Privacy Notice
GCash takes your privacy very seriously. We work hard to protect your personal information. We do this in a way that follows international standards and the laws of the Philippines.
This privacy notice tells you how we handle your personal information. Our goal is to be clear about what we do and why we do it. We always try to do things in the right way. Here, we explain how we collect, use, share, keep, delete, and protect your information. We'll also explain how you can control what happens to your information.
GCash Business Solutions are products and services offered by GCash to enterprises and institutions to help efficiently manage their operations and grow their business such as payment collections and fund disbursements; account information and liquidity management; and business growth and financial protection.
GCash Business Solutions come with use of the GCash for Business system, a web-based platform for enterprises that offers access to all of GCash Business Solutions in one facility.
- To confirm your identity (Know-Your-Customer or KYC Information)
Before we can let you access and use GCash Business Solutions, through the GCash for Business system, we need to know who you are, as required by law. We also need to keep track of transactions and report any suspicious activities to financial regulators. This is because of rules against hiding the real source of money that may have been obtained illegally (money laundering).
- To create and manage your account and its authorized users
We may use your personal information to verify your identity and that of your authorized users, set up user accounts, and ensure secure access to the GCash for Business system, including 2-Factor Authentication for additional security.
- To provide our financial products and services
We process your personal information so you can enjoy our services such as, but not limited to, payment acceptance, fund transfers and disbursements, external payments or remittances to banks, marketing and growth services and business management tools. For example, when you generate payment related transactions or credit funds to your bank account, we may provide your information to the participating payment processors, if applicable, to process your transaction.
- To personalize our products and services
We collect and analyze your personal information to tailor our services just for you. By understanding what you like and need, we can recommend products, customized services, and personalized features that make your experience even better.
- To carry out product and market research
We may use your personal information to find trends and patterns in the market so that we can create new products and improve our services.
- To manage risk and prevent potential fraud and crime
We may use your personal information for risk monitoring, due diligence, or anti-fraud checks to protect you, our partners, and our business.
- To improve our customer service
When you reach out for assistance regarding our services under GCash Business Solutions, our Customer Experience Management Team may need to collect your other personal information to answer your questions better. Also, we record your calls and chats to improve and train our team.
- To enhance our products and services
To give you the best possible experience and value, we may use your personal information and study how you use our services in the GCash for Business system to make our products and services even better.
- To send you updates and other communications
We may use your personal information to send you important updates about your account, the services you use, new features, security alerts, and other relevant communications.
- To advertise relevant services and products
We use your personal information for targeted advertising to show you other financial products that may match your interests or needs. We also aim to give you personalized advertisements by studying how you use our services , such as transaction history, usage patterns, and preferences.
When you avail our services under GCash Business Solutions, we collect, process, and share various types of information. Don’t worry, we will only keep and use them for as long as needed to satisfy the purposes they were collected or to meet legal requirements.
- Identification (Know-Your-Customer) Information: When you open a GCash account, we collect your personal details. These include your full name, gender, home address, mobile number, email address, birth details, citizenship or nationality, government-issued ID numbers, your photo, and signature. If needed, we might also ask about your job, marital status, income, and other information, as required by the Bangko Sentral ng Pilipinas (BSP) regulations. When you use your GCash account to register a basic GCash for Business account, we may also collect additional details such as the business name for which you are availing GCash Business Solutions..
We also ask for the personal details of the authorized representatives, authorized users, or owners of the business when you add or register a business under your GCash for Business account. These personal details include their name, email address, address, nationality, source of income, nature of work, government-issued ID numbers, photo, signature, and other information, as required by BSP regulations.
We keep the identification information for 5 years after the last transaction you made using your account or after you close your account, unless required under the law to preserve such information for a longer time.
- Financial Information: If you link your bank account to your GCash wallet or GCash business wallet, we may collect your bank account and online login details. We also keep track of your GCash business wallet balance, and funds breakdown.
We keep your financial information for 5 years after the last transaction or after you close your account, unless required under the law to preserve such information for a longer time.
- Business Information: When you register to the GCash for Business system, to use GCash Business Solutions, we may collect details regarding the business for which you are availing GCash Business Solutions.
We keep your business information for 5 years after the last transaction or after you close your account, unless required under the law to preserve such information for a longer time.
- Third-Party Information: We collect information about you from other sources to improve our services. For example, we check Government databases to make sure you’re really who you say you are to prevent fraud.The length of time we keep your third-party information varies:
- Identification Information: These are kept for 5 years after the last transaction you made using your account or after you close your account.
- If relevant to an ongoing investigation: These are kept for up to 10 years after completion of investigation or depending on the court's order.
- Platform Use Information: We gather information about how you use your platform, such as the pages you visit and the activities you do.
We keep your app use information for at least 90 days in our active records and up to 3 years in our backup records.
- Information you provide when you contact us: When you contact us by chat, phone, or email, we record our conversation and collect details about you and your concerns.
If it refers to identification information, we keep the information you provide when you contact us for 5 years after the last transaction you made using your account or after you close your account, unless required under the law to preserve such information for a longer time.
When you avail services under GCash Business Solutions, we collect, process, and share various types of information. Don’t worry, we will only keep and use them for as long as needed to satisfy the purposes they were collected or to meet legal requirements.
- Direct Interactions: We collect information when you create a GCash Business Solutions user account and provide your personal information to use our services, contact us for assistance, and other direct interactions.
- Via Our App and Website: We collect information when you register to the GCash Business Solutions platform, connect your GCash account during user registration, or when you use any of our services under GCash Business Solutions.
- Through Various Channels: We collect information through various channels, including through online forms and app pages managed by us or our service providers. For instance, when you buy a product from our partner's website and select GCash as your payment method, we will collect your information to process the payment.
- From Other Third Parties: For example, we may receive your personal information when you ask another company to transact with us or when you request them to send your personal information to us (exercise of your right to data portability).
We partner with different government agencies and private businesses to provide a wide range of financial and lifestyle services. Sometimes, we need to securely share your personal information with them to give you the services you asked for:
- GCash Affiliates: Different companies affiliated with GCash work together to provide one of our financial and lifestyle services. For example, if you decide to apply for a loan, the personal information you provide may be shared with our lending partner, Fuse Financing, Inc. (FFI). G-Xchange Inc. (GXI) is the main company that runs GCash. GXI has related companies like FFI and BlockG Virtual Assets, Inc. (BlockG). Another company called Globe Fintech Innovations, Inc. (GFI or Mynt) owns GXI.
- Financial institutions and credit investigation agencies: To consistently provide you with high-quality services, we may share your personal information with other trusted financial institutions. This helps us deliver the services you requested, confirm your identity, evaluate your creditworthiness, manage risks, prevent fraud and crime, and more.
- Partners: GCash may collaborate with different businesses to offer you a broad range of financial and lifestyle services. For instance, if you use your GCash App to pay your bills, we may share your personal information with the billing company you chose. If you participate in a promotion with our partners, we may share your promo subscription and redemption records with them. To know who our partners are, please visit our website.
- Service Providers: We also share your personal information with trusted service providers who assist us in making our services seamless and efficient. They help us in various ways, such as answering your questions, analyzing information, managing risk, preventing fraud, processing payments, and more. They play a big role in making sure the GCash App and the GCash Business Solutions System runs smoothly for you.
- Fraud and crime prevention partners: We are dedicated to protecting you and other GCash users from fraud and other crimes. By sharing some of your personal information, we contribute to a safer and more transparent financial system, protecting you and the broader community.
- Law enforcement agencies, regulatory bodies, and courts: GCash may share your personal information with law enforcement agencies, regulatory bodies, courts, and other public authorities. We will only do this if required by law or to protect our rights, prevent fraud, and ensure the safety of GCash users and the public.
- Changes within GCash: If GCash joins with another company, or if another company buys us or our assets, we might have to share your personal information with that company. If this happens, we will make sure to tell you ahead of time if your information will be handed over to another company or if there will be new rules about keeping your information private.
We make sure to destroy your personal information securely so it can't be retrieved or used. We do this by following security measures that are standard in our industry. Once laws or regulations no longer allow us to keep your personal information, we start to delete them.
For physical records, we destroy them by shredding. For information stored on electronic media like tapes and hard drives, we completely erase them using secure wipe solutions so they can’t be read. This makes the information unreadable and unusable without authorization.
Your trust and privacy are important to us. Hence, we aim to be transparent about how and when we share your information, all while ensuring its safety and security.
That's why we've added security measures to help protect against risks and dangers associated with digital financial services. These security measures include:
- Restricting access: Only certain people are allowed to see your personal information.
- Encryption: We code your personal information to keep it private when it’s being stored and sent. Encryption is like turning your information into a secret code, which can only be understood by those who have the key.
- Multi-factor authentication (MFA): We use MFA in the GCash for Business website. This means you need more than one factor before you can access your account.To verify your identity, an authenticator app generates a code called a Time-based One Time Password (TOTP) that you enter along with your username and password when you log into the account. The code is usually six to eight digits.
We regularly check how information moves into and out of our computer systems to make sure it’s protected. We enforce organizational, physical, and technical security measures aligned with recognized industry standards.
If we give your personal information to another company to help us with our services, we make them sign a special agreement. This agreement makes sure they follow the same rules we do to keep your information safe.
Additionally, we advise you to stay vigilant and always protect your passwords. Inform us immediately if you suspect your passwords have been compromised. Never share your password, MPIN, or OTP. For more information on protecting your account, visit our Help Center.
You have several rights under the law:
- You can be told about how we handle your personal information (right to be informed).
- You can access the personal information we have about you (right to access).
- If we're processing your personal information based on consent or legitimate interest, you can object (right to object).
- You can ask us to stop, withdraw, block, delete, or destroy your personal information (right to erasure or blocking).
- If your information privacy rights have been violated and you've suffered damage, you can claim compensation (right to damages).
- If you feel that your personal information has been misused or your privacy rights have been violated, you can file a complaint with the National Privacy Commission (right to file a complaint).
- You can dispute and have any mistakes or errors in your personal information corrected (right to rectify).
- You can ask us to securely move, copy or transfer your personal information from one company to another (right to information portability).
For more information about your privacy rights, you can visit the National Privacy Commission’s website to look at resources about the Rights of Data Subjects.
We'll handle all your requests to access, correct, or move your personal information unless legal reasons prevent us from doing so. You can request a copy of any personal information we have about you, and if something needs updating, we're here to help you correct it. To learn more about managing your personal information, visit the Privacy Choices feature on our GCash App, speak with Gigi, or visit our Help Center.
We value your thoughts, feedback, and requests. If you need to talk to us, call us at 2882 (Customer Care).
We periodically update this notice to provide you with the most recent information on how we protect your personal information. Our goal is to keep up with the latest rules about data privacy and advancements in security technologies. We recommend that you visit this page often to stay informed of any updates we make.
Last updated: February 2025
