hh77 Privacy Policy

hh77 operates hh77.lat as a PAGCOR-licensed online casino and sports betting platform serving registered adult players in the Philippines. In the course of providing our services, hh77 collects, processes, and stores personal information relating to our players. We take this responsibility seriously.

This Privacy Policy has been prepared in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations issued by the National Privacy Commission (NPC) of the Philippines. It is also consistent with hh77's obligations under its PAGCOR operating license, which includes data handling requirements specific to the gaming industry.

Throughout this Policy, "personal data" refers to any information — whether recorded in a material form or not — from which your identity is apparent or can be reasonably and directly ascertained, or when put together with other information, would directly and certainly identify you as an individual.

hh77 acts as the data controller for all personal data collected through hh77.lat. As data controller, hh77 determines the purposes and means of the processing of your personal data.

hh77 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection law. The DPO's contact details are provided in Section 15 of this Policy. You may direct any data privacy inquiry or exercise of rights to the DPO at any time.

hh77 collects personal data across the following categories, depending on the nature of your interaction with the Platform:

hh77 collects personal data through the following mechanisms:

• Direct Provision: Information you actively provide when registering an account, completing KYC verification, making deposits or withdrawals, updating account settings, or contacting customer support.
• Automated Technical Collection: Technical and usage data collected automatically through your browser or device when you access hh77.lat, including via cookies, session trackers, and server log files. See Section 11 for details on cookies.
• Payment Provider Data: Transaction confirmation data received from GCash, Maya, BDO, BPI, Metrobank, and cryptocurrency networks when you initiate deposits or withdrawals through the hh77 cashier.
• Game Provider Systems: Game session data transmitted from third-party game providers (e.g., Evolution Gaming, Pragmatic Play, PG Soft) through platform integration APIs, recording gameplay outcomes and wagering activity associated with your account.
• Third-Party Verification Services: Identity and age verification data from third-party KYC providers engaged by hh77 to fulfill its regulatory verification obligations, where applicable.
• Fraud and AML Screening: Data from screening services used to comply with anti-money laundering obligations under Philippine law and PAGCOR licensing conditions.

Under the Data Privacy Act of 2012 and its Implementing Rules, hh77 processes your personal data on one or more of the following lawful bases:

• Contractual Necessity: Processing required to fulfil hh77's contractual obligations to you as a registered Player, including account management, game access, payment processing, and withdrawal execution.
• Legal Obligation: Processing required to comply with applicable Philippine law, including the Data Privacy Act, the Anti-Money Laundering Act, PAGCOR licensing conditions, the Electronic Commerce Act, and any applicable tax reporting obligations.
• Legitimate Interests: Processing necessary for hh77's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of services offered to Filipino players — provided such interests are not overridden by your rights and interests.
• Consent: For processing activities that are not covered by the above bases — in particular, the sending of direct marketing communications and non-essential analytics — hh77 relies on your freely given, specific, informed, and unambiguous consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

hh77 uses the personal data we collect for the following purposes:

• To create, verify, manage, and maintain your hh77 Player Account, including enforcing the 21+ age eligibility requirement at registration and at withdrawal.
• To process deposits and withdrawals via GCash, Maya, BDO, BPI, Metrobank, and cryptocurrency channels, and to maintain accurate financial records of all transactions associated with your account.
• To provide access to real-money casino games, sports betting markets, bingo, and all other gaming services available on the hh77 Platform.
• To administer promotional bonuses, loyalty programs, and VIP benefits and to track wagering requirement fulfilment associated with bonus credits.
• To conduct Know Your Customer (KYC) identity verification and age verification in compliance with PAGCOR licensing requirements and Philippine AML obligations.
• To monitor transactions and gameplay activity for signs of fraud, money laundering, match-fixing, or other prohibited activities, and to report to the Anti-Money Laundering Council (AMLC) where legally required.
• To operate responsible gaming features, including deposit limit enforcement, session alert delivery, self-exclusion administration, and responsible gaming monitoring in compliance with PAGCOR requirements.
• To respond to customer support inquiries submitted via live chat and email, maintain support records, and improve the quality of support services.
• To analyze Platform usage patterns to improve product features, user experience, and game library curation for Filipino players.
• To send transactional communications including deposit confirmations, withdrawal notifications, password resets, and account security alerts.
• To send promotional communications regarding hh77 offers, new game releases, and Platform updates — subject to your communication preferences and applicable consent requirements.
• To enforce these Terms, investigate breaches, and take appropriate action including account suspension or closure where violations are confirmed.

hh77 does not sell, rent, or trade your personal data to any third party for their independent marketing purposes. We share your personal data only in the following circumstances and to the extent strictly necessary:

• Game Providers: We share your account identifier and session data with third-party game providers (e.g., Evolution Gaming, Pragmatic Play, PG Soft, JILI) to enable game access and session management. These providers are contractually bound to process your data solely for game delivery purposes.
• Payment Processors: We share transaction data with GCash, Maya, BDO, BPI, Metrobank, and cryptocurrency network operators as necessary to process deposits and withdrawals. Financial data sharing is limited to what each payment provider requires to complete the specific transaction.
• KYC and Identity Verification Providers: Where third-party KYC tools are used, identity documents and verification data are shared with those providers under data processing agreements that impose GDPR/DPA-equivalent data protection obligations.
• Regulatory Authorities: hh77 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or other Philippine government bodies when required by law, court order, or lawful regulatory demand.
• Fraud and Security Services: We engage third-party fraud prevention and cybersecurity service providers. These providers access only the minimum data necessary to perform their contracted services and are prohibited from using that data for other purposes.
• Professional Advisors: Our legal, audit, and accounting advisors may access personal data as necessary in the course of providing professional services, under binding confidentiality obligations.

hh77's primary data processing infrastructure is located within the Philippines. However, certain third-party service providers — including game providers and cloud infrastructure vendors — may process data in data centers located outside the Philippines.

Where personal data is transferred outside the Philippines, hh77 ensures that appropriate safeguards are in place in accordance with the Data Privacy Act and NPC issuances on cross-border data transfers. Safeguards may include contractual data processing agreements incorporating data protection clauses equivalent to those required under Philippine law, or reliance on jurisdictions recognized by the NPC as providing adequate data protection standards.

You may request information about the safeguards applicable to any specific international transfer by contacting hh77's Data Protection Officer at the contact details provided in Section 15.

hh77 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. Specific retention periods are determined by the nature of the data and the purpose of its processing:

• Account Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and Philippine tax law.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of each transaction, or longer where required by AMLC reporting obligations or ongoing investigations.
• KYC Documentation: Retained for a minimum of five (5) years following account closure, as required by the Anti-Money Laundering Act and PAGCOR licensing conditions.
• Gaming Session Logs: Retained for a period consistent with dispute resolution requirements and PAGCOR audit obligations, typically two (2) to five (5) years.
• Support Communications: Retained for two (2) years from the date of the communication, or longer where the subject matter relates to a formal complaint or ongoing investigation.
• Technical and Usage Logs: Retained for a period of twelve (12) months from collection, unless required to be retained longer for security investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with hh77's data disposal procedures. Anonymized data that can no longer be linked to an identifiable individual is not subject to this Policy and may be retained indefinitely for statistical and analytical purposes.

hh77 implements appropriate technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Key security controls include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and hh77 servers, consistent with the encryption standard used by Philippine commercial banks.
• Encrypted storage of passwords using industry-standard hashing algorithms. Passwords are never stored in plain text and are never accessible to hh77 staff.
• Two-factor authentication (2FA) availability for all Player Accounts, strongly recommended for all users.
• Access controls restricting internal access to personal data on a need-to-know basis, with role-based access permissions and audit logging of all internal data access events.
• Regular security vulnerability assessments and penetration testing of Platform infrastructure.
• DDoS protection and web application firewall (WAF) implementation to protect against unauthorized access attempts at the network and application layers.
• Secure data center environments for primary infrastructure, with physical access controls, environmental monitoring, and redundant power and connectivity.

hh77 uses cookies and similar tracking technologies to operate core platform functions and to analyze usage patterns. Cookies are small text files stored on your device by your browser when you visit hh77.lat.

11.1 Essential Cookies

Essential cookies are strictly necessary for the Platform to function. They maintain your login session, remember your language and display preferences, and support security features including CSRF protection. Essential cookies cannot be disabled without significantly impairing your ability to use hh77.

11.2 Analytics Cookies

Analytics cookies collect aggregated, anonymized information about how visitors use hh77.lat — which pages are visited most frequently, how long sessions last, and where users navigate from. This data helps hh77 improve the platform experience for Filipino players. Analytics cookies are only set with your consent.

11.3 Preference Cookies

Preference cookies remember your Platform settings — such as your preferred game lobby view or previously selected game categories — to provide a more personalized experience on return visits.

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, though note that blocking essential cookies will affect Platform functionality. Disabling analytics cookies will not affect your ability to play games or make transactions on hh77.

Under the Data Privacy Act of 2012, as a data subject you have the following rights in relation to your personal data processed by hh77. To exercise any of these rights, please contact hh77's Data Protection Officer using the details in Section 15. hh77 will respond to verified rights requests within thirty (30) calendar days.

Where hh77 discovers or has reasonable grounds to believe that a Player Account was created by a person under the age of 21, hh77 will immediately suspend the account, initiate age verification procedures, and — where underage access is confirmed — permanently close the account and return any deposited funds (excluding any bonus funds or winnings derived from game play, which will be forfeited) in accordance with PAGCOR regulations governing underage gambling incidents.

Any personal data inadvertently collected from an individual who is subsequently confirmed to be under 21 will be deleted from hh77's systems as promptly as reasonably practicable following confirmation of underage status, except to the extent that retention is required for the purposes of the incident report submitted to PAGCOR.

hh77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR licensing requirements. The effective date of the current version is displayed at the top of this document.

Where material changes are made to this Policy — particularly changes that affect the legal basis for processing, the categories of data shared with third parties, or your rights as a data subject — hh77 will notify registered Players via the email address on file and/or through a prominent notice on the Platform, with a reasonable notice period before the changes take effect.

Your continued use of the hh77 Platform following the effective date of any amendment constitutes acknowledgment of the updated Policy. If you object to any change, you may close your account and request deletion of your data in accordance with Section 12 above.

For any questions, concerns, or requests relating to this Privacy Policy or the exercise of your data subject rights, please contact hh77 through the following channels:

• Data Protection Officer (DPO): Reachable at [email protected] with the subject line "Data Privacy — [Your Account Username]." The DPO will acknowledge receipt within 24 hours and respond substantively within 30 calendar days.
• Live Support Chat: Available 24/7 through the hh77 Platform for general account and privacy inquiries. Formal data subject rights requests should be submitted in writing to the DPO email above for documentation purposes.
• NPC Complaints: If your concern is not resolved to your satisfaction by hh77's DPO, you have the right to file a complaint with the National Privacy Commission of the Philippines, which has jurisdiction over data privacy matters under Republic Act No. 10173.