me77 Casino — Privacy Policy

01 Introduction & Scope

This Privacy Policy ("Policy") describes how me77 ("the Company", "we", "us", "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "Member", "User") who access or use the me77 online gaming platform at me77.asia and all associated services (collectively, the "Platform").

This Policy applies to all personal data collected through: registration and account management; deposits, withdrawals, and financial transactions; gameplay activity; interactions with me77 customer support; marketing communications; and use of the me77 website and any mobile-optimised interfaces.

This Policy should be read alongside the me77 Terms & Conditions. By registering on the Platform or continuing to use it, you acknowledge that you have read, understood, and consent to the data practices described in this Policy.

02 Data Controller

me77 is the data controller responsible for your personal information processed through the Platform. As data controller, me77 determines the purposes for which your personal data is processed and the means by which it is processed, in accordance with the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations.

me77 has appointed a Data Protection Officer (DPO) to oversee data protection compliance and to serve as the point of contact for all data subject rights requests and privacy-related inquiries. Contact details for the DPO are provided in Section 13 of this Policy.

03 Personal Data We Collect

3.1 Registration and Identity Data

When you create a me77 account, we collect the following personal data:

• Full legal name (as appearing on a valid Philippine government-issued ID)
• Date of birth (to verify the 21+ age requirement mandated by PAGCOR)
• Philippine mobile number
• Email address
• Residential address in the Philippines
• Username and encrypted password

3.2 Identity Verification (KYC) Data

As required for KYC compliance and withdrawal processing, we may collect:

• Copies of government-issued ID documents (PhilSys National ID, Passport, Driver's License, SSS/GSIS ID)
• Proof of address documentation
• Source of funds documentation, where required by anti-money laundering obligations

3.3 Financial Transaction Data

In connection with deposits and withdrawals, we collect:

• GCash mobile number or PayMaya account details
• Bank account details (account name, account number, bank name) for BPI, BDO, or Metrobank transfers
• Transaction amounts, dates, reference numbers, and status records

3.4 Gameplay and Platform Activity Data

We collect data relating to your activity on the me77 Platform, including:

• Game sessions played, wagers placed, and game outcomes
• Loyalty Points accrued and VIP tier status
• Bonuses claimed and wagering progress
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status)

3.5 Technical and Device Data

We automatically collect certain technical data when you access the Platform:

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type
• Session timestamps and login history
• Referral URL and pages visited within the Platform

3.6 Communication Data

When you contact me77 customer support, we retain records of those communications, including the content of support tickets, chat transcripts, and email correspondence, for quality assurance and dispute resolution purposes.

04 How We Use Your Personal Data

05 Legal Basis for Processing

Under the Data Privacy Act of 2012, me77 processes your personal data based on the following legal grounds:

• Consent: Where you have given specific, informed, and freely given consent for a specific processing purpose — primarily for marketing communications and optional personalization features.
• Contractual Necessity: Processing necessary for the performance of the contract between you and me77 — including account creation, transaction processing, and game delivery.
• Legal Obligation: Processing required for compliance with applicable Philippine laws, including RA 9160 (Anti-Money Laundering Act), PAGCOR reporting requirements, and the Data Privacy Act itself.
• Legitimate Interests: Processing necessary for legitimate business interests, including fraud prevention, security monitoring, and Platform analytics, provided these interests are not overridden by your fundamental rights and freedoms.

06 Sharing Your Personal Data

me77 does not sell your personal data. We may share your data with the following categories of recipients, only to the extent necessary for the stated purpose:

• PAGCOR: As required under me77's regulatory framework, certain player account and transaction data must be made available to PAGCOR upon request.
• Anti-Money Laundering Council (AMLC): Suspicious transaction reports and related data are filed with the AMLC as mandated by RA 9160 as amended.
• Payment Service Providers: GCash, PayMaya, BPI, BDO, and Metrobank receive necessary transaction data to process deposits and withdrawals.
• Game Software Providers: JILI Gaming, PG Soft, Pragmatic Play, and other certified providers may receive anonymised session data necessary for game delivery and RNG certification audits.
• KYC and Fraud Prevention Services: Identity verification and anti-fraud technology providers process KYC documents under strict data processing agreements.
• IT Infrastructure and Cloud Service Providers: Hosting, database, and security service providers operate under binding data processing agreements with appropriate safeguards.
• Law Enforcement and Regulatory Authorities: Where required by Philippine law, court order, or lawful authority, me77 may disclose personal data to law enforcement or regulatory bodies.

07 Data Retention

me77 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by Philippine law. The following general retention periods apply:

• Account and registration data: Retained for the duration of your active account plus five (5) years following account closure, as required for gaming regulatory purposes.
• Financial transaction records: Retained for a minimum of five (5) years as required under RA 9160 (Anti-Money Laundering Act) and PAGCOR regulations.
• KYC documentation: Retained for five (5) years following the end of the business relationship, in compliance with AMLC requirements.
• Customer support records: Retained for three (3) years from the date of the last interaction for quality assurance and dispute resolution purposes.
• Technical and device data: Retained for twelve (12) months and then anonymised or deleted.
• Marketing consent records: Retained for the duration of your consent, plus a reasonable period thereafter for compliance evidence.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard methods.

08 Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files stored on your device by your browser when you visit a website. me77 uses cookies and similar tracking technologies (pixel tags, session storage) to operate and improve the Platform, maintain your login session, and analyse traffic patterns.

8.2 Types of Cookies Used by me77

• Essential Cookies: Required for the Platform to function. These enable login session management, security features, and basic Platform navigation. They cannot be disabled without impairing Platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data on how Members use the Platform — which pages are visited, game categories accessed, and session duration. This data helps me77 improve the Platform experience.
• Preference Cookies: Store your Platform preferences (e.g., language settings, display preferences) to personalise your experience across sessions.
• Security Cookies: Support fraud detection, suspicious login identification, and session integrity verification.

8.3 Managing Cookies

You can configure your browser to refuse non-essential cookies or to alert you when cookies are being set. Note that disabling essential cookies will impair your ability to use the me77 Platform, including maintaining your login session. Browser-level cookie controls are available in the settings menus of all major browsers used in the Philippines, including Chrome, Safari, and Firefox.

09 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by me77:

• Right to Be Informed: The right to be notified of the purposes for which your personal data is being collected and processed — as fulfilled by this Privacy Policy.
• Right of Access: The right to request a copy of the personal data me77 holds about you and information about how it is processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held in your me77 account.
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where processing is unlawful, no longer necessary, or where consent has been withdrawn — subject to me77's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another controller, where technically feasible.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your rights under RA 10173 have been violated.

10 Data Security

me77 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and me77's servers
• Encryption of sensitive data fields (including passwords) at rest using industry-standard cryptographic methods
• Two-factor authentication (2FA) available to all Members for account login security
• Role-based access controls limiting internal access to personal data on a need-to-know basis
• Regular security assessments, penetration testing, and vulnerability management
• Incident response procedures aligned with RA 10173 breach notification requirements

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, me77 will notify the National Privacy Commission and affected Members within the timeframes required by RA 10173 and its implementing regulations.

11 Children's and Minors' Privacy

The me77 Platform is strictly prohibited for individuals under 21 years of age, as required by PAGCOR regulations applicable to Philippine online gaming platforms. me77 does not knowingly collect personal data from individuals under 21. Age verification is conducted at registration and as part of the KYC process.

If me77 becomes aware that it has collected personal data from a person under the minimum age, that account will be immediately and permanently closed, all balances forfeited, and the personal data collected will be deleted in accordance with RA 10173 and applicable PAGCOR regulations. If you believe a minor has registered on the me77 Platform, please contact our support team immediately.

12 Updates to This Privacy Policy

me77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or regulatory obligations. Material changes will be communicated to Members by prominent notice on the Platform and/or notification to the Member's registered email address or mobile number, with reasonable advance notice before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the me77 Platform following the effective date of any update constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.

13 Contact Us & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by me77, please contact our Data Protection Officer:

You also have the right to file a complaint with the National Privacy Commission of the Philippines if you believe your rights under RA 10173 have not been adequately addressed by me77. Information about the NPC complaints process is available through official Philippine government channels.