Privacy Principles
Data Privacy Act Compliance
rgg77 processes all personal data in full compliance with Republic Act No. 10173, the Data Privacy Act of 2012, and implementing rules issued by the National Privacy Commission (NPC). Your privacy rights are protected under Philippine law.
TLS 1.3 Encryption
All data transmitted between your device and rgg77 servers is protected by TLS 1.3 encryption. Personal data stored on rgg77 servers is encrypted at rest using industry-standard AES-256 encryption and stored in secure Philippine data centers.
Your Data Rights
Under the Data Privacy Act, you have the right to access, correct, object to processing, and request deletion of your personal data held by rgg77, subject to PAGCOR's regulatory record-keeping requirements and applicable legal obligations.
No Third-Party Sales
rgg77 does not sell, rent, lease, or otherwise commercially transfer your personal data to third parties for their own marketing purposes. Your data is used solely for the purposes stated in this Privacy Policy and as required by law.
Defined Retention Periods
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by PAGCOR regulations and Philippine anti-money laundering laws. Retention periods for different data categories are detailed below.
Transparent Processing
This Privacy Policy provides clear, specific information about what data rgg77 collects, why we collect it, who we share it with, and how long we retain it. No hidden data processing — everything is documented here in plain language.
By registering an account on rgg77.cam or by continuing to use any part of the rgg77 platform, you acknowledge that you have read, understood, and consent to the collection, processing, storage, and use of your personal data as described in this Privacy Policy. This Privacy Policy should be read together with rgg77's Terms & Conditions and Responsible Gaming Policy.
Introduction
rgg77 (operating under the domain rgg77.cam) is committed to protecting the privacy and personal data of all registered users and visitors in accordance with the Republic of the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the policies and circulars issued by the National Privacy Commission (NPC).
This Privacy Policy applies to all personal data collected, processed, and stored by rgg77 through:
- The rgg77 website (rgg77.cam);
- The rgg77 mobile application (Android and iOS);
- Customer support channels, including live chat, email, and telephone;
- Payment processing systems integrated with rgg77's platform;
- Any other digital or physical interface through which you interact with rgg77.
As a PAGCOR-licensed online gaming operator in the Philippines, rgg77 is subject to additional regulatory requirements concerning player data, including Know Your Customer (KYC) obligations, anti-money laundering (AML) compliance, and responsible gaming record-keeping. These regulatory obligations form part of the legal basis for certain data processing activities described in this policy.
Categories of Personal Data We Collect
rgg77 collects and processes the following categories of personal data:
2.1 Account Registration Data
- Full legal name (as appearing on government-issued identification);
- Date of birth (for age verification in accordance with PAGCOR's 21+ requirement);
- Email address;
- Philippine mobile telephone number;
- Residential address (street, barangay, city/municipality, province, postal code);
- Username and password (password stored in hashed, non-reversible format);
- Security questions and answers (if enabled).
2.2 Identity Verification (KYC) Data
- Copies of government-issued identification documents, which may include: Philippine passport, driver's license, UMID, SSS ID, PhilHealth ID, Postal ID, or voter's ID;
- Photographs or scanned images of the Player holding their identification document (selfie verification);
- Proof of address documents (utility bill, bank statement, government correspondence);
- Biometric data where biometric login is enabled (fingerprint hash, facial recognition data stored locally on the Player's device only).
2.3 Financial and Transaction Data
- Payment method details (GCash mobile number, bank account name and last four digits, Maya account reference);
- Deposit transaction records (amount, timestamp, payment method, transaction reference number);
- Withdrawal transaction records (amount, timestamp, destination account, processing status);
- Wagering history (game played, bet amount, win/loss outcome, timestamp);
- Bonus redemption and wagering requirement status;
- Account balance history.
2.4 Technical and Usage Data
- IP address and geolocation data (to verify Philippine jurisdiction and detect fraud);
- Device information (device type, operating system, browser type and version, screen resolution);
- Login timestamps and session duration;
- Gameplay session data (games accessed, time spent in each game, bet patterns);
- Cookie identifiers and tracking pixels (see Section 10 for details).
2.5 Communications Data
- Live chat transcripts between Player and rgg77 support agents;
- Email correspondence;
- Telephone call recordings (where call recording is active and disclosed at the start of the call);
- Marketing communication preferences (opt-in/opt-out status for promotional emails and SMS).
How We Collect Your Personal Data
rgg77 collects personal data through the following methods:
- Directly from you: When you register an account, submit KYC documents, make deposits or withdrawals, contact customer support, or configure account settings on the rgg77 platform;
- Automatically through technology: When you access or use the rgg77 platform, we automatically collect technical data through cookies, server logs, and device fingerprinting technologies;
- From payment service p roviders: When you make deposits or withdrawals, rgg77 receives transaction confirmation data from GCash, Maya, BPI, BDO, Metrobank, and other integrated payment providers, limited to what is necessary to process and reconcile your transactions;
- From third-party verification services: rgg77 may use third-party identity verification providers to assist with KYC processing. These providers operate under data processing agreements with rgg77 and are bound by equivalent data protection obligations;
- From PAGCOR and regulatory databases: rgg77 may check your details against PAGCOR's self-exclusion registry and other regulatory databases as required by our license conditions.
Why We Process Your Personal Data
rgg77 processes your personal data for the following specific purposes:
| Purpose | Data Categories Used | Required? |
|---|---|---|
| Account registration and management | Registration data, technical data | Mandatory |
| Age and identity verification (KYC) | Registration data, KYC documents | Mandatory |
| Payment processing (deposits and withdrawals) | Financial data, KYC data | Mandatory |
| Anti-money laundering (AML) compliance | Financial data, KYC data, usage data | Legal obligation |
| PAGCOR regulatory reporting | All categories as required | Legal obligation |
| Fraud detection and prevention | Technical data, financial data | Legitimate interest |
| Responsible gaming monitoring | Usage data, financial data | Legal obligation |
| Customer support services | Communications data, account data | Contractual |
| Platform improvement and analytics | Technical data, usage data (anonymised) | Legitimate interest |
| Promotional communications | Registration data, preferences | Consent (opt-in only) |
rgg77 does not use your personal data for any purpose not listed above without first obtaining your explicit consent or being required to do so by law. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Legal Basis for Processing
Under the Data Privacy Act of 2012, rgg77 processes personal data on the following lawful bases:
- Performance of a contract: Processing necessary to create and manage your rgg77 account, process deposits and withdrawals, and deliver the gaming services you have requested;
- Legal obligation: Processing required to comply with PAGCOR licensing conditions, Republic Act No. 9160 (Anti-Money Laundering Act as amended), the Data Privacy Act itself, and other applicable Philippine laws;
- Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and anonymised analytics — where these interests are not overridden by your privacy rights;
- Consent: Processing for optional purposes such as promotional communications, participation in surveys, and non-essential cookies. Consent is collected at the point of registration or at the time the optional processing is offered, and can be withdrawn at any time.
Data Sharing and Third-Party Disclosure
rgg77 may share your personal data with the following categories of recipients, strictly limited to what is necessary for the stated purpose:
6.1 Regulatory and Government Authorities
rgg77 is legally required to disclose player data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government bodies upon lawful request or as required by our operating license. Players cannot opt out of disclosures required by law.
6.2 Payment Service Providers
rgg77 shares limited financial data with integrated Philippine payment providers — including GCash (Globe Fintech Innovations, Inc.), Maya (PayMaya Philippines, Inc.), BPI, BDO, Metrobank, and 7-Eleven CLiQQ — strictly to the extent necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and are regulated by Bangko Sentral ng Pilipinas (BSP).
6.3 Identity Verification Partners
rgg77 may use third-party KYC verification service providers to assist with processing identity documents. Such providers operate under formal data processing agreements with rgg77, are prohibited from using Player data for any purpose other than identity verification, and are required to maintain security standards equivalent to or exceeding those described in this policy.
6.4 Game Content Providers
rgg77 operates games developed by third-party providers including JILI, Pragmatic Play, PG Soft, and others. These providers may receive pseudonymised session data (a random session token, not your name or email) for the purpose of game delivery and technical support. They do not receive your identity or payment data.
6.5 What We Never Share
rgg77 does not sell, rent, lease, or exchange your personal data with third-party advertisers, data brokers, or marketing companies. We do not share your data with other online casinos or gaming operators. Your personal information is not a commercial asset that rgg77 trades.
Data Retention Periods
rgg77 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | 5 years after account closure | PAGCOR licensing requirements |
| KYC identity documents | 5 years after account closure | Anti-Money Laundering Act |
| Transaction records | 5 years after transaction date | AMLC / PAGCOR requirements |
| Wagering history | 3 years after account closure | PAGCOR responsible gaming rules |
| Customer support records | 3 years after interaction | Dispute resolution, legitimate interest |
| Technical / server logs | 12 months | Security and fraud detection |
| Marketing preferences | Until consent withdrawn | Consent-based |
| Cookie data | As per cookie type (see Section 10) | Consent / legitimate interest |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Data subject to an ongoing legal hold — such as data relevant to an active PAGCOR investigation, court proceeding, or AMLC inquiry — is retained until the legal hold is lifted.
Security Measures
rgg77 implements the following technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction:
- TLS 1.3 encryption on all web and API traffic
- HSTS (HTTP Strict Transport Security) enforced
- Certificate pinning on mobile applications
- AES-256 encryption for data at rest
- Passwords hashed using bcrypt (never stored in plain text)
- KYC documents stored in isolated, access-controlled vaults
- Role-based access control (RBAC) for all staff
- Multi-factor authentication required for all staff accounts
- Principle of least privilege enforced across systems
- 72-hour breach notification to NPC (as required by DPA)
- Affected players notified promptly upon confirmed breach
- Documented incident response procedure maintained
While rgg77 implements industry-standard security measures, no digital system is entirely immune to security risks. Players are encouraged to use a strong, unique password for their rgg77 account, enable two-factor authentication, and contact rgg77 support immediately if they suspect any unauthorised access to their account.
Your Privacy Rights Under the Data Privacy Act
As a data subject under the Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by rgg77:
- Right to be Informed: You have the right to be informed of the fact that your personal data is being collected, the purposes for which it is being processed, and the recipients to whom it may be disclosed. This Privacy Policy fulfills that obligation.
- Right to Access: You have the right to request a copy of the personal data that rgg77 holds about you, together with information about how it is being processed. Access requests can be submitted via live chat or email to [email protected].
- Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by rgg77. Some data corrections (particularly registered name or date of birth) may require submission of updated identity documentation.
- Right to Erasure or Blocking: You have the right to request deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, where your consent has been withdrawn, or where processing is unlawful. This right is subject to rgg77's legal obligations to retain certain data under PAGCOR regulations and the Anti-Money Laundering Act.
- Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including processing for direct marketing purposes. Objections to direct marketing are honored immediately upon receipt.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
- Right to Lodge a Complaint: If you believe that rgg77 has violated your rights under the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
To exercise any of your privacy rights, contact rgg77 via live chat (available 24/7 within the platform) or by email at [email protected]. Please include your registered email address, account username, the specific right you wish to exercise, and — for access or portability requests — the data categories you are requesting. rgg77 will respond to all privacy rights requests within 15 business days, in accordance with NPC guidelines.
Cookies and Tracking Technologies
rgg77 uses cookies and similar tracking technologies on its website and mobile platform. A cookie is a small text file stored on your device when you access rgg77. The following categories of cookies are used:
- Strictly Necessary Cookies: Required for the rgg77 platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. They cannot be disabled without preventing you from using core platform functionality. No consent is required for these cookies.
- Functional Cookies: Remember your preferences, such as your chosen language, display settings, and responsible gaming tool configurations. These improve your rgg77 experience but are not essential. Consent is requested at first visit and can be withdrawn at any time.
- Analytics Cookies: Collect anonymised data about how you navigate and interact with the rgg77 platform. This data helps rgg77 identify technical issues and improve the user experience. Analytics data is not linked to your identity. Consent is requested separately.
- Security and Fraud Prevention Cookies: Used to detect suspicious login patterns, multiple account creation, and other fraud indicators. These cookies are necessary for rgg77's PAGCOR compliance obligations and operate under the legitimate interest legal basis.
You can manage cookie preferences through your rgg77 account settings or through your browser's cookie management tools. Note that disabling strictly necessary cookies will prevent you from logging in to your rgg77 account.
Minors' Privacy — 21+ Platform
rgg77 is strictly an adults-only platform. In compliance with PAGCOR regulations, rgg77 does not knowingly collect personal data from persons under the age of 21. The platform is not directed at persons under 21 years of age, and rgg77 takes active measures to prevent underage access through KYC age verification procedures.
If rgg77 becomes aware that it has inadvertently collected personal data from a person under 21, it will immediately:
- Suspend the relevant account;
- Refund any deposited funds in accordance with applicable regulations;
- Delete or destroy all personal data collected from the underage individual, except where retention is required by law;
- Report the matter to PAGCOR as required by rgg77's licensing conditions.
If you believe a person under 21 has created or is using an rgg77 account, please report this to rgg77 support immediately via live chat or email. rgg77 treats underage account reports as high-priority compliance matters.
Changes to This Privacy Policy
rgg77 may update this Privacy Policy from time to time to reflect changes in Philippine data protection law, PAGCOR regulatory requirements, or our data processing practices. All updates are subject to the following process:
- Material changes — changes that meaningfully affect how your personal data is collected, used, or shared — will be communicated to registered Players via email notification to the address on record and via a prominent in-platform notification displayed upon next login, at least 14 days before the changes take effect;
- Minor changes — administrative corrections, formatting updates, or clarifications that do not alter the substance of the policy — will be reflected in the policy with an updated revision date, without individual notification;
- The current version of this Privacy Policy is always available at rgg77.cam/privacy-policy. The "Last Revised" date at the top of this document indicates when the most recent version was published.
Continued use of the rgg77 platform following the effective date of any update constitutes acceptance of the revised Privacy Policy. If you do not agree with any material changes, you may close your rgg77 account by contacting support prior to the effective date.
Contact — Data Protection Queries and Complaints
For all queries, requests, and complaints relating to this Privacy Policy or the processing of your personal data by rgg77, you may contact us through the following channels:
- Live Chat: Available 24/7 within the rgg77 platform. Select "Privacy / Data Request" from the support menu for fastest routing to the appropriate team.
- Email: [email protected] — please include "Privacy Request" in the subject line along with your registered account username.
rgg77 aims to acknowledge all privacy-related queries within 2 business days and to provide a substantive response within 15 business days. For complex requests involving large volumes of data or requiring inter-departmental coordination, the response period may be extended to 30 business days, with notice provided to you of the extension.
If your concern is not resolved to your satisfaction through rgg77's internal process, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the competent supervisory authority for data protection matters in the Philippines.
This Privacy Policy was last updated on 1 January 2026 and supersedes all prior versions. It is governed by and construed in accordance with the laws of the Republic of the Philippines.
Play on rgg77 — Your Data, Protected by Philippine Law
500+ PAGCOR-certified games, instant GCash deposits, and a platform built to protect Filipino players' privacy and rights. For players aged 21 and above.
PAGCOR licensed · DPA 2012 compliant · 21+ only · Play responsibly