Phil77 ("phil77," "we," "us," or "our") is an online gaming platform operating at phil77.vip, authorized by the Philippine Amusement and Gaming Corporation ("PAGCOR"). We are committed to protecting the privacy and personal data of all individuals who interact with our platform — whether as registered players, visitors to our website, or applicants for employment.
This Privacy Policy explains how phil77 collects, uses, stores, shares, and protects your personal data, and describes the rights available to you as a data subject under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, hereafter "DPA") and its Implementing Rules and Regulations ("IRR").
This Policy applies to all personal data processed by phil77 in connection with the phil77 platform, including the website at phil77.vip, all account-related services, deposit and withdrawal transactions, game participation, customer support interactions, and any promotional communications. It does not apply to the privacy practices of third-party game providers or payment service providers, whose own privacy policies govern their respective data processing activities.
For the purposes of the Philippine Data Privacy Act of 2012, phil77 acts as the personal information controller ("PIC") in respect of the personal data collected and processed in connection with the platform and its services.
Phil77 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with the DPA and this Privacy Policy. Requests to contact the DPO may be directed to our support email address at [email protected], marked for the attention of the Data Protection Officer. Phil77's contact details for data privacy matters are listed in Section 15 of this Policy.
Phil77 collects the following categories of personal data in connection with the operation of the platform:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number (passport, PhilSys ID, driver's license, UMID, etc.), selfie photograph | Registration; KYC verification |
| Contact Data | Email address, mobile number, residential address in the Philippines | Registration; account updates |
| Financial Data | GCash account number, Maya account number, bank account details (BPI, BDO, Metrobank), transaction history, deposit and withdrawal amounts | Cashier / payment processing; KYC |
| Gaming Activity Data | Game sessions, bets placed, game outcomes, bonus utilization, session duration, wagering history | Continuous during platform use |
| Device & Technical Data | IP address, browser type and version, operating system, device identifiers, screen resolution, time zone, language settings | Automatic collection on site visit or login |
| Usage Data | Pages visited, features accessed, navigation paths, session timestamps, click patterns | Automatic collection during platform use |
| Communication Data | Support chat transcripts, email correspondence, support ticket content | When contacting phil77 support |
| Responsible Gaming Data | Deposit limit settings, self-exclusion status, cooling-off periods, player protection tool usage | Account settings; responsible gaming tool activation |
Phil77 does not intentionally collect sensitive personal information as defined under Section 3(l) of the DPA (such as health records, sexual orientation, or political affiliations) except where strictly required for responsible gaming compliance purposes — for example, where a player voluntarily discloses a gambling disorder in the context of requesting self-exclusion. Such disclosures are processed solely for the purpose of implementing the requested player protection measure.
Phil77 collects personal data through the following channels:
Phil77 processes personal data for the following specific, legitimate purposes:
Under the Philippine Data Privacy Act of 2012, phil77 relies on the following legal bases for processing personal data:
Phil77 does not sell your personal data to third parties. We do not share personal data with advertisers, data brokers, or unrelated commercial entities. Personal data is shared with third parties only in the following controlled circumstances:
Phil77 engages third-party service providers who process personal data on our behalf as personal information processors ("PIPs"), under contractual obligations that require them to maintain confidentiality and process data only on phil77's documented instructions. These include payment service providers (GCash, Maya, banks), KYC and identity verification services, cloud hosting and infrastructure providers, and customer support platform operators.
Phil77 is required by Philippine law to disclose certain player data to PAGCOR, the Anti-Money Laundering Council ("AMLC"), the National Privacy Commission ("NPC"), courts of competent jurisdiction, and other authorized government agencies or law enforcement bodies upon lawful request or as mandated by applicable regulations. Phil77 will comply with all such obligations and, where legally permitted, will endeavor to inform affected players of mandatory disclosures.
Third-party game studios and live casino operators whose games are available on phil77 may receive limited session or transaction data necessary to operate their games and resolve disputes. Game providers are bound by contractual data processing obligations and are prohibited from using phil77 player data for their own marketing or commercial purposes without separate consent.
In the event of a merger, acquisition, corporate restructuring, or sale of substantially all of phil77's assets, player data may be transferred to the acquiring entity, subject to the same protections afforded under this Privacy Policy and applicable Philippine law. Phil77 will notify affected players of such a transfer by email or prominent notice on the platform prior to the transfer taking effect.
Phil77 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following minimum retention periods imposed by Philippine law:
| Data Category | Retention Period | Legal Basis for Retention |
|---|---|---|
| KYC / Identity Documents | 5 years from account closure (minimum) | AMLA; PAGCOR regulations |
| Financial Transaction Records | 5 years from transaction date | AMLA; BIR record-keeping requirements |
| Gaming Session Records | 3 years from session date | PAGCOR licensing; dispute resolution |
| Support Communications | 3 years from last interaction | Legitimate interest; dispute resolution |
| Self-Exclusion Records | Duration of exclusion + 5 years | PAGCOR responsible gaming framework |
| Marketing Preferences | Until consent withdrawn + 1 year | DPA consent record-keeping |
| Technical / Log Data | 90 days (standard); up to 3 years where flagged for security review | Security; fraud prevention |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC guidelines. Anonymized, aggregated data that cannot be used to identify an individual may be retained indefinitely for statistical and analytical purposes.
Phil77 implements organizational and technical security measures designed to protect personal data against unauthorized access, accidental loss, disclosure, alteration, or destruction. These measures include:
In the event of a personal data breach that is likely to result in serious harm to affected data subjects, phil77 will notify the National Privacy Commission ("NPC") within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03. Affected individuals will be notified in accordance with NPC guidelines and as soon as reasonably practicable following the breach assessment.
Phil77 uses cookies and similar tracking technologies on the phil77.vip website to enable the platform to function correctly, to maintain login sessions, and to analyze how the site is used. The following categories of cookies are used:
Phil77 does not use third-party advertising or behavioral tracking cookies for the purpose of serving targeted advertising on external websites. Cookie preferences may be managed via your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your phil77 account.
Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by phil77. To exercise any of these rights, please contact us at [email protected].
You have the right to request a copy of the personal data phil77 holds about you, information about how it is being used, and details of any third parties with whom it has been shared. Phil77 will respond to verified access requests within thirty (30) days.
You have the right to request correction of inaccurate or incomplete personal data held by phil77. Minor contact details (email address, mobile number) may be updated directly via your account profile. Changes to KYC-verified identity data require documentary evidence and will be processed within fifteen (15) business days.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and no other legal basis exists, or where the data has been unlawfully processed. Erasure requests are subject to retention obligations imposed by AMLA, PAGCOR, and other applicable Philippine laws. Where data must be retained by law, phil77 will restrict processing to the extent required by the applicable retention obligation.
You have the right to object to processing of your personal data for direct marketing at any time without providing a reason. You may also object to processing based on legitimate interests; phil77 will cease such processing unless compelling legitimate grounds exist that override your interests, rights, and freedoms.
Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to request its transmission to another personal information controller where technically feasible.
If you believe that phil77 has not handled your personal data in accordance with the DPA, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Phil77 requests that you first contact us directly at [email protected] to attempt resolution before escalating to the NPC.
If phil77 becomes aware that personal data of a person under 21 years of age has been collected, the data will be deleted without undue delay and any associated account will be permanently suspended. If you are a parent or guardian and believe your minor child has registered an account on phil77, please contact [email protected] immediately.
Phil77 primarily processes and stores personal data within server infrastructure located in or serving the Philippines. Where data is processed or transferred to third-party service providers located outside the Philippines — for example, cloud infrastructure providers or licensed KYC verification services with international operations — such transfers are conducted under contractual safeguards designed to ensure an equivalent level of protection to that afforded under the Philippine Data Privacy Act.
Phil77 will not transfer personal data to recipients in countries that do not provide an adequate level of data protection without implementing appropriate safeguards, such as NPC-approved standard contractual clauses or binding corporate rules, unless a recognized exception under the DPA applies.
Phil77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. When material changes are made — those that affect how we use your personal data or your rights as a data subject — phil77 will notify you by email to your registered address and display a prominent notice on the phil77 platform for at least fourteen (14) days before the changes take effect.
For minor, non-substantive amendments (formatting corrections, typographical fixes, or clarifications that do not alter the substance of the Policy), phil77 will update the "Last Updated" date at the top of this document without separate notification. The current version of this Policy is always available at phil77.vip/privacy-policy.
Your continued use of the phil77 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the platform and request account closure.
For any questions, concerns, or requests related to this Privacy Policy or the exercise of your data subject rights, please contact the phil77 data privacy team through the following channels:
Phil77's Data Protection Officer is responsible for ensuring compliance with the DPA and this Privacy Policy, handling data subject rights requests, and maintaining the phil77 data protection impact assessment register. The DPO's contact details may be requested via the support email address above.
For complaints that cannot be resolved through phil77's internal process, you may contact the National Privacy Commission of the Philippines, the statutory body responsible for administering and enforcing the Data Privacy Act of 2012.
These are the practical protections behind the legal language — the real-world commitments every phil77 account holder benefits from.
Phil77 processes all personal data in full compliance with the Philippine Data Privacy Act of 2012 (RA 10173). A designated Data Protection Officer oversees all data processing activities, data subject rights requests, and NPC reporting obligations.
Every byte of data transmitted between your device and phil77's servers is protected by 256-bit TLS/SSL encryption. Your KYC documents, financial details, and gaming data are never sent over unencrypted connections under any circumstances.
You have the right to access, correct, delete, port, and object to processing of your personal data at any time. Phil77 responds to rights requests within 30 days. Requests may be submitted by email to [email protected] marked for the DPO.
Phil77 does not sell, rent, or trade your personal data to advertisers, data brokers, or unrelated third parties. Data is shared only with service providers operating under strict contractual obligations, and with regulatory authorities as required by Philippine law.
Phil77 only sends promotional communications to players who have opted in. You can withdraw consent for marketing at any time from your account settings, and your choice will be respected immediately. Withdrawal of marketing consent does not affect your account or any other processing.
In the unlikely event of a data breach likely to cause harm, phil77 will notify the National Privacy Commission within 72 hours and inform affected players as soon as practicable — in full compliance with NPC Circular No. 16-03 and our obligations under the DPA.
Your data is protected under Philippine law, secured by 256-bit encryption, and never sold. Phil77 is a PAGCOR-regulated platform operating transparently for Filipino players — 24/7, in Philippine Peso.
21+ only. PAGCOR-regulated. Gambling involves risk — please play responsibly. Responsible Gaming →