Privacy Policy — 55g.com

This Privacy Policy describes how 55g.com (referred to as "55g.com", "the Company", "we", "us", or "our") collects, processes, stores, shares, and protects the personal data of individuals who access or use the 55g.com online gaming platform located at 55gcom.net ("the Platform"), including all games, features, and services made available thereon.

55g.com is a platform designed primarily for English-speaking Filipino players and operates under the regulatory framework applicable to online gaming in the Philippines. We are committed to handling your personal data responsibly, lawfully, and transparently, in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), and the Implementing Rules and Regulations promulgated thereunder by the National Privacy Commission (NPC) of the Philippines.

By creating an account, accessing, or using 55g.com in any manner, you acknowledge that you have read and understood this Privacy Policy, and you consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this policy, you should cease using the 55g.com platform and contact us to arrange account closure.

For the purposes of the Data Privacy Act of 2012 and all applicable Philippine data protection regulations, the data controller responsible for your personal data is the operator of 55g.com. As the data controller, 55g.com determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable law.

55g.com has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection legislation. The DPO may be contacted using the details provided in Section 16 of this policy. Players and data subjects who wish to exercise their rights, submit a complaint, or seek clarification regarding the processing of their personal data should direct their communications to the DPO in the first instance.

55g.com collects personal data in three principal ways: data provided directly by you, data generated through your use of the platform, and data received from third parties in connection with account verification and payment processing. The categories of personal data we collect include:

We do not intentionally collect or process sensitive personal information (as defined under Section 3(l) of the DPA) such as race, religion, health, genetic, or biometric data, except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request, in which case such information is processed solely for the purpose of managing that request.

55g.com processes your personal data on the following lawful bases as recognised under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract between 55g.com and the player — including account creation, game operation, deposits, withdrawals, and customer support;
• Legal obligation: Processing required to comply with Philippine legal obligations — including PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA) requirements, KYC mandates, and tax reporting obligations;
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — including the sending of direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal;
• Legitimate interests: Processing necessary for the legitimate interests of 55g.com, where such interests are not overridden by your fundamental rights and freedoms — including fraud prevention, platform security, and aggregate analytics for product improvement.

55g.com uses the personal data collected for the following purposes, each of which is tied to a lawful basis identified in Section 4:

• Account management: Creating and maintaining your 55g.com player account, authenticating logins, and managing account settings;
• Service delivery: Enabling participation in all games, sports betting markets, and promotional activities available on the platform;
• Payment processing: Facilitating deposits via GCash, PayMaya, and Philippine banking channels; processing withdrawal requests to verified payment methods; maintaining transaction records;
• Regulatory compliance: Conducting age verification and KYC procedures; fulfilling reporting obligations to PAGCOR and the Anti-Money Laundering Council (AMLC); maintaining mandatory records under Philippine gaming law;
• Responsible gaming: Monitoring for indicators of problem gambling; administering player-requested deposit limits, loss limits, and self-exclusion programmes; complying with PAGCOR's responsible gaming framework;
• Fraud prevention and security: Detecting and investigating fraudulent activity, money laundering, bonus abuse, and unauthorised account access; maintaining the integrity of the platform;
• Customer support: Processing and responding to player queries, complaints, and dispute submissions;
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have consented to receive such communications;
• Platform improvement: Analysing aggregated, anonymised usage data to improve the 55g.com user experience, game library, and technical performance.

55g.com does not sell, rent, or trade your personal data to third parties for their own independent commercial or marketing purposes. Personal data is shared with third parties only in the following circumstances and subject to the limitations described:

• Payment service providers: GCash (G-Xchange Inc.), PayMaya (Voyager Innovations), and Philippine banking partners receive the minimum data necessary to process deposit and withdrawal transactions on your behalf. These providers are bound by their own privacy policies and Philippine financial data regulations;
• Game software providers: Third-party game studios and live casino studio operators (including Jili, PG Soft, Spadegaming, and live dealer studio operators) receive anonymised player session identifiers necessary for game integrity and RNG certification — they do not receive your full identity data;
• KYC and identity verification providers: Third-party identity verification services process your submitted documents for the purpose of confirming your identity and age. These providers operate under data processing agreements with 55g.com and are prohibited from using your data for any other purpose;
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine governmental authorities, pursuant to lawful orders, regulatory requirements, or mandatory reporting obligations;
• Legal and professional advisers: Lawyers, auditors, and compliance consultants engaged by 55g.com, subject to professional confidentiality obligations;
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the Company's business, your personal data may be transferred to the successor entity, subject to the same privacy protections as described in this policy. Players will be notified of any such transfer in advance.

55g.com uses cookies and similar tracking technologies to operate the platform, personalise your experience, and analyse aggregate usage patterns. The types of cookies used on the 55g.com platform include:

• Strictly necessary cookies: Required for the platform to function — including session authentication tokens, load balancer assignments, and security cookies. These cannot be disabled without preventing use of the platform;
• Functional cookies: Remember your preferences, such as display language, last visited game category, and notification settings. These improve your experience but are not essential;
• Analytics cookies: Collect aggregated, anonymised data about how players navigate and interact with the 55g.com platform. This data is used solely for internal product improvement and is not linked to your individual identity;
• Responsible gaming cookies: Track session duration and certain activity thresholds for the purpose of delivering responsible gaming interventions such as session reminders and reality checks.

You may manage non-essential cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from using the 55g.com platform. 55g.com does not use third-party advertising or retargeting cookies.

55g.com retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, accounting, or reporting requirements. Specific retention periods applicable at 55g.com are as follows:

• Active account data (identity, contact, financial, gaming activity): Retained for the duration of the active account relationship plus five (5) years following account closure, in compliance with PAGCOR licensing requirements and the Anti-Money Laundering Act;
• KYC and verification documents (ID copies, selfies, proof of address): Retained for five (5) years from the date of submission, consistent with AMLA record-keeping obligations;
• Transaction records (deposits, withdrawals, bet history): Retained for five (5) years from the date of the transaction;
• Customer support communications: Retained for two (2) years from the date of the last communication in a given support thread;
• Marketing consent records: Retained for the duration of the marketing relationship plus three (3) years as evidence of consent;
• Technical logs (IP addresses, login timestamps, session data): Retained for twelve (12) months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to a specific individual. Where deletion is not technically feasible for specific data sets (e.g., backup archives), the data is isolated and protected from further active processing until deletion becomes possible.

55g.com implements a comprehensive set of technical, organisational, and administrative security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Key security measures in place include:

• Encryption in transit: All data transmitted between your device and 55g.com servers is encrypted using TLS 1.3 (Transport Layer Security), the current industry standard for secure web communications;
• Encryption at rest: Personal data stored in 55g.com databases and backup systems is encrypted using AES-256, ensuring that data is unreadable even in the event of a physical storage compromise;
• Access controls: Access to personal data within 55g.com's internal systems is restricted on a role-based, need-to-know basis. Staff members can only access the categories of personal data required for their specific job functions;
• Password hashing: Account passwords are never stored in plain text — they are processed using a one-way cryptographic hashing algorithm with salting, meaning the Company cannot recover or view your password;
• Multi-factor authentication: Internal systems containing personal data require multi-factor authentication for all staff access. Players are encouraged to enable two-factor authentication on their own accounts;
• Regular security audits: The 55g.com platform and its data processing infrastructure are subject to regular penetration testing and security audits by qualified independent security professionals;
• Employee training: All 55g.com personnel with access to personal data receive mandatory data protection training upon onboarding and on an annual basis thereafter.

While 55g.com implements robust security measures, no online system can guarantee absolute security. In the event that your account security is compromised as a result of circumstances within your control (such as sharing your password), 55g.com's liability is limited as described in the Terms & Conditions.

Under the Data Privacy Act of 2012 (RA 10173) of the Philippines, you have the following rights with respect to your personal data held by 55g.com:

To exercise any of these rights, contact the 55g.com Data Protection Officer using the details in Section 16. 55g.com will respond to all data subject requests within fifteen (15) business days of receipt. In some cases, additional time may be required for complex requests — you will be notified of any extension and the reason therefor.

The 55g.com platform is strictly prohibited for individuals under 21 years of age, in accordance with PAGCOR's minimum age requirements for online gambling in the Philippines. 55g.com does not knowingly collect or process personal data relating to individuals under the age of 21.

Age verification is conducted during the registration process and as part of the KYC procedure. Where 55g.com identifies or suspects that an account holder may be under 21 years of age, the account will be immediately suspended pending identity verification, and any funds deposited will be returned to the originating payment method following the completion of the investigation.

If you have reason to believe that a minor has registered on 55g.com or that personal data of a minor has been collected by the platform, please contact the Data Protection Officer immediately using the details provided in Section 16. 55g.com will investigate and take prompt corrective action.

55g.com may send marketing communications — including information about bonuses, promotions, new game launches, and platform updates — to players who have given their explicit consent to receive such communications at the time of registration or subsequently via account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences in your 55g.com account settings;
• Clicking the unsubscribe link included in any marketing email sent by 55g.com;
• Contacting 55g.com customer support and requesting removal from marketing communications.

Withdrawal of consent for marketing communications does not affect the sending of service-related communications that are necessary for account management, security notifications, or the fulfilment of regulatory obligations — these will continue regardless of your marketing preference settings.

55g.com does not share your contact details with third parties for their own marketing purposes. All marketing communications originate from 55g.com directly.

In the course of operating the 55g.com platform, personal data may be transferred to and processed in countries other than the Philippines — for example, in connection with live casino studio operations, cloud hosting infrastructure, or game software providers located in other jurisdictions.

Where personal data is transferred outside the Philippines, 55g.com ensures that such transfers are conducted in compliance with the Data Privacy Act of 2012 and NPC regulations on cross-border data flows. Safeguards in place for international transfers include:

• Standard Contractual Clauses (SCCs) or equivalent binding agreements with overseas recipients;
• Transfers only to countries or organisations that provide an adequate level of data protection as assessed by the NPC or 55g.com's compliance team;
• Data processing agreements that impose the same data protection obligations as would apply if the processing took place in the Philippines.

You may contact the Data Protection Officer to obtain further information about the specific safeguards in place for any particular international data transfer affecting your personal data.

In the event of a personal data breach that is likely to result in a real risk of serious harm to affected data subjects, 55g.com will comply with its notification obligations under the Data Privacy Act of 2012 and NPC Circular No. 16-03, which require:

• Notification to the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach;
• Direct notification to affected players without undue delay, where the breach is likely to result in a high risk to their rights and freedoms.

Breach notifications to affected players will be sent to the registered email address or mobile number on their 55g.com account and will include: a description of the nature of the breach, the categories and approximate number of data subjects affected, the likely consequences of the breach, and the measures taken or proposed to address it.

If you suspect that your 55g.com account has been compromised, you should change your password immediately and contact 55g.com support via live chat. Do not wait for an official notification — prompt action minimises potential harm.

55g.com reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Material changes to this policy will be communicated to registered players via email to their registered address and/or by a prominent notice on the 55g.com platform, at least 14 days before the revised policy takes effect.

The effective date of the current version of this Privacy Policy is stated at the top of the document. Your continued use of 55g.com after the effective date of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised policy, you should cease using the platform and contact support to arrange account closure before the changes take effect.

We recommend bookmarking this page and reviewing the Privacy Policy periodically. The current version will always be accessible at 55gcom.net/privacy-policy.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 55g.com, please contact us through the following channels:

• Data Protection Officer (DPO) Email: [email protected] — include "Privacy / DPO Request" in the subject line
• General Support Email: [email protected]
• Live Chat: Available 24/7 through the chat widget on the 55g.com platform
• Support Hours: 24 hours a day, 7 days a week, Philippine Standard Time (PST / UTC+8)

If you are not satisfied with 55g.com's response to your privacy concern or data subject rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines:

• National Privacy Commission (NPC): 5th Floor, Delegation Building, PICC Complex, Pasay City, Philippines — privacy.gov.ph (note: do not navigate to this address from this page — refer to the NPC's own communications)