18 GL Privacy Policy

At 18 GL, we take your privacy seriously. This isn't just legal boilerplate — it's a genuine commitment from a platform that was built specifically for Filipino players and that understands the importance of trust in this market. When you register an account, deposit funds, place a bet, or contact our support team, you share personal information with us. This Privacy Policy tells you exactly what we do with that information, who sees it, how long we keep it, and what rights you have over it.

This Policy applies to all personal data processed by 18 GL in connection with the operation of the 18gl.app platform, including the website, any mobile-optimised version, and all related services offered to members in the Philippines.

18 GL operates in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission. We are also subject to the data-related requirements of PAGCOR's licensing conditions.

18 GL is the data controller for all personal information collected through the 18gl.app platform. As data controller, 18 GL determines the purposes and means of processing your personal data and is responsible for ensuring that processing is conducted lawfully, fairly, and transparently.

Our platform is operated under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR). We are registered with the National Privacy Commission of the Philippines as required under RA 10173.

Contact details for our Data Protection Officer are provided in Section 14 of this Policy. If you have any question about how your personal data is handled at 18 GL, the DPO is your primary point of contact.

The personal data 18 GL collects depends on how you use the platform. Below is a complete breakdown of what we collect and why each category is necessary.

18 GL collects personal data through the following channels:

Directly from You

• When you create a 18 GL account — registration form data including name, mobile number, and date of birth.
• When you complete identity verification (KYC) — government ID images and proof of address documents.
• When you make a deposit or withdrawal — payment method details and transaction references.
• When you contact our customer support team via live chat, email, or phone.
• When you participate in a promotion or respond to a survey.

Automatically Through Platform Use

• Technical data such as your IP address, device identifiers, and browser type is logged automatically when you access the 18 GL platform.
• Session and behaviour data — pages viewed, features used, time spent on each game or section — is recorded for security monitoring and platform improvement purposes.
• Cookies and similar tracking technologies collect data about your browsing behaviour as described in Section 10.

From Third Parties

• Payment processors (GCash, Maya, BDO, BPI, UnionBank) may share transaction confirmation data with 18 GL to verify deposit and withdrawal status.
• Identity verification service providers may share the results of document and liveness checks to confirm your KYC status.
• Fraud prevention and AML screening services may share risk score data associated with your registration details.

18 GL uses your personal data for the following purposes. We process only the data that is genuinely necessary for each purpose — no more.

Account Management

We use your identity and contact data to create and maintain your 18 GL account, verify your identity, process your login, and communicate with you about your account status, security alerts, and service updates.

Payment Processing

We use your financial data to process deposits and withdrawals via GCash, Maya, and Philippine bank accounts, to verify that payment methods are registered in your name, and to maintain a transaction record for your account statement.

Regulatory Compliance

As a PAGCOR-licensed operator, 18 GL is required to conduct Know Your Customer (KYC) verification, Anti-Money Laundering (AML) screening, and responsible gaming monitoring. We use identity, transaction, and behavioural data for these mandatory compliance activities.

Fraud Prevention and Security

Technical data, transaction patterns, and device information are analysed by our security systems to detect and prevent fraud, account takeovers, bonus abuse, and money laundering. This processing is a core security requirement for any licensed gaming platform.

Platform Improvement

Aggregated and anonymised usage data helps us understand how members use 18 GL — which features are popular, where players encounter difficulties, and how the platform can be improved. This analysis does not involve individually identifiable data.

Marketing Communications

If you have opted in to marketing communications, we use your contact details and promotion history to send you relevant offers, bonus notifications, and platform updates via SMS or email. You can opt out at any time from your account settings or by replying STOP to any SMS.

Under the Philippine Data Privacy Act, 18 GL must identify a lawful basis for each category of data processing. Our processing activities are based on the following legal grounds:

• Contractual necessity: Processing your account data, transaction data, and payment data is necessary to fulfil our contract with you as a 18 GL member. Without this processing, we cannot operate your account or pay your winnings.
• Legal obligation: KYC verification, AML screening, tax reporting, and PAGCOR compliance reporting are legal obligations. We must process the relevant personal data regardless of consent.
• Legitimate interests: Fraud prevention, platform security, and technical monitoring are conducted on the basis of 18 GL's legitimate interest in operating a secure and compliant gaming platform. These interests do not override your fundamental privacy rights.
• Consent: Marketing communications, optional cookies beyond strictly necessary categories, and any data processing not covered by the above bases is conducted on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time.

18 GL does not sell, rent, or trade your personal data. We share your data only in the following circumstances and only to the extent necessary for the specified purpose:

Service Providers (Data Processors)

We engage third-party service providers who process personal data on our behalf and under our instructions. These include:

• Payment processors: GCash/GXI, PayMaya/Voyager, BDO, BPI, UnionBank, Visa/Mastercard network processors — for deposit and withdrawal processing.
• KYC verification providers: For automated document verification and liveness checks during identity verification.
• Cloud infrastructure providers: For data storage and platform hosting within the Philippines and Southeast Asia.
• Customer support platforms: For live chat and ticket management tools used by our support team.

All service providers engaged by 18 GL are bound by data processing agreements that require them to process personal data only on our instructions, maintain appropriate security standards, and not use the data for their own purposes.

Regulatory Authorities

18 GL is required to share certain data with PAGCOR as a condition of our license. This includes statistical reporting, player identity data for specific compliance investigations, and AML-related disclosures. We may also be required to disclose data to the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or Philippine law enforcement agencies pursuant to a valid legal order.

Game Providers

Third-party game providers whose titles are hosted on 18 GL may receive minimal technical identifiers (session tokens, not personal identity data) necessary to deliver game functionality. Game providers do not receive your name, contact details, or payment information.

18 GL takes data security seriously. The following technical and organisational measures are in place to protect your personal information:

• 256-bit SSL/TLS encryption on all data in transit between your device and our servers.
• AES-256 encryption for sensitive data at rest in our databases, including identity documents and financial records.
• Access controls: Personal data is accessible only to 18 GL staff who require it to perform their specific job functions. All staff access is logged and audited.
• Two-factor authentication is required for all internal staff accessing systems containing member personal data.
• Regular penetration testing and vulnerability assessments conducted by independent security firms.
• Incident response procedures: In the event of a data breach affecting your personal information, 18 GL will notify you and the National Privacy Commission within 72 hours of discovery, as required by RA 10173.

Your personal data is stored primarily on servers located in the Philippines, with backup infrastructure in Singapore. No personal data is transferred outside ASEAN without your explicit consent, except where required by law or for regulatory compliance with PAGCOR's requirements.

18 GL retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

When retention periods expire and no legal basis for continued storage exists, personal data is securely deleted or anonymised. Anonymised data derived from your records may be retained indefinitely for statistical and analytical purposes as it can no longer identify you.

18 GL uses cookies and similar tracking technologies to operate the platform, improve your experience, and maintain security. Here is how each category of cookie is used:

Strictly Necessary Cookies

These cookies are essential for the platform to function. They include session cookies that keep you logged in, security tokens that protect against CSRF attacks, and cookies that remember your language and currency preference. These cookies cannot be disabled without breaking core platform functionality.

Performance and Analytics Cookies

We use first-party analytics cookies to understand how members navigate the 18 GL platform — which pages are most visited, where users drop off, and how long sessions typically last. This data is aggregated and anonymised. These cookies are activated only with your consent.

Functional Cookies

Functional cookies remember preferences you have set — such as your favourite game category or your preferred deposit method — so you don't have to re-enter them every session. These are activated only with your consent.

Managing Cookies

You can manage your cookie preferences from the cookie consent banner that appears on your first visit to 18 GL. You can also adjust cookie settings through your browser — most modern browsers allow you to block or delete cookies entirely. Note that disabling strictly necessary cookies will prevent you from using the platform.

18 GL does not use third-party advertising cookies or allow external advertisers to place tracking cookies on our platform.

Under the Philippine Data Privacy Act, you have the following rights in relation to your personal data held by 18 GL. To exercise any of these rights, contact our Data Protection Officer at support@18gl.app — we will acknowledge your request within 5 business days and resolve it within 15 business days.

18 GL strictly prohibits use of the platform by persons under 18 years of age. We do not knowingly collect personal data from minors. Our registration process includes date-of-birth verification and KYC procedures designed to identify and reject underage registration attempts.

If a parent or guardian believes that their child has registered on 18 GL or that we hold personal data belonging to a minor, please contact our Data Protection Officer at support@18gl.app immediately. We will investigate and, if confirmed, will delete the relevant account and all associated personal data without delay.

Any 18 GL employee or contractor who becomes aware of a minor using the platform is required to report it immediately to the compliance team.

18 GL may update this Privacy Policy from time to time to reflect changes in our data practices, new services, or updated legal requirements. When we make material changes, we will:

• Post the revised Policy on this page with the updated "Last Updated" date at the top.
• Send you an email notification or in-platform alert at least 7 days before material changes take effect.
• For significant changes that affect your rights, seek fresh consent where required by RA 10173.

We encourage you to review this Policy periodically. Your continued use of the 18 GL platform after a change takes effect indicates your acceptance of the updated Privacy Policy.

Historical versions of this Policy are available upon request from our Data Protection Officer.

If you have questions, concerns, or requests relating to this Privacy Policy or your personal data held by 18 GL, please contact our designated Data Protection Officer:

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data rights have been violated. The NPC can be reached through their official government website.