Privacy Policy — 77haha Online Casino

This Privacy Policy ("Policy") describes how 77haha ("77haha", "we", "us", "our"), the operator of the online gaming platform accessible at 77haha.net, collects, uses, discloses, retains, and protects the personal information of its users ("Player", "you", "your") in connection with the operation of the 77haha Platform.

This Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines. It should be read in conjunction with the 77haha Terms & Conditions.

By registering an account with 77haha or by continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood how your personal data is handled as described herein. If you do not agree with this Policy, you should not use the 77haha Platform.

For the purposes of the Data Privacy Act of 2012 and this Policy, the data controller responsible for the personal data collected through the 77haha Platform is:

All inquiries relating to this Privacy Policy, requests to exercise data subject rights, and any other privacy-related concerns should be directed to the Data Protection Officer (DPO) at the contact details above. 77haha will acknowledge receipt of all formal privacy inquiries within 5 business days and will provide a substantive response within 30 calendar days.

77haha collects several categories of personal data. The table below summarises the key categories and specific data points collected in connection with your 77haha account and use of the Platform.

77haha does not collect sensitive personal information beyond what is strictly necessary for identity verification (government ID details) and responsible gaming compliance. We do not collect biometric data or genetic data.

77haha collects personal data through the following methods:

• Direct provision by you: When you register an account, complete KYC verification, make deposits or withdrawals, contact customer support, or update your account settings.
• Automated collection: Through cookies, server logs, and Platform analytics tools during your browsing and gaming sessions on 77haha.net. This includes device identifiers, IP addresses, and session activity data.
• Payment service providers: 77haha receives confirmation data from GCash, Maya, BPI, BDO, and other payment providers when you initiate transactions. We receive only the data necessary to confirm and process your transaction — we do not receive or store full payment account credentials.
• Third-party identity verification services: Where 77haha uses a third-party KYC or anti-fraud service to assist with identity verification, that service may process your document images and return a verification result to 77haha.
• Game providers: Third-party game providers integrated into the 77haha Platform may share aggregated gaming activity data with 77haha for reporting, auditing, and compliance purposes.

Under RA 10173, 77haha processes your personal data on the following legal bases:

• Performance of a contract: Processing is necessary to provide you with the 77haha services, including account management, payment processing, game delivery, and customer support.
• Legal obligation: Processing is required to comply with the legal and regulatory obligations of 77haha, including PAGCOR-mandated identity verification (KYC), Anti-Money Laundering Act (AMLA) compliance, and tax reporting requirements.
• Legitimate interests: Processing is carried out in the legitimate interests of 77haha (and not overridden by your interests or fundamental rights), including for fraud prevention, security monitoring, responsible gaming enforcement, and Platform improvement.
• Consent: For non-essential processing activities, such as the use of analytical cookies or the sending of promotional communications, 77haha relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

77haha uses your personal data for the following specific purposes:

• Account creation and management: To create, maintain, and administer your 77haha player account, including authentication when you log in.
• Identity verification (KYC): To verify your identity and age (21+ requirement) before enabling real-money gaming and processing withdrawals, as required by PAGCOR regulations.
• Payment processing: To process your deposits and withdrawals via GCash, Maya, and other supported Philippine payment methods.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, identity theft, and other security threats to the Platform and to individual player accounts.
• Regulatory compliance: To fulfil 77haha's obligations under PAGCOR online gaming regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012.
• Responsible gaming: To monitor gaming activity for patterns that may indicate problem gambling and to enable responsible gaming tools (deposit limits, self-exclusion) at your request.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Platform improvement: To analyse aggregated Platform usage data to improve the 77haha gaming experience, fix bugs, and develop new features.
• Marketing communications (with consent): To send you promotional offers, bonuses, and updates about 77haha games and services where you have opted in to receive such communications.

77haha does not sell your personal data. We may share your data with the following categories of third parties solely for the purposes described in this Policy:

• Payment service providers: GCash, Maya, BPI, BDO, UnionBank, 7-Eleven Cliqq, Coins.ph, and USDT payment processors — for the sole purpose of processing your deposits and withdrawals.
• Game content providers: Third-party game studios (e.g., Pragmatic Play, PG Soft, Evolution Gaming) receive only the minimum data necessary (session token, wager amount, game result) to operate games on the 77haha Platform.
• Identity verification and KYC providers: Third-party services used to verify your identity documents as part of the KYC process. These providers process document data under strict contractual obligations with 77haha.
• Regulatory and law enforcement authorities: 77haha will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other Philippine law enforcement agencies when required by law, regulation, or valid legal process.
• Technology and infrastructure providers: Cloud hosting, cybersecurity, analytics, and customer support technology providers who process data on 77haha's behalf under data processing agreements that impose the same privacy standards as this Policy.

All third parties with whom 77haha shares personal data are required to maintain appropriate technical and organisational security measures and to use the data only for the purposes for which it was shared.

Some of 77haha's service providers and game content partners are located outside the Philippines. Where personal data is transferred to a country that the NPC has not determined provides an adequate level of data protection, 77haha relies on appropriate safeguards — including contractual clauses approved by the NPC, or binding corporate rules — to ensure that your data remains protected in accordance with RA 10173.

77haha endeavours to minimise cross-border data transfers by preferring Philippine-based service providers where practicable. Any international transfer of 77haha player data is conducted on a need-to-process basis only, and the transferred data is limited to the minimum necessary for the specific purpose of the transfer.

77haha retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulation.

• Account data and gaming records: Retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with AMLA record-keeping requirements and PAGCOR regulatory obligations.
• KYC documents: Retained for a minimum of 5 years from the date of submission, as required by AMLA regulations.
• Financial transaction records: Retained for a minimum of 10 years from the date of the transaction, in compliance with applicable Philippine financial record-keeping requirements.
• Support communications: Retained for 2 years from the date of the last communication, or longer if the communication is relevant to an unresolved dispute.
• Marketing preference data: Retained until you withdraw consent or close your account, whichever is earlier.

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with you.

77haha implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• SSL/TLS encryption: All data transmitted between your browser and the 77haha Platform is encrypted using industry-standard 256-bit SSL/TLS technology. Connections via an unencrypted protocol are automatically redirected to HTTPS.
• Password security: Account passwords are never stored in plain text. 77haha uses modern, one-way cryptographic hashing algorithms with unique salts to store password credentials.
• Two-factor authentication (2FA): An additional OTP verification step is required for account logins from new devices or locations, adding a second layer of protection beyond the password.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. 77haha staff are granted only the minimum access rights required to perform their job functions.
• Regular security assessments: The 77haha Platform undergoes regular security reviews, vulnerability assessments, and penetration testing.
• Incident response: 77haha maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to affected individuals, 77haha will notify the National Privacy Commission and affected players within the timeframes required by RA 10173.

77haha uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device by the 77haha Platform when you visit. Cookies do not contain executable code and cannot access other files on your device.

77haha uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Performance and analytics cookies: Collect aggregated, anonymised data about how players use the Platform (pages visited, session duration, error events) to help 77haha improve the experience. Used only with your consent.
• Functional cookies: Remember your preferences (language, game lobby view, responsible gaming settings) to provide a more personalised experience.
• Fraud prevention cookies: Used to detect irregular or suspicious device behaviour patterns that may indicate fraud or unauthorised access attempts.

You may control cookie preferences through your browser settings. Note that disabling all cookies may affect the functionality of the 77haha Platform. For detailed cookie information and to manage your preferences, refer to the cookie consent tool presented on your first visit to the Platform.

The 77haha Platform is strictly intended for adults aged 21 years and above, in accordance with PAGCOR regulations. 77haha does not knowingly collect personal data from any individual below the age of 21, and certainly not from children.

Age verification is conducted during the registration process and is confirmed through KYC document verification before withdrawal privileges are activated. Any account found to belong to a person under 21 years of age will be immediately closed, all activity on that account will be voided, and any deposited funds may be returned to the source payment method following investigation.

Parents and guardians are advised to monitor their children's internet use and to ensure that minors do not access or attempt to access the 77haha Platform. If you become aware that a minor has created a 77haha account, please contact our support team immediately so that we can take appropriate action.

To exercise any of your rights under RA 10173 as described in this Policy, you may submit a written request to the 77haha Data Protection Officer. Requests may be submitted by:

• Email to the DPO at: [email protected] — please include "Data Privacy Request" in the subject line.
• Through the 77haha live chat support channel — a formal written request may then be required for record-keeping purposes.

77haha may require you to verify your identity before processing a data subject request, to ensure that we are not disclosing or deleting data at the request of an unauthorised party. We will not charge a fee for processing data subject requests except where requests are manifestly unfounded or excessive.

Response timeframes: 77haha will acknowledge receipt within 5 business days and provide a substantive response within 30 calendar days of receiving a valid, verified request. Where the complexity or volume of requests requires additional time, we will notify you and provide a revised estimated response date.

If you are not satisfied with 77haha's response to a privacy inquiry or request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

77haha reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law and regulations, or the operational requirements of the Platform. The most current version of this Policy is always available at 77haha.net/privacy-policy.

For material changes that significantly affect how we process your personal data, 77haha will notify registered players via their registered contact details or through a prominent notice on the Platform, giving reasonable advance notice before the changes take effect.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the 77haha Platform after any update to this Policy constitutes your acknowledgement of the revised practices described herein.

For all privacy-related inquiries, data subject requests, or concerns regarding the handling of your personal data by 77haha, please contact the Data Protection Officer (DPO). Email addresses below are provided as plain text only and are not clickable links.

For concerns relating to responsible gaming, data processing in connection with self-exclusion, or account closure, please also refer to the 77haha Responsible Gaming page for additional guidance and tools.

Players who wish to exercise their rights under RA 10173 or who have complaints regarding 77haha's data handling practices may also contact the National Privacy Commission (NPC) of the Philippines directly, which is the supervisory authority responsible for data protection in the Philippines.