Privacy Policy

1. Introduction

This Privacy Policy applies to all personal data processed by 77haha in connection with the operation of the online gaming platform at 77haha.club, including all associated services, customer support channels, payment processing, marketing communications, and responsible gaming programs.

This Policy should be read together with the 77haha Terms & Conditions and any game-specific or promotion-specific terms published on the platform. In the event of any conflict between this Policy and the Terms & Conditions on a data privacy matter, this Policy shall prevail.

We take the privacy of Filipino players seriously. Whether you are accessing 77haha from Quezon City, Cebu, Davao, or anywhere else in the Philippines, you can be confident that your personal data is handled with care, transparency, and in accordance with your legal rights under Philippine law.

2. Identity of the Personal Information Controller

The Personal Information Controller for the purposes of the Data Privacy Act of 2012 is:

77haha has registered as a Personal Information Controller with the National Privacy Commission (NPC) of the Philippines as required by the DPA and its Implementing Rules.

3. Personal Data We Collect

77haha collects the following categories of personal data from players:

1. Identity Data — Full legal name, date of birth, nationality, and a copy of a valid government-issued Philippine identification document (e.g., UMID, driver's license, passport, PhilSys ID, SSS card, or PRC ID);
2. Contact Data — Philippine mobile number, email address, and residential address;
3. Financial Data — GCash number or other registered payment account details, deposit and withdrawal transaction records, account balance history, and source of funds documentation where required by AMLC regulations;
4. Gaming Activity Data — Game history, wager records, win/loss records, session duration data, bonus usage, and responsible gaming tool usage;
5. Technical Data — IP address, device type, browser type and version, operating system, screen resolution, and session identifiers collected automatically when you access the 77haha platform;
6. Communications Data — Records of your communications with 77haha customer support, including live chat transcripts and email correspondence;
7. Marketing Preferences — Your preferences regarding receiving promotional communications from 77haha via SMS, email, or push notification.

77haha does not collect sensitive personal information (as defined under the DPA) beyond what is strictly necessary for identity verification and regulatory compliance purposes.

4. How We Collect Personal Data

77haha collects personal data through the following means:

• Direct Collection — Information you provide directly during registration, KYC verification, deposit or withdrawal processing, customer support interactions, or when updating your account profile;
• Automated Collection — Technical data automatically collected when you access, browse, or interact with the 77haha platform, including through the use of cookies and similar tracking technologies (see Section 11);
• Third-Party Sources — Identity verification data from licensed KYC and anti-money laundering service providers; payment confirmation data from GCash, Maya, BPI, BDO, Metrobank, and other payment processors; and fraud prevention data from licensed third-party fraud detection services.

5. Purposes of Processing & Legal Basis

77haha processes your personal data for the following purposes, each supported by an identified lawful basis under the Data Privacy Act of 2012:

1. Account Registration and Management — To create and maintain your 77haha player account. Legal basis: performance of contract;
2. Identity Verification (KYC) — To verify your identity and age as required by PAGCOR licensing conditions and Philippine anti-money laundering regulations. Legal basis: compliance with legal obligation;
3. Payment Processing — To process your deposits and withdrawals via your selected payment method. Legal basis: performance of contract;
4. Fraud Prevention and Security — To detect, prevent, and investigate fraudulent activity, money laundering, and unauthorized access. Legal basis: legitimate interest / legal obligation;
5. Gaming Services — To provide and improve the games, sports betting, live dealer, and other services available on the 77haha platform. Legal basis: performance of contract;
6. Customer Support — To respond to your inquiries, complaints, and support requests. Legal basis: performance of contract / legitimate interest;
7. Responsible Gaming — To monitor gaming activity, administer self-exclusion requests, enforce deposit and loss limits, and fulfill PAGCOR-mandated responsible gaming obligations. Legal basis: legal obligation / legitimate interest;
8. Marketing Communications — To send promotional offers, bonus notifications, and platform updates via your preferred channels. Legal basis: consent (you may withdraw consent at any time);
9. Regulatory Reporting — To fulfill reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine regulatory authorities. Legal basis: legal obligation.

6. Disclosure to Third Parties

77haha does not sell, rent, or trade personal data. We may disclose your personal data to the following categories of third parties only to the extent necessary for the stated purpose:

• Payment Processors — GCash (Mynt), Maya (PayMaya Philippines), BPI, BDO, Metrobank, and other financial institutions, for processing deposits and withdrawals;
• KYC and AML Service Providers — Licensed third-party identity verification and anti-money laundering screening providers operating under confidentiality agreements and compliant with the DPA;
• Game Content Providers — Licensed game software providers (e.g., JILI, PG Soft, Pragmatic Play) may receive pseudonymized game activity data for purposes of game integrity and technical support;
• IT and Cloud Service Providers — Hosting, database, and security infrastructure providers operating under data processing agreements with 77haha;
• Regulatory Authorities — PAGCOR, the AMLC, the National Privacy Commission, and other Philippine government authorities, where disclosure is required by law or regulatory order;
• Legal and Professional Advisors — Lawyers and auditors under strict confidentiality obligations, where necessary for legal compliance or dispute resolution.

All third-party service providers processing personal data on behalf of 77haha are subject to contractual data processing terms and are prohibited from using personal data for their own purposes.

7. International Data Transfers

Some of 77haha's service providers and game content partners may be located outside the Republic of the Philippines. Where personal data is transferred internationally, 77haha ensures that such transfers are made only to countries or organizations that provide an adequate level of data protection, or that are subject to appropriate contractual safeguards, consistent with the requirements of the Data Privacy Act of 2012 and the National Privacy Commission's guidelines on cross-border data transfers.

By using the 77haha platform, you consent to such international transfers of your personal data where necessary for the purposes described in Section 5, subject to the safeguards described in this Section.

8. Data Retention

77haha retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods:

• Account and KYC Data — Retained for a minimum of five (5) years following account closure, consistent with PAGCOR licensing requirements and Philippine anti-money laundering legislation;
• Financial Transaction Records — Retained for a minimum of five (5) years from the date of each transaction, as required by the AMLC and PAGCOR;
• Gaming Activity Data — Retained for a minimum of three (3) years following the relevant gaming session, or longer where required for dispute resolution or regulatory purposes;
• Customer Support Records — Retained for three (3) years from the date of the most recent interaction;
• Marketing Preference Data — Retained until you withdraw consent or close your account, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with 77haha's data disposal procedures.

9. Security Measures

77haha implements technical and organizational security measures appropriate to the nature of the personal data processed and the risks associated with online gaming operations. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 77haha servers;
• AES-256 encryption for sensitive data at rest, including financial records and identity documents;
• Multi-factor authentication for all internal 77haha system access;
• Role-based access controls ensuring that personal data is accessible only to authorized personnel with a legitimate need;
• Regular penetration testing and vulnerability assessments by independent security firms;
• Intrusion detection systems and 24/7 security monitoring;
• Comprehensive employee data privacy training and confidentiality obligations.

Notwithstanding these measures, no data transmission over the Internet or electronic storage system can be guaranteed to be 100% secure. Players are encouraged to use strong, unique passwords for their 77haha accounts and to enable two-factor authentication.

10. Your Data Subject Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 77haha:

To exercise any of these rights, please contact the 77haha Data Protection Officer at the email address provided in Section 15. 77haha will respond to your request within fifteen (15) working days. In complex cases, we may extend this period by a further fifteen (15) working days with prior notice. We may require identity verification before processing your request.

If you are not satisfied with 77haha's response to your data privacy request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

11. Cookies & Tracking Technologies

The 77haha platform uses cookies and similar tracking technologies to improve platform performance, personalize your experience, and gather analytics data. The types of cookies used by 77haha include:

• Strictly Necessary Cookies — Required for the platform to function. These cannot be disabled. Examples include session authentication tokens and security identifiers;
• Performance Cookies — Used to collect anonymized data about how players use the 77haha platform, such as pages visited and error messages encountered, to improve platform performance;
• Functional Cookies — Used to remember your preferences, such as language settings and display preferences;
• Analytics Cookies — Used to measure and analyze platform usage patterns. Data collected is aggregated and does not identify individual players.

77haha does not use third-party advertising cookies or allow third-party advertisers to place cookies on the 77haha platform. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair the functionality of the 77haha platform.

12. Minors

The 77haha platform is strictly for persons aged 21 years and older. 77haha does not knowingly collect personal data from any person under the age of 21. If 77haha becomes aware that personal data has been collected from a person under 21, such data will be deleted immediately and the associated account will be permanently closed. If you believe that a minor has registered on the 77haha platform, please contact us immediately at the address in Section 15.

13. Personal Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected data subjects, 77haha will:

1. Notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in accordance with the DPA's breach notification requirements;
2. Notify affected data subjects without undue delay where the breach is likely to result in high risk to their personal data, providing clear information about the nature of the breach, the data affected, and the steps being taken;
3. Document all breaches in 77haha's internal breach register, regardless of whether notification to the NPC or data subjects is required.

14. Changes to This Privacy Policy

77haha may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or regulatory guidance. Where amendments are material, 77haha will notify registered players via their registered email address or by displaying a prominent notice on the 77haha platform at least fourteen (14) days before the amended Policy takes effect.

Your continued use of the 77haha platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We recommend that you review this Policy periodically to stay informed of how we protect your personal data.

15. Contact & Data Protection Officer

For all data privacy inquiries, requests to exercise your data subject rights, or complaints regarding 77haha's data handling practices, please contact our Data Protection Officer:

Alternatively, you may contact the National Privacy Commission of the Philippines directly if you have concerns about how 77haha handles your personal data that have not been resolved to your satisfaction through our internal process.