phi77 Privacy
Policy

phi77 ("phi77," "we," "us," "our") is committed to protecting the privacy and personal data of all individuals who use the phi77 platform ("you," "your," "Player"). This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of your personal data in connection with your use of the phi77 website and all associated services (collectively, the "Platform").

phi77 operates in the Philippines and is subject to the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC). phi77 is registered as a Personal Information Controller (PIC) under applicable Philippine law and takes its obligations under the DPA seriously.

We process your personal data only for legitimate, specified, and explicit purposes. We do not collect more data than is necessary for those purposes, and we do not retain data longer than required. Your trust is important to us, and we are committed to being transparent about how we handle your information.

2.1 Registration & Identity Data

When you create a phi77 account, we collect the following information to establish and verify your identity:

• Full legal name as it appears on a valid Philippine government-issued ID;
• Date of birth (to verify you are at least 21 years of age);
• Gender;
• Residential address (city, province, postal code);
• Valid email address;
• Active Philippine mobile number.

2.2 Identity Verification Data

To comply with PAGCOR's Know Your Customer (KYC) requirements and Philippine anti-money laundering regulations, phi77 may request copies of the following documents:

• Government-issued photo ID (e.g., PhilSys National ID, passport, driver's license, SSS/GSIS ID, PRC ID, voter's ID);
• Proof of address (e.g., utility bill, bank statement issued within the last three months);
• Selfie photograph for identity confirmation;
• Source of funds documentation where required by applicable regulations.

2.3 Financial & Transaction Data

phi77 collects financial data necessary to process deposits, withdrawals, and to comply with financial regulations:

• GCash or PayMaya / Maya account details (mobile number associated with the e-wallet);
• Bank account details for bank transfer transactions (account name, account number , bank name);
• Debit card details (card number is never stored in full — only the last four digits and card type are retained);
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method used;
• Account balance information.

2.4 Gameplay & Activity Data

phi77 collects data about how you use the Platform to ensure fair play, resolve disputes, and improve our services:

• Game history, including games played, bets placed, outcomes, and winnings;
• Session duration and frequency of play;
• Bonus and promotion usage history;
• Responsible gaming tool usage (e.g., deposit limits set, cooling-off periods requested).

2.5 Technical & Device Data

When you access the phi77 Platform, we automatically collect certain technical information:

• IP address and approximate geographic location;
• Device type, operating system, and browser type and version;
• Unique device identifiers;
• Pages visited, links clicked, and time spent on each page;
• Referring URL (the page you visited before arriving at phi77).

2.6 Communications Data

When you contact phi77 customer support or communicate with us through any channel, we collect and retain records of those communications, including the content of messages, timestamps, and any attachments provided.

phi77 collects your personal data through the following means:

• Directly from you — when you register for a phi77 account, complete identity verification, make deposits or withdrawals, contact customer support, or participate in promotions;
• Automatically — through cookies, web beacons, and similar tracking technologies when you browse the phi77 Platform (see Section 7 for details);
• From third-party payment providers — GCash, PayMaya / Maya, and partner banks may share transaction confirmation data with phi77 to facilitate payment processing;
• From identity verification services — phi77 may use third-party KYC service providers to assist with document verification and identity confirmation;
• From regulatory and law enforcement authorities — where required by law, phi77 may receive data from PAGCOR, the Anti-Money Laundering Council (AMLC), or other competent authorities.

phi77 uses your personal data only for the purposes for which it was collected. The specific purposes for which we process your data are as follows:

4.1 Account Management

To create, maintain, and manage your phi77 account, including verifying your identity, processing your registration, and enabling you to access the Platform's features.

4.2 Payment Processing

To process deposits and withdrawals through your chosen payment method (GCash, Maya, bank transfer, or debit card), to verify the source of funds where required, and to maintain accurate financial records.

4.3 Regulatory Compliance

To comply with phi77's legal obligations under Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and any other applicable regulations. This includes conducting KYC checks, filing mandatory reports, and responding to lawful requests from regulatory and law enforcement authorities.

4.4 Fraud Prevention & Security

To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, bonus abuse, and other prohibited conduct. phi77 uses automated systems and manual review processes for this purpose.

4.5 Customer Support

To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance related to your phi77 account and gameplay.

4.6 Responsible Gaming

To monitor gameplay patterns and identify potential signs of problem gambling, to enforce responsible gaming tools you have activated (such as deposit limits or self-exclusion), and to comply with phi77's responsible gaming obligations under PAGCOR's framework.

4.7 Marketing & Promotions

With your consent, to send you information about phi77 promotions, bonuses, new games, and other offers that may be of interest to you. You may withdraw your consent to marketing communications at any time by updating your account preferences or contacting phi77 support.

4.8 Platform Improvement

To analyze usage patterns, conduct research, and improve the phi77 Platform's features, performance, and user experience. This analysis is conducted on aggregated or anonymized data wherever possible.

Under the Philippine Data Privacy Act, phi77 processes your personal data on the following legal bases:

• Contractual necessity — processing is necessary to perform the contract between you and phi77 (i.e., to provide you with access to the phi77 Platform and its services);
• Legal obligation — processing is required to comply with phi77's obligations under Philippine law, including PAGCOR regulations, AMLA requirements, and the Data Privacy Act itself;
• Legitimate interests — processing is necessary for phi77's legitimate interests in fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights and interests;
• Consent — for marketing communications and any other processing activities where consent is the appropriate legal basis. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

phi77 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

6.1 Payment Service Providers

phi77 shares necessary financial data with GCash, PayMaya / Maya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) solely for the purpose of processing your deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine financial regulations.

6.2 Identity Verification Providers

phi77 may engage third-party KYC service providers to assist with identity document verification. These providers process your identity data solely on phi77's behalf and under phi77's instructions, and are contractually prohibited from using your data for any other purpose.

6.3 Regulatory & Law Enforcement Authorities

phi77 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities where required by law, court order, or regulatory directive. phi77 will notify you of such disclosures where legally permitted to do so.

6.4 Technology & Infrastructure Providers

phi77 uses third-party technology providers for hosting, data storage, analytics, and customer support infrastructure. These providers act as Personal Information Processors (PIPs) under the DPA and are bound by data processing agreements that require them to process your data only on phi77's instructions and in compliance with applicable law.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of phi77's assets, your personal data may be transferred to the acquiring entity. phi77 will notify you of any such transfer and ensure that your data continues to be protected in accordance with this Privacy Policy.

phi77 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyze usage patterns. The types of cookies phi77 uses are as follows:

• Strictly Necessary Cookies: These cookies are essential for the phi77 Platform to function. They enable core features such as account login, session management, and security. These cookies cannot be disabled without affecting Platform functionality.
• Functional Cookies: These cookies remember your preferences (such as language settings and display preferences) to provide a more personalized experience on phi77.
• Analytics Cookies: phi77 uses analytics tools to understand how players use the Platform — which pages are visited most, where users encounter difficulties, and how the Platform can be improved. Analytics data is aggregated and does not identify individual users.
• Security Cookies: These cookies help phi77 detect and prevent fraudulent activity, unauthorized account access, and other security threats.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phi77 Platform. phi77 does not use cookies to serve third-party advertising.

phi77 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account and identity data: Retained for the duration of your phi77 account and for a minimum of five (5) years after account closure, in compliance with PAGCOR licensing requirements and AMLA record-keeping obligations;
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act;
• KYC and verification documents: Retained for a minimum of five (5) years after account closure or the completion of the relevant transaction;
• Customer support communications: Retained for three (3) years from the date of the communication;
• Technical and device data: Retained for up to twelve (12) months from collection, unless required for longer periods for security or fraud investigation purposes;
• Marketing consent records: Retained for the duration of your consent and for three (3) years thereafter as evidence of consent.

Upon expiry of the applicable retention period, phi77 will securely delete or anonymize your personal data in accordance with its data disposal procedures.

phi77 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• TLS Encryption: All data transmitted between your device and the phi77 Platform is encrypted using Transport Layer Security (TLS) protocol;
• Encryption at Rest: Sensitive personal data stored on phi77's servers is encrypted using industry-standard encryption algorithms;
• Access Controls: Access to personal data is restricted to phi77 personnel and authorized third-party processors who have a legitimate need to access it. All access is logged and audited;
• Two-Factor Authentication: phi77 offers two-factor authentication (2FA) for player accounts to provide an additional layer of security;
• Regular Security Audits: phi77's systems and security controls are subject to regular internal and third-party security assessments;
• Incident Response: phi77 maintains a data breach response plan and will notify affected players and the National Privacy Commission in the event of a personal data breach, in accordance with NPC Circular 16-03.

While phi77 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your phi77 account credentials. If you suspect that your account has been compromised, please contact phi77 support immediately.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phi77. To exercise any of these rights, please contact phi77's Data Protection Officer (see Section 13).

phi77 will respond to all privacy rights requests within fifteen (15) business days of receipt. In complex cases, this period may be extended by a further fifteen (15) business days, and phi77 will notify you of any such extension. phi77 may request proof of identity before processing a privacy rights request to ensure that data is not disclosed to unauthorized parties.

If you are not satisfied with phi77's response to your privacy rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

The phi77 Platform is strictly intended for adults aged 21 years and above. phi77 does not knowingly collect personal data from individuals under the age of 21. The minimum age for casino-style gambling in the Philippines is 21 years, and phi77 enforces this requirement through its registration and identity verification processes.

If phi77 becomes aware that it has inadvertently collected personal data from an individual under the age of 21, phi77 will immediately suspend the relevant account, delete the personal data collected, and return any deposits made to the payment method used, subject to verification.

If you are a parent or guardian and believe that your child has registered for a phi77 account, please contact phi77 support immediately so that we can take appropriate action.

phi77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, phi77 will notify registered players via email or through a prominent notice on the phi77 Platform prior to the changes taking effect.

The "Last Updated" date at the top of this page indicates when this Privacy Policy was most recently revised. Your continued use of the phi77 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. phi77 recommends that you review this Privacy Policy periodically to stay informed of how we protect your data.

If any amendment to this Privacy Policy materially affects how phi77 processes your personal data in a way that requires your consent, phi77 will seek your explicit consent before the new processing begins.

phi77 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act. If you have any questions, concerns, or requests relating to this Privacy Policy or phi77's data practices, please contact our DPO using the details below.

phi77 aims to acknowledge all privacy-related inquiries within one (1) business day and to resolve them within fifteen (15) business days. For complaints that cannot be resolved directly with phi77, you may contact the National Privacy Commission of the Philippines.

All privacy rights requests must be submitted in writing (via email) and must include sufficient information to verify your identity as the registered phi77 account holder. phi77 will not process privacy rights requests that cannot be verified, in order to protect your data from unauthorized disclosure.