ggg77 Privacy Policy

This Privacy Policy ("Policy") describes how ggg77 ("ggg77", "we", "us", "our"), the operator of the online gaming platform accessible at ggg77.org (the "Platform"), collects, uses, processes, stores, and protects the personal data of its users, registered players, and website visitors ("you", "your", "Player").

ggg77 is committed to protecting the privacy and personal data of all individuals who interact with the Platform. This Policy is drafted in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission of the Philippines ("NPC"). It is also informed by the data governance requirements imposed on ggg77 as a PAGCOR-regulated online gaming operator.

This Policy applies to all personal data collected through ggg77.org, our mobile-optimised site, customer support communications, live chat, and any other channel through which you interact with ggg77. It should be read together with our Terms & Conditions and Responsible Gaming policy.

For the purposes of the Data Privacy Act of 2012, ggg77 is the personal information controller in respect of the personal data you provide when using the Platform. As personal information controller, ggg77 determines the purposes for which and the means by which your personal data is processed.

ggg77 has designated a Data Protection Officer (DPO) responsible for overseeing the Platform's compliance with RA 10173 and for responding to data subject requests and complaints. The DPO may be contacted at the email address provided in Section 15 of this Policy.

ggg77 collects the following categories of personal data from and about you:

ggg77 does not intentionally collect sensitive personal information beyond what is strictly necessary for KYC compliance and responsible gaming obligations. Where sensitive personal information is processed (for example, where government ID documents reveal health or other sensitive data incidentally), such data is treated with heightened protection and is processed only to the extent required by law.

ggg77 collects personal data through the following means:

• Direct submission — information you provide when registering an account, completing KYC verification, submitting deposit or withdrawal requests, contacting support, or responding to promotions;
• Automated collection — technical data collected automatically when you access or use the Platform, including device identifiers, IP addresses, and session activity logs gathered through cookies and similar tracking technologies;
• Third-party sources — identity verification data from KYC service providers engaged by ggg77; payment transaction data from GCash, PayMaya, BPI, BDO, or Metrobank as part of deposit and withdrawal processing; fraud detection signals from our security partners; and regulatory data provided by PAGCOR in connection with licensing compliance.

ggg77 processes your personal data for the following purposes:

• Account creation and management — to register your account, verify your identity, maintain accurate account records, and enable you to log in to and use the ggg77 Platform;
• KYC and regulatory compliance — to fulfil PAGCOR-mandated identity and age verification requirements and to comply with Anti-Money Laundering Council (AMLC) reporting obligations under the AMLA (RA 9160, as amended);
• Payment processing — to process deposits and withdrawals through your selected Philippine payment method and to maintain an accurate transaction history;
• Game delivery and platform operation — to provide access to slots, bingo, Fortune Bingo, live casino, and sports betting products and to ensure the technical operation of the Platform;
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct;
• Responsible gaming — to administer deposit limits, loss limits, self-exclusion elections, and cooling-off periods, and to monitor gaming patterns for responsible gaming safeguarding obligations;
• Customer support — to respond to your queries, resolve complaints, and communicate with you regarding your account;
• Marketing communications — where you have consented, to send you information about ggg77 promotions, bonuses, and new game offerings. You may withdraw this consent at any time through your account settings or by contacting support;
• Platform improvement — to analyse aggregated usage data for the purpose of improving Platform features, user experience, and game selection;
• Legal obligations — to comply with applicable Philippine law, court orders, and lawful requests from PAGCOR, AMLC, NPC, and other competent authorities.

Under the Data Privacy Act of 2012, ggg77 processes your personal data on the following legal bases:

• Contractual necessity — processing required to fulfil our obligations to you under the Terms & Conditions, including account management, payment processing, and game delivery;
• Legal obligation — processing required to comply with PAGCOR regulations, the AMLA, the Data Privacy Act, and other applicable Philippine law;
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and general Platform improvement, where such interests are not overridden by your fundamental rights and freedoms;
• Consent — processing for marketing communications and any other processing activity for which we have obtained your separate, specific, informed consent. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ggg77 does not sell your personal data to any third party. We share personal data only in the following circumstances and only to the extent strictly necessary for the stated purpose:

• Service providers and processors — we engage third-party vendors to assist in KYC verification, payment processing (GCash, PayMaya, BPI, BDO, Metrobank), fraud detection, cloud infrastructure, and customer support technology. All such vendors are engaged under binding data processing agreements that prohibit them from using your data for any purpose other than those specified by ggg77.
• Game providers — game software providers may receive limited technical identifiers (session tokens, game round identifiers) to deliver game sessions. They do not receive your name, government ID data, or financial details.
• Regulatory authorities — ggg77 is legally obligated to share data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies upon lawful request or as required by applicable law.
• Corporate transactions — in the event of a merger, acquisition, or sale of assets involving ggg77, your personal data may be transferred to the relevant successor entity, subject to the same privacy protections described in this Policy.
• With your consent — we may share your data with third parties for other purposes where you have given your explicit prior consent.

Some of ggg77's service providers and game software suppliers operate from jurisdictions outside the Philippines. Where personal data is transferred outside the Philippines, ggg77 ensures that appropriate safeguards are in place as required by the Data Privacy Act of 2012 and NPC guidelines. Such safeguards include binding contractual clauses, adequacy determinations, or other mechanisms approved by the NPC, ensuring your personal data receives a level of protection substantially equivalent to that provided under Philippine law.

ggg77 does not transfer personal data to jurisdictions that lack adequate data protection frameworks without the contractual safeguards described above.

ggg77 retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulatory obligations. Specific retention periods are determined by the following considerations:

• Account data and KYC records — retained for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AMLA obligations;
• Financial transaction records — retained for a minimum of five (5) years after the date of the transaction, as required under Philippine anti-money laundering law;
• Gaming activity logs — retained for a minimum of two (2) years for dispute resolution, responsible gaming monitoring, and regulatory audit purposes;
• Support communications — retained for two (2) years from the date of the last communication;
• Marketing consent records — retained until consent is withdrawn and for a reasonable period thereafter as evidence of the consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ggg77's data disposal procedures. Anonymised data that cannot reasonably be used to identify an individual may be retained for statistical and analytical purposes without time limit.

ggg77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and ggg77's servers;
• Encryption at rest for sensitive personal data and financial records stored on ggg77 servers;
• Access controls — strict role-based access controls ensuring that ggg77 personnel can access personal data only to the extent required for their specific job function;
• Two-factor authentication available for all player accounts and mandatory for ggg77 staff accessing sensitive systems;
• Continuous security monitoring — 24/7 monitoring of Platform infrastructure for anomalous activity, intrusion attempts, and data breach indicators;
• Regular security audits and penetration testing conducted by independent security professionals;
• Data minimisation — collecting only the personal data strictly necessary for the purposes described in this Policy.

In the event of a personal data breach that poses a real risk of harm to you, ggg77 will notify the National Privacy Commission and affected individuals within 72 hours of becoming aware of the breach, in accordance with the Data Privacy Act of 2012 and NPC Circular 16-03.

ggg77 uses cookies and similar technologies (including session storage and local storage) on the Platform for the following purposes:

• Essential cookies — strictly necessary for the Platform to function, including maintaining your login session, remembering your preferences, and ensuring security features operate correctly. These cannot be disabled without disrupting your use of the Platform.
• Analytics cookies — used to collect aggregated, anonymised information about how the Platform is used (pages visited, session duration, navigation paths) to help ggg77 improve user experience and Platform performance.
• Functionality cookies — used to remember your language preferences, display settings, and previously played games for personalisation purposes.
• Marketing cookies — used to measure the effectiveness of ggg77's promotional campaigns and to tailor communications to your interests, where you have consented to receive marketing communications.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the ggg77 Platform. Essential cookies cannot be disabled as they are required for basic Platform operation.

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ggg77. To exercise any of these rights, contact our Data Protection Officer at the details in Section 15.

• Right to be Informed — you have the right to be informed of how your personal data is collected, used, and shared. This Policy fulfils that obligation.
• Right to Access — you may request a copy of the personal data ggg77 holds about you, along with information on how it is processed.
• Right to Rectification — you may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure ("Right to be Forgotten") — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations (e.g., AMLA requirements).
• Right to Object — you may object to the processing of your personal data for direct marketing purposes at any time, without providing a reason. You may also object to processing based on legitimate interests by demonstrating that your fundamental rights override those interests.
• Right to Data Portability — where processing is based on consent or contractual necessity and is carried out by automated means, you may request that your personal data be provided in a structured, machine-readable format.
• Right to Block — you may request that ggg77 suspend processing of your personal data pending investigation or resolution of a dispute.

ggg77 will respond to data subject requests within 30 calendar days of receipt. If your request is complex or you have made multiple requests, the response period may be extended by up to 30 additional days, in which case you will be notified of the extension and the reason. Some rights are subject to limitations under applicable law — for example, we cannot erase data we are legally required to retain.

If you are not satisfied with ggg77's response to your data subject request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

The ggg77 Platform is strictly restricted to persons aged 21 years and above in compliance with PAGCOR regulations governing online gaming in the Philippines. ggg77 does not knowingly collect, store, or process the personal data of individuals under 21 years of age.

All accounts are subject to KYC age verification using a valid Philippine Government ID before full account privileges are activated. Where ggg77 discovers that personal data belonging to a person under 21 has been collected — whether through misrepresentation or other means — that data will be deleted promptly, the account will be suspended, and the matter may be referred to PAGCOR as required by regulation.

If you are a parent or guardian and believe that a minor may have used the ggg77 Platform, contact our support team immediately through live chat or at [email protected].

ggg77 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. Material changes will be communicated to registered players via email to the address on file or by a prominent notice on the Platform at least 7 days before the revised Policy takes effect, except where immediate amendment is required by law or urgent security considerations.

Your continued use of the ggg77 Platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of and agreement to the updated Policy. The current version of this Policy is always available at ggg77.org/privacy-policy. The effective date at the top of the page reflects the version currently in force.

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or have concerns about how ggg77 handles your personal data, please contact our Data Protection Officer:

You may also lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your rights under RA 10173 have not been upheld by ggg77.