GK77 Privacy Policy

GK77 ("GK77," "we," "us," "our") is the data controller responsible for the personal information collected through the GK77 platform at gk77.asia. GK77 operates an online casino and sports betting platform serving Filipino players, and processes personal data in accordance with the Philippine Data Privacy Act of 2012 (RA 10173), PAGCOR regulations, and all applicable Philippine laws governing data protection and online gambling.

As a data controller, GK77 determines the purposes and means of processing your personal information. For all data privacy inquiries, requests, or complaints, please contact GK77's designated Data Protection Officer (DPO) using the contact details in Section 13 of this Policy.

GK77 collects the following categories of personal data. We collect only the data that is necessary for the stated purpose — no more.

GK77 does not knowingly collect special categories of sensitive personal information (such as health data, religious beliefs, or political opinions) unless explicitly required by applicable law or PAGCOR regulatory mandate.

GK77 collects personal data through the following channels:

• Direct Collection: Information you provide when registering a GK77 account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or completing responsible gaming forms.
• Automated Technical Collection: Data collected automatically when you access gk77.asia, including IP addresses, device identifiers, browser session data, cookies, and in-game activity logs. See Section 9 for full cookie details.
• Payment Processors: Transaction confirmation data shared with GK77 by GCash, Maya, BPI, BDO, Metrobank, or other payment providers when you make a deposit or withdrawal.
• Identity Verification Services: Confirmation of identity and age from third-party KYC verification providers as required by PAGCOR regulations.
• Fraud and AML Screening Services: Risk scores and screening results from third-party anti-money laundering and fraud detection services used to protect the GK77 platform and comply with Philippine law.

GK77 processes your personal data strictly for the following purposes:

• To create and manage your GK77 player account, including login authentication and two-factor authentication (2FA).
• To verify your identity and age (21+ requirement) as mandated by PAGCOR and Philippine law.
• To process deposits and withdrawals through GCash, Maya, BPI, BDO, and other supported payment channels.
• To provide, operate, and improve the GK77 gaming platform, including slots, live casino, bingo, Fisher Game, Fortune Bingo, and sports betting services.
• To detect, investigate, and prevent fraud, money laundering, cheating, or other prohibited conduct on the GK77 platform.
• To comply with PAGCOR regulatory reporting requirements and applicable Philippine anti-money laundering legislation (AMLA).
• To administer bonuses, promotions, loyalty programmes, and responsible gaming tools.
• To provide customer support via live chat, email, or SMS in English and Filipino.
• To send you transactional and account communications, including deposit confirmations, withdrawal notices, security alerts, and OTP codes.
• To send you marketing communications about GK77 promotions, subject to your prior consent and your right to withdraw that consent at any time.
• To respond to and resolve disputes, complaints, or legal claims involving your GK77 account.

Under the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, GK77 processes your personal data on the following legal bases:

• Contract: Processing necessary to perform GK77's obligations under the Terms and Conditions you accepted at registration — including account management, game provision, payment processing, and customer support.
• Legal Obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine laws — including age verification, KYC, and regulatory reporting.
• Legitimate Interest: Processing for fraud detection, platform security, abuse prevention, and business analytics, where GK77's legitimate interests do not override your fundamental rights and freedoms.
• Consent: Processing for marketing communications, optional personalisation features, and any other processing specifically requiring your prior consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

GK77 does not sell, rent, or trade your personal data to any third party for commercial purposes. GK77 shares your personal data only in the following limited circumstances:

• Payment Service Providers: GCash, Maya, BPI, BDO, Metrobank, and other payment processors — solely to the extent necessary to process your transactions.
• Game Software Providers: JILI Gaming, Pragmatic Play, PG Soft, Evolution Gaming, and other game providers may receive your player ID and session data to operate their games within the GK77 platform.
• Identity Verification & KYC Providers: Third-party KYC and age verification service providers engaged by GK77 to fulfil PAGCOR regulatory requirements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and any other Philippine regulatory or law enforcement authority that is legally entitled to request or compel disclosure of your data.
• IT Infrastructure & Security Providers: Cloud hosting, cybersecurity, and fraud detection service providers who process data solely on GK77's instructions and are contractually bound to maintain confidentiality.
• Legal Proceedings: Where disclosure is required by a valid court order, subpoena, or legal process under Philippine law.

All third-party processors engaged by GK77 are required to execute data processing agreements that bind them to confidentiality obligations, security standards, and the requirement to process data only as instructed by GK77 for the specified purpose.

GK77 retains your personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable Philippine law. The following retention periods apply:

• Active Account Data: Retained for the duration of your GK77 account and for five (5) years following account closure, as required by PAGCOR regulations and AMLA reporting obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLA and BSP record-keeping requirements.
• KYC and Identity Verification Documents: Retained for five (5) years following the end of the customer relationship, in compliance with AMLA requirements.
• Marketing Consent Records: Retained for three (3) years from the date of consent or withdrawal of consent.
• Technical and Log Data: Generally retained for twelve (12) months for security and fraud detection purposes, unless required longer by a specific investigation or legal hold.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

GK77 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the GK77 platform.
• Encryption of sensitive data fields at rest within GK77's database infrastructure.
• Two-factor authentication (2FA) available on all player accounts to prevent unauthorised login.
• Access controls restricting employee access to personal data on a strict need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing of the GK77 platform.
• Automated suspicious login detection with immediate SMS notification to the registered account holder.
• Automatic session timeout after 30 minutes of inactivity to protect unattended logged-in sessions.

In the event of a personal data breach that is likely to result in serious harm to you, GK77 will notify you and the National Privacy Commission (NPC) within 72 hours of discovering the breach, in accordance with RA 10173 and NPC Circular 16-03.

The GK77 platform uses cookies and similar tracking technologies to ensure proper platform functionality and to improve your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of the GK77 platform, including maintaining your login session, remembering your security preferences, and enabling core features such as the game lobby and your account dashboard. These cannot be disabled without breaking core GK77 functionality.
• Performance & Analytics Cookies: Used to understand how players navigate gk77.asia — which pages are visited, how long sessions last, and which games are most popular. This data is aggregated and anonymised. Used to improve the GK77 platform.
• Functionality Cookies: Remember your preferences such as language settings, game favourites, and notification preferences so you don't have to reset them each session.
• Security Cookies: Used to detect and prevent fraud, identify suspicious login attempts, and enforce rate limits on repeated failed login attempts.

You may control cookies through your browser settings. Disabling strictly necessary cookies will impair the GK77 platform's core functionality. GK77 does not use third-party advertising or behavioural targeting cookies.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by GK77:

• Right to be Informed: The right to know what personal data GK77 holds about you, how it is used, and with whom it is shared. This Privacy Policy satisfies that right.
• Right of Access: The right to request a copy of all personal data GK77 holds about you, including your account information, transaction history, and KYC records.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data in your GK77 account. Minor corrections (e.g., mobile number updates) can be made directly via account settings.
• Right to Erasure ("Right to be Forgotten"): The right to request deletion of your personal data, subject to GK77's legal obligation to retain certain data under PAGCOR regulations and AMLA for up to five (5) years after account closure.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. You may withdraw consent to marketing communications at any time by contacting GK77 support.
• Right to Data Portability: The right to receive a structured, machine-readable copy of your personal data for transfer to another service, where technically feasible.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) at privacy.gov.ph if you believe GK77 has violated your data privacy rights.

To exercise any of the above rights, please contact GK77's Data Protection Officer (DPO) using the contact details in Section 13. GK77 will respond to all verified data rights requests within fifteen (15) business days.

Age verification is performed during GK77 account registration. Where GK77 becomes aware that a person below the age of 21 has registered a GK77 account, that account will be immediately suspended, the individual's personal data will be deleted, and any deposited funds will be returned via the original payment method. GK77 may report the registration of minors to PAGCOR as required by its regulatory obligations.

Parents and guardians who believe a minor has registered on the GK77 platform should contact GK77 customer support immediately for urgent account investigation and closure.

GK77 may update this Privacy Policy from time to time to reflect changes in Philippine privacy law, PAGCOR regulatory requirements, or GK77's data processing practices. The "Last Updated" date at the top of this Policy will be updated with each revision.

For material changes that significantly affect how GK77 processes your personal data, GK77 will notify you via SMS to your registered Philippine mobile number or via a prominent in-platform notification before the changes take effect. Your continued use of the GK77 platform after the effective date of any update constitutes your acknowledgement of the revised Privacy Policy.

GK77 recommends that you review this Privacy Policy periodically. Previous versions of this Policy are available upon request by contacting GK77's Data Protection Officer.

For all data privacy inquiries, subject access requests, complaints, or to exercise any of your rights under the Philippine Data Privacy Act, please contact GK77's designated Data Protection Officer (DPO):

When submitting a data privacy request to GK77, please include your registered GK77 account number or registered Philippine mobile number, the nature of your request, and any relevant dates or details to help us locate your records efficiently.

If you are not satisfied with GK77's response to your data privacy request or complaint, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines.