goerya Privacy Policy

1. Introduction & Scope of This Policy

This Privacy Policy ("Policy") is issued by goerya ("goerya," "we," "us," or "our"), the operator of the online gaming platform accessible at goerya.cam, in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations as issued by the National Privacy Commission (NPC).

This Policy applies to all personal information collected from individuals who visit, register on, or interact with any part of the goerya platform — including the website at goerya.cam, the goerya mobile application, and any other digital interface operated by goerya. It covers all data processing activities carried out by goerya in connection with the operation of its PAGCOR-authorized online casino and sports betting services.

By registering for a goerya account or using any part of our platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal information as described herein. If you do not agree with this Policy, please discontinue your use of the goerya platform and contact us to request account closure.

2. Data Controller Identity

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, goerya acts as the Personal Information Controller with respect to the personal data it collects and processes in connection with the operation of its platform and services.

goerya operates under authorization from the Philippine Amusement and Gaming Corporation (PAGCOR) and complies with all applicable data protection, anti-money laundering, and consumer protection regulations applicable to licensed online gaming operators in the Philippines.

All data protection inquiries, requests to exercise data subject rights, and privacy-related complaints should be directed to goerya's designated data protection point of contact at [email protected], with the subject line "Data Privacy Request — [Your Account Mobile Number]".

3. Personal Data We Collect

goerya collects the following categories of personal information in connection with account registration, operation, and platform use:

4. How We Collect Your Personal Data

goerya collects personal information through the following channels and methods:

• Direct Registration: Information you provide when you create a goerya account, including your name, mobile number, and date of birth.
• KYC Submission: Identification documents and selfie verification images submitted to complete the mandatory Know Your Customer process.
• Financial Transactions: Payment account details associated with deposits and withdrawal requests processed through GCash, Maya, BPI, BDO, Metrobank, or other supported channels.
• Platform Activity: Game play records, betting history, login timestamps, and session behavior data generated automatically as you use the goerya platform.
• Device & Technical Data: Information collected automatically by cookies, log files, and analytics technologies when you access the platform from any device or browser.
• Support Interactions: Information you provide when contacting goerya's support team by email or any in-platform communication channel.
• Responsible Gaming Tools: Limit settings, self-exclusion requests, and cooling-off period configurations you submit via your account dashboard.

goerya does not collect personal data from public social media profiles, data brokers, or any source other than those listed above without your explicit prior consent.

5. Purposes of Processing Personal Data

goerya processes your personal information only for the following defined purposes:

• Account Management: Creating, verifying, and maintaining your goerya player account; authenticating your identity at login; enabling two-factor authentication.
• Regulatory Compliance: Fulfilling Know Your Customer (KYC) obligations required by PAGCOR; complying with the Anti-Money Laundering Act (AMLA) and reporting obligations to the Anti-Money Laundering Council (AMLC); maintaining records required by law.
• Payment Processing: Facilitating deposits from and withdrawals to your verified Philippine payment accounts, including GCash, Maya, and local bank accounts.
• Service Delivery: Providing access to casino games, sports betting markets, live dealer tables, bingo, sabong, and all other platform features you use.
• Fraud Prevention & Security: Detecting and preventing unauthorized access, duplicate accounts, bonus abuse, money laundering, and other fraudulent activity.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviors; administering player-requested limit settings, cooling-off periods, and self-exclusion.
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve platform performance, game selection, and user experience.
• Customer Support: Responding to your inquiries, resolving disputes, and providing technical assistance.
• Legal Proceedings: Preserving records and cooperating with lawful requests from courts, regulators, or law enforcement authorities where required.

6. Legal Basis for Processing

goerya processes personal data under the following lawful bases as provided in Section 12 and Section 13 of the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to create and manage your goerya account, process transactions, and deliver the gaming services you have contracted for.
• Legal Obligation: Processing required to comply with PAGCOR licensing requirements, KYC and AML regulations under Philippine law, AMLC reporting obligations, and NPC registration requirements.
• Legitimate Interest: Processing for fraud detection, platform security, responsible gaming monitoring, and platform improvement, where such interests do not override your privacy rights.
• Consent: Processing for optional purposes such as marketing communications, where your voluntary, informed consent is obtained and can be withdrawn at any time.

Where goerya relies on consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal and does not affect processing conducted on other legal bases.

7. Disclosure to Third Parties

goerya does not sell, rent, or trade your personal information. We disclose personal data only in the following limited circumstances:

• Payment Processors: GCash (GXI Inc.), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other Philippine-licensed payment service providers, strictly for the purpose of processing your deposits and withdrawals.
• Gaming Platform Providers: Licensed game software providers (including live dealer studio operators) whose games are integrated into the goerya platform, where minimal technical data is shared to deliver game sessions.
• Identity Verification Providers: Third-party KYC verification services that assist in validating government-issued identification documents submitted by players.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and any other Philippine government authority as required by applicable law.
• Law Enforcement: Philippine law enforcement agencies or courts, where goerya is compelled by a lawful order, subpoena, or legal process.
• Professional Advisors: Legal counsel, auditors, and financial advisors under strict confidentiality obligations, where necessary for goerya's business operations.

All third-party service providers engaged by goerya are required to process personal data only for the specified purpose and to implement security measures consistent with Philippine data protection standards.

8. International Data Transfers

Some of goerya's technology infrastructure and gaming platform providers may be located outside the Philippines. Where personal data is transferred to servers or processors in other countries, goerya ensures that such transfers are conducted under appropriate safeguards, including contractual data processing agreements that impose equivalent data protection obligations.

goerya does not transfer personal data to jurisdictions without an adequate level of data protection without implementing contractual safeguards that protect the rights of Filipino data subjects. Where required by the NPC, goerya will notify and obtain approval for cross-border data transfers.

Sensitive personal information — including government ID documents and financial account details — is processed and stored on servers with access restricted to authorized personnel only, regardless of physical server location.

9. Data Retention

goerya retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention principles and legal requirements:

• Account data and KYC documents are retained for a minimum of five (5) years following account closure, as required by Philippine AML regulations and PAGCOR licensing conditions.
• Transaction records, including deposit and withdrawal histories, are retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLC reporting requirements.
• Gaming history and session records are retained for a minimum of three (3) years for dispute resolution, responsible gaming monitoring, and regulatory audit purposes.
• Support communication records are retained for two (2) years from the date of the last communication in each support thread.
• Marketing consent and preference records are retained for the duration of your account and for one (1) year following account closure or consent withdrawal.

Upon expiration of applicable retention periods, personal data is securely deleted or anonymized in accordance with NPC-recommended data disposal procedures. Where data is required for ongoing legal proceedings, retention is extended until those proceedings are concluded.

10. Security Measures

goerya implements a multi-layered security framework to protect personal information from unauthorized access, disclosure, alteration, or destruction. Our technical and organizational security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and goerya's platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher).
• Access Controls: Strict role-based access controls ensure that personal data is accessible only to goerya employees and contractors who require it to perform their job functions.
• Two-Factor Authentication: All goerya player accounts support optional two-factor authentication via SMS OTP to prevent unauthorized account access.
• Encrypted Storage: Sensitive personal data, including identity documents and financial account information, is stored in encrypted databases with restricted access logging.
• Regular Security Audits: goerya conducts periodic security assessments of its platform infrastructure and third-party integrations.
• Incident Response: goerya maintains a data breach response procedure. In the event of a breach affecting personal data, goerya will notify affected players and the NPC within the timeframes required by Philippine law.

11. Cookies & Tracking Technologies

goerya uses cookies and similar tracking technologies to operate the platform, maintain your session, and analyze how the platform is used. The following cookie categories are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and cookies that remember your language preference. These cannot be disabled.
• Functional Cookies: Remember your platform preferences, such as which games you have recently played or your chosen display settings. Disabling these may reduce the quality of your experience.
• Analytics Cookies: Collect aggregated, anonymized data about how players interact with the platform — which pages are visited most, where errors occur, and how navigation flows work. This data is used to improve the platform.
• Session Management Cookies: Maintain your logged-in status across page visits and browser tabs during an active goerya session.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to or using the goerya platform. goerya does not use third-party advertising tracking cookies or retargeting pixel technologies.

12. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal information held by goerya. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Subject Rights Request."

goerya will acknowledge data subject requests within 3 business days and aim to fulfil or respond substantively within 30 calendar days of receipt. Where a request cannot be fulfilled — for example, because retention is required by law — goerya will explain the reason in writing.

13. Children & Minors

goerya's platform is strictly restricted to individuals aged 21 years and above, in compliance with PAGCOR's minimum gambling age requirements for the Philippines. goerya does not knowingly collect personal data from individuals under 21 years of age.

All registration attempts are subject to age verification procedures. If goerya discovers that personal data has been collected from an individual under 21 years of age — whether through the registration process or otherwise — the associated account will be immediately suspended, all game history voided, and any balance returned to the deposit source. All personal data associated with the underage individual will be deleted from goerya's systems as promptly as technically feasible, subject to any retention obligations under applicable law.

Parents and guardians who believe a minor has accessed or registered on the goerya platform should contact [email protected] immediately for expedited account closure and data deletion.

14. Changes to This Privacy Policy

goerya reserves the right to update or revise this Privacy Policy at any time to reflect changes in law, regulatory requirements, platform features, or data processing practices. When material changes are made, goerya will:

• Update the "Last Updated" date at the top of this page.
• Publish the revised Policy at goerya.cam/privacy-policy.
• Notify registered players of material changes via their registered mobile number or email address, where the changes significantly affect their data rights.

Continued use of the goerya platform following publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with a material change, you have the right to close your account and request deletion of your data subject to applicable retention obligations. The current version of this Policy is always available at goerya.cam/privacy-policy.

15. Contact & Privacy Complaints

For any questions about this Privacy Policy, to exercise your data subject rights, or to report a privacy concern, contact goerya using the details below.

This Privacy Policy was last reviewed and updated on January 1, 2026. The most current version is always available at goerya.cam/privacy-policy.