Privacy Notice

Introduction

We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your personal data when you engage with our online gaming services. It is designed to comply with relevant laws and regulations governing data protection and online gaming in the Philippines. By accessing or using our services, you consent to the terms set forth in this Privacy Policy.

1. Information We Collect

2. Protection of Minors

This online gaming service is designed for customers 21 and above. By using this browser or related services, users confirm and represent that they are at least 21 years old.

3. Use of Information

We use the personal data we collect for various purposes, including:

4. Sharing Your Information

We may need to share or disclose some of your personal data under certain circumstances. In such cases, we ensure that your personal data is disclosed on a confidential basis, and always subject to the applicable rules and regulations of the Data Privacy Act. This may include sharing your personal data with:

• Service Providers — Third-party vendors who help us with payment processing, customer support, data analysis, and security. For more details, please follow this link .
• Regulatory Authorities — When legally required or in response to legal requests, we may disclose information to government agencies or regulatory bodies.
• Affiliates — Entities within our corporate group, to provide consistent and improved services across our platforms.

5. Data Security

We have established appropriate technical, organizational and physical security measures to safeguard your personal data from unauthorized access, modification, accidental access or disclosure, loss, or misuse. These security measures include encryption, secure socket layer (SSL) technology, firewalls, and regular security assessments.

6. Data Retention

We will retain your personal data for ten (10) years following the completion and fulfillment of any contract or transaction. If there is no existing contract or transaction, we will keep the personal data for ten (10) years as well. Additionally, we retain personal data for the duration required by applicable laws and regulations. Once the retention period has expired, your personal data will be securely deleted or anonymized, either by removing electronic files from our databases or through other methods that prevent further processing.

7. Your Rights

Under the Data Privacy Act of 2012, you have certain rights concerning your personal data, including the right to object to processing, access your data, correct inaccuracies, and request the erasure or blocking of your data.

If you believe your personal information has been misused, improperly disclosed, or improperly disposed of, or if any of your data privacy rights have been violated, you have the right to file a complaint with the National Privacy Commission. You may also seek damages for inaccuracies, incompleteness, outdated information, false data, unlawful acquisition, or unauthorized use of your personal information.

To access your personal information in our records, correct any inaccuracies, or opt out of this privacy policy, please contact our Data Privacy Officer using the contact details provided below.

8. International Data Transfers

Your information may be transferred to, and processed in, countries other than the country in which you reside. These countries may have data protection laws that differ from your country’s laws. We take appropriate measures to ensure that your personal data remains protected.

9. Third-Party Links

We may include links to third-party websites or advertisements that direct you to other sites. These links are provided solely for your convenience, and we do not share any personal data with these third parties. As such, we are not responsible for the privacy practices or the content of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. California Consumer Privacy Act (CCPA)

For any Personal Data subject to the CCPA, GRUTA shall not:

1. sell the Personal Data;
2. retain, use, or disclose the Personal Data for any purpose other than for the specific purpose of performing the transactions or services; or
3. retain, use, or disclose the information outside of the direct business relationship between the parties.

GRUTA certifies that it understands and complies with its obligations under the CCPA.

11. Changes to This Privacy Policy

We may revise this Privacy Policy periodically to address changes in legal, technical, or business circumstances. We will notify you of significant updates either through our website or directly via email. We encourage users to review the Privacy Policy regularly to stay informed about any changes. Please note that changes will not apply retroactively and will not affect the handling of personal data collected before the update without your consent, except as required by law. By continuing to use our services after changes are made, you agree to the updated policy.

12. How to Exercise Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following data privacy rights:

1. Right to be informed;
2. Right to rectify or correct erroneous data;
3. Right to erasure or blocking;
4. Right to access;
5. Right to object;
6. Right to data portability;
7. Right to be indemnified for damages; and
8. Right to file a complaint.

As a data subject, you have the right to have reasonable control over the flow of your Personal Data. You may exercise your data subject rights personally or you may authorize another person to exercise them on your behalf, as long as you provide specific authorization that is supported by appropriate documents, i.e. Special Power of Attorney, etc.

Your data subject rights are transmissible. In case of death, or incapacity of the data subject, his or her lawful heirs may exercise said rights.

If you would like information on whether GRUTA holds any Personal Data about you, and the purpose/s for which they are processed, kindly fill out and submit the Access Request Form.

If you would like to suspend/stop the processing, remove, erase, or correct your Personal Data, kindly fill out and submit the Request for Correction and Erasure Form.

In case you have any other inquiry, concern, complaint, or claim for damages or compensation with respect to your data privacy rights or Personal Data, you should accomplish and submit the Inquiry Complaint Form provided below.

You may also lodge a complaint before the National Privacy Commission (NPC). For further details, please refer to NPC’s website:

privacy.gov.ph/mechanics-for-complaints .

If your Personal Data was: (a) processed on the basis of consent or contract; and (b) processed by electronic means and in a structured and commonly used format, you may request a copy thereof if you intend to move or transfer it to another personal information controller by sending an email to the address provided below.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection Officer at:

Email: [email protected]

14. Legal Disclaimer

While we strive to protect your privacy, we cannot guarantee absolute security. Your use of our services is at your own risk, and we encourage you to take appropriate measures to protect your data.

15. Jurisdiction and Applicable Law

This Privacy Policy is governed by the laws of the Philippines. Any disputes arising from this policy, or the use of our services will be subject to the exclusive jurisdiction of the courts in the Philippines.