Your Privacy
Matters at pp77

1. Introduction

pp77 ("we", "us", "our") is committed to protecting the privacy and personal data of all players and visitors who use the pp77 online gaming platform accessible at pp77.asia (the "Platform"). This Privacy Policy describes how pp77 collects, uses, stores, shares, and protects your personal information in connection with your use of the Platform.

This Privacy Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as applicable guidelines issued by the National Privacy Commission (NPC) of the Philippines and PAGCOR's data governance requirements.

By registering an Account on the pp77 Platform, accessing any part of the Platform, or otherwise providing us with your personal data, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, you must not use the pp77 Platform.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, pp77 acts as the Personal Information Controller in respect of the personal data collected through the Platform. This means that pp77 determines the purposes and means of processing your personal data.

pp77 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. You may contact our DPO at any time using the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

pp77 collects the following categories of personal data from players and Platform visitors:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification number (e.g., Philippine National ID, passport, driver's licence, SSS/GSIS number).
• Contact Data: Email address, mobile number, and residential address (including city, province, and postal code).
• Account Data: Username, encrypted password, account preferences, and communication preferences.
• Financial Data: GCash mobile number, PayMaya/Maya account details, bank account details (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank), debit card details (card number masked), transaction history, deposit and withdrawal records.
• Gaming Data: Game history, wagering activity, session duration, win/loss records, bonus usage, and responsible gaming settings.
• Technical Data: IP address, device type, operating system, browser type and version, time zone, and platform access logs.
• Usage Data: Information about how you navigate and interact with the Platform, including pages visited, features used, and click-stream data.
• Communications Data: Records of your communications with pp77 customer support, including chat transcripts and email correspondence.

4. How We Collect Your Data

pp77 collects your personal data through the following means:

• Direct interactions: Data you provide when registering an Account, completing identity verification (KYC), making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, through cookies, web beacons, server logs, and similar tracking technologies.
• Third-party sources: Identity verification data from KYC/AML service providers; payment data from GCash, PayMaya, and banking partners; fraud prevention data from third-party risk management services; and publicly available information where relevant to regulatory compliance.

5. How We Use Your Personal Data

pp77 uses your personal data for the following purposes:

• To create, manage, and maintain your pp77 Account.
• To verify your identity and age (21+) in compliance with PAGCOR requirements and Philippine law.
• To process deposits, withdrawals, and other financial transactions.
• To provide customer support and respond to your enquiries and complaints.
• To detect, investigate, and prevent fraud, money laundering, and other illegal activities in compliance with the Anti-Money Laundering Act (AMLA) of the Philippines.
• To comply with legal and regulatory obligations, including reporting requirements imposed by PAGCOR and the Anti-Money Laundering Council (AMLC).
• To personalise your gaming experience and deliver relevant promotions and offers (where you have consented to receive marketing communications).
• To monitor and analyse Platform usage for the purpose of improving our services, fixing technical issues, and enhancing security.
• To enforce our Terms and Conditions and other applicable policies.
• To implement responsible gaming measures, including age verification, deposit limit monitoring, and self-exclusion management.

pp77 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

6. Legal Basis for Processing

pp77 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you, including Account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing conditions, AMLA reporting obligations, and NPC guidelines.
• Legitimate interests: Processing necessary for pp77's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, particularly in relation to marketing communications and non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Data Sharing & Disclosure

pp77 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary and on a need-to-know basis:

• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government agencies, where required by law or regulatory obligation.
• Payment service providers: GCash, PayMaya/Maya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for the purpose of processing deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML service providers engaged to verify your identity and age in compliance with regulatory requirements.
• Technology and infrastructure providers: Cloud hosting, cybersecurity, and platform maintenance providers who process data on our behalf under strict data processing agreements.
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third parties with whom pp77 shares personal data are required to implement appropriate technical and organisational security measures and to process your data only in accordance with pp77's instructions and applicable Philippine data protection law.

8. Cookies & Tracking Technologies

pp77 uses cookies and similar technologies (such as web beacons and local storage) to operate and improve the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function correctly, including session management, login authentication, and security features. These cookies cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming limits, to provide a more personalised experience.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the Platform, helping us identify areas for improvement. No personally identifiable information is shared with analytics providers.

pp77 does not use advertising or third-party tracking cookies. You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform.

9. Data Security

pp77 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the pp77 Platform.
• Encryption of sensitive data at rest, including financial information and government ID details.
• Role-based access controls ensuring that only authorised pp77 personnel can access personal data, on a strict need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing conducted by independent cybersecurity specialists.
• Multi-factor authentication (MFA) for internal systems accessing personal data.
• Incident response procedures to detect, contain, and report data breaches in accordance with NPC notification requirements.

While pp77 takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, pp77 will notify you and the National Privacy Commission in accordance with applicable law.

10. Data Retention

pp77 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in compliance with AMLA record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• KYC/identity verification documents: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by a regulatory authority.
• Customer support communications: Retained for three (3) years from the date of the last communication.
• Technical and usage logs: Retained for twelve (12) months on a rolling basis.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with pp77's data disposal procedures.

11. Your Data Protection Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by pp77:

• Right to be informed: The right to be informed of how your personal data is being collected and processed, as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data pp77 holds about you, along with information about how it is being processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data held by pp77.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to pp77's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that pp77 has processed your personal data in violation of the Data Privacy Act.

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 15. pp77 will respond to all verified requests within thirty (30) calendar days of receipt. We may request proof of identity before processing your request.

12. Children's Privacy

The pp77 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. pp77 does not knowingly collect personal data from individuals under the age of 21.

If pp77 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete such data and close the associated Account. If you believe that a minor has registered on the pp77 Platform, please contact us immediately at the details provided in Section 15.

13. Third-Party Links

The pp77 Platform may contain links to third-party websites or services for informational purposes. pp77 is not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies solely to data collected through the pp77 Platform.

14. Changes to This Privacy Policy

pp77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where changes are material, pp77 will notify you by posting a prominent notice on the Platform or by sending an email to your registered address prior to the changes taking effect. Your continued use of the pp77 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how pp77 is protecting your personal data.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by pp77, please contact our Data Protection Officer:

• Email: [email protected]
• General Support: [email protected]
• Response Time: Within 30 calendar days for data rights requests; within 24 hours for general support enquiries.
• Support Hours: 24 hours a day, 7 days a week

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you are not satisfied with pp77's response to your data protection concern.