game77 Privacy Policy

1 Introduction

1.1 game77 is committed to protecting the privacy and personal data of all players who use the game77 platform. This Policy has been prepared in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and the implementing rules and regulations issued by the National Privacy Commission ("NPC").

1.2 This Policy applies to all personal data collected by game77 through game77.one, including data collected during account registration, gameplay, financial transactions, customer support interactions, and any other use of the platform.

1.3 This Policy should be read together with game77's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

1.4 If you have any questions about this Policy or how game77 handles your personal data, please contact our Data Protection Officer using the details provided in Section 14.

2 Personal Data We Collect

2.1 game77 collects the following categories of personal data:

2.1.1 Identity & Contact Data

• Full legal name as it appears on a government-issued ID;
• Date of birth (to verify the 21+ age requirement);
• Nationality and country of residence;
• Email address and mobile phone number;
• Residential address (barangay, city/municipality, province, ZIP code).

2.1.2 Verification & KYC Data

• Government-issued photo identification (e.g., Philippine passport, SSS ID, UMID, driver's licence, PhilSys national ID, PRC ID, voter's ID);
• Proof of address documents (e.g., utility bill, bank statement, barangay certificate);
• Selfie or liveness verification image where required;
• Proof of payment method ownership (e.g., screenshot of GCash or Maya account, bank statement).

2.1.3 Financial Data

• Deposit and withdrawal transaction records;
• Payment method details (GCash number, Maya account, bank account name and number — card numbers are never stored in full);
• Account balance history and wagering activity;
• Bonus and promotion redemption records.

2.1.4 Technical & Usage Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Session timestamps, login history, and platform activity logs;
• Game history, bet amounts, and session duration data.

2.1.5 Communications Data

• Records of customer support interactions via live chat or email;
• Feedback, complaints, and dispute correspondence;
• Marketing communication preferences and opt-in/opt-out records.

3 How We Collect Your Data

3.1 game77 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions;
• Automated collection: Technical and usage data collected automatically when you access game77.one, including through cookies, web beacons, and server logs (see Section 7);
• Third-party sources: Identity verification and fraud prevention data from licensed KYC and AML service providers; payment confirmation data from payment processors such as GCash, Maya, and partner banks.

3.2 game77 does not collect personal data from social media platforms or data brokers for the purpose of targeting or profiling players without explicit consent.

4 How We Use Your Personal Data

4.1 game77 uses your personal data for the following purposes:

4.2 game77 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or where you have given explicit consent.

5 Legal Basis for Processing

5.1 game77 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract between you and game77, including account management, payment processing, and game delivery;
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and regulatory reporting;
• Legitimate interests: Processing necessary for game77's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights;
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, such as for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

6.1 game77 does not sell, rent, or otherwise disclose your personal data to third parties for their own commercial purposes. game77 may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

6.1.1 Service Providers

game77 engages trusted third-party service providers to assist in operating the platform, including payment processors (GCash, Maya, partner banks), KYC and identity verification providers, cloud hosting and infrastructure providers, customer support software providers, and fraud detection and AML screening services. All service providers are contractually bound to process your data only on game77's instructions and in accordance with applicable data protection law.

6.1.2 Regulatory and Law Enforcement Authorities

game77 may disclose personal data to government agencies, regulatory bodies, or law enforcement authorities in the Philippines where required by law, court order, or regulatory directive. This includes disclosures to PAGCOR, the Anti-Money Laundering Council (AMLC), the NPC, and other competent authorities.

6.1.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of game77's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to the transfer taking effect.

6.2 game77 requires all third parties to whom personal data is disclosed to maintain appropriate technical and organisational security measures and to process such data only for the specified purpose.

7 Cookies & Tracking Technologies

7.1 game77 uses cookies and similar tracking technologies on game77.one to enhance your experience, maintain session security, and analyse platform usage. The following types of cookies are used:

• Strictly necessary cookies: Essential for the platform to function, including session authentication and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options to personalise your experience.
• Analytics cookies: Collect anonymised data about how players use game77.one to help us improve platform performance and user experience.
• Marketing cookies: Used only with your explicit consent to deliver relevant promotional content about game77 offers and features.

7.2 You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may affect the functionality of the game77 platform.

7.3 game77 does not use third-party advertising networks or cross-site tracking technologies that share your data with unrelated websites.

8 Data Retention

8.1 game77 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and KYC data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML and regulatory requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations;
• Customer support records: Retained for three (3) years from the date of the interaction;
• Technical and usage logs: Retained for up to twelve (12) months, unless required for longer periods for security or legal purposes;
• Marketing consent records: Retained for the duration of your consent and for three (3) years thereafter as evidence of consent.

8.2 When personal data is no longer required, game77 will securely delete or anonymise it in accordance with industry best practices.

9 Data Security

9.1 game77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and game77's servers;
• Encryption of sensitive data at rest, including financial records and identity documents;
• Role-based access controls ensuring that only authorised personnel can access personal data on a need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing;
• Multi-factor authentication for administrative access to systems containing personal data;
• Secure data centres with physical access controls and 24/7 monitoring.

9.2 While game77 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. game77 cannot guarantee absolute security but will notify you promptly in the event of a breach that affects your personal data, in accordance with NPC notification requirements.

9.3 You are responsible for maintaining the security of your game77 account credentials. game77 strongly recommends using a unique, strong password and enabling any available two-factor authentication features on your account.

10 Your Data Protection Rights

10.1 Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights with respect to your personal data held by game77:

Right to Access

You have the right to request a copy of the personal data game77 holds about you, along with information about how it is being processed. game77 will respond to access requests within fifteen (15) business days.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data game77 holds about you. You may update certain account details directly through your game77 account settings, or by contacting customer support.

Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing. Please note that game77 may be required to retain certain data for legal and regulatory compliance purposes even after an erasure request.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though game77 may be entitled to continue processing where there are compelling legitimate grounds.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.

How to Exercise Your Rights

To exercise any of the above rights, please contact game77's Data Protection Officer at the details provided in Section 14. game77 will respond to all verified requests within fifteen (15) business days. game77 may request proof of identity before processing a data rights request to protect against unauthorised access.

10.2 If you believe that game77 has not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

11 Children's Privacy

11.1 The game77 platform is strictly intended for adults aged 21 years and above. game77 does not knowingly collect personal data from individuals under the age of 21. If game77 becomes aware that personal data has been collected from a person under 21, that account will be immediately closed, all deposits refunded, and the personal data deleted in accordance with applicable law.

11.2 If you are a parent or guardian and believe that your child has registered on game77 or provided personal data to game77, please contact our Data Protection Officer immediately using the details in Section 14.

12 International Data Transfers

12.1 game77 primarily stores and processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers or infrastructure located outside the Philippines — for example, cloud hosting or KYC verification services — game77 ensures that such transfers are made in compliance with the Data Privacy Act of 2012 and NPC regulations.

12.2 game77 implements appropriate safeguards for international data transfers, including contractual clauses that require recipient organisations to maintain data protection standards equivalent to those required under Philippine law.

12.3 By using the game77 platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines, subject to the safeguards described in this section.

13 Updates to This Privacy Policy

13.1 game77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform features. The date of the most recent revision is displayed at the top of this page.

13.2 Where changes to this Policy are material — meaning they significantly affect how game77 processes your personal data or your rights — game77 will notify registered players via email or an in-platform notification at least fourteen (14) days before the changes take effect.

13.3 Your continued use of the game77 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree to the updated Policy, you should cease using the platform and may request account closure by contacting customer support.

13.4 The most current version of this Privacy Policy will always be available at game77.one/privacy-policy.

14 Contact Us & Data Protection Officer

14.1 game77 has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with this Privacy Policy and applicable data protection law. If you have any questions, concerns, or requests relating to your personal data or this Policy, you may contact the DPO as follows:

14.2 game77's customer support team is available 24 hours a day, 7 days a week via live chat on game77.one for general account and privacy enquiries.

14.3 If you are not satisfied with game77's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.

This Privacy Policy was last reviewed and updated on 15 May 2026. game77 reserves the right to update this Policy at any time. The most current version will always be available at game77.one/privacy-policy.