improve the experience. Data collected is aggregated and anonymised.
- Security Cookies: Used to detect and prevent fraud, bot activity, and account abuse on the Garogem platform.
You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use the Garogem platform, including staying logged in. Analytics and functional cookies can be disabled without preventing access to the core platform.
9. Data Retention
Garogem retains personal data only for as long as necessary for the purpose it was collected, or as required by Philippine law and our gaming licence obligations. The following retention periods apply:
- Active account data: Retained for the duration of your active membership on Garogem, plus a minimum of five years after account closure, as required by anti-money laundering regulations.
- Transaction records: Retained for a minimum of five years in compliance with the Philippine AMLA requirements applicable to licensed gaming operators.
- KYC verification documents: Retained for at least five years from the date of the last transaction, or longer if required by a regulatory investigation.
- Customer support records: Retained for three years from the date of the last interaction, or until any related dispute is fully resolved.
- Marketing consent records: Retained for the period of consent and for three years thereafter as evidence of the consent given.
After the relevant retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.
10. Data Security
Garogem implements technical and organisational security measures proportionate to the risks associated with the personal data we hold. These include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and Garogem servers.
- Encryption of sensitive data at rest, including payment information and government ID documents.
- Two-factor authentication (2FA) available for all Garogem member accounts.
- Access controls that restrict Garogem staff access to personal data on a need-to-know basis.
- Regular security assessments and penetration testing of the Garogem platform.
- Incident response procedures to identify, contain, and report data breaches in accordance with NPC requirements.
In the unlikely event of a personal data breach that poses a real risk to your rights and freedoms, Garogem will notify affected members and the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required under Philippine data protection rules.
11. Your Privacy Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by Garogem. To exercise any of these rights, contact our Data Protection Officer using the details in Section 15.
Right to Access
Request a copy of the personal data Garogem holds about you and information about how it is processed.
Right to Rectification
Request correction of inaccurate personal data. You can update basic account details directly through your Garogem account settings.
Right to Erasure
Request deletion of your personal data where there is no longer a legitimate basis for Garogem to retain it, subject to legal retention obligations.
Right to Object
Object to processing of your data for direct marketing at any time. You can also object to processing based on legitimate interests in certain circumstances.
Right to Data Portability
Request your personal data in a structured, machine-readable format so you can transfer it to another service provider.
Right to Lodge a Complaint
If you are not satisfied with how Garogem handles your personal data, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
Garogem will respond to data rights requests within 30 calendar days. Where requests are complex or numerous, this period may be extended by a further 60 days with notice. We do not charge a fee for exercising your rights unless requests are manifestly unfounded, excessive, or repetitive.
12. Minors & Under-Age Users
Garogem is strictly for users who are 21 years of age or older. The platform does not knowingly collect or process personal data of persons under 21 years of age. Registration requires confirmation of age at sign-up, and Garogem conducts age verification during the KYC process.
If Garogem becomes aware that personal data has been collected from a user who is under 21 years of age, that account will be suspended immediately, the personal data will be deleted, and any funds deposited will be returned to the payment source.
If you are a parent or guardian and believe your child has registered on Garogem, please contact us immediately using the details in Section 15. We will investigate and take appropriate action promptly.
13. International Data Transfers
Garogem's primary operations and data storage are based in the Philippines. In some cases, personal data may be processed by service providers whose infrastructure is located in other countries — for example, global cloud hosting or game providers with regional data centres.
Where personal data is transferred outside the Philippines, Garogem ensures that appropriate safeguards are in place in accordance with the Data Privacy Act of 2012. This includes contractual clauses requiring receiving organisations to apply equivalent data protection standards. Garogem does not transfer personal data to countries that do not provide an adequate level of data protection without first putting in place appropriate contractual or technical safeguards.
You can request details of the specific safeguards in place for any cross-border data transfers affecting your personal data by contacting Garogem's Data Protection Officer.
14. Changes to This Privacy Policy
Garogem may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. When we make material changes, we will update the "Last Updated" date at the top of this page and, where the changes significantly affect your rights, notify you by email or through an in-platform announcement.
We encourage you to review this page periodically to stay informed about how Garogem protects your personal data. Continued use of the Garogem platform following any updates constitutes acceptance of the revised policy.
15. Contact & Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or how Garogem handles your personal data, please contact our Data Protection Officer:
Email: support@garogem.best
Subject line: "Privacy Request – [Your Request Type]"
Live Support: Available 24/7 via the chat feature in your logged-in Garogem account.
Response time: Within 30 calendar days of receiving your request.
If you are not satisfied with Garogem's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the authority responsible for enforcing the Data Privacy Act of 2012. Information on how to file a complaint is available through the NPC's official channels.
For questions about responsible gaming tools, self-exclusion, or deposit limits, please visit our Responsible Gaming page or contact support directly. For general platform questions, visit our FAQ page.