26gl Casino Privacy
Policy

Introduction

This Privacy Policy ("Policy") describes how 26gl Casino ("26gl", "we", "us", "our"), operator of the online gaming platform at https://26gl.net, collects, processes, stores, and protects personal data provided by or about users ("you", "Player", "Data Subject") of the Platform.

26gl operates as a Personal Information Controller (PIC) as defined under the Philippine Data Privacy Act of 2012 (RA 10173). We take our obligations under Philippine data protection law seriously and have implemented organisational and technical measures proportionate to the nature of the personal data we hold.

By creating a 26gl account or otherwise using the Platform, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside the Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your use of 26gl.

Personal Data We Collect

26gl collects personal data through multiple channels: directly from you during registration and account use, automatically through your interaction with the Platform, and from third parties such as payment processors and game providers. The categories of data we collect include:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Residential address (including barangay, city, province, and postal code)
• Email address and mobile number
• Username and encrypted password
• Government-issued ID type and number (for KYC verification)

2.2 Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps
• Payment method details (GCash mobile number, Maya account name, bank account name and last four digits — full card or account numbers are never stored by 26gl)
• Transaction reference numbers issued by payment processors
• Account wallet balance history

2.3 KYC Verification Documents

• Scanned or photographed copies of government-issued photo ID (Philippine passport, SSS ID, UMID, driver's licence, PhilSys National ID)
• Proof of address documents (utility bills, bank statements dated within three months)
• Selfie photographs taken for identity confirmation purposes
• Proof of payment method ownership where required

2.4 Usage & Technical Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session duration, login timestamps, and pages visited
• Game play history including bets placed, games accessed, and outcomes
• Click-stream data and navigation patterns within the Platform

2.5 Communications Data

• Contents of support chat conversations and email correspondence with 26gl
• Feedback and survey responses submitted voluntarily
• Promotional opt-in or opt-out preferences

How We Use Your Personal Data

26gl uses the personal data it collects for the following purposes:

26gl will not use your personal data for purposes incompatible with those listed above without first obtaining your explicit consent or unless required to do so by Philippine law.

Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 26gl processes your personal data on the following legal grounds:

• Contractual Necessity: Processing your registration data, KYC documents, and transaction data is necessary to perform the contract between you and 26gl — i.e., to operate your account and provide gaming services.
• Legal Obligation: 26gl is required by PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and related Philippine regulations to collect and retain identity and transaction data. Compliance with these laws is a non-negotiable processing basis.
• Legitimate Interests: 26gl processes usage and technical data to maintain platform security, detect fraud, and improve the quality of the gaming experience. These processing activities serve 26gl's legitimate business interests in a manner that does not override your fundamental rights.
• Consent: Where 26gl wishes to send you personalised promotional communications or use non-essential cookies and tracking technologies, we will seek your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

26gl does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data may be shared in the following limited circumstances:

5.1 Service Providers and Partners

26gl shares personal data with third-party service providers who process data on our behalf under strict data processing agreements. These include:

• Payment processors: GCash (Mynt), Maya (PayMaya Philippines), GrabPay, BPI, BDO, Metrobank, and card networks as needed to process your transactions.
• Game providers: Pragmatic Play, PG Soft, JILI Gaming, Evolution Gaming, Habanero, and Spadegaming receive anonymised session tokens necessary to deliver game content. These providers do not receive your full identity data.
• KYC verification services: Third-party identity verification providers that assist in validating government-issued IDs and proof of address documents.
• Cloud infrastructure providers: Data hosting and technical infrastructure partners operating under confidentiality obligations.

5.2 Regulatory and Law Enforcement Authorities

26gl is obligated under Philippine law to disclose personal data to:

• PAGCOR — as our licensing and regulatory authority for online gaming compliance reporting.
• Anti-Money Laundering Council (AMLC) — for Suspicious Transaction Reports (STRs) and Covered Transaction Reports (CTRs) as required under the AMLA.
• National Privacy Commission (NPC) — in the event of a data breach notification obligation or regulatory inquiry.
• Philippine courts and law enforcement — where compelled by a valid court order, subpoena, or legal process.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of 26gl's assets, your personal data may be transferred to the successor entity. You will be notified in advance of any such transfer and the Privacy Policy governing your data post-transfer.

Cookies & Tracking Technologies

26gl uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies we use include:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including session management, login state, and security tokens. These cannot be disabled without breaking core Platform functionality.
• Performance & Analytics Cookies: Used to understand how players navigate the Platform, which games are most popular, and where technical errors occur. Data collected is aggregated and anonymised where possible.
• Functionality Cookies: Remember your preferences such as language settings, preferred payment method, and UI customisations between sessions.
• Marketing Cookies (Consent Required): Used to deliver personalised promotional content and measure the effectiveness of marketing campaigns. These are only activated with your explicit consent and can be withdrawn at any time through your account privacy settings.

You can manage your cookie preferences through the Cookie Settings panel accessible in your account dashboard. Blocking strictly necessary cookies will affect your ability to use the Platform.

Data Retention

26gl retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by Philippine law:

• Active account data: Retained for the duration of your account's active status on the Platform.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and the AMLA.
• Transaction records: Retained for a minimum of five (5) years in compliance with AMLC record-keeping requirements.
• Customer support communications: Retained for three (3) years following the closure of a support interaction, or longer if the matter relates to an ongoing dispute or investigation.
• Marketing preference data: Retained until you withdraw consent or close your account, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked back to you as an individual.

Data Security

26gl implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and 26gl servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 and above).
• At-Rest Encryption: Sensitive personal data stored on 26gl servers — including KYC documents and payment details — is encrypted at rest using AES-256 encryption.
• Access Controls: Personal data is accessible only to authorised 26gl personnel on a strict need-to-know basis. All staff with access to personal data undergo data protection training.
• Two-Factor Authentication: 26gl offers SMS OTP two-factor authentication for player accounts. We strongly recommend enabling 2FA to protect your account from unauthorised access.
• Penetration Testing: 26gl conducts regular vulnerability assessments and penetration tests of the Platform's infrastructure.
• Incident Response: In the event of a personal data breach, 26gl will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay where the breach is likely to result in harm.

Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 26gl:

• Right to Be Informed: You have the right to be informed about how your personal data is being collected and processed. This Privacy Policy fulfils that obligation.
• Right to Access: You may request a copy of the personal data 26gl holds about you, along with information about how it is being processed.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request correction. You can update most registration details directly within your 26gl account settings.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations (e.g., KYC and AML requirements).
• Right to Data Portability: You may request that 26gl provide your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You can also object to processing based on legitimate interests where your individual circumstances warrant.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications or non-essential cookies), you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of the above rights, submit a written request to [email protected] from the email address registered to your 26gl account. We will respond within fifteen (15) business days of receiving a valid request. We may ask for additional verification to confirm your identity before processing sensitive data requests.

Children & Minors

26gl Casino is strictly intended for adults aged 21 years and above, in compliance with PAGCOR regulations governing online gaming in the Philippines. We do not knowingly collect personal data from individuals under the age of 21.

Age verification is a mandatory step in the 26gl registration and KYC process. Where 26gl discovers or reasonably suspects that a registered account belongs to a person under the age of 21, the account will be immediately suspended, all transactions will be reversed where possible, and any data collected from the minor will be securely deleted.

International Data Transfers

Some of the third-party service providers used by 26gl — particularly game content providers and cloud infrastructure partners — may process personal data outside the Philippines. Where personal data is transferred to a country that does not offer an equivalent level of data protection to that provided under Philippine law, 26gl ensures appropriate safeguards are in place, including:

• Contractual clauses in data processing agreements that require recipients to protect personal data to a standard consistent with the Philippine Data Privacy Act.
• Verification that the recipient country or organisation operates under a privacy framework recognised as adequate by the National Privacy Commission.
• Where required, obtaining your explicit consent to the international transfer before it takes place.

You may request details of the safeguards 26gl has in place for specific international transfers by contacting our Data Protection Officer at [email protected].

Third-Party Links

The 26gl Platform may contain references to third-party services such as payment gateways or game provider studios. When you navigate away from the 26gl Platform to a third-party service, that service's own privacy policy governs the collection and use of your data. 26gl is not responsible for the privacy practices of third-party services and recommends that you review their policies before submitting personal data to them.

Updates to This Privacy Policy

26gl reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform functionality. When material changes are made, we will:

• Display a prominent notice on the 26gl Platform for a minimum of fourteen (14) days prior to the changes taking effect.
• Send an email notification to all registered players at the email address on file.
• Update the "Last Updated" date at the top of this Policy.

Your continued use of the Platform following the effective date of any updated Policy constitutes your acknowledgement of the revised terms. If you do not agree with the updated Policy, you may close your account in accordance with the Terms & Conditions.

Contact Us & Data Protection Officer

26gl Casino has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests regarding your personal data, please reach out through the following channels:

• Email: [email protected]
• Subject Line: Include "Privacy Request" or "Data Rights" in the subject of your email to ensure it is routed to the DPO team promptly.
• Live Chat: Available 24/7 through the support widget on the 26gl Platform for general inquiries.
• Response Time: Data rights requests are responded to within fifteen (15) business days. General privacy inquiries are typically addressed within three (3) business days.

You also have the right to escalate unresolved data protection concerns directly to the National Privacy Commission of the Philippines via their official channels.