gt77 Privacy Policy —
How We Protect Your Personal Data

For the purposes of this Privacy Policy, "gt77," "we," "us," and "our" refers to the operator of the gt77 online casino and sports betting platform accessible at https://gt77.bio. gt77 is the data controller responsible for the personal information collected through the Platform.

gt77 operates as an online gaming platform serving Filipino players, with a primary user base in Metro Manila, Cebu, Davao, Quezon City, and other regions across the Philippines. All personal data collected through the Platform is processed with the protection of Filipino players as a primary consideration, and in compliance with the Republic Act No. 10173, known as the Data Privacy Act of 2012 of the Philippines, along with its Implementing Rules and Regulations.

For all privacy-related inquiries, data subject requests, or complaints, Players may contact gt77 using the information provided in Section 16 of this Policy.

This Privacy Policy applies to:

• All registered gt77 account holders, including both active and inactive accounts;
• Individuals who visit the gt77 Platform without registering an account;
• Individuals who contact gt77 customer support by live chat, email, or any other channel;
• Individuals whose personal data is provided to gt77 in connection with identity verification or fraud investigation processes.

This Policy does not apply to third-party websites, platforms, or applications that may be linked from the gt77 Platform. gt77 is not responsible for the privacy practices of third-party services and encourages Players to review the privacy policies of any third-party services they access.

gt77 collects personal data through several channels and for specific, defined purposes. The categories of data we collect are described below.

When you access or use the gt77 Platform, we automatically collect certain technical data about your device and usage patterns. This includes:

• Device Data: Device type, operating system, browser type and version, screen resolution;
• Network Data: IP address, network provider (e.g., Globe, Smart, PLDT, DITO), approximate geographic location derived from IP address;
• Usage Data: Pages visited, games launched, session duration, deposit and withdrawal actions, bet history, features accessed;
• Cookie Data: Session identifiers, preference cookies, analytics identifiers. See Section 6 for full details on cookie use.

gt77 may receive personal data about you from third parties in the following circumstances:

• From KYC verification service providers, who verify identity document authenticity and check against watchlists;
• From payment processors (GCash, PayMaya, Visa, Mastercard, BPI, BDO, Metrobank), who confirm transaction completion and flag suspicious payment activity;
• From fraud prevention and anti-money laundering service providers, who identify patterns associated with financial crime;
• From regulatory authorities, where required by law.

gt77 processes personal data for the following specific purposes:

• Account Management: Creating, maintaining, and administering your gt77 account; authenticating your identity at login; processing account updates and closures;
• Payment Processing: Processing deposits via GCash, PayMaya, and other Philippine payment methods; verifying and processing withdrawal requests; maintaining transaction records for accounting purposes;
• Identity Verification (KYC): Verifying your identity, age (21+), and eligibility to participate in online gambling under Philippine regulations; preventing duplicate account creation;
• Legal and Regulatory Compliance: Complying with anti-money laundering (AML) obligations, PAGCOR licensing conditions, and Philippine tax and reporting requirements; responding to lawful requests from regulatory and law enforcement authorities;
• Platform Security and Fraud Prevention: Detecting and preventing unauthorized account access, fraudulent transactions, collusion, bonus abuse, and other prohibited conduct;
• Customer Support: Responding to account queries, complaints, responsible gaming requests, and technical issues raised by Players;
• Responsible Gaming Monitoring: Identifying usage patterns that may indicate problem gambling behavior; enforcing deposit limits, cooling-off periods, and self-exclusion arrangements;
• Platform Improvement: Analyzing aggregated usage data to improve the performance, features, and user experience of the gt77 Platform;
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to Players who have consented to receive them. See Section 12 for opt-out information.

gt77 processes your personal data under the following legal bases as recognized under Philippine data protection law and, where applicable, international privacy frameworks:

• Contractual Necessity: Processing required to provide the services you have contracted for under the gt77 Terms & Conditions — including account management, payment processing, and game provision;
• Legal Obligation: Processing required to comply with applicable laws, including AML regulations, PAGCOR licensing conditions, tax obligations, and lawful government requests;
• Legitimate Interest: Processing necessary to prevent fraud, maintain Platform security, conduct responsible gaming monitoring, and improve the Platform — where these interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit opt-in consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

gt77 uses cookies and similar tracking technologies to support the operation of the Platform and to improve the Player experience. A cookie is a small text file stored on your device when you visit a website. gt77 uses the following categories of cookies:

You may control non-essential cookies through your browser settings. Please note that disabling functional cookies may affect your experience on the Platform. gt77 does not use third-party advertising cookies or behavioral tracking cookies for the purpose of serving external advertisements.

gt77 may share your personal data with the following categories of third parties:

• Payment Service Providers: GCash, PayMaya, Visa, Mastercard, BPI, BDO, Metrobank, and QR Ph processors — solely to execute payment transactions you have initiated;
• KYC and Identity Verification Providers: Regulated third-party services that verify government-issued identification documents and check against international watchlists and sanctions databases;
• Game Content Providers: Licensed game studios and aggregators may receive pseudonymized session data necessary to support RNG certification, game history, and dispute resolution;
• Cloud Infrastructure and Security Providers: Hosting and security service providers under strict data processing agreements that prohibit independent use of your data;
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine authorities where disclosure is required by law or a lawful order;
• Professional Advisors: Legal counsel, auditors, and compliance consultants, under confidentiality obligations, where required for legal proceedings or regulatory compliance.

All third-party service providers who receive personal data from gt77 are contractually required to process that data only for the specified purpose, implement appropriate security measures, and comply with applicable data protection law.

Some of gt77's service providers may be located outside the Philippines. Where personal data is transferred to a jurisdiction outside the Philippines, gt77 ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses requiring the receiving party to protect personal data to a standard equivalent to Philippine data protection law;
• The transfer being to a jurisdiction recognized by the National Privacy Commission of the Philippines as providing an adequate level of data protection;
• The transfer being necessary for the performance of a contract with you (e.g., processing a GCash withdrawal transaction that routes through an international payment network).

Players may request information about specific international transfer safeguards by contacting gt77 at the contact details in Section 16.

gt77 implements a layered approach to data security to protect your personal information against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption in Transit: All data exchanged between your device and gt77 servers is protected by 256-bit SSL/TLS encryption. The padlock icon in your browser confirms this connection is secure;
• Encryption at Rest: Sensitive stored data — including KYC documents, financial records, and authentication credentials — is encrypted on gt77's servers;
• Password Security: Account passwords are stored in hashed form using industry-standard cryptographic algorithms. gt77 never stores or transmits passwords in plaintext;
• Access Controls: Internal access to personal data is restricted to staff members who require it for their specific role. Access is logged and subject to regular audit;
• Two-Factor Authentication: 2FA is available for all Player accounts and is strongly recommended;
• Security Monitoring: gt77's infrastructure is subject to continuous security monitoring and regular third-party penetration testing;
• Incident Response: gt77 maintains a data breach response procedure. In the event of a breach likely to result in a risk to your rights, gt77 will notify the National Privacy Commission of the Philippines and affected Players as required by law.

While gt77 implements robust security measures, no online system can guarantee absolute security. Players are encouraged to maintain strong, unique passwords and to enable 2FA on their gt77 accounts to provide an additional layer of personal account security.

gt77 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, and in compliance with applicable legal retention obligations. The following retention periods apply as a general guide:

When the applicable retention period expires, personal data is securely deleted or anonymized in accordance with gt77's data disposal procedures. Players with specific questions about retention of their personal data may contact gt77 at the details in Section 16.

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by gt77:

To exercise any of the above rights, submit a written request to [email protected] with your full name, registered email address, and a description of the right you wish to exercise. gt77 will respond within 30 calendar days. Requests may require identity verification before processing.

If you believe gt77 has not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC).

Where you have consented to receive marketing communications from gt77, we may contact you by email or SMS with information about promotions, bonuses, new games, and platform updates relevant to Filipino players. You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email sent by gt77;
• Updating your communication preferences in Account Settings;
• Contacting gt77 support at [email protected] with a request to unsubscribe.

Withdrawal of marketing consent does not affect the lawfulness of processing based on consent before withdrawal. It also does not affect gt77's right to send you operational communications related to your account (e.g., transaction confirmations, security alerts, regulatory notices), which are sent as a necessary part of providing the service and cannot be opted out of while your account is active.

If gt77 becomes aware that an account has been registered by or on behalf of a person under 21 years of age, the account will be immediately suspended, access to funds will be restricted pending investigation, and personal data collected will be deleted to the extent permitted by legal retention obligations. Parents or guardians who believe a minor has registered on the gt77 Platform should contact [email protected] immediately.

The gt77 Platform may contain links to third-party websites, game providers, or payment services. gt77 has no control over the content or privacy practices of third-party sites and is not responsible for their privacy policies or data handling practices. This Privacy Policy applies solely to data collected through the gt77 Platform.

Players are encouraged to review the privacy policies of any third-party services they access, including payment platforms such as GCash and PayMaya, which operate under their own data protection frameworks.

gt77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the scope of our services. When material changes are made, gt77 will notify active account holders by email or by a prominent notice displayed on the Platform upon login.

The effective date at the top of this Policy indicates when the current version came into force. Continued use of the gt77 Platform following notification of a Privacy Policy update constitutes acceptance of the revised Policy. If you do not agree to the revised Policy, you should cease using the Platform and may request account closure as described in our Terms & Conditions.

Players are encouraged to review this Privacy Policy periodically. The most current version is always available at https://gt77.bio/privacy-policy.

For all privacy-related inquiries, data subject access requests, marketing opt-out requests, or complaints regarding gt77's data handling practices, Players may contact us through the following channels:

When submitting a formal data subject request, please include: your full name, registered email address, account username, the nature of your request, and any supporting information relevant to your inquiry. gt77 may request identity verification before processing your request to protect against unauthorized access to your data.

If you are not satisfied with gt77's response to your privacy inquiry or believe your data rights have been violated, you may file a complaint with the National Privacy Commission of the Philippines (NPC), which is the supervisory authority responsible for enforcing the Philippine Data Privacy Act of 2012.