gma777 Privacy Policy

01 Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — any information that identifies or could reasonably identify a natural person, directly or indirectly, including but not limited to name, mobile number, email address, date of birth, government ID number, IP address, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
• "Data Controller" — gma777, as the entity that determines the purposes and means of processing your personal data.
• "Data Subject" — you, as the registered player whose personal data is processed by gma777.
• "Data Processor" — a third party that processes personal data on behalf of gma777, such as payment processors or KYC providers.
• "NPC" — National Privacy Commission of the Philippines, the supervisory authority for data privacy matters under RA 10173.
• "DPA" — Republic Act No. 10173, the Philippine Data Privacy Act of 2012, including its Implementing Rules and Regulations.

02 Data Controller Information

gma777.club is the data controller responsible for the personal data processed in connection with your use of the gma777 platform. As data controller, gma777 determines why and how your personal data is processed and is responsible for ensuring that such processing complies with the Philippine Data Privacy Act and all other applicable laws.

For all privacy-related inquiries, requests to exercise your data subject rights, or concerns about the handling of your personal data, you may contact the gma777 Data Protection Officer (DPO) through the contact details provided in Section 15 of this Policy.

03 Personal Data We Collect

gma777 collects the following categories of personal data in connection with the operation of its platform and the provision of its Services:

gma777 does not collect sensitive personal data as defined under the DPA — such as health information, political opinions, or religious beliefs — unless legally required or directly relevant to responsible gaming assessments.

04 How We Collect Your Data

gma777 collects personal data through the following channels:

• Directly from you: Information you provide during registration, KYC verification, payment submissions, support interactions, and promotional opt-ins.
• Automatically during platform use: Technical data including IP address, device identifiers, session activity, and game interaction logs, collected via server logs, cookies, and analytics tools embedded in the platform.
• From third-party service providers: Identity verification data from KYC providers, transaction confirmation data from payment processors (GCash, PayMaya, banks), and fraud risk signals from security service providers — all processed under data processing agreements with gma777.

05 Legal Basis for Processing

gma777 processes your personal data on the following legal bases as recognised under the Philippine Data Privacy Act:

• Contractual necessity: Processing required to fulfill the agreement between you and gma777 — including account management, payment processing, game delivery, and customer support.
• Legal obligation: Processing required to comply with applicable Philippine law, including KYC verification under AML regulations, age verification under gaming regulations, and record-keeping requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where gma777's interests are not overridden by your rights and freedoms.
• Consent: Processing for direct marketing communications and non-essential cookies, where you have given specific, informed, and freely given consent that can be withdrawn at any time.

06 How We Use Your Personal Data

6.1 Account and Service Operation

gma777 uses your personal data to operate and deliver the Services: creating and maintaining your account, processing deposits and withdrawals through GCash, PayMaya, BDO, BPI, Metrobank, and USDT, giving you access to the game library, managing your VIP tier and Golden Bank balance, and providing customer support through live chat and email.

6.2 Legal and Regulatory Compliance

gma777 uses identity and transaction data to comply with Philippine AML regulations, PAGCOR reporting requirements, and KYC obligations. This includes verifying that all players are aged 21 or older before account activation and monitoring transactions for patterns consistent with money laundering or fraud. Records required under applicable law are retained for the legally mandated periods regardless of account status.

6.3 Security and Fraud Prevention

Technical data including IP addresses, device identifiers, and session activity is used to detect and prevent unauthorised access, duplicate account creation, bonus abuse, and fraudulent transaction patterns. gma777's security systems flag anomalous login behaviour and may temporarily restrict account access pending verification where a security risk is identified.

6.4 Responsible Gaming Monitoring

Gaming activity data is used to monitor player behaviour for signs of problem gambling and to enforce player-set responsible gaming limits. gma777 may proactively contact players whose activity patterns suggest gambling harm, and may enforce cooling-off periods or mandatory self-exclusion where legally required or where player welfare is assessed to be at risk.

6.5 Marketing and Promotions

With your consent, gma777 uses your contact data to send promotional communications about new games, bonuses, and platform features via SMS and email. You may opt out of marketing communications at any time through account settings without affecting access to the platform or any other Services. gma777 does not send marketing communications via third-party channels or share your contact data for third-party marketing purposes.

07 Sharing Your Personal Data

gma777 does not sell, rent, or trade your personal data. Data is shared with third parties only where necessary and only under the following conditions:

• Payment processors: GCash, PayMaya, BDO, BPI, Metrobank, and crypto network providers receive the minimum data necessary to process your transactions. All are subject to their own privacy obligations under Philippine law.
• KYC and identity verification providers: Specialist third-party services used to verify your identity and age during KYC. These providers process your ID documents under strict data processing agreements and may not use your data for any other purpose.
• Game providers: Technical session identifiers may be shared with licensed game providers (JILI, Pragmatic Play, PG Soft, Evolution Gaming) for game delivery and RNG certification purposes. Personal identity data is not shared with game providers.
• Regulatory and law enforcement authorities: gma777 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other competent Philippine authorities where required by law or valid legal process.
• Professional advisors: Legal counsel, auditors, and security consultants may access personal data to the extent strictly necessary for the delivery of their professional services, under confidentiality obligations.

08 Data Retention

gma777 retains personal data for the periods set out below, after which data is securely deleted or anonymised:

Where a regulatory investigation or legal proceeding is underway or reasonably anticipated, relevant data will be retained beyond the standard periods until the matter is resolved.

09 Data Security

gma777 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security controls include:

• AES-256 encryption for all personal data at rest in gma777 databases
• TLS 1.3 for all data transmitted between your device and gma777 servers
• Hardware security modules (HSMs) for encryption key management
• Multi-factor authentication required for all gma777 administrative system access
• Regular penetration testing and vulnerability assessments by independent security firms
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Security operations monitoring with 24/7 anomaly detection
• Annual data privacy training for all staff with access to personal data

While gma777 takes data security seriously and maintains industry-standard controls, no system is entirely immune to security incidents. In the event of a personal data breach, gma777 will comply with its notification obligations under the DPA, informing the National Privacy Commission and affected data subjects within the required timelines.

10 Cookies & Tracking Technologies

gma777 uses cookies and similar tracking technologies on the platform. The following types of cookies are used:

• Essential cookies: Required for core platform functionality including session management, authentication, and payment security. These cannot be disabled without preventing use of the platform.
• Functional cookies: Remember your preferences such as language settings and display options to personalise your experience within the gma777 platform.
• Analytics cookies: Used to understand aggregate player behaviour — which game categories are most accessed, where players experience difficulties, and how the platform can be improved. Data collected is anonymised where possible.
• Security cookies: Detect and prevent fraudulent activity, including bot traffic and credential stuffing attacks.

Non-essential cookies are deployed only with your consent, which you may manage through your browser settings. gma777 does not use third-party advertising cookies or tracking pixels for the benefit of third-party advertisers.

11 Your Data Subject Rights

As a data subject under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by gma777. These rights may be exercised at any time by contacting the gma777 Data Protection Officer through the channels in Section 15:

• Right to Access: You may request a copy of all personal data gma777 holds about you, together with information about how it is used, the legal basis for processing, and with whom it is shared.
• Right to Correction: You may request correction of inaccurate or incomplete personal data. For account details, many corrections can be made directly in account settings without contacting support.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to override where retention is required by applicable Philippine law.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format, to the extent technically feasible.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where your specific situation warrants it.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

gma777 will respond to data subject rights requests within 15 business days of receipt. Complex requests may require up to 30 business days, and you will be notified if this is the case. Requests are processed free of charge except where requests are manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may be applied or the request refused with reasons provided.

12 Children's Privacy — 21+ Platform

The gma777 platform is strictly intended for persons aged 21 years and above in accordance with Philippine gaming regulations. gma777 does not knowingly collect personal data from individuals below the age of 21. The mandatory KYC age verification process is the primary control enforcing this restriction.

If gma777 discovers that personal data has been collected from an individual who is under 21 years of age, the account will be immediately closed, all personal data will be deleted (subject to minimum legally mandated retention requirements), and any funds will be returned to the payment source. If you believe an underage individual has registered on gma777, please contact support immediately.

13 Cross-Border Data Transfers

Some of gma777's service providers, including game technology providers and cloud infrastructure partners, may process personal data outside the Philippines. Where such transfers occur, gma777 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under Philippine law.

Safeguards used for cross-border transfers include: data processing agreements incorporating standard contractual clauses, transfers to jurisdictions with adequacy determinations recognised under Philippine data privacy guidance, and technical controls limiting the personal data transferred to the minimum necessary for the specific processing purpose.

14 Changes to This Privacy Policy

gma777 may update this Privacy Policy from time to time to reflect changes in our data practices, platform services, or applicable law. Material changes — such as new categories of data collection, new sharing arrangements, or changes to data retention periods — will be communicated to active account holders via SMS to the registered mobile number at least 7 days before the change takes effect.

The current effective version of this Privacy Policy is always available at gma777.club/privacy-policy. The effective date at the top of this document indicates when the current version became operative. Continued use of the platform after the effective date of a revised Policy constitutes acceptance of the revised terms.

15 Contact & Data Protection Officer

For all privacy-related inquiries, data subject rights requests, or concerns about the handling of your personal data by gma777, please contact the Data Protection Officer using the following channels:

• Live Chat: Available 24/7 inside your gma777 account dashboard. Select "Privacy / Data Request" as the topic when initiating the chat to route your inquiry directly to the DPO team.
• Email: [email protected] — mark your subject line with "PRIVACY REQUEST" for priority DPO handling. Response within 5 business days.

gma777 is committed to resolving privacy concerns directly and promptly. If you remain unsatisfied after contacting the DPO, you have the right to file a complaint with the National Privacy Commission of the Philippines through the NPC's official channels.