Privacy Policy
xx77 Casino Philippines

1 Introduction

This Privacy Policy ("Policy") describes the practices of xx77 ("xx77," "we," "us," or "our") with respect to the collection, use, storage, disclosure, and protection of personal data obtained through the xx77 online gaming and sports betting platform accessible at xx77.bid ("the Platform").

xx77 is committed to handling your personal data responsibly and in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations ("IRR"), and other applicable Philippine privacy laws and regulations. Where xx77 processes personal data for purposes connected to PAGCOR-regulated gaming activities, additional regulatory requirements may also apply.

This Policy applies to all individuals who access or use the Platform, including registered Account Holders, prospective players who browse the Platform without registering, and any other person whose personal data is processed by xx77 in connection with the Platform. This Policy should be read in conjunction with xx77's Terms & Conditions.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, xx77 is the personal information controller with respect to the personal data collected and processed through the Platform. As personal information controller, xx77 determines the purposes and means of processing your personal data.

Inquiries, requests, and complaints relating to the processing of your personal data by xx77 should be directed to the contact details above. xx77 will acknowledge receipt of all formal data privacy inquiries within five (5) business days and will endeavor to provide a substantive response within thirty (30) business days.

3 Personal Data We Collect

xx77 collects several categories of personal data in the course of providing its services. The specific data collected depends on how you interact with the Platform.

3.1 Identity and Registration Data

When you register an xx77 account, we collect: full legal name, date of birth, gender, nationality, a valid government-issued Philippine identification document (such as a driver's license, passport, PhilSys National ID, SSS/GSIS ID, or PRC ID), a photograph or scan of the submitted identification document, and a selfie photograph where required for biometric identity matching during KYC verification.

3.2 Contact Data

We collect your registered email address, Philippine mobile number (Smart, Globe, or DITO), and residential address. These are used for account communications, security verifications, and as required for payment processing and regulatory compliance.

3.3 Financial and Transaction Data

We collect payment account details sufficient to process deposits and withdrawals — including GCash registered mobile numbers, PayMaya account references, and bank account details (account name, account number, bank name) for BPI, BDO, Metrobank, and UnionBank transactions. We also maintain records of all deposit and withdrawal transactions, amounts, timestamps, and associated payment method identifiers. We do not store full debit or credit card numbers on our servers.

3.4 Gaming Activity Data

We collect records of your gaming activity on the Platform, including games played, bet amounts, game outcomes, session durations, login and logout timestamps, and active bonus balances. This data is used for account management, dispute resolution, regulatory reporting, and responsible gaming monitoring.

3.5 Technical and Device Data

We collect information about the device and browser you use to access the Platform, including IP address, device type and model, operating system version, browser type and version, screen resolution, and mobile network information. We also collect session identifiers, access logs, and Platform navigation data.

3.6 Communications Data

If you contact xx77 support, participate in surveys, submit feedback, or communicate with xx77 through any channel, we retain records of those communications and their content.

3.7 Summary of Data Categories

4 How We Collect Personal Data

xx77 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal request, contact support, respond to a survey, or update your account settings;
• Automatically through Platform use — through cookies, web beacons, server logs, and similar tracking technologies when you access the Platform;
• From payment service providers — GCash, PayMaya, and partner banks provide transaction confirmation data when you make deposits or receive withdrawals;
• From identity verification providers — third-party KYC and biometric verification services used to fulfill xx77's PAGCOR-compliant identity verification obligations;
• From fraud prevention and security services — including risk-scoring and IP reputation services used to protect Platform integrity.

5 Purpose & Legal Basis for Processing

xx77 processes your personal data only where a lawful basis for processing exists under the Philippine Data Privacy Act of 2012. The following table summarizes the main purposes for which xx77 processes personal data and the applicable legal basis in each case.

6 Sharing Your Personal Data

xx77 may share your personal data with third parties only in the circumstances described below. In all cases, xx77 ensures that appropriate safeguards are in place and that third-party recipients are bound by confidentiality and data protection obligations consistent with applicable Philippine law.

6.1 Payment Service Providers

xx77 shares financial data with licensed Philippine payment service providers — including GCash (G-Xchange Inc.), Maya Philippines Inc. (PayMaya), BPI, BDO, Metrobank, UnionBank, and over-the-counter partners — solely for the purpose of processing your deposits and withdrawals.

6.2 Identity Verification Providers

xx77 uses licensed third-party identity and age verification service providers to fulfill KYC obligations under PAGCOR regulations. These providers process your identity documents and biometric data solely for verification purposes and are bound by strict data processing agreements.

6.3 Technology and Infrastructure Providers

xx77 uses cloud infrastructure, database, and security service providers to operate the Platform. These providers act as personal information processors under the DPA and process data only on xx77's instructions.

6.4 Game Software Providers

Game providers whose titles are hosted on the Platform may receive session data, including player identifiers and game activity logs, as necessary to operate their games on the Platform and to ensure game integrity.

6.5 Regulatory and Law Enforcement Authorities

xx77 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where required to do so by applicable law, regulation, court order, or lawful regulatory request. xx77 will make reasonable efforts to notify you of such disclosure where legally permitted to do so.

6.6 Fraud Prevention and Security Services

xx77 may share technical identifiers — including IP addresses and device fingerprints — with fraud prevention and cybersecurity service providers for the purpose of protecting the Platform against unauthorized access, fraud, and other security threats.

7 International Data Transfers

xx77's primary data processing infrastructure is located in the Philippines. However, certain technology service providers, game software providers, and cloud infrastructure partners may process data in data centers located outside the Philippines.

Where personal data is transferred outside the Philippines, xx77 ensures that such transfers comply with the requirements of the Philippine Data Privacy Act of 2012, including by ensuring that the recipient jurisdiction provides an adequate level of data protection or that appropriate contractual safeguards — such as standard contractual clauses or equivalent data processing agreements — are in place prior to the transfer.

8 Data Retention

xx77 retains personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

• Account and identity data: Retained for the duration of the active Account relationship and for a minimum of five (5) years following Account closure, in compliance with PAGCOR licensing requirements and Philippine anti-money laundering regulations (Republic Act No. 9160 as amended);
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine AML law;
• Gaming activity logs: Retained for a minimum of three (3) years or as otherwise required by applicable PAGCOR regulations;
• Communications records: Retained for up to three (3) years from the date of the communication, or longer where relevant to an ongoing dispute or regulatory investigation;
• Technical and device data: Log data is generally retained for up to twelve (12) months, after which it is anonymized or deleted.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymized in accordance with xx77's data retention and destruction procedures.

9 Security Measures

xx77 implements a range of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit Transport Layer Security (TLS/SSL) encryption on all Platform connections, ensuring that data transmitted between your device and xx77's servers is encrypted in transit;
• Passwords are stored exclusively in hashed and salted format — xx77 never stores plaintext passwords;
• Access to systems containing personal data is restricted on a role-based, need-to-know basis, with multi-factor authentication required for administrative system access;
• Regular security assessments, vulnerability scans, and penetration testing of Platform infrastructure;
• Physical security controls at data processing facilities;
• Employee and contractor training on data protection and information security responsibilities;
• Incident response procedures for detecting, assessing, and responding to personal data breaches.

10 Cookies & Tracking Technologies

xx77 uses cookies and similar tracking technologies to operate the Platform, authenticate users, maintain session state, remember your preferences, and analyze Platform usage.

10.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for core Platform functionality — including user authentication, session management, and security features. These cannot be disabled without impairing Platform functionality;
• Functional Cookies: Used to remember your preferences and personalization settings, such as language preference and game display settings;
• Analytics Cookies: Used to understand how players use the Platform — such as which games are most visited and how navigation flows are used — to improve Platform performance and user experience. Analytics data is aggregated and not used to identify individual users;
• Security Cookies: Used to detect and prevent fraud, unauthorized access, and abuse of the Platform.

10.2 Managing Cookies

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect Platform functionality, including the ability to log in. Disabling analytics cookies will not affect your ability to use the Platform but will reduce xx77's ability to improve Platform performance based on usage data.

11 Your Data Privacy Rights

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to personal data held by xx77:

• Right to be Informed: The right to know whether xx77 holds personal data about you, and to receive information about how that data is processed — which this Policy fulfills;
• Right of Access: The right to request a copy of the personal data xx77 holds about you and information about how it is processed;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held by xx77;
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal data in circumstances where processing is unlawful, the data is no longer necessary for the purposes for which it was collected, or you have validly withdrawn consent. Note that deletion rights are limited where xx77 is required by law to retain data;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to Object: The right to object to processing of your personal data on grounds relating to your particular situation, including where processing is based on legitimate interests;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, contact xx77's data protection team at the contact details provided in Section 14. xx77 will respond to all data rights requests within thirty (30) days. Some requests — particularly erasure requests — may be subject to limitations where xx77 is legally required to retain data for regulatory compliance purposes.

12 Minors

The xx77 Platform is strictly intended for adults aged 21 years and older. xx77 does not knowingly collect or process personal data from individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process.

13 Changes to This Privacy Policy

xx77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes to Platform services. When material changes are made, xx77 will post the updated Policy on the Platform and, where practicable, notify registered Account Holders by email or in-platform notification.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the Platform following the posting of changes to this Policy constitutes your acknowledgment of those changes. We recommend reviewing this Policy periodically. The current version is always available at xx77.bid/privacy-policy.

14 Contact & Complaints

For questions, concerns, requests to exercise your data privacy rights, or complaints relating to the processing of your personal data by xx77, please contact us using the following details:

Complaints to the National Privacy Commission

If you are not satisfied with xx77's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC is the government body responsible for administering and implementing the Data Privacy Act of 2012 and has jurisdiction over data privacy complaints involving Philippine-based entities.

This Privacy Policy was last reviewed and updated on 1 January 2026. By continuing to use the xx77 Platform after this date, you acknowledge the terms of this Policy as currently published.