gma777 Privacy Policy

This Privacy Policy ("Policy") describes how gma777 ("gma777," "we," "us," "our") collects, uses, discloses, and protects the personal data of players and visitors who access or use the gma777 online gaming platform at gma777.net (the "Platform").

This Policy is issued in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (the "DPA"), and its Implementing Rules and Regulations as issued by the National Privacy Commission of the Philippines (the "NPC"). gma777 is committed to upholding the rights of Filipino data subjects and ensuring that all personal data entrusted to us is handled with the highest standards of security, transparency, and respect.

By registering an Account on the gma777 Platform or continuing to use our services, you acknowledge that you have read, understood, and agree to the data practices described in this Policy. This Policy should be read alongside our Terms & Conditions, which govern your overall use of the gma777 Platform.

For the purposes of the Data Privacy Act of 2012 and this Policy, gma777 acts as the Personal Information Controller (PIC) in respect of the personal data of players and visitors collected through the gma777 Platform.

As Personal Information Controller, gma777 determines the purposes and means of processing personal data submitted by players and visitors. Where we engage third-party service providers to process personal data on our behalf, such parties act as Personal Information Processors (PIPs) under written agreements that bind them to data protection standards consistent with the DPA.

gma777 operates in alignment with PAGCOR's regulatory guidelines for online gaming in the Philippines. Certain data processing activities — particularly those related to player identity verification, anti-money laundering (AML) compliance, and responsible gaming — are carried out in furtherance of legal obligations arising under Philippine law.

gma777 collects personal data that is necessary for the provision of our services, compliance with legal obligations, and the protection of players and the Platform. The categories of personal data we may collect include, but are not limited to:

gma777 collects personal data through the following channels:

• Direct Collection: Information you voluntarily provide during Account registration, identity verification, deposit and withdrawal requests, support interactions, or when you respond to promotional communications.
• Automated Collection: Technical and usage data collected automatically when you access or use the gma777 Platform, including through cookies, web beacons, log files, and similar tracking technologies.
• Payment Processors: Financial transaction data received from payment networks including GCash, PayMaya, and Philippine banking institutions in connection with your deposits and withdrawals.
• Identity Verification Services: Where you submit identity documents for KYC purposes, these documents may be processed by trusted third-party verification providers operating under appropriate data processing agreements.
• Gaming Software Providers: Game performance data and session information transmitted by JILI Games, Pragmatic Play, PG Soft, and other licensed game providers integrated into the gma777 Platform.
• Public Sources: In limited circumstances, gma777 may verify certain information against publicly available records for fraud prevention or AML compliance purposes.

gma777 processes personal data for the following specific, legitimate purposes:

• Account Management: Creating, maintaining, and administering your gma777 Account, including authentication, password management, and session management.
• Service Delivery: Operating the gaming Platform, processing bets, calculating and paying out winnings, and providing all features and functionalities of the gma777 service.
• Payment Processing: Facilitating deposits via GCash, PayMaya, and Philippine bank transfers, and processing withdrawal requests to your registered payment method.
• Identity Verification and KYC: Verifying your identity and age to comply with PAGCOR guidelines and applicable Philippine law, including confirmation that all players are aged 21 or above.
• Anti-Money Laundering Compliance: Monitoring transactions and player activity for compliance with the Anti-Money Laundering Act (Republic Act No. 9160, as amended) and related AMLC regulations.
• Fraud Prevention and Security: Detecting, preventing, and investigating fraudulent activity, unauthorized Account access, bonus abuse, and other breaches of our Terms & Conditions.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling indicators and administering responsible gaming tools including deposit limits and self-exclusion.
• Customer Support: Responding to your queries, resolving disputes, and maintaining records of communications for quality assurance and legal compliance.
• Legal and Regulatory Compliance: Meeting all obligations imposed by Philippine law, PAGCOR regulations, NPC requirements, and any other competent regulatory authority.
• Platform Improvement: Analyzing usage patterns and Platform performance to identify improvements and optimize the gma777 player experience.
• Marketing Communications: Sending promotional communications about bonuses, new games, and Platform updates — where you have consented to receive such communications or where gma777 has a legitimate interest in doing so.

Under the Data Privacy Act of 2012, gma777 relies on the following legal bases for processing personal data:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted upon registration — including Account management, game operation, and payment processing.
• Legal Obligation: Processing necessary to comply with requirements imposed by law, including KYC/AML obligations under AMLC regulations, age verification requirements under PAGCOR guidelines, and data retention obligations.
• Legitimate Interest: Processing carried out for the legitimate interests of gma777 or our players, including fraud detection, Platform security, and Platform improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and certain non-essential cookies, where you have provided clear, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

gma777 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share personal data in the following circumstances only:

• Service Providers and PIPs: Trusted third-party service providers engaged to perform functions on our behalf — including payment processors (GCash, PayMaya, Philippine banks), identity verification providers, game software providers, cloud hosting providers, and customer support tools — under written agreements that require them to maintain appropriate data protection standards.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, Philippine courts, and law enforcement agencies, where required by law or lawful order, or where gma777 is legally obligated to disclose.
• Fraud Prevention Networks: Third-party fraud prevention and risk management services, where sharing is necessary to protect gma777 and its players from fraudulent activity.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of gma777 assets, personal data may be transferred as part of that transaction, subject to the incoming party maintaining equivalent privacy protections.
• Your Consent: Any other disclosure not covered above, only with your prior explicit consent.

Some of the third-party service providers engaged by gma777 — particularly game software providers and cloud infrastructure operators — may be located outside of the Philippines. Where personal data is transferred outside the Philippines, gma777 ensures such transfers are conducted in compliance with the Data Privacy Act and the NPC's requirements for cross-border data flows.

gma777 will only authorize international transfers of personal data to third parties that provide adequate levels of data protection, including through:

• Written data processing agreements incorporating obligations equivalent to those required under the DPA;
• Transfer to recipients located in countries deemed to have adequate data protection standards; or
• Other transfer mechanisms approved by the National Privacy Commission.

gma777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and to comply with applicable legal and regulatory retention obligations. Our general retention approach is as follows:

• Active Account Data: Retained for the duration of your gma777 Account and the active player relationship.
• Transaction and Financial Records: Retained for a minimum of five (5) years after the relevant transaction, in compliance with AML regulations and PAGCOR requirements.
• Identity Verification Documents: Retained for the period required by PAGCOR and AMLC guidelines from the date of submission or Account closure, whichever is later.
• Support and Communications Records: Retained for a period sufficient to resolve any related disputes and meet legal record-keeping requirements.
• Marketing Preferences: Retained until you withdraw consent or opt out, after which they are updated accordingly.

Upon expiry of the applicable retention period, personal data is securely deleted, anonymized, or otherwise disposed of in a manner that prevents unauthorized access or reconstruction.

gma777 uses cookies and similar tracking technologies on the Platform to provide core functionality, improve performance, and understand how players use our services. The types of cookies used include:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in to your gma777 Account during a browsing session. These cookies cannot be disabled without breaking core Platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated, anonymized data about how players navigate the Platform — which pages are visited most, where players come from, and how they interact with features. This helps gma777 improve the Platform experience.
• Functional Cookies: Used to remember your preferences — such as language settings, display preferences, and previously accessed games — to provide a more personalized experience.
• Security Cookies: Used to support fraud detection and session integrity, including detection of unusual login behavior or suspicious access patterns.

Most browsers allow you to control cookie settings through your browser preferences. Disabling certain cookies may affect your ability to use some features of the gma777 Platform, including the ability to remain logged in to your Account.

gma777 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, disclosure, or alteration. Our security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the gma777 Platform is encrypted using industry-standard SSL/TLS protocols. This protects your login credentials, payment information, and session data in transit.
• Encrypted Data Storage: Sensitive personal data stored on gma777 systems is encrypted at rest. Password data is stored using one-way cryptographic hashing and is never held in plaintext.
• Access Controls: Access to personal data is restricted to gma777 personnel and authorized service providers on a strict need-to-know basis. All access is authenticated and logged.
• Two-Factor Authentication: gma777 offers two-factor authentication (2FA) for player Accounts, adding an additional verification layer beyond the username and password.
• Security Monitoring: gma777 employs continuous monitoring systems for unusual access patterns, unauthorized login attempts, and other security anomalies.
• Data Breach Response: In the event of a personal data breach that is likely to result in harm to affected players, gma777 will notify the National Privacy Commission and affected individuals in accordance with the DPA's breach notification requirements.

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by gma777:

• Right to Be Informed: To be notified of the purposes for which your personal data is collected and processed prior to such collection.
• Right of Access: To obtain reasonable access to your personal data held by gma777, including information about the sources from which it was obtained and the recipients to whom it has been disclosed.
• Right to Correction / Rectification: To dispute inaccuracies or errors in personal data and request correction without undue delay.
• Right to Erasure or Blocking: To request that personal data be placed on a processing block or deleted where the data is no longer necessary, consent has been withdrawn, or processing is unlawful — subject to our legal retention obligations.
• Right to Object: To object to the processing of personal data where processing is based on legitimate interest or for direct marketing purposes.
• Right to Data Portability: To obtain a copy of your personal data in a structured, machine-readable format for transfer to another controller, where technically feasible.
• Right to Damages: To be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data, in accordance with the DPA.
• Right to Lodge a Complaint: To lodge a complaint with the National Privacy Commission of the Philippines if you believe your data rights have been violated.

To exercise any of the above rights, please submit a written request to our Data Protection Officer via the contact details in Section 16. We will respond to verified requests within fifteen (15) business days. We may require identity verification before processing any data subject request.

The gma777 Platform is strictly intended for individuals aged 21 years and above. gma777 does not knowingly collect or process personal data of persons below the age of 21.

If gma777 becomes aware that personal data has been collected from a person below the required minimum age, we will immediately suspend the associated Account, delete the personal data collected, and — where appropriate — report the matter to relevant authorities.

If you believe that a minor has created an Account on the gma777 Platform, please contact us immediately via our customer support channels so that we can investigate and take appropriate action.

The gma777 Platform integrates third-party game software from providers including JILI Games, Pragmatic Play, PG Soft, and others. These providers operate their own platforms and may collect certain technical and gameplay data in the course of delivering their games. Their data practices are governed by their own privacy policies, which are separate from this Policy.

gma777 enters into data processing agreements with all integrated providers to ensure they handle any player data in a manner consistent with the DPA and applicable Philippine law. However, gma777 does not control and is not responsible for the privacy practices of any independent third-party sites or services that may be linked from the Platform.

gma777 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or regulatory guidance. When material changes are made, we will publish the updated Policy on the gma777 Platform with a revised "Last Updated" date. In cases of significant changes, we may provide additional notification through your registered contact details.

Your continued use of the gma777 Platform following the posting of any updated Privacy Policy constitutes acceptance of the changes. If you disagree with the updated Policy, you should cease using the Platform and may request Account closure in accordance with our Terms & Conditions.

We encourage you to review this Policy periodically to stay informed about how gma777 is protecting your personal data.

gma777 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Privacy Policy. If you have any questions about this Policy, wish to exercise your data subject rights, or have a concern about how your personal data is being handled, please contact us through the following channels:

• Email: [email protected] — mark your subject line "Data Privacy Request" to ensure your inquiry is directed to the DPO.
• Live Chat: Available on the gma777 Platform 24 hours a day, 7 days a week. For data privacy matters, ask to be connected with our Data Protection team.
• Messenger / Viber: For general support inquiries, our Filipino-speaking support team is available via Messenger and Viber.

If you are not satisfied with how gma777 has handled a data privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC), the supervisory authority responsible for enforcing the Data Privacy Act. Information about filing a complaint with the NPC is available on the NPC's official government website.