og77 Casino Philippines — Privacy Policy

This Privacy Policy ("Policy") is issued by og77 ("og77," "we," "us," or "our"), the operator of the online gaming platform accessible at og77.win. This Policy describes how og77 collects, uses, stores, shares, and protects personal information relating to users ("you," "Player," or "Data Subject") of the og77 platform, including all associated websites, applications, features, and services.

og77 is committed to protecting the privacy and personal data of every player in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable guidelines issued by the National Privacy Commission (NPC) of the Philippines. This Policy also reflects og77's obligations as a PAGCOR-licensed online gaming operator with respect to the handling of player data.

This Policy applies to all personal data collected by og77 in the course of operating its platform and providing gaming services to Filipino players. It applies regardless of whether you access og77 from a desktop browser, mobile device, or any other compatible device.

For the purposes of the Philippine Data Privacy Act of 2012, og77 is the Personal Information Controller (PIC) in respect of all personal data collected and processed through the og77.win platform.

og77 determines the purposes for which and the means by which your personal data is processed. Third-party service providers engaged by og77 to process data on its behalf (such as payment processors, KYC verification providers, and fraud detection services) act as Personal Information Processors (PIP) and are bound by contractual obligations to process data only in accordance with og77's instructions and this Policy.

og77's designated Data Protection Officer (DPO) is responsible for overseeing compliance with data privacy laws and this Policy. If you have any questions or concerns about how your data is handled, you may contact the og77 DPO via the support channels described in Section 14 of this Policy.

og77 collects the following categories of personal data from players and users of the platform:

3.1 Identity & Contact Data

• Full legal name (as stated on a valid Philippine government-issued ID)
• Date of birth (for age verification purposes)
• Registered email address
• Philippine mobile number
• Residential address (barangay, city, province, ZIP code)

3.2 Identity Verification (KYC) Data

• Copy of government-issued identification (UMID, Passport, Driver's License, or equivalent)
• Selfie or facial image for biometric verification (where required by PAGCOR KYC standards)
• Proof of address documentation
• Proof of payment method ownership

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records
• Payment method identifiers (GCash account reference, Maya account reference, bank account name and last digits, USDT wallet address)
• Account balance history
• Bonus and promotion redemption history

3.4 Gaming & Betting Activity Data

• Game session records (games played, bet amounts, outcomes, session duration)
• Sports betting selections and wager history
• Responsible gaming limit settings and self-exclusion records

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type
• Unique device identifiers
• Login timestamps and session duration logs
• Cookie and tracking technology data (see Section 10)

3.6 Communications Data

• Records of communications with og77 support (live chat transcripts, email correspondence)
• Player feedback and survey responses
• Complaint and dispute records

og77 collects personal data through the following means:

• Directly from you: Information you provide during account registration, KYC verification, banking transactions, responsible gaming limit applications, support interactions, and promotional opt-ins.
• Automatically through the platform: Technical and device data collected when you access og77.win, including via cookies, session logs, and platform analytics tools.
• From third-party service providers: Identity verification data from KYC providers, fraud screening data from anti-fraud services, and payment confirmation data from payment processors such as GCash and Maya.
• From regulatory sources: Data received from PAGCOR or other regulatory authorities pursuant to og77's compliance obligations, including self-exclusion registries.

og77 processes your personal data for the following purposes:

Under the Philippine Data Privacy Act of 2012, og77 processes your personal data on the following legal grounds:

• Consent: For marketing communications and any non-essential processing activities. You may withdraw your consent at any time by contacting og77 support, without affecting the lawfulness of processing prior to withdrawal.
• Contractual necessity: Processing required to enter into and perform og77's obligations under the Terms and Conditions governing your account, including providing gaming services, processing payments, and managing your account.
• Legal obligation: Processing necessary for og77 to comply with applicable Philippine laws and PAGCOR regulations, including KYC verification, Anti-Money Laundering (AML) reporting, responsible gaming obligations, and tax reporting.
• Legitimate interests: Processing necessary for og77's legitimate interests in operating a secure, fraud-free platform, conducting internal analytics, and improving its services — provided such interests do not override your fundamental rights and freedoms as a data subject.

og77 does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial or marketing purposes. og77 shares your personal data only in the following limited circumstances:

• Payment processors: GCash (Mynt — Globe Fintech Innovations, Inc.), Maya (PayMaya Philippines, Inc.), BPI, BDO, Metrobank, UnionBank, and other payment service providers, solely for the purpose of processing your deposits and withdrawals.
• KYC and identity verification providers: Third-party verification services engaged to confirm your identity, age, and the authenticity of documents submitted during the KYC process.
• Fraud prevention and AML service providers: Services used to screen transactions, detect suspicious activity, and comply with og77's obligations under the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended).
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, and courts of competent jurisdiction in the Philippines, where disclosure is required by law, regulatory obligation, or court order.
• Technology and platform service providers: Third-party vendors providing hosting, cloud storage, analytics, customer support software, and game content — all engaged under contractual data processing agreements that require them to process data solely on og77's instructions.

og77 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account data: Retained for the duration of your account plus a minimum of five (5) years after account closure, in compliance with PAGCOR record-keeping requirements and Philippine AML obligations.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of submission, in accordance with PAGCOR licensing requirements and AML regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine financial regulations and PAGCOR reporting obligations.
• Gaming activity logs: Retained for a minimum of three (3) years from the date of the recorded activity.
• Customer support records: Retained for a minimum of three (3) years from the closure of the relevant case.
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period thereafter for compliance documentation purposes.

Following the expiry of applicable retention periods, og77 will securely destroy or anonymise personal data in a manner that prevents reconstruction or re-identification.

og77 implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and og77's servers is encrypted using Transport Layer Security (TLS 1.2 or higher) with 256-bit SSL certificates.
• Encryption at rest: Sensitive personal data stored on og77's servers — including KYC documents and financial records — is encrypted at rest using industry-standard encryption protocols.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff accessing player data are subject to confidentiality obligations and role-based access controls.
• Two-factor authentication: SMS-based two-factor authentication is available and recommended for all player accounts to prevent unauthorised access.
• Intrusion detection: og77's systems are monitored for suspicious access patterns and potential security incidents using automated intrusion detection tools.
• Regular security assessments: og77 conducts periodic security reviews, vulnerability assessments, and penetration testing of its platform infrastructure.

og77 uses cookies and similar tracking technologies to operate the platform, improve user experience, and collect analytical data about how the platform is used. Cookies are small data files placed on your device by your browser when you visit og77.win.

Types of Cookies Used

• Strictly necessary cookies: Required for the platform to function. These cookies enable user authentication, session management, and security features. They cannot be disabled without affecting your ability to use og77.
• Functional cookies: Enable personalisation features such as remembered language preferences and game lobby layout settings.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the platform. This information helps og77 identify areas for improvement.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and login anomaly monitoring.

You may manage cookie preferences through your browser settings. Disabling cookies may affect the functionality of certain platform features. og77 does not use cookies to serve third-party advertising.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by og77:

• Right to be informed: The right to be informed about the collection, processing, and use of your personal data — which this Policy fulfils.
• Right of access: The right to request a copy of the personal data og77 holds about you, together with information about how it is processed.
• Right to rectification: The right to request correction of any inaccurate, incomplete, or outdated personal data held by og77.
• Right to erasure or blocking: The right to request deletion or blocking of your personal data, where processing is no longer necessary for the original purpose or where you have validly withdrawn consent, subject to og77's retention obligations under applicable law.
• Right to data portability: The right to receive a copy of the personal data you have provided to og77 in a structured, commonly used, and machine-readable format.
• Right to object: The right to object to processing based on legitimate interests, including profiling, where your individual circumstances justify such objection.
• Right to damages: The right to claim compensation from og77 for any damages sustained as a result of og77's non-compliance with the Data Privacy Act.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe og77 has mishandled your personal data.

To exercise any of these rights, please contact og77's support team via live chat or email. og77 will respond to verified data subject requests within thirty (30) calendar days of receipt, or within such extended period as permitted under applicable regulations where the complexity of the request requires additional time.

og77 does not knowingly collect personal data from individuals under the age of 21. PAGCOR regulations prohibit persons under 21 years of age from registering or participating in casino-style online gaming in the Philippines. og77 enforces this requirement strictly through its KYC verification process.

If og77 becomes aware that it has inadvertently collected personal data from a person under the age of 21, og77 will immediately suspend the relevant account, delete all personal data collected from that person to the extent not required to be retained for regulatory or legal compliance purposes, and refund any deposits made to the account after deducting any applicable processing fees.

If you are a parent or guardian and believe that a person under the age of 21 has registered an account on og77, please contact og77 support immediately via live chat.

og77's primary operations are based in the Philippines and data is primarily processed within the Philippines. However, some of og77's third-party service providers — including cloud hosting infrastructure providers, certain game content suppliers, and fraud screening services — may process data in jurisdictions outside the Philippines.

Where og77 transfers personal data to processors located outside the Philippines, og77 ensures that such transfers are protected by:

• Contractual data processing agreements requiring the recipient to implement data protection standards equivalent to those required under the Philippine Data Privacy Act of 2012.
• Transfers only to jurisdictions or recipients that have been assessed as providing an adequate level of protection for personal data.
• Such other safeguards as are required or recommended by the National Privacy Commission of the Philippines.

For any questions, concerns, or requests relating to this Privacy Policy or og77's handling of your personal data, please contact og77's Data Protection Officer through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week within the og77 platform.
• Email: [email protected] (plain text — not a clickable link)

og77 will acknowledge receipt of all data privacy enquiries promptly and will endeavour to provide a substantive response within thirty (30) calendar days.

If you are not satisfied with og77's response to a data privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). Information on how to file a complaint with the NPC is available through the NPC's official Philippine government channels.

og77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, og77's data processing practices, or the services offered on the platform.

Material changes to this Policy will be communicated to registered players by email notification to the address registered on your account and/or by a prominent notice on the og77 platform, prior to the changes taking effect. The "Last Updated" date at the top of this Policy reflects the most recent revision.

Your continued use of og77 following the effective date of any revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with changes to this Policy, you must stop using the og77 platform and may request account closure in accordance with the Terms and Conditions.

We encourage all og77 players to review this Privacy Policy periodically to stay informed about how their personal data is being protected. For any questions about a specific change, contact og77 support via live chat.