Privacy Policy – vl77 Casino Data & Player Protection

1. About This Policy 2. Data We Collect 3. How We Collect Data 4. Legal Basis for Processing 5. How We Use Your Data 6. Sharing Your Data 7. Data Retention 8. Cookies & Tracking 9. Data Security 10. Your Rights 11. Children & Minors 12. Policy Changes 13. Contact & DPO

DPA 2012 Compliant

vl77 processes player data in full compliance with Republic Act 10173 (Data Privacy Act of 2012) and NPC regulations — the governing data protection law for Philippine players.

No Data Selling

vl77 does not sell, rent, or trade your personal information to third-party marketers. Your data is used solely to operate the vl77 platform and comply with legal obligations.

256-bit Encryption

All personal data transmitted between your device and vl77 servers is protected by TLS 1.3 / 256-bit SSL encryption. Stored data is encrypted at rest using AES-256.

Your Data Rights

Under the DPA, you have the right to access, correct, delete, and object to the processing of your personal data. Exercise these rights at any time through your vl77 account or support.

Defined Retention Periods

vl77 retains personal data only for as long as necessary — typically 5 years post-account closure for AML compliance, and shorter periods for marketing data where consent is withdrawn.

21+ Age Enforcement

Age verification data collected during KYC is used solely for age and identity verification purposes. vl77 is required by PAGCOR to verify that all real-money players are 21 years of age or older.

This Privacy Policy applies to all personal information collected by vl77 in connection with your use of vl77.asia, the vl77 mobile platform, and any communications between you and vl77. By registering an account or using the vl77 platform, you acknowledge that you have read and understood this Privacy Policy.

1. About This Policy

1.1 This Privacy Policy is issued by vl77 ("the Operator"), the operator of the online gaming platform accessible at vl77.asia, which is operated for the Philippines market.

1.2 As a data controller, vl77 determines the purposes and means by which personal data is processed. vl77 is committed to handling all personal information with transparency, integrity, and in accordance with its obligations under the Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations, and all relevant issuances of the National Privacy Commission.

1.3 This Policy should be read alongside vl77's Terms & Conditions and Responsible Gaming Policy, which are incorporated by reference.

2. Personal Data We Collect

2.1 vl77 collects the following categories of personal data from players, depending on how you interact with the platform:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, nationality	Account registration, KYC, age verification (21+)
Contact Data	Philippine mobile number, email address, residential address	Account management, OTP delivery, support communications
Identity Verification Data	Government-issued ID type and number, ID document images	KYC verification required before first withdrawal; PAGCOR compliance
Financial Data	GCash number, Maya number, bank account details (BPI, BDO, Metrobank), transaction history	Processing deposits and withdrawals; AML compliance
Gaming Data	Game session history, bet amounts, win/loss records, bonus usage	Account management, dispute resolution, responsible gaming monitoring
Technical Data	IP address, device type, browser type and version, operating system	Security, fraud prevention, geo-restriction enforcement
Usage Data	Pages visited, features accessed, session duration, click patterns	Platform improvement, personalisation, responsible gaming monitoring
Communications Data	Support chat transcripts, email correspondence	Dispute resolution, quality assurance, regulatory record-keeping

2.2 vl77 does not collect sensitive personal information (as defined under the DPA) beyond what is strictly necessary for identity verification and compliance purposes.

3. How We Collect Your Data

3.1 vl77 collects personal data through the following means:

Direct provision: Information you provide when you register an account, complete KYC verification, make a deposit or withdrawal request, or contact customer support.
Automated collection: Technical and usage data collected automatically when you access the vl77 platform, through cookies, server logs, and analytics tools.
Third-party providers: Identity verification data from KYC service providers; payment data from GCash, Maya, BPI, BDO, and other payment processors; fraud signals from fraud prevention partners.
Publicly available sources: In limited circumstances, vl77 may verify information against publicly available Philippine government or regulatory databases for fraud prevention and AML purposes.

4. Legal Basis for Processing

4.1 Under the Data Privacy Act of 2012, vl77 processes your personal data on one or more of the following legal grounds:

Contractual necessity: Processing required to perform the player agreement — including account management, game delivery, payment processing, and support services.
Legal obligation: Processing required to comply with PAGCOR regulations, Anti-Money Laundering Act (AMLA) obligations, and other applicable Philippine law.
Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where these interests are not overridden by your privacy rights.
Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. Consent may be withdrawn at any time.

5. How We Use Your Personal Data

5.1 vl77 uses the personal data it collects for the following purposes:

To create, manage, and maintain your vl77 account, including processing your deposits and withdrawals in Philippine Peso (PHP).
To verify your identity and age (21+) as required by PAGCOR and applicable Philippine law before processing your first withdrawal.
To detect, investigate, and prevent fraud, money laundering, and other prohibited activities in compliance with the Anti-Money Laundering Act (AMLA) and PAGCOR requirements.
To monitor your gaming activity for responsible gaming purposes — including identifying patterns that may indicate problem gambling — and to apply responsible gaming tools you have set on your account.
To provide customer support, resolve disputes, and maintain records required for regulatory purposes.
To send you transactional communications (e.g., deposit confirmation, withdrawal status, OTP codes) via SMS or email as required for account operation.
To send you promotional communications about vl77 offers, where you have consented to receive such communications. You may withdraw this consent at any time through your account notification settings.
To improve and personalise the vl77 platform, including game lobby personalisation based on your play history.
To comply with all applicable Philippine legal and regulatory requirements, including data retention obligations under the DPA and AMLA.

6. Sharing Your Personal Data

6.1 vl77 does not sell, rent, or trade your personal data to third-party marketers under any circumstances.

6.2 vl77 may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

Payment processors: GCash, Maya, BPI, BDO, Metrobank, 7-Eleven, and Coins.ph — shared only as necessary to process your transactions.
KYC and identity verification providers: Third-party verification services used to confirm your identity and age in compliance with PAGCOR requirements.
Game software providers: Licensed game studios (e.g., JILI, Evolution Gaming) receive anonymised session data necessary to deliver and audit game outcomes. No personally identifiable data beyond a session token is shared with game providers.
Fraud prevention and security providers: Shared to the extent necessary to detect and prevent fraudulent activity on the vl77 platform.
Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and Philippine law enforcement — where required by law or regulatory order.
Professional advisors: Legal counsel, auditors, and accountants — subject to professional confidentiality obligations.

6.3 All third-party recipients of vl77 player data are contractually required to handle that data in accordance with the Data Privacy Act of 2012 and vl77's data protection standards.

7. Data Retention

7.1 vl77 retains personal data for as long as your account is active and for the periods required by applicable Philippine law following account closure:

Account and KYC data: 5 years from the date of account closure, as required under AMLA regulations and PAGCOR record-keeping requirements.
Financial transaction data: 5 years from the date of each transaction, in compliance with AMLA obligations.
Gaming session data: 2 years from the date of each session, for dispute resolution and responsible gaming monitoring purposes.
Support communications: 2 years from the date of each interaction, for quality assurance and dispute resolution.
Marketing consent records: Until consent is withdrawn, plus 1 year for record-keeping purposes.

7.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with vl77's data destruction procedures.

8. Cookies & Tracking Technologies

8.1 The vl77 platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised gaming experience. The categories of cookies used are:

Strictly necessary cookies: Required for the platform to function — including session management, login state, and security tokens. These cannot be disabled without affecting platform functionality.
Performance cookies: Collect anonymised data about how players use the vl77 platform, used to improve performance and identify errors. No personally identifiable information is collected by these cookies.
Functional cookies: Remember your preferences such as language settings, game lobby filters, and responsible gaming settings to improve your experience on subsequent visits.
Analytics cookies: Used to understand aggregate usage patterns on the vl77 platform. Analytics data is anonymised and used only for internal platform improvement purposes.

8.2 You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair the functionality of the vl77 platform, including your ability to log in and play.

9. Data Security

9.1 vl77 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

TLS 1.3 / 256-bit SSL encryption for all data transmitted between your device and vl77 servers.
AES-256 encryption for sensitive personal data stored in vl77 databases.
Two-factor authentication (2FA) available for all player accounts.
Rate-limited login attempts and automated account lockout after repeated failed authentication attempts.
Regular third-party penetration testing and security audits of the vl77 platform.
Strict access controls ensuring that only authorised vl77 personnel can access personal data, on a need-to-know basis.
Staff data protection training and confidentiality obligations for all personnel with access to player data.

9.2 In the event of a personal data breach that poses a risk to your rights and freedoms, vl77 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the DPA and NPC Circular 16-03.

10. Your Data Subject Rights

10.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by vl77:

Right to be informed: The right to know what personal data vl77 holds about you, how it is used, and with whom it is shared.
Right of access: The right to obtain a copy of the personal data vl77 holds about you.
Right to rectification: The right to have inaccurate or incomplete personal data corrected. You may update most of your personal information directly through your vl77 account settings.
Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to vl77's legal retention obligations.
Right to object: The right to object to the processing of your personal data for direct marketing purposes. You may withdraw marketing consent at any time through your account notification settings.
Right to data portability: The right to receive a copy of your personal data in a commonly used, machine-readable format.
Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

10.2 To exercise any of the above rights, please contact vl77's Data Protection Officer using the contact details in Section 13. vl77 will respond to verified data rights requests within 15 business days.

11. Children and Minors

11.1 The vl77 platform is strictly for persons aged 21 years and older. vl77 does not knowingly collect personal data from persons under the age of 21. PAGCOR mandates a minimum age of 21 for all real-money online gambling in the Philippines.

11.2 If vl77 becomes aware that personal data has been collected from a person under the age of 21, all such data will be immediately deleted and the associated account will be permanently closed. If you believe a minor has registered on the vl77 platform, please contact our support team immediately.

12. Changes to This Privacy Policy

12.1 vl77 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. The "Last updated" date at the top of this page will be revised whenever the Policy is amended.

12.2 For material changes that significantly affect how your personal data is processed, vl77 will notify you via your registered mobile number or email address at least 7 days before the changes take effect.

12.3 Continued use of the vl77 platform after the effective date of any amendment to this Privacy Policy constitutes acceptance of the updated Policy.

13. Contact & Data Protection Officer

13.1 vl77 has appointed a Data Protection Officer (DPO) as required under the Data Privacy Act of 2012. If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us through the following channels:

Live Chat: Available 24/7 directly from the vl77 platform after logging in to your account. Select "Privacy / Data Request" as your enquiry type.
Email (plain text — not a clickable link): [email protected] — include "Privacy Request" in your subject line.

13.2 If you are not satisfied with vl77's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.

vl77 Privacy Policy

Contents