plas77 Privacy Policy

plas77 is the Philippines' trusted online casino and sportsbook platform, providing Filipino players nationwide with access to live casino games, JILI slots, sports betting markets covering the PBA, NBA, UFC, and international leagues, as well as bingo and other gaming products. We are deeply committed to protecting the privacy and personal data of every player who uses our platform.

This Privacy Policy sets out in plain terms how plas77 collects, stores, uses, shares, and protects personal data belonging to our registered players, website visitors, and anyone who interacts with the plas77 platform in any capacity. This policy complies with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, as administered by the National Privacy Commission (NPC).

Throughout this document, references to "plas77", "we", "us", or "our" refer to the plas77 platform and its operators. References to "you", "your", or "player" refer to any individual who accesses or uses the plas77 website or its services. References to "personal data" have the meaning assigned to that term under the Data Privacy Act of 2012.

plas77 acts as the data controller in respect of all personal data collected through the plas77 platform. As data controller, plas77 determines the purposes and means by which your personal data is processed, and is responsible for ensuring that such processing is carried out in accordance with applicable Philippine data protection law.

If you have any questions about how plas77 processes your personal data, or if you wish to exercise any of your rights under this policy or the Data Privacy Act of 2012, you may contact our Data Protection Officer (DPO) using the contact details provided in Section 15 of this policy.

plas77 collects the minimum amount of personal data necessary to fulfil the purposes described in Section 5 of this policy. The categories of personal data we collect are as follows:

3.1 Registration Data

When you create a plas77 account, we collect your full legal name, date of birth, residential address (including barangay, city, province, and zip code), nationality, gender, email address, and a mobile phone number. This information is required to create and maintain your account, and to verify that you meet the minimum age requirement of 21 years for real-money gaming in the Philippines.

3.2 Identity Verification (KYC) Data

To comply with Philippine anti-money laundering regulations and PAGCOR-related guidelines, plas77 is required to verify your identity before processing withdrawals. For this purpose, we collect copies of government-issued Philippine identification documents — such as a PhilSys National ID, passport, driver's licence, SSS ID, UMID, or equivalent — together with a selfie photograph or liveness check as required by our verification provider.

3.3 Financial Data

When you make deposits or withdrawal requests, plas77 collects the details of the payment method you use. For GCash and PayMaya transactions, this includes your registered mobile number. For BPI, BDO, and Metrobank bank transfers, this includes your account name and account number. plas77 does not store full credit or debit card numbers on its servers.

3.4 Transaction & Gaming Data

plas77 maintains detailed records of all financial transactions conducted through your account, including deposit amounts, withdrawal requests, bet placements, game session data, bonus activations, and account balance history. This data is essential for the provision of our services, dispute resolution, and regulatory compliance.

3.5 Technical & Device Data

When you access the plas77 platform, our servers automatically collect certain technical information, including your IP address, device type and model, operating system, browser type and version, referring URL, pages visited, and session timestamps. This data is used primarily for security monitoring, fraud detection, and platform performance optimisation.

3.6 Communications Data

If you contact plas77 through our live chat, email support, or any other communication channel, we retain records of those communications — including the content of your messages and our responses — for quality assurance, training, and dispute resolution purposes.

plas77 collects personal data through the following channels and methods:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account profile settings.
• Automatically — when you access and use the plas77 platform, our systems automatically record technical and session data as described in Section 3.5 above.
• From payment service providers — GCash, PayMaya, BPI, BDO, and Metrobank may provide plas77 with transaction confirmation data necessary to credit or debit your plas77 wallet.
• From KYC verification providers — plas77 works with regulated third-party identity verification services that process your submitted ID documents and selfie data on our behalf.
• From fraud prevention services — plas77 uses specialised risk management services that may provide us with risk scores or flagging signals based on technical indicators associated with your device or session.

plas77 processes your personal data only for clearly defined and legitimate purposes. The table below sets out the primary purposes for which we process personal data, together with the legal basis that applies under the Data Privacy Act of 2012:

plas77 does not sell, rent, or trade your personal data to any third party under any circumstances. We may, however, share your personal data with the following categories of recipients where doing so is necessary and proportionate:

6.1 Payment Service Providers

To process your deposits and withdrawals in Philippine Peso, plas77 shares relevant transaction data with our licensed payment partners — including GCash, PayMaya, BPI, BDO, and Metrobank. These providers process your data strictly for the purpose of executing the requested transaction and are bound by their own applicable data protection obligations.

6.2 KYC and Identity Verification Providers

plas77 engages regulated third-party identity verification specialists to process your submitted KYC documents on our behalf. These providers act as data processors under our instruction and are contractually required to process your data only for the purpose of verifying your identity for plas77.

6.3 Fraud Prevention and Security Services

To protect the plas77 platform and its players from fraud, money laundering, and other malicious activity, plas77 may share limited technical and account data with specialised risk management providers. Information shared for this purpose is kept to the minimum necessary for effective fraud detection.

6.4 Regulatory and Legal Authorities

plas77 may be required to disclose personal data to the National Privacy Commission, PAGCOR, the Anti-Money Laundering Council (AMLC), or other competent Philippine authorities when required to do so by law, court order, or lawful regulatory request. plas77 will notify you of any such disclosure where legally permitted to do so.

6.5 Corporate Transactions

In the event of a merger, acquisition, or transfer of the plas77 business, your personal data may be transferred to the acquiring entity as part of that transaction. In such cases, plas77 will ensure that the receiving entity commits to protecting your data under terms no less protective than this Privacy Policy.

Where plas77 transfers personal data outside of the Philippines — for example, to KYC verification or fraud prevention service providers whose infrastructure may be hosted in other countries — such transfers are carried out only where adequate safeguards are in place to protect your data to a standard equivalent to that required under the Philippine Data Privacy Act of 2012.

Such safeguards may include contractual clauses approved by the National Privacy Commission, adequacy decisions applicable to the recipient country, or binding corporate rules where the recipient is part of a regulated group of companies. Where none of these safeguards apply, plas77 will seek your explicit consent before any international transfer of your personal data takes place.

plas77 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and registration data — retained for the duration of your active account and for a minimum of five years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC and identity verification documents — retained for a minimum of five years from the date of verification, or longer if required by a specific regulatory request.
• Financial transaction records — retained for a minimum of five years from the date of each transaction, consistent with AMLC reporting obligations.
• Customer support communications — retained for three years from the date of the relevant interaction, unless the communication relates to an ongoing dispute or regulatory matter.
• Technical and device data (logs) — retained for a rolling period of 12 months for security and fraud investigation purposes.
• Marketing consent records — retained for the duration of your consent and for three years following withdrawal of consent, to maintain evidence of your preferences.

When personal data is no longer required for any lawful purpose, plas77 will securely delete or anonymise it in a manner that prevents recovery or reconstruction.

plas77 uses cookies and similar lightweight tracking technologies on its platform. A cookie is a small text file placed on your device by your web browser when you visit the plas77 website. Cookies help us deliver a functioning, personalised, and secure experience for our Filipino players.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the platform to function. They maintain your login session, remember your language preference, and ensure that the platform loads and operates correctly. These cookies cannot be disabled without affecting core platform functionality.
• Performance & Analytics Cookies: These cookies help plas77 understand how players use the platform — which pages are visited most frequently, where errors occur, and how navigation flows are used. This data is aggregated and anonymised. It is used solely to improve the plas77 platform experience.
• Functional Cookies: These cookies remember your preferences — such as your preferred payment method or your account dashboard layout — so that you do not need to reconfigure them on every visit.

9.2 Cookies We Do Not Use

plas77 does not use third-party advertising cookies, social media tracking pixels, cross-site behavioural tracking technologies, or any cookies designed to build a profile of your browsing activity across websites other than plas77.net.

9.3 Managing Cookies

You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use the plas77 platform, including the ability to maintain a logged-in session. Your browser's help documentation will guide you on how to manage cookie preferences for your specific browser and device.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights in relation to your personal data held by plas77. These rights may be exercised at any time by contacting our support team or Data Protection Officer using the details in Section 15:

• Right to be Informed: You have the right to know whether plas77 holds personal data about you, and to receive clear information about how that data is being used — which this Privacy Policy fulfils.
• Right to Access: You have the right to request a copy of the personal data that plas77 holds about you, together with information about how it is being processed. Requests will be fulfilled within 15 business days.
• Right to Rectification: If any personal data plas77 holds about you is inaccurate, incomplete, or outdated, you have the right to request that it be corrected without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to plas77's legal obligations to retain certain data for regulatory purposes.
• Right to Data Portability: You have the right to request that plas77 provide your personal data in a structured, commonly used, and machine-readable format so that you may transfer it to another service provider where technically feasible.
• Right to Object: You have the right to object to plas77's processing of your personal data where such processing is based on our legitimate interests, including profiling for fraud prevention or platform analytics.
• Right to Lodge a Complaint: If you believe that plas77 has handled your personal data in violation of the Data Privacy Act of 2012, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines.

plas77 may send you promotional communications — including information about new games, upcoming promotions, deposit bonuses, and platform updates — only where you have provided your explicit consent to receive such communications during registration or through your account settings.

You may withdraw your marketing consent at any time using any of the following methods:

• Updating your communication preferences from within your plas77 account dashboard under the Notifications section.
• Clicking the unsubscribe link included in any promotional email sent by plas77.
• Contacting our support team via live chat or email and requesting removal from all marketing lists.

Please note that withdrawing your marketing consent will not affect your ability to receive transactional communications related to your account — such as deposit confirmations, withdrawal notifications, security alerts, and KYC verification requests — as these are necessary for the operation of your account and are not subject to marketing consent.

plas77 does not purchase marketing lists or send unsolicited bulk email. If you receive a communication purporting to be from plas77 that you did not consent to, please report it to our support team immediately.

plas77 employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• TLS Encryption: All data transmitted between your device and the plas77 platform is encrypted using Transport Layer Security (TLS 1.2 or higher), ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encryption at Rest: Sensitive personal data stored in plas77's databases — including KYC documents and financial information — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to player personal data within plas77's internal systems is restricted to authorised personnel on a strictly need-to-know basis. All internal access is logged and subject to regular audit.
• Intrusion Detection: plas77 operates 24/7 security monitoring systems to detect and respond to unauthorised access attempts, abnormal data access patterns, and other potential security incidents in real time.
• Regular Security Reviews: plas77 conducts periodic security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential weaknesses in our infrastructure.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, plas77 will notify you and the National Privacy Commission of the Philippines in accordance with the breach notification requirements of the Data Privacy Act of 2012 — without undue delay and, where feasible, within 72 hours of becoming aware of the breach.

The plas77 platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine gaming regulations. plas77 does not knowingly collect personal data from individuals under the age of 21, and we have no intention of doing so.

plas77 enforces mandatory age verification as part of the KYC process before any real-money gaming activity or withdrawal is permitted. Where plas77 becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account, delete the collected data as far as legally permissible, and take appropriate action in accordance with applicable law.

If you are a parent or guardian and believe that your child under 21 years of age may have registered a plas77 account, please contact our support team immediately at [email protected] so that we can investigate and take prompt action.

plas77 reserves the right to update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable Philippine law, or updates to our platform's features and services. The effective date displayed at the top of this document indicates when the current version came into force.

Where changes to this Privacy Policy are material — such as introducing a new purpose for processing your data, changing the categories of third parties with whom your data is shared, or altering your rights — plas77 will notify registered players via email to the address associated with their account, and via a prominent notice on the plas77 platform, at least 7 calendar days before the changes take effect.

Your continued use of the plas77 platform after any update to this Privacy Policy takes effect constitutes your acknowledgement of the revised policy. If you do not accept the revised terms, you must discontinue use of the platform and may request account closure in accordance with the procedure described in our Terms & Conditions.

All previous versions of this Privacy Policy are archived and available upon request from our Data Protection Officer.

If you have any questions, concerns, or requests relating to this Privacy Policy or to how plas77 processes your personal data, please contact our team using the details below. We are committed to responding to all privacy-related enqu iries promptly and transparently.

If you are not satisfied with plas77's response to your privacy enquiry, you have the right to escalate your complaint directly to the National Privacy Commission of the Philippines:

• National Privacy Commission (NPC) — the independent Philippine government body responsible for administering and enforcing the Data Privacy Act of 2012.
• NPC complaints may be submitted through the official NPC website or by visiting their offices at 5th Floor, Delegation Building, PICC Complex, Pasay City, Metro Manila.

plas77 cooperates fully with the National Privacy Commission and takes all regulatory correspondence seriously. We are committed to resolving any data privacy concerns raised by our Filipino players as efficiently and fairly as possible.