rg77 Privacy Policy

This Privacy Policy explains in plain terms what personal data rg77 collects from you, why we collect it, how we use it, who we may share it with, how long we keep it, and what rights you have over your data. It covers:

• Personal data collected when you visit the rg77 website;
• Personal data provided when you register for a Player Account;
• Personal data collected during the KYC (Know Your Customer) and identity verification process;
• Personal data collected through your use of games, payment processing, and customer support;
• Technical and behavioral data collected automatically through cookies, analytics tools, and server logs;
• Data collected in connection with bonus, promotional, and loyalty program participation.

For the purposes of the Philippine Data Privacy Act of 2012 and applicable data protection law, rg77 (operating rg77.biz) is the Data Controller responsible for the personal data of users of the Platform.

rg77 has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection law. Requests relating to data privacy, corrections, access, and deletion may be directed to the DPO using the contact details in Section 16 of this Policy.

rg77 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

rg77 applies a minimal data collection principle: we collect only the data necessary for the specified purpose. We do not collect sensitive personal information (as defined under RA 10173) beyond what is strictly required for identity verification and regulatory compliance.

rg77 collects personal data through the following methods:

• Direct collection: Information you provide when registering an account, completing KYC, submitting a deposit or withdrawal request, contacting customer support, or participating in a promotion.
• Automated collection: Technical and behavioral data collected automatically through cookies, server logs, analytics tools, and similar technologies when you visit and interact with the rg77 website.
• Third-party collection: Information received from payment processors (e.g., GCash, Maya, BPI, BDO, Metrobank, Coins.ph), KYC verification service providers, fraud detection services, and game suppliers where necessary for the performance of the service.
• Inferred data: Derived information such as risk profiles, responsible gaming flags, and preference categories created by rg77's internal systems based on your gaming activity and transaction patterns.

rg77 uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your rg77 Player Account, including authentication and session management.
• Age and identity verification: Confirming that you meet the 21+ age requirement and are who you say you are, as required by applicable regulations.
• Payment processing: Facilitating deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, USDT TRC20, and Coins.ph, including verifying transaction legitimacy and processing reversals or disputes.
• Regulatory compliance: Meeting our obligations under applicable anti-money laundering (AML) laws, know-your-customer (KYC) regulations, and reporting requirements.
• Responsible gaming: Monitoring gaming patterns for indicators of problematic behavior, enforcing deposit limits and self-exclusion requests, and contacting players where responsible gaming concerns arise.
• Customer support: Responding to enquiries, resolving disputes, and improving our support quality.
• Security and fraud prevention: Detecting, investigating, and preventing unauthorized access, fraudulent transactions, bonus abuse, and other prohibited activities.
• Platform improvement: Analyzing aggregated and anonymized usage data to improve the performance, design, and feature set of the rg77 Platform.
• Marketing communications: Sending promotional emails, SMS notifications, and personalized offers where you have provided consent. You may withdraw consent at any time by updating your Account communication preferences or contacting support.
• Legal proceedings: Establishing, exercising, or defending legal claims involving rg77 or its players.

rg77 processes personal data on the following legal bases under the Philippine Data Privacy Act of 2012 and applicable law:

• Contractual necessity: Processing required to fulfil our obligations under the rg77 Terms & Conditions — including account management, payment processing, game delivery, and customer support.
• Legal obligation: Processing required to comply with applicable laws, including KYC, AML, age verification requirements, and regulatory reporting obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and analytics, where our legitimate interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and optional personalization features, where you have provided explicit, informed consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

rg77 does not sell, rent, or trade personal data to third parties for their own commercial purposes. Personal data is shared only in the following circumstances:

• Service providers: Third-party vendors who process data on rg77's behalf under data processing agreements, including payment processors (GCash, Maya, BPI, BDO, Metrobank, Coins.ph), KYC and identity verification providers, cloud infrastructure providers, analytics platforms, and customer support tools. These providers are contractually bound to use your data only for the purpose of delivering the contracted service to rg77.
• Game suppliers: Game providers such as JILI, Pragmatic Play, PG Soft, Evolution Gaming, and others may receive minimal technical data (such as a pseudonymous player identifier and session token) necessary to deliver game content. They do not receive your full identity or financial data.
• Regulatory authorities: rg77 may disclose personal data to PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), law enforcement agencies, or courts where required by applicable law, regulation, or lawful order.
• Business transfers: In the event of a merger, acquisition, asset sale, or restructuring involving rg77, personal data may be transferred as part of the transaction, subject to equivalent privacy protections.
• With your consent: Sharing for any other purpose requires your explicit prior consent.

rg77 uses cookies and similar tracking technologies on the rg77.biz website. Cookies are small text files stored on your device by your browser that help the Platform function correctly and improve your experience.

rg77 uses the following categories of cookies:

• Strictly necessary cookies: Required for core Platform functions such as login sessions, security tokens, and payment flow continuity. These cannot be disabled without affecting Platform functionality.
• Performance and analytics cookies: Used to collect aggregated data on how players navigate and use the Platform, enabling us to identify and resolve performance issues and improve user experience. Data collected is anonymized where possible.
• Functional cookies: Enable personalization features such as remembering your preferred language, game settings, and navigation preferences between sessions.
• Marketing cookies: Used to deliver relevant promotional content where you have consented to marketing communications. These cookies track interaction with rg77 promotional materials.

You may control cookie settings through your browser's privacy settings. Disabling non-essential cookies will not prevent you from using the rg77 Platform, but may affect personalization features and the relevance of promotional content shown to you.

rg77 retains personal data only for as long as necessary for the purposes for which it was collected, subject to applicable legal and regulatory retention obligations. The following general retention periods apply:

At the end of the applicable retention period, personal data is securely deleted or anonymized unless continued retention is required by law. Anonymized data (from which individual identity cannot be reconstructed) may be retained indefinitely for aggregate analytics purposes.

rg77 implements appropriate technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and the rg77 Platform is encrypted using TLS 1.3 or higher. The rg77 website operates exclusively over HTTPS.
• Encryption at rest: Sensitive personal data, including KYC documents and financial records, is encrypted at rest using industry-standard AES-256 encryption.
• Access controls: Access to personal data within rg77's systems is restricted on a need-to-know basis using role-based access controls. All staff with access to personal data undergo data privacy training.
• Two-factor authentication: Player Accounts support SMS-based 2FA for login, reducing the risk of unauthorized access from compromised credentials.
• Intrusion detection: rg77 employs automated systems to detect and alert on unusual access patterns, login anomalies, and potential security incidents.
• Regular security reviews: rg77 conducts periodic security assessments of its systems, processes, and third-party service providers.

Under the Philippine Data Privacy Act of 2012 and applicable law, you have the following rights with respect to your personal data held by rg77. To exercise any of these rights, submit a written request to the rg77 Data Protection Officer using the contact details in Section 16. rg77 will respond within 15 business days of receiving a valid, verifiable request.

rg77 may decline a request where complying would conflict with a legal obligation, would adversely affect the rights or freedoms of other individuals, or where the request is manifestly unfounded or excessive. We will provide written reasons for any declined request.

The rg77 Platform is strictly prohibited for persons under 21 years of age, consistent with Philippine gaming regulations. rg77 does not knowingly collect personal data from persons under 21. Age verification is mandatory at registration and before withdrawal processing.

Some of rg77's third-party service providers — including cloud infrastructure providers, game suppliers, and analytics platforms — may process personal data on servers located outside the Philippines. Where such transfers occur, rg77 ensures that:

• The recipient country provides an adequate level of protection for personal data as recognized by the National Privacy Commission, or equivalent safeguards are in place through contractual arrangements;
• Data transfer agreements include clauses requiring the recipient to maintain confidentiality, implement appropriate security measures, and process data only for the specified purpose;
• Cross-border transfers are limited to the minimum data necessary for the contracted service.

In all cases, rg77 retains responsibility for the protection of personal data transferred to third-party processors, regardless of the country in which processing occurs.

The rg77 Platform integrates third-party services including game providers, payment gateways, and analytics tools. These services operate under their own privacy policies and are subject to their own data processing practices. rg77's Privacy Policy does not govern how these third parties handle your personal data in contexts outside their contracted role as rg77 service providers.

Payment processors such as GCash, Maya (PayMaya), BPI, BDO, Metrobank, and Coins.ph are independent data controllers for the financial data you share directly with them. Please review their respective privacy policies for information about their data practices.

Game suppliers process limited technical data (pseudonymous player session identifiers) within the rg77 gaming infrastructure. They do not receive your full name, contact details, government ID, or financial account information.

rg77 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform features. The effective date at the top of this Policy reflects the date of the most recent revision.

Material changes to this Policy — such as changes to the categories of data we collect, new purposes for processing, or changes to your rights — will be communicated to registered players via email to the address on file, at least 7 days before the changes take effect, except where immediate implementation is required by law.

Your continued use of the rg77 Platform after the effective date of a revised Privacy Policy constitutes your acknowledgment of the updated Policy. If you disagree with changes to this Policy, you may request account closure in accordance with the rg77 Terms & Conditions.

For all data privacy enquiries, subject access requests, corrections, deletion requests, objections, and complaints, please contact the rg77 Data Protection Officer:

When submitting a data rights request, please include your registered email address, a description of your request, and any relevant Account details. Requests may require identity verification before processing to protect against unauthorized access to your data.

If your privacy concern relates to responsible gaming, deposit limits, or self-exclusion, please also visit the rg77 Responsible Gaming page for dedicated tools and contact information.