Your privacy matters to gm777. This Policy explains exactly what personal information we collect from Filipino players, how we use it, how we protect it, and what rights you have over your own data under Philippine law.
Privacy documents can be long. Here are the six most important points from gm777's Privacy Policy in plain language — before you read the full text below.
gm777 is a Philippines-based operator. Your personal data is collected, stored, and primarily processed within Philippine jurisdiction. Any cross-border transfer of data requires the same protections afforded by Republic Act 10173 (the Data Privacy Act) and is only permitted where legally compliant safeguards are in place.
All personal data transmitted between your device and gm777's servers is protected by 256-bit SSL/TLS encryption — the same standard used by Philippine banks and BangkoSentralng Pilipinas-regulated financial institutions. Your login credentials and financial information are additionally encrypted at rest using industry-standard AES-256.
Under Republic Act 10173, every Filipino data subject has rights over their personal information. gm777 honors all of these rights: the right to be informed, access, rectification, erasure, portability, object to processing, and to file a complaint with the National Privacy Commission (NPC). Data rights requests are processed within ten (10) business days.
gm777 does not sell, rent, or commercially trade your personal information to any third party. Data is shared only with our operational service providers (payment processors, game providers, KYC verification services) under strict data processing agreements, and with Philippine regulatory authorities where legally required.
gm777 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, satisfy legal obligations, or resolve disputes. Account data is retained for five (5) years following account closure in compliance with Philippine AML retention requirements. Data no longer needed is securely deleted.
gm777 will only send promotional SMS, email, or Viber messages to players who have opted in to marketing communications. You may withdraw your consent and unsubscribe at any time via your Account Settings or by contacting gm777 support. Opt-out requests are processed within 48 hours.
This Privacy Policy ("Policy") describes how gm777 ("gm777," "we," "us," or "our"), operator of the online gaming platform at gm777.lat ("Platform"), collects, uses, stores, shares, and protects the personal information of registered players and Platform visitors ("you" or "Data Subject"). This Policy forms part of your agreement with gm777 and must be read together with our Terms & Conditions.
1.1 Applicability. This Policy applies to all personal data collected by gm777 from individuals who register an account on the Platform, visit gm777.lat as a guest, contact gm777 support, or interact with gm777's marketing communications. It applies regardless of the device used to access the Platform and regardless of whether you are located in Metro Manila, Cebu, Davao, or any other part of the Philippines.
1.2 Scope of Personal Data. "Personal data" for the purposes of this Policy means any information that relates to an identified or identifiable individual — that is, information that can be used directly or indirectly to identify you as a specific person. This includes your name, mobile number, date of birth, identity document details, financial transaction data, and gaming activity data.
1.3 Acceptance. By registering a gm777 account or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with the terms of this Policy, you should not create a gm777 account or access the Platform.
2.1 Identity of Controller. The personal information controller for all data collected through the gm777 Platform is gm777 Group, a gaming entity licensed by the Philippine Amusement and Gaming Corporation (PAGCOR) and registered with the National Privacy Commission of the Philippines.
2.2 Data Protection Officer. gm777 has appointed a Data Protection Officer (DPO) responsible for overseeing data protection compliance and handling data rights requests. The DPO can be reached via the contact details specified in Section 16 of this Policy.
gm777 collects the following categories of personal data from players and Platform users:
| Category | Examples of Data Collected | Required or Optional |
|---|---|---|
| Registration Data | Full legal name, date of birth, Philippine mobile number, email address, username, password (hashed) | Required |
| Identity Verification (KYC) | Government-issued ID type and number (PhilSys, UMID, passport, driver's license, SSS, Voter's ID), selfie photograph, proof of address where requested | Required for withdrawals |
| Financial Data | GCash or PayMaya account number (masked), bank account details for bank transfer withdrawals, deposit and withdrawal transaction records, balance history | Required |
| Gaming Activity Data | Game sessions played, wagers placed, game results, bonus claims and wagering progress, session duration data | Automatically collected |
| Device & Technical Data | IP address, device type, operating system, browser type and version, screen resolution, mobile network identifier, approximate geographic location derived from IP | Automatically collected |
| Communications Data | Customer support chat transcripts, email correspondence, Viber messages, dispute records, feedback submitted via the Platform | Collected when you contact us |
| Marketing Preferences | SMS opt-in status, email newsletter consent, Viber communication preferences, promotional offer interaction history | Optional |
3.1 Sensitive Personal Information. Certain data collected during KYC verification, including government ID numbers and facial photographs, constitutes "sensitive personal information" as defined under the DPA. gm777 applies heightened security and access controls to this category of data and processes it only for the specific, lawful purposes stated in this Policy.
gm777 collects personal data through the following channels and methods:
Under the Data Privacy Act of 2012 and its Implementing Rules, gm777 processes personal data on one or more of the following lawful bases:
gm777 uses personal data collected from Filipino players for the following purposes:
7.1 Third-Party Service Providers. gm777 shares personal data with a limited number of trusted third-party service providers who assist us in operating the Platform. These providers process data only on gm777's instructions and are bound by data processing agreements that require them to maintain the same level of data protection required under the DPA. Categories of providers include:
7.2 Regulatory Disclosure. gm777 is required by Philippine law to disclose personal data to the following authorities in defined circumstances:
7.3 Business Transfers. In the event that gm777 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction, subject to the acquiring entity assuming the same data protection obligations set out in this Policy.
8.1 What Are Cookies. Cookies are small text files stored on your device when you visit gm777.lat. gm777 uses cookies and similar tracking technologies (including local storage, session tokens, and pixel tags) to operate the Platform securely, remember your preferences, and improve your experience.
8.2 Types of Cookies Used.
8.3 Cookie Control. You can manage non-essential cookies through your browser's settings. Blocking strictly necessary cookies will prevent you from logging into your gm777 account. Blocking analytics or marketing cookies will not affect your ability to use the Platform but may result in less relevant promotional communications.
9.1 Technical Measures. gm777 implements the following technical security measures to protect your personal data:
9.2 Organizational Measures. Access to player personal data within gm777 is restricted on a strict need-to-know basis. All employees and contractors with access to personal data are subject to confidentiality obligations and undergo mandatory data privacy training. Access rights are reviewed quarterly.
9.3 Data Breach Notification. In the event of a personal data breach that is likely to result in significant harm to you, gm777 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required under Section 20(f) of the DPA. Affected data subjects will be notified within the timeframe prescribed by NPC guidelines.
10.1 Retention Periods. gm777 retains different categories of personal data for different periods, based on the purpose of collection and applicable legal requirements:
10.2 Deletion. Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification. Anonymized, aggregated data (from which individual identity cannot be recovered) may be retained indefinitely for Platform analytics purposes.
Under Republic Act 10173 (Data Privacy Act) and its Implementing Rules, you have the following rights as a Filipino data subject with respect to your personal information held by gm777:
You have the right to be informed of the existence of processing of your personal data, the purpose and legal basis for processing, the categories of data processed, and the identity of third parties to whom data may be disclosed — all of which are set out in this Policy.
You may request a copy of the personal data gm777 holds about you, including gaming history, KYC records, and transaction history. gm777 will provide a structured, readable copy within ten (10) business days of a verified request.
If you believe that personal data gm777 holds about you is inaccurate or incomplete, you may request correction. Identity-linked data (name, date of birth, ID number) requires supporting documentation to amend.
You may request deletion of your personal data where it is no longer necessary for the purpose collected, where you withdraw consent (where consent is the basis), or where the data has been unlawfully processed. This right is subject to gm777's legal retention obligations under Philippine AML and PAGCOR regulations.
You may request your personal data in a structured, commonly used, machine-readable format for transfer to another service provider where technically feasible and legally permitted.
You may object to the processing of your personal data on grounds of legitimate interests. You also have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.
12.1 Age Restriction. The gm777 Platform is strictly for individuals aged twenty-one (21) years and above, as required by PAGCOR and Philippine gaming law. gm777 does not knowingly collect personal data from individuals under the age of 21.
12.2 Discovery of Underage Data. If gm777 discovers that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account, delete the personal data in question, and notify PAGCOR where required. Parents or guardians who believe a minor has created a gm777 account should contact support immediately.
13.1 Cross-Border Processing. Certain third-party service providers used by gm777 — including game technology providers and fraud detection services — may process data on servers located outside the Philippines. When such transfers occur, gm777 ensures that equivalent data protection standards are maintained through contractual data processing agreements incorporating the NPC's prescribed cross-border transfer protections.
13.2 Adequacy and Safeguards. gm777 only transfers personal data outside the Philippines to jurisdictions or entities that can demonstrate an adequate level of data protection, or where contractual safeguards equivalent to Philippine DPA requirements are in place. No personal data is transferred to jurisdictions without appropriate legal safeguards in place.
14.1 Opt-In Only. gm777 sends promotional SMS messages, email newsletters, and Viber notifications only to players who have explicitly opted in to receive such communications during account registration or through their Account Settings. Marketing consent is separate from your agreement to these Terms and is not a condition of account registration.
14.2 Content of Marketing. Marketing communications from gm777 may include bonus offers, new game announcements, tournament invitations, sports betting promotions, and platform news. All marketing materials identify gm777 as the sender and include instructions for opting out.
14.3 Withdrawal of Consent. You may withdraw your consent to marketing communications at any time by:
Withdrawal of marketing consent does not affect gm777's right to send transactional messages (such as deposit confirmations, withdrawal notifications, or account security alerts), which are necessary for the operation of your account.
15.1 Right to Update. gm777 reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, legal requirements, or Platform operations. The effective date at the top of this Policy will be updated to reflect any revision.
15.2 Notification of Material Changes. Material changes to this Policy — including changes to the categories of data collected, new purposes for processing, or changes to data sharing practices — will be communicated to registered players via SMS notification or email at least fourteen (14) calendar days before the change takes effect.
15.3 Continued Use as Acceptance. Your continued use of the gm777 Platform following any update to this Policy constitutes acceptance of the revised Policy. If you do not accept the updated Policy, you should cease using the Platform and contact gm777 support to close your account.
For any questions, concerns, or requests related to this Privacy Policy or your personal data rights, please contact gm777's Data Protection Officer through any of the following channels:
gm777 will acknowledge all formal data rights requests within forty-eight (48) hours and provide a substantive response within ten (10) business days, unless the complexity of the request requires additional time, in which case we will notify you of the extended timeline.