pi77 Privacy Policy

This Privacy Policy applies to all personal data collected, used, stored, and processed by pi77 in connection with the pi77 Casino platform accessible at pi77.cam (the "Platform") and all related services, including customer support communications, payment processing, and promotional activities.

pi77 is committed to protecting the privacy of its users in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR), as administered by the National Privacy Commission (NPC) of the Philippines.

By registering an account on pi77, accessing the Platform, or submitting any personal information to pi77, you acknowledge that you have read this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with this Privacy Policy, you must not use the pi77 Platform.

For the purposes of the Philippine Data Privacy Act of 2012 and this Privacy Policy, pi77 is the Personal Information Controller (PIC) in respect of all personal data collected through the pi77 Platform.

As Personal Information Controller, pi77 determines the purposes for which your personal data is collected and processed, and is responsible for ensuring that those processing activities comply with applicable data privacy law. Where pi77 engages third-party service providers to process personal data on its behalf, those providers act as Personal Information Processors (PIP) under written agreements that obligate them to process data only in accordance with pi77's instructions and this Privacy Policy.

pi77 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data privacy law. Contact details for the pi77 DPO are provided in Section 16 of this Policy.

pi77 collects the following categories of personal data from users of the Platform:

pi77 does not collect sensitive personal data beyond what is necessary for the purposes described above. pi77 does not collect financial account credentials (e.g., GCash PINs, online banking passwords) — payment integrations operate through secure tokenized APIs that do not expose such credentials to pi77.

pi77 collects personal data through the following means:

• Direct Submission: Information you provide during account registration, KYC verification, support interactions, or promotional participation — including your name, mobile number, email address, and identity documents.
• Automated Technical Collection: Data collected automatically when you access and use the Platform, including IP addresses, device identifiers, browser information, session data, and cookie data. This data is collected through pi77's server infrastructure and analytics systems.
• Payment Processors: Reference data received from payment processors (GCash, Maya, BPI, BDO, Metrobank, and others) when you initiate deposits or withdrawals, sufficient to confirm transaction completion and match payments to your pi77 Account. pi77 receives only the minimum data necessary for payment reconciliation.
• KYC Verification Providers: Identity verification results and document authentication outcomes from pi77's contracted KYC service providers, used to confirm that your submitted documents are valid and match your self-declared identity information.
• Game Software Providers: Game round results, bet records, and session data generated through the certified game software hosted on the pi77 Platform, transmitted to pi77's account management system for balance management, dispute resolution, and responsible gaming monitoring.

Under the Philippine Data Privacy Act of 2012, pi77 processes your personal data on the following legal bases:

1. Contractual Necessity: Processing necessary for the performance of your contract with pi77, including account management, payment processing, game access, and the provision of customer support. Without this processing, pi77 cannot operate your account or deliver its services.
2. Legal Obligation: Processing required for pi77 to comply with applicable Philippine law, including PAGCOR regulatory requirements, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and other gaming and financial compliance obligations.
3. Legitimate Interests: Processing carried out for pi77's legitimate business interests where those interests are not overridden by your privacy rights, including fraud detection and prevention, security monitoring, Platform improvement, and responsible gaming risk assessment.
4. Consent: Where pi77 relies on your consent for specific processing activities — such as sending marketing communications — that consent is sought separately and explicitly. You may withdraw consent for consent-based processing at any time without affecting the lawfulness of processing prior to withdrawal.

pi77 processes your personal data for the following specific purposes:

• Account Creation and Management: Registering, maintaining, and operating your pi77 Account, including processing login credentials, managing your PHP balance, and maintaining your gaming history.
• Age and Identity Verification: Confirming that you are at least 21 years of age and that your identity matches your registered account details, as required by PAGCOR responsible gaming standards and Philippine AML regulations.
• Payment Processing: Executing deposit and withdrawal transactions in Philippine Peso via GCash, Maya, BPI, BDO, Metrobank, and other supported payment methods. Verifying that payment instruments are owned by the account holder.
• Fraud Detection and Prevention: Identifying and preventing fraudulent activity, unauthorized account access, multi-accounting, bonus abuse, and money laundering. This includes behavioral analysis, device fingerprinting, and IP monitoring.
• Regulatory Compliance: Meeting pi77's obligations under PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, and any other applicable Philippine law or regulatory requirement. This may include reporting obligations to regulatory authorities.
• Responsible Gaming: Monitoring gaming patterns to identify indicators of problem gambling, enforcing self-imposed deposit, loss, and session limits, administering self-exclusion requests, and providing responsible gaming communications.
• Customer Support: Responding to inquiries, complaints, and disputes submitted through live chat, email, Messenger, or Viber. Maintaining support interaction records for quality assurance and dispute resolution.
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve Platform performance, user experience, game offerings, and payment infrastructure for Filipino players.
• Marketing Communications: Where you have provided separate consent, sending promotional offers, bonus notifications, and relevant Platform updates via your registered Philippine mobile number or email address. You may opt out at any time.

pi77 does not sell, rent, or trade your personal data to third parties for their independent marketing or commercial purposes. pi77 shares personal data only in the following circumstances and with the following categories of recipients:

• Payment Service Providers: GCash, Maya, GrabPay, Coins.ph, BPI, BDO, Metrobank, and other payment processors receive the minimum data necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and regulatory frameworks.
• KYC and Identity Verification Services: Contracted third-party KYC providers receive your submitted identity documents and personal details solely for the purpose of verifying your identity and age on pi77's behalf. KYC providers are contractually bound to process data only for this purpose.
• Game Software Providers: Licensed game providers (including Pragmatic Play, Evolution Gaming, PG Soft, and others) receive session and gameplay data necessary for game operation, RTP calculation, and jackpot management. Game providers do not receive your financial or KYC data.
• IT and Cloud Infrastructure Providers: Hosting, database management, and security service providers who process data on pi77's behalf under binding data processing agreements that prohibit use of data for any purpose other than service provision to pi77.
• Regulatory and Law Enforcement Authorities: pi77 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where required by law, court order, or regulatory directive. pi77 will endeavor to notify you of such disclosure unless legally prohibited from doing so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of pi77's business, personal data held by pi77 may be transferred to the acquiring entity, subject to equivalent privacy protections. Affected users will be notified in advance of any such transfer.

pi77 retains personal data only for as long as necessary for the purposes described in this Privacy Policy, or as required by applicable Philippine law. The following retention periods apply:

• Account Data and KYC Documents: Retained for a minimum of five (5) years from the date of account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act's record retention obligations.
• Transaction Records: Deposit and withdrawal records retained for a minimum of five (5) years from the transaction date, in compliance with AMLA record-keeping requirements.
• Gaming History: Retained for a minimum of three (3) years from the date of the gaming session, for dispute resolution and regulatory audit purposes.
• Customer Support Communications: Retained for two (2) years from the date of the last interaction in a support case, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of your account plus one (1) year after account closure, as proof of consent for marketing communications sent during the account's active period.
• Technical Logs and Access Records: Retained for twelve (12) months from creation, subject to extension where the records are relevant to an ongoing security investigation or legal proceeding.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized using industry-standard data destruction methods. Anonymized data (from which all identifying information has been irreversibly removed) may be retained indefinitely for aggregate analytics purposes.

pi77 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction:

• Encryption in Transit: All data transmitted between your device and pi77 servers is encrypted using 256-bit SSL/TLS encryption. This applies to login, payment, KYC document upload, and all other data transmission activities on the Platform.
• Encryption at Rest: Sensitive personal data stored on pi77's servers — including KYC documents and financial records — is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data within pi77's systems is restricted on a strict need-to-know basis. pi77 employees and contractors are granted access only to the categories of data necessary for their specific role. All access is logged and subject to audit.
• Two-Factor Authentication: Internal system access for pi77 staff requires multi-factor authentication. Account holders are also offered 2FA for their pi77 accounts to prevent unauthorized login.
• Security Monitoring: pi77 operates continuous monitoring systems to detect unauthorized access attempts, anomalous account behavior, and potential data breaches. Automated alerts trigger immediate investigation by the pi77 security team.
• Regular Security Reviews: pi77 conducts periodic security assessments and vulnerability reviews of its Platform infrastructure, aligned with industry standards for online gaming and financial service platforms.
• Data Breach Response: In the event of a personal data breach, pi77 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected users in accordance with NPC Circular 16-03 and applicable data breach notification requirements.

While pi77 implements robust security measures, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your pi77 account and to enable two-factor authentication to reduce the risk of unauthorized access.

pi77 uses cookies and similar tracking technologies (collectively, "Cookies") on the Platform to enable core functionality, improve your experience, prevent fraud, and analyze Platform usage. The following categories of Cookies are used:

• Essential Cookies: Strictly necessary for the Platform to function. These include session management cookies that keep you logged in, security tokens that protect against CSRF attacks, and cookies that remember your language and display preferences. Essential cookies cannot be disabled without impairing Platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymized data about how users navigate and interact with the Platform — including pages visited, session duration, error events, and game loading performance. This data is used to identify and fix usability issues and to improve the Platform for Filipino players.
• Fraud Prevention Cookies: Used to identify and correlate device and session characteristics for the purpose of detecting multi-accounting, bonus abuse, and unauthorized account access. These cookies are essential for Platform security and cannot be disabled.
• Preference Cookies: Store your Platform preferences, including game category filters and responsible gaming reminder settings, so that they persist between sessions without requiring you to reconfigure them each time you log in.

pi77 does not use third-party advertising or behavioral profiling cookies. pi77's Cookie usage is limited to operational, security, and analytics purposes in connection with the Platform itself.

You can manage cookie preferences through your browser settings. Most browsers allow you to view, block, or delete cookies. Note that blocking essential cookies will impair your ability to use the pi77 Platform, including the ability to log in and process transactions.

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by pi77. To exercise any of these rights, contact pi77's Data Protection Officer at the details provided in Section 16:

1. Right to Be Informed: The right to be notified of the fact and nature of personal data processing, the purposes for which it is used, and the identity of pi77 as Personal Information Controller — as fulfilled by this Privacy Policy.
2. Right of Access: The right to obtain a copy of the personal data pi77 holds about you, together with information about how it is being processed. pi77 will respond to access requests within 30 calendar days of receipt.
3. Right to Rectification: The right to have inaccurate or incomplete personal data corrected. You may update most account information directly through your pi77 Account Settings. For corrections to KYC data, contact support with supporting documentation.
4. Right to Erasure: The right to request deletion of your personal data. This right is subject to limitations where retention is required by law (such as AMLA record-keeping obligations) or necessary for the establishment, exercise, or defense of legal claims. Erasure requests will be assessed individually and fulfilled to the extent legally permissible.
5. Right to Object: The right to object to the processing of your personal data on grounds of legitimate interests or for direct marketing purposes. Objections to marketing processing will be honored immediately. Objections to other processing grounds will be assessed against the applicable legal basis.
6. Right to Data Portability: The right to receive a copy of the personal data you have provided to pi77 in a structured, commonly used, and machine-readable format, where processing is carried out by automated means on the basis of consent or contractual necessity.
7. Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that pi77 has processed your personal data in violation of the Data Privacy Act. NPC contact information is available at the official NPC website.

The pi77 Platform is strictly restricted to individuals aged 21 years and above, in compliance with PAGCOR regulations on the minimum gambling age in the Philippines. pi77 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

Age verification is enforced through mandatory KYC procedures as a condition of account activation and real-money play. Any account discovered to belong to a person under 21 will be immediately suspended and all associated personal data deleted, except where retention is required to document the age-verification failure for regulatory or legal purposes.

If you are a parent or guardian and believe that a minor has registered an account on pi77 or submitted personal data to pi77, please contact us immediately at [email protected]. pi77 will investigate and take immediate remedial action including account closure and data deletion.

Some of pi77's service providers — including game software providers and cloud infrastructure providers — may be located outside the Philippines. Where personal data is transferred to recipients in other jurisdictions, pi77 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual data processing agreements incorporating standard data protection clauses equivalent to those required under Philippine law;
• Verification that recipient countries or organizations provide an adequate level of data protection;
• Technical safeguards (encryption, access controls, audit logging) applied to data transferred across borders.

International transfers of personal data are conducted in accordance with Section 21 of the Philippine Data Privacy Act and applicable NPC issuances. pi77 maintains records of all cross-border data transfers and the safeguards applicable to each.

The pi77 Platform does not contain links to external third-party websites for marketing or advertising purposes. Game content hosted on the Platform is provided through secure API integrations with licensed game providers, not through external website links that would expose your data to third parties.

Payment processing integrations (GCash, Maya, BPI, BDO, etc.) operate through secure tokenized APIs. When you initiate a payment through pi77, you may be redirected to your payment provider's interface to authenticate the transaction. pi77 does not have access to the authentication credentials you enter on your payment provider's platform. Your payment provider's own privacy policy governs the data they collect during that interaction.

pi77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or Platform operations. Material changes to this Privacy Policy will be communicated to registered account holders via email to their registered address and/or via a notice on the pi77 Platform at least 14 days before the changes take effect, except where changes are required by law or regulatory authority on shorter notice.

The current version of this Privacy Policy is always accessible on this page and is identified by the "Last Updated" date at the top of the document. Continued use of the pi77 Platform after the effective date of an updated Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with any changes, you may close your pi77 account by contacting support.

pi77 encourages you to review this Privacy Policy periodically to stay informed about how your personal data is being protected and processed.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by pi77 — including requests to exercise your data privacy rights under the Philippine Data Privacy Act — please contact pi77's Data Protection Officer through the following channels:

• Email (DPO): [email protected] — please use the subject line "Data Privacy Request" for DPO matters. Responses within 3–5 business days.
• Live Chat: Available 24/7 at pi77.cam. For DPO requests initiated via live chat, you will be directed to submit a written request by email for formal documentation purposes.
• Messenger / Viber: Available for initial inquiries. Formal data privacy requests must be submitted in writing by email for record-keeping compliance.

When submitting a data privacy rights request, please provide your registered pi77 account mobile number or email address and a description of your request to enable efficient verification and processing. pi77 may require identity verification before fulfilling certain rights requests to protect against unauthorized disclosure of personal data.