gf77 Privacy Policy

1. Introduction

gf77 ("we," "us," "our," or "gf77") is committed to protecting the personal information of every Filipino player who uses the gf77 platform at gf77.biz (the "Platform"). This Privacy Policy describes how gf77 collects, uses, discloses, retains, and protects your personal data when you access or use any part of the Platform, including registration, login, gaming activity, deposits, withdrawals, and customer support interactions.

By registering and using the gf77 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you should discontinue use of the gf77 Platform immediately.

This Privacy Policy should be read alongside the gf77 Terms and Conditions and Responsible Gaming Policy, all of which together govern your relationship with gf77.

2. Data Controller

For the purposes of this Privacy Policy, gf77 is the data controller responsible for the personal information of its users. All data protection inquiries, requests to exercise data rights, and privacy-related complaints should be directed to the gf77 Data Protection contact via email at [email protected].

gf77 operates in compliance with applicable Philippine data protection legislation, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, as administered by the National Privacy Commission (NPC) of the Philippines.

3. Personal Data We Collect

gf77 collects the following categories of personal data from users:

gf77 does not collect sensitive personal information (as defined under Philippine data privacy law) beyond what is strictly necessary for identity verification and regulatory compliance. gf77 does not collect biometric data.

4. How We Collect Your Data

gf77 collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, or contacting gf77 support;
• Automated collection: Technical and usage data collected automatically through your browser and device when you access the gf77 Platform, including cookies and session tracking technologies;
• Third-party sources: Identity verification data from KYC service providers and payment data from payment processors (GCash, PayMaya, BPI, BDO, Metrobank) strictly as needed to complete transactions;
• Regulatory sources: Information provided to gf77 by PAGCOR or other relevant Philippine regulatory bodies as part of compliance obligations.

5. Legal Basis for Processing

gf77 processes your personal data on the following legal bases under Philippine data privacy law and applicable international standards:

• Contractual necessity: Processing required to register your account, verify your identity, process transactions, and provide the gaming services you have requested;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and other applicable Philippine laws;
• Legitimate interests: Processing for fraud prevention, security monitoring, platform analytics, and responsible gaming monitoring — where such interests are not overridden by your data protection rights;
• Consent: Processing for direct marketing communications, where you have explicitly opted in. You may withdraw consent at any time by contacting gf77 support.

6. How We Use Your Personal Data

gf77 uses the personal data it collects for the following purposes:

• To create, verify, and manage your gf77 account;
• To verify that you meet the minimum age requirement of 21 years as mandated by PAGCOR;
• To process deposits and withdrawals in Philippine Peso (₱) through your chosen payment method;
• To deliver the gaming services, promotions, and features available on the gf77 Platform;
• To detect, prevent, and investigate fraud, money laundering, and unauthorized account access;
• To monitor compliance with gf77's Terms and Conditions and Responsible Gaming Policy;
• To provide customer support and resolve account-related disputes;
• To generate anonymized analytics for platform improvement;
• To send account-related communications (transaction confirmations, security alerts, OTPs) — these are not optional as they are necessary for platform operation;
• To comply with regulatory reporting obligations to PAGCOR and other Philippine government authorities.

7. Data Sharing and Disclosure

gf77 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. gf77 may share limited personal data with the following categories of recipients, strictly as necessary:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank — transaction data shared only to the extent required to process deposits and withdrawals;
• Game providers: JILI, PG Soft, Pragmatic Play, Evolution Gaming, and other certified studios — anonymized session data shared as required for game delivery and RNG certification;
• KYC service providers: Third-party identity verification services used to confirm your identity and age in compliance with PAGCOR requirements;
• Regulatory and law enforcement authorities: PAGCOR, AMLC (Anti-Money Laundering Council), and other Philippine government agencies — where gf77 is legally obligated to disclose information;
• Professional advisors: Legal counsel, auditors, and compliance consultants — under strict confidentiality obligations.

Any third party that receives personal data from gf77 is contractually required to handle that data in accordance with applicable Philippine data privacy law and is prohibited from using it for any purpose beyond the specific function for which it was shared.

8. Cookies and Tracking Technologies

The gf77 Platform uses cookies and similar tracking technologies to operate correctly, maintain session state (keeping you logged in between page loads), and collect anonymized usage analytics. The types of cookies gf77 uses include:

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that manage your login state. You cannot opt out of these without ceasing to use the Platform;
• Analytics cookies: Used to understand how users navigate the Platform, which pages are visited most, and how long sessions last — in aggregate, anonymized form only;
• Preference cookies: Store your language or display preferences to improve your experience on return visits.

gf77 does not use third-party advertising cookies or tracking pixels that share your data with external advertising networks. You can manage cookie preferences through your browser settings, though disabling strictly necessary cookies will affect Platform functionality.

9. Data Security

gf77 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and gf77 servers;
• Industry-standard password hashing (bcrypt or equivalent) — gf77 never stores plaintext passwords;
• Role-based access controls limiting personal data access to authorized gf77 personnel with a legitimate need;
• Regular security assessments and vulnerability monitoring;
• Two-factor authentication (OTP via SMS) for account access from new devices.

While gf77 takes all reasonable precautions, no internet transmission or electronic storage system is completely secure. In the event of a data breach that poses a risk to your rights and freedoms, gf77 will notify affected users and the National Privacy Commission of the Philippines in accordance with applicable law.

10. Data Retention

gf77 retains your personal data for the following periods:

• Active account data: Retained for the full duration of your gf77 account;
• Transaction and financial records: Retained for a minimum of five (5) years following each transaction, as required by Philippine anti-money laundering regulations (AMLA);
• Identity verification documents: Retained for the duration of your account plus a minimum of five (5) years after account closure;
• Customer support communications: Retained for two (2) years from the date of the interaction;
• Self-exclusion records: Retained for the full duration of the self-exclusion period plus an additional two (2) years to prevent re-registration in violation of the exclusion.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized. Anonymized aggregated data (which cannot identify you) may be retained indefinitely for statistical purposes.

11. Your Data Rights

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by gf77:

• Right to be informed: You have the right to know what personal data gf77 holds about you and how it is being processed;
• Right of access: You may request a copy of the personal data gf77 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data in your gf77 account;
• Right to erasure: Subject to legal retention requirements, you may request deletion of your personal data. Note that gf77 may be legally required to retain certain records even after account closure;
• Right to object: You may object to processing based on legitimate interests, including direct marketing communications;
• Right to data portability: You may request a machine-readable copy of personal data you have provided directly to gf77;
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe gf77 has processed your data in violation of applicable law.

To exercise any of the above rights, contact gf77's Data Protection contact at [email protected]. gf77 will respond to verified requests within 15 business days, or such other period as required by applicable law.

12. Children and Minors

The gf77 Platform is strictly intended for adults aged 21 years and above, in accordance with PAGCOR regulations and Philippine gaming law. gf77 does not knowingly collect personal data from individuals under the age of 21. Age verification is performed as part of the mandatory KYC process during account registration.

If gf77 becomes aware that personal data has been collected from a user who has misrepresented their age and is under 21, that account will be immediately terminated, all balances forfeited, and the personal data deleted to the extent not required by law. If you believe a minor has registered on the gf77 Platform, please contact gf77 support immediately.

13. Changes to This Privacy Policy

gf77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. When material changes are made, gf77 will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users via their registered mobile number or email address.

Continued use of the gf77 Platform following notification of changes constitutes acceptance of the revised Privacy Policy. If you do not accept the changes, you should cease using the Platform and contact gf77 support to request account closure.

14. Contact Us

For all privacy-related inquiries, data access requests, or complaints regarding gf77's handling of your personal data, please contact the gf77 Data Protection team:

Email: [email protected]

Support Hours: 24 hours a day, 7 days a week. Filipino-speaking agents are available to assist with inquiries in both English and Filipino.

For complaints that have not been satisfactorily resolved through gf77's internal process, you may escalate to the National Privacy Commission of the Philippines (NPC) through their official channels.