Privacy Policy — gf77

This Privacy Policy ("Policy") describes how gf77 ("we," "us," "our," "gf77") collects, uses, stores, and protects personal information provided by users ("you," "Player") when accessing and using the gf77 online gaming platform at gf77.asia and all related services. This Policy applies to all gf77 players, registered account holders, and visitors to the gf77 website.

gf77 is committed to protecting your privacy in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC). By creating a gf77 account or using any gf77 service, you acknowledge that you have read, understood, and agree to the practices described in this Policy.

1. Introduction & Scope

1.1 This Policy governs the personal data gf77 processes in connection with the operation of its online casino, sports betting, and gaming platform for Philippine players. It covers data collected through the gf77 website, mobile browser interface, customer support interactions, and any promotional activities conducted by gf77.

1.2 gf77 acts as the Personal Information Controller under the Data Privacy Act of 2012. As controller, gf77 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is lawful, fair, and transparent.

1.3 This Policy should be read alongside gf77's Terms & Conditions and Responsible Gaming policy, both of which are incorporated herein by reference.

2. Information We Collect

gf77 collects personal data in the following categories:

2.1 Registration Data

When you create a gf77 account, we collect: full legal name, date of birth, Philippine mobile number, and account credentials (username and hashed password). This information is required to open and maintain your account.

2.2 Identity Verification (KYC) Data

To comply with PAGCOR's regulatory requirements and Philippine anti-money laundering laws, gf77 may request government-issued identification documents such as a Philippine passport, driver's license, SSS card, PhilHealth ID, or UMID card. Photographs or scanned copies of these documents are processed solely for identity verification and regulatory compliance purposes.

2.3 Financial Data

gf77 collects information related to your deposits and withdrawals, including GCash numbers, Maya account details, bank account information (BPI, BDO, Metrobank), and transaction history. gf77 does not store complete card numbers. Payment transactions are processed through PAGCOR-compliant payment processors.

2.4 Usage and Gaming Data

gf77 automatically collects data about your use of the platform, including: games played, bet amounts and outcomes, session duration, login timestamps, device type and operating system, browser type, and IP address.

2.5 Communications Data

When you contact gf77 customer support via live chat or email, gf77 retains records of those communications, including the content of messages and any attachments you provide, for quality assurance and dispute resolution purposes.

3. How We Use Your Information

gf77 processes your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your gf77 account; processing your gf77 login and authentication requests.
• Service delivery: Enabling you to play games, place bets, deposit, and withdraw funds through the gf77 platform.
• Identity verification: Fulfilling KYC obligations under PAGCOR's licensing requirements and Philippine AML laws.
• Fraud prevention and security: Detecting and preventing unauthorized access, bonus abuse, money laundering, and other prohibited activities.
• Responsible gaming: Monitoring gameplay for signs of problem gambling and enforcing self-exclusion and deposit limit requests.
• Legal compliance: Complying with applicable Philippine laws, PAGCOR directives, and court orders or regulatory requests.
• Customer support: Responding to your enquiries, resolving disputes, and improving the gf77 support experience.
• Platform improvement: Analysing aggregated usage data to improve game selection, platform performance, and user experience.
• Communications: Sending you account notifications, security alerts, and — where you have consented — promotional offers from gf77.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, gf77 processes your personal data on the following lawful bases:

• Contractual necessity: Processing required to perform the gf77 Terms & Conditions and deliver the services you have requested (e.g., operating your account, processing payments).
• Legal obligation: Processing required to comply with PAGCOR's licensing conditions, Philippine AML laws (Republic Act No. 9160, as amended), the Data Privacy Act, and other applicable regulations.
• Legitimate interests: Processing for fraud detection, platform security, and service improvement, where such interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing and promotional communications, where you have explicitly opted in. You may withdraw consent at any time by contacting gf77 support.

5. Sharing Your Information

5.1 gf77 does not sell, rent, or trade your personal information to third parties for their marketing purposes. gf77 shares your data only in the limited circumstances described below:

• Game providers: Third-party game studios (Evolution Gaming, JILI, Pragmatic Play, PG Soft, SA Gaming, and others) receive minimal technical data (such as session tokens) necessary to operate their games. These providers are contractually prohibited from using this data for any purpose beyond game delivery.
• Payment processors: GCash, Maya, BPI, BDO, Metrobank, and other payment providers receive the transaction data necessary to process your deposits and withdrawals in compliance with their own regulatory obligations.
• Regulatory authorities: gf77 will disclose personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), law enforcement agencies, and courts when required to do so by law or valid legal process.
• Service providers: gf77 engages third-party providers for hosting, security, analytics, and customer support infrastructure, each bound by confidentiality obligations and data processing agreements consistent with the Data Privacy Act.
• Business transfers: In the event of a merger, acquisition, or sale of gf77's assets, your personal data may be transferred to the successor entity subject to equivalent privacy protections.

6. Cookies & Tracking Technologies

6.1 gf77 uses cookies and similar technologies (including local storage and session tokens) to operate the platform, maintain your login session, remember your preferences, and analyse platform performance.

6.2 Essential cookies are required for the gf77 platform to function correctly — including session management, security tokens, and login state persistence. These cannot be disabled without impairing platform functionality.

6.3 Analytics cookies help gf77 understand how players use the platform in aggregate — such as which game categories are most popular or where players encounter technical issues. This data is processed in anonymised or pseudonymised form where possible.

6.4 You may manage cookie preferences through your browser settings. Please note that disabling essential cookies may affect your ability to log in and use gf77 services.

7. Data Retention

7.1 gf77 retains personal data for as long as your account remains active and for such additional period as required by law or legitimate business necessity. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years after account closure, in compliance with PAGCOR's record-keeping requirements and AML obligations under Philippine law.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Support communications: Retained for up to three (3) years from the date of the interaction, unless the subject matter requires longer retention for legal or compliance purposes.
• Marketing consent records: Retained for the duration of your account and for three (3) years following withdrawal of consent.

7.2 Upon expiry of applicable retention periods, gf77 will securely delete or anonymise your personal data.

8. Security Measures

8.1 gf77 implements industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and the gf77 platform
• Cryptographic hashing of all account passwords — gf77 staff cannot view your actual password
• Multi-factor authentication options for account access
• IP-based anomaly detection and automated account lockout on repeated failed login attempts
• Restricted internal access to personal data on a need-to-know basis
• Regular security assessments and penetration testing of the gf77 platform
• Data processing agreements with all third-party service providers

8.2 While gf77 takes all reasonable precautions, no internet-based service can guarantee absolute security. In the event of a personal data breach that is likely to result in serious harm to affected individuals, gf77 will notify the National Privacy Commission and affected players in accordance with the Data Privacy Act's breach notification requirements.

9. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by gf77:

• Right to be informed: The right to know what personal data gf77 collects about you and how it is used — which this Policy addresses.
• Right of access: The right to request a copy of the personal data gf77 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data in your gf77 account.
• Right to erasure or blocking: The right to request deletion or blocking of personal data that is no longer necessary for the purpose for which it was collected, subject to gf77's legal retention obligations.
• Right to object: The right to object to processing of your personal data for direct marketing purposes or where processing is based on gf77's legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to damages: The right to be indemnified for damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data.
• Right to complain: The right to lodge a complaint with the National Privacy Commission if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact gf77 at [email protected]. gf77 will respond to verified requests within fifteen (15) business days.

10. Children's Privacy

10.1 gf77 is strictly a platform for adults aged 21 years and above. gf77 does not knowingly collect personal data from individuals under the age of 21. If gf77 discovers that personal data has been collected from a person under 21 years of age, that data will be deleted immediately and the associated account suspended pending investigation.

10.2 If you believe that a minor has registered on gf77 or provided personal data to gf77, please notify us immediately at [email protected].

11. International Data Transfers

11.1 Some of gf77's third-party service providers and game studios operate servers outside the Philippines. Where personal data is transferred outside the Philippines, gf77 ensures that appropriate safeguards are in place, including contractual data protection clauses consistent with the requirements of the Data Privacy Act and NPC guidelines.

11.2 gf77 will not transfer your personal data to a jurisdiction that does not provide an adequate level of data protection unless appropriate contractual safeguards have been established.

12. Changes to This Privacy Policy

12.1 gf77 reserves the right to update this Privacy Policy at any time. The updated Policy will be published at gf77.asia/privacy-policy with a revised effective date.

12.2 For material changes — particularly those that significantly affect how gf77 uses your personal data — gf77 will provide advance notice through in-platform notifications or via your registered mobile number where practicable.

12.3 Your continued use of gf77 following publication of an updated Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the updated Policy, you must stop using gf77 and request account closure.

13. Contact Us & Data Protection Queries

For any questions, concerns, or requests relating to this Privacy Policy, your personal data, or your data subject rights, please contact the gf77 privacy team:

• Email: [email protected] (plain text — not a clickable link)
• Live support: 24/7 chat available on gf77.asia
• Response time: gf77 will acknowledge data privacy requests within 3 business days and provide a substantive response within 15 business days.

For concerns that cannot be resolved directly with gf77, you may file a complaint with the National Privacy Commission (NPC) of the Philippines through their official channels.