ap77 Privacy Policy – Your Data, Protected

1. Introduction and Scope

This Privacy Policy ("Policy") describes how ap77 ("ap77," "the Company," "we," "us," "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you," "your," "the Player") who access or use the ap77 Casino platform, including its website at ap77.lat, its services, games, and related features.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission (NPC) of the Philippines. By registering an account with ap77 or otherwise using the platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

This Policy applies to all personal data collected by ap77 in connection with the operation of the platform, including data collected online, through customer support interactions, and through payment processing systems.

2. Data Controller Information

ap77 acts as the Personal Information Controller in respect of the personal data collected from players on the ap77 platform, as that term is defined under the Philippine Data Privacy Act of 2012. ap77 is responsible for ensuring that personal data is collected, used, stored, and disposed of in accordance with applicable Philippine data privacy laws.

ap77 has appointed a Data Privacy Officer (DPO) responsible for overseeing data protection compliance and handling data subject rights requests. The DPO may be contacted via the contact details set out in Section 13 of this Policy.

3. Personal Data We Collect

ap77 collects the following categories of personal data from players:

Registration and Identity Data:

• Full legal name as it appears on government-issued identification
• Date of birth (for age verification purposes)
• Registered Philippine mobile number
• Email address (if provided during registration)
• Username and encrypted account password
• Residential address (required for KYC verification)

Identity Verification (KYC) Data:

• Copies of government-issued identification documents (Philippine passport, Driver's License, SSS ID, UMID, PhilHealth ID, Voter's ID, or equivalent)
• Selfie or facial image submitted for identity verification purposes
• Proof of address documents where required

Financial and Transaction Data:

• GCash or PayMaya account number (used to process transactions — not stored in full)
• Bank account details provided for bank transfer transactions (BDO, BPI, Metrobank)
• Transaction history: deposit amounts, withdrawal amounts, dates, and reference numbers
• Betting and gaming history associated with your ap77 account

Technical and Usage Data:

• IP address and approximate geographic location at time of login
• Device type, operating system, and browser type
• Session logs, page views, and feature usage patterns on the ap77 platform
• Cookie identifiers (see Section 9)

Communications Data:

• Records of communications between you and ap77 Customer Support, including live chat transcripts and email exchanges
• Records of any complaints or dispute resolutions involving your account

4. How We Collect Your Data

ap77 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact Customer Support, or participate in promotions.
• Automatically — through cookies and similar tracking technologies when you browse or use the ap77 platform. See Section 9 for details.
• From payment service providers — transaction confirmation data is received from GCash, PayMaya, and Philippine banks when you make deposits or withdrawals.
• From identity verification services — where ap77 uses third-party KYC service providers to verify identity documents submitted during account verification.

5. Purposes and Legal Bases for Processing

ap77 processes your personal data for the following purposes and on the following legal bases under the Philippine Data Privacy Act:

• Account registration and management — necessary for the performance of the contract between you and ap77 (i.e., the provision of gaming services).
• Age verification and KYC compliance — required by law under PAGCOR regulatory requirements and the Philippine Anti-Money Laundering Act.
• Processing deposits and withdrawals — necessary for the performance of the contract and for compliance with financial regulatory obligations.
• Fraud prevention and security monitoring — legitimate interest of ap77 in protecting the platform, its players, and its financial systems from fraudulent activity.
• Responsible gaming monitoring — legitimate interest of ap77 and compliance with PAGCOR requirements to identify and assist players who may be at risk of problem gambling.
• Customer support and dispute resolution — necessary for the performance of the contract and legitimate interest in maintaining service quality.
• Marketing communications — with your consent, where you have opted in to receive promotional communications from ap77.
• Legal compliance and regulatory reporting — compliance with applicable Philippine laws including the Data Privacy Act, AMLA, and PAGCOR regulations.

6. Disclosure of Personal Data

ap77 does not sell, rent, or trade your personal information to third parties for their own independent commercial purposes. ap77 may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in Section 5:

• Payment service providers (GCash, PayMaya, BDO, BPI, Metrobank) — to process deposits and withdrawals to and from your ap77 account.
• Identity verification service providers — to assist ap77 in verifying the identity of players during KYC procedures.
• Game software providers — game providers may receive technical data (such as session identifiers) necessary to operate their games on the ap77 platform.
• Regulatory and law enforcement authorities — ap77 is required by Philippine law to disclose certain information to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent authorities upon lawful demand.
• Legal and professional advisors — where necessary for the resolution of legal disputes or for the provision of professional legal, accounting, or audit services to ap77.

All third parties with whom ap77 shares personal data are required to implement appropriate data protection measures consistent with the Philippine Data Privacy Act.

7. Data Retention

ap77 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account registration data: Retained for the duration of the account and for a minimum of five (5) years following account closure, in accordance with PAGCOR and AMLA record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of submission, as required by applicable Philippine anti-money laundering regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for a minimum of two (2) years from the date of the communication.
• Technical and usage data: Retained for up to twelve (12) months from the date of collection, unless required to be retained longer for security or legal compliance purposes.

Upon expiry of the applicable retention period, ap77 will securely delete or anonymize your personal data in accordance with the National Privacy Commission's guidelines on data disposal.

8. Data Security Measures

ap77 implements the following technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ap77 platform.
• Encrypted storage of sensitive personal data at rest within ap77's secure data infrastructure.
• One-way cryptographic hashing of account passwords — ap77 staff cannot access your plaintext password.
• Role-based access controls ensuring that personal data is accessible only to ap77 personnel who require it for legitimate operational purposes.
• Regular security assessments and vulnerability testing of the ap77 platform infrastructure.
• OTP-based login verification for new device access, reducing risk of unauthorized account access.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ap77 will notify affected players and the National Privacy Commission in accordance with the requirements of the Philippine Data Privacy Act.

9. Cookies and Tracking Technologies

ap77 uses cookies and similar technologies on the ap77 platform. Cookies are small text files stored on your device that help ap77 remember your preferences, maintain your login session, and analyze platform usage patterns.

ap77 uses the following categories of cookies:

• Strictly necessary cookies: Required for the ap77 platform to function — including maintaining your login session and processing transactions. These cannot be disabled without affecting platform functionality.
• Performance and analytics cookies: Used to understand how players use the ap77 platform, which pages are visited most frequently, and where technical errors occur. This data is used in aggregate and anonymized form to improve the platform.
• Functional cookies: Used to remember your preferences (such as display language and bet size settings) to improve your ap77 experience.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect the functionality of the ap77 platform.

10. Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ap77:

• Right to be Informed: The right to be told what personal data ap77 collects and how it is used — which this Policy fulfils.
• Right of Access: The right to request a copy of the personal data ap77 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data in your ap77 account.
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where it is no longer necessary for the purpose for which it was collected, subject to ap77's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe ap77 has processed your personal data in breach of the Data Privacy Act.

To exercise any of the above rights, please contact ap77's Data Privacy Officer as described in Section 13. ap77 will respond to rights requests within thirty (30) days of receipt, or within such extended period as may be permitted under applicable regulations.

11. Children's Privacy

The ap77 platform is strictly prohibited for use by individuals under the age of twenty-one (21) years. ap77 does not knowingly collect personal data from individuals below this age. If ap77 discovers that personal data has been collected from an individual who is below 21 years of age, ap77 will promptly delete that data and terminate the associated account without liability.

If you believe that ap77 may have collected personal data from an underage individual, please contact ap77 Customer Support immediately via the contact details in Section 13.

12. Changes to This Privacy Policy

ap77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes to the ap77 platform. The most current version of this Policy will always be available on this page, with the "Last Updated" date displayed prominently. Material changes to this Policy will be communicated to registered players via in-account notifications. Continued use of the ap77 platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

13. How to Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ap77, please contact ap77's Data Privacy Officer:

• Email: [email protected] (subject line: "Data Privacy Request")
• Live Chat: Available 24/7 within your ap77 account dashboard
• Response Time: ap77 aims to acknowledge all data privacy requests within three (3) business days and to resolve them within thirty (30) days.

For complaints that remain unresolved after contacting ap77 directly, you may escalate your concern to the National Privacy Commission of the Philippines via the NPC's official channels.