gc777 Privacy Policy

1. Overview & Data Controller

This Privacy Policy ("Policy") is issued by gc777 ("gc777," "we," "us," "our"), the operator of the online casino and sports betting platform accessible at gc777.biz. gc777 acts as the data controller for all personal data collected through the platform, as defined under Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA) of the Philippines.

This Policy applies to all personal data collected from players, prospective players, website visitors, and any other individuals who interact with the gc777 platform or its support channels. It should be read in conjunction with gc777's Terms & Conditions, available at /terms-conditions.

gc777 is committed to processing personal data fairly, lawfully, and transparently — in full compliance with the DPA, its Implementing Rules and Regulations, and applicable PAGCOR data handling requirements. We appointed a Data Protection Officer (DPO) who can be contacted at the details provided in Section 14 of this Policy.

2. Personal Data We Collect

Depending on how you interact with gc777, we may collect the following categories of personal data:

gc777 does not collect sensitive personal information (as defined under Section 3(l) of the DPA) beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect biometric data beyond photo ID images required for KYC purposes.

3. How We Collect Your Data

gc777 collects personal data through the following channels:

• Direct submission: When you register an account, complete KYC verification, make a deposit, request a withdrawal, contact support, or participate in promotions;
• Automated collection: When you browse or use the gc777 platform, our servers automatically record technical data including IP address, device information, and usage logs;
• Cookies and tracking technologies: As described in Section 9 of this Policy;
• Third-party payment processors: When you transact via GCash, Maya, BDO, BPI, UnionBank, Metrobank, 7-Eleven Cliqq, USDT TRC20, or Coins.ph, our payment processors share transaction confirmation data with gc777;
• Fraud prevention and identity verification partners: gc777 may receive data from third-party identity verification services used to confirm KYC submissions.

4. How We Use Your Personal Data

gc777 processes personal data for the following purposes:

• Account management: Creating, maintaining, and securing your gc777 account; processing login and session authentication;
• Identity and age verification: Confirming that you meet the 21-year minimum age requirement under Philippine law and PAGCOR regulations;
• Payment processing: Processing deposits and withdrawals, including GCash cashouts, and maintaining transaction records;
• Regulatory compliance: Fulfilling obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory authorities;
• Fraud prevention and platform security: Detecting, investigating, and preventing cheating, money laundering, multi-accounting, and other prohibited conduct;
• Customer support: Responding to your queries, resolving disputes, and maintaining support interaction records;
• Responsible gaming: Monitoring account activity to identify potential problem gambling behaviour and enforcing any limits or exclusions you have set;
• Platform improvement: Analysing usage patterns to improve game offerings, website performance, and user experience;
• Marketing communications: Sending promotional offers and platform updates to players who have not opted out, subject to your communication preferences.

5. Legal Basis for Processing

gc777 processes your personal data on the following legal grounds as provided under the DPA and its Implementing Rules:

• Contractual necessity: Processing required to perform the services you have contracted with gc777 — including account management, gameplay, and payments;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the DPA, and other applicable Philippine laws;
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement where these interests are not overridden by your rights;
• Consent: Processing for marketing communications where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Third Parties

gc777 does not sell your personal data. We share data only as described below and only to the extent necessary for each purpose:

• PAGCOR and Philippine regulatory authorities: As required by our gaming licence and applicable law, including AMLC reporting obligations under the AMLA;
• Payment processors: GCash (GXI), Maya (Paymaya Philippines), BDO, BPI, Metrobank, UnionBank, and other Philippine payment service providers involved in processing your transactions;
• KYC and identity verification providers: Third-party services engaged to verify government-issued identification documents submitted during registration;
• Game software providers: Licensed game studios (e.g., Pragmatic Play, PG Soft) may receive anonymised session data necessary to deliver their games through the gc777 platform;
• IT and hosting providers: Cloud infrastructure and cybersecurity service providers who process data on behalf of gc777 under strict data processing agreements;
• Law enforcement: When required by court order, search warrant, or other lawful process issued by Philippine authorities.

All third-party data processors engaged by gc777 are contractually required to process personal data only as instructed by gc777 and to implement appropriate technical and organisational security measures.

7. Data Retention

gc777 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and KYC data: Retained for a minimum of 5 years following account closure, as required by PAGCOR licensing conditions and the AMLA;
• Financial transaction records: Retained for a minimum of 5 years following the date of each transaction, as required under the AMLA;
• Support communications: Retained for 3 years following resolution of the relevant issue;
• Usage and technical logs: Retained for 12 months for security and fraud investigation purposes;
• Marketing consent records: Retained for the duration of your account and for 2 years following account closure or opt-out.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with gc777's data destruction procedures, unless further retention is required by a specific legal obligation.

8. Data Security

gc777 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit TLS/SSL encryption for all data in transit between your device and gc777 servers;
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Multi-factor authentication requirements for all internal staff accessing production systems;
• Regular penetration testing and vulnerability assessments by independent security consultants;
• 24/7 automated threat monitoring and intrusion detection systems.

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, gc777 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected individuals where required by the DPA.

9. Cookies & Tracking Technologies

gc777 uses cookies and similar tracking technologies on the gc777.biz website. Cookies are small text files stored on your device that help the platform function correctly and improve your experience.

gc777 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to operate — including session authentication, load balancing, and security tokens. These cannot be disabled without breaking core platform functionality;
• Functional cookies: Store your preferences such as language settings and game display options;
• Analytics cookies: Used to understand how players navigate the platform — page views, session durations, and game engagement. Analytics data is aggregated and anonymised where possible;
• Security cookies: Support fraud detection and responsible gaming monitoring systems.

gc777 does not use third-party advertising or retargeting cookies. You may manage cookie preferences via your browser settings. Disabling strictly necessary cookies will affect platform functionality, including your ability to log in to your gc777 account.

10. Your Data Rights Under Philippine Law

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by gc777:

• Right to be informed: To know what personal data gc777 collects and how it is used — as described in this Policy;
• Right of access: To request a copy of the personal data gc777 holds about you;
• Right to rectification: To request correction of inaccurate or incomplete personal data;
• Right to erasure: To request deletion of your personal data, subject to gc777's legal retention obligations under the AMLA and PAGCOR regulations;
• Right to object: To object to processing of your personal data for direct marketing purposes at any time;
• Right to data portability: To receive your personal data in a structured, commonly used format where technically feasible;
• Right to lodge a complaint: To file a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of the above rights, please contact gc777's Data Protection Officer via live chat inside your account or by email at [email protected] (plain text — not a clickable link). gc777 will respond to verified data rights requests within 30 calendar days.

11. Minors & Age Restriction

gc777 does not knowingly collect personal data from individuals under 21 years of age. The gc777 platform is strictly for adults aged 21 and above in accordance with Philippine law. All registrations require identity verification confirming the applicant's age.

If gc777 becomes aware that personal data has been collected from an individual under 21, the account will be immediately suspended, the data deleted (subject only to mandatory legal retention of regulatory reports), and the matter reported to PAGCOR as required. Parents or guardians who believe a minor has created a gc777 account should contact support immediately via live chat.

12. Cross-Border Data Transfers

gc777 primarily processes personal data within the Philippines. Where data is transferred to service providers located outside the Philippines — such as cloud infrastructure providers or international game studios — gc777 ensures that such transfers are conducted in compliance with the DPA's requirements for cross-border data transfers, including execution of appropriate data transfer agreements incorporating standard contractual clauses.

gc777 does not transfer personal data to countries that do not provide an adequate level of data protection without implementing appropriate safeguards as required by the National Privacy Commission.

13. Changes to This Privacy Policy

gc777 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform features. The date of the most recent revision is displayed at the top of this page.

Where changes are material — such as changes to the categories of data collected, new third-party sharing arrangements, or changes to your rights — gc777 will notify registered players via email or platform notification at least 14 days before the revised Policy takes effect. Your continued use of the gc777 platform after the effective date constitutes acceptance of the updated Policy.

14. Contact & Data Protection Officer

gc777 has appointed a Data Protection Officer (DPO) as required under the Data Privacy Act. For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact:

If you are not satisfied with gc777's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official government website.