gba777 Privacy Policy

Who We Are

gba777 (referred to in this Privacy Policy as "gba777", "we", "us", or "our") is the operator of the online gaming platform accessible at gba777.cam. gba777 is the data controller responsible for the personal information collected through the Platform, as defined under Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines (the "DPA") and its Implementing Rules and Regulations (IRR).

gba777 operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR) and is committed to processing personal data in a manner consistent with the DPA's general principles of transparency, legitimate purpose, and proportionality.

Scope of This Policy

This Privacy Policy applies to all personal information collected and processed by gba777 in connection with your use of the Platform, including when you: visit gba777.cam without registering, create and manage a registered Account, make deposits or withdrawals, participate in games, contact our customer support team, or interact with any promotional communication from gba777.

This Policy applies to all current, former, and prospective Players of the gba777 Platform. It does not apply to the websites, platforms, or services of third-party game providers or payment processors whose products are accessible through or integrated with gba777. Those third parties maintain their own privacy policies, which we encourage you to review separately.

Personal Data We Collect

3.1 Registration and Identity Data

When you create a gba777 Account, we collect information necessary to establish and verify your identity, including:

• Full legal name;
• Date of birth (for mandatory 21+ age verification);
• Residential address;
• Email address;
• Mobile number;
• Username and encrypted password;
• Nationality and citizenship details where required by PAGCOR or AMLA compliance.

3.2 Identity Verification (KYC) Documents

To comply with PAGCOR licensing requirements and the Anti-Money Laundering Act (AMLA), gba777 collects copies of government-issued identification documents. Acceptable documents include, but are not limited to, Philippine passports, driver's licences, SSS cards, UMID cards, and PhilSys national ID cards. We may also request proof of address and payment method verification documents.

3.3 Financial and Transaction Data

We collect data relating to deposits, withdrawals, wagers, and game transactions on your Account, including payment method details (e.g., GCash account reference, bank account details used for BPI, BDO, or Metrobank transfers), transaction amounts, timestamps, and transaction reference numbers. Full payment card or banking credentials are processed exclusively by our regulated third-party payment processors and are not stored in full by gba777.

3.4 Technical and Usage Data

When you access the Platform, we automatically collect certain technical information, including: IP address, browser type and version, operating system, device type and model, referring URL, pages visited and time spent, game session data, and login timestamps. This data is used primarily for security monitoring, fraud prevention, and improving Platform performance.

3.5 Communications Data

We retain records of communications between you and the gba777 support team, including live chat transcripts, email correspondence, and any complaints or dispute records. These records are maintained for quality assurance, compliance, and to assist in resolving future queries relating to the same account.

3.6 Responsible Gaming Data

Where you make use of gba777's responsible gaming tools — such as deposit limits, loss limits, session time controls, or self-exclusion requests — we record and store this data to enforce your chosen restrictions and to comply with our responsible gaming obligations under PAGCOR regulations.

How We Collect Your Data

gba777 collects personal data through the following channels:

• Directly from you: Information you provide voluntarily when registering, completing KYC verification, making transactions, contacting support, or adjusting account settings;
• Automatically: Technical and usage data collected via server logs, cookies, and similar tracking technologies when you interact with the Platform (see Section 9 on Cookies);
• From third-party verification services: Identity verification and fraud screening providers that gba777 engages to assist with KYC compliance may provide us with data relating to the accuracy of information you have submitted;
• From payment processors: Transactional confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment providers to confirm deposit and withdrawal processing;
• From game providers: Game session outcome data and RNG certification logs maintained by third-party game studios whose titles are offered on the gba777 Platform.

Purposes of Processing & Legal Bases

gba777 processes your personal data only for specific, legitimate purposes and only where a valid legal basis exists under the Data Privacy Act. The following table summarises our principal processing activities:

• Account creation and management: Processing is necessary to perform the contract between you and gba777 when you register an Account and use the Platform;
• KYC and age verification: Processing is required to comply with PAGCOR licensing obligations and to fulfil gba777's legal obligations under Philippine law, including the mandatory 21+ age restriction;
• Payment processing and fraud prevention: Processing is necessary for the performance of our contractual obligations and to protect the legitimate interests of gba777 and its Players against fraudulent activity and financial crime;
• AML compliance: Processing is required to comply with Republic Act No. 9160 (the Anti-Money Laundering Act) as amended, and related AMLC regulations applicable to PAGCOR-licensed operators;
• Customer support: Processing is necessary for the performance of our service obligations and our legitimate interest in maintaining quality support records;
• Responsible gaming: Processing is necessary to comply with PAGCOR responsible gaming requirements and to protect the wellbeing of Players who have set voluntary restrictions on their Account;
• Marketing communications: Processing is based solely on your consent, given at registration or updated in your Account settings. You may withdraw this consent at any time without affecting any other aspect of your Account;
• Platform improvement and analytics: Processing based on our legitimate interest in maintaining, securing, and improving the performance of the gba777 Platform for all users.

Sharing of Personal Data

gba777 does not sell, rent, or trade personal data to third parties for their own commercial purposes. We share personal data only in the following circumstances and only to the extent necessary for each purpose:

6.1 Regulatory Authorities

We are required by PAGCOR licensing conditions to report certain data to PAGCOR. We may also be required to disclose information to the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or other government bodies where required by applicable Philippine law or a valid legal order.

6.2 Payment Processors

Transaction data is shared with payment service providers — including GCash, PayMaya, BPI, BDO, and Metrobank — to the extent necessary to process deposits and withdrawals. These providers are bound by their own regulatory obligations and contractual data protection commitments.

6.3 Identity Verification Providers

To fulfil KYC obligations, gba777 may share identity data with third-party verification service providers operating under contractual data processing agreements with gba777. These providers are permitted to use data only for the purpose of identity and fraud screening on gba777's behalf.

6.4 Game Providers

The game providers whose titles appear on the gba777 Platform — such as JILI, PG Soft, Pragmatic Play, and others — receive limited game-session data necessary to deliver the game experience. These providers operate under contractual obligations consistent with applicable data protection law.

6.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of gba777's business, personal data held by gba777 may be transferred to the acquiring entity. We will notify affected Players prior to any such transfer becoming effective and will ensure the receiving entity is bound by data protection obligations no less protective than those set out in this Policy.

International Data Transfers

gba777 operates primarily within the Philippines, and the majority of personal data we hold is stored on servers located in or serving the Philippine market. However, some of our third-party service providers — including certain game studios and technical infrastructure providers — may process data in other jurisdictions.

Where personal data is transferred outside the Philippines, gba777 takes steps to ensure that such transfers are subject to appropriate safeguards consistent with the requirements of the Data Privacy Act and its IRR, including the use of contractual data processing agreements and, where applicable, reliance on jurisdictions that the National Privacy Commission has recognised as providing adequate data protection standards.

Data Retention

gba777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and KYC data: Retained for the duration of your active Account plus a minimum of five (5) years following Account closure, as required by PAGCOR licensing conditions and AMLA record-keeping obligations;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with AMLA requirements;
• Support communications: Retained for three (3) years from the date of the last communication or resolution of the relevant matter, whichever is later;
• Technical and usage logs: Generally retained for up to twelve (12) months for security and fraud monitoring purposes, unless longer retention is required in connection with a specific investigation or legal proceeding;
• Marketing consent records: Retained for the duration of your Account and for a period of three (3) years after consent is withdrawn, to evidence compliance.

On expiry of the relevant retention period, personal data is securely deleted or anonymised in accordance with gba777's internal data disposal procedures.

Cookies & Tracking Technologies

gba777 uses cookies and similar tracking technologies on the Platform to enable core functionality, improve user experience, and support security operations. The categories of cookies we use are as follows:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without materially affecting the Platform's functionality;
• Functional cookies: Used to remember your Platform preferences, such as language and display settings. These improve your experience but are not strictly necessary;
• Analytics cookies: Used to understand how Players interact with the Platform — which pages are visited most, where users exit, and how game sessions are navigated. This data is aggregated and anonymised where possible and used solely for internal Platform improvement purposes;
• Security cookies: Used to detect and prevent fraudulent login attempts, account takeover activity, and other security threats.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use the gba777 Platform. gba777 does not use third-party advertising cookies or permit external ad networks to place tracking cookies on the Platform.

Your Rights Under Philippine Data Privacy Law

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal information held by gba777:

• Right to be informed: You have the right to know whether gba777 holds personal data about you, and to receive clear information about how it is being processed — which is the purpose of this Privacy Policy;
• Right of access: You have the right to request a copy of the personal data gba777 holds about you and to receive information about how it is being used;
• Right to rectification: You have the right to request correction of any inaccurate, incomplete, or outdated personal data we hold about you;
• Right to erasure or blocking: You have the right, in certain circumstances, to request deletion or blocking of your personal data — for example, where the data is no longer necessary for the purpose for which it was collected. Note that regulatory retention obligations under PAGCOR and AMLA may limit the scope of this right in some instances;
• Right to object: You have the right to object to certain types of processing, including processing based on legitimate interests and processing for direct marketing purposes;
• Right to data portability: You have the right to receive a copy of certain personal data in a structured, commonly used, machine-readable format, to be transferred to another data controller where technically feasible;
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data protection rights have been violated.

Security Measures

gba777 implements a range of technical and organisational security measures designed to protect your personal data from unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include, but are not limited to:

• Transport Layer Security (TLS) encryption for all data in transit between your device and the Platform;
• Encryption of sensitive data fields at rest in our database systems;
• Access controls restricting personal data access to authorised personnel only, on a need-to-know basis;
• Multi-factor authentication requirements for internal administrative access to player data systems;
• Regular security audits and vulnerability assessments of the Platform infrastructure;
• Incident response procedures for the detection, investigation, and notification of personal data breaches in accordance with NPC requirements.

While gba777 takes all reasonable steps to protect your personal information, no online platform can guarantee absolute security. You also have a role to play in protecting your Account: use a strong, unique password, enable two-factor authentication where available, and never share your login credentials with anyone.

Children and Minors

The gba777 Platform is strictly prohibited for individuals under the age of 21 years, in accordance with PAGCOR regulations governing online gaming in the Philippines. gba777 does not knowingly collect personal data from individuals under 21 years of age.

Age verification is applied to all registration attempts as part of our KYC process. If gba777 becomes aware that personal data has been collected from an individual who is under 21 years of age, we will immediately close the associated Account, return any deposited funds to the payment source used, and delete all personal data associated with the underage registration.

If you are a parent or guardian and believe that a minor has created an Account on gba777, please contact our support team immediately via live chat so that we can investigate and take appropriate action.

Changes to This Privacy Policy

gba777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. The most current version of this Policy will always be available on this page, identified by the effective date at the top of the document.

For material changes that significantly affect how we process your personal data or your rights as a data subject, gba777 will provide advance notice via email to the address registered on your Account or through a prominent notification on the Platform. Continued use of gba777 following the effective date of any updated Privacy Policy constitutes your acknowledgment of and agreement to the revised terms.

If you disagree with any update to this Policy and do not wish to continue using the Platform under the revised terms, you may request Account closure as described in the Terms & Conditions.

Contact & Data Protection Officer

gba777 has designated a Data Protection Officer (DPO) as required under the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, you may contact the gba777 DPO through the following channels:

• Live chat: Available 24 hours a day, 7 days a week through the gba777 Platform — this is the fastest way to reach our support and DPO team;
• Email: [email protected] — plain text only, not a clickable link. Please include "Privacy Request" in the subject line for DPO-specific matters;

If you are not satisfied with gba777's response to your data protection query or complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines, the independent regulatory authority responsible for enforcing the Data Privacy Act.