gma777 Privacy Policy

This Privacy Policy ("Policy") describes how gma777 ("gma777," "we," "us," or "our") collects, uses, discloses, and safeguards the personal information of individuals ("you," "your," or "Player") who access or use the gma777 online gaming platform, available at gma777.app and all associated interfaces (the "Platform").

This Policy applies to all personal data collected in connection with your use of the Platform, including data collected during account registration, identity verification (KYC), deposits and withdrawals, gameplay activity, customer support interactions, and marketing communications.

This Policy should be read together with the gma777 Terms & Conditions, which govern your use of the Platform. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of applicable data protection legislation, gma777 acts as the data controller in respect of personal data processed in connection with the Platform. This means gma777 determines the purposes and means by which your personal data is processed.

gma777 has designated a Data Privacy Officer (DPO) responsible for overseeing compliance with applicable data protection legislation and this Policy. Data privacy inquiries, requests to exercise your data rights, and complaints may be directed to the DPO at:

gma777 collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Registration and Account Data. When you create a gma777 account, we collect your full legal name, date of birth, residential address in the Philippines (including barangay, city or municipality, and province), Philippine mobile number, email address, and the username and password you select.

3.2 Identity Verification (KYC) Data. As part of our mandatory Know Your Customer process, we collect copies or images of government-issued identification documents (such as Philippine UMID, driver's licence, passport, or PhilSys National ID), selfie photographs for liveness verification, proof of address documents, and, where applicable, proof of source of funds documentation.

3.3 Financial and Transaction Data. We collect records of all deposits and withdrawals, including transaction amounts in Philippine Peso (PHP), transaction dates and times, and payment method identifiers (such as your GCash registered mobile number or Maya account reference — not your MPIN). We do not store full payment card numbers, GCash MPINs, or Maya PINs.

3.4 Gameplay and Activity Data. We collect records of all games played on the Platform, including game type, bet amounts, outcomes, session duration, and bonus utilisation. This data is used for regulatory compliance, fraud prevention, responsible gaming monitoring, and Platform improvement.

3.5 Technical and Device Data. We automatically collect certain technical data when you access the Platform, including your IP address, device type and operating system, browser type and version, mobile network operator (e.g., Globe, Smart, DITO), session timestamps, and pages or features accessed within the Platform.

3.6 Customer Support Data. When you contact gma777 customer support, we collect the content of your communications (chat transcripts, emails), your account details as provided during the interaction, and records of the support provided.

3.7 Marketing Preference Data. If you have opted in to receive promotional communications from gma777, we retain records of your communication preferences, including preferred language (English or Tagalog) and notification channel (email or SMS).

gma777 uses your personal data for the following purposes:

• Account Management: Creating, maintaining, and managing your gma777 player account, including processing your login, updating your account details, and responding to account-related requests;
• Identity Verification: Verifying your identity and age (21+) in compliance with applicable PAGCOR regulatory requirements and anti-money laundering obligations;
• Payment Processing: Processing your deposits via GCash, Maya, BPI, BDO, Metrobank, GrabPay, 7-Eleven CLiQQ, and USDT TRC20, and processing withdrawal requests to your registered payment method;
• Gameplay and Platform Operation: Providing access to games, calculating and crediting winnings, applying bonus terms, and ensuring the technical operation of the Platform;
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, cheating, money laundering, and other prohibited activities;
• Responsible Gaming: Monitoring player activity for patterns indicative of problem gambling, enforcing self-imposed limits and exclusions, and ensuring compliance with the Platform's Responsible Gaming policy;
• Regulatory Compliance: Complying with applicable Philippine laws, PAGCOR reporting requirements, anti-money laundering legislation, and responses to lawful requests from regulatory or law enforcement authorities;
• Customer Support: Responding to your enquiries, resolving disputes, and providing technical assistance;
• Marketing (with consent): Sending promotional offers, bonus notifications, and news about gma777 games and features to players who have opted in to receive such communications.

gma777 processes your personal data on the following legal bases under the Data Privacy Act of 2012 (Republic Act No. 10173) and applicable Philippine data protection regulations:

• Contractual Necessity: Processing required to perform the contract between you and gma777 (i.e., providing gaming services, processing transactions, maintaining your account);
• Legal Obligation: Processing required to comply with applicable Philippine law, including anti-money laundering obligations, PAGCOR regulatory requirements, and responses to lawful authority requests;
• Legitimate Interest: Processing for fraud prevention, security monitoring, and Platform improvement, where our legitimate interests are not overridden by your data protection rights;
• Consent: Processing for direct marketing communications, where you have provided explicit opt-in consent. You may withdraw this consent at any time by contacting [email protected] or adjusting your account notification preferences.

gma777 does not sell your personal data. We may share your personal data with the following categories of third parties only where necessary and in compliance with applicable law:

6.1 Payment Service Providers. GCash (G-Xchange, Inc.), Maya (Voyager Innovations, Inc.), BPI, BDO, Metrobank, GrabPay, and 7-Eleven CLiQQ receive transaction data necessary to process your deposits and withdrawals. Each of these providers operates under their own privacy policies and applicable BSP regulations.

6.2 Identity Verification Providers. Third-party KYC and identity verification service providers process your identity documents and liveness verification data on behalf of gma777 for the purposes of age and identity verification. These providers are contractually bound to process your data only for the specified purpose and in accordance with applicable law.

6.3 Game Software Providers. Game providers (such as Pragmatic Play, PG Soft, and others) may receive anonymised session identifiers for the purposes of resolving game round disputes and ensuring RNG compliance. No personally identifiable information is shared with game providers beyond what is strictly necessary.

6.4 Regulatory and Law Enforcement Authorities. gma777 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other Philippine governmental authorities where required by applicable law, court order, or regulatory request.

6.5 Professional Advisors. Legal counsel, auditors, and professional advisors may access personal data on a strictly need-to-know basis, subject to professional confidentiality obligations.

gma777 uses cookies and similar tracking technologies (including web beacons and local storage) on the Platform for the following purposes:

• Essential Cookies: Required for the Platform to function. These maintain your login session, preserve your game state, and enable secure authentication. These cookies cannot be disabled without preventing access to the Platform.
• Preference Cookies: Remember your display preferences, language settings (English/Tagalog), and other personalisation choices to improve your experience on subsequent visits.
• Analytics Cookies: Allow gma777 to understand how players use the Platform — which games are most popular, which pages load slowly, and how players navigate the lobby. This data is aggregated and used only to improve Platform performance.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats.

You may manage cookie preferences in your web browser settings. Note that disabling essential cookies will prevent you from logging in to your gma777 account. Disabling preference and analytics cookies will not affect your access to games or your account functionality.

gma777 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for compliance with applicable legal obligations. Specific retention periods are as follows:

• Account and KYC Data: Retained for a minimum of five (5) years following account closure, as required by anti-money laundering legislation applicable in the Philippines;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction;
• Gameplay Records: Retained for a minimum of three (3) years for the purpose of resolving disputes and regulatory compliance;
• Customer Support Records: Retained for two (2) years following the resolution of each support interaction;
• Marketing Preference Data: Retained until you withdraw consent or close your account, whichever occurs first.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with gma777's data destruction procedures.

gma777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and gma777 servers;
• Encryption of sensitive data at rest, including identity documents and financial records;
• Role-based access controls ensuring that gma777 staff can only access personal data on a strict need-to-know basis;
• Two-factor authentication (2FA) for all gma777 internal system access;
• Regular independent security audits and penetration testing;
• Real-time monitoring for unusual access patterns, login anomalies, and potential data breaches;
• Comprehensive staff training on data protection obligations and security procedures.

In the event of a personal data breach that poses a risk to your rights and freedoms, gma777 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012.

Under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights in respect of your personal data held by gma777:

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Subject Request." gma777 will respond within fifteen (15) business days. Identity verification may be required before processing your request.

The gma777 Platform is strictly for adults aged 21 and above, consistent with PAGCOR regulations governing online gaming in the Philippines. gma777 does not knowingly collect personal data from individuals under the age of 21.

If gma777 becomes aware that personal data has been collected from an individual under 21 years of age, that data will be deleted immediately and the associated account will be closed. If you have reason to believe that a minor has registered on the gma777 Platform, please contact us immediately at [email protected].

gma777 employs age verification measures during registration and KYC processes to prevent underage access. You represent and warrant that you are 21 years of age or older when creating a gma777 account.

gma777 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes to this Policy will be communicated to registered players via email notification or a prominent in-platform notice at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revisions were made. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should stop using the Platform and may request account closure.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by gma777, please contact us:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you are not satisfied with gma777's response to your data privacy concern.