php77 Privacy Policy

This Policy applies to all personal data collected by php77 through: (a) your use of the php77 website and online gaming platform; (b) the account registration and verification process; (c) financial transactions conducted through your php77 wallet; (d) your communications with the php77 customer support team; and (e) your participation in any promotions, surveys, or loyalty programmes operated by php77.

By registering a php77 account or continuing to use the php77 platform after this Policy has been made available to you, you acknowledge that you have read, understood, and consent to the data practices described herein. If you do not agree with any part of this Policy, you should discontinue use of the php77 platform and may request account closure by contacting our support team.

This Policy does not govern the data practices of third-party service providers, game software developers, or payment processors integrated into the php77 platform. Those parties operate under their own privacy policies, which php77 encourages you to review independently.

For the purposes of the Philippine Data Privacy Act of 2012 and applicable data protection legislation, php77 acts as the data controller in respect of personal data collected through the php77 platform. As data controller, php77 is responsible for determining the purposes and means by which your personal data is processed.

php77 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection law. Contact details for the php77 DPO are provided in Section 16 of this Policy.

php77 collects the following categories of personal data in connection with your use of the platform:

php77 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data beyond responsible gaming records, or biometric data, except where required for KYC purposes as mandated by Philippine AML regulations.

php77 collects personal data through the following methods:

• Direct provision: Information you supply when registering an account, completing KYC verification, making deposits or withdrawals, participating in promotions, or contacting customer support;
• Automated collection: Technical data collected automatically when you access the php77 platform, including IP addresses, device identifiers, browser information, and session data through cookies and similar technologies;
• Payment processors: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other approved payment channels when you conduct financial transactions on php77;
• Identity verification services: Data returned from third-party KYC and identity verification providers used to confirm your identity and age in compliance with regulatory requirements;
• Game providers: Gaming activity data generated by your participation in games supplied by third-party software providers on the php77 platform.

php77 processes your personal data for the following specific purposes:

• Account creation and management: Registering, verifying, operating, and maintaining your php77 player account;
• Identity and age verification: Confirming that you meet the 21+ age requirement and verifying your identity for KYC compliance;
• Payment processing: Facilitating deposits and withdrawals through your chosen Philippine payment method (GCash, PayMaya, BPI, BDO, Metrobank, UnionBank);
• Regulatory compliance: Meeting obligations under Philippine anti-money laundering (AML), counter-terrorism financing (CTF), and gaming regulatory requirements;
• Fraud prevention and security: Detecting and preventing fraudulent activity, account takeovers, money laundering, and cheating;
• Platform operation and improvement: Analysing platform performance, fixing technical issues, and developing new features;
• Responsible gaming: Monitoring player activity for indicators of problem gambling and administering responsible gaming tools including deposit limits, session controls, and self-exclusion;
• Customer support: Responding to your enquiries, complaints, and requests;
• Marketing communications: Sending you information about php77 promotions, bonuses, and new features — only where you have provided explicit consent, with an easy opt-out available at any time.

php77 does not use your personal data for automated decision-making processes that produce legal or similarly significant effects on you without providing a meaningful opportunity to request human review.

Under the Philippine Data Privacy Act of 2012, php77 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform our obligations under the php77 Terms & Conditions, including account management, payment processing, and game access;
• Legal obligation: Processing necessary to comply with Philippine AML legislation, gaming regulations, tax obligations, and other applicable legal requirements;
• Legitimate interests: Processing carried out for the legitimate interests of php77, including fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your rights;
• Consent: Processing based on your freely given, specific, and informed consent — primarily in relation to marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

php77 does not sell, rent, or trade your personal data to any third party. We may share your personal data with the following categories of recipients solely to the extent necessary for the stated purpose:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other approved Philippine payment channels, for the purpose of processing your deposits and withdrawals;
• Game software providers: Licensed game developers and content providers whose titles are hosted on the php77 platform, to the extent necessary for game delivery and integrity;
• KYC and identity verification providers: Third-party services used to verify your identity and age in compliance with Philippine regulatory requirements;
• Regulatory and law enforcement authorities: Philippine government agencies, regulatory bodies, or law enforcement where disclosure is required by law, court order, or regulatory direction;
• IT and infrastructure service providers: Cloud hosting, data storage, security monitoring, and platform maintenance partners operating under contractual data processing obligations consistent with this Policy;
• Professional advisors: Legal counsel, auditors, and compliance consultants, subject to applicable professional confidentiality obligations.

The php77 platform primarily stores and processes personal data within data centre infrastructure serving the Philippine and Asia-Pacific region. However, certain service providers engaged by php77 — including game software developers and cloud infrastructure partners — may process personal data in jurisdictions outside the Philippines.

Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that afforded by Philippine law, php77 will ensure that appropriate safeguards are in place prior to the transfer, including:

• Contractual data processing agreements incorporating the standard clauses approved by the Philippine National Privacy Commission;
• Binding corporate rules where the recipient is a member of the same corporate group as php77;
• Transfer to recipients in jurisdictions recognised by the National Privacy Commission as providing an adequate level of data protection.

You may request further information about international data transfers and the safeguards in place by contacting the php77 Data Protection Officer at the address provided in Section 16.

php77 retains your personal data for no longer than is necessary for the purposes for which it was collected, subject to any applicable legal retention obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your active php77 account relationship plus a post-closure period required by law;
• KYC and identity documents: Retained for a minimum of five (5) years following account closure, in compliance with Philippine AML regulations;
• Financial transaction records: Retained for a minimum of five (5) years following the date of the transaction, in compliance with Philippine AML and tax record-keeping requirements;
• Customer support communications: Retained for a period of three (3) years following closure of the relevant support interaction, unless a longer period is required for dispute resolution purposes;
• Marketing consent records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, as evidence of the consent previously given.

Upon expiry of the applicable retention period, php77 will securely delete or anonymise your personal data in a manner that prevents reconstruction or identification. Where anonymisation is technically achievable, php77 may retain anonymised aggregate data for statistical and analytical purposes indefinitely.

php77 uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the platform, maintain your login session, and analyse platform performance. The following categories of cookies are used by php77:

• Strictly necessary cookies: Essential for platform operation and security. These cannot be disabled without impairing basic functionality, including your ability to log in and maintain a session. No consent is required for strictly necessary cookies;
• Functional cookies: Used to remember your preferences (such as language and display settings) to improve your experience. These are enabled by default but can be disabled in your browser settings;
• Analytics cookies: Used to collect anonymous, aggregated information about how the php77 platform is used, enabling us to identify and fix technical issues and improve the service. These require your consent where applicable;
• Security cookies: Used for fraud detection, account security monitoring, and detection of suspicious login patterns.

You can manage cookie preferences through your browser settings at any time. Please note that disabling certain categories of cookies may affect the functionality of the php77 platform, including your ability to maintain an active session.

Under the Philippine Data Privacy Act of 2012, you are entitled to exercise the following rights in respect of your personal data held by php77:

• Right to be informed: The right to be notified about the data php77 collects and the purposes for which it is processed — fulfilled by this Privacy Policy;
• Right of access: The right to obtain confirmation of whether php77 holds personal data about you and to receive a copy of that data;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data held by php77;
• Right to erasure: The right to request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to legal retention obligations;
• Right to object: The right to object to the processing of your personal data for specific purposes, including direct marketing;
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing;
• Right to lodge a complaint: The right to file a complaint with the Philippine National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of the above rights, please submit a written request to the php77 Data Protection Officer at the contact details provided in Section 16. php77 will respond to data subject requests within thirty (30) calendar days of receipt. Complex requests may require up to sixty (60) days, in which case php77 will inform you of the extension and reason for delay.

php77 may require you to verify your identity before processing a data subject request to ensure that personal data is not disclosed to an unauthorised party.

If php77 discovers or receives credible notification that personal data has been collected from a person under the age of 21 — whether as a result of false information provided during registration or otherwise — php77 will immediately:

• Suspend the affected account pending investigation;
• Void all real-money balances and any gaming activity associated with the account;
• Permanently delete the personal data of the minor from all active databases, subject only to any minimum retention required by law;
• Permanently bar the relevant individual from re-registering on the php77 platform.

If you believe that a minor has registered or accessed a php77 account, please contact our support team immediately at [email protected] so that appropriate action can be taken without delay.

php77 implements appropriate technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and the php77 platform is protected by TLS 1.3 / 256-bit SSL encryption;
• Encryption at rest: Sensitive personal data and financial records stored on php77 servers are encrypted at rest;
• Access controls: Access to personal data by php77 personnel is restricted on a strict need-to-know basis, enforced through role-based access control systems;
• Two-factor authentication: All internal php77 systems handling personal data require multi-factor authentication for staff access;
• Intrusion detection and monitoring: php77 systems are subject to continuous security monitoring, vulnerability scanning, and penetration testing;
• Incident response: php77 maintains a documented data breach response procedure consistent with the notification obligations under the Philippine Data Privacy Act.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, php77 will notify you and the Philippine National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03.

The php77 platform may contain references to third-party game providers, payment processors, and service integrations. php77 has no control over the data practices of these third parties and is not responsible for the content of their privacy policies or the manner in which they collect and process personal data.

The inclusion of any third-party service within the php77 platform does not constitute an endorsement or representation by php77 regarding the data protection standards of that third party. You should review the privacy policies of all third-party service providers whose services you access in connection with your php77 account, including GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank.

php77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the features of the php77 platform. The date of the most recent revision is displayed at the top of this page.

Material changes to this Policy — those that significantly affect your rights or the manner in which your personal data is processed — will be communicated to you via a notification within your php77 account and/or by email to your registered address, where reasonably practicable, prior to the change taking effect. Minor or administrative amendments may be made without specific notification, though the updated Policy will always be accessible at php77.cam/privacy-policy.

Your continued use of the php77 platform following the publication of an amended Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not accept a material change to this Policy, you may close your php77 account by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or php77's data processing practices, please contact our Data Protection Officer (DPO) using the details below. The php77 DPO is responsible for ensuring compliance with this Policy and applicable Philippine data protection legislation.

You also have the right to lodge a complaint with the Philippine National Privacy Commission (NPC) if you believe that your data protection rights have been violated and you are not satisfied with php77's response to your complaint. Information about the NPC and how to file a complaint is available through the NPC's official channels.

php77 is committed to working constructively with you and the NPC to resolve any data protection concerns promptly and in good faith.