plu77 Privacy Policy

1 Introduction

plu77 ("plu77," "we," "us," "our") operates the online gaming platform accessible at plu77.net (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who interact with the Platform, including registered players, prospective players, and visitors.

This Privacy Policy ("Policy") describes how plu77 collects, uses, stores, shares, and protects personal data in connection with your use of the Platform. It also describes the rights you have over your personal data and how you can exercise those rights.

By registering a plu77 account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

This Policy should be read alongside plu77's Terms & Conditions, which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, plu77 is the personal information controller responsible for the personal data collected through the Platform.

If you have any questions, concerns, or requests relating to this Policy or the processing of your personal data, you may contact our Data Protection Officer (DPO) at the contact details provided in Section 13 of this Policy.

3 Data We Collect

plu77 collects personal data through several channels, including account registration, identity verification, payment processing, Platform usage, and customer support interactions. The categories of personal data we collect are described below.

3.1 Registration Data

When you create a plu77 account, we collect the following information:

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Residential address (including barangay, city/municipality, province)
• Email address
• Mobile phone number
• Username and encrypted password

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering regulations and PAGCOR requirements, plu77 may collect:

• Government-issued identification documents (e.g., Philippine passport, SSS ID, UMID, driver's license, PhilSys National ID)
• Proof of address documents (e.g., utility bills, bank statements)
• Proof of payment method ownership
• Selfie or facial image for identity matching purposes

3.3 Financial Data

When you make deposits or request withdrawals, we collect transaction-related data including payment method identifiers (e.g., GCash mobile number, bank account details), transaction amounts in PHP, transaction timestamps, and transaction reference numbers. plu77 does not store full payment card numbers or full bank account numbers on its servers.

3.4 Usage and Technical Data

plu77 automatically collects certain technical data when you access the Platform:

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration and login timestamps
• Pages visited, games played, and betting history
• Clickstream data and Platform interaction logs

3.5 Communications Data

When you contact plu77 customer support via live chat or email, we retain records of those communications, including the content of messages, timestamps, and the resolution of any issues raised. This data is used for quality assurance, dispute resolution, and regulatory compliance purposes.

4 How We Use Your Data

plu77 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your plu77 account, including processing your registration, verifying your identity, and managing your account settings.
• Age Verification: To confirm that you are at least 21 years of age before permitting access to gaming features, as required under Philippine gaming regulations.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported Philippine payment channels.
• Regulatory Compliance: To comply with our obligations under applicable Philippine laws, including the Anti-Money Laundering Act (AMLA), PAGCOR regulations, and the Data Privacy Act of 2012.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other security threats to the Platform.
• Responsible Gaming: To monitor gaming patterns and identify players who may be exhibiting signs of problem gambling, and to administer self-exclusion and deposit limit requests.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the features, performance, and user experience of the plu77 Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about plu77 — but only where you have provided your consent to receive such communications. You may withdraw this consent at any time.

5 Legal Basis for Processing

plu77 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your plu77 account, process transactions, and provide gaming services.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including AMLA reporting obligations, PAGCOR licensing requirements, and tax regulations.
• Legitimate Interests: Processing is necessary for plu77's legitimate interests in preventing fraud, ensuring Platform security, and improving our services, provided those interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and certain non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Disclosure

plu77 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

6.1 Service Providers

plu77 engages trusted third-party service providers to assist in operating the Platform. These include payment processors (for GCash, PayMaya, BPI, BDO, and Metrobank transactions), identity verification providers, cloud hosting providers, and customer support platform operators. All service providers are contractually bound to process your data only on plu77's instructions and in accordance with applicable data protection laws.

6.2 Regulatory and Law Enforcement Authorities

plu77 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or other competent Philippine government authorities where required by law, court order, or regulatory directive. plu77 will notify affected players of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of plu77's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to your data being transferred.

6.4 Game Providers

Certain game providers whose titles are available on the plu77 Platform may receive limited technical data (such as a pseudonymous player identifier and session token) necessary to deliver the game experience. These providers do not receive your full name, contact details, or financial information.

7 Cookies & Tracking Technologies

plu77 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming limits you have set.
• Analytics Cookies: Help us understand how players use the Platform, which pages are most visited, and where technical issues occur. This data is aggregated and anonymized.
• Marketing Cookies: Used only with your consent to deliver relevant promotional content. You may opt out of marketing cookies at any time via your account settings.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the plu77 Platform.

8 Data Retention

plu77 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law:

• Account and KYC Data: Retained for a minimum of 5 years from the date of account closure, as required by AMLA and PAGCOR regulations.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Communications Data: Retained for 2 years from the date of the communication, unless required for longer in connection with an ongoing dispute or regulatory investigation.
• Marketing Consent Records: Retained for the duration of your account and for 1 year following account closure or withdrawal of consent.

Upon expiry of the applicable retention period, plu77 will securely delete or anonymize your personal data in accordance with our data destruction procedures.

9 Data Security

plu77 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the plu77 Platform;
• Encryption of sensitive data at rest, including KYC documents and financial records;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security audits and penetration testing of the Platform infrastructure;
• Multi-factor authentication requirements for administrative access to data systems;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

While plu77 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for keeping your plu77 login credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.

10 Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by plu77:

• Right to be Informed: The right to know what personal data plu77 collects about you and how it is processed — which is the purpose of this Policy.
• Right of Access: The right to request a copy of the personal data plu77 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to plu77's legal retention obligations under AMLA and PAGCOR regulations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact plu77's Data Protection Officer using the contact details in Section 13. plu77 will respond to all verified data subject requests within 15 business days of receipt. We may require you to verify your identity before processing your request.

11 Children's Privacy

The plu77 Platform is strictly intended for persons who are 21 years of age or older. plu77 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the personal data, and take appropriate action in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to plu77, please contact us immediately at the details provided in Section 13 so that we can take prompt action.

12 Changes to This Policy

plu77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, plu77 will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the plu77 Platform following the publication of a revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how plu77 protects your personal data.

13 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by plu77, please contact our Data Protection Officer:

• Live Chat: Available 24/7 via the plu77 Platform — the fastest way to reach us
• Email: [email protected]

plu77 aims to acknowledge all data privacy requests within 3 business days and to resolve them within 15 business days. For complex requests, we will keep you informed of progress throughout the process.

If you are not satisfied with plu77's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.