Contents
Your Rights Under Philippine Law: This Privacy Policy is prepared in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. As a data subject, you have the right to be informed, to access, to correct, to erase, to object, to data portability, and to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
1. Overview & Scope
This Privacy Policy ("Policy") describes how 77bar ("77bar," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you," "your," or "data subject") who access or use the 77bar website, mobile platform, and all associated services (collectively, the "Platform").
This Policy applies to all personal data processed by 77bar in connection with your use of the Platform, regardless of whether you are a registered player, a visitor browsing the site, or a person who contacts us through any of our support channels. It covers data collected online through the Platform as well as data you may provide to us offline, such as during identity verification processes.
By accessing the 77bar Platform, registering an account, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, please discontinue your use of the Platform immediately.
This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement between you and 77bar.
2. Data Controller
77bar acts as the personal information controller in respect of the personal data it collects and processes in connection with the Platform. As the personal information controller, 77bar determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with the Data Privacy Act of 2012 and all other applicable Philippine privacy regulations.
77bar has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data privacy laws. Contact details for the DPO are provided in Section 15 of this Policy.
3. Personal Data We Collect
77bar collects the following categories of personal data from players and users of the Platform:
3.1 Identity & Contact Information
- Full legal name as it appears on your government-issued ID
- Date of birth and age verification data
- Philippine mobile number and email address
- Residential address (city, province, postal code)
- Government-issued identification numbers (e.g., SSS, PhilHealth, TIN, Passport, Driver's License) collected during KYC verification
3.2 Financial Information
- GCash account number or registered mobile number
- PayMaya / Maya wallet details
- Bank account details (BPI, BDO, Metrobank, or other Philippine banks) for withdrawal processing
- Credit or debit card details (card number, expiry, billing address) — stored in tokenized form only
- Transaction history, including deposits, withdrawals, and bonus credits
3.3 Gaming & Account Activity Data
- Account username and encrypted password
- Game history, bet amounts, win/loss records, and session durations
- Bonus and promotion participation records
- Responsible gaming settings (deposit limits, self-exclusion status, cooling-off periods)
- Customer support interaction records, including chat transcripts and email correspondence
3.4 Technical & Device Data
- IP address and approximate geolocation data
- Device type, operating system, and browser information
- Unique device identifiers
- Login timestamps and session activity logs
- Cookies and similar tracking technologies (see Section 10)
Sensitive Personal Information: Where 77bar collects sensitive personal information (such as government ID numbers required for KYC compliance), such data is processed only to the extent strictly necessary for identity verification and regulatory compliance purposes, and is subject to enhanced security measures.
4. How We Collect Your Data
77bar collects personal data through the following means:
| Collection Method | Examples |
|---|---|
| Direct submission | Registration form, KYC document upload, deposit/withdrawal requests, support inquiries |
| Automated collection | Cookies, server logs, device fingerprinting, session tracking during Platform use |
| Third-party sources | Payment processors (GCash, PayMaya, banks), identity verification providers, fraud detection services |
| Regulatory sources | PAGCOR self-exclusion registers, anti-money laundering watchlists as required by law |
5. How We Use Your Personal Data
77bar processes your personal data for the following purposes:
- Account creation and management: To register your account, verify your identity, and maintain your player profile on the 77bar Platform.
- Service delivery: To provide access to casino games, sports betting, promotions, the Loyalty Program, Go Rush, and all other Platform features.
- Payment processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods.
- KYC and regulatory compliance: To verify your age (21+), identity, and source of funds in compliance with PAGCOR regulations and Philippine anti-money laundering laws (AMLA).
- Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the Platform.
- Responsible gaming: To monitor gaming behavior, enforce deposit limits and self-exclusion requests, and identify players who may be at risk of problem gambling.
- Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
- Marketing and promotions: To send you relevant promotional offers, bonus notifications, and Platform updates, subject to your communication preferences. You may opt out at any time.
- Platform improvement: To analyze usage patterns, conduct research, and improve the features and performance of the 77bar Platform.
- Legal obligations: To comply with applicable Philippine laws, regulatory requirements, court orders, and lawful requests from government authorities.
6. Legal Basis for Processing
Under the Data Privacy Act of 2012, 77bar processes your personal data on the following legal bases:
- Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration, including account management, game provision, and payment processing.
- Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act itself.
- Legitimate interests: Processing necessary for 77bar's legitimate business interests, including fraud prevention, Platform security, and service improvement, where such interests are not overridden by your rights and freedoms.
- Consent: Processing based on your freely given, specific, informed, and unambiguous consent, particularly in relation to marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
7. Sharing Your Personal Data
77bar does not sell your personal data to third parties. We may share your personal data only in the following circumstances and only to the extent strictly necessary for the stated purpose:
- Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard, solely to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable financial regulations.
- Identity verification providers: Third-party KYC and age verification service providers engaged by 77bar to verify your identity and age in compliance with PAGCOR requirements.
- Fraud prevention and security services: Specialist providers who assist 77bar in detecting and preventing fraudulent activity, money laundering, and other illegal conduct.
- IT and platform service providers: Cloud hosting, data storage, and software service providers who process data on 77bar's behalf under strict data processing agreements that require them to protect your data in accordance with applicable law.
- Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law, court order, or regulatory directive.
- Professional advisers: Lawyers, auditors, and accountants engaged by 77bar, subject to professional confidentiality obligations.
- Business transfers: In the event of a merger, acquisition, or sale of all or part of 77bar's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.
No Third-Party Marketing: 77bar will never share your personal data with third parties for their own marketing purposes without your explicit prior consent.
8. Data Retention
77bar retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & identity data | Duration of account + 5 years after closure | PAGCOR / AMLA regulatory requirement |
| Financial transaction records | 10 years from transaction date | Anti-Money Laundering Act (RA 9160) |
| KYC verification documents | Duration of account + 5 years after closure | PAGCOR licensing requirement |
| Customer support records | 3 years from last interaction | Legitimate interest / dispute resolution |
| Marketing preferences | Until consent is withdrawn | Consent-based processing |
| Technical / server logs | 12 months from collection | Security and fraud prevention |
Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized in accordance with 77bar's data disposal procedures, unless further retention is required by a specific legal obligation or ongoing legal proceedings.
9. Data Security
77bar implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:
- Encryption: All data transmitted between your device and the 77bar Platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest, including financial information and government ID numbers, is encrypted using AES-256 encryption.
- Access controls: Access to personal data is restricted to authorized 77bar personnel and service providers on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
- Two-factor authentication: 77bar supports two-factor authentication (2FA) for player accounts to provide an additional layer of protection against unauthorized access.
- Regular security assessments: 77bar conducts periodic security audits, vulnerability assessments, and penetration testing to identify and address potential security weaknesses in the Platform.
- Incident response: 77bar maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, 77bar will notify the National Privacy Commission (NPC) and affected data subjects in accordance with the requirements of the Data Privacy Act of 2012.
While 77bar takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your 77bar account credentials and for notifying us immediately if you suspect any unauthorized access to your account.
10. Cookies & Tracking Technologies
77bar uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and support security functions. The following types of cookies are used:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly necessary | Session management, login authentication, security tokens. Required for the Platform to function. | No — essential for operation |
| Functional | Remembering your language preferences, game settings, and responsible gaming configurations. | Yes, with reduced functionality |
| Analytics | Aggregated, anonymized data on how players use the Platform, used to improve features and performance. | Yes, via cookie settings |
| Marketing | Tracking promotional campaign effectiveness and delivering relevant offers to registered players. | Yes, via cookie settings or opt-out |
You can manage your cookie preferences through your browser settings or through the cookie preference center available on the Platform. Please note that disabling certain cookies may affect the functionality of the 77bar Platform. For more information on managing cookies in popular Philippine mobile browsers, refer to your device's browser help documentation.
11. Your Privacy Rights
Under the Data Privacy Act of 2012 (RA 10173), you have the following rights as a data subject. 77bar is committed to honoring these rights promptly and without undue delay:
Right to Be Informed
You have the right to know what personal data 77bar collects about you, why it is collected, and how it is used — which is the purpose of this Policy.
Right to Access
You may request a copy of the personal data 77bar holds about you at any time by contacting our Data Protection Officer.
Right to Correction
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
Right to Object
You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint
If you believe your data privacy rights have been violated, you may lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
To exercise any of the above rights, please contact our Data Protection Officer using the details provided in Section 15. We will respond to all verified requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. We may need to verify your identity before processing your request.
12. Minors & Age Policy
The 77bar Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. 77bar does not knowingly collect personal data from individuals under the age of 21.
As part of our registration and KYC process, 77bar verifies the age of all players before granting access to real-money gaming features. If 77bar discovers that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the associated personal data, and return any deposited funds in accordance with applicable regulations.
If you are a parent or guardian and believe that your child under the age of 21 has registered on the 77bar Platform, please contact us immediately at the details provided in Section 15 so that we can take appropriate action without delay.
13. Cross-Border Data Transfers
In the course of providing the 77bar Platform, your personal data may be transferred to and processed in countries outside the Philippines, for example where our cloud hosting providers or technology partners maintain data centers. Where such transfers occur, 77bar ensures that appropriate safeguards are in place to protect your personal data, including:
- Transferring data only to countries that the National Privacy Commission has recognized as providing an adequate level of data protection.
- Implementing standard contractual clauses or data processing agreements that require the recipient to protect your personal data to a standard equivalent to that required under Philippine law.
- Conducting due diligence on all third-party recipients to ensure they maintain appropriate technical and organizational security measures.
By using the 77bar Platform, you acknowledge and consent to the transfer of your personal data outside the Philippines where necessary for the provision of our services, subject to the safeguards described above.
14. Changes to This Privacy Policy
77bar reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players by email or through a prominent notice on the Platform at least seven (7) days before the changes take effect, where practicable.
The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how 77bar protects your personal data. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.
If you have any concerns about changes to this Policy, you may contact our Data Protection Officer or request account closure in accordance with the Terms & Conditions.
15. Contact & Data Protection Officer
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 77bar, please contact our Data Protection Officer through the following channels:
- Data Protection Officer: 77bar Data Privacy Team
- Email: [email protected]
- General Support Email: [email protected]
- Live Chat: Available 24/7 via the chat widget on the 77bar Platform
We aim to acknowledge all privacy-related inquiries within 48 hours and to resolve them fully within fifteen (15) business days. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.
National Privacy Commission (NPC): The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012 in the Philippines. Filipino players who believe their data privacy rights have been violated may file a complaint directly with the NPC through their official channels.
Our Privacy Commitments
How 77bar Protects Your Data
End-to-End Encryption
All data transmitted between your device and 77bar is protected by TLS encryption. Sensitive data at rest is secured with AES-256 — the same standard used by major Philippine banks.
Dedicated DPO
77bar has a designated Data Protection Officer who oversees all privacy compliance matters and is your direct point of contact for any data rights requests or concerns.
RA 10173 Compliant
Our data practices are fully aligned with the Philippine Data Privacy Act of 2012 and NPC guidelines, giving Filipino players the full protection of local privacy law.
No Data Selling
77bar will never sell your personal data to third parties. Your information is used solely to provide and improve our services and to comply with regulatory requirements.
You're in Control
Manage your marketing preferences, cookie settings, and data access requests directly from your 77bar account dashboard or by contacting our support team at any time.
Breach Notification
In the unlikely event of a data breach affecting your personal information, 77bar will notify you and the NPC promptly in accordance with the Data Privacy Act's mandatory notification requirements.