77pab Privacy Policy

Welcome to 77pab. This Privacy Policy applies to all products, services, games, and features offered through the 77pab platform at 77pab.net, including our online casino, sports betting, slot games, bingo, and all other gaming services accessible via desktop or mobile browser.

77pab is committed to protecting the privacy and personal data of every player who registers, browses, or otherwise interacts with our platform. This Policy explains in plain English — with Filipino players in mind — exactly how we handle your personal information from the moment you visit our site to the moment you close your account.

By accessing or using 77pab, you confirm that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of the platform and contact our support team to discuss your options.

This Policy is effective as of January 1, 2026. We review and update it periodically to reflect changes in our practices, technology, and applicable Philippine law. The most current version is always available on this page.

77pab is an online casino and sports betting platform operating under applicable Philippine gaming regulations and the oversight framework of the Philippine Amusement and Gaming Corporation (PAGCOR). For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173), 77pab acts as the Personal Information Controller (PIC) for all personal data processed through the 77pab platform.

As the Personal Information Controller, 77pab determines the purposes and means of processing your personal data and bears primary responsibility for ensuring that such processing is lawful, fair, and transparent.

Where 77pab engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, and game studio partners — those parties act as Personal Information Processors (PIP) and are contractually bound to process data only in accordance with 77pab's instructions and applicable data protection law.

To contact us regarding any privacy matter, including exercising your data subject rights, please refer to Section 15 (Contact & DPO) of this Policy.

77pab collects only the personal data that is necessary for the purposes set out in this Policy. The categories of personal data we collect include the following:

77pab collects personal data through the following means:

• Direct Interactions: Data you actively provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, responding to surveys, or participating in promotions.
• Automated Technologies: Data collected automatically when you visit or use the 77pab platform, including through cookies, web beacons, pixel tags, server logs, and similar tracking technologies. See Section 8 for full details on cookies.
• Third-Party Sources: Data received from identity verification agencies, payment processors (such as GCash, Maya, BPI, BDO), fraud prevention service providers, and publicly available sources — used to verify your identity and protect against financial crime.
• Device and Browser Data: Technical information automatically transmitted by your device or browser each time you load a page on 77pab, including IP address, device fingerprint, and geolocation data (city/region level only).

All collection methods are designed to be proportionate to the purposes for which the data is used. We do not collect data through deceptive means or without a clear, disclosed purpose.

77pab uses the personal data we collect for the following purposes:

• Account Management: To create, manage, and maintain your 77pab player account, including processing your registration, verifying your identity, and managing account settings.
• Service Delivery: To provide access to all 77pab gaming services, process deposits and withdrawals, apply bonuses and promotions, and deliver customer support.
• Regulatory Compliance: To fulfill our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine laws — including Know Your Customer (KYC) checks, transaction monitoring, and suspicious activity reporting.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, account takeovers, and other illegal or unauthorized activities on the platform.
• Responsible Gaming: To monitor gaming behavior for signs of problem gambling, enforce self-exclusion periods and deposit limits, and send responsible gaming communications where required.
• Platform Improvement: To analyze usage patterns, identify technical issues, conduct A/B testing, and improve the overall quality and performance of the 77pab platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via email or SMS — but only where you have given your consent or where we have a legitimate interest, and always with a clear opt-out option.
• Legal Proceedings: To establish, exercise, or defend legal claims in the event of a dispute between you and 77pab.

Under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, 77pab relies on one or more of the following lawful bases when processing your personal data:

• Contractual Necessity: Processing is necessary to perform the contract between you and 77pab (i.e., our Terms & Conditions), including managing your account, processing transactions, and delivering gaming services.
• Legal Obligation: Processing is required to comply with applicable Philippine laws and regulations, including PAGCOR licensing conditions, AMLA obligations, and NPC directives.
• Legitimate Interests: Processing is necessary for purposes of 77pab's legitimate business interests — such as fraud prevention, platform security, and service improvement — provided those interests are not overridden by your rights and interests.
• Consent: For certain processing activities — notably marketing communications and the use of non-essential cookies — 77pab relies on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Vital Interests: In rare circumstances, processing may be necessary to protect your vital interests or those of another person — for example, where a player discloses a mental health crisis in the context of a responsible gaming interaction.

77pab does not sell your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Service Providers: GCash, Maya, BPI, BDO, Metrobank, Visa, Mastercard, Coins.ph, and other payment processors require your financial and identity data to process deposits and withdrawals on your behalf.
• Identity Verification Services: Third-party KYC providers who verify the authenticity of your government-issued ID and perform liveness checks as required by our regulatory obligations.
• Game Studio Partners: Licensed game providers whose games are hosted on the 77pab platform may receive your player ID and session data for game integrity and fair play purposes. They do not receive your full personal profile.
• Fraud Prevention and AML Service Providers: Specialist providers who help 77pab detect and prevent financial crime, account fraud, and bonus abuse.
• Regulatory and Government Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, and courts — where disclosure is required by law, court order, or regulatory directive.
• Professional Advisers: Lawyers, auditors, and other professional advisers engaged by 77pab on a confidential basis where access to your data is necessary for the provision of their services.
• Technology Infrastructure Providers: Cloud hosting, data storage, and cybersecurity vendors who process data on our behalf under strict contractual data processing agreements.

All third parties with whom 77pab shares personal data are required to implement appropriate technical and organizational security measures and to process data only in accordance with 77pab's instructions and applicable data protection law.

77pab uses cookies and similar tracking technologies to enhance your experience on our platform, ensure its proper functioning, and gather analytics that help us improve our services. A cookie is a small text file placed on your device by our web server when you visit 77pab.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These cookies enable core features such as account login sessions, security tokens, and shopping cart functionality. They cannot be disabled.
• Performance and Analytics Cookies: These cookies help us understand how players interact with 77pab — which pages are most visited, where players encounter errors, and how long sessions last. The data collected is aggregated and anonymous.
• Functional Cookies: These cookies remember your preferences and settings — such as your preferred language, display settings, and responsible gaming limits — to provide a more personalized experience.
• Marketing Cookies: Used only with your consent, these cookies track your interactions with 77pab content across the platform to allow us to show you relevant promotions. They do not track you across unrelated third-party websites.

In addition to cookies, 77pab may use web beacons (clear GIFs) and local storage technologies for similar purposes. These are governed by the same principles and consent requirements as cookies.

77pab retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification. Where data is anonymized rather than deleted, the anonymized dataset may be retained indefinitely for statistical and analytics purposes.

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 77pab. We take these rights seriously and have built processes to help you exercise them efficiently.

To exercise any of the above rights, please contact 77pab's Data Protection Officer using the details provided in Section 15. We may require you to verify your identity before processing your request in order to protect your data from unauthorized disclosure.

77pab implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security framework includes the following measures:

• Encryption in Transit: All data transmitted between your browser or device and the 77pab platform is encrypted using TLS (Transport Layer Security) protocol. Look for the padlock icon in your browser address bar as confirmation.
• Encryption at Rest: Sensitive personal and financial data stored in 77pab's systems is encrypted using AES-256 or equivalent industry-standard encryption at rest.
• Access Controls: Access to personal data within 77pab's systems is restricted on a strict need-to-know basis. All staff with access to personal data undergo background checks and regular data protection training.
• Multi-Factor Authentication: 77pab's internal administrative systems require multi-factor authentication (MFA). We also offer MFA to players to further protect their accounts.
• Penetration Testing: 77pab engages independent cybersecurity specialists to conduct regular penetration testing and vulnerability assessments of its platform and infrastructure.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, 77pab will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay where required.
• PCI-DSS Compliance: All payment card data handling on the 77pab platform complies with Payment Card Industry Data Security Standard (PCI-DSS) requirements.

While 77pab takes every reasonable step to protect your data, no online platform can guarantee absolute security against all threats. You also play an important role in keeping your account safe — please use a strong, unique password for your 77pab account and never share your login credentials with anyone.

If 77pab becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. All funds in an underage account will be handled in accordance with applicable regulations and returned to the payment source where possible.

If you are a parent or guardian and believe that a minor in your care has created a 77pab account or provided personal data to 77pab without your knowledge, please contact our support team via 24/7 live chat or at [email protected] immediately. We will investigate and act without delay.

77pab employs age verification procedures at registration and may request government-issued ID at any stage of the account lifecycle to confirm that players meet the minimum age requirement. Players in Manila, Cebu, Davao, Quezon City, Makati, and all other regions of the Philippines are equally subject to this requirement.

The 77pab platform is operated with primary infrastructure located in Southeast Asia. Some of our third-party service providers — including cloud hosting providers, cybersecurity vendors, and game studio partners — may be located outside the Philippines and may process your personal data in jurisdictions with different data protection laws.

Whenever 77pab transfers personal data outside the Philippines, we ensure that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required under the Data Privacy Act. These safeguards include:

• Data processing agreements that impose contractual data protection obligations on receiving parties, reflecting the requirements of RA 10173;
• Transfers only to countries or recipients that the National Privacy Commission has determined to provide an adequate level of protection;
• Standard contractual clauses approved by the NPC where adequacy determinations are not available.

You may request further information about the specific safeguards in place for any cross-border transfer of your personal data by contacting our Data Protection Officer at the details provided in Section 15.

77pab reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, new regulatory requirements, or improvements to our services. When material changes are made, we will notify you through one or more of the following methods:

• A prominent notice displayed on the 77pab platform upon your next login;
• An email notification sent to your registered email address;
• An SMS notification sent to your registered mobile number.

The updated Policy will take effect on the date specified in the notice. We encourage you to review this page periodically so you are always aware of how 77pab handles your personal data. The "Last Updated" date at the top of this page reflects the most recent revision.

Your continued use of the 77pab platform following the effective date of any update constitutes your acknowledgment of the revised Policy. If you object to any changes, please discontinue use and contact our support team to discuss account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or 77pab's data processing practices, please contact us using the details below. We aim to respond to all privacy-related inquiries promptly and thoroughly.

When contacting the DPO to exercise a data subject right, please include your full name, registered email address, and a clear description of your request. We may require additional identity verification before processing requests that involve access to or deletion of personal data.