🔒 yg77 Privacy Policy

1. Data Controller

For the purposes of this Privacy Policy, yg77 ("we," "us," "our," or "the Company") acts as the data controller in respect of personal data collected from users of the yg77 platform. We are responsible for determining the purposes for which and the manner in which personal data is processed.

For any privacy-related queries, users may contact us via the details provided in Section 13 of this Policy. We are committed to responding to all legitimate privacy inquiries within a reasonable timeframe, and in any case within the periods prescribed by applicable law.

2. Personal Data We Collect

yg77 collects personal data through various channels in the course of providing its services. The categories of personal data we collect include, but are not limited to, the following:

2.1 Registration & Identity Data

• Full legal name as it appears on a government-issued Philippine identification document
• Date of birth (used to verify the 21+ age requirement)
• Email address and Philippine mobile number
• Residential address (province, city, barangay, and postal code)
• Government ID type and number (passport, driver's licence, SSS, PhilHealth, UMID)
• Selfie photographs submitted for identity verification purposes

2.2 Financial Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method references
• GCash, Maya, BPI, BDO, UnionBank, Metrobank, or other payment account identifiers (partial numbers only — full account credentials are never stored by yg77)
• Source of funds declarations where required by anti-money laundering obligations

2.3 Technical & Usage Data

• IP address and approximate geolocation derived therefrom
• Device type, operating system, browser type and version
• Session duration, pages visited, games played, and bet history
• Login timestamps and authentication method used
• Cookie identifiers and similar tracking technologies (see Section 8)

2.4 Communications Data

• Records of Live Chat, email, and in-platform support communications
• Promotional preferences and marketing consent records
• Responsible gaming self-assessment responses and self-exclusion requests

3. How We Use Your Personal Data

yg77 uses collected personal data solely for the following purposes:

yg77 does not use personal data for automated decision-making that produces legal effects concerning users, except where required for fraud detection — in which case a human review process is available upon request.

4. Legal Basis for Processing

yg77 processes personal data on the following legal bases under applicable data privacy law, including the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations:

• Contractual necessity: Processing required to fulfil our obligations under the user agreement, including account management, deposits, withdrawals, and game provision.
• Legal obligation: Processing required to comply with anti-money laundering regulations, age verification requirements, and regulatory reporting obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by the user's privacy rights.
• Consent: Processing for marketing communications, optional cookies beyond strictly necessary categories, and any other purpose for which we have explicitly sought your consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Third Parties

yg77 does not sell, rent, or trade personal data to any third party for commercial purposes. We may share personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors: GCash (G-Xchange, Inc.), Maya (PayMaya Philippines, Inc.), BPI, BDO, UnionBank, Metrobank, and other payment service providers — for the sole purpose of processing financial transactions.
• KYC and identity verification providers: Third-party identity verification platforms used to verify government-issued Philippine IDs and confirm user eligibility.
• Game software providers: Where live dealer or RNG game software is provided by a third party, game play data (but not full identity data) may be transmitted to that provider for game operation purposes.
• Regulatory authorities: Philippine government agencies and applicable regulatory bodies, where disclosure is required by law or lawful order.
• Legal and professional advisors: Lawyers, accountants, and auditors engaged by yg77, subject to professional confidentiality obligations.
• Platform infrastructure providers: Cloud hosting and content delivery providers used to operate the yg77 platform, subject to data processing agreements that restrict use to platform operation purposes only.

6. Data Retention

yg77 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, including compliance with legal, regulatory, and accounting obligations. The following general retention periods apply:

• Active account data: Retained for the duration of the account relationship.
• Closed account data: Identity and financial records are retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements under Philippine law.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Support communications: Retained for three (3) years from the date of the communication, unless required for longer in connection with a dispute or legal proceeding.
• Marketing preferences and consent records: Retained for the duration of the account relationship plus three (3) years.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any identifiable individual.

7. Security Measures

yg77 implements technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between user devices and yg77 servers
• Encryption of sensitive data fields (including government ID numbers and payment references) at rest
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Two-factor authentication options for user accounts
• Automated anomaly detection systems that flag unusual access patterns for human review
• Regular security assessments and penetration testing of platform infrastructure
• Staff training on data privacy and security obligations

Notwithstanding these measures, no internet-based system is entirely immune from security risks. Users are encouraged to protect their own accounts by using strong, unique passwords and enabling two-factor authentication. yg77 will never ask for your full password via email, Live Chat, or phone.

8. Cookies & Tracking Technologies

yg77 uses cookies and similar tracking technologies on the yg77.asia website. Cookies are small text files stored on your device that help us recognise returning users, maintain session state, and understand how the platform is used.

8.1 Categories of Cookies Used

• Strictly Necessary Cookies: Required for the platform to function — session authentication, security tokens, and load balancing. These cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: Used to understand how users interact with the platform — which pages are visited most frequently, error rates, and session duration. Data is aggregated and anonymised where possible.
• Preference Cookies: Store user preferences such as language settings and responsible gaming tool configurations.
• Marketing Cookies: Used only with your consent to measure the effectiveness of promotional campaigns. You may opt out of marketing cookies at any time via the Cookie Settings option.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair platform functionality, including the ability to log in to your yg77 account.

9. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012 and applicable regulations, you have the following rights in respect of your personal data held by yg77:

• Right to be Informed: The right to be told how your personal data is being collected and used — which this Policy fulfils.
• Right of Access: The right to request a copy of the personal data yg77 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to our legal retention obligations.
• Right to Object: The right to object to processing based on legitimate interests, including direct marketing.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format for transfer to another controller, where technically feasible.
• Right to Withdraw Consent: Where processing is based on consent, the right to withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, contact yg77 using the details in Section 13. We will respond to verified requests within thirty (30) days. Identity verification will be required before processing access or erasure requests.

10. Minors

The yg77 platform is strictly prohibited for persons under the age of 21. yg77 does not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from a person under 21, we will immediately close the associated account, delete the personal data, and — where required by law — report the matter to relevant authorities.

Parents and guardians who believe that a minor in their care may have provided personal data to yg77 are encouraged to contact us immediately using the details in Section 13 so that appropriate action can be taken without delay.

21+ Age is verified through KYC documentation as a mandatory step before real-money play is permitted.

11. Cross-Border Data Transfers

In certain circumstances, personal data may be transferred to or processed in jurisdictions outside the Philippines — for example, where platform infrastructure or third-party service providers are located abroad. Where such transfers occur, yg77 ensures that appropriate safeguards are in place, including contractual protections consistent with the requirements of the Philippine Data Privacy Act and its Implementing Rules and Regulations, to ensure that your personal data receives a standard of protection equivalent to that applicable in the Philippines.

12. Changes to This Privacy Policy

yg77 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. Material changes will be communicated to registered users via email or prominent in-platform notification no less than fourteen (14) days before the updated Policy takes effect. The date of the most recent revision is stated at the top of this Policy. Continued use of the yg77 platform following the effective date of any revision constitutes acceptance of the updated Policy.

13. Contact & Data Privacy Queries

For any questions, concerns, or requests regarding this Privacy Policy or yg77's data privacy practices, please contact us using the following details:

• Live Chat: Available 24/7 via the chat icon on the yg77 platform at yg77.asia
• Email: [email protected]

Please include "Privacy Request" in the subject line of any email inquiry to ensure prompt routing to the appropriate team. For complaints relating to breaches of the Philippine Data Privacy Act, you may also contact the National Privacy Commission at privacy.gov.ph.