og77 Privacy Policy — Your Data, Protected

1 Introduction

og77 is committed to protecting the personal information of every player who registers on og77.asia, from Manila and Makati to Cebu, Davao, and across the Philippine archipelago. We recognize that when you create an og77 account, you entrust us with personal data — your name, Philippine mobile number, payment details — and we take that responsibility seriously.

This Policy applies to all personal data collected through og77.asia, our customer support channels (including live chat), and any communications between og77 and its registered users. It covers data collected directly from you, data inferred from your use of the Platform, and data received from our authorized third-party service partners where applicable.

og77 acts as a Personal Information Controller ("PIC") under the Data Privacy Act of 2012. This means og77 determines the purposes and means of processing your personal information collected through the Platform. Where og77 engages third-party service providers to process data on its behalf, those parties act as Personal Information Processors ("PIPs") subject to binding contractual obligations consistent with this Policy and applicable Philippine law.

2 Personal Data We Collect

og77 collects only the personal data that is necessary for the purposes identified in this Policy. Below is a summary of the categories of personal data we process:

3 How We Collect Your Data

og77 collects personal data through the following channels and mechanisms:

• Direct submission: Information you provide when registering an og77 account, completing KYC verification, making a deposit, requesting a withdrawal, contacting support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically when you access og77.asia, including through cookies, session logs, and server-side analytics tools.
• Payment processors: Transaction confirmation data shared with og77 by GCash, Maya, BDO, BPI, Metrobank, USDT payment gateways, and Coins.ph as part of deposit and withdrawal processing workflows.
• Identity verification partners: Data from authorized third-party KYC service providers engaged by og77 to assist in the verification of identity documents and age confirmation.
• Game providers: Session and wagering data generated within games provided by JILI, Pragmatic Play, PG Soft, and other licensed game studios and transmitted to og77 for account management and responsible gaming monitoring purposes.

4 How We Use Your Personal Data

og77 uses collected personal data for the following purposes, each of which has an identified legal basis described in Section 5:

4.1 Account Management and Authentication

Your identity and contact data are used to create and manage your og77 account, verify your identity during login, authenticate two-factor SMS verification, reset passwords, and maintain the security and integrity of your account. Without this data, og77 cannot provide you with a registered account on the Platform.

4.2 Financial Transaction Processing

Your financial data is used to process deposits and withdrawals through your chosen payment method (GCash, Maya, BDO, BPI, Metrobank, USDT, or Coins.ph), verify that payment methods are registered in your own name, and maintain transaction records as required by applicable financial regulations. og77 does not store full bank account or card numbers within its own systems beyond what is necessary for the transaction.

4.3 Legal and Regulatory Compliance

og77 is required by Philippine gaming regulations, Anti-Money Laundering Act ("AMLA") obligations, and PAGCOR compliance requirements to collect, retain, and in certain circumstances report specific personal data. This includes identity verification records, transaction histories, and communications relevant to AML monitoring. Compliance processing is mandatory and cannot be opted out of.

4.4 Responsible Gaming Monitoring

Usage data — including gaming session length, betting patterns, deposit frequency, and self-exclusion history — is processed by og77 to monitor for indicators of problem gambling and to enforce responsible gaming restrictions activated by Players. This processing is conducted in Players' interests and in accordance with PAGCOR's Responsible Gaming Framework.

4.5 Platform Security and Fraud Prevention

Technical data and usage patterns are analyzed to detect and prevent unauthorized account access, detect multi-accounting, identify bonus abuse, prevent money laundering, and protect the integrity of the og77 Platform for all users.

4.6 Customer Support

Communications data from live chat, email, and support tickets is used to respond to your inquiries, resolve disputes, investigate complaints, and improve og77's customer service quality.

4.7 Marketing Communications (Where Consented)

Where you have provided explicit consent, og77 may use your contact data to send promotional communications about new games, upcoming promotions, and platform updates. You may withdraw consent for marketing communications at any time by contacting og77 support or by unsubscribing via the opt-out mechanism included in any marketing message.

5 Legal Basis for Processing

Under the Data Privacy Act of 2012, og77 processes personal data on the following legal grounds:

• Contractual necessity: Processing required to perform the contractual agreement between og77 and the Player (account registration, payment processing, game access).
• Legal obligation: Processing mandated by applicable Philippine law, including AMLA compliance, PAGCOR regulatory requirements, and tax record-keeping obligations.
• Legitimate interest: Processing in og77's and Players' legitimate interests, including platform security, fraud prevention, responsible gaming monitoring, and service improvement — provided that such interests do not override the data subject's fundamental rights.
• Consent: Processing for optional purposes (such as marketing communications) where og77 has obtained your explicit, freely given, informed, and specific consent prior to processing.

6 Disclosure and Data Sharing

og77 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We disclose personal data only in the following circumstances:

• Service providers (PIPs): Third-party companies engaged by og77 to provide services on our behalf, including payment processing partners (GCash, Maya payment networks, banking institutions), KYC verification providers, cloud hosting providers, IT security firms, and game platform operators. All PIPs are bound by data processing agreements consistent with this Policy.
• Regulatory authorities: Philippine regulatory and law enforcement bodies, including PAGCOR, the Anti-Money Laundering Council ("AMLC"), the National Privacy Commission ("NPC"), and competent courts, when disclosure is required by applicable law, court order, or regulatory demand.
• Group entities: Affiliated companies within the og77 corporate group where necessary for platform operations, internal reporting, and shared compliance functions, subject to equivalent data protection obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of og77's assets, personal data may be transferred as part of the transaction, provided that the acquiring entity is bound to protect personal data consistently with this Policy.

7 Cookies and Tracking Technologies

og77.asia uses cookies and similar tracking technologies to operate the Platform effectively, maintain session state after login, prevent fraud, and analyze aggregate usage patterns for platform improvement purposes.

7.1 Types of Cookies Used

• Essential cookies: Strictly necessary for the Platform to function. These include session authentication cookies that keep you logged in to your og77 account, security tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: Store your preferences, such as your preferred language settings, game display preferences, and saved payment method selections, to improve your experience on return visits.
• Analytics cookies: Collect anonymized usage data (pages visited, time on site, features accessed) to help og77 understand how the Platform is used and identify areas for improvement. No personally identifiable information is included in analytics data.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorized account access, and bot activity on the Platform.

8 Data Retention

og77 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce agreements.

Account data and transaction records are retained for a minimum period of five (5) years following account closure or the last transaction, as required by the Anti-Money Laundering Act of 2001 (as amended) and PAGCOR record-keeping requirements. Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized.

Communications data (live chat transcripts, support correspondence) is retained for a period of two (2) years from the date of the communication, or longer if the subject matter involves an unresolved dispute or active investigation.

Where you have consented to marketing communications and subsequently withdraw that consent, og77 will remove your contact details from our marketing lists within thirty (30) business days of receiving your withdrawal of consent.

9 Data Security

og77 implements organizational, technical, and physical security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Key security measures in place at og77 include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and og77.asia.
• Encryption of sensitive data fields (including financial data and government ID information) at rest in og77's database systems.
• Role-based access controls limiting employee access to personal data to those with a demonstrated operational need.
• Regular independent security audits and penetration testing of og77's infrastructure.
• Multi-factor authentication requirements for internal staff accessing data systems.
• Incident response procedures for prompt detection, assessment, and notification of data security breaches in accordance with NPC reporting requirements.

10 Your Data Privacy Rights

Under the Data Privacy Act of 2012, Filipino data subjects are granted the following rights with respect to their personal data held by og77. You may exercise any of these rights by contacting og77 at [email protected]:

og77 will respond to substantiated data rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves multiple data sets, og77 may extend this period by a further sixty (60) days, with notification provided to you of the extension and reasons thereof.

If you are unsatisfied with og77's response to any data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.

11 Minors and Age Restrictions

12 Cross-Border Data Transfers

Some of og77's service providers and game platform operators are located outside the Philippines. Where personal data is transferred to a third country, og77 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections afforded by the Data Privacy Act of 2012.

Safeguards for cross-border data transfers include contractual data processing agreements incorporating the standard data protection clauses recognized by the National Privacy Commission, combined with technical and organizational security measures commensurate with the sensitivity of the data transferred.

og77 does not transfer data to jurisdictions that do not provide an adequate level of data protection without implementing the safeguards described above. Game providers who receive session data for game operation purposes are bound by contractual data protection obligations and are not authorized to use such data for any purpose beyond those specified in their agreements with og77.

13 Changes to This Privacy Policy

og77 may revise this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The revised Policy will be published at og77.asia/privacy-policy with an updated effective date.

For material changes that significantly affect how og77 processes your personal data or reduces your rights, og77 will provide advance notice to registered Players via the Platform, by email notification, or both, at least fourteen (14) days prior to the new Policy taking effect where reasonably practicable. Your continued use of og77.asia after the effective date of a revised Policy constitutes acceptance of the revised terms.

14 Contact & Data Protection Officer

For all data privacy inquiries, requests to exercise your data rights, or concerns regarding og77's data processing practices, you may contact the og77 Data Privacy Team using the following details: