phi77 Privacy Policy

01 Introduction

Welcome to the phi77 Privacy Policy. phi77 ("phi77," "we," "us," or "our") is committed to protecting the privacy and personal data of every player, visitor, and user ("you" or "Data Subject") who interacts with the phi77 online gaming platform at phi77.xyz and through the phi77 mobile application.

This Privacy Policy describes how phi77 collects, uses, stores, shares, and protects your personal data. It also explains the rights you hold under the Republic Act No. 10173, known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and how you can exercise those rights.

By registering a phi77 account, accessing the phi77 platform, or using any phi77 service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, please do not use the phi77 platform.

02 Data Controller Information

For the purposes of the Data Privacy Act of 2012 and its implementing rules and regulations, phi77 acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes in connection with the phi77 platform and services.

phi77 has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with the DPA and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, you may contact the phi77 DPO through the contact details provided in Section 15 of this Policy.

03 Personal Data We Collect

phi77 collects the following categories of personal data from players and users of the phi77 platform:

phi77 does not intentionally collect sensitive personal information as defined under the DPA (such as health data, religious beliefs, or political affiliations) unless specifically required by law or with your explicit consent.

04 How We Collect Your Data

phi77 collects personal data through the following means:

• Direct Collection: When you register a phi77 account, complete KYC verification, make a deposit or withdrawal, contact phi77 support, or participate in a phi77 promotion, you provide personal data directly to phi77.
• Automated Collection: When you access the phi77 website or mobile application, phi77 automatically collects certain technical data through cookies, web beacons, log files, and similar tracking technologies. This includes your IP address, device information, and browsing behavior on the phi77 platform.
• Third-Party Sources: phi77 may receive personal data about you from third-party identity verification providers, payment processors (such as GCash, Maya, BPI, BDO, and Metrobank), fraud prevention services, and publicly available sources, where permitted by applicable law.
• Referral Programs: If you are referred to phi77 by an existing player through a referral program, phi77 may receive limited personal data (such as your contact details) from the referring player, solely for the purpose of processing the referral.

05 Purpose & Use of Your Data

phi77 processes your personal data for the following specific, legitimate purposes:

• Account Management: To create, maintain, and manage your phi77 player account, including processing your registration, verifying your identity, and managing your account settings and preferences.
• Service Delivery: To provide you with access to phi77 games, features, and services, including Lucky Piggy, Bingo Adventure, Dinner Delights, Darts, and all other titles in the phi77 game library.
• Financial Transactions: To process deposits, withdrawals, and bonus payments in Philippine Peso (₱ / PHP) through your chosen payment method, and to maintain accurate financial records.
• KYC & Age Verification: To verify that you meet the minimum age requirement of 21 years and to comply with Know Your Customer (KYC) obligations under Philippine law.
• Legal & Regulatory Compliance: To comply with applicable Philippine laws and regulations, including the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and PAGCOR regulatory requirements.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other illegal or prohibited conduct on the phi77 platform.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance through phi77's live chat and email support channels.
• Responsible Gaming: To monitor gaming behavior and identify players who may be at risk of problem gambling, and to administer responsible gaming tools such as deposit limits, loss limits, and self-exclusion.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided your consent to receive such communications. You may opt out of marketing communications at any time.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the phi77 platform, games, and user experience.

06 Legal Basis for Processing

phi77 processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012 of the Philippines:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and phi77 — specifically, to provide you with access to the phi77 platform and services as described in the phi77 Terms & Conditions.
• Legal Obligation: Processing is necessary for phi77 to comply with its legal and regulatory obligations under Philippine law, including KYC verification, AML reporting, and data retention requirements.
• Legitimate Interests: Processing is necessary for phi77's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided that such interests are not overridden by your rights and freedoms.
• Consent: For certain types of processing — such as direct marketing communications and the use of non-essential cookies — phi77 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

07 Data Sharing & Disclosure

phi77 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. phi77 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: phi77 shares financial data with payment service providers such as GCash, Maya, BPI, BDO, and Metrobank solely for the purpose of processing your deposits and withdrawals.
• Identity Verification Providers: phi77 engages third-party KYC and identity verification service providers to assist with age verification and document authentication. These providers process your identity data under strict confidentiality obligations.
• Game Providers: phi77 may share limited technical and gaming data with third-party game software providers to facilitate the delivery of games on the phi77 platform.
• Fraud Prevention & AML Services: phi77 may share data with fraud detection and anti-money laundering service providers to protect the integrity of the phi77 platform and comply with AMLA obligations.
• Regulatory Authorities: phi77 is required by law to disclose certain personal data to Philippine regulatory authorities, including PAGCOR and the Anti-Money Laundering Council (AMLC), upon lawful request or as required by applicable regulations.
• Law Enforcement: phi77 may disclose personal data to law enforcement agencies or courts of competent jurisdiction where required by a valid legal order, subpoena, or warrant.
• Professional Advisors: phi77 may share personal data with its legal counsel, auditors, and other professional advisors under strict confidentiality obligations, where necessary for the conduct of phi77's business.

All third parties with whom phi77 shares personal data are required to handle such data in accordance with applicable data protection laws and phi77's data processing agreements.

08 Data Retention

phi77 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Active Account Data: Personal data associated with an active phi77 account is retained for the duration of the account's existence and for a period of five (5) years following account closure, in compliance with AMLA record-keeping requirements.
• KYC & Identity Verification Data: Copies of identity documents and KYC verification records are retained for a minimum of five (5) years from the date of verification, as required by Philippine AML regulations.
• Financial Transaction Records: Records of all deposits, withdrawals, and wagering transactions are retained for a minimum of five (5) years from the date of the transaction.
• Customer Support Records: Records of live chat conversations and email correspondence are retained for a period of two (2) years from the date of the interaction.
• Marketing Data: Personal data used for marketing purposes is retained until you withdraw your consent or opt out of marketing communications, after which it will be deleted or anonymized within thirty (30) days.

Upon expiry of the applicable retention period, phi77 will securely delete or anonymize your personal data in accordance with its data disposal procedures.

09 Your Data Subject Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights in relation to your personal data held by phi77:

• Right to Be Informed: You have the right to be informed about how phi77 collects, uses, and processes your personal data. This Privacy Policy fulfills phi77's obligation to inform you.
• Right of Access: You have the right to request a copy of the personal data that phi77 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data that phi77 holds about you. You may update certain account details directly through your phi77 account dashboard.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phi77's legal retention obligations.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that phi77 transmit that data to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where phi77 relies on legitimate interests as the legal basis for processing.
• Right to Restrict Processing: You have the right to request that phi77 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe that phi77 has processed your personal data in violation of the DPA.

To exercise any of the above rights, please contact the phi77 Data Protection Officer using the contact details provided in Section 15 of this Policy. phi77 will respond to all data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

10 Data Security Measures

phi77 takes the security of your personal data seriously. phi77 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmitted between your device and the phi77 platform is encrypted using industry-standard SSL/TLS protocols. Sensitive data stored in phi77's systems, including passwords and financial information, is encrypted at rest using strong encryption algorithms.
• Access Controls: Access to personal data within phi77's systems is restricted to authorized personnel on a strict need-to-know basis. All phi77 staff with access to personal data are subject to confidentiality obligations and regular data protection training.
• Two-Factor Authentication: phi77 offers two-factor authentication (2FA) for player accounts to provide an additional layer of security against unauthorized access.
• Regular Security Audits: phi77 conducts regular security assessments, penetration testing, and vulnerability scans to identify and address potential security weaknesses in the phi77 platform.
• Incident Response: phi77 maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, phi77 will notify the NPC and affected players in accordance with the DPA's breach notification requirements.
• Secure Data Centers: phi77's data is hosted in secure data centers with physical access controls, environmental protections, and redundant systems to ensure data availability and integrity.

While phi77 takes all reasonable steps to protect your personal data, no security system is completely impenetrable. phi77 cannot guarantee the absolute security of your data transmitted over the internet. You are responsible for maintaining the security of your phi77 account credentials.

11 Cookies & Tracking Technologies

phi77 uses cookies and similar tracking technologies (such as web beacons and local storage) on the phi77 website and mobile application. Cookies are small text files placed on your device that help phi77 recognize you, remember your preferences, and improve your experience on the platform.

phi77 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the phi77 platform to function correctly. They enable core features such as account login, session management, and security. These cookies cannot be disabled.
• Functional Cookies: These cookies allow phi77 to remember your preferences and settings (such as your preferred language and display settings) to provide a more personalized experience.
• Analytics Cookies: These cookies help phi77 understand how players use the platform by collecting aggregated, anonymized data about page visits, session duration, and feature usage. This information is used to improve the phi77 platform.
• Marketing Cookies: These cookies are used to deliver relevant promotional content and offers to you based on your interests and gaming activity on phi77. Marketing cookies are only placed with your consent.

You can manage your cookie preferences at any time through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of the phi77 platform. For more information on managing cookies, refer to your browser's help documentation.

12 Protection of Minors

phi77 is strictly an adult gaming platform. phi77 does not knowingly collect personal data from individuals under the age of 21 years. The minimum age to register and use the phi77 platform is 21 years, in compliance with Philippine gaming regulations.

If phi77 discovers or has reason to believe that personal data has been collected from a person under the age of 21, phi77 will immediately suspend the associated account, delete the personal data in question, and take appropriate action in accordance with applicable law.

Parents and guardians are encouraged to monitor the online activities of minors in their care and to make use of parental control tools available on devices and internet service providers to prevent minors from accessing online gaming platforms.

13 Cross-Border Data Transfers

In the course of providing the phi77 platform and services, your personal data may be transferred to and processed in countries outside the Republic of the Philippines. This may occur, for example, when phi77 uses cloud-based infrastructure, third-party game providers, or international payment processors that operate servers in other jurisdictions.

Where phi77 transfers personal data outside the Philippines, phi77 ensures that appropriate safeguards are in place to protect your data in accordance with the DPA and NPC guidelines. These safeguards may include:

• Data processing agreements with third-party recipients that incorporate data protection obligations equivalent to those required under Philippine law.
• Transfers to countries that have been assessed as providing an adequate level of data protection by the NPC or relevant international standards bodies.
• Standard contractual clauses or binding corporate rules approved by the NPC, where applicable.

By using the phi77 platform and accepting this Privacy Policy, you consent to the transfer of your personal data to other countries as described in this section, subject to the safeguards outlined above.

14 Changes to This Privacy Policy

phi77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in phi77's data processing practices, applicable law, or regulatory requirements. When material changes are made to this Privacy Policy, phi77 will update the "Last Updated" date at the top of this page.

For significant changes that materially affect how phi77 processes your personal data, phi77 will notify registered players via email or through an in-platform notification prior to the changes taking effect. Your continued use of the phi77 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

phi77 recommends that all players review this Privacy Policy periodically to stay informed of how phi77 protects their personal data. The most current version of this Privacy Policy will always be available at phi77.xyz/privacy-policy.

15 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phi77, please contact the phi77 Data Protection Officer (DPO) through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the phi77 platform. This is the fastest way to reach our support and privacy team.
• Email: [email protected] — for all data privacy-related inquiries, data subject access requests, and formal privacy complaints.
• General Support: [email protected] — for general account and platform inquiries.

phi77's privacy team is available in English and Filipino to assist players from Manila, Cebu, Davao, Quezon City, Makati, and across the Philippines. phi77 aims to acknowledge all privacy-related inquiries within two (2) business days and to provide a substantive response within fifteen (15) business days.

If you are not satisfied with phi77's response to your privacy inquiry or complaint, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines.