php877 Privacy Policy – Your Data, Protected

1. Introduction

php877 is committed to protecting the privacy and personal data of all Filipino players who use our online casino and sportsbook platform. This Privacy Policy is designed to comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and all relevant issuances by the National Privacy Commission (NPC). Additionally, as a PAGCOR-licensed operator, we comply with all data protection and confidentiality requirements imposed by the Philippine Amusement and Gaming Corporation.

This Policy applies to all personal data collected through the php877 Platform, including data collected during registration, account verification (KYC), gameplay, customer support interactions, and payment processing. It also covers data collected automatically through cookies and similar tracking technologies.

If you do not agree with the terms of this Privacy Policy, you must not use the php877 Platform. Your continued use of the Platform after any amendment to this Policy constitutes your acceptance of the revised terms.

2. Data Controller

For the purposes of the Philippine Data Privacy Act, php877 is the Personal Information Controller (PIC) responsible for the collection, use, processing, and protection of your personal data. php877 has registered with the National Privacy Commission and maintains a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and all applicable data protection laws.

If you have any questions or concerns about how php877 handles your personal data, or if you wish to exercise any of your data protection rights under the Data Privacy Act, you may contact our Data Protection Officer using the contact details provided in Section 14 of this Policy.

3. Data We Collect

php877 collects several categories of personal data in order to provide you with a secure, compliant, and functional online gaming experience. The categories of personal data we collect include:

3.1 Account Registration Data

When you register for a php877 account, we collect the following information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are at least 21 years old)
• Email address
• Philippine mobile phone number
• Residential address
• Username and password (passwords are stored in hashed form only)

3.2 Identity Verification (KYC) Data

In compliance with PAGCOR requirements and Philippine anti-money laundering regulations, php877 is required to verify your identity. During the KYC process, we may collect:

• Copies of government-issued identification (Philippine National ID, UMID, driver's licence, passport, etc.)
• Proof of address documents (utility bill, bank statement, barangay certificate)
• Selfie photographs or video verification for identity matching
• Biometric data (only if explicitly required for advanced KYC verification, and only with your consent)

3.3 Payment and Financial Data

To process deposits and withdrawals, php877 collects:

• GCash account details (mobile number associated with your GCash wallet)
• PayMaya account details (mobile number associated with your PayMaya wallet)
• Bank account details (account name, account number, bank name) for withdrawals to Philippine banks
• Transaction history (deposits, withdrawals, transaction timestamps, and amounts)

php877 does not store full credit or debit card numbers. Where card payments are used, card processing is handled by certified PCI-DSS compliant third-party payment processors who tokenize card data.

3.4 Gameplay and Account Activity Data

php877 automatically collects data about your use of the Platform, including:

• Games played, bets placed, wagers won or lost
• Session timestamps, session duration, login frequency
• IP address, device type, operating system, browser type and version
• Bonus claims, promotion participation, and wagering progress
• Customer support interactions (live chat transcripts, email correspondence, support tickets)

3.5 Marketing and Communication Preferences

We collect data on your communication preferences — whether you have opted in to receive promotional emails, SMS messages, or in-platform notifications from php877. You may update these preferences at any time from your account settings.

4. How We Use Your Data

php877 processes your personal data for the following purposes:

4.1 Account Creation and Management

To create, maintain, and administer your php877 account; to authenticate your login; to process password resets; and to enable two-factor authentication (2FA) via SMS OTP.

4.2 Regulatory Compliance and KYC

To verify your identity and age in compliance with PAGCOR regulations and the Philippine Data Privacy Act; to comply with the Anti-Money Laundering Act (AMLA) and its implementing regulations; and to prevent underage gambling, identity fraud, and account duplication.

4.3 Payment Processing

To process deposits to your php877 wallet; to process withdrawal requests to your nominated GCash, PayMaya, or bank account; and to maintain accurate transaction records as required by PAGCOR and Philippine taxation authorities.

4.4 Responsible Gaming Monitoring

To monitor your account activity for signs of problematic gambling behaviour; to enforce deposit limits, loss limits, and self-exclusion requests you have set; to comply with PAGCOR responsible gaming obligations; and to refer players showing signs of gambling harm to appropriate support resources available in the Philippines.

4.5 Customer Support

To respond to your support enquiries via live chat and email; to investigate and resolve account disputes; to maintain records of support interactions for quality assurance and training purposes; and to identify and escalate issues requiring PAGCOR intervention.

4.6 Platform Security and Fraud Prevention

To detect, investigate, and prevent fraudulent activity, cheating, bonus abuse, multi-accounting, money laundering, and other prohibited conduct; to protect the integrity of games and sports betting markets; and to protect the security of all players on the php877 Platform.

4.7 Marketing Communications

Where you have given your explicit consent, to send you promotional emails, SMS messages, or in-platform notifications about php877 bonuses, new games, special offers, and platform updates. You may withdraw your consent to marketing communications at any time by updating your preferences in the account settings panel or by contacting our support team.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, all processing of personal data must have a legitimate legal basis. php877 processes your personal data on the following legal bases:

• Contractual Necessity: Processing necessary to enter into and perform the agreement between you and php877, including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act, Philippine taxation laws, and NPC registration requirements.
• Legitimate Interests: Processing necessary for php877's legitimate interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and, where applicable, for the processing of sensitive personal information such as biometric data during advanced KYC verification.

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Data Sharing and Disclosure

php877 does not sell, rent, or lease your personal data to any third party. We share your personal data only in the following limited and controlled circumstances:

6.1 Service Providers

php877 engages third-party service providers to assist with specific operational functions. These include KYC and identity verification providers, payment processors (including GCash, PayMaya, and banking partners), game studios and software providers, live chat and customer support platform providers, and IT infrastructure and hosting providers. All service providers are bound by written data processing agreements that restrict their use of your data to the specific services they provide to php877, and that require them to implement appropriate technical and organisational security measures.

6.2 Regulatory and Law Enforcement Authorities

php877 is legally required to disclose player data to PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), the National Privacy Commission, and other Philippine government authorities where required by law, court order, or valid regulatory directive. Such disclosures are made only to the extent required and in compliance with the Data Privacy Act's provisions on disclosures mandated by law.

6.3 Business Transfers

In the event of a merger, acquisition, or transfer of all or substantially all of php877's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and its implications for the processing of your data, and the acquiring entity will be required to honour this Privacy Policy with respect to data collected under it.

7. Data Retention

php877 retains your personal data only for as long as is necessary for the purposes for which it was collected, and in compliance with mandatory retention periods imposed by Philippine law and PAGCOR regulations. Specifically:

• Active account data is retained for the full duration of your account's existence and for a period of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• Transaction records (deposits, withdrawals, bet history) are retained for a minimum of five (5) years following the date of the transaction, as required by AMLC and BIR regulations.
• KYC documents are retained for a minimum of five (5) years following the closure of the account to which they relate, or longer if required by an active investigation or regulatory directive.
• Customer support records are retained for three (3) years following the resolution of the relevant support interaction.
• Marketing consent records are retained for as long as you have an active php877 account and for one (1) year following account closure or consent withdrawal.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with NPC guidelines.

8. Data Security

php877 implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, use, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your browser or device and the php877 Platform.
• Encryption at rest for databases and file stores containing personal data and financial records.
• Role-based access controls restricting access to personal data to authorised php877 personnel on a need-to-know basis only.
• Multi-factor authentication requirements for internal systems that contain or process personal data.
• Regular security vulnerability assessments and penetration testing by independent third-party security specialists.
• Comprehensive audit logging of all access to systems containing personal data, with log retention for security investigation purposes.
• Staff training on data protection obligations, phishing awareness, and secure data handling procedures.
• A documented incident response plan that includes breach notification procedures consistent with NPC requirements.

While php877 takes every reasonable measure to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your account login credentials confidential and for notifying php877 immediately if you suspect any unauthorised access to your account.

9. Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by php877:

• Right to be Informed: The right to know whether php877 holds personal data about you, how it is being used, and with whom it has been shared.
• Right of Access: The right to obtain a copy of all personal data php877 holds about you, including account information, KYC data, transaction history, and support correspondence.
• Right to Correction: The right to request that inaccurate, outdated, or incomplete personal data be corrected. php877 will action correction requests within fifteen (15) business days of receipt.
• Right to Erasure: The right to request deletion of your personal data, subject to php877's legal obligations to retain certain data under PAGCOR requirements and the Anti-Money Laundering Act. Where deletion cannot be completed due to legal obligations, php877 will inform you of the specific retention requirement and the earliest date on which deletion can be completed.
• Right to Data Portability: The right to receive a structured, commonly used, and machine-readable copy of your personal data for transfer to another service provider, where technically feasible.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. php877 will action marketing opt-out requests immediately.
• Right to Damages: The right to be indemnified for damages sustained as a result of any violation of your data rights under the Data Privacy Act.

To exercise any of the above rights, please contact php877's Data Protection Officer using the contact details in Section 14. php877 will respond to all data rights requests within fifteen (15) business days. In complex cases, we may extend this period by a further fifteen (15) business days, with notice to you explaining the reason for the extension.

10. Cookies and Tracking Technologies

The php877 Platform uses cookies and similar tracking technologies (including session tokens, local storage, and device fingerprinting) to operate, secure, and improve the Platform. The categories of cookies we use are:

10.1 Strictly Necessary Cookies

These cookies are essential for the php877 Platform to function and cannot be disabled. They include session authentication cookies that keep you logged in during your visit, anti-CSRF tokens that protect against cross-site request forgery attacks, and load balancing cookies that ensure consistent performance. No personal data collected through strictly necessary cookies is used for marketing purposes.

10.2 Functional Cookies

These cookies remember your preferences and settings — such as your preferred language, lobby display preferences, and responsible gaming limit settings — so that you do not need to reconfigure them on every visit. Functional cookies may be disabled, but doing so may affect the functionality of certain Platform features.

10.3 Analytics Cookies

php877 uses analytics tools to understand how players navigate and use the Platform, in order to identify areas for improvement. Analytics data is processed in aggregated, anonymised form and is not used to identify individual players. You may opt out of analytics cookies by updating your cookie preferences.

11. Children's Privacy and Underage Gambling

The php877 Platform is strictly prohibited to persons under the age of twenty-one (21) years old, in accordance with PAGCOR's minimum age requirement for all licensed gambling activities in the Philippines. php877 does not knowingly collect or process the personal data of persons under the age of 21.

php877 implements age verification checks during account registration and may conduct additional age verification at any time. If php877 discovers or has reason to believe that an account belongs to a person under the age of 21, the account will be suspended immediately, all gameplay will be voided, and the relevant data will be handled in accordance with PAGCOR's underage gambling protocols.

If you are a parent or guardian and believe that your child under the age of 21 has created a php877 account, please contact our support team immediately. We will investigate and take appropriate action as a priority.

12. International Data Transfers

php877's primary data infrastructure is located within or connected to Philippine-accessible data centres. However, certain third-party service providers — including game studios, KYC verification services, and cloud infrastructure providers — may process or store data in servers located outside the Philippines.

Where personal data is transferred outside the Philippines, php877 ensures that such transfers comply with the Data Privacy Act's provisions on cross-border data transfers. This includes entering into data processing agreements with the receiving party that impose data protection obligations equivalent to those required under Philippine law, and assessing whether the receiving country provides an adequate level of data protection.

php877 will not transfer personal data to any jurisdiction or entity that cannot provide adequate data protection guarantees. A list of countries to which php877 transfers data is available upon request from our Data Protection Officer.

13. Changes to This Privacy Policy

php877 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Material changes to this Policy will be communicated to all registered players via the email address associated with their account, with a minimum of seven (7) calendar days' notice prior to the effective date of the change.

Where a change is required by law or PAGCOR regulation with immediate effect, php877 will implement the change immediately and notify players as soon as reasonably practicable. The "Last Reviewed" date at the top of this Policy will be updated to reflect the date of the most recent revision. Your continued use of the php877 Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

14. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about php877's handling of your personal data, please contact our Data Protection Officer:

php877 will acknowledge all privacy-related enquiries within three (3) business days and will provide a substantive response within fifteen (15) business days.

If you are not satisfied with php877's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the regulatory authority responsible for enforcing the Data Privacy Act and handles complaints from Philippine data subjects regarding the handling of their personal information by registered Personal Information Controllers.

For additional information about your rights under the Data Privacy Act, or for context on php877's regulatory obligations as a PAGCOR-licensed operator, you may also visit our About Us page and our Terms & Conditions page. If you have concerns about gambling-related data use in the context of responsible gaming, please visit our Responsible Gaming page.