gc777 Privacy Policy

gc777 ("we," "us," "our," or "gc777") operates the online gaming platform accessible at gc777.app and through associated mobile applications. We are deeply committed to safeguarding the privacy and personal information of every individual who interacts with the gc777 Platform — whether as a registered player, a visitor to our website, or a person engaging with our customer support services.

This Privacy Policy describes the categories of personal data we collect, the purposes for which that data is processed, the legal bases upon which processing is carried out, the circumstances in which data may be shared with third parties, the security measures gc777 employs to protect your information, and the rights available to you as a data subject under Philippine law.

This Policy applies to all personal data collected through the gc777 website at gc777.app, the gc777 mobile application, any communications between you and gc777 including customer support interactions, and gc777's marketing and promotional activities directed at registered players and prospects in the Philippines.

For the purposes of the Philippine Data Privacy Act of 2012 and this Privacy Policy, gc777 acts as the Personal Information Controller (PIC) in respect of the personal data collected from users of the gc777 Platform. As Personal Information Controller, gc777 determines the purposes and means of processing your personal data, and bears the corresponding obligations under Philippine data privacy law.

gc777 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with applicable data privacy laws and regulations. The gc777 DPO is the primary point of contact for all data privacy enquiries, requests, and complaints from players and members of the public. Contact details for the gc777 DPO are provided in Section 16 of this Policy.

Where gc777 engages third-party service providers to process personal data on its behalf, those providers act as Personal Information Processors (PIPs) under written agreements that impose data processing obligations consistent with this Policy and applicable Philippine law.

gc777 collects the following categories of personal data from players and platform users. Collection is limited to what is necessary for the specific purposes described in Section 5 of this Policy.

3.1 Identity and Registration Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used for age verification — 21+ requirement under PAGCOR regulations)
• Government-issued identification document type, number, and copy (e.g., Philippine passport, driver's license, SSS/UMID, PhilHealth ID, Voter's ID)
• Nationality and country of residence
• Residential address including barangay, city or municipality, and province
• Registered Philippine mobile number (Globe, Smart, or DITO)
• Email address (if provided during registration or support interaction)
• gc777 username or account identifier

3.2 Financial and Transaction Data

• GCash account number associated with your registered mobile number
• Maya (formerly PayMaya) account details where provided
• Philippine bank account numbers for BPI, BDO, Metrobank, UnionBank, or other local banks used for deposits or withdrawals
• Deposit amounts, dates, and payment method records
• Withdrawal requests, amounts, processing dates, and payment destination records
• Wallet balance history and transaction logs
• Bonus and promotional credit records, including wagering activity against bonus requirements

3.3 Gaming and Behavioral Data

• Game session records, including game type, bet amounts, outcomes, and session duration
• Sports betting history, including markets wagered on, odds accepted, and settlement outcomes
• Platform usage patterns, navigation history, and feature engagement metrics
• Responsible gaming tool settings, including deposit limits and self-exclusion records

3.4 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system version, and browser type
• Device identifiers (where permitted by your device operating system)
• Login timestamps, session duration, and authentication method records
• Cookie identifiers and similar tracking technology data (see Section 7)

3.5 Communications Data

• Customer support chat transcripts, email correspondence, and feedback submitted to gc777
• Responses to gc777 surveys or promotional communications where you have opted in
• Records of complaints, disputes, and their resolution outcomes

gc777 collects personal data through the following channels and mechanisms:

• Account Registration: Information provided directly by you when creating a gc777 account, including your name, mobile number, date of birth, and address.
• KYC Verification: Identity documents and supporting information submitted in connection with gc777's Know-Your-Customer verification process, as required by PAGCOR regulations and Philippine anti-money laundering law.
• Deposits and Withdrawals: Financial account details provided when initiating GCash, Maya, or bank transfer transactions on the gc777 Platform.
• Platform Usage: Automatically collected data including your IP address, device information, session logs, and in-app navigation data generated when you use the gc777 website or mobile application.
• Customer Support: Information provided by you when contacting gc777's support team via live chat, email, or any other support channel.
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, and similar technologies as described in Section 7 of this Policy.
• Third-Party Verification Services: Where necessary for KYC or fraud prevention, gc777 may verify identity information against third-party identity verification databases consistent with Philippine law.

gc777 processes personal data only for specified, explicit, and legitimate purposes. The following table summarizes the primary purposes of processing, the categories of data involved, and the legal basis under the Philippine Data Privacy Act that authorizes each processing activity.

Where gc777 relies on your consent as the legal basis for processing — specifically for marketing and promotional communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of marketing consent will not affect gc777's ability to continue processing your data for contract performance and legal obligation purposes.

gc777 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. gc777 may share your personal data with the following categories of recipients where necessary for the purposes described in this Policy:

6.1 Regulatory and Government Authorities

gc777 is required by Philippine law and PAGCOR regulation to disclose player data to the following bodies on request or as part of routine regulatory reporting:

• Philippine Amusement and Gaming Corporation (PAGCOR) — for gaming license compliance, player protection, and regulatory oversight
• Anti-Money Laundering Council (AMLC) — for suspicious transaction reporting under R.A. 9160 (Anti-Money Laundering Act) as amended
• National Privacy Commission (NPC) — for data breach notifications and compliance audits
• Bureau of Internal Revenue (BIR) — for tax compliance purposes where applicable
• Philippine law enforcement agencies — where required by court order, subpoena, or applicable law

6.2 Payment Processors and Financial Institutions

gc777 shares necessary financial data with GCash (GXchange Inc.), Maya Philippines Inc., and Philippine banking institutions solely for the purpose of processing deposits and withdrawals initiated by you. Data shared with payment processors is limited to the minimum required for transaction execution and is governed by applicable interoperability and data processing agreements.

6.3 Technology and Service Providers

gc777 engages third-party technology providers including game software providers (e.g., JILI Games, Pragmatic Play, PG Soft), live dealer studio operators, cloud infrastructure providers, cybersecurity vendors, and customer support platform providers. All such providers act as Personal Information Processors under written agreements that require them to process gc777 player data only on gc777's documented instructions and in compliance with the Philippine Data Privacy Act.

6.4 KYC and Identity Verification Providers

To fulfill PAGCOR-mandated identity verification requirements, gc777 may share identity document data with accredited KYC and identity verification service providers. These providers process identity data solely for verification purposes and are prohibited from using gc777 player data for any other purpose.

gc777 uses cookies and similar tracking technologies on the gc777 website and mobile application to enhance platform functionality, maintain session integrity, analyze usage patterns, detect fraudulent activity, and where you have consented, deliver relevant promotional content.

7.1 Types of Cookies Used by gc777

• Strictly Necessary Cookies: Required for the gc777 Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing identifiers. These cookies cannot be disabled without materially impairing your ability to use gc777.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and responsible gaming tool configurations, so you do not need to reset them on each visit.
• Analytics Cookies: Used to collect aggregated, anonymized data about how players navigate and use the gc777 Platform, enabling gc777 to identify performance issues and improve the player experience.
• Marketing Cookies: Used only where you have given explicit consent to receive personalized promotional communications. These cookies help gc777 understand which promotional offers are relevant to your gaming preferences.

7.2 Managing Your Cookie Preferences

You may manage your cookie preferences through the gc777 cookie management settings available on the Platform. Please note that disabling strictly necessary cookies will impair Platform functionality, including your ability to log in to your gc777 account. You may also manage cookies through your browser settings, though this may affect your experience across all websites you visit.

gc777 retains personal data only for as long as necessary to fulfill the purposes described in this Policy, and to comply with applicable legal, regulatory, and contractual retention obligations. The following retention periods apply to the principal categories of personal data held by gc777:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in compliance with PAGCOR requirements and Philippine anti-money laundering law.
• Financial and Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by R.A. 9160 (Anti-Money Laundering Act) and PAGCOR regulations.
• KYC Documents: Retained for a minimum of five (5) years following the end of the business relationship, consistent with Philippine AML obligations.
• Gaming Session Data: Retained for a minimum of three (3) years for responsible gaming monitoring purposes and dispute resolution support.
• Customer Support Communications: Retained for two (2) years from the date of each interaction, or longer where required for active dispute resolution.
• Marketing and Consent Records: Retained for the duration of the consent and for three (3) years following withdrawal of consent, to provide evidence of the consent given.

Upon expiry of the applicable retention period, gc777 will securely delete or anonymize personal data in accordance with NPC-approved data disposal standards.

gc777 implements a comprehensive suite of technical, organizational, and procedural security measures to protect personal data against unauthorized access, disclosure, alteration, accidental loss, and destruction. These measures are reviewed and updated regularly to address evolving security threats.

9.1 Technical Security Measures

• 256-bit Secure Sockets Layer (SSL) / TLS 1.3 encryption for all data transmitted between your device and the gc777 Platform
• AES-256 encryption for personal data stored in gc777 databases
• Multi-factor authentication for gc777 staff accessing systems containing personal data
• OTP-based two-factor authentication for player account logins from new devices
• Real-time fraud detection and behavioral anomaly monitoring systems
• Regular penetration testing and vulnerability assessments by independent security specialists
• Web Application Firewall (WAF) and DDoS protection for the gc777 Platform infrastructure

9.2 Organizational Security Measures

• Role-based access controls limiting staff access to personal data strictly to what is required for their job function
• Mandatory data privacy and security training for all gc777 staff with access to personal data
• Documented data incident response procedures compliant with NPC breach notification requirements
• Contractual data processing obligations imposed on all third-party service providers handling gc777 player data

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by gc777. These rights may be exercised by contacting the gc777 Data Protection Officer using the details provided in Section 16.

gc777 will respond to verified data subject requests within thirty (30) calendar days of receipt. For complex requests, gc777 may extend the response period by a further thirty (30) days, with notice provided to you within the initial response window. gc777 may require identity verification before processing access, correction, or deletion requests to prevent unauthorized data disclosure.

The gc777 Platform is strictly intended for adults aged 21 years and older in the Philippines, as required by PAGCOR regulation and Philippine law. gc777 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If gc777 becomes aware that personal data has been collected from a person under the age of 21, such data will be immediately deleted and the associated account suspended pending review.

Parents and guardians who believe a minor may have accessed the gc777 Platform or submitted personal data through any gc777 channel are encouraged to contact the gc777 Data Protection Officer immediately using the contact details in Section 16 so that appropriate action can be taken without delay.

The gc777 Platform primarily operates within the Philippines, and player personal data is predominantly stored on servers located within Philippine territory or in jurisdictions with data protection standards recognized by the National Privacy Commission as offering equivalent protection to the Philippine Data Privacy Act.

Where personal data is transferred to third-party service providers whose systems are located outside the Philippines — including certain game software providers, cloud infrastructure partners, and KYC verification services operating in jurisdictions such as Malta, Isle of Man, or Singapore — gc777 implements appropriate safeguards to ensure the transferred data continues to receive protection consistent with this Policy and Philippine data privacy requirements.

Such safeguards may include contractual data transfer agreements incorporating NPC-approved standard contractual clauses, transfer only to organizations certified under recognized data protection frameworks, or case-by-case adequacy assessments. You may request information about the specific safeguards applicable to international transfers of your personal data by contacting the gc777 DPO.

gc777 processes certain categories of gaming behavioral data specifically to fulfill its responsible gaming obligations under PAGCOR regulations. This processing is carried out under a legal obligation basis and includes the following activities:

• Monitoring gaming session frequency, duration, and expenditure patterns to identify indicators of potential problem gambling behavior
• Maintaining records of self-exclusion elections, deposit limits, loss limits, and session time restrictions set by players
• Enforcing self-exclusion and cooling-off periods and preventing access to the Platform during active exclusion periods
• Supporting interactions between gc777's responsible gaming team and players who have contacted gc777 regarding gambling concerns
• Providing aggregated, anonymized player behavior data to PAGCOR as part of responsible gaming compliance reporting

Responsible gaming data is treated with an additional layer of sensitivity and is accessible only to gc777 staff with a specific operational need for such access. This data is never used for marketing segmentation or commercial profiling purposes.

The gc777 Platform may contain references or links to third-party websites, payment providers, or game content providers. This Privacy Policy applies exclusively to personal data collected and processed by gc777 through the gc777 Platform. gc777 is not responsible for the privacy practices, data security standards, or content of any third-party websites or services accessible through the gc777 Platform.

Where you interact with a third-party payment provider such as GCash or Maya to execute a deposit or withdrawal, your interaction with that provider's platform is governed by the relevant provider's own privacy policy. gc777 encourages you to review the privacy policies of any third-party service you use in connection with your gc777 account.

gc777 reviews this Privacy Policy periodically and will update it to reflect changes in applicable Philippine law, NPC guidance, PAGCOR requirements, gc777's data processing activities, or best practice standards. The effective date displayed at the top of this Policy reflects the date of the most recent revision.

Where changes to this Policy are material — including changes that affect your rights, the categories of data collected, or the purposes of processing — gc777 will notify registered players via their registered email address or through an in-platform notification prior to the updated Policy taking effect. Continued use of the gc777 Platform following the effective date of a revised Policy constitutes acceptance of the updated terms.

The current version of this Privacy Policy is always available at gc777.app/privacy-policy. gc777 recommends that you review this Policy periodically to stay informed of how your personal data is being protected.

For any questions, requests, or complaints regarding this Privacy Policy or gc777's handling of your personal data, you may contact the gc777 Data Protection Officer through the following channels. All data privacy correspondence is treated as confidential and will be acknowledged within five (5) business days.

• Email (Data Privacy): [email protected] — please include "Data Privacy Request" in the subject line
• Live Chat: Available 24/7 through the gc777 Platform — request to speak with the Data Protection team
• Platform: gc777.app

If your privacy concern is not resolved to your satisfaction through gc777's internal process, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the independent government authority responsible for enforcing the Data Privacy Act of 2012. Information about filing a complaint with the NPC is available through official Philippine government channels.

By using the gc777 Platform, you acknowledge that you have read this Privacy Policy in full and understand how gc777 collects, uses, and protects your personal data as a PAGCOR-regulated online gaming operator serving Filipino players.