yg77 Privacy Policy

yg77 ("the Platform", "we", "us", "our") operates the online casino and sportsbook platform accessible at yg77.bio, serving players in the Philippines. As a PAGCOR-regulated online gaming operator, yg77 is required by law to collect and process certain personal information from its players, including identity verification data and financial transaction records.

Beyond our regulatory obligations, yg77 processes personal data to deliver the gaming and betting services you use — to maintain your account, process your GCash and Maya deposits and withdrawals, credit bonuses, provide customer support, and ensure the security and integrity of the platform.

This Privacy Policy is governed by the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC). Where applicable, yg77 also observes PAGCOR's data handling requirements for licensed online gaming operators.

This Policy should be read alongside the yg77 Terms and Conditions, which form part of the legal agreement between yg77 and each registered player.

For the purposes of the Data Privacy Act of 2012, the Personal Information Controller responsible for the personal data of yg77 players is the entity operating the yg77 platform under PAGCOR authority.

All data protection enquiries, subject access requests, and formal complaints should be directed to the yg77 Data Privacy Officer (DPO) using the contact details set out in Section 15 of this Policy.

yg77 collects the following categories of personal data. The specific data collected depends on how you interact with the platform:

yg77 does not collect sensitive personal information beyond what is necessary for identity verification and age confirmation under PAGCOR KYC requirements. We do not collect racial or ethnic origin data, religious beliefs, political affiliations, health records, or sexual life data.

yg77 collects personal data through the following channels:

• Direct from you: When you register an account on yg77, complete your KYC verification, make a deposit or withdrawal, configure account settings, or contact yg77 support.
• Automatically during platform use: Technical data including your IP address, device details, and session metadata are collected automatically by yg77's platform systems every time you access the site, regardless of whether you are logged in.
• From payment providers: When you deposit via GCash, Maya, QR Ph, GrabPay, or a Philippine bank, yg77 receives a transaction confirmation containing the payment method identifier and amount. yg77 does not receive your full bank account credentials.
• From KYC verification partners: Where yg77 uses a third-party identity verification service provider to process government ID documents and facial verification, that provider returns a verification result and confidence score to yg77. The document image itself may be processed by the third-party KYC system.
• From PAGCOR: In connection with PAGCOR's Problem Gambling Exclusion (PGE) registry and other regulatory compliance processes, yg77 may receive or cross-check player data against PAGCOR-held records.

yg77 processes your personal data only for specified, explicit, and legitimate purposes. The primary purposes for which yg77 uses your data are:

• Account Management: Creating and maintaining your yg77 account, authenticating your identity on login, and managing account security including two-factor authentication.
• Identity & Age Verification (KYC): Verifying that you are who you claim to be and that you are at least 21 years old, as required by PAGCOR regulations. This is a mandatory legal obligation.
• Service Delivery: Processing your GCash deposits and withdrawals, awarding bonus credits, recording your game and betting activity, and delivering the gaming and sportsbook services you use on yg77.
• Customer Support: Responding to your support requests, resolving disputes, and maintaining records of support interactions for quality and compliance purposes.
• Legal & Regulatory Compliance: Complying with PAGCOR reporting requirements, Philippine anti-money laundering law (AMLA), Bureau of Internal Revenue (BIR) obligations, and any lawful request from a Philippine court or government authority.
• Fraud Prevention & Platform Security: Detecting and preventing fraud, money laundering, collusion, and other prohibited activities. Monitoring for unusual account behaviour that may indicate unauthorised access.
• Responsible Gaming: Monitoring gaming patterns for signs of problem gambling behaviour, enforcing deposit and session limits, and maintaining self-exclusion records in connection with PAGCOR's exclusion registry.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve yg77's game selection, platform performance, and user experience. Individual player data is not used for this purpose in a manner that could identify you.
• Communications: Sending you account-related notifications (deposit confirmations, withdrawal updates, security alerts, promotional bonus alerts) via your registered email address or mobile number. You may opt out of promotional communications at any time from your account settings.

Under the Data Privacy Act of 2012, yg77 processes personal data on the following legal bases:

• Contractual Necessity: Processing your identity data, contact data, financial data, and gaming data is necessary for the performance of the contract between you and yg77 (the Terms and Conditions). Without this processing, yg77 cannot provide its services.
• Legal Obligation: Processing for KYC, PAGCOR regulatory reporting, anti-money laundering compliance, and age verification is required by Philippine law. yg77 has no discretion to decline this processing.
• Legitimate Interests: Processing for fraud detection, platform security, responsible gaming monitoring, and aggregated analytics is based on yg77's legitimate interests in operating a safe and compliant gaming platform, where those interests are not overridden by your data privacy rights.
• Consent: Where yg77 processes personal data for purposes not covered by the above bases — such as sending promotional communications or using optional analytics — we rely on your consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

yg77 does not sell your personal data. We share personal data with third parties only in the following circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: GCash (GXI), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other payment providers receive the minimum personal and financial data necessary to process your deposits and withdrawals.
• Game Providers: Third-party game studios (including JILI, PG Soft, Pragmatic Play, Evolution Gaming, SA Gaming) receive a session token that enables them to serve games to your yg77 account. They do not receive your full identity or payment details.
• KYC Verification Partners: Identity and document verification service providers receive your ID document and facial image for the purpose of verifying your identity and age as required by PAGCOR. These providers process data under strict contractual confidentiality obligations.
• PAGCOR: yg77 reports player registration data, gaming activity summaries, and self-exclusion records to PAGCOR as required under its licensing conditions and Philippine gaming regulations.
• Anti-Money Laundering Council (AMLC): Where required by the Anti-Money Laundering Act of 2001 (AMLA) and its amendments, yg77 reports covered transactions and suspicious transactions to AMLC. This sharing is compelled by Philippine law.
• Law Enforcement & Courts: yg77 will disclose personal data to Philippine government agencies, law enforcement bodies, or courts when required to do so by a valid legal order, subpoena, or regulatory direction.
• Platform Infrastructure Providers: Cloud hosting, cybersecurity, and platform monitoring service providers that process data on behalf of yg77 under binding data processing agreements that restrict their use of your data to service delivery only.

yg77 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law, whichever is longer. The following retention periods apply:

• Account Data & KYC Records: Retained for a minimum of 5 years from the date of account closure or last transaction, in accordance with PAGCOR licensing requirements and AMLA record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, as required by AMLA and BIR tax obligations.
• Gaming Activity Records: Retained for a minimum of 2 years from the date of each gaming session, and longer where required by PAGCOR or connected to a dispute or investigation.
• Support Communication Records: Retained for 2 years from the date of each support interaction.
• Self-Exclusion Records: Retained indefinitely where a permanent self-exclusion is in effect, and for a minimum of 5 years after expiry of any time-limited self-exclusion period.
• Technical and Session Data: Aggregated technical data is retained for up to 24 months. Raw session logs may be retained for shorter periods.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised, unless retention for a longer period is required by a legal hold, active investigation, or court order.

yg77 implements technical and organisational security measures appropriate to the risk level of the personal data processed. These measures include, but are not limited to:

• Transport Encryption: All communications between your device and the yg77 platform are encrypted using TLS 1.2 or higher. The platform enforces HTTPS for all connections.
• Data-at-Rest Encryption: Stored personal data, KYC documents, and financial records are encrypted using AES-256 encryption in yg77's data storage systems.
• Access Controls: Access to player personal data within yg77's systems is restricted to authorised personnel whose job function requires access. Access logs are maintained and regularly reviewed.
• Two-Factor Authentication (2FA): yg77 supports and recommends 2FA for all player accounts. Administrative systems require 2FA for all staff access.
• Vulnerability Management: yg77 conducts regular security assessments and penetration tests on its platform infrastructure. Identified vulnerabilities are remediated according to a defined severity-based timeline.
• Incident Response: yg77 maintains a documented data breach response procedure. In the event of a breach affecting player personal data, yg77 will notify the National Privacy Commission and affected players within the timeframes required by Philippine data protection law.

While yg77 implements robust security measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your yg77 login credentials. Never share your password or OTP with any person, including persons claiming to represent yg77 support.

yg77 uses cookies and similar browser storage technologies to operate the platform and improve your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function — session authentication tokens, CSRF protection, and load balancing identifiers. These cannot be disabled without breaking platform functionality.
• Performance Cookies: Anonymised analytics that help yg77 understand how players navigate the platform — page load times, error rates, and feature usage patterns. No personally identifiable information is included in these analytics.
• Functional Cookies: Remember your preferences — such as language settings, game lobby view, and notification preferences — so you don't have to re-configure them on every visit.
• Security Cookies: Used to detect and mitigate fraudulent activity, bot access, and abnormal login patterns.

yg77 does not use behavioural advertising cookies or any cookies that track your activity across other websites for the purpose of building advertising profiles or targeting you with third-party advertisements.

Under the Data Privacy Act of 2012, yg77 players have the following rights with respect to their personal data:

To exercise any of these rights, contact the yg77 Data Privacy Officer using the details in Section 15. yg77 will respond to all valid data rights requests within 30 calendar days. Where a request is denied, yg77 will provide written reasons for the decision.

If you are dissatisfied with yg77's response to a data rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.

The yg77 platform is strictly for adults aged 21 years and above. yg77 does not knowingly collect personal data from any person under 21 years of age.

If yg77 discovers that personal data has been collected from a person under 21 — whether through misrepresentation during registration or otherwise — the associated account will be immediately closed, all data collected from that person will be deleted to the extent permitted by PAGCOR and AMLA record-keeping obligations, and any balance held in the account will be handled in accordance with applicable Philippine regulations and yg77's minor protection procedures.

If you are a parent or guardian and believe that your child (under 21) has registered on yg77, please contact us immediately at the address in Section 15 so we can take prompt action.

Some of yg77's third-party service providers — particularly international game studios (such as Evolution Gaming, JILI, and PG Soft) and cloud infrastructure providers — may process data outside the Philippines. Where personal data is transferred outside the Philippines, yg77 ensures that:

• The receiving party is bound by a data processing agreement that requires them to maintain data protection standards equivalent to those required under the Data Privacy Act of 2012;
• The transfer is limited to the minimum data necessary for the specific service being performed;
• The receiving party does not use the data for any purpose other than service delivery for yg77;
• The transfer is reported to the National Privacy Commission where required by applicable NPC issuances on cross-border data transfers.

By using the yg77 platform, you acknowledge and consent to the cross-border transfer of your personal data in the limited circumstances described above, subject to the safeguards outlined.

yg77 reserves the right to update or amend this Privacy Policy at any time. Material changes — those that significantly affect how yg77 processes your personal data or your rights under this Policy — will be notified to registered players via email or a prominent platform notification no less than 14 calendar days before the change takes effect.

The current version of this Privacy Policy is always available at yg77.bio/privacy-policy. The "Last Updated" date at the top of this page reflects when the most recent amendment was made.

Your continued use of the yg77 platform following notification of a material change constitutes your acceptance of the updated Privacy Policy. If you do not accept the changes, you should stop using yg77 and may request account closure as described in the yg77 Terms and Conditions.

For all data privacy matters — including subject access requests, rectification requests, erasure requests, objections to processing, and formal complaints — please contact the yg77 Data Privacy Officer:

When submitting a data rights request, please include your registered mobile number or email address so we can locate your account and verify your identity before processing the request.

If you are not satisfied with yg77's response to your data privacy request or complaint, you may file a complaint with the National Privacy Commission (NPC) of the Philippines. Information on filing an NPC complaint is available on the NPC's official website.