Gemzone Privacy Policy

1. Scope of This Policy

This Privacy Policy applies to all personal data collected by Gemzone in connection with your use of the platform at gemzone.org. It covers data collected during account registration, identity verification, gameplay, payment processing, and any interaction with our support team. By creating an account on Gemzone, you acknowledge that your personal data will be handled in accordance with this policy.

This policy should be read alongside the Terms and Conditions, which govern your overall use of the platform.

2. Personal Data We Collect

The data Gemzone collects falls into a few clear categories depending on your interaction with the platform:

Registration and Account Data

• Full name as it appears on your government-issued ID
• Date of birth (to verify the 21+ age requirement)
• Email address and account password (stored in hashed form)
• Mobile number, used for OTP authentication

Identity Verification (KYC) Data

• Scanned or photographed government-issued ID (UMID, Passport, Driver's License, Voter's ID, or other valid Philippine government ID)
• Proof of address document issued within the past three months
• Selfie photograph taken alongside your ID document

Payment and Transaction Data

• Philippine bank account name, bank name, and account number used for withdrawals
• GCash or Maya wallet account name and number used for withdrawals
• Transaction history including deposit amounts, withdrawal amounts, dates, and statuses

Platform Usage Data

• Device type, operating system, and browser version
• IP address and approximate location at time of access
• Pages visited, game sessions played, betting activity, and session durations

Support Communications

• Email correspondence between you and the Gemzone support team
• Content of any queries, complaints, or requests submitted

3. Why We Collect and Use Your Data

Gemzone uses your personal data for the following purposes:

• Operating your account — creating, maintaining, and securing your Gemzone account.
• Identity verification — confirming that you are 21 or older and that you are who you say you are, as required before withdrawals are processed.
• Processing payments — receiving deposits and sending withdrawal payouts to your nominated Philippine bank account or e-wallet in PHP.
• Platform security and fraud prevention — detecting unusual login activity, preventing multiple account creation, and identifying patterns associated with financial fraud or bonus abuse.
• Customer support — responding to your queries, resolving disputes, and processing account-related requests.
• Responsible gaming — monitoring account activity to identify potential signs of problematic play and making self-exclusion tools available where requested.
• Legal and regulatory obligations — retaining records as required by applicable law and responding to lawful requests from relevant authorities.

4. Sharing Your Data

Gemzone does not sell your personal data. Data may be shared with third parties only in the following circumstances:

• Payment processors — your payout details are shared with the relevant Philippine bank or e-wallet infrastructure solely to execute your withdrawal request. These providers handle data under their own security standards.
• KYC and identity verification services — identity documents may be processed through verification tools or reviewed by trained personnel to confirm authenticity.
• Technology and infrastructure providers — companies that provide hosting, database, or security services essential to running the platform may have access to data in the course of providing those services, under strict confidentiality obligations.
• Legal authorities — if required by law, court order, or a lawful regulatory request, Gemzone may disclose personal data to the relevant authority. We will notify you where permitted by law before doing so.

5. How We Protect Your Data

Data security is taken seriously at Gemzone. The following measures are in place:

• SSL encryption on all connections between your device and the platform, so data in transit cannot be intercepted.
• Password hashing — your account password is never stored in plain text. It is stored as a one-way cryptographic hash.
• OTP verification for sensitive account actions, adding a layer of authentication beyond your password.
• Restricted access to KYC documents and payment details — only authorised personnel who need this information to perform their role can access it.
• Session management — inactive sessions are timed out to reduce the risk of unauthorised access from shared or unattended devices.

While Gemzone applies strong security practices, no system is completely immune to risk. You also play a role in protecting your account by keeping your login credentials confidential and not sharing your OTP codes with anyone.

6. Data Retention

Gemzone retains personal data for as long as your account is active and for as long as required by applicable law or regulation after account closure. KYC documents and transaction records may be retained for a defined period following account closure to satisfy recordkeeping obligations. When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to you as an individual.

7. Cookies and Tracking

Gemzone uses cookies and similar technologies to keep you logged in, remember your preferences, and collect usage data that helps us improve the platform. This includes session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period).

You can manage cookie settings in your browser at any time. Note that disabling certain cookies may affect platform functionality — for example, disabling session cookies will prevent automatic login.

8. Your Rights Over Your Data

As a Gemzone account holder, you have the following rights regarding your personal data:

• Right of access — you can request a copy of the personal data Gemzone holds about you.
• Right to correction — if any personal data on file is inaccurate or outdated, you can request that it be corrected.
• Right to deletion — in certain circumstances, you can request that personal data be deleted. Note that data required for legal compliance or active dispute resolution may be retained even after a deletion request.
• Right to restrict processing — you can request that Gemzone limit how it uses your data in specific circumstances.
• Right to data portability — you can request your personal data in a commonly used electronic format.

To exercise any of these rights, contact the Gemzone support team at [email protected]. Requests are reviewed and responded to within a reasonable timeframe. We may need to verify your identity before processing a data request.

9. Minors

Gemzone is strictly an adults-only platform. No person under the age of 21 is permitted to register an account or use the platform. If Gemzone becomes aware that personal data has been collected from a person under 21, that account will be closed and the data deleted. If you believe a minor has registered on the platform, contact us immediately at [email protected].

10. Updates to This Policy

This Privacy Policy may be updated from time to time. When material changes are made, the revised version will be posted on this page with an updated effective date. Continued use of the Gemzone platform after a revised policy is published constitutes acceptance of the updated terms. We recommend checking this page periodically if you want to stay up to date on how your data is handled.

11. Contact and Data Enquiries

For any questions, concerns, or requests relating to your personal data or this Privacy Policy, contact the Gemzone team at [email protected]. We aim to respond to all data-related enquiries within one to three business days.