gma777 Privacy Policy

Who We Are

gma777 is an online gaming platform operating at gma777.vip, dedicated to serving Filipino players with a comprehensive range of online casino games including the Color Game, Mini Baccarat, live dealer tables, slot games, bingo, and sports betting. gma777 is committed to the responsible handling of personal data in compliance with the Republic Act 10173, otherwise known as the Data Privacy Act of 2012, and its implementing rules and regulations.

For the purposes of this Privacy Policy, gma777 acts as the personal information controller in respect of the data it collects directly from players through the gma777 Platform. References to "gma777," "we," "us," or "our" throughout this policy refer to the gma777 platform operator.

Scope of This Policy

This Privacy Policy applies to all personal data collected, processed, stored, or shared by gma777 in connection with the gma777 Platform and related services. It applies to:

• All registered Players holding an active or closed gma777 account.
• Visitors to the gma777 website who have not yet registered, to the extent that data is collected during browsing (e.g., through cookies or analytics tools).
• Individuals who contact gma777 through live chat, email, or other support channels.

This policy does not apply to third-party websites, platforms, or services that may be linked to or from gma777, including game provider platforms accessed through gma777's gaming lobby. Each such third party operates under its own privacy policy, for which gma777 accepts no responsibility.

Personal Data We Collect

gma777 collects personal data from Players in several categories. The following table summarizes the types of data collected and their primary purposes:

gma777 does not collect sensitive personal information as defined under RA 10173 (such as racial origin, political affiliations, religious beliefs, or health data) unless this is directly relevant to a responsible gaming assessment and the Player has consented explicitly.

How We Collect Your Data

gma777 collects personal data through the following means:

4.1 Direct Collection

Data you provide directly during the registration process, KYC verification, deposit and withdrawal requests, responsible gaming tool setup, or when you contact our support team. This includes your name, contact details, government ID, and banking information.

4.2 Automated Technical Collection

When you access the gma777 Platform, our systems automatically collect technical data including your IP address, device identifiers, browser type and version, operating system, and session timestamps. This data is used for fraud detection, security monitoring, and platform performance analysis.

4.3 Cookies and Tracking Technologies

gma777 uses cookies and similar browser-based technologies to maintain session security and collect aggregated usage analytics. See Section 10 for full details on our cookie practices and your management options.

4.4 Third-Party Sources

In limited circumstances, gma777 may receive data from third parties to supplement account information. This may include identity verification results from KYC service providers, fraud risk scores from payment processors, or age verification confirmation from document authentication services. All third-party data providers used by gma777 are contractually required to have lawfully obtained and properly shared any data they provide to us.

Purposes of Data Processing

gma777 processes personal data only for specific, legitimate purposes. The purposes for which we process your data are as follows:

• Account Management: Creating, maintaining, and administering your gma777 player account, including processing login authentication and managing account preferences.
• Identity and Age Verification (KYC): Confirming that you meet the 21+ age requirement mandated by PAGCOR regulations and verifying that your identity matches the information provided at registration before processing withdrawals.
• Payment Processing: Facilitating deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels. Transaction data is shared with payment processors solely to execute the requested transaction.
• Fraud and Security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, money laundering, and unauthorized account access.
• Regulatory Compliance: Meeting obligations under applicable Philippine laws including the Data Privacy Act of 2012, the Anti-Money Laundering Act, and PAGCOR online gaming regulations.
• Responsible Gaming: Monitoring gaming activity to identify patterns associated with problem gambling and, where appropriate, triggering responsible gaming interventions in accordance with our Player Protection Policy.
• Customer Support: Handling inquiries, complaints, and disputes submitted through live chat, email, or other support channels.
• Platform Improvement: Analyzing aggregated usage data to improve the performance, design, and game offering of the gma777 Platform.
• Marketing Communications: Sending promotional offers and bonus notifications to Players who have opted in to receive such communications. Players may opt out at any time through their account dashboard.

Legal Basis for Processing

Under the Data Privacy Act of 2012 and its implementing rules, gma777 processes personal data on the following legal bases:

1. Contractual Necessity: Processing necessary to fulfill our obligations under the Terms and Conditions you agreed to at registration — including account management, payment processing, and KYC verification.
2. Legal Obligation: Processing required to comply with applicable Philippine law, including anti-money laundering obligations, PAGCOR regulatory requirements, and tax reporting obligations.
3. Legitimate Interests: Processing for fraud prevention, security monitoring, and platform improvement — where our legitimate business interests in operating a safe and lawful gaming platform are not overridden by your privacy rights.
4. Consent: Processing for marketing communications and non-essential cookies, where you have given us your explicit, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing and Disclosure

gma777 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Data is shared with third parties only in the following circumstances and under strict contractual safeguards:

7.1 Service Providers

gma777 engages third-party service providers to support Platform operations. These providers act as data processors and are permitted to process your data only in accordance with our instructions. Categories of service providers include: KYC and identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud detection and cybersecurity services, and cloud infrastructure providers.

7.2 Game Providers

Game providers whose titles are available on the gma777 Platform — including JILI Games, Pragmatic Play, PG Soft, and others — may receive limited technical data (such as session tokens and bet data) necessary to deliver the gaming service. These providers are licensed entities operating under their own regulatory frameworks and are contractually bound to process such data solely for the purpose of game delivery.

7.3 Regulatory and Law Enforcement Authorities

gma777 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government authorities when required by law, court order, or regulatory direction. Such disclosures are made only to the extent required and are documented in our compliance records.

7.4 Business Transfers

In the event of a merger, acquisition, or transfer of all or part of gma777's business operations, personal data held by gma777 may be transferred to the acquiring entity as part of that transaction. Players will be notified in advance of any such transfer and of any material changes to the privacy terms applicable to their data.

Data Retention

gma777 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable Philippine law. Our general retention principles are:

• Active Account Data: Retained for the duration of the active account relationship plus any mandatory post-closure retention period required by law.
• KYC Documents: Retained for a minimum of five (5) years following account closure, in compliance with AMLC record-keeping requirements under the Anti-Money Laundering Act.
• Transaction Records: Retained for a minimum of five (5) years following the transaction date, for AML compliance and dispute resolution purposes.
• Support Communications: Retained for two (2) years following resolution of the relevant inquiry or dispute, or longer if the matter is subject to ongoing legal proceedings.
• Technical / Log Data: Retained for up to twelve (12) months for security monitoring and fraud detection purposes, then deleted or anonymized.
• Marketing Consent Records: Retained for the duration of the account relationship plus three (3) years, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our internal data destruction procedures. Anonymized data may be retained indefinitely for statistical and platform improvement purposes.

Data Security

gma777 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, disclosure, alteration, and destruction. Our security measures include:

• Encryption in Transit: All communications between your browser and the gma777 Platform are encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at Rest: Sensitive stored data, including KYC documents and financial information, is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Personal data is accessible only to gma777 employees and contractors who have a legitimate need to access it in the course of their duties. Access is controlled by role-based permissions and is logged and audited.
• Security Monitoring: gma777 operates continuous security monitoring to detect unusual account activity, unauthorized access attempts, and potential data breaches.
• Incident Response: gma777 maintains a data breach response procedure. In the event of a breach that is likely to result in a risk to the rights and freedoms of Players, gma777 will notify affected Players and the National Privacy Commission within the timeframes required by RA 10173.

Cookies and Similar Technologies

gma777 uses cookies and similar browser-based technologies on the Platform. A cookie is a small text file placed on your device by a website to store information about your visit. gma777 uses the following categories of cookies:

10.1 Essential Cookies

These cookies are strictly necessary for the Platform to function and cannot be disabled. They include session authentication cookies that keep you logged in during your gaming session, security tokens that protect against cross-site request forgery, and preference cookies that remember your language and display settings. No personal data is shared with third parties through essential cookies.

10.2 Analytics Cookies

gma777 uses first-party analytics to understand how Players navigate the Platform, which games attract the most engagement, and where technical issues arise. Analytics data is aggregated and does not identify individual Players. These cookies can be disabled through your browser settings, though doing so will not affect your ability to use the Platform.

10.3 No Advertising Cookies

gma777 does not use third-party advertising cookies, retargeting pixels, or behavioral profiling technologies. We do not participate in cross-site tracking networks. Your activity on the gma777 Platform is not used to serve you targeted advertising on other websites.

10.4 Managing Cookies

You can control cookie settings through your browser's privacy settings. Most browsers allow you to block, delete, or receive notifications about cookies. Note that disabling essential cookies may affect the functionality of the gma777 Platform, including your ability to remain logged in during a gaming session.

Your Privacy Rights

Under the Republic Act 10173 (Data Privacy Act of 2012), Filipino players have the following rights in respect of their personal data held by gma777:

• Right to be Informed: You have the right to be informed about how your personal data is collected, used, and shared. This Privacy Policy fulfills that obligation.
• Right of Access: You may request a copy of the personal data gma777 holds about you. We will respond to access requests within thirty (30) days of receipt.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Basic account information can be updated directly in your account dashboard. KYC data corrections require submission of updated documentation.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. This right is subject to limitations where retention is required by law (e.g., AML record-keeping obligations) or where gma777 has a legitimate interest in retaining the data for fraud prevention.
• Right to Object: You may object to the processing of your personal data for marketing purposes at any time by updating your communication preferences or contacting support.
• Right to Data Portability: You may request a copy of your personal data in a commonly used, machine-readable format where technically feasible.
• Right to File a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe gma777 has not handled your personal data in accordance with RA 10173.

To exercise any of the above rights, please contact our support team through the live chat on the Platform or by written communication to [email protected]. Please include your registered mobile number or username and a clear description of your request. We will verify your identity before processing any data subject rights request.

Minors and Age Restriction

If gma777 discovers or has reasonable cause to believe that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, void any pending transactions, and securely delete the associated personal data to the extent permitted by law. Any funds remaining in the account at the time of closure will be handled in accordance with applicable regulatory guidance.

Parents and guardians who believe that a person under 21 in their household may have created a gma777 account are urged to contact our support team immediately. gma777 will investigate and act on such reports promptly and confidentially.

Changes to This Privacy Policy

gma777 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or regulatory guidance from the National Privacy Commission. Material changes will be communicated to registered Players via the mobile number or email address associated with their account, or through a prominent notice on the Platform, at least seven (7) days before the changes take effect.

The "Last updated" date at the top of this page indicates when the current version was adopted. We encourage Players to review this page periodically to stay informed of how gma777 handles their personal data. Continued use of the Platform following the effective date of any changes constitutes acceptance of the revised Privacy Policy.

Contact and Data Privacy Inquiries

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or need to report a potential data breach or privacy concern, please contact gma777 using the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the gma777 Platform. Our support agents speak both Tagalog and English and are trained to handle data privacy inquiries.
• Support Email (plain text — not a link): [email protected]
• For formal data subject rights requests: Please submit your request in writing, including your full name, registered mobile number, and a clear description of your request. We will respond within thirty (30) days.

For unresolved privacy concerns, Filipino players may also file a complaint with the National Privacy Commission of the Philippines. The NPC's contact details and complaint procedures are available through official Philippine government channels.