GoJokpot Privacy Policy – How We Protect Your Personal Data

By registering an account on GoJokpot or by continuing to use our website or services, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree to this Privacy Policy, please do not register an account or use our services.

GoJokpot has appointed a Data Protection Officer (DPO) in compliance with RA 10173. The DPO is responsible for ensuring that GoJokpot processes all personal data in a lawful, fair, and transparent manner. Contact details for the DPO are provided at the end of this Policy.

This Policy applies to all personal data processed by GoJokpot, whether collected directly from you through our website, mobile browser, customer support interactions, or indirectly through our payment partners and analytics tools.

Registration Data: When you create a GoJokpot account, we collect your full legal name, email address, Philippine mobile number, date of birth, and a username. This data is required to create and verify your account identity under PAGCOR's Know Your Customer (KYC) requirements.

Identity Verification Documents: As part of KYC compliance mandated by PAGCOR and the Anti-Money Laundering Act (AMLA), we may collect copies of government-issued identification such as a Philippine National ID, passport, or driver's license. These documents are processed solely for identity verification and regulatory compliance purposes.

Financial Data: We collect your preferred payment method details — such as your registered GCash mobile number, Maya account, or bank account number — to process deposits and withdrawals in Philippine Peso. GoJokpot does not store full card numbers or CVV codes. Card data for Visa/Mastercard transactions is handled directly by our PCI-DSS compliant payment processor.

Transaction & Betting History: We maintain records of all deposits, withdrawals, bets placed, games played, and promotional credits claimed. This data is required for account management, dispute resolution, bonus tracking, and PAGCOR regulatory reporting.

Technical & Device Data: We automatically collect technical data when you access GoJokpot, including your IP address, browser type and version, device type, operating system, session timestamps, and referring URL. This data helps us secure accounts, detect fraud, and improve the platform's performance for Filipino users.

Communications Data: If you contact GoJokpot's customer support team, we retain records of the conversation — whether via email, live chat, or other channels — for quality assurance, dispute resolution, and staff training purposes. Support conversations are retained for up to 2 years.

Responsible Gaming Data: If you use our responsible gaming tools — such as deposit limits, self-exclusion, or session time alerts — we record these preferences and maintain a history of any self-exclusion periods you have set. This data is protected with additional access restrictions within our systems.

GoJokpot does not use your personal data for automated decision-making that produces legal or significant effects without human review. For example, account suspension decisions are reviewed by a human compliance officer before being enforced, even when automated monitoring flags an account for review.

If you have opted in to promotional communications, GoJokpot may send you information about new games, promotions, and offers relevant to your activity on the platform. You can opt out of these communications at any time by updating your notification preferences in account settings or by contacting our support team.

Payment Processors: To facilitate your deposits and withdrawals, GoJokpot shares the minimum necessary financial data with payment service providers such as GCash, Maya, and payment gateway operators. These providers process your transaction data under their own privacy policies and are themselves bound by Philippine financial regulatory requirements.

Regulatory Authorities: GoJokpot is legally required to share player data — including transaction records and identity information — with PAGCOR and the Anti-Money Laundering Council (AMLC) when requested in the exercise of their lawful regulatory and enforcement powers. We cannot decline these requests.

Fraud Prevention Services: GoJokpot uses third-party fraud detection services that analyze certain patterns in account activity and device data to flag potentially fraudulent behavior. These services receive anonymized or pseudonymized data and are contractually prohibited from using it for any purpose other than fraud detection for GoJokpot.

Live Casino Content Providers: When you play live casino games hosted by third-party studio providers, certain session data — such as game actions and results — is processed by those providers to operate the game. This does not include your full personal profile unless expressly required for the game's operation.

Law Enforcement: GoJokpot will disclose personal data to law enforcement agencies when required by a valid court order, subpoena, or when we believe disclosure is necessary to prevent serious harm to persons or property. We will notify you of such disclosures where legally permitted to do so.

GoJokpot does not use cross-site tracking cookies that follow your activity on other websites or platforms. Our cookies are limited to activity within the gojokpot.com domain.

256-bit SSL Encryption: All data transmitted between your browser or mobile device and GoJokpot's servers is encrypted using industry-standard 256-bit SSL/TLS. This means your personal data, payment details, and betting activity cannot be intercepted in transit.

Data Encryption at Rest: Sensitive data stored in GoJokpot's databases — including KYC documents and financial records — is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data.

Access Controls: Access to player personal data within GoJokpot is strictly role-based. Only staff with a documented operational need can access specific data categories, and all access is logged and audited. Customer support agents cannot view your payment card details or full ID document scans.

Two-Factor Authentication: Players are encouraged to enable 2FA on their GoJokpot accounts. This significantly reduces the risk of unauthorized account access even if your password is compromised. GoJokpot staff accounts are required to use 2FA by policy.

Data Breach Response: GoJokpot maintains a documented data breach response plan. In the event of a personal data breach that poses a real risk to players, GoJokpot will notify affected players and the National Privacy Commission within 72 hours of becoming aware of the breach, in compliance with NPC Circular 16-03.

GoJokpot retains personal data only for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable Philippine law. The retention periods for different categories of data are determined by the most demanding applicable legal requirement.

Account and Transaction Data: Retained for a minimum of 5 years after your account is closed, as required by PAGCOR licensing conditions and the Anti-Money Laundering Act (RA 9160 as amended). After this period, data is securely deleted or anonymized.

KYC Documents: Retained for 5 years from the date of verification or from the date of account closure, whichever is later — consistent with AMLA reporting obligations.

Support Communications: Retained for 2 years from the date of the interaction for quality assurance and dispute resolution purposes.

Analytics and Technical Data: Retained in identifiable form for a maximum of 13 months, after which it is anonymized and may be retained indefinitely for aggregate statistical purposes.

When personal data is no longer required for retention, GoJokpot uses secure deletion methods that prevent recovery. Physical documents are shredded; digital data is overwritten using industry-standard secure deletion procedures.

GoJokpot strictly prohibits the use of our platform by individuals under 21 years of age. We do not knowingly collect personal data from minors. If GoJokpot becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all data related to the account will be flagged for regulatory review, and the matter will be reported to PAGCOR.

If you are a parent or legal guardian and believe that your child or a minor under your care has created a GoJokpot account or that their personal data has been collected by us in error, please contact our Data Protection Officer at privacy@gojokpot.com immediately. We will take immediate action to close the account and delete the associated data to the maximum extent permitted by law.

GoJokpot primarily stores and processes personal data within the Philippines. In limited circumstances, data may be processed by third-party service providers located outside the Philippines — for example, international fraud detection services or cloud infrastructure providers with nodes in other countries.

Any cross-border transfer of personal data is conducted in compliance with NPC Circular 16-01 on Cross-Border Transfer of Personal Data. Before transferring data outside the Philippines, GoJokpot ensures that the recipient country provides an adequate level of data protection, or that appropriate contractual safeguards are in place, including standard data protection clauses approved by the NPC.

GoJokpot does not transfer personal data to jurisdictions on the NPC's list of countries with inadequate data protection standards without additional approved safeguards. A complete list of third-party processors and their jurisdictions is available from our Data Protection Officer upon written request.

GoJokpot may update this Privacy Policy from time to time to reflect changes in Philippine law, NPC guidance, PAGCOR requirements, or the way we operate. The date of the most recent revision is always shown at the top of this page.

When we make material changes — those that meaningfully affect how we collect or use your personal data — we will notify all registered players by email and via an in-platform notification at least 7 days before the changes take effect. For minor or clarificatory changes, we may post an updated version without direct notification.

Your continued use of GoJokpot after a revised Privacy Policy takes effect constitutes your acknowledgment of the changes. If you do not agree with a material change, you have the right to close your account before the effective date. GoJokpot will return any real money balance to your registered payment method upon voluntary account closure.