phil77 Privacy Policy

1. Introduction

Phil77 operates as a PAGCOR-licensed online casino and sports betting platform under the jurisdiction of the Republic of the Philippines. We are committed to safeguarding the privacy of all Filipino players who use our platform and handling personal data in strict accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and all applicable PAGCOR data governance requirements.

This Privacy Policy applies to all personal data collected through the phil77 website, mobile platform, customer support channels, and any other phil77-operated services. It should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, which together form the complete contractual framework governing your use of the phil77 platform.

2. Data Controller and Contact Information

The data controller responsible for your personal data is phil77, operating under PAGCOR license and registered in the Republic of the Philippines. For all privacy-related inquiries, requests to exercise your data subject rights, or concerns about how your personal information is being handled, you may contact our Data Protection Officer at:

3. Personal Data We Collect

Phil77 collects various categories of personal data necessary to provide gaming services, ensure account security, comply with regulatory obligations, and improve user experience. The specific data collected includes:

3.1 Account Registration Data

• Full legal name (as it appears on government-issued identification)
• Date of birth (to verify 21+ age requirement)
• Gender (optional)
• Registered Philippine mobile number
• Email address
• Residential address (street, barangay, city/municipality, province, postal code)
• Username and encrypted password
• Preferred currency (PHP by default)
• Security questions and answers (if enabled)

3.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents (Philippine passport, driver's license, UMID, PhilSys ID, voter's ID, postal ID, or other PAGCOR-accepted documents)
• Proof of address documents (utility bills, bank statements, government correspondence)
• Selfie photograph or video verification (for enhanced KYC procedures)
• Proof of payment method ownership (screenshots of e-wallet accounts, bank statements showing account holder name)

3.3 Financial and Transaction Data

• Payment method details (GCash number, Maya account, bank account information, cryptocurrency wallet addresses)
• Deposit transaction records (amount, date/time, payment method, transaction ID)
• Withdrawal transaction records (amount, date/time, destination account, processing status)
• Gaming activity records (bets placed, games played, winnings, losses, bonus claims)
• Account balance history
• Responsible gaming limit settings and modifications

3.4 Technical and Usage Data

• IP address and geolocation data (to verify Philippine territory access as required by PAGCOR)
• Device information (device type, operating system, browser type and version, screen resolution)
• Login timestamps and session durations
• Pages visited, games accessed, click patterns, and navigation paths
• Referral source (how you arrived at phil77)
• Cookie data and tracking technology identifiers

3.5 Communications Data

• Customer support chat transcripts (live chat, email correspondence)
• Feedback, survey responses, and complaint records
• Marketing communication preferences (opt-in/opt-out status)
• Phone call recordings (if you contact support via phone, with notice and consent)

4. How We Use Your Personal Data

Phil77 processes your personal data for the following purposes, all of which are necessary for the provision of our services or required by applicable law:

4.1 Account Management and Service Delivery

• Create, maintain, and authenticate your phil77 user account
• Process deposits, withdrawals, and in-platform transactions
• Enable gameplay across all phil77 game categories (slots, live casino, sports betting, bingo, specialty games)
• Apply bonuses, promotions, and loyalty rewards according to program terms
• Manage responsible gaming tools (deposit limits, loss limits, session controls, self-exclusion)
• Provide customer support and respond to inquiries

4.2 Regulatory Compliance and Legal Obligations

• Verify your identity, age (21+ requirement), and Philippine residency/location as required by PAGCOR regulations
• Comply with Anti-Money Laundering (AML) and Counter-Financing of Terrorism (CFT) laws under Republic Act No. 9160 and PAGCOR AML/CFT regulations
• Conduct Know Your Customer (KYC) verification and enhanced due diligence procedures
• Detect and prevent fraud, money laundering, bonus abuse, collusion, and other prohibited activities
• Report suspicious transactions to the Anti-Money Laundering Council (AMLC) and PAGCOR when legally required
• Maintain transaction records and audit trails for regulatory inspection purposes
• Respond to lawful requests from law enforcement agencies, courts, and regulatory authorities

4.3 Security and Risk Management

• Monitor account activity for unauthorized access, security breaches, and fraudulent behavior
• Implement and maintain platform security measures (intrusion detection, DDoS protection, encryption)
• Investigate disputes, suspected Terms violations, and player complaints
• Block or restrict accounts that pose security, regulatory, or operational risks

4.4 Marketing and Communications (With Consent)

• Send promotional offers, bonus announcements, and game launch notifications via email, SMS, or in-platform messages (only if you have opted in)
• Personalize marketing content based on your gaming preferences and activity history
• Invite participation in tournaments, contests, and community events

You may withdraw consent for marketing communications at any time through your account settings or by contacting support. Withdrawal of marketing consent does not affect transactional or regulatory communications, which phil77 is legally required to send.

4.5 Analytics and Service Improvement

• Analyze platform usage patterns to improve user experience, optimize game performance, and identify technical issues
• Conduct A/B testing of new features and interface designs
• Generate aggregated, anonymized statistics for internal business intelligence and reporting purposes

5. Legal Basis for Processing

Under the Philippine Data Privacy Act, personal data processing must be grounded in a lawful basis. Phil77 processes your personal data based on the following legal grounds:

• Consent: When you register for an account, you provide explicit consent for phil77 to process your personal data as described in this Privacy Policy. Marketing communications are processed on the basis of separate opt-in consen t.
• Contractual Necessity: Processing is necessary to perform the contract between you and phil77 — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Certain processing activities are required by Philippine law, including AML compliance, KYC verification, PAGCOR reporting, and age verification under gambling regulations.
• Legitimate Interest: Phil77 processes certain technical and security data on the basis of legitimate interest to protect the platform, its players, and its regulatory standing — provided that such interests do not override your fundamental privacy rights.

6. Data Sharing and Disclosure

Phil77 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited circumstances:

6.1 Regulated Third-Party Service Providers

Phil77 works with carefully vetted third-party service providers who process personal data on our behalf under strict data processing agreements. These include:

• Payment processors — GCash (Mynt), Maya (Voyager Innovations), BancNet, Dragonpay, and other licensed Philippine payment service providers required to process your financial transactions
• KYC and identity verification providers — licensed identity verification services that assist in document authentication and age verification
• Game content providers — game studios and live casino operators whose software is integrated into the phil77 platform, who receive limited gameplay data for game delivery and RNG certification purposes
• Cloud hosting and infrastructure providers — data center and cloud service operators who store platform data under contractual security and confidentiality obligations
• Customer support platforms — live chat and ticketing system providers used to manage support interactions
• Analytics and anti-fraud tools — platforms used to detect suspicious activity and improve platform security

All third-party service providers engaged by phil77 are bound by contractual obligations to process personal data only as directed by phil77, implement appropriate security measures, and not use your data for any purpose beyond the contracted service.

6.2 Regulatory and Law Enforcement Authorities

Phil77 will disclose personal data to government agencies, law enforcement bodies, courts, or regulators when required to do so by Philippine law or a valid legal order. This includes mandatory reporting to:

• The Philippine Amusement and Gaming Corporation (PAGCOR)
• The Anti-Money Laundering Council (AMLC)
• The National Privacy Commission (NPC) in the event of a data breach
• Philippine law enforcement agencies (PNP, NBI) pursuant to lawful orders

6.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of all or substantially all of phil77's assets, personal data held by phil77 may be transferred to the successor entity, subject to the same privacy protections described in this Policy. We will notify affected users in advance of any such transfer where required by law.

7. Data Retention

Phil77 retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, comply with legal obligations, and resolve disputes. Our standard data retention schedule is as follows:

Data Category	Retention Period	Basis
Account registration data	Duration of account + 5 years after closure	PAGCOR regulatory requirement
KYC / identity documents	Duration of account + 5 years after closure	AML Act (RA 9160) obligation
Financial transaction records	10 years from transaction date	AML Act (RA 9160) and PAGCOR
Gaming activity logs	5 years from date of activity	PAGCOR audit requirements
Customer support records	3 years from last interaction	Dispute resolution, legal claims
Marketing communication logs	3 years from consent withdrawal	Proof of consent / compliance
Technical / access logs	12 months from generation	Security monitoring
Self-exclusion records	Permanent (indefinite)	Responsible gaming compliance

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with National Privacy Commission guidelines. Data that has been anonymized — where re-identification is no longer reasonably possible — may be retained indefinitely for statistical and research purposes.

8. Security Measures

Phil77 implements a comprehensive suite of technical, organizational, and physical security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security framework includes:

• Encryption in transit: All data transmitted between your device and phil77 servers is protected using TLS 1.2 or higher (HTTPS protocol), ensuring your login credentials, payment details, and gaming activity cannot be intercepted by third parties.
• Encryption at rest: Sensitive data stored on phil77 servers — including passwords (hashed using industry-standard algorithms), payment details, and KYC documents — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is strictly limited to authorized personnel who require it for their specific job functions. Role-based access controls and multi-factor authentication are enforced for all internal systems.
• Penetration testing: Phil77 engages independent cybersecurity firms to conduct regular penetration testing and vulnerability assessments of our platform infrastructure.
• Fraud detection: Automated fraud detection systems monitor account activity in real-time to identify suspicious patterns, unauthorized login attempts, and potential data breaches.
• Data breach response: In the event of a personal data breach that poses a risk to your rights and freedoms, phil77 will notify the National Privacy Commission within 72 hours of discovery and inform affected players without undue delay, as required by the Data Privacy Act IRR.

While phil77 takes all reasonable precautions to protect your personal data, no internet transmission or electronic storage method is completely secure. You are also responsible for maintaining the confidentiality of your phil77 account credentials and for ensuring that your device is adequately secured.

9. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phil77:

9.1 Right to Be Informed

You have the right to be informed about the collection and processing of your personal data. This Privacy Policy fulfills that obligation by clearly disclosing what data we collect, why we collect it, how we use it, and with whom we share it.

9.2 Right to Access

You may request a copy of the personal data phil77 holds about you at any time. We will provide a structured, machine-readable copy of your data within fifteen (15) business days of a verified request. There is no fee for a first access request in any 12-month period.

9.3 Right to Rectification

If any personal data phil77 holds about you is inaccurate, incomplete, or outdated, you have the right to request correction. You may update certain data (such as contact details) directly through your account settings; for changes to identity-linked data, please contact our Data Protection Officer with supporting documentation.

9.4 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Please note that this right is subject to exceptions — phil77 may be legally required to retain certain data (particularly financial transaction records and KYC documents) under Philippine AML law and PAGCOR regulations regardless of an erasure request.

9.5 Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest, in which case phil77 will cease processing unless there are compelling legitimate grounds that override your privacy interests.

9.6 Right to Data Portability

Where technically feasible and where processing is based on consent or contractual necessity, you may request that phil77 provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.

9.7 Right to Lodge a Complaint

If you believe phil77 has violated your data privacy rights, you may lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Details of the NPC complaints procedure are available at the NPC's official website.

To exercise any of the rights above, please contact our Data Protection Officer at [email protected] with the subject "Data Subject Rights Request." We will verify your identity before processing any request to protect against unauthorized access to your data.

10. Cookies and Tracking Technologies

Phil77 uses cookies and similar tracking technologies (web beacons, pixel tags, local storage) on our website and mobile platform. Cookies are small text files placed on your device that help us deliver a functional, personalized, and secure gaming experience. The categories of cookies we use are as follows:

10.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They manage your login session, maintain your authentication state, enforce security controls, and remember your language and currency preferences. Without these cookies, core platform functions such as logging in and placing bets would not work. These cookies cannot be disabled.

10.2 Performance and Analytics Cookies

These cookies collect anonymized data about how users interact with the phil77 platform — including pages visited, game sessions, error events, and load times — to help us identify and fix technical issues and optimize platform performance. The data collected is aggregated and does not identify you individually.

10.3 Functional Cookies

These cookies remember your preferences and settings (such as your preferred game lobby view or responsible gaming limit configuration) to provide a more personalized experience between sessions.

10.4 Marketing and Targeting Cookies

With your consent, phil77 may use cookies to deliver relevant promotional content and track the effectiveness of marketing campaigns. You may withdraw consent for marketing cookies at any time through your browser settings or the phil77 cookie preference center.

Most web browsers allow you to control cookies through browser settings. You may disable non-essential cookies; however, disabling strictly necessary cookies may impair core platform functionality. Phil77 does not respond to browser "Do Not Track" signals at this time, though we continue to monitor regulatory guidance on this matter.

11. Changes to This Privacy Policy

Phil77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance. Material changes will be communicated to registered players via email and in-platform notification at least seven (7) days before they take effect. The most current version of this Privacy Policy will always be accessible at phil77.cam/privacy-policy with the effective date displayed at the top.

Your continued use of the phil77 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the platform and may request account closure.

12. Children and Minors

The phil77 platform is strictly prohibited for individuals under 21 years of age as required by PAGCOR regulations and Philippine gambling law. Phil77 does not knowingly collect personal data from individuals under 21. If we become aware that a minor has provided personal data to phil77, we will immediately close the account, delete the associated personal data, and report the matter to PAGCOR as required. If you believe a minor has registered with phil77, please notify us immediately at [email protected].