Privacy Policy

1. Introduction

77spins ("we," "us," or "our") is committed to protecting the privacy and personal data of every Filipino player who accesses our platform at https://77spins.org. This Privacy Policy describes in detail how 77spins collects, uses, stores, shares, and protects personal information in connection with your use of our online casino and sports betting services.

This Privacy Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. It also reflects the data handling requirements imposed on licensed gaming operators by the Philippine Amusement and Gaming Corporation (PAGCOR).

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement governing your use of 77spins.

2. Personal Data We Collect

77spins collects only the personal data that is necessary and proportionate to the purposes for which it is processed. The categories of personal data we collect are outlined in the table below:

We do not intentionally collect sensitive personal information — such as religious beliefs, political affiliation, or health data — unless it is voluntarily provided by you in the context of a responsible gaming self-exclusion request or a similar welfare-related interaction.

3. How We Collect Your Data

77spins collects personal data through the following channels and mechanisms:

• Direct Registration: When you create a 77spins Account, you provide identity, contact, and security information directly through our registration form.
• KYC Document Submission: When we request identity verification, you submit copies of government-issued identification documents (such as a Philippine passport, SSS ID, PhilHealth card, Voter's ID, or driver's licence).
• Deposit and Withdrawal Transactions: When you fund your account via GCash, Maya, BPI, BDO, Metrobank, or other supported payment channels, financial data is exchanged and recorded in accordance with PAGCOR and AMLC requirements.
• Platform Usage: As you use the 77spins platform — playing games, placing sports bets, accessing promotions — our systems automatically record gameplay data, session information, and technical data.
• Customer Support Interactions: When you contact our support team via live chat or email, your communication is logged for service quality and legal compliance purposes.
• Cookies and Tracking Technologies: Our website uses cookies and similar technologies as described in Section 7 of this Privacy Policy.
• Third-Party Verification Services: We may receive supplementary identity or fraud-risk data from third-party KYC and AML screening providers engaged by 77spins to meet our regulatory obligations.

4. How We Use Your Personal Data

77spins uses the personal data we collect for the following specific and legitimate purposes:

• Account Management: To create, maintain, and secure your 77spins Account, including verifying your identity and age (21+ requirement) and processing login authentication.
• Service Delivery: To provide access to our full range of gaming products — including slots, live casino, sports betting, sabong, bingo, rummy, and fishing games — and to process your wagers and calculate winnings accurately.
• Financial Processing: To process deposits via GCash, Maya, and Philippine bank transfers, and to process withdrawal requests to your verified payment accounts.
• Regulatory Compliance: To fulfil our legal obligations under PAGCOR licensing conditions, the Data Privacy Act of 2012, Republic Act No. 9160 (Anti-Money Laundering Act), and all related regulations. This includes maintaining transaction records, filing mandatory reports, and cooperating with regulatory investigations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other prohibited conduct that could harm you or the integrity of the 77spins platform.
• Customer Support: To respond to your queries, resolve disputes, and provide technical assistance through our 24/7 live chat and email support channels.
• Responsible Gaming: To monitor your gameplay patterns for indicators of problem gambling, enforce self-imposed deposit limits and self-exclusion requests, and fulfil our duty of care obligations under PAGCOR responsible gaming requirements.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving our platform's performance, user experience, and game offerings.
• Marketing Communications: To send you promotional emails, bonus notifications, and platform updates — but only if you have provided your consent to receive such communications. You may withdraw this consent at any time by contacting our support team or using the unsubscribe option in our emails.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, 77spins processes your personal data on one or more of the following lawful bases:

• Consent: Where you have given clear and informed consent to the processing of your personal data for a specific purpose, such as receiving marketing communications or providing sensitive personal information in the context of responsible gaming support.
• Contractual Necessity: Where processing is necessary for the performance of our contract with you — i.e., the Terms & Conditions you accepted upon registering your 77spins Account. This covers account management, gameplay, and financial transaction processing.
• Legal Obligation: Where processing is required to comply with a legal or regulatory obligation to which 77spins is subject, including KYC verification, AML record-keeping, PAGCOR reporting, and cooperation with law enforcement authorities.
• Legitimate Interests: Where processing is necessary for the legitimate interests pursued by 77spins — such as fraud detection, platform security, and service improvement — provided that such interests are not overridden by your privacy rights and freedoms.

Where we rely on your consent as the lawful basis for processing, you retain the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to the withdrawal.

6. Sharing of Personal Data

77spins does not sell or rent your personal data to third parties. We may, however, share your data with the following categories of recipients where it is necessary and lawful to do so:

• PAGCOR and Regulatory Authorities: As a PAGCOR-regulated gaming platform, 77spins is required to submit player data, transaction records, and compliance reports as directed by PAGCOR and other competent Philippine regulatory bodies.
• Anti-Money Laundering Council (AMLC): 77spins is obligated to report covered transactions and suspicious transactions to the AMLC in accordance with Republic Act No. 9160, as amended, and applicable AMLC regulations.
• Law Enforcement and Courts: We may disclose personal data to Philippine law enforcement authorities, courts, or other competent government agencies when required by a valid legal order, subpoena, warrant, or similar legal process.
• Payment Service Providers: We share necessary financial data with payment processors — including GCash, Maya, BPI, BDO, Metrobank, and other partner institutions — for the sole purpose of processing your deposits and withdrawals.
• Identity Verification and KYC Providers: We engage reputable third-party KYC and identity verification service providers to assist with our age verification (21+) and anti-fraud obligations. These providers are contractually bound to handle your data securely and in compliance with Philippine privacy law.
• Technology and Infrastructure Partners: Our platform relies on technology service providers — including cloud hosting, cybersecurity, and customer support software vendors — who may process personal data on our behalf as data processors. All such providers are engaged under data processing agreements that impose equivalent data protection standards.
• Game Content Providers: Some game providers integrated into the 77spins platform may receive limited technical data (such as player session tokens) necessary for the operation of their games. This does not include personally identifiable information beyond what is technically required.

7. Cookies and Tracking Technologies

77spins uses cookies and similar technologies on our website and mobile platform to enhance your experience, maintain session security, and gather anonymised analytics data. The types of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the operation of the 77spins platform. They enable core functions such as secure login, session management, and fraud prevention. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, display settings, and saved payment methods — to provide a more personalised experience on 77spins.
• Analytics Cookies: We use anonymised analytics tools to understand how players interact with the 77spins platform, which pages are visited most, and where technical issues may arise. This data is aggregated and does not identify individual players.
• Security Cookies: These cookies assist our fraud detection and security systems in identifying unusual login behaviour, suspicious betting patterns, or potential account compromise.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the 77spins platform. We do not use third-party advertising cookies or tracking pixels for behavioural advertising purposes.

8. Data Retention

77spins retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR licensing conditions. Our key retention periods are as follows:

• Active Account Data: Retained for the full duration of your active account relationship with 77spins, plus an additional five (5) years following account closure, in accordance with PAGCOR record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years following the end of the business relationship, in line with AML obligations under Republic Act No. 9160.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the AMLC and PAGCOR.
• Customer Support Communications: Retained for two (2) years following resolution of the relevant support interaction, to facilitate dispute resolution and quality assurance.
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, to demonstrate compliance with the Data Privacy Act.
• Technical and Security Logs: Retained for ninety (90) days for standard operational logs, and up to two (2) years for logs related to security incidents or fraud investigations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard methods. Where anonymisation is not technically feasible, data is destroyed in a manner that prevents reconstruction.

9. Data Security Measures

77spins employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the 77spins platform is encrypted using current SSL/TLS standards, ensuring that your login credentials, financial details, and personal information cannot be intercepted in transit.
• Password Hashing: Player passwords are stored exclusively as salted cryptographic hashes. 77spins employees cannot view your password in plain text, and it is never stored in an unencrypted form.
• Two-Factor Authentication (2FA): 77spins offers two-factor authentication for all player accounts and strongly recommends its use to add an extra layer of login security.
• Access Controls: Access to personal data within 77spins is strictly limited to authorised personnel who require it to perform their job functions. All internal access is logged and subject to regular audit.
• Regular Security Testing: Our platform undergoes regular vulnerability assessments and penetration testing conducted by qualified security professionals to identify and remediate potential weaknesses.
• Secure Data Centres: Player data is hosted in secure, access-controlled data centres with physical security measures, redundant power supplies, and environmental controls.
• Incident Response Plan: 77spins maintains a documented data breach incident response plan. In the event of a security incident affecting your personal data, we will notify you and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular requirements.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 77spins. These rights may be exercised by contacting our Data Protection Officer (DPO) using the details in Section 14:

To exercise any of the rights listed above, please submit a written request to our Data Protection Officer at support@77spins.org with the subject line "Data Privacy Request." We will acknowledge your request within three (3 ) business days and fulfil it within thirty (30) days, as required by the Data Privacy Act of 2012.

11. Children's Privacy and Age Restrictions

77spins is an online gaming and sports betting platform intended exclusively for adults. In accordance with Philippine law and PAGCOR regulations, access to and participation in any real-money gaming activity on 77spins is strictly restricted to individuals who are at least twenty-one (21) years of age.

We do not knowingly collect, process, or retain personal data from individuals under the age of 21. All new registrations on 77spins are subject to age verification procedures as part of our KYC process. If we become aware that a player under the age of 21 has registered an Account or provided personal data, we will immediately suspend the Account, void any associated transactions, and securely delete the relevant personal data.

12. Third-Party Links and Integrations

The 77spins platform may contain references or integrations with third-party game content providers and payment processing services. While we carefully vet all third-party partners, this Privacy Policy applies exclusively to personal data processed by 77spins in connection with the 77spins platform.

Third-party service providers — such as game developers and payment processors — operate their own data processing environments and are governed by their own privacy policies. 77spins is not responsible for the privacy practices of any third-party service whose interface you may access through our platform. We encourage you to review the relevant privacy policy of any third party before sharing personal data with them directly.

We do not embed third-party advertising networks, social media tracking pixels, or external marketing tools that would allow third parties to collect your personal data through the 77spins platform without your knowledge.

13. Amendments to This Privacy Policy

77spins reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable Philippine law, PAGCOR regulatory requirements, or our data processing practices. When we make material changes to this Privacy Policy, we will:

• Post the updated Privacy Policy on this page with a revised effective date;
• Send a notification to your registered email address summarising the key changes; and
• Display a prominent notice on the 77spins platform for a reasonable period following the update.

Your continued use of the 77spins platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment to this Privacy Policy, you must discontinue your use of the platform and may request closure of your Account.

We encourage you to review this Privacy Policy periodically to stay informed about how 77spins protects your personal data. The effective date at the top of this page indicates when the current version was last updated.

14. Contact Us and Data Protection Officer

77spins has designated a Data Protection Officer (DPO) responsible for overseeing our compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests related to your personal data or this Privacy Policy, please contact our DPO using the details below:

All data privacy requests must be submitted in writing, either by email to the address above or by written letter addressed to our registered office. For identity verification purposes, please include your registered email address and Account username in your request. We may request additional proof of identity before processing access or deletion requests to prevent unauthorised disclosure of your data.

If you are not satisfied with our response to your data privacy request, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which has jurisdiction over data privacy matters under Republic Act No. 10173.