GL77 Privacy Policy –
How We Protect Your Data

01 Introduction

GL77 ("we," "us," or "our") is committed to protecting the privacy and personal data of every player who visits or registers on our platform at gl77.best. We understand that for Filipinos, trust is everything — and that includes trusting us with your personal information.

This Privacy Policy is designed to be clear, honest, and easy to understand. It covers what data we collect, why we collect it, how it is used and protected, who we share it with, and what rights you have as a data subject under Philippine law. It applies to all users accessing GL77 through any device — desktop, mobile, or tablet.

GL77 operates in accordance with the Republic Act No. 10173, also known as the Philippine Data Privacy Act of 2012, and its implementing rules and regulations. We take this obligation seriously — hindi ito basta-basta na commitment.

If you are unsure about any section of this policy or want to know more about how we handle a specific type of data, please reach out to us directly at support@gl77.best. We're always happy to clarify.

02 Data We Collect

GL77 collects personal data in several ways — directly from you during registration and use, automatically when you interact with our platform, and occasionally from third parties for verification purposes. Here is a breakdown of the types of data we may collect:

We do not collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Specifically, we do not collect health data, political opinions, or religious beliefs unless legally required in specific regulatory contexts.

03 How We Use Your Data

GL77 uses your personal data for specific, legitimate purposes only. We do not use your data in ways that are incompatible with the purposes listed below. Here is how and why we process your information:

• Account management: Creating, maintaining, and securing your GL77 player account.
• Identity verification (KYC): Confirming that you are who you say you are, and that you meet our eligibility requirements (21 years of age or older).
• Payment processing: Facilitating deposits and withdrawals through your selected Philippine payment method (GCash, Maya, BDO, etc.).
• Regulatory compliance: Meeting our obligations under Philippine gaming regulations and anti-money laundering (AMLA) laws.
• Fraud prevention: Monitoring for suspicious activity, detecting multi-accounting, and protecting the integrity of the GL77 platform.
• Customer support: Responding to your inquiries, resolving disputes, and improving our support services.
• Personalization: Tailoring your experience on GL77 — showing relevant promotions, game recommendations, and content based on your activity.
• Marketing communications: Sending you emails or SMS about promotions and updates — but only if you have opted in. You can opt out anytime.
• Platform improvement: Analysing aggregated, anonymised usage data to improve GL77's features, performance, and user experience.
• Responsible gaming: Identifying patterns that may indicate problematic gambling behaviour, so we can intervene and offer support where needed.

04 Legal Basis for Processing

Under the Philippine Data Privacy Act, GL77 must have a valid legal basis for processing your personal data. We rely on the following legal bases depending on the purpose of processing:

• Contractual necessity: Processing your data is required to fulfil our obligations under the Terms and Conditions you agreed to when registering — such as managing your account and processing payments.
• Legal obligation: Certain data processing is mandated by Philippine law — including AMLA compliance, KYC requirements, and reporting obligations to regulatory authorities.
• Legitimate interests: We process some data to protect the security and integrity of GL77, prevent fraud, and improve our platform — provided these interests are not overridden by your rights.
• Consent: For marketing communications and optional personalisation features, we rely on your explicit consent. You can withdraw this consent at any time without affecting any other processing.

05 Data Sharing & Third Parties

GL77 does not sell, rent, or trade your personal data. Full stop. However, we do share certain data with trusted third parties as necessary to operate our platform and comply with the law. Below are the categories of third parties we may share data with:

• Payment processors: GCash, Maya, GrabPay, BDO, BPI, UnionBank, and card network partners require transaction data to process your deposits and withdrawals. Each of these providers has their own privacy obligations.
• Identity verification providers: Third-party KYC services help us verify your identity securely and accurately.
• Cloud infrastructure and security providers: Our hosting and security partners operate under strict data processing agreements.
• Regulatory and law enforcement authorities: When required by Philippine law — such as the Anti-Money Laundering Council (AMLC) or relevant gaming regulators — we are legally obligated to provide certain information.
• Responsible gaming organisations: In limited cases, we may share data with approved self-exclusion registries or responsible gambling support services to protect players in need.

Any third party that receives your data is bound by contractual data protection obligations. We do not transfer personal data outside of jurisdictions with adequate data protection standards without appropriate safeguards in place.

06 Data Retention

GL77 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by Philippine law. Here are the general retention periods we follow:

• Active account data: Retained for as long as your GL77 account remains open.
• Closed account data: Retained for a minimum of five (5) years after account closure, in line with AMLA and regulatory retention requirements.
• Transaction records: Retained for five (5) years from the date of the transaction.
• Marketing consent records: Retained until you withdraw consent plus 12 months for audit purposes.
• Support communications: Retained for two (2) years after the last interaction.

After the applicable retention period, your data is securely deleted or anonymised so it can no longer be linked to you. You may request early deletion of certain data — subject to legal retention obligations — by contacting our Data Protection Officer.

07 Security Measures

Protecting your data from unauthorised access, loss, or misuse is a top priority at GL77. We implement a combination of technical and organisational security measures, including:

• SSL/TLS encryption: All data transmitted between your device and GL77 servers is encrypted using industry-standard protocols.
• Data encryption at rest: Sensitive personal and financial data stored in our systems is encrypted using AES-256 or equivalent standards.
• Access controls: Only authorised GL77 personnel with a legitimate business need can access your personal data. Access is role-based and logged.
• Two-factor authentication (2FA): Available for player accounts to add an extra layer of login security.
• Regular security audits: GL77 conducts periodic vulnerability assessments and penetration testing to identify and address potential security gaps.
• Incident response: We have a data breach response plan in place. In the event of a breach that poses a risk to your rights, we will notify you and the relevant authorities within the timeframes required by Philippine law.

08 Your Data Subject Rights

Under the Philippine Data Privacy Act, you have the following rights regarding your personal data held by GL77. We are committed to honouring these rights in a timely and respectful manner:

• Right to be informed: You have the right to know what personal data we hold about you and how it is being used — which is exactly what this policy provides.
• Right of access: You may request a copy of the personal data GL77 holds about you.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you have the right to have it corrected.
• Right to erasure: In certain circumstances, you may request that we delete your personal data — subject to legal retention obligations.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to data portability: You may request that your data be provided to you in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: If you believe your privacy rights have been violated, you may file a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, please send a written request to support@gl77.best with the subject line "Data Subject Request." We will respond within 15 business days of receiving your request. Identity verification may be required before we can fulfil your request.

09 Cookies & Tracking

GL77 uses cookies and similar tracking technologies to enhance your browsing experience, analyse platform usage, and personalise content. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

• Essential cookies: Required for the platform to function — including login sessions and security tokens. These cannot be disabled.
• Analytical cookies: Help us understand how players interact with GL77 — which pages are most visited, how long sessions last, and where users encounter issues. Data is aggregated and anonymised.
• Preference cookies: Remember your settings and preferences, such as language choice and display options.
• Marketing cookies: Used only with your consent to show relevant promotional offers within the GL77 platform.

You can manage or delete cookies through your browser settings at any time. Note that disabling essential cookies may affect your ability to log in and use the platform normally. For more information, refer to your browser's help documentation.

10 Minors & Age Restriction

GL77 strictly prohibits the use of its platform by individuals under the age of 21, as required by Philippine gaming laws. We do not knowingly collect personal data from anyone below this age.

If we become aware that a minor has registered an account or provided personal information, we will immediately close the account, forfeit any balance, and delete the associated personal data. If you believe a minor has registered on GL77, please notify us immediately at support@gl77.best.

11 Updates to This Privacy Policy

GL77 may update this Privacy Policy from time to time to reflect changes in our practices, platform features, or legal requirements. When we make material changes, we will:

• Update the "Effective date" at the top of this page.
• Send a notification to your registered email address at least 7 days before the changes take effect.
• Post a prominent notice on the GL77 platform during the notification period.

Your continued use of GL77 after the updated Privacy Policy takes effect constitutes your acceptance of the revised terms. If you disagree with any changes, you should stop using the platform and contact us to close your account.

We recommend reviewing this page periodically — it only takes a few minutes and keeps you fully informed about how GL77 handles your data.

12 Contact Us & Data Protection Officer

If you have questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, GL77 has a designated Data Protection Officer (DPO) you can reach directly.

• Email: support@gl77.best
• Subject line: "Privacy Inquiry" or "Data Subject Request"
• Live Chat: Available 24/7 via the GL77 website
• Response time: Within 15 business days for formal data requests; within 24 hours for general queries.

If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the official government body responsible for enforcing data privacy rights.