cc77 Casino Privacy Policy

1. Overview & Scope

This Privacy Policy ("Policy") describes how cc77 ("cc77", "we", "us", or "our") collects, uses, discloses, stores, and protects the personal information of individuals ("you", "your", or "Data Subject") who access or use the cc77 online casino platform, including the cc77 website, mobile-optimised interfaces, and all associated services (collectively, the "Platform").

This Policy applies to all personal data processed by cc77 in connection with your use of the Platform, regardless of whether you are a registered player, a visitor browsing the Platform without an account, or a former player whose account has been closed. By accessing the Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read together with the cc77 Terms & Conditions, which govern your use of the Platform. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.

cc77 acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes as described in this Policy. Where cc77 engages third-party service providers to process personal data on its behalf, those providers act as Personal Information Processors (PIPs) and are bound by data processing agreements consistent with the requirements of the Data Privacy Act.

2. Personal Data We Collect

cc77 collects the following categories of personal data, depending on your interaction with the Platform:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify the 21+ age requirement)
• Nationality and country of residence
• Email address and mobile phone number
• Residential address (barangay, city/municipality, province, postal code)

2.2 Identity Verification (KYC) Data

• Copies of government-issued Philippine identification documents (e.g., PhilSys National ID, passport, driver's licence, UMID, SSS ID, Voter's ID)
• Selfie photographs submitted for liveness verification
• Proof of address documents where required
• Source of funds declarations where required by PAGCOR regulations or AMLC guidelines

2.3 Financial Data

• GCash or PayMaya (Maya) mobile wallet account details (account name and registered mobile number)
• Bank account details for bank transfer transactions (account name, bank name, account number)
• Debit card details (card number, expiry date — stored in tokenised form only)
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method used

2.4 Gaming & Activity Data

• Game session records, including games played, wagers placed, outcomes, and session duration
• Account balance history and bonus transaction records
• Responsible gaming tool settings (deposit limits, loss limits, self-exclusion status)
• Customer support interaction records, including chat transcripts and email correspondence

2.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type and version
• Unique device identifiers
• Platform access logs, including login timestamps and session activity
• Cookie and tracking technology data (see Section 10)

3. How We Collect Your Data

cc77 collects personal data through the following means:

3.1 Directly From You

The majority of personal data cc77 holds is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account profile. You are not obligated to provide personal data, but failure to provide required information may prevent you from accessing certain features of the Platform, including real-money gaming and withdrawals.

3.2 Automatically Through Platform Use

When you access the cc77 Platform, certain technical and device data is collected automatically through server logs, cookies, and similar tracking technologies. This data is collected to ensure Platform security, prevent fraud, and improve the user experience. See Section 10 for more detail on cookies.

3.3 From Third Parties

cc77 may receive personal data about you from the following third-party sources:

• Identity verification providers: Third-party KYC and anti-fraud service providers may supply verification results and risk scores based on the documents you submit.
• Payment providers: GCash, PayMaya, and banking partners may share transaction confirmation data with cc77 to facilitate deposits and withdrawals.
• Regulatory authorities: PAGCOR or the Anti-Money Laundering Council (AMLC) may share information with cc77 in connection with regulatory compliance obligations.

4. Purposes of Processing

cc77 processes your personal data for the following specific, legitimate purposes:

cc77 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or where you have provided explicit consent.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, cc77 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and cc77 (i.e., the Terms & Conditions), including account management, gaming services, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act itself.
• Legitimate interests: Processing necessary for cc77's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and non-essential cookies, where cc77 has obtained your prior, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

cc77 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. cc77 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

6.1 Service Providers (Personal Information Processors)

cc77 engages trusted third-party service providers to assist in operating the Platform, including KYC and identity verification providers, payment processing partners (GCash, PayMaya, banking partners), IT infrastructure and cloud hosting providers, customer support platform providers, and fraud detection and cybersecurity service providers. All such providers are bound by data processing agreements that require them to process personal data only on cc77's instructions and in compliance with the Data Privacy Act.

6.2 Regulatory & Law Enforcement Authorities

cc77 may disclose personal data to PAGCOR, the AMLC, the National Privacy Commission (NPC), or other competent Philippine government authorities where required by law, court order, or regulatory direction. cc77 will notify you of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of cc77's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer and any material changes to this Policy that result from it.

6.4 With Your Consent

cc77 may share your personal data with other third parties where you have provided explicit, informed consent to such sharing.

7. Data Retention

cc77 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account and KYC data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with PAGCOR licensing requirements and the Anti-Money Laundering Act.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required by AMLA and PAGCOR regulations.
• Gaming activity records: Retained for a minimum of three (3) years from the date of the gaming session.
• Customer support records: Retained for three (3) years from the date of the last interaction.
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year thereafter as evidence of consent.
• Technical and device logs: Retained for twelve (12) months from the date of collection, unless required for longer periods for fraud investigation or legal proceedings.

Upon expiry of the applicable retention period, cc77 will securely delete or anonymise your personal data in accordance with its data disposal procedures. Where anonymisation is not technically feasible, cc77 will restrict processing of the data to the minimum necessary for compliance purposes.

8. Data Security

cc77 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the cc77 Platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest, including financial account details and KYC documents, is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to cc77 personnel and authorised service providers who require access to perform their duties. All access is logged and subject to regular review.
• Two-factor authentication: cc77 offers two-factor authentication (2FA) for player accounts and requires it for all internal administrative access to systems containing personal data.
• Regular security assessments: cc77 conducts regular vulnerability assessments and penetration testing of its Platform and infrastructure.
• Incident response: cc77 maintains a data breach response plan. In the event of a personal data breach that poses a real risk of serious harm, cc77 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected Data Subjects without undue delay.

9. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by cc77:

• Right to be informed: You have the right to be informed of how your personal data is collected, used, and processed, as described in this Policy.
• Right of access: You have the right to request a copy of the personal data cc77 holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data cc77 holds about you. You may update certain account information directly through your cc77 account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to cc77's legal retention obligations under PAGCOR regulations and the AMLA.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to cc77's overriding legitimate grounds.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to cc77 in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe cc77 has processed your personal data in violation of the Data Privacy Act.

To exercise any of the above rights, please contact cc77's Data Protection Officer (DPO) using the contact details in Section 14. cc77 will respond to all verified data subject requests within thirty (30) days of receipt. cc77 may request proof of identity before processing a data subject request to prevent unauthorised disclosure.

10. Cookies & Tracking Technologies

cc77 uses cookies and similar tracking technologies on the Platform to ensure functionality, enhance security, and improve the user experience. The following categories of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They include session management cookies that keep you logged in during your visit, security cookies that help detect and prevent fraudulent activity, and load-balancing cookies that ensure Platform stability. No consent is required for strictly necessary cookies.

10.2 Functional Cookies

These cookies remember your preferences and settings, such as your preferred language and responsible gaming tool configurations, to provide a more personalised experience. These cookies are set with your consent.

10.3 Analytics Cookies

cc77 uses anonymised analytics data to understand how players use the Platform, identify areas for improvement, and measure the effectiveness of features. Analytics data is aggregated and does not identify individual users. These cookies are set with your consent.

You may manage your cookie preferences through the cookie consent banner displayed on your first visit to the Platform, or through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. cc77 does not use third-party advertising or behavioural tracking cookies.

11. Minors & Age Restriction

If you are a parent or guardian and believe that a minor has registered on cc77 using your details or otherwise, please contact cc77 support immediately. cc77 takes the protection of minors extremely seriously and cooperates fully with PAGCOR and relevant Philippine authorities on all matters relating to underage gambling.

12. Cross-Border Data Transfers

cc77 primarily processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers or infrastructure located outside the Philippines (for example, cloud hosting or KYC verification services), cc77 ensures that such transfers are made only to countries or organisations that provide an adequate level of data protection, or subject to appropriate contractual safeguards such as standard contractual clauses approved by the National Privacy Commission.

cc77 will not transfer your personal data to jurisdictions that do not provide adequate data protection without your explicit consent, except where required by Philippine law.

13. Changes to This Privacy Policy

cc77 may update this Privacy Policy from time to time to reflect changes in its data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. Material changes will be communicated to registered players via the email address associated with their cc77 account and/or by a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the cc77 Platform after the effective date of any update constitutes your acknowledgement of the revised Policy. If you do not agree with the updated Policy, you must cease using the Platform and may request account closure in accordance with the cc77 Terms & Conditions.

14. Contact & Data Protection Officer

cc77 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests relating to this Policy or the processing of your personal data, please contact the cc77 DPO:

• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 via the cc77 Platform after login
• Response Time: cc77 aims to respond to all privacy-related enquiries within 15 business days

If you are not satisfied with cc77's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at [email protected] or through the NPC's official website.