Identity, contact details, financial data, and usage information.
To operate the platform, comply with PAGCOR and AML law, and improve your experience.
Regulated service providers, PAGCOR, and law enforcement when legally required.
SSL encryption, access controls, secure data storage, and regular security audits.
Access, correction, deletion, and portability rights under the Data Privacy Act of 2012.
Data retained for a minimum of 5 years as required by PAGCOR and AML regulations.
Your privacy is important to fil77. This Privacy Policy ("Policy") describes how fil77 ("fil77," "we," "us," "our"), operator of the online gambling platform at fil77.co, collects, processes, stores, and discloses personal information about registered players and website visitors ("you," "your"). This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines. By accessing or using the fil77 Platform, you consent to the practices described in this Policy.
This Policy applies to all personal information collected through the fil77.co website, its mobile browser interface, and all related services, features, and functionalities (collectively, the "Platform"). It covers personal data collected from registered account holders, unregistered visitors, applicants for the fil77 affiliate programme, and anyone else who interacts with the fil77 Platform.
fil77 operates as a personal information controller as defined under the Data Privacy Act of 2012. This means we are responsible for determining the purposes and means of processing personal data within our Platform, and we are accountable for compliance with all applicable data protection obligations under Philippine law.
This Policy should be read alongside the fil77 Terms & Conditions, which govern your use of the Platform as a whole. Where this Policy refers to fil77's legal obligations under PAGCOR licensing, those obligations include requirements under the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended) and related PAGCOR circulars mandating the collection and retention of player identity and transaction data.
The personal information controller responsible for your data is the operator of the fil77 platform, operating under a valid PAGCOR online gaming licence and subject to Philippine jurisdiction. The fil77 Data Protection Officer (DPO) is the designated point of contact for all data privacy matters and can be reached through the platform's live chat support channel or via the contact details provided in Section 16 of this Policy.
fil77 has appointed a Data Protection Officer in compliance with Section 21 of the Data Privacy Act of 2012 and NPC Circular 16-01. The DPO is responsible for ensuring that fil77's processing activities comply with applicable data protection law, handling player data rights requests, and liaising with the National Privacy Commission where required.
fil77 collects the following categories of personal data from players and platform users:
Full legal name, date of birth, gender, nationality, and government-issued identification numbers (e.g., PhilSys ID number, UMID number, Driver's License number, Passport number, Voter's ID number, or SSS/GSIS ID number), as submitted during account registration and KYC verification.
Registered email address, Philippine mobile number (in +63 format), and, where provided for KYC, residential address or mailing address within the Philippines.
Registered GCash mobile number, Maya account details, bank account information (BPI, BDO, Metrobank), USDT wallet addresses, and any other payment method details provided during the deposit or withdrawal process. Full financial account credentials (such as passwords or PINs) are never collected or stored by fil77 — transactions are processed through the secure interfaces of the respective payment providers.
Records of all deposits, withdrawals, bonus claims, wagering activity, game sessions, wins, and losses associated with your fil77 account. This data is maintained as required by PAGCOR licensing conditions and the Anti-Money Laundering Act of 2001.
IP address, device type and identifier, browser type and version, operating system, session timestamps, pages visited on the Platform, game history, clickstream data, and other technical data generated during your use of the Platform. This data is collected automatically through the Platform's logging systems and cookies.
Records of any deposit limits, session timers, cooling-off periods, or self-exclusion instructions you have set through the fil77 responsible gaming tools. This data is maintained to ensure your instructions are enforced and to comply with PAGCOR responsible gaming requirements.
Records of your communications with fil77's customer support team through live chat and email, including the content of those communications and any attachments provided. These records are maintained for quality assurance and dispute resolution purposes.
fil77 does not collect sensitive personal information as defined under Section 3(l) of the Data Privacy Act (such as health data, sexual orientation, political or religious beliefs) except where a player voluntarily discloses such information in the context of a responsible gaming referral or support interaction. Such disclosures are handled with the strictest confidentiality.
fil77 collects personal data through the following means:
fil77 processes personal data only where a lawful basis for processing exists under the Data Privacy Act of 2012. The following table sets out fil77's primary processing purposes and the corresponding lawful basis for each:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and platform access | Identity, contact data | Performance of contract |
| KYC identity verification | Identity, financial data | Legal obligation (PAGCOR, AML Act) |
| Processing deposits and withdrawals | Financial, transaction data | Performance of contract |
| Anti-money laundering compliance | Identity, transaction data | Legal obligation (RA 9160) |
| Fraud detection and prevention | Technical, transaction data | Legitimate interest / legal obligation |
| Responsible gaming enforcement | RG data, transaction data | Legal obligation (PAGCOR) / consent |
| Customer support and dispute resolution | Communications, identity data | Performance of contract |
| Marketing and promotions (opted-in) | Contact data | Consent |
| Platform analytics and improvement | Technical, usage data | Legitimate interest |
| Regulatory reporting to PAGCOR | Identity, transaction data | Legal obligation (PAGCOR licensing) |
fil77 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent, unless processing is required by applicable Philippine law.
fil77 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your personal data may be disclosed to third parties only in the following circumstances:
fil77 engages third-party service providers who process personal data on our behalf as personal information processors under the Data Privacy Act. These include payment processors (GCash, Maya, BPI, BDO, Metrobank), KYC identity verification providers, game platform suppliers (Evolution Gaming, Pragmatic Play, PG Soft, and other approved providers), cloud hosting and data centre providers, fraud prevention and security services, and customer relationship management platforms. All service providers are contractually bound to process personal data only on fil77's instructions and in accordance with applicable data protection law.
fil77 is legally required to disclose player identity and transaction data to PAGCOR as a condition of its operating licence, and to the Anti-Money Laundering Council (AMLC) in connection with covered and suspicious transaction reporting obligations under the Anti-Money Laundering Act of 2001. fil77 will also disclose personal data to any Philippine law enforcement body where required to do so by a valid court order, warrant, or applicable legal process.
In the event that fil77 undergoes a corporate reorganisation, acquisition, merger, or sale of substantially all of its assets, your personal data may be transferred to the acquiring entity as part of the transaction. We will provide reasonable notice to registered players of any such transfer, and the acquiring entity will be required to honour the privacy commitments made in this Policy.
fil77 may share your personal data with third parties not described above where you have given your explicit consent to such sharing for a specific purpose. You may withdraw such consent at any time by contacting fil77's Data Protection Officer.
Some of fil77's service providers operate servers or processing facilities outside the Philippines. Where personal data is transferred to a country or territory outside the Philippines, fil77 will ensure that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required under the Data Privacy Act of 2012.
Safeguards used by fil77 for cross-border data transfers include: contractual data processing agreements incorporating the NPC's standard contractual clauses; transfer to countries recognised by the NPC as providing an adequate level of data protection; and reliance on derogations permitted under Section 21(d) of the Data Privacy Act where transfers are necessary for the performance of a contract with you.
fil77's primary data processing and storage infrastructure is located in the Philippines. Cross-border transfers are limited to specific third-party service providers and are subject to contractual protections in every case.
fil77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods mandated by Philippine law and PAGCOR regulations:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original personal data, in accordance with fil77's data disposal procedures.
fil77 implements appropriate technical and organisational security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:
In the event of a personal data breach that poses a real risk of serious harm to players, fil77 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players as soon as reasonably practicable, in compliance with NPC Circular 16-03.
fil77 uses cookies and similar tracking technologies on the Platform for the following purposes:
These cookies are essential for the Platform to function and cannot be disabled. They include session management cookies that keep you logged in during your visit, security cookies that protect against cross-site request forgery, and cookies required for the payment process.
fil77 uses analytics cookies to understand how players use the Platform — which game categories are most popular, how players navigate through the site, and where technical issues are occurring. This data is aggregated and anonymised where possible and used solely to improve the Platform experience. You may opt out of analytics cookies through your browser settings.
These cookies remember your platform preferences — such as your preferred language setting and game lobby view — so you don't have to reset them each time you visit.
You can control and delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent the Platform from functioning correctly. A cookie consent mechanism is presented to new visitors upon their first visit to the Platform, where consent is required for non-essential cookies under applicable law.
The fil77 Platform is strictly for persons who are 21 years of age or older, in accordance with PAGCOR regulations and applicable Philippine law. fil77 does not knowingly collect or process personal data from individuals under 21 years of age.
All registered players are required to confirm their date of birth during registration and to submit government-issued photo identification as part of the KYC verification process. Where fil77 discovers that a player under 21 years of age has successfully registered, the following actions will be taken immediately:
Parents and guardians: If you believe a minor in your care has registered an account on the fil77 Platform, please contact fil77 support immediately via live chat so the account can be suspended and the matter investigated promptly.
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by fil77:
Request a copy of all personal data fil77 holds about you, along with information about how it is being processed.
Request correction of any inaccurate, outdated, or incomplete personal data held in your fil77 account.
Request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to legal retention obligations.
Object to processing of your data for marketing purposes or where processing is based on fil77's legitimate interests.
Receive your personal data in a structured, commonly used, machine-readable format for transfer to another service.
Request that fil77 restrict processing of your data while a correction or objection request is being assessed.
To exercise any of the above rights, contact fil77's Data Protection Officer through the Platform's live chat support or via the contact details in Section 16. fil77 will respond to all verified data rights requests within 30 calendar days of receipt. Where a request is complex or where a large number of requests have been received simultaneously, fil77 may extend this period by a further 30 days with prior written notice.
fil77 may request identity verification before actioning any data rights request, to ensure that personal data is not disclosed to or deleted at the request of an unauthorised person.
With your consent, fil77 may send you marketing communications about new games, promotions, bonuses, and platform features via SMS, email, or in-platform notification. Your consent to receive marketing communications is obtained during registration and can be updated at any time in your account notification settings.
You have the right to withdraw your consent to marketing communications at any time, without affecting the lawfulness of any prior processing based on that consent. To unsubscribe from marketing communications, update your notification preferences in your fil77 account settings or contact customer support via live chat.
Withdrawal of marketing consent will not affect fil77's ability to send you transactional communications that are necessary for the operation of your account — such as deposit confirmations, withdrawal notifications, account security alerts, and responsible gaming messages.
The fil77 Platform may reference third-party services such as GCash, Maya, and other payment providers in the context of deposit and withdrawal instructions. When you interact with a third-party payment provider's interface (such as the GCash payment confirmation screen), you are subject to that provider's own privacy policy and terms of service, not this Policy.
fil77 game content is provided by third-party game studios (including Evolution Gaming, Pragmatic Play, PG Soft, and others). These studios operate their own game servers and may collect technical game performance data. Such studios are contractually bound to process data only in accordance with applicable law and their data processing agreements with fil77.
fil77 is not responsible for the privacy practices of any third-party service or platform. We encourage you to review the privacy policies of any third-party service with which you interact.
fil77 may update this Privacy Policy from time to time to reflect changes in applicable law, PAGCOR regulatory requirements, or our data processing practices. The effective date of the current version is displayed at the top of this Policy and on the hero section of this page.
Where changes are material — for example, where we add new categories of data processing or change the basis on which we share data with third parties — fil77 will provide reasonable advance notice to registered players via email or through an in-Platform notification, and will seek fresh consent where required by law.
The most current version of this Privacy Policy is always available at fil77.co/privacy-policy. We encourage you to review this Policy periodically to stay informed about how fil77 protects your personal data.
For any queries, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by fil77, you may contact the fil77 Data Protection Officer through the Platform's 24/7 live chat support channel. The support email address [email protected] is also available for written privacy enquiries — please include "Privacy Request" in the subject line of any email correspondence.
If you believe that fil77 has processed your personal data in violation of the Data Privacy Act of 2012 and you are not satisfied with fil77's response to your complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official website. fil77 cooperates fully with all NPC investigations.
fil77 is committed to resolving all data privacy complaints promptly and transparently. If you raise a concern with our Data Protection Officer, you will receive an acknowledgment within 3 business days and a substantive response within 30 calendar days.