rg77 Privacy Policy

rg77 ("we", "our", "us") operates the online casino platform accessible at rg77.win and all associated services offered under the rg77 brand. We are committed to protecting the privacy and personal data of all individuals who interact with our platform, including registered players, prospective players who browse rg77.win, and individuals who contact our support team.

This Privacy Policy describes in detail the types of personal information rg77 collects, the purposes for which that information is processed, the circumstances under which it may be shared with third parties, the security measures in place to protect it, how long it is retained, and the rights available to data subjects under Philippine law.

This policy applies to all personal data processed by rg77 in connection with the operation of the platform and constitutes part of the contractual framework between rg77 and its registered players, together with the rg77 Terms & Conditions. By registering an account with rg77, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, rg77 is the data controller responsible for the personal data collected and processed through the rg77 platform and services.

rg77 has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with the Data Privacy Act. Inquiries relating to data protection, privacy rights requests, and data breach notifications may be directed to the rg77 DPO at the contact details provided in Section 15 of this policy.

rg77 collects the following categories of personal data, depending on your interaction with the platform:

• Full legal name as it appears on your government-issued identification document.
• Date of birth — collected to verify compliance with the 21+ age requirement under PAGCOR regulations.
• Philippine mobile number (used for OTP verification and account security).
• Email address (used for account communications and security notifications).
• Username and encrypted password.
• Preferred currency — Philippine Peso (PHP) throughout the rg77 platform.

• Copy of a valid Philippine government-issued identity document (PhilSys, UMID, driver's licence, passport, SSS/GSIS card, or Voter's ID).
• Facial photograph or selfie where required for identity matching purposes.
• Proof of address (e.g., utility bill, bank statement) where enhanced due diligence is required.
• Source of funds documentation where required under anti-money laundering (AML) procedures.

• GCash or Maya account number (mobile number registered to the e-wallet).
• Bank account details (BPI, BDO, Metrobank, or other PH bank) where bank transfer is used.
• Transaction history — deposit records, withdrawal records, and balance adjustments.
• Note: rg77 does not store full credit or debit card numbers or CVV codes. Any card data is processed exclusively by the payment gateway provider.

• Game session records — games played, bet amounts, win/loss outcomes, session duration.
• Bonus and promotion redemption history.
• VIP tier status and loyalty point accumulation.
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status).

• IP address and general geographic location derived therefrom.
• Device type, operating system, and browser version.
• Session logs — login timestamps, session duration, pages visited.
• Cookie and tracking data as described in Section 11.

• Live chat transcripts and support ticket records.
• Email correspondence with the rg77 support or compliance team.
• Feedback and survey responses where voluntarily submitted.

rg77 collects personal data through the following means:

• Directly from you — during account registration, KYC submission, payment transactions, support interactions, and any other voluntary submission of information to rg77.
• Automatically — through your use of the rg77 platform, including via cookies, session logging, device fingerprinting, and analytics tools as described in Section 11.
• From third-party providers — including identity verification services, payment processing providers (e.g., GCash, Maya, BPI), fraud detection services, and game software providers who may share limited data relevant to your account activity.
• From regulatory or legal authorities — where required by PAGCOR, the National Privacy Commission, law enforcement agencies, or court orders.

rg77 processes your personal data on the following legal bases as provided under the Data Privacy Act of 2012 and its Implementing Rules:

rg77 uses the personal data collected for the following specific purposes:

• Creating and managing your rg77 player account, including authentication, balance management, and session tracking.
• Verifying your identity and age (21+) during the KYC process to comply with PAGCOR regulations and the rg77 Terms & Conditions.
• Processing deposits and withdrawals via your selected Philippine payment method (GCash, Maya, bank transfer, etc.) and maintaining accurate transaction records.
• Complying with anti-money laundering (AML) obligations, including transaction monitoring, suspicious activity reporting, and enhanced due diligence procedures where triggered.
• Administering bonus promotions, VIP rewards, and loyalty programme benefits applicable to your account.
• Providing customer support via live chat, email, and related communication channels.
• Enforcing responsible gaming measures — including deposit limits, self-exclusion, and cooling-off periods — and flagging potential problem gambling behaviours to trained support staff.
• Sending transactional communications — including deposit confirmations, withdrawal updates, security alerts, and KYC status notifications.
• Sending promotional communications — where you have opted in to receive marketing messages from rg77. You may withdraw this consent at any time through your account notification settings.
• Detecting and preventing fraud, account takeovers, money laundering, and other prohibited conduct on the platform.
• Analysing aggregated usage data to improve platform performance, game offering, and user experience.

rg77 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data may be shared only in the following circumstances and only to the extent necessary for the stated purpose:

rg77 engages authorised third-party service providers to support platform operations. These include payment processors (GCash, Maya, GrabPay, BPI, BDO, Metrobank, InstaPay), identity verification and KYC service providers, game software providers (who receive limited session data necessary for game operation), fraud detection and risk assessment services, and cloud hosting and infrastructure providers. All service providers are bound by contractual data processing agreements that restrict their use of shared data to the specific services they provide to rg77.

rg77 will disclose personal data to PAGCOR, the National Privacy Commission of the Philippines, law enforcement agencies, financial intelligence units (e.g., the Anti-Money Laundering Council, AMLC), or courts as required by applicable Philippine law, court order, or valid regulatory demand. rg77 will disclose only the minimum information necessary to satisfy the legal requirement.

In the event that rg77 undergoes a merger, acquisition, restructuring, or sale of assets, personal data held by rg77 may be transferred to the acquiring entity as part of that transaction, subject to the acquiring entity assuming rg77's obligations under this Privacy Policy and the Data Privacy Act.

rg77 may share your personal data with third parties not covered above where you have given your explicit, informed consent to such sharing. You may withdraw any such consent at any time by contacting the rg77 Data Protection Officer.

rg77 retains personal data for the period necessary to fulfil the purposes for which it was collected, plus any additional retention period required by applicable law or regulation. The following retention periods apply to key data categories:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data subject's identity.

rg77 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• Encryption in transit: All data exchanged between your device and rg77 servers is transmitted over TLS 1.2/1.3 encrypted connections (HTTPS). The padlock icon displayed in your browser's address bar confirms that your connection to rg77.win is encrypted.
• Encryption at rest: Sensitive data stored in rg77 systems — including passwords (stored as salted hashes only), KYC document scans, and financial data — is encrypted using AES-256 or equivalent standards.
• Access controls: Access to personal data within rg77's internal systems is restricted on a need-to-know basis. Staff are granted access only to data categories necessary for their specific role. All internal access is logged and subject to audit.
• Two-factor authentication: rg77 offers and encourages two-factor authentication (2FA) for all player accounts. Internal system access by rg77 staff requires multi-factor authentication.
• Data breach response: rg77 maintains an incident response procedure aligned with the notification requirements of the Data Privacy Act. In the event of a personal data breach likely to cause harm to data subjects, affected players will be notified in accordance with applicable law.
• Vendor due diligence: Third-party service providers with access to rg77 player data are assessed for security compliance before engagement and are subject to ongoing monitoring and contractual security obligations.

While rg77 applies robust security measures, no digital system can guarantee absolute security. Players are responsible for maintaining the confidentiality of their login credentials and should use a unique, strong password for their rg77 account. If you suspect your account has been compromised, contact rg77 support immediately.

Under the Philippine Data Privacy Act of 2012, rg77 players have the following rights with respect to their personal data held by rg77. Requests to exercise these rights may be submitted to the rg77 Data Protection Officer via the contact details in Section 15.

rg77 will respond to data subject requests within fifteen (15) business days of receipt. Where a request requires more extensive processing, we will notify you of the extended timeline and the reason for the extension. rg77 will not charge a fee for processing data subject requests unless the request is manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative fee may apply.

If you believe rg77 has failed to handle your personal data in accordance with the Data Privacy Act or this policy, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

rg77 uses cookies and similar tracking technologies on the rg77.win platform for the following purposes:

• Essential cookies: Required for the platform to function correctly. These include session authentication cookies, security tokens, and load-balancing identifiers. These cookies cannot be disabled without impairing your ability to use rg77.
• Functional cookies: Remember your preferences — such as language settings, game view preferences, and "Remember Me" login state — to personalise your experience on subsequent visits.
• Analytics cookies: Collect aggregated, anonymised data about how players use the rg77 platform — including which games are most played, how players navigate the lobby, and where friction in the registration funnel occurs. This data is used exclusively to improve the platform.
• Security and fraud detection cookies: Support rg77's fraud detection systems by tracking device fingerprints, session behaviour, and anomalous access patterns. These cookies protect player accounts and the platform from malicious activity.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing rg77, though some platform features dependent on functional cookies may be affected. Essential and security cookies cannot be disabled while using the platform.

The rg77 platform is strictly for individuals aged twenty-one (21) years and older. rg77 does not knowingly collect personal data from individuals under the age of 21. The collection of such data, if it occurs, is not intentional and constitutes a breach of the registration eligibility requirements described in the rg77 Terms & Conditions.

Age is verified at the point of registration through the provision of date of birth information, and is confirmed definitively during the KYC process through examination of a valid government-issued identity document. Any account found to be held by an individual under 21 will be immediately suspended, all associated personal data will be retained only for as long as legally required, and the account will be closed.

The rg77 platform integrates third-party game content from software providers whose games are accessible through the rg77 lobby. While rg77 contracts with these providers under strict data processing terms, each game provider maintains their own privacy practices. By launching a game within the rg77 platform, limited session data (such as bet amounts and game outcomes) is shared with the relevant provider to enable game operation and result verification.

rg77 does not include links to external third-party websites for marketing or referral purposes. Any navigation outside rg77.win is at your own initiative and rg77 accepts no responsibility for the privacy practices of websites or services not operated by rg77.

Payment processing services (GCash, Maya, BPI, BDO, Metrobank, InstaPay, and others) are operated by independent entities subject to their own privacy policies and the oversight of the Bangko Sentral ng Pilipinas (BSP). rg77 shares with these providers only the minimum transaction data necessary to process your deposit or withdrawal request.

rg77 reserves the right to update or amend this Privacy Policy at any time. Material changes — including changes to the categories of data collected, the purposes for which data is processed, or the rights available to data subjects — will be communicated to registered players via their registered email address prior to the changes taking effect.

Non-material updates, such as clarifications to existing policy language or corrections of typographical errors, will be reflected in the updated version published at rg77.win/privacy-policy with a revised "Last Updated" date. Players are encouraged to review this policy periodically to remain informed of how rg77 handles their personal data.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by rg77, please contact the rg77 Data Protection Officer through the following channels:

• Live Chat: Available 24/7 at rg77.win — for general privacy questions and urgent account security concerns.
• Email: [email protected] — for formal data subject access requests, erasure requests, objections, and written complaints. Please include "Privacy Policy" or "Data Subject Request" in the subject line of your email. Responses are issued within 15 business days on Philippine Standard Time.

Formal complaints regarding rg77's handling of personal data that are not resolved through the above channels may be escalated to the National Privacy Commission of the Philippines.