gl777 Privacy Policy

01 Introduction

gl777 ("the Platform", "we", "us", "our") operates the online casino and sportsbook at gl777.asia, serving Filipino players across the Philippines. We are committed to protecting the personal data of every individual who interacts with the gl777 Platform, whether as a registered member, a visitor, or in any other capacity.

This Privacy Policy ("Policy") is issued in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines of the National Privacy Commission (NPC) of the Philippines. It sets out the categories of personal data we collect, the purposes for which that data is processed, the legal bases upon which processing is conducted, and the rights available to you as a data subject under Philippine law.

This Policy applies to all personal data collected through the gl777 website, mobile browser platform, customer support interactions, marketing communications, payment processing activities, and any other point of contact between you and gl777. It should be read in conjunction with the gl777 Terms & Conditions and Responsible Gaming Policy.

02 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, gl777 is the personal information controller in respect of the personal data of Filipino players and users collected through the Platform.

gl777 has designated a Data Protection Officer (DPO) responsible for overseeing data protection compliance, handling data subject requests, and serving as the primary point of contact with the National Privacy Commission. Contact details for the gl777 DPO are provided in Section 15 of this Policy.

03 Personal Data We Collect

gl777 collects personal data through the following channels: account registration, identity verification (KYC), payment processing, gameplay and betting activity, customer support interactions, and through automated technical means such as cookies and server logs. The categories of personal data we collect include:

3.1 Registration Data

• Full legal name (as it appears on your government-issued Philippine ID)
• Date of birth (to verify the 21+ age requirement under PAGCOR regulations)
• Philippine mobile number and email address
• Username and encrypted password
• Residential address (city, province, postal code)

3.2 Identity Verification (KYC) Data

• Copy of a valid Philippine government-issued identification document (e.g., PhilSys National ID, UMID, Passport, Driver's Licence, SSS ID, GSIS ID, Postal ID)
• Proof of address documentation where enhanced due diligence is required
• Selfie or facial photograph for identity confirmation
• Source of funds documentation in cases where transaction thresholds trigger AML review

3.3 Financial Data

• GCash account number (linked to your registered Philippine mobile number)
• PayMaya account information
• Bank account details (BPI, BDO, Metrobank) for withdrawal processing
• Transaction history: deposits, withdrawals, amounts, timestamps, and payment method used

3.4 Gaming & Betting Activity Data

• Games played, bet amounts, win/loss records, session durations
• Sports bets placed, odds accepted, markets wagered on
• Bonus claims, free spin usage, and promotional activity
• Responsible gaming settings and limit configurations

3.5 Technical & Device Data

• IP address, device type, operating system, browser type and version
• Referring URL, pages visited, session duration, and click-path data
• Cookie identifiers and similar tracking technology data (see Section 7)
• Geolocation data (city-level, for regulatory compliance and fraud prevention)

3.6 Communications Data

• Live chat transcripts, email correspondence, and support ticket records
• Any personal data voluntarily provided by you in communications with gl777

04 How gl777 Uses Your Personal Data

gl777 processes your personal data only for specified, legitimate purposes. The purposes for which we process your data, and the corresponding legal bases, are as follows:

• Account registration and management: To create, maintain, and secure your gl777 account, including authentication and session management.
• Identity verification (KYC): To verify your age (21+) and identity as required by PAGCOR regulations and Philippine anti-money laundering law.
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank, and to maintain accurate transaction records.
• Service delivery: To provide access to casino games, sports betting, bingo, and all other features of the gl777 Platform.
• Regulatory compliance: To comply with PAGCOR licensing requirements, Philippine AML obligations under Republic Act No. 9160 as amended, and data protection obligations under RA 10173.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multiple account abuse, bonus fraud, money laundering, and unauthorised account access.
• Responsible gaming: To enforce player-set limits, process self-exclusion requests, monitor for indicators of problem gambling, and fulfil obligations under PAGCOR's responsible gaming framework.
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of gl777's support services.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to registered players who have opted in to marketing communications. You may opt out at any time via account settings or by contacting support.
• Platform improvement: To analyse usage patterns, game preferences, and technical performance data to improve the gl777 Platform for Filipino players.

05 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, gl777 relies on the following legal criteria for processing your personal data:

• Contractual necessity: Processing required to perform the contract between you and gl777 (i.e., the Terms & Conditions), including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing conditions, AML obligations, and tax reporting requirements.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform improvement, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and certain non-essential cookies, where your explicit consent has been obtained. You may withdraw consent at any time.

06 Data Sharing & Disclosure

gl777 does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

• Payment processors: Your financial data is shared with GCash, PayMaya, BPI, BDO, and Metrobank solely for the purpose of processing your transactions. These entities operate under their own privacy policies and are subject to Bangko Sentral ng Pilipinas (BSP) oversight.
• Game providers: Gameplay data may be transmitted to certified third-party game providers (e.g., for game state management and RNG certification). Game providers are bound by data processing agreements with gl777.
• KYC and AML service providers: Identity verification data may be processed by accredited KYC and anti-money laundering screening platforms engaged by gl777, operating under strict data processing agreements.
• PAGCOR and regulatory authorities: gl777 is required by law to report certain data to PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory bodies where required by applicable law.
• Law enforcement: gl777 will disclose personal data to Philippine law enforcement agencies where required by a valid court order, warrant, or lawful regulatory instruction.
• Corporate transactions: In the event of a merger, acquisition, or restructuring of gl777's business, your personal data may be transferred to the relevant successor entity, subject to equivalent data protection obligations.

07 Cookies & Tracking Technologies

gl777 uses cookies and similar tracking technologies to operate the Platform efficiently, maintain your login session, personalise your experience, and analyse usage patterns. Cookies are small text files stored on your device by your browser.

7.1 Types of Cookies Used by gl777

• Essential cookies: Required for the Platform to function. These include session cookies that maintain your logged-in state and security cookies that protect against cross-site request forgery (CSRF). These cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences such as language settings, game lobby layout, and responsible gaming configurations.
• Analytics cookies: Used to understand how Filipino players interact with the Platform — which games are most popular, where users drop off, and how load times affect engagement. Data is aggregated and anonymised.
• Security and fraud-detection cookies: Assist in identifying unusual login patterns, device fingerprinting for account protection, and detecting multiple-account abuse.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing gl777, but may affect certain personalisation features. gl777 does not use third-party advertising or retargeting cookies.

08 Data Retention

gl777 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years following the closure of your account, as required by the Philippine Anti-Money Laundering Act (AMLA) and PAGCOR's record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming and betting activity: Retained for three (3) years from the date of each session, or longer where required for dispute resolution or regulatory purposes.
• Customer support records: Retained for two (2) years from the date of the last interaction.
• Marketing data: Retained until you withdraw consent to marketing communications, plus any legally required minimum period thereafter.
• Technical logs: Retained for up to twelve (12) months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with gl777's data disposal procedures.

09 Data Security

gl777 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and gl777's servers.
• Encryption of sensitive data at rest, including KYC documents and financial information.
• Access controls limiting employee access to personal data on a strict need-to-know basis, with audit logging of all access events.
• Multi-factor authentication requirements for internal administrative access to player data systems.
• Regular security assessments and penetration testing of the Platform infrastructure.
• Incident response procedures aligned with the National Privacy Commission's data breach notification requirements under RA 10173.

10 Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by gl777. These rights may be exercised by contacting the gl777 Data Protection Officer as described in Section 15.

gl777 will respond to all data subject requests within thirty (30) calendar days of receipt, unless the request is complex or numerous, in which case the response period may be extended by a further thirty (30) days with prior notice to you.

11 Minors & Age Restriction

The 21+ age requirement is enforced during account registration through age declaration and is confirmed via identity verification (KYC) using government-issued Philippine ID documents. If you believe a person under 21 has registered on gl777, please contact our support team or DPO immediately at the contact details in Section 15.

Parents and guardians are encouraged to use device-level parental controls and to speak openly with young adults about the risks of real-money online gaming and the legal minimum age requirement in the Philippines.

12 International Data Transfers

The gl777 Platform is operated primarily within the Philippines and your personal data is stored on servers located in the Philippines or within the Asia-Pacific region. In limited circumstances, personal data may be transferred to or processed in jurisdictions outside the Philippines — for example, where a third-party game provider's technical infrastructure is hosted outside the Philippines.

Any such international transfer of personal data is conducted only where:

• The recipient country or organisation provides an adequate level of data protection recognised by the National Privacy Commission; or
• Appropriate safeguards are in place, such as a data processing agreement incorporating NPC-approved standard contractual clauses; or
• The transfer is necessary for the performance of the contract between you and gl777 (e.g., processing a game round hosted on international infrastructure).

13 Third-Party Services & Links

The gl777 Platform may reference third-party services such as payment processors (GCash, PayMaya, BPI, BDO, Metrobank) and certified game providers. These third parties operate under their own privacy policies and gl777 has no control over, and accepts no responsibility for, their data handling practices.

gl777 does not embed third-party social media widgets, external advertising scripts, or analytics services that transmit your personal data to social media platforms without your knowledge. The Platform uses only necessary operational analytics tools, and all such tools are contractually bound to process data only on gl777's instruction.

14 Amendments to This Policy

gl777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in Philippine law, NPC guidance, PAGCOR regulatory requirements, or gl777's data processing practices. Material changes will be communicated to registered players via email notification or an on-platform notice at least seven (7) days before the changes take effect.

The "Effective Date" at the top of this Policy indicates when the current version entered into force. We encourage you to review this Policy periodically. Your continued use of the gl777 Platform after any amendment constitutes acceptance of the updated Policy.

15 Contact & Data Protection Officer

For questions about this Privacy Policy, to exercise your data subject rights, or to report a potential data privacy concern, please contact gl777's Data Protection Officer through the following channels:

If you are not satisfied with gl777's response to your data privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph. The NPC is the Philippine government body responsible for administering and enforcing the Data Privacy Act of 2012.