ph977 Casino – Privacy Policy

1. Introduction & Data Controller

1.1 This Privacy Policy ("Policy") describes how ph977 ("ph977," "the Company," "we," "us," "our") collects, uses, stores, shares, and protects the personal information of individuals ("Data Subjects," "Players," "you," "your") who register for and use the ph977 online casino platform, accessible at ph977.co.

1.2 ph977 acts as the Personal Information Controller (PIC) in respect of personal data processed through the ph977 platform, as defined under Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR").

1.3 ph977 operates under authorisation from the Philippine Amusement and Gaming Corporation (PAGCOR). As a PAGCOR-regulated entity, ph977 is subject to additional data handling and reporting obligations imposed by PAGCOR as part of its regulatory mandate.

1.4 This Policy applies to all personal data collected through the ph977 website, mobile web platform, live chat systems, email communications, and any other touchpoint between the Player and ph977.

2. Personal Data We Collect

2.1 ph977 collects the following categories of personal data:

2.2 ph977 does not collect sensitive personal information as defined under the DPA (e.g., health data, political affiliation, religious beliefs) unless such information is voluntarily provided by the Player in the context of a responsible gaming referral or similar welfare-related matter.

3. How We Collect Personal Data

3.1 ph977 collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC, making a deposit or withdrawal, contacting customer support, or participating in promotions;
• Automated Collection: Technical data collected automatically when you access the ph977 platform, including through cookies, web beacons, and server logs;
• Third-Party Sources: Identity verification data from PAGCOR-approved KYC service providers; fraud screening data from anti-money laundering (AML) and fraud prevention services; payment processing data from GCash, Maya, and banking partners.

3.2 ph977 uses Google Analytics and similar analytics tools to collect anonymised, aggregated data about Platform usage patterns. This data does not identify individual users and is used solely for Platform improvement purposes.

4. Legal Basis & Purposes of Processing

4.1 ph977 processes your personal data on the following legal bases under the DPA:

• Contractual Necessity: Processing necessary to fulfil our agreement with you — including account management, game provision, payment processing, and customer support;
• Legal Obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws;
• Legitimate Interests: Processing for fraud prevention, security monitoring, responsible gaming enforcement, and Platform analytics;
• Consent: Processing for marketing communications and promotional offers, where your explicit consent has been obtained.

4.2 The specific purposes for which ph977 processes your personal data include:

• Creating and managing your ph977 account;
• Verifying your identity and age (21+) as required by PAGCOR;
• Processing deposits and withdrawals via GCash, Maya, and other payment methods;
• Preventing fraud, money laundering, and other prohibited activities;
• Providing and improving ph977 games, features, and services;
• Administering bonuses, VIP programmes, and promotional offers;
• Enforcing responsible gaming measures and account self-exclusion requests;
• Complying with PAGCOR reporting requirements and regulatory audits;
• Communicating with you about account activity, security alerts, and support responses;
• Sending promotional communications where you have opted in.

5. Data Sharing & Disclosure

5.1 ph977 does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

5.2 ph977 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to binding data processing agreements:

• Payment Processors: GCash (GXchange Inc.), Maya (PayMaya Philippines Inc.), InstaPay network members, and other licensed Philippine payment service providers, for the purpose of processing deposits and withdrawals;
• KYC & AML Providers: PAGCOR-approved identity verification and anti-money laundering screening services;
• Game Providers: Licensed game developers (e.g., JILI Gaming, Pragmatic Play, PG Soft) who may process limited technical data to deliver games;
• Cloud & Infrastructure Providers: Hosting, security, and database service providers operating under strict data processing agreements;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement, and courts of the Philippines, where disclosure is required by law or regulatory mandate.

5.3 Where ph977 engages third-party processors, ph977 remains accountable for the protection of your personal data and requires all processors to implement appropriate technical and organisational security measures.

6. Data Retention

6.1 ph977 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by law. The following retention periods apply as a general guide:

• Account & Identity Data: Retained for the duration of the account relationship and for a minimum of five (5) years after account closure, in compliance with PAGCOR and AMLA requirements;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act;
• Gaming History: Retained for a minimum of three (3) years from the date of each session for regulatory compliance and dispute resolution purposes;
• Communications Data: Retained for a minimum of two (2) years from the date of the communication for customer support and compliance purposes.

6.2 Upon expiry of the applicable retention period, ph977 will securely delete or anonymise personal data in accordance with applicable data disposal standards.

7. Data Security

7.1 ph977 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph977 servers;
• Encryption of stored sensitive data, including KYC documents and financial records;
• Role-based access controls limiting access to personal data to authorised ph977 personnel only;
• Regular third-party security audits and penetration testing of ph977 infrastructure;
• Two-factor authentication options for Player accounts;
• Continuous fraud monitoring and anomaly detection systems.

7.2 In the event of a personal data breach that is likely to affect your rights and freedoms, ph977 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected Players as required by the DPA and NPC regulations.

7.3 While ph977 implements strong security measures, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords and to enable two-factor authentication on their ph977 accounts.

8. Cookies & Tracking Technologies

8.1 ph977 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help ph977 deliver a functional, personalised, and secure experience.

8.2 The following types of cookies are used on ph977:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without preventing the Platform from working correctly;
• Functional Cookies: Remember your preferences (e.g., language, preferred game category, last login) to improve your experience;
• Analytics Cookies: Collect anonymised usage data (e.g., pages visited, session duration, click patterns) to help ph977 understand how the Platform is used and identify areas for improvement. These are processed by analytics tools including Google Analytics;
• Marketing Cookies: Used only where you have given explicit consent, to deliver relevant promotional content.

8.3 You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core ph977 platform, though some enhanced features may be affected.

9. Your Rights as a Data Subject

9.1 Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ph977:

• Right to Be Informed: The right to know what personal data ph977 holds about you and how it is processed (fulfilled by this Policy);
• Right of Access: The right to request a copy of the personal data ph977 holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure: The right to request deletion of personal data where it is no longer necessary for the purpose for which it was collected, subject to retention obligations under PAGCOR regulations and Philippine law;
• Right to Object: The right to object to processing based on legitimate interests, particularly for direct marketing purposes;
• Right to Data Portability: The right to receive a copy of your personal data in a structured, machine-readable format;
• Right to Withdraw Consent: Where processing is based on consent, the right to withdraw consent at any time without affecting the lawfulness of prior processing;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

9.2 To exercise any of the above rights, please contact ph977's Data Protection Officer (DPO) using the contact details in Section 12. ph977 will respond to valid data subject requests within fifteen (15) business days.

10. Children's Privacy

10.1 If you are a parent or guardian and believe your child has provided personal data to ph977, please contact ph977 support immediately so that appropriate action can be taken.

11. Amendments to This Privacy Policy

11.1 ph977 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to Players via email notification or prominent notice on the Platform. The revised Policy will be effective from the date indicated in the "Last Updated" field at the top of this page.

11.2 Your continued use of the ph977 Platform following any amendment to this Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically.

12. Contact & Data Protection Officer

12.1 ph977 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the National Privacy Commission. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact:

12.2 If you are not satisfied with ph977's response to your data privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines (NPC). NPC contact details are available on the official NPC government website.