plus77 Privacy Policy

1Introduction

plus77 ("plus77", "we", "us", "our") operates the online gaming platform accessible at plus77.one and its associated mobile interfaces and subdomains. We are committed to protecting the personal data of all players, visitors, and prospective users ("you", "your") who interact with our platform, whether through registration, account use, payment processing, customer support, or simply browsing our website.

This Privacy Policy describes what personal data plus77 collects, how we use and protect it, with whom we may share it, how long we retain it, and what rights you have as a data subject under Philippine law. Reading this document in full will give you a clear picture of how plus77 handles your information from the moment you visit our site to the time your account is eventually closed.

This Privacy Policy is incorporated by reference into the plus77 Terms and Conditions. By registering an account, making a deposit, or otherwise using the plus77 platform, you acknowledge that you have read, understood, and consent to the data practices described in this Policy.

2Scope and Data Controller

This Privacy Policy applies to all personal data collected by plus77 through the following channels: the plus77.one website; the plus77 mobile web platform; customer support communications (live chat and email); payment and cashier systems; and any marketing or promotional communications you opt into.

plus77 is the data controller responsible for the personal data processed under this Policy, meaning we determine the purposes for which and the manner in which personal data is processed. Where we engage third-party service providers to process data on our behalf, those providers act as data processors and are contractually bound to process data only in accordance with plus77's instructions and this Policy.

This Policy does not govern the data practices of third-party game providers, payment processors, or other external services that may be accessible through the plus77 platform. Those parties operate under their own privacy policies and are independent data controllers in respect of the data they collect.

3Personal Data We Collect

plus77 collects personal data in several categories depending on the nature of your interaction with the platform. The following table summarizes the main categories of data collected:

4How We Collect Your Data

plus77 collects personal data through the following methods:

Information you provide voluntarily when you register an account, complete KYC verification, submit a deposit or withdrawal request, contact customer support, or participate in a promotional offer. This is the primary source of identity, contact, and financial data.

When you access the plus77 platform, our servers automatically record technical data including your IP address, device identifiers, session timestamps, browser configuration, and interaction logs. This data is collected via server logs, session tracking systems, and similar technologies and is used for security monitoring, fraud prevention, and platform optimization.

plus77 uses cookies and similar tracking technologies as described in Section 11 of this Policy. These collect behavioral and technical data about how you interact with our website and may persist across sessions.

plus77 may receive data about you from third parties in limited circumstances, including: payment processors confirming the status of transactions; identity verification service providers confirming the authenticity of submitted documents; fraud prevention databases flagging suspicious activity patterns; and analytics providers aggregating behavioral data.

5Purposes and Legal Bases for Processing

plus77 processes personal data only for specific, legitimate purposes and on the basis of one or more lawful grounds recognized under Republic Act No. 10173. The following table sets out the primary purposes for which we process your data and the legal basis for each:

Where plus77 relies on consent as the legal basis for processing (primarily for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal. To withdraw marketing consent, update your communication preferences in your account settings or contact our support team.

6Data Sharing and Disclosure

plus77 does not sell, rent, or otherwise trade your personal data with third parties for their commercial purposes. We may share your personal data with the following categories of recipients in the circumstances described:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other payment processors are given access to financial and identity data necessary to execute and verify deposit and withdrawal transactions. Each provider operates under its own privacy policy and applicable Philippine financial regulations.
• Game Providers: Third-party game studios (including but not limited to Evolution Gaming, Pragmatic Play, PG Soft, and Ezugi) receive session and transaction data necessary to operate game systems and resolve game-related disputes.
• Identity Verification Services: KYC service providers receive copies of identity documents and verification data to confirm the authenticity of player-submitted information.
• Fraud Prevention and Security Providers: Fraud analytics platforms may receive technical data (including IP addresses, device fingerprints, and behavioral patterns) for the purpose of detecting and preventing unauthorized access and fraudulent activity.
• Regulatory Authorities: plus77 is required by law to disclose certain player data to PAGCOR and other competent Philippine regulatory bodies upon lawful request, including data relevant to anti-money laundering and counter-terrorism financing obligations.
• Law Enforcement: plus77 will disclose personal data to law enforcement agencies or courts where required by a valid legal order, warrant, or where we reasonably believe such disclosure is necessary to prevent imminent harm.
• Professional Advisors: Legal counsel, auditors, and compliance consultants may access personal data on a confidential, need-to-know basis in connection with their professional services to plus77.

7International Data Transfers

Some of plus77's service providers — particularly game studios and cloud infrastructure providers — operate servers located outside the Philippines. Where personal data is transferred to recipients in other jurisdictions, plus77 ensures that such transfers are conducted in compliance with RA 10173 and its implementing rules, specifically by requiring contractual data protection safeguards with the receiving party that provide a level of protection equivalent to or greater than that afforded under Philippine law.

Where international transfers involve data being sent to jurisdictions that the National Privacy Commission (NPC) has not recognized as providing adequate protection, plus77 relies on standard contractual clauses, binding corporate rules, or other recognized transfer mechanisms as the basis for the transfer.

8Data Retention

plus77 retains personal data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable law, whichever is longer. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account being open and active on the plus77 platform.
• Closed Account Data: Following account closure, plus77 retains player identity, transaction history, and KYC documents for a minimum of five (5) years in compliance with Philippine anti-money laundering regulations and PAGCOR requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLA obligations.
• Customer Support Communications: Retained for three (3) years from the date of the interaction, or longer if the communication is relevant to an ongoing dispute or investigation.
• Marketing Data: Retained until you withdraw consent or close your account, whichever is earlier.
• Technical Logs: Server logs and session data are typically retained for ninety (90) days for security monitoring purposes, after which they are automatically purged unless required for an ongoing investigation.

When personal data is no longer required, plus77 securely destroys or anonymizes it in a manner that prevents reconstruction of the original data.

9Security Measures

plus77 implements a comprehensive set of technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, and destruction. These measures include, but are not limited to:

• 128-bit SSL/TLS Encryption: All data transmitted between your device and plus77 servers is encrypted using industry-standard Secure Sockets Layer technology.
• Encrypted Data Storage: Sensitive personal data and financial records stored on plus77 infrastructure are encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to personal data within plus77's systems is restricted on a strict need-to-know basis. Staff with access to personal data undergo regular data privacy training and are bound by confidentiality obligations.
• Two-Factor Authentication: Administrative access to systems containing personal data requires multi-factor authentication.
• Intrusion Detection: plus77 operates 24/7 security monitoring systems including intrusion detection, anomaly detection, and automated alerts for suspicious activity patterns.
• Penetration Testing: plus77 conducts regular security assessments and penetration tests of its platform infrastructure.
• Incident Response Plan: plus77 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the National Privacy Commission within the timeframes required by RA 10173.

10Your Data Subject Rights

Under Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by plus77. These rights may be exercised by submitting a request to the plus77 Data Protection Officer via the contact details in Section 15.

plus77 will respond to data subject requests within thirty (30) days of receipt. We may require identity verification before processing a request. Where a request is complex or involves multiple data sets, we may extend the response period by an additional thirty (30) days and will notify you of the extension.

11Cookies and Tracking Technologies

The plus77 platform uses cookies and similar tracking technologies (including pixel tags, web beacons, and local storage) to enhance your user experience, maintain session security, and gather analytical data. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the platform to function and cannot be disabled. They include session management cookies that authenticate your login, security tokens, and cookies that remember your cookie consent preferences.
• Functional Cookies: These cookies remember your account preferences such as language settings, display preferences, and recently played games to personalize your experience.
• Analytics Cookies: plus77 uses analytics tools to understand how players navigate and use the platform. This data is aggregated and anonymized where possible and is used solely to improve platform performance and user experience.
• Security Cookies: These cookies assist in detecting and preventing fraudulent logins, bot activity, and other malicious behavior by identifying unusual session patterns.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will affect platform functionality, including your ability to stay logged in. Disabling analytics cookies will not affect your ability to use the platform.

12Minors and Age Restriction

The plus77 platform is strictly intended for adults aged 21 years and above, as required by PAGCOR for online gaming in the Philippines. plus77 does not knowingly collect personal data from persons under the age of 21.

If you are under 21, you must not register, deposit, or play on the plus77 platform. If plus77 discovers that personal data has been collected from a person under 21, we will immediately suspend the account, delete the associated personal data, and return any deposits to the payment source. We strongly encourage parents and guardians to install parental control software to prevent access to online gaming platforms by persons under 21.

If you believe a minor has registered a plus77 account, please notify us immediately at the contact details in Section 15. We will investigate and act promptly.

13Third-Party Platforms and Links

The plus77 platform integrates with third-party services including game providers, payment gateways, and analytics tools. These third parties may collect data about you through their own technologies when you interact with their services through plus77. plus77 is not responsible for the data practices of these third-party services. We recommend reviewing the privacy policies of any third-party service you interact with.

Additionally, the plus77 website may occasionally contain links or references to informational resources. plus77 has no control over the content, privacy practices, or data security of any third-party website and accepts no liability in respect of information on, or privacy practices of, any such sites.

14Changes to This Privacy Policy

plus77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, plus77 will notify registered players by sending a notification to their registered email address and by posting a prominent notice on the platform at least seven (7) days before the updated Policy takes effect.

The date of the most recent update to this Policy is displayed in the header of this page. We encourage you to review this Policy periodically to stay informed about how plus77 protects your data. The current version of this Privacy Policy is always available at plus77.one/privacy-policy.

Continued use of the plus77 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Privacy Policy, you must cease using the platform and close your account.

15Contact Us and Data Protection Officer

plus77 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173 and this Privacy Policy. To exercise your data subject rights, submit a complaint, or ask a question about how plus77 handles your personal data, contact us through the following channels:

• Data Protection Officer Email: [email protected] — please include "Data Privacy Request" in your subject line
• Live Chat: Available 24/7 from your logged-in plus77 account. Request escalation to the Data Privacy team.
• Written Requests: Include your full name, registered account email, a description of your request, and supporting documentation if applicable.
• Response Time: plus77 acknowledges privacy requests within 3 business days and provides substantive responses within 30 days.

If you are not satisfied with plus77's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which can be reached through the NPC's official website at privacy.gov.ph.