phil77 Privacy Policy

phil77 is an online casino and sports betting platform operating at phil77.org under PAGCOR authorization for the Philippine market. In the context of this Privacy Policy, "phil77", "We", "Us", or "Our" refers to the operator of the phil77 platform. "You" or "the Data Subject" refers to any individual who accesses or uses the phil77 platform, registers an Account, or interacts with our services in any capacity.

phil77 acts as the Personal Information Controller with respect to the personal data of its players and website visitors, as defined under Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations.

phil77 collects the following categories of personal data from its users:

Identity & Contact Data

• Full legal name as it appears on a valid Philippine government-issued ID
• Date of birth (for age verification — 21+ requirement)
• Mobile number (used for OTP verification and account communications)
• Email address
• Residential address in the Philippines
• Government-issued ID number and document images (e.g., SSS, PhilHealth, driver's license, passport)

Financial Data

• GCash account number or mobile number linked to GCash/PayMaya
• Bank account details (BDO, BPI, Metrobank) where used for deposits or withdrawals
• Transaction history within the phil77 platform (deposits, withdrawals, game wagers, bonus usage)

Technical & Usage Data

• IP address and approximate geolocation at the time of login
• Device type, operating system, and browser information
• Session duration, game activity logs, and betting history
• Cookie identifiers and similar tracking technologies (see Section 9)

Communications Data

• Content of Live Chat conversations with phil77 support
• Email correspondence with phil77 support or compliance teams
• Responses to promotions, surveys, or feedback forms

phil77 collects personal data through the following means:

• Direct collection — when you register an Account, complete identity verification, make a deposit or withdrawal, or contact our support team.
• Automated collection — through cookies, session tracking, and server logs when you access or interact with the phil77 platform.
• Third-party sources — from payment processors (e.g., GCash, PayMaya, BDO, BPI) who confirm transaction details; from identity verification service providers; and from PAGCOR or other regulatory authorities where required by law.

phil77 processes your personal data for the following purposes:

• Account management — to create, maintain, verify, and secure your phil77 Account.
• Age and identity verification — to confirm that you meet the 21+ age requirement and to verify your identity as required by PAGCOR licensing conditions and Philippine anti-money laundering law.
• Payment processing — to facilitate deposits, withdrawals, and bonus payments in Philippine Peso.
• Service delivery — to provide access to games, sports betting, live casino, bingo, and other phil77 features.
• Legal and regulatory compliance — to meet our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine laws.
• Fraud prevention and security — to detect and prevent unauthorised access, fraudulent transactions, and money laundering activity.
• Customer support — to respond to your enquiries, resolve complaints, and improve our support quality.
• Responsible gaming — to monitor gaming behaviour and implement player protection measures where required.
• Marketing and promotions — to send you relevant offers and updates about phil77, subject to your consent preferences.

phil77 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity — processing required to deliver the services you have contracted for by registering a phil77 Account.
• Legal obligation — processing required to comply with PAGCOR regulations, AMLA reporting obligations, and other applicable Philippine laws.
• Legitimate interest — processing for fraud prevention, platform security, and service improvement, where our legitimate interests do not override your privacy rights.
• Consent — processing for marketing communications, where we rely on your explicit opt-in consent. You may withdraw this consent at any time by updating your communication preferences or contacting our support team.

phil77 does not sell your personal data. We share personal data only in the following limited circumstances:

• Payment processors — GCash, PayMaya, BDO, BPI, and Metrobank receive transaction-level data necessary to process your deposits and withdrawals.
• Identity verification providers — third-party KYC service providers receive identity documents and biometric data solely for the purpose of verifying your identity and age.
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies may receive data in response to lawful requests, compliance reports, or investigations.
• Technology and infrastructure partners — hosting, security, and analytics providers who process data on our behalf under data processing agreements that impose equivalent privacy protections.
• Game software providers — JILI and other certified game studios receive game session data (but not payment or full identity data) for game integrity and audit purposes.

All third parties who receive personal data from phil77 are contractually required to protect it in accordance with applicable Philippine data privacy law.

Some of phil77's technology and service partners are located outside the Philippines. Where personal data is transferred internationally, phil77 ensures that adequate safeguards are in place — including contractual clauses that require the receiving party to provide a level of protection equivalent to that guaranteed under Philippine data privacy law. phil77 will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without your explicit consent or without the contractual safeguards required by the National Privacy Commission.

phil77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active account data — retained for the duration of your Account and for five (5) years after Account closure, in accordance with PAGCOR record-keeping requirements.
• Financial and transaction records — retained for a minimum of five (5) years as required by the Anti-Money Laundering Act.
• Identity verification documents — retained for the period required by PAGCOR KYC regulations, typically five (5) years from the date of verification.
• Support and communications records — retained for two (2) years from the date of the last interaction.
• Marketing consent records — retained until consent is withdrawn and for two (2) years thereafter as evidence of prior consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

phil77 uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies we use include:

• Strictly necessary cookies — required for the platform to function (e.g., session authentication, security tokens). These cannot be disabled.
• Functional cookies — used to remember your preferences (e.g., language settings, game lobby layout).
• Analytics cookies — used to measure platform usage and improve user experience. Data collected is aggregated and does not identify individual players.
• Marketing cookies — used to deliver relevant promotional content. These are only activated with your consent.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair your ability to use the phil77 platform.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phil77:

• Right to be informed — to know what personal data we hold about you and how it is processed.
• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate or incomplete personal data.
• Right to erasure — to request deletion of your personal data where there is no lawful basis for continued processing, subject to our legal retention obligations.
• Right to object — to object to processing based on legitimate interest or for direct marketing purposes.
• Right to data portability — to receive a structured, machine-readable copy of your personal data.
• Right to lodge a complaint — to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer (see Section 15). phil77 will respond to verified requests within thirty (30) days.

The phil77 platform is strictly intended for individuals who are 21 years of age or older. phil77 does not knowingly collect personal data from individuals below this age. If we become aware that personal data has been collected from a minor, we will promptly close the associated Account, delete the collected data, and refund any deposits in accordance with our account closure procedures.

If you believe that a minor has registered an Account on phil77, please contact our support team immediately at [email protected].

phil77 implements technical and organisational security measures appropriate to the sensitivity of the personal data we hold, including:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the phil77 platform.
• Encryption at rest for sensitive personal and financial data stored on our servers.
• Multi-factor authentication options for Account access.
• Automated detection of suspicious login patterns and transaction anomalies.
• Role-based access controls limiting internal staff access to personal data on a need-to-know basis.
• Regular security assessments and penetration testing by qualified third-party security professionals.

In the event of a personal data breach that is likely to result in harm to affected data subjects, phil77 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by the Data Privacy Act.

The phil77 platform may contain links to third-party websites or services (for example, PAGCOR's official website or payment provider portals). This Privacy Policy applies only to phil77 and does not extend to any third-party sites or services. phil77 is not responsible for the privacy practices of third-party sites, and we recommend that you review the privacy policies of any third-party services you access.

phil77 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via in-platform notification or by email to the address on your Account before the changes take effect. The updated policy will carry a revised "Last updated" date at the top of this page. Continued use of the phil77 platform following notification of changes constitutes your acknowledgement of the revised Privacy Policy.

For any privacy-related enquiries, requests to exercise your data subject rights, or concerns about how phil77 handles your personal data, please contact our Data Protection Officer (DPO):

• Email: [email protected] (subject line: "Privacy / Data Request")
• Live Chat: Available 24/7 via the in-app chat feature
• Response time: Within 30 days for formal data subject requests

If you are not satisfied with our response, you have the right to escalate your concern to the National Privacy Commission (NPC) of the Philippines, which has jurisdiction over data privacy complaints under Republic Act No. 10173.