This Privacy Policy explains what personal data ap77 collects when you use our platform, how we use and protect that data, and what rights you have as a data subject under the Data Privacy Act of 2012 and applicable Philippine law.
The full legal text is below — but these six points capture what ap77's approach to your privacy actually means in practice.
All personal data stored by ap77 is encrypted at rest using industry-standard AES-256 encryption. Passwords are hashed and salted — even ap77's own systems cannot read your actual password. Financial data and identity documents are held in isolated, access-controlled storage environments.
Under the Data Privacy Act of 2012, Filipino data subjects have the right to access, correct, delete, and object to the processing of their personal data. ap77 supports all of these rights and provides a clear process for submitting data requests through our support team.
ap77 does not sell, rent, or trade your personal data to third-party marketers under any circumstances. Data shared with third parties — such as payment processors and game providers — is strictly limited to what is necessary to deliver the services you use.
ap77 only collects the data that is strictly necessary for account operation, regulatory compliance, and service delivery. We do not collect data speculatively. The principle of data minimization guides every ap77 data collection decision.
ap77 uses cookies to maintain login sessions and improve platform performance. We do not use third-party advertising trackers or cross-site behavioral profiling cookies. You can manage cookie preferences through your browser settings at any time.
In the event of a personal data breach, ap77 will notify affected Users and the National Privacy Commission (NPC) in accordance with the timelines and requirements set out under RA 10173 and NPC Circular 16-03. We maintain a documented incident response plan for this purpose.
Scope: This Privacy Policy applies to all personal data processed by ap77 in connection with your use of the ap77 platform at ap77.biz, including our online casino, sportsbook, and all associated services. It should be read together with our Terms & Conditions.
ap77 is the data controller responsible for the personal data you provide when registering and using the ap77 platform at ap77.biz. ap77 operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is registered with the National Privacy Commission (NPC) of the Philippines as required under Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA).
This Privacy Policy applies to all Users who access or register on the ap77 platform, regardless of whether they are located in Metro Manila, Cebu, Davao, or any other part of the Philippines. It also applies to visitors who browse the ap77 website without registering, to the extent that their browsing data is collected through cookies and server logs.
By creating an ap77 account or otherwise providing your personal data to ap77, you confirm that you have read and understood this Privacy Policy and consent to the collection, processing, and use of your personal data as described herein.
ap77 collects personal data from you in several ways: directly when you register or use our services, automatically through your use of the platform, and from third parties such as payment processors and identity verification providers. The categories of personal data we collect are described in the table below.
| Category | Specific Data Points | How Collected |
|---|---|---|
| Identity Data | Full name, date of birth, gender, government ID type and number, selfie photograph | KYC registration form, document upload |
| Contact Data | Mobile number, email address, residential address | Account registration, profile updates |
| Financial Data | GCash or Maya account number, bank account details, transaction history, deposit and withdrawal records | Payment processing, cashier transactions |
| Gaming Data | Game history, wager amounts, wins and losses, bonus usage, session durations, responsible gaming settings | Automatically generated during platform use |
| Technical Data | IP address, device type, operating system, browser type and version, login timestamps, session tokens | Automatically collected via server logs and cookies |
| Communications Data | Live chat transcripts, support email content, feedback submissions | Customer support interactions |
Sensitive Personal Information: Government-issued ID information and facial photographs used for KYC are classified as sensitive personal information under RA 10173. ap77 applies heightened security controls to these data categories and processes them only for the specific purposes of identity verification and regulatory compliance.
ap77 processes your personal data for the following specific purposes:
Under the Data Privacy Act of 2012, ap77 relies on the following legal bases when processing your personal data:
ap77 does not sell, rent, or trade your personal data. We share personal data with third parties only where necessary and only under strict contractual data protection obligations. The categories of third parties with whom ap77 may share your data are:
ap77 requires all third-party data processors to execute a Data Processing Agreement (DPA) before receiving any personal data. These agreements require processors to implement appropriate technical and organizational security measures and to process data only as instructed by ap77.
ap77 uses the following categories of cookies on the ap77 platform:
ap77 does not use third-party advertising cookies, cross-site tracking pixels, or behavioral profiling technologies that follow you across other websites. We do not use cookie data to serve targeted advertisements on third-party platforms.
You can manage or delete cookies through your browser settings at any time. Note that disabling essential cookies will affect your ability to remain logged in and use certain platform features. For specific browser instructions, consult your browser's help documentation.
ap77 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
Following the expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that renders re-identification impossible. Where a legal hold or regulatory investigation requires retention beyond the standard period, ap77 will maintain the data until the matter is resolved.
ap77 implements a comprehensive set of technical, organizational, and administrative security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include:
Your Role in Security: No security system is entirely foolproof. You also play an important role in protecting your account — use a strong, unique password for ap77, enable 2FA, never share your login credentials, and always sign out after using a shared device. If you suspect your account has been compromised, contact ap77 support immediately.
Under the Data Privacy Act of 2012 (RA 10173), as a Filipino data subject, you have the following rights in respect of your personal data held by ap77:
Request a copy of the personal data ap77 holds about you, together with information on how it is processed.
Request correction of inaccurate or incomplete personal data held by ap77. Minor corrections (e.g., contact details) can be made directly through your account profile.
Request deletion of your personal data where there is no legitimate legal or regulatory basis for continued retention. Note that ap77 is required to retain certain data under PAGCOR and AMLA rules even after account closure.
Object to processing based on ap77's legitimate interests. You may also withdraw marketing consent at any time via your notification settings or by contacting our DPO.
Request your personal data in a structured, commonly used, machine-readable format where technically feasible and legally permissible under RA 10173.
Lodge a complaint with the National Privacy Commission (NPC) if you believe ap77 has processed your personal data in violation of RA 10173.
To exercise any of the above rights, submit a written request to our Data Protection Officer at [email protected] or through our live support chat. ap77 will respond to verified data subject requests within 15 business days, in line with NPC guidance. We may request proof of identity before processing your request to protect against unauthorized access to your data.
The ap77 platform is strictly intended for persons aged twenty-one (21) years and above, in accordance with PAGCOR regulations and Philippine law. ap77 does not knowingly collect, use, or retain personal data from individuals under 21 years of age.
If ap77 discovers or is notified that personal data has been collected from a person under the age of 21, the relevant account will be immediately closed, all personal data associated with that account will be deleted (subject to any legally mandated retention period), and the matter may be referred to PAGCOR. Any funds in such an account will be handled in accordance with PAGCOR's requirements for underage gaming violations.
21+ Only: If you are aware of a person under 21 who has or is attempting to create an ap77 account, please contact our support team immediately at [email protected]. ap77 takes underage gambling prevention seriously and acts on all such reports promptly.
ap77 primarily processes and stores personal data within the Philippines. However, certain service providers — including cloud infrastructure providers, international game content providers, and technology vendors — may process data in data centers located outside the Philippines.
Where personal data is transferred outside the Philippines, ap77 ensures that the transfer is protected by appropriate safeguards as required under RA 10173 and NPC regulations. These safeguards include contractual data transfer agreements that require the recipient to maintain data protection standards equivalent to those mandated by Philippine law, combined with technical security controls including encryption in transit and at rest.
ap77 does not transfer personal data to jurisdictions that have been designated by the NPC as having inadequate data protection standards without additional protective measures in place.
ap77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. The "Last Updated" date at the top of this page will be revised accordingly.
Where changes are material — for example, where we introduce new categories of data collection or new purposes for processing — ap77 will notify registered Users via email or in-platform notification at least seven (7) days before the updated Policy takes effect. For non-material updates (such as corrections of typographical errors or clarifications that do not change the substance of data processing), no advance notice will be provided.
Continued use of the ap77 platform after the effective date of any updated Policy constitutes acceptance of the revised terms. If you do not accept the revised Policy, you must cease using the platform. Previous versions of this Policy are available from our Data Protection Officer on request.
ap77 has appointed a Data Protection Officer (DPO) as required under RA 10173. If you have any questions, concerns, or requests relating to this Privacy Policy or ap77's data processing activities, you may contact our DPO through the following channels:
Data Protection Officer: ap77 DPO Office
DPO Email: [email protected]
General Support: [email protected] | Live chat at ap77.biz (24/7)
Regulator: National Privacy Commission (NPC), 5th Floor, Delegation Building, PICC Complex, Pasay City, Metro Manila
ap77 aims to respond to all data subject requests and DPO inquiries within 15 business days. If you are not satisfied with ap77's response, you have the right to escalate the matter directly to the National Privacy Commission.
ap77 is PAGCOR-licensed, NPC-registered, and built with Filipino players' privacy as a genuine priority — not an afterthought. Over one million Filipino players from Manila to Mindanao trust ap77 with their data and their gaming. Join them today. Must be 21 or older.