cg77 Privacy Policy

Scope & Data Controller

This Privacy Policy applies to all personal information collected, processed, stored, and used by cg77 in connection with the operation of the cg77 online gaming platform accessible at cg77.one (the "Platform"), including all associated services, games, payment features, customer support channels, and promotional activities.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, cg77 is the Personal Information Controller with respect to all personal data described in this Policy. cg77 determines the purposes and means of processing your personal information and is accountable for ensuring that such processing is carried out in a lawful, fair, and transparent manner.

This Policy governs the personal information of:

• Registered cg77 players with active or inactive Accounts
• Visitors to cg77.one who have not yet registered
• Individuals who contact cg77 support through any channel
• Any person whose personal information is submitted to cg77 in connection with KYC verification or payment processing

This Policy does not cover third-party websites or services linked from the Platform. cg77 is not responsible for the privacy practices of third parties, including payment providers such as GCash, PayMaya, BPI, BDO, or Metrobank, or game content providers. You should review the privacy policies of those third parties directly.

Categories of Personal Data We Collect

cg77 collects the following categories of personal data in connection with your use of the Platform:

cg77 does not collect sensitive personal information such as racial or ethnic origin, religious beliefs, health data, or sexual orientation, unless such data is incidentally included in documents submitted for KYC purposes, in which case it is not processed or retained beyond identity verification requirements.

How We Collect Your Personal Data

cg77 collects personal data through the following methods:

• Direct Submission: Information you provide when creating an Account, completing KYC verification, making a deposit or withdrawal request, contacting support, or responding to a survey or promotion.
• Automated Collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser type, operating system, session timestamps, and navigation paths. This data is collected via server logs, cookies, and similar tracking technologies.
• Transaction Records: Data generated through your gaming activity, including bet placement, game outcomes, deposit and withdrawal transactions, and bonus redemptions. These records are created as a natural consequence of Platform use and are required for operational and regulatory purposes.
• Identity Verification Services: Where cg77 uses a third-party identity verification provider to assist with KYC processing, personal data submitted for verification may be processed by that provider on cg77's instructions as a Personal Information Processor.
• Payment Processors: cg77 receives limited transaction confirmation data from GCash, PayMaya, and banking partners to reconcile your deposit and withdrawal records. cg77 does not store full payment credentials; these are handled directly by the respective payment provider.

Purposes of Processing & Legal Basis

cg77 processes your personal data for the following specific purposes, each grounded in a lawful basis under the Data Privacy Act of 2012:

Where cg77 relies on your consent as the legal basis for processing (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent for marketing will not affect your ability to use the Platform.

Cookies & Tracking Technologies

cg77 uses cookies and similar tracking technologies to operate the Platform, maintain your session state, detect fraud, and analyze Platform usage. The following types of cookies may be set when you access cg77.one:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without preventing Platform access.
• Functional Cookies: Remember your preferences, such as language settings, preferred game categories, and display configurations. These improve your experience but are not essential to Platform operation.
• Analytical Cookies: Collect anonymised or aggregated data about how players interact with the Platform, including page visit patterns, feature usage rates, and session duration. This data is used to identify areas for improvement. cg77 uses self-hosted analytics solutions where possible to minimize third-party data exposure.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot traffic, multi-account attempts, and unusual session behavior.

You may configure your browser to block or delete cookies at any time. Note that blocking strictly necessary cookies will prevent you from logging in to your cg77 Account. cg77 does not currently use third-party advertising or behavioral retargeting cookies.

Data Sharing & Disclosure

cg77 does not sell your personal data to third parties. cg77 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to binding confidentiality and data protection obligations:

• PAGCOR and Regulatory Authorities: As a licensed Philippine online gaming operator, cg77 is legally required to provide player account data, transaction records, and gaming activity reports to PAGCOR and other competent Philippine government authorities upon lawful request or as part of routine regulatory reporting.
• Anti-Money Laundering Council (AMLC): cg77 is required to report covered and suspicious transactions to the AMLC as mandated by the Anti-Money Laundering Act (RA 9160, as amended). This may include personal data and transaction records of the relevant account holder.
• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank receive the minimum personal data required to process your deposit or withdrawal transactions. Each payment provider operates under its own privacy policy and applicable Philippine financial regulations.
• KYC & Identity Verification Providers: Third-party providers engaged by cg77 to assist with identity document verification act as Personal Information Processors under the Data Privacy Act, processing data solely on cg77's instructions.
• Game Content Providers: Providers such as JILI, Evolution Gaming, and Pragmatic Play may receive anonymised session identifiers and bet data to facilitate game delivery and dispute resolution. These providers do not receive your identity or financial data.
• Technical Service Providers: Cloud hosting, security monitoring, and platform infrastructure providers may have access to technical logs and encrypted data as part of service delivery, subject to contractual data processing agreements.
• Legal and Law Enforcement Authorities: Where required by a lawful court order, subpoena, or applicable Philippine law, cg77 may disclose personal data to law enforcement or judicial authorities.

International Data Transfers

cg77 primarily processes and stores personal data within the Philippines. Where data is processed by third-party service providers operating outside the Philippines — for example, international game content providers or global cloud infrastructure providers — cg77 ensures that appropriate safeguards are in place to protect your data in transit and at rest.

Such safeguards may include:

• Contractual clauses requiring the overseas processor to apply data protection standards substantially equivalent to those required under RA 10173
• Processing only in jurisdictions recognized by the National Privacy Commission as providing an adequate level of data protection
• Encryption of all data transferred internationally using industry-standard TLS/SSL protocols

Where cg77 transfers your personal data internationally, it does so only to the extent necessary to deliver the services you have requested, and such transfers are always subject to the purposes and limitations described in this Policy.

Data Retention

cg77 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account and KYC Data: Retained for the duration of your Account plus a minimum of 5 years following Account closure, as required by PAGCOR licensing conditions and AMLA record-keeping obligations.
• Transaction and Gaming Records: Retained for a minimum of 5 years from the date of each transaction, in compliance with AMLA and PAGCOR reporting requirements.
• Support and Communication Records: Retained for 3 years from the date of the last interaction, unless a longer period is required in connection with an unresolved complaint or legal proceeding.
• Technical and Log Data: Retained for up to 12 months for security and fraud detection purposes, after which they are anonymised or deleted.
• Marketing Preference Data: Retained until you withdraw your marketing consent, at which point your preference is updated immediately and marketing communications cease within one business day.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents recovery or re-identification. Where data cannot be immediately deleted due to backup cycles, it is isolated from active processing until the next scheduled deletion cycle.

Security Measures

cg77 implements a layered set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and cg77.one is protected by TLS 1.2 or higher encryption. Personal data stored in cg77's databases is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to systems containing personal data is restricted to authorized cg77 personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for administrative access.
• Network Security: cg77's infrastructure is protected by firewall systems, intrusion detection and prevention systems, and continuous security monitoring.
• Vulnerability Management: cg77 conducts regular security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential weaknesses in the Platform and underlying infrastructure.
• Incident Response: cg77 maintains a data breach response procedure that includes timely notification to affected individuals and the National Privacy Commission as required under Section 20(f) of RA 10173, where a breach is likely to result in a real risk of serious harm.
• Staff Training: All cg77 personnel with access to personal data receive regular training on data privacy obligations, security protocols, and responsible data handling practices.

Your Data Subject Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by cg77. To exercise any of these rights, contact cg77's Data Protection Officer at the details provided in Section 14.

Children, Minors & Age Verification

The cg77 Platform is strictly intended for individuals aged 21 years and above, as required by PAGCOR for all licensed Philippine online gaming platforms. cg77 does not knowingly collect personal data from individuals below the age of 21.

All registrants are required to declare their date of birth during Account creation and to submit a valid government-issued Philippine identification document confirming their age as part of the KYC verification process. Accounts where the registered player is found to be below 21 years of age will be immediately suspended, and all deposits will be returned to the source payment method after verification of the refund destination.

If cg77 becomes aware that personal data has been collected from an individual under the age of 21 without appropriate verification, it will take immediate steps to delete that data and close the associated Account. If you have reason to believe that a minor has registered an Account or that cg77 has inadvertently collected data from a minor, please contact [email protected] immediately.

Marketing Communications

cg77 may send you promotional communications about bonuses, new games, tournaments, and special offers. These communications are sent only to players who have provided explicit opt-in consent during Account registration or through Account Settings.

Marketing communications may be delivered via:

• Email to your registered email address
• SMS to your registered Philippine mobile number
• In-Platform notifications visible when you are logged in

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in your cg77 Account Settings
• Clicking the unsubscribe link included in any marketing email
• Contacting cg77 support via live chat or at [email protected]

Opting out of marketing communications will not affect your receipt of transactional communications, such as deposit confirmations, withdrawal notifications, security alerts, or mandatory regulatory notices, which are sent regardless of marketing preference.

cg77 will not send marketing communications to players who are subject to a self-exclusion order or active cool-off period, in accordance with PAGCOR responsible gaming requirements and cg77's own responsible gaming policy.

Updates to This Privacy Policy

cg77 may update this Privacy Policy from time to time to reflect changes in applicable Philippine law, PAGCOR regulatory requirements, National Privacy Commission guidance, the services offered on the Platform, or the technologies cg77 uses. The "Last Updated" date at the top of this document will always indicate when the current version became effective.

Where updates are material — for example, where new categories of personal data are collected, new sharing arrangements are introduced, or processing purposes change significantly — cg77 will notify registered players via email or through a prominent notice on the Platform at least 14 days before the changes take effect.

For minor updates such as clarifications, corrections, or administrative changes, cg77 may update this Policy without advance notice. Continued use of the Platform following any update constitutes acceptance of the revised Policy. If you do not agree to a revised Policy, you may request Account closure and cg77 will process your final withdrawal and close your Account.

Contact & Data Protection Officer

cg77 has designated a Data Protection Officer (DPO) as required under Section 21 of the Data Privacy Act of 2012. The DPO is responsible for overseeing cg77's compliance with RA 10173, handling data subject rights requests, and serving as the point of contact with the National Privacy Commission.

When submitting a data subject rights request, please provide your registered username or email address and a description of your request. cg77 may ask for additional verification to confirm your identity before processing the request, in order to protect your data from unauthorized disclosure.