z77 Casino Privacy Policy

z77 is an online gaming platform operating at z77.one, offering casino games, sports betting, bingo, fishing arcade titles, and slot games to players in the Philippines. z77 operates within the regulatory framework established by the Philippine Amusement and Gaming Corporation (PAGCOR).

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, z77 is the Personal Information Controller in respect of the personal data it collects from registered players and website visitors.

Our designated Data Protection Officer (DPO) can be contacted at the details provided in Section 14 of this policy.

z77 collects the following categories of personal data from players and website visitors:

z77 does not collect sensitive personal information as defined under the DPA 2012 (such as health data, political affiliations, or religious beliefs) unless specifically required by law or with your explicit consent.

z77 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the z77 platform, including through cookies, web beacons, and server logs. See Section 10 for details on cookies.
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from anti-money laundering (AML) screening services; payment confirmation data from GCash, PayMaya, and banking partners.
• Regulatory sources: Data shared with z77 by PAGCOR or other Philippine regulatory authorities in connection with licensing, compliance, or investigation requirements.

z77 uses your personal data for the following purposes:

• Account management: Creating and maintaining your z77 account, verifying your identity, and managing your login credentials.
• Service delivery: Processing deposits and withdrawals, crediting bonuses, providing access to games, and delivering customer support.
• Regulatory compliance: Fulfilling PAGCOR licensing obligations, conducting KYC and AML checks, reporting to regulatory authorities as required by Philippine law, and maintaining gaming records.
• Responsible gaming: Monitoring gaming behaviour to identify potential problem gambling indicators, enforcing self-exclusion requests, and applying deposit limits set by players.
• Fraud prevention and security: Detecting and preventing fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the z77 platform, fix technical issues, and develop new features.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time via your Account Settings.
• Legal proceedings: Establishing, exercising, or defending legal claims in connection with your use of the z77 platform.

Under the Data Privacy Act of 2012, z77 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and z77 — including account creation, payment processing, and game delivery.
• Legal obligation: Processing required to comply with PAGCOR regulations, AML laws, tax obligations, and other applicable Philippine legislation.
• Legitimate interests: Processing for fraud prevention, platform security, and aggregated analytics, where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

z77 does not sell your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash (Mynt), PayMaya (Voyager Innovations), BPI, BDO, and Metrobank — for processing deposits and withdrawals.
• KYC and AML providers: Third-party identity verification and fraud screening services engaged by z77 to fulfil regulatory obligations.
• Game providers: Software providers whose games are hosted on the z77 platform may receive anonymised session data for technical support purposes.
• Regulatory authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other Philippine government bodies, where disclosure is required by law or court order.
• Professional advisers: Legal counsel, auditors, and accountants engaged by z77, subject to professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of z77's business or assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy. You will be notified of any such transfer.

All third-party recipients are contractually required to handle your personal data in accordance with the DPA 2012 and to implement appropriate security measures.

Where z77 transfers your personal data outside the Philippines — for example, to game software providers or cloud infrastructure providers with servers in other countries — z77 ensures that such transfers are subject to appropriate safeguards, including contractual clauses that meet the standards required by the National Privacy Commission.

z77 will not transfer your personal data to a country that does not provide an adequate level of data protection without first obtaining your consent or implementing appropriate contractual safeguards.

z77 retains your personal data for as long as necessary to fulfil the purposes described in this policy, subject to the following minimum retention periods required by Philippine law and PAGCOR regulations:

• Account and identity data: Retained for five (5) years from the date of account closure or last transaction, whichever is later — as required by PAGCOR and AMLC regulations.
• Financial transaction records: Retained for five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act.
• Gaming records: Retained for five (5) years from the date of each gaming session, as required by PAGCOR.
• Customer support communications: Retained for two (2) years from the date of the last communication, unless required for ongoing legal proceedings.
• Marketing consent records: Retained for the duration of your account plus two (2) years, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, z77 will securely delete or anonymise your personal data in accordance with NPC guidelines.

z77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and z77 servers is encrypted using TLS 1.2 or higher. Sensitive data at rest is encrypted using AES-256.
• Access controls: Access to personal data is restricted to z77 personnel who require it to perform their job functions, and is governed by role-based access control policies.
• Two-factor authentication: z77 supports and encourages the use of two-factor authentication (2FA) for all player accounts.
• Penetration testing: z77 conducts regular third-party security assessments and penetration tests of its platform infrastructure.
• Incident response: z77 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, z77 will notify the NPC within 72 hours and affected players without undue delay, as required by the DPA 2012.
• Staff training: All z77 personnel with access to personal data receive regular data privacy and security training.

While z77 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your z77 login credentials.

z77 uses cookies and similar tracking technologies on the z77.one website. Cookies are small text files stored on your device that help us deliver a functional and personalised experience.

Types of cookies used by z77:

• Strictly necessary cookies: Required for the platform to function — including session management, login authentication, and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and responsible gaming configurations.
• Analytics cookies: Collect anonymised data about how players use the platform, helping z77 identify and fix issues and improve the user experience. z77 uses first-party analytics only.
• Marketing cookies: Used only with your explicit consent to deliver relevant promotional content within the z77 platform. z77 does not use third-party advertising networks.

You can manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may affect the functionality of the z77 platform. Your cookie preferences can also be updated at any time via the Cookie Settings option in your Account.

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by z77:

• Right to be informed: The right to know what personal data z77 collects about you and how it is used — as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data z77 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to z77's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on z77's legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe z77 has processed your personal data in violation of the DPA 2012.

To exercise any of these rights, please contact z77's Data Protection Officer using the details in Section 14. z77 will respond to all data rights requests within fifteen (15) business days. We may need to verify your identity before processing your request.

If z77 becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all associated data will be deleted, and any funds will be returned to the deposit source after verification. If you believe a minor has registered on z77, please contact our support team immediately.

z77 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform features. When material changes are made, z77 will:

• Post the updated Privacy Policy on z77.one with a revised "Last Updated" date.
• Notify registered players via their registered email address at least fourteen (14) days before the changes take effect, where practicable.
• Where required by the DPA 2012, obtain fresh consent for any new processing activities.

Your continued use of the z77 platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact z77's Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you are not satisfied with z77's response to your data privacy concern.