Privacy Policy

This Privacy Policy ("Policy") describes how gc77 ("gc77," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of users ("you," "your," or "the Player") who access or use the gc77 online casino and sports betting platform available at gc77.app (the "Platform").

gc77 is committed to protecting the privacy and personal data of all players, particularly those based in the Philippines. This Policy is drafted in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission of the Philippines.

gc77 collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

• Full legal name, date of birth, and nationality
• Residential address (including barangay, city, and province for Philippine-based players)
• Email address and mobile number
• Government-issued identification documents (e.g., Philippine passport, SSS ID, UMID, driver's license, PhilSys ID)

• Payment method details (GCash account number, PayMaya account, BPI/BDO/Metrobank account details, Visa/Mastercard card details)
• Deposit and withdrawal transaction history
• Source of funds documentation where required for KYC compliance

• Username, account ID, and login credentials (passwords are stored in hashed form and are never readable by gc77 staff)
• Betting history, game session data, wagering patterns, and bonus usage
• Responsible gaming preferences, deposit limits, and self-exclusion status

• IP address, device type, operating system, and browser type
• Geolocation data (country and region level, used for compliance purposes)
• Session timestamps, page interaction data, and referral source

• Records of your communications with gc77 customer support, including live chat transcripts and email correspondence
• Survey responses and feedback submitted through the Platform

gc77 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated collection: Technical and device data collected automatically when you access the Platform, including through cookies, web beacons, and similar tracking technologies (see Section 7 for details).
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from anti-money laundering screening services; payment data from payment processors such as GCash, PayMaya, and banking partners.

gc77 does not collect personal data from social media platforms or purchase data lists from third-party data brokers.

gc77 uses the personal data we collect for the following purposes:

gc77 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or expressly consented to by you.

gc77 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfil our obligations to you under the gc77 Terms & Conditions, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including anti-money laundering (AMLA) requirements, KYC obligations, and tax reporting duties.
• Legitimate interests: Processing necessary for gc77's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and optional analytics features. You may withdraw consent at any time without affecting the lawfulness of prior processing.

gc77 does not sell your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

Third-party vendors who assist gc77 in operating the Platform, including KYC and identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard, InstaPay), cloud hosting providers, customer support software providers, and fraud detection services. These providers are contractually bound to process your data only as instructed by gc77 and in accordance with applicable data protection law.

gc77 may disclose personal data to Philippine government agencies, regulatory bodies, or law enforcement authorities where required by law, court order, or regulatory directive. This includes disclosures required under the Anti-Money Laundering Act (AMLA) and its amendments.

In the event of a merger, acquisition, or sale of all or part of gc77's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Policy that result from it.

gc77 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session, and analyse usage patterns. The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled without affecting core functionality such as login sessions and security features.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming limits you have set.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the Platform, helping us identify areas for improvement. No personally identifiable information is included in analytics reports.
• Security cookies: Used to detect and prevent fraudulent activity, including session hijacking and account takeover attempts.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from accessing certain features of the Platform. gc77 does not use third-party advertising cookies or cross-site tracking technologies.

gc77 retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulatory obligations. Specific retention periods include:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for three (3) years from the date of the last interaction.
• Marketing consent records: Retained for the duration of your account and for two (2) years following account closure or withdrawal of consent.
• Technical and session data: Retained for up to twelve (12) months, after which it is aggregated and anonymised.

Upon expiry of the applicable retention period, gc77 will securely delete or anonymise your personal data in accordance with our internal data disposal procedures.

gc77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and gc77 servers
• AES-256 encryption for sensitive data stored at rest, including payment details and identity documents
• Bcrypt hashing for all account passwords — gc77 staff cannot view your password in plain text
• Multi-factor authentication options for player accounts
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular security audits, penetration testing, and vulnerability assessments
• 24/7 monitoring for suspicious activity and automated fraud detection systems

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, gc77 will notify you and the National Privacy Commission in accordance with the requirements of the Data Privacy Act of 2012.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by gc77:

• Right to be informed: The right to know what personal data gc77 collects about you and how it is used — which this Policy fulfils.
• Right of access: The right to request a copy of the personal data gc77 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to gc77's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact gc77's Data Protection Officer using the contact details in Section 13. We will respond to all verified requests within fifteen (15) business days.

gc77 is strictly an adult platform. In accordance with Philippine law, participation in online casino gaming and sports betting is restricted to individuals who are 21 years of age or older. gc77 does not knowingly collect personal data from any person under the age of 21.

If gc77 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the data, and report the matter to the appropriate authorities where required. If you believe a minor has registered on gc77, please notify us immediately at the contact details provided in Section 13.

gc77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via the email address on file and post a prominent notice on the Platform at least fourteen (14) days before the changes take effect.

The "Last updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how gc77 protects your personal data. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the gc77 Data Protection Officer (DPO). Our DPO is responsible for overseeing gc77's compliance with the Data Privacy Act of 2012 and is your primary point of contact for all privacy-related matters.

Email (plain text — not a clickable link): [email protected]

Please include "Privacy Request" in the subject line of your email and provide sufficient detail to allow us to identify your account and respond to your request accurately. gc77 aims to acknowledge all privacy-related enquiries within three (3) business days and to resolve them within fifteen (15) business days.

If you are not satisfied with gc77's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines through their official channels.