ff77 Casino – Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how ff77 ("ff77," "we," "us," "our") collects, uses, stores, shares, and protects the personal information of individuals ("you," "your," "Player," "User") who access or use the ff77 Casino platform available at ff77.bio, including its sub-pages, features, and services (collectively, the "Platform").

ff77 operates as a data controller in respect of personal data collected through the Platform. We are committed to handling your personal data lawfully, fairly, and transparently, and to upholding the data privacy rights of Filipino players as guaranteed by the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations ("IRR").

By registering for an ff77 account, accessing the ff77 Login page, making a deposit, or using any feature of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2. Data Controller

For the purposes of the DPA and this Policy, the data controller responsible for your personal information is:

If you have any questions about how ff77 handles your personal data, or wish to exercise any of your rights under the DPA, please contact the ff77 Data Protection Officer (DPO) at the email address above.

3. Personal Data We Collect

ff77 collects the following categories of personal data from players and platform users:

ff77 does not collect sensitive personal information as defined under Section 3(l) of the DPA (such as health data, political opinions, or religious beliefs) unless specifically required by applicable law or regulation.

4. How We Collect Personal Data

ff77 collects personal data through the following means:

• Direct Submission: Information you provide when registering your ff77 account, completing KYC verification, contacting support, or submitting promotional forms.
• Automated Collection: Technical data collected automatically when you access the ff77 Platform, including via cookies, session tokens, and server logs. See Section 10 for details on cookies.
• Third-Party Payment Providers: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, and InstaPay when you make deposits or withdrawals through your ff77 account. ff77 does not receive or store your full bank account credentials.
• Game Providers: Session and outcome data transmitted from licensed game providers (e.g., PG Soft, Evolution Gaming) to the ff77 platform for account balance and transaction record purposes.
• Identity Verification Services: During KYC, ff77 may use third-party identity verification services to validate documents submitted to your account.

5. Purpose & Legal Basis for Processing

6. How ff77 Uses Your Personal Data

ff77 uses your personal data strictly for the purposes identified in Section 5. Specifically, your data may be used to:

• Create, maintain, and secure your ff77 Casino account;
• Process deposits, withdrawals, and account balance adjustments in PHP;
• Verify your identity and age as required for Philippine online gaming compliance;
• Comply with obligations under the Anti-Money Laundering Act (RA 9160 as amended by RA 10365) and related AMLC regulations;
• Detect and prevent fraudulent activity, account takeovers, and prohibited multi-accounting;
• Provide 24/7 customer support via live chat and email;
• Send transactional communications (deposit confirmations, withdrawal updates, account alerts) to your registered mobile number or email;
• Send promotional communications about ff77 bonuses, events, and offers – only where you have provided consent, and subject to easy opt-out at any time;
• Monitor and enforce responsible gaming tools, including deposit limits, self-exclusion, and cooling-off periods;
• Analyse platform usage to improve ff77 features, performance, and game selection for Filipino players.

ff77 does not use your personal data for automated individual decision-making that produces legal or similarly significant effects, except as required for AML transaction monitoring which may result in account holds pending human review.

7. Data Sharing & Disclosure

ff77 does not sell, rent, or trade your personal data to any third party. ff77 may share your personal data only in the following circumstances and only to the extent necessary:

7.1 Service Providers

ff77 engages third-party service providers who process personal data on ff77's behalf, including: payment processing partners (GCash, PayMaya, BPI, BDO, Metrobank, InstaPay), game technology providers (PG Soft, Evolution Gaming, and other licensed suppliers), identity verification services, cloud hosting and infrastructure providers, and customer support software platforms. These providers are contractually bound to process your data only as instructed by ff77 and in accordance with applicable data protection law.

7.2 Regulatory and Legal Obligations

ff77 may disclose your personal data to Philippine government authorities, law enforcement agencies, PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or courts of competent jurisdiction where disclosure is required by applicable law, regulation, or lawful order.

7.3 Business Transfers

In the event of a merger, acquisition, or transfer of all or part of ff77's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations. You will be notified of any such transfer in advance where required by applicable law.

7.4 With Your Consent

ff77 may share your data with other parties where you have given explicit, informed consent for a specific purpose.

8. International Data Transfers

Some of ff77's service providers and game technology partners may be located outside the Philippines. Where personal data is transferred to a country that has not been found to provide an adequate level of data protection equivalent to Philippine standards, ff77 implements appropriate safeguards, including contractual clauses that impose data protection obligations consistent with the DPA on the receiving party.

By using ff77, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines for the purposes described in this Policy, subject to the safeguards described above.

9. Data Retention

ff77 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal and regulatory retention requirements. Specifically:

• Account and transaction records are retained for a minimum of five (5) years from the date of the last transaction, as required under the AMLA and applicable PAGCOR regulations;
• KYC documents are retained for a minimum of five (5) years from the date of submission or from account closure, whichever is later;
• Support communications are retained for three (3) years from the date of the interaction;
• Marketing consent records are retained until consent is withdrawn, plus a reasonable period thereafter for compliance documentation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

10. Cookies & Tracking Technologies

ff77 uses cookies and similar tracking technologies on the Platform to support essential platform functionality, security, and analytics. The types of cookies used by ff77 include:

• Strictly Necessary Cookies: Required for the ff77 Platform to function, including maintaining your session after ff77 Login, storing your PHP balance state, and enabling secure account access. These cookies cannot be disabled.
• Performance & Analytics Cookies: Used to understand how Filipino players interact with the ff77 Platform – which games are most visited, how long sessions last, and where technical errors occur. Data collected is aggregated and not used to identify individual players.
• Functional Cookies: Remember your preferences on the ff77 Platform, such as language settings, game lobby view preferences, and notification choices.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the ff77 Platform. ff77 does not use third-party advertising cookies or cross-site tracking for targeted advertising purposes.

11. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by ff77:

• Right to be Informed: You have the right to be informed of the purposes for which your data is collected and processed. This Policy constitutes ff77's fulfilment of this obligation.
• Right of Access: You may request a copy of the personal data ff77 holds about your account at any time by contacting ff77 support.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held by ff77.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where processing is no longer necessary, subject to ff77's legal and regulatory retention obligations described in Section 9.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes. You may withdraw consent to promotional communications at any time through your ff77 account settings or by contacting support.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
• Right to Lodge a Complaint: If you believe ff77 has violated your data privacy rights, you may lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, contact the ff77 Data Protection Officer at [email protected]. ff77 will respond to data subject requests within fifteen (15) calendar days of receipt. Complex requests may require up to thirty (30) days, with prior notification to the requesting party.

12. Children's Privacy – 21+ Platform

If you are a parent or guardian and believe your child has registered an account on ff77, please contact ff77 support immediately via live chat or at [email protected]. ff77 will investigate and act promptly.

13. Security Measures

ff77 implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the ff77 Platform;
• Hashed storage of account passwords (passwords are never stored in plaintext);
• OTP-based two-factor authentication for new device logins on the ff77 Platform;
• Role-based access controls limiting ff77 staff access to personal data on a need-to-know basis;
• Regular security assessments and vulnerability testing of the ff77 Platform infrastructure;
• Automatic session timeout to protect accounts left idle on the ff77 Login interface.

While ff77 employs industry-standard security practices, no system is entirely immune from security threats. In the event of a personal data breach that is likely to result in harm to affected players, ff77 will notify the NPC within seventy-two (72) hours of discovery and will promptly inform affected players in accordance with NPC Circular No. 16-03.

14. Third-Party Platform Links

The ff77 website may contain references or links to third-party websites or services (such as game provider information pages). This Privacy Policy applies solely to the ff77 Platform at ff77.bio. ff77 is not responsible for the privacy practices or content of any third-party sites. Players accessing third-party services are encouraged to review the applicable privacy policies of those services independently.

15. Updates to This Privacy Policy

ff77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players by in-platform notification or to your registered email address at least seven (7) days prior to taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. The current version of this Privacy Policy is always accessible at ff77.bio/privacy-policy. Your continued use of the ff77 Platform following the effective date of a revised Policy constitutes your acceptance of the updated terms.

16. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the personal data ff77 holds about you, please contact the ff77 Data Protection Officer:

Players from Manila, Cebu, Davao, Quezon City, Makati, Iloilo, and all regions across the Philippines may contact the ff77 DPO in English or Filipino. Complaints that cannot be resolved directly with ff77 may be escalated to the National Privacy Commission (NPC) of the Philippines.