ag77 Privacy Policy

This Privacy Policy applies to all personal data collected and processed by ag77 in connection with:

• Registration and maintenance of ag77 player accounts;
• Processing of deposits and withdrawal transactions;
• Provision of gaming services including online casino, live dealer tables, slots, bingo, dice, Big Hammer, and sports betting;
• Compliance with PAGCOR licensing obligations and Philippine Anti-Money Laundering (AML) requirements;
• Customer support communications;
• Marketing and promotional communications (where consented to); and
• Browsing or use of the ag77 website, including non-registered visitors.

This Policy does not apply to third-party websites, payment processors, or game providers that may be linked from or integrated with the ag77 platform. Those entities operate under their own independent privacy policies, and ag77 is not responsible for their data practices.

For the purposes of the Data Privacy Act of 2012, ag77 is the Personal Information Controller (PIC) in respect of all personal data collected through the ag77 platform. ag77 determines the purposes for which personal data is collected and the means by which it is processed.

ag77 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable Philippine data privacy law. The DPO may be contacted via the support channels listed in Section 15 of this Policy.

ag77 collects the following categories of personal data:

4.1 Directly from You

The majority of personal data ag77 holds is provided directly by you — during account registration, the KYC verification process, deposit and withdrawal transactions, customer support interactions, and when you respond to promotions or surveys.

4.2 Automatically During Platform Use

When you access and use the ag77 platform, certain technical data is collected automatically. This includes your IP address, device identifiers, session duration, pages visited, game sessions initiated, and login timestamps. This data is collected through server logs, session management systems, and cookies as described in Section 9.

4.3 From Payment Processing Partners

When you make a deposit or withdrawal via GCash, Maya, or a bank transfer channel, ag77 receives confirmation data from the payment processor, including transaction reference numbers, amounts, and the masked identifier of the originating payment account. ag77 does not receive or store your full GCash PIN, Maya password, or internet banking credentials — those remain with the respective payment service provider.

4.4 From Third-Party Verification Services

For KYC identity verification, ag77 may use third-party identity verification service providers that process your submitted ID documents and selfie to confirm authenticity and match. These providers operate under contractual data processing agreements with ag77 and are bound by Philippine data privacy requirements.

ag77 processes personal data for the following purposes and on the following legal bases under the Data Privacy Act of 2012:

ag77 does not sell, rent, or trade your personal data to third parties for commercial purposes. Personal data is shared only in the following circumstances:

6.1 Regulatory & Legal Disclosures

ag77 is required by Philippine law to share player data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent government authorities upon lawful request, court order, or as required under the AMLA and PAGCOR licensing conditions. ag77 will comply with all valid legal process.

6.2 Payment Processing Partners

To process deposits and withdrawals, ag77 shares the minimum necessary transaction data with payment service providers including GCash (G-Xchange, Inc.), Maya (Voyager Innovations, Inc.), BPI, BDO, Metrobank, and other supported payment channels. These providers process data solely for payment execution purposes under their own data privacy policies and applicable BSP regulations.

6.3 KYC & Identity Verification Providers

KYC identity documents may be processed by ag77's contracted identity verification service providers. These providers are engaged under data processing agreements that require them to process data only for KYC verification purposes and prohibit secondary use of your identification documents.

6.4 Game Content Providers

Third-party game providers (including JILI, Pragmatic Play, and others) may receive anonymised game session identifiers to operate games within the ag77 lobby. These providers do not receive your full name, mobile number, KYC documents, or financial data as part of game delivery. Game session data is processed under ag77's instructions.

6.5 Service Providers under Data Processing Agreements

ag77 engages third-party service providers for functions including IT infrastructure, cloud hosting, analytics, and customer support technology. These providers act as Personal Information Processors (PIP) under the Data Privacy Act and are contractually bound to process data only on ag77's documented instructions.

ag77 retains personal data only for as long as necessary for the purpose for which it was collected, subject to the following minimum retention periods required by Philippine law and PAGCOR regulations:

• Account and registration data: Retained for the duration of the active account and for a minimum of five (5) years following account closure.
• KYC identity documents: Retained for a minimum of five (5) years from the date of last account activity, as required by AMLA implementing rules.
• Financial transaction records: Retained for a minimum of five (5) years from the transaction date, in compliance with AMLA and BSP record-keeping requirements.
• Game session logs: Retained for a minimum of one (1) year for dispute resolution purposes; longer retention may apply where a dispute or regulatory inquiry is open.
• Customer support communications: Retained for a minimum of two (2) years from the date of the interaction.
• Marketing preference data: Retained until you withdraw consent or request erasure, subject to applicable retention minimums.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with ag77's data deletion procedures. Regulatory-mandated retention obligations take precedence over erasure requests for data subject to mandatory retention.

ag77 implements technical and organizational security measures appropriate to the nature of the personal data processed, with particular regard to the sensitive nature of KYC documents and financial transaction data. The security measures in place include:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser and the ag77 platform is encrypted using industry-standard 256-bit SSL encryption. The padlock indicator in your browser's address bar confirms the active secure connection.
• Data Encryption at Rest: Sensitive data categories — including KYC documents and financial data — are encrypted in ag77's databases using AES-256 encryption.
• Access Controls: Access to personal data within ag77's systems is restricted to authorized personnel on a need-to-know basis. All internal data access is logged and subject to periodic review.
• Password Security: Player passwords are stored as salted cryptographic hashes. ag77 cannot recover plaintext passwords — only reset them. ag77 staff will never ask for your password.
• KYC Document Handling: Government-issued ID documents and selfie photographs are stored in isolated, access-controlled storage systems separate from general account data.
• Incident Response: ag77 maintains a data breach response plan. In the event of a personal data breach that poses risk to affected players, ag77 will notify affected players and the National Privacy Commission in accordance with NPC Circular No. 16-03.

ag77 uses cookies and similar session tracking technologies on the ag77.bio website. Cookies are small text files stored on your device that enable the platform to recognize your browser, maintain your login session, and improve your experience.

9.1 Essential Cookies

Essential cookies are required for the ag77 platform to function. They maintain your login session, store your language and region preferences, and protect against cross-site request forgery (CSRF). These cookies cannot be disabled without breaking core platform functionality.

9.2 Functional Cookies

Functional cookies remember your preferences — such as your preferred game lobby view, recently played games, and notification settings — so you don't have to reconfigure them on each visit.

9.3 Analytics Cookies

ag77 uses anonymised analytics data to understand how players use the platform — which features are most used, how long sessions last, and where technical errors occur. Analytics data is aggregated and does not identify individual players. You may opt out of non-essential analytics cookies through your browser settings.

You can control or delete cookies through your browser settings at any time. Disabling essential cookies will affect your ability to log in and use the ag77 platform.

The ag77 platform is operated for the Philippine market and ag77's primary data processing infrastructure is based within the Philippines and in data centers that comply with Philippine data privacy standards. Certain third-party service providers — including cloud infrastructure providers and game content providers — may process data in servers located outside the Philippines.

Where personal data is transferred outside the Philippines, ag77 ensures that such transfers are conducted in accordance with the requirements of the Data Privacy Act of 2012, including through the use of contractual clauses that require the receiving party to provide an adequate level of data protection equivalent to Philippine standards.

KYC identity documents are processed within the Philippines or in jurisdictions with which the National Privacy Commission has recognized as providing adequate data protection. ag77 does not transfer KYC documents to jurisdictions without adequate protections.

Filipino players have the following rights under Republic Act No. 10173 (Data Privacy Act of 2012) in relation to personal data ag77 holds about them:

• Right to be Informed: The right to know what data ag77 collects, why it is collected, and how it is processed — addressed by this Privacy Policy.
• Right to Access: The right to obtain a copy of your personal data held by ag77.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected.
• Right to Erasure: The right to request deletion of personal data, subject to ag77's legal retention obligations.
• Right to Object: The right to object to data processing for direct marketing purposes or processing carried out on the basis of legitimate interest.
• Right to Data Portability: The right to receive your personal data in a structured, machine-readable format.
• Right to Damages: The right to claim compensation for damages caused by a violation of your data privacy rights.
• Right to File a Complaint: The right to file a complaint with the National Privacy Commission if you believe your rights have been violated.

To exercise any of these rights, contact ag77's Data Protection Officer through the in-platform support chat after login or via email at support@ag77.bio. Please include your full registered name and account mobile number so your request can be properly verified and processed. ag77 aims to respond to all data rights requests within fifteen (15) business days.

The ag77 platform is strictly for adults aged 21 years and above. This is a mandatory requirement under PAGCOR regulations governing all licensed Philippine online gaming operators. ag77 does not knowingly collect personal data from individuals under the age of 21.

All accounts are subject to mandatory KYC identity verification before withdrawals are processed. Where KYC review reveals that an account holder is under 21 years of age, the account will be immediately closed, all pending gaming activity voided, and any deposited funds returned to the original payment source after completing applicable compliance checks. The account holder's personal data will be retained only for the minimum period required by law before secure deletion.

If you become aware that a minor has accessed the ag77 platform or provided personal data to ag77, please contact support immediately so the account can be reviewed and closed without delay.

ag77 may send promotional communications to registered players — including bonus offers, new game announcements, and special promotions — via SMS to your registered mobile number or through in-platform notifications. Marketing communications are sent only to players who have opted in to receive them.

You may opt out of marketing communications at any time by:

• Updating your notification preferences in the ag77 account settings after login;
• Contacting ag77 support via in-platform chat and requesting to be removed from marketing communications.

Opting out of marketing communications does not affect essential service communications — ag77 will continue to send SMS messages relating to OTP verification, withdrawal confirmations, and security alerts to your registered number, as these are necessary for account operation and cannot be disabled without affecting platform functionality.

ag77 may update this Privacy Policy from time to time to reflect changes in applicable law, PAGCOR regulatory requirements, or ag77's data processing practices. The effective date at the top of this page is updated with each revision.

For material changes — including changes that expand the categories of data collected, change the purpose of processing, or introduce new third-party data sharing — ag77 will notify registered players via SMS to the registered mobile number and/or a prominent notice displayed upon next login, at least seven (7) days before the changes take effect.

The current version of this Privacy Policy is always available at ag77.bio/privacy-policy. We encourage all ag77 players to review this Policy periodically. Continued use of the ag77 platform after any amendment constitutes acceptance of the updated Privacy Policy.

For any questions, concerns, or requests relating to this Privacy Policy or ag77's handling of your personal data, please contact ag77's Data Protection Officer through the following channels:

• In-Platform Live Chat: Available after login via your ag77 account dashboard. This is the fastest channel for account-specific data queries and rights requests.
• Email: support@ag77.bio — for formal data rights requests, written complaints, and DPO correspondence. Please include your full registered name, account mobile number, and a clear description of your request.

ag77 aims to acknowledge all privacy-related enquiries within two (2) business days and to provide a substantive response within fifteen (15) business days.

If you are not satisfied with ag77's response to a data privacy concern, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines through its official complaint channels at privacy.gov.ph.