77gem Casino Privacy Policy

1. Who We Are

This Privacy Policy applies to 77gem Casino, accessible at 77gem.app, and all associated services, mobile-optimized pages, and features operated under the 77gem brand. When this Policy refers to "77gem," "we," "us," or "our," it means the entity responsible for operating the 77gem platform and processing your personal data.

77gem operates as an online gaming platform serving Filipino players, operating within the regulatory framework established by the Philippine Amusement and Gaming Corporation (PAGCOR) and in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012.

As a personal information controller under Philippine law, 77gem is responsible for determining the purposes and means of processing your personal data. If you have any questions about this Policy or how your data is handled, please contact us using the details provided in Section 14.

2. Data We Collect

77gem collects the following categories of personal data from players and visitors:

3. How We Collect Your Data

77gem collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the platform, including through cookies, server logs, and similar tracking technologies. See Section 7 for full details.
• Third-party sources: Identity verification data from KYC service providers; payment data from GCash, PayMaya, BPI, BDO, and Metrobank; fraud prevention data from security partners. All third-party data sharing is governed by appropriate data processing agreements.
• Publicly available sources: In limited circumstances, we may verify information against publicly available records for fraud prevention or regulatory compliance purposes.

4. Why We Use Your Data

77gem uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your 77gem account, including password resets and account recovery.
• Identity verification: Conducting KYC checks to verify your identity and age (21+) as required by PAGCOR regulations and Philippine law.
• Payment processing: Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels.
• Customer support: Responding to your enquiries, resolving disputes, and providing technical assistance.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, and other illegal conduct on the platform.
• Regulatory compliance: Meeting our obligations under PAGCOR licensing requirements, the Data Privacy Act of 2012, and the Anti-Money Laundering Act (AMLA).
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and administering self-exclusion, deposit limits, and cooling-off tools.
• Platform improvement: Analysing usage data to improve game performance, user experience, and platform features.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates — only where you have given explicit consent or where permitted by applicable law.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, 77gem processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms and Conditions you agreed to upon registration — including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine laws and PAGCOR regulations, including KYC verification, AMLA reporting, and age verification.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided clear and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Data

77gem does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers receive the financial data necessary to process your transactions.
• KYC and identity verification providers: Third-party verification services receive identity documents and personal details solely for the purpose of completing regulatory verification checks.
• Fraud prevention and security partners: Specialist security providers may receive technical and usage data to assist in detecting and preventing fraudulent activity.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities may receive data where required by law or regulatory order.
• IT and platform service providers: Cloud hosting, data storage, and technical infrastructure providers who process data on our behalf under strict data processing agreements.
• Legal proceedings: Where required by a valid court order, subpoena, or other legal process under Philippine law.

All third parties who receive your personal data are required to handle it in accordance with applicable data protection laws and are prohibited from using it for any purpose other than those specified.

7. Cookies & Tracking Technologies

77gem uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. The following types of cookies are used:

• Essential cookies: Required for the platform to function correctly, including session management, login authentication, and security features. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, game history, and display options to personalise your experience.
• Analytics cookies: Collect anonymised data about how players use the platform to help us identify areas for improvement. No personally identifiable information is shared with analytics providers.
• Marketing cookies: Used only with your explicit consent to deliver relevant promotional content. You may opt out at any time through your account settings or browser controls.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may affect the functionality of the 77gem platform.

8. Data Retention

77gem retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by PAGCOR and AMLA regulations.
• Transaction records: Retained for a minimum of five (5) years in compliance with Anti-Money Laundering Act requirements.
• KYC documents: Retained for the period required by PAGCOR licensing conditions, typically five (5) years from the date of verification.
• Support communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required for dispute resolution.
• Marketing data: Retained until you withdraw consent or for a maximum of two (2) years from your last interaction with a marketing communication, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

9. Data Security

77gem implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• TLS encryption: All data transmitted between your device and 77gem servers is encrypted using Transport Layer Security (TLS) protocols.
• Data encryption at rest: Sensitive personal and financial data stored on our servers is encrypted using AES-256 or equivalent standards.
• Access controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis, with role-based access controls and multi-factor authentication enforced.
• Regular security audits: Our platform and infrastructure undergo regular penetration testing and security assessments by independent specialists.
• Incident response: In the event of a personal data breach, 77gem will notify affected players and the National Privacy Commission within 72 hours of becoming aware of the breach, as required by the Data Privacy Act of 2012.

10. Your Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 77gem:

• Right to be informed: The right to know what personal data we collect, how we use it, and with whom we share it — as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data we hold about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. We will respond to all verified requests within thirty (30) days.

11. Children's Privacy

The 77gem platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law and PAGCOR regulations governing online casino gaming. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the data, and report the matter to the relevant authorities where required. If you believe a minor has registered on the platform, please contact us immediately at the details provided in Section 14.

12. Third-Party Links

The 77gem platform may contain references to third-party payment providers and regulatory bodies. This Privacy Policy applies solely to data processed by 77gem. Third-party services — including GCash, PayMaya, BPI, BDO, and Metrobank — operate under their own privacy policies, and 77gem is not responsible for their data handling practices.

We encourage you to review the privacy policies of any third-party services you use in connection with your 77gem account.

13. Changes to This Policy

77gem reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The date of the most recent revision is displayed at the top of this page.

Where changes are material, we will notify registered players via email or an in-platform notification prior to the changes taking effect. Your continued use of the 77gem platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

We recommend reviewing this page periodically to stay informed of how 77gem protects your personal information.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact the 77gem Data Protection Officer:

• Email: [email protected]
• Support Email: [email protected]
• Live Chat: Available 24/7 via the 77gem platform
• Response Time: Within 30 days for data rights requests; within 24 hours for general enquiries

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe your data protection rights have been violated.