Privacy Policy

01 Introduction

gokens ("gokens," "we," "us," or "our") operates the online gaming platform accessible at gokens.net (the "Platform"). As the personal information controller of the data you provide to us, gokens takes its obligations under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations ("IRR") seriously.

This Privacy Policy ("Policy") describes how gokens collects, uses, stores, discloses, and protects the personal information of individuals ("you," "your," or "Data Subject") who access or use the Platform, including registered account holders and visitors. It also describes the rights you have as a data subject under Philippine law and how you can exercise those rights.

This Policy should be read together with the gokens Terms & Conditions, which govern your use of the Platform. By registering an account or using any gokens service, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

02 Personal Data We Collect

gokens collects the following categories of personal data, depending on how you interact with the Platform:

2.1 Identity & Contact Information

• Full legal name as it appears on your government-issued ID
• Date of birth (for age verification — you must be 21 or older)
• Nationality and country of residence
• Residential address (barangay, city/municipality, province)
• Email address
• Mobile phone number (Philippine mobile number required for OTP verification)

2.2 Identity Verification Documents

• Copies of government-issued identification documents submitted for KYC verification, which may include: SSS card, PhilHealth ID, driver's license, Philippine passport, UMID, or Postal ID
• Proof of address documents where required
• Source-of-funds documentation where required by anti-money laundering regulations

2.3 Financial Information

• Payment method details (GCash account reference, PayMaya/Maya account reference, bank account details for BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank, or debit card details)
• Transaction history, including deposits, withdrawals, and gaming activity
• Account balance information

2.4 Gaming & Platform Activity Data

• Game history, bet amounts, win/loss records, and session duration
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)
• Customer support interaction records

2.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type
• Session timestamps and login history
• Cookies and similar tracking technologies (see Section 7)

03 How We Collect Your Data

gokens collects personal data through the following means:

• Account Registration: Information you provide when creating your gokens account, including name, date of birth, contact details, and preferred payment method.
• KYC Verification: Identity documents and supporting materials you submit to complete the Know Your Customer verification process.
• Platform Use: Data generated automatically as you navigate and interact with the gokens Platform, including game play, deposits, withdrawals, and support interactions.
• Payment Transactions: Financial data shared with gokens by our certified payment processing partners when you make a deposit or withdrawal.
• Cookies & Tracking Technologies: Data collected automatically via cookies, web beacons, and similar technologies when you visit the Platform (see Section 7).
• Communications: Information you provide when you contact gokens customer support via live chat, email, or any other channel.
• Third-Party Verification Services: Identity and fraud-check data returned by third-party KYC and anti-money laundering screening providers.

gokens does not purchase personal data from data brokers or any other third-party commercial data sources. All personal data we hold about you originates from your direct interactions with the Platform or from regulated service providers acting on our behalf.

04 How We Use Your Personal Data

gokens uses the personal data we collect for the following purposes:

gokens will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable Philippine law.

05 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, gokens processes your personal data on the following legal bases:

• Consent: Where you have given your explicit, informed, and freely given consent to the processing of your personal data for a specific purpose, such as receiving marketing communications or the processing of sensitive personal information.
• Contract Performance: Where processing is necessary for the performance of the contract between you and gokens — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Where processing is required to comply with applicable Philippine laws and regulations, including the Anti-Money Laundering Act (AMLA), the Data Privacy Act, PAGCOR regulatory requirements, and other applicable statutes.
• Legitimate Interest: Where processing is necessary for the legitimate interests of gokens, such as fraud prevention, platform security, and service improvement, provided that such interests are not overridden by your rights and freedoms as a data subject.

Where gokens relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

06 Data Sharing & Disclosure

gokens does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

6.1 Service Providers

gokens engages trusted third-party service providers who process personal data on our behalf under strict data processing agreements. These include payment processors (for GCash, Maya, and bank transfer transactions), KYC and identity verification providers, fraud detection and AML screening services, cloud hosting and infrastructure providers, and customer support platform providers. All service providers are contractually required to process personal data only on gokens's instructions and to maintain appropriate security measures.

6.2 Regulatory & Law Enforcement Authorities

gokens may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or other competent Philippine authorities where required to do so by law, court order, or regulatory directive.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of gokens's business, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer and the privacy practices of the successor entity prior to the transfer taking effect.

07 Cookies & Tracking Technologies

gokens uses cookies and similar tracking technologies on the Platform to ensure proper functionality, enhance your user experience, and gather analytics data that helps us improve our services. The following types of cookies may be used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences, such as language settings, responsible gaming tool configurations, and display preferences, so you do not need to re-enter them on each visit.
• Analytics Cookies: Collect aggregated, anonymised data about how users interact with the Platform — such as pages visited, session duration, and navigation paths — to help gokens identify areas for improvement.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use certain features of the gokens Platform, including account login and payment processing.

08 Data Retention

gokens retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLC record-keeping requirements.
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later, as required by the Anti-Money Laundering Act.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLC regulations.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing Preferences: Retained until you withdraw your consent or close your account, whichever occurs first.
• Technical & Log Data: Retained for up to twelve (12) months, unless required for longer periods for security investigations or legal proceedings.

Upon expiry of the applicable retention period, gokens will securely delete or anonymise your personal data in accordance with our internal data disposal procedures.

09 Data Security

gokens implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the gokens Platform
• Encryption of sensitive data at rest, including identity documents and financial information
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Multi-factor authentication for internal systems that process personal data
• Regular security assessments, vulnerability scanning, and penetration testing
• Incident response procedures for detecting, reporting, and managing personal data breaches
• Staff training on data privacy and security obligations under the Philippine DPA

While gokens takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your gokens account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

10 Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by gokens:

• Right to be Informed: The right to be informed of how your personal data is collected, used, stored, and disclosed — which is the primary purpose of this Privacy Policy.
• Right to Access: The right to request a copy of the personal data gokens holds about you, including information about the purposes for which it is processed and the recipients to whom it has been disclosed.
• Right to Rectification: The right to request correction of any inaccurate, incomplete, or outdated personal data we hold about you.
• Right to Erasure or Blocking: The right to request the deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful — subject to gokens's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interest.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe that gokens has violated your rights under the DPA.

To exercise any of the above rights, please contact the gokens Data Protection Officer using the contact details provided in Section 14. gokens will respond to all data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

11 Children's Privacy

The gokens Platform is strictly intended for individuals who are at least 21 years of age, in compliance with the minimum legal gambling age in the Philippines. gokens does not knowingly collect personal data from any person under the age of 21.

If gokens becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has provided personal data to gokens, please contact us immediately using the details in Section 14.

12 International Data Transfers

gokens primarily processes and stores personal data within the Philippines. Where it is necessary to transfer personal data to service providers or infrastructure located outside the Philippines — for example, cloud hosting services or international KYC verification providers — gokens ensures that such transfers are carried out in compliance with the Philippine Data Privacy Act and NPC guidelines on cross-border data transfers.

Specifically, gokens requires that any recipient of personal data outside the Philippines provides an adequate level of data protection, either through the existence of appropriate data transfer agreements, binding corporate rules, or the recipient country's recognition by the NPC as providing adequate protection for personal data.

You may request information about the specific safeguards in place for any international transfer of your personal data by contacting the gokens Data Protection Officer.

13 Changes to This Privacy Policy

gokens reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When material changes are made, gokens will notify registered users via the email address associated with their account and/or by displaying a prominent notice on the Platform prior to the changes taking effect.

The "Effective Date" at the top of this Policy indicates when it was last updated. We encourage you to review this Policy periodically to stay informed about how gokens protects your personal data. Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgment of the updated Policy.

If you do not agree with any changes to this Policy, you should cease using the Platform and may close your account in accordance with the gokens Terms & Conditions.

14 Contact & Data Protection Officer

gokens has appointed a Data Protection Officer (DPO) in compliance with Section 21 of the Philippine Data Privacy Act. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact:

If you are not satisfied with gokens's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines: