pera77 Privacy Policy

This Privacy Policy describes how pera77 ("pera77," "we," "us," "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "your," "data subject") who access or use the pera77 online gaming platform at pera77.one, including all associated mobile-optimized interfaces, account management portals, customer support channels, and any other pera77 services.

This Policy is published in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations issued by the National Privacy Commission ("NPC"). It is also read in conjunction with pera77's Terms & Conditions and Responsible Gaming Policy.

pera77 is the personal information controller ("PIC") for the personal data processed through the pera77 platform. pera77 operates as a PAGCOR-licensed online gaming service provider for the Philippine market and is registered with the National Privacy Commission as required under the DPA.

As the data controller, pera77 determines the purposes and means of processing personal data collected from registered players, prospective users, and visitors to the platform. pera77 has appointed a Data Protection Officer ("DPO") who is responsible for ensuring ongoing compliance with the DPA. The DPO may be contacted via the contact details provided in Section 14 of this Policy.

pera77 collects the following categories of personal data from registered users and platform visitors:

pera77 does not intentionally collect sensitive personal information as defined under Section 3(l) of the DPA (such as health data, political opinions, or religious beliefs) unless specifically required for responsible gaming compliance purposes, in which case explicit consent will be obtained.

pera77 collects personal data through the following means:

• Direct collection from you: When you register an account on pera77, complete KYC verification, make deposits or withdrawals, contact customer support, respond to promotions, or update your account settings, you directly provide personal data to pera77.
• Automated technical collection: When you visit and interact with the pera77 platform, we automatically collect technical data including IP addresses, device identifiers, browser characteristics, and session behavior using cookies and similar technologies (see Section 7).
• Payment processors: When you make transactions via GCash, PayMaya, BDO, BPI, or Metrobank, pera77 receives transaction confirmation data from these payment processors sufficient to verify and record the transaction. Full payment account credentials are not stored by pera77.
• KYC verification partners: pera77 may use authorized third-party identity verification services to validate government-issued ID documents submitted during KYC. These partners process data solely for verification purposes and under data processing agreements compliant with the DPA.
• Publicly available sources: Where required for regulatory compliance or fraud prevention, pera77 may supplement account data with information from publicly available sources or authorized data providers.

pera77 processes personal data only where a lawful basis under the DPA exists. The following table sets out the primary purposes of processing and the corresponding legal bases:

pera77 does not sell, rent, or trade personal data to third parties for their own marketing or commercial purposes. Personal data is shared only in the following limited circumstances and only to the extent necessary for each purpose:

• PAGCOR and regulatory authorities: pera77 is required by its PAGCOR license conditions to submit player data, transaction reports, and gaming records as required by PAGCOR or other competent Philippine regulatory authorities. Such disclosures are mandatory legal obligations.
• Anti-money laundering authorities: In compliance with Republic Act No. 9160 (the Anti-Money Laundering Act) and its amendments, pera77 may be required to disclose transaction data and player information to the Anti-Money Laundering Council (AMLC) or other competent authorities.
• Payment processors: Transaction data is shared with GCash, PayMaya, BDO, BPI, and Metrobank solely to the extent necessary to process your deposits and withdrawals. These payment providers operate under their own privacy policies and are regulated by the Bangko Sentral ng Pilipinas.
• KYC and identity verification providers: Identity document data is shared with authorised verification service providers under data processing agreements that restrict use to verification purposes only.
• Game content providers: Certain technical session data may be shared with licensed game suppliers (such as JILI, Pragmatic Play, and PG Soft) solely for game operation and dispute resolution purposes.
• Professional advisers: pera77 may share data with legal counsel, auditors, and compliance advisers where necessary, subject to confidentiality obligations.
• Law enforcement: pera77 will disclose personal data to Philippine law enforcement agencies where required by a valid court order, warrant, or other lawful request.

All third parties with whom pera77 shares personal data are required to handle such data securely and in compliance with applicable Philippine law. pera77 enters into appropriate data processing or data sharing agreements with third-party processors as required by the DPA.

pera77 uses cookies and similar tracking technologies on the platform to support secure login sessions, remember account preferences, analyze platform usage, and improve the user experience. The following categories of cookies are used:

• Strictly Necessary Cookies: These are essential for the platform to function correctly — maintaining your login session, enabling the cashier, and remembering your account settings. These cookies cannot be disabled without affecting your ability to use the platform.
• Performance and Analytics Cookies: These collect anonymized or aggregated information about how players interact with the platform, including which pages are visited most frequently and how players navigate between sections. This data is used to improve platform design and performance.
• Functional Cookies: These remember your preferences, such as language settings and game filter selections, to provide a more personalized experience across sessions.
• Security Cookies: These support fraud detection and security monitoring by helping pera77 identify unusual login patterns or suspicious access attempts based on device and session data.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing core pera77 platform features but may affect the personalization and analytics functions of the platform. Strictly necessary and security cookies cannot be disabled without materially impairing platform function.

pera77 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, and in compliance with applicable legal retention requirements. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR gaming record retention requirements and the Anti-Money Laundering Act.
• KYC documentation: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, as required by PAGCOR and the AMLC.
• Financial transaction records: Retained for a minimum of five (5) years in compliance with BSP, PAGCOR, and AMLC regulatory requirements.
• Gaming session records: Retained for a minimum of three (3) years from the date of the session for dispute resolution and regulatory compliance purposes.
• Customer support records: Retained for three (3) years from the date of the last interaction, unless a longer period is required for unresolved disputes.
• Marketing preference data: Retained until consent is withdrawn. Following withdrawal of consent, data is deleted or anonymized within a reasonable period, except where retention is required for legal compliance purposes.
• Technical and analytics data: Retained in identifiable form for up to twelve (12) months, after which it is anonymized or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted, anonymized, or disposed of in accordance with pera77's data disposal procedures.

pera77 implements technical and organizational security measures appropriate to the risk level of the personal data it processes. These measures include:

• Encryption in transit: All data transmitted between your device and pera77 servers is protected by 256-bit SSL/TLS encryption.
• Encryption at rest: Sensitive personal data, including KYC documents and financial information, is encrypted when stored in pera77's systems.
• Access controls: Access to personal data is restricted on a need-to-know basis. Employee access to sensitive data is governed by role-based access control policies and is subject to logging and audit.
• Two-factor authentication: Platform access for administrative systems requires multi-factor authentication. Players are encouraged to enable two-factor authentication on their pera77 accounts.
• Breach detection and response: pera77 maintains monitoring systems to detect unauthorized access or anomalous activity. In the event of a personal data breach affecting your rights, pera77 will notify the National Privacy Commission and affected individuals in accordance with NPC breach notification requirements.
• Staff training: All pera77 personnel with access to personal data receive mandatory data privacy training on an ongoing basis.

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by pera77. These rights may be exercised by contacting pera77's Data Protection Officer using the details in Section 14.

pera77 will respond to data subject rights requests within thirty (30) days of receipt, as required by the DPA. In complex cases, this period may be extended by a further thirty (30) days with written notice to the requesting individual. Identity verification will be required before any data subject rights request is processed.

The pera77 platform is strictly restricted to individuals who are at least 21 years of age, in compliance with the minimum age requirement for online gaming under PAGCOR's regulatory framework. pera77 does not knowingly collect, process, or store personal data from individuals under the age of 21.

Where pera77 has reason to believe that personal data has been submitted by or on behalf of an individual under 21 years of age, the associated Account will be immediately suspended, the data will be removed from pera77's systems to the extent permitted by legal retention obligations, and the matter may be referred to PAGCOR in accordance with licensing conditions.

If a parent or guardian believes that their child under 21 has registered an account on pera77, they are encouraged to contact pera77 immediately using the contact details in Section 14 so that the Account can be identified and closed.

pera77 may engage service providers, including game content providers and technical infrastructure partners, who process data in countries outside the Philippines. Where personal data is transferred outside the Philippines, pera77 ensures that appropriate safeguards are in place as required by the DPA and NPC regulations. These safeguards may include:

• Data processing agreements incorporating NPC-approved standard contractual clauses
• Transfers to jurisdictions recognized by the NPC as providing an adequate level of data protection
• Binding corporate rules where the recipient is part of the same corporate group as pera77

A list of countries to which personal data may be transferred and the safeguards in place is available on request from pera77's Data Protection Officer.

pera77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered pera77 account holders via the email address or mobile number on record with the platform prior to the change taking effect. The updated Policy will be published on this page with a revised effective date.

Where changes to this Policy are required by new or amended Philippine privacy law or NPC regulations, pera77 will implement those changes as required, which may include updating data processing activities without prior notice to the extent permitted by law. Your continued use of the pera77 platform following notification of material changes constitutes your acknowledgment of the updated Policy.

For any questions about this Privacy Policy, to exercise your data subject rights, or to raise a data privacy concern, please contact pera77's Data Protection Officer:

• Data Protection Officer, pera77
• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the customer support chat function on the pera77 platform
• Response time: Data subject rights requests will be acknowledged within five (5) business days and responded to within thirty (30) days in accordance with DPA requirements.