G-Xchange, Inc. (GXI) Single Sign-On (SSO)
Data Privacy Notice (for gaming)

Because different partners require different levels of verification, the exact data shared will depend on the specific partner platform you choose to access. We will only process and share the specific data points explicitly shown to you on the GCash consent screen at the time of your login.

‍

The categories of data that we are capable of sharing, and their corresponding purposes, subject to your explicit authorization per partner, include:

• Basic Account Information: Your GCash Number, Full Name, Email Address, and Birthday. This allows the partner to securely identify you, establish your baseline profile, and facilitate a seamless account creation and login process into their application or website.
• Advanced KYC (Know Your Customer) Information: Your Address, Date of Birth, Place of Birth, Nationality, Source of Funds, Nature of Work, ID Type, ID Picture, and ID Number. For highly regulated services, this data is shared to fulfill strict legal verification mandates. Sharing this verified GCash data allows partners to validate your identity, often streamlining your onboarding by replacing the need for you to manually upload IDs or take selfies on their platform.
• Eligibility & Gating Checks: Background variables processed through our internal Risk Engine, which include age gating (verifying you are 21 years of age or older), location checking (ensuring you are within the Philippines), and checking against PEP (Politically Exposed Persons) or 4Ps blacklists. This allows us to instantly verify your eligibility and ensure that both GCash and the partner strictly comply with regulatory guidelines restricting certain individuals from accessing specific services.

‍

Your personal data utilized during the SSO authentication process will be kept for five (5) years from the disconnection of your GCash account from the third-party platform, unless a longer period is required by law or regulatory requirement.

After this period, your individual-level data-sharing records will be securely and permanently deleted or anonymized by GCash, leaving only high-level aggregated baseline statistics for system monitoring.

‍

All data transmitted during the SSO process is protected by secure API connections and end-to-end encryption. GCash employs appropriate organizational, technical, and physical security measures—including real-time fraud monitoring, multi-factor authentication, and restricting access to your recognized device—to safeguard your personal information from unauthorized access, loss, or disclosure. Access is strictly limited to authorized personnel.

‍

We uphold your privacy rights under the DPA and will handle your requests to access, delete, or correct your personal data. You have the right to withdraw your consent by disconnecting the third-party partner in your GCash settings, which will result in the immediate termination of your SSO access to that platform.

‍

To learn more about managing your personal information, visit the Privacy Choices feature on our GCash app, speak with Gigi, or visit our Help Center.

‍

If you need to talk to us, call us at 2882 (Customer Care).

‍