plu77 Privacy Policy

1.1 This Privacy Policy applies to all personal data collected and processed by plu77 in connection with the operation of the plu77 online gaming platform accessible at plu77.app, including the live casino, slot games, bingo rooms, sports betting services, plu77 Coin loyalty program, promotional offers, and all customer support interactions.

1.2 This policy applies to all users of plu77, including registered players, persons who browse plu77.app without registering, and individuals who communicate with plu77 via live chat, email, or any other channel.

1.3 This policy should be read alongside plu77's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

1.4 By registering an account on plu77, making a deposit, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2.1 For the purposes of the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, the data controller responsible for processing your personal data is the operator of plu77.app — the legal entity licensed and responsible for the online gaming services offered through the plu77 platform.

2.2 plu77 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with data privacy obligations. The DPO may be contacted at the email address provided in Section 15 of this policy.

2.3 plu77 has registered its data processing systems with the National Privacy Commission (NPC) as required under RA 10173. plu77 processes personal data in accordance with the principles of transparency, legitimate purpose, and proportionality as prescribed by Philippine data privacy law.

3.1 plu77 collects the following categories of personal data, depending on how you interact with the platform:

3.2 plu77 does not collect or store full credit card numbers or full bank account numbers. Payment processing is handled through certified third-party payment processors who maintain their own data security standards.

4.1 plu77 collects your personal data through the following means:

• Direct submission — when you register an account, complete KYC verification, make a deposit, request a withdrawal, contact support, set responsible gaming limits, or update your account profile;
• Automated technical collection — when you access plu77.app, certain technical data (IP address, device information, browser type) is collected automatically through server logs and session tracking systems;
• Cookies and similar technologies — plu77 uses cookies and similar tracking technologies to maintain session continuity, support fraud detection, and measure platform performance (see Section 10 for full cookie information);
• Payment processors — when you make a deposit or withdrawal via GCash, Maya, or bank transfer, the relevant processor shares transaction confirmation data with plu77 to reconcile your wallet balance;
• Third-party identity verification services — plu77 may use licensed KYC technology providers to assist with document verification, who process data strictly on plu77's behalf and under binding data processing agreements;
• Game providers — game session data is generated and reported to plu77 by third-party game providers (e.g., JILI, Pragmatic Play, PG Soft) in accordance with their platform integration agreements with plu77.

5.1 plu77 processes your personal data for the following purposes, each of which is supported by a lawful basis set out in Section 6:

• Account creation and management — to register your plu77 account, verify your identity and age (21+ requirement), maintain your account profile, and enable login;
• KYC and regulatory compliance — to fulfill mandatory identity verification obligations under PAGCOR's online gaming regulations and Philippine anti-money-laundering laws administered by the AMLC;
• Payment processing — to process your GCash, Maya, bank transfer, or other deposits and withdrawals accurately and securely;
• Platform delivery — to provide access to live casino games, slots, bingo rooms, sports betting, and all other plu77 services;
• plu77 Coin rewards — to track qualifying wagers, calculate Coin accrual, and process Coin redemption requests;
• Responsible gaming — to enforce deposit limits, session time settings, self-exclusion requests, and other responsible gaming measures you have activated;
• Fraud prevention and security — to detect, prevent, and investigate fraud, money laundering, multi-accounting, bonus abuse, and unauthorized access attempts;
• Customer support — to respond to your queries, complaints, and account requests via live chat and email;
• Marketing and promotions — to send you information about plu77 promotions, bonuses, and new games, where you have consented to receive such communications;
• Platform improvement — to analyze aggregated usage patterns and improve the design, performance, and game selection of plu77;
• Legal obligations — to comply with applicable Philippine laws, respond to lawful requests from PAGCOR, NPC, AMLC, and other government agencies, and to enforce plu77's Terms & Conditions.

5.2 plu77 does not use your personal data for automated individual decision-making or profiling that produces legal effects, except where such processing is required by PAGCOR's responsible gaming or AML obligations and is subject to appropriate human oversight.

6.1 plu77 processes your personal data on the following lawful bases under Section 12 of the Data Privacy Act of 2012:

• Consent — for marketing communications, optional cookie categories, and any processing you have expressly opted into;
• Contractual necessity — for account registration, KYC verification, payment processing, game access, and all processing required to deliver the plu77 service you signed up for;
• Legal obligation — for AML compliance, PAGCOR reporting obligations, NPC requirements, tax record-keeping, and responses to lawful government requests;
• Legitimate interests — for fraud prevention, platform security, abuse detection, and aggregated analytics to improve plu77's services, where such interests are not overridden by your rights.

7.1 plu77 shares your personal data only in the following circumstances and only to the extent strictly necessary for the specified purpose:

• Payment processors (e.g., GCash, Maya, BPI, BDO, Metrobank payment infrastructure, InstaPay, PesoNet) — to process your deposits and withdrawals, under binding data processing agreements;
• KYC and identity verification providers — to assist with document authentication as part of plu77's KYC process, under strict confidentiality obligations;
• Game providers (e.g., JILI, Pragmatic Play, PG Soft, Habanero, CQ9) — game session data is shared with the relevant game provider to settle game outcomes, resolve disputes, and prevent fraud;
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and other Philippine government agencies as required by law;
• Law enforcement — where plu77 receives a lawful order, warrant, or subpoena from a Philippine court or competent authority;
• Professional advisers — legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations;
• Corporate transactions — in the event of a merger, acquisition, or sale of the business, your data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

7.2 All third parties with whom plu77 shares personal data are required to process that data in accordance with applicable Philippine data privacy law and under contractual data processing agreements with plu77.

8.1 plu77 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

8.2 Upon expiry of the applicable retention period, plu77 will securely delete or anonymize your personal data in accordance with industry best practices and NPC guidelines on data disposal.

9.1 plu77 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmission between your device and plu77 servers;
• Encryption at rest for sensitive data categories including KYC documents and financial identifiers stored in plu77 databases;
• Access controls and role-based permissions limiting internal access to personal data to authorized personnel on a need-to-know basis;
• Two-factor authentication (2FA) available to all players and mandatory for plu77 internal administrative systems;
• Real-time fraud detection systems monitoring for unauthorized access attempts, unusual transaction patterns, and multi-accounting;
• Regular security audits and penetration testing conducted by qualified third-party security firms;
• Incident response procedures — in the event of a personal data breach, plu77 will notify the NPC and affected players within 72 hours of becoming aware of the breach, as required by the Data Privacy Act.

9.2 While plu77 takes all reasonable steps to protect your data, no digital transmission or storage system is 100% impenetrable. You are responsible for maintaining the security of your own plu77 login credentials and for notifying plu77 immediately if you suspect unauthorized access to your account.

10.1 plu77 uses cookies — small text files stored on your device — and similar tracking technologies (e.g., session tokens, local storage) to enable and improve the platform. The following cookie categories are used:

• Essential cookies — strictly necessary for the plu77 platform to function, including session management, login persistence, and security tokens. These cannot be disabled without disrupting core platform functionality;
• Functional cookies — used to remember your preferences such as language settings, responsible gaming configurations, and game lobby layout;
• Analytics cookies — used to collect anonymized data about how players navigate plu77, which pages are visited most, and where errors occur, to help plu77 improve the platform;
• Security cookies — used to detect bot activity, prevent cross-site request forgery (CSRF), and identify suspicious login behavior.

10.2 Non-essential cookies (analytics, functional preferences) may be controlled through your browser settings. Note that disabling all cookies may impair your ability to log in to plu77 or access certain platform features, as essential session cookies are required for authenticated access.

10.3 plu77 does not use third-party advertising cookies or behavioral tracking cookies that share your data with external advertising networks.

11.1 As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by plu77:

11.2 To exercise any of the above rights, contact plu77's Data Protection Officer as described in Section 15. plu77 will respond to all verified data subject requests within 15 business days.

12.1 If plu77 discovers or has reasonable cause to believe that personal data has been collected from a person under 21 years of age, plu77 will: (a) immediately suspend the relevant account; (b) securely delete all personal data associated with that account, subject to any legally mandated retention requirements; and (c) report the incident to PAGCOR and, where appropriate, to Philippine law enforcement authorities.

12.2 Parents and guardians who believe a minor may have registered on plu77 should contact plu77 support immediately via live chat with relevant evidence. plu77 will investigate and take appropriate action within 24 hours of receiving such a report.

13.1 Certain service providers engaged by plu77 — including game providers and technology infrastructure partners — may be located outside the Philippines. Where your personal data is transferred outside the Philippines, plu77 ensures that such transfers comply with the cross-border data transfer requirements of the Data Privacy Act of 2012 and NPC guidelines.

13.2 Cross-border transfers are made only to: (a) countries recognized by the NPC as providing adequate levels of data protection; or (b) recipients who have entered into data transfer agreements with plu77 incorporating standard contractual clauses consistent with NPC requirements; or (c) where transfer is necessary for the performance of a contract with you (e.g., settling a game round with an internationally-based game provider).

14.1 plu77 may update this Privacy Policy from time to time to reflect changes in the platform, applicable law, or data processing practices. When a material change is made, plu77 will notify registered players via email notification to the address on file and/or via a prominent notice displayed on plu77.app, at least 7 calendar days before the change takes effect.

14.2 The "Last Updated" date at the top of this page indicates when the most recent revision was made. Your continued use of plu77 after the effective date of any amended Privacy Policy constitutes your acceptance of the updated terms.

14.3 If you do not agree with any material change to this Privacy Policy, you should discontinue use of plu77 and may request account closure by contacting plu77 support.

15.1 For any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal data by plu77, please contact plu77's Data Protection Officer (DPO) at:

Email: [email protected] (plain text — not a clickable link)
Platform: Live chat via plu77.app (available 24/7)
Response time: Within 15 business days for formal data subject requests

15.2 If you are not satisfied with plu77's response to your privacy concern, you have the right to escalate your complaint directly to the National Privacy Commission of the Philippines (NPC). Information on filing a complaint with the NPC is available on the NPC's official website.

15.3 For responsible gaming concerns, including self-exclusion requests and deposit limit management, please visit the Responsible Gaming page.