plu77 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how plu77, operated through the domain plu77.org ("plu77", "we", "us", or "our"), collects, uses, stores, discloses, and protects personal data relating to individuals ("you", "your", or "Data Subject") who access or use the plu77 online gaming platform, including its website, account services, gaming features, and any related communications.

By registering an account with plu77 or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must not register an account or use the plu77 platform.

This Policy applies to all personal data processed by plu77, whether provided directly by you, collected automatically through your use of the platform, or obtained from third-party sources such as payment processors or KYC verification partners.

2. Data Controller Information

plu77 (plu77.org) is the data controller for the personal data processed under this Privacy Policy. As the data controller, plu77 determines the purposes and means of processing your personal data and bears primary responsibility for ensuring that such processing is conducted lawfully, fairly, and transparently.

For all data-related inquiries, corrections, deletion requests, or complaints, please contact us at: support at plu77.org — or via the 24/7 live chat feature within your logged-in plu77 account.

3. Personal Data We Collect

3.1 Registration and Account Data

• Full legal name as it appears on your government-issued Philippine ID
• Date of birth (used to verify the 21+ age requirement)
• Philippine mobile number and/or email address
• Residential address in the Philippines
• Username and encrypted password credentials

3.2 Identity Verification (KYC) Data

• Copies of valid Philippine government-issued identification documents (e.g., PhilSys ID, passport, driver's license, UMID, SSS ID)
• Selfie or facial image submitted for liveness verification, where required
• Additional proof of address documents, if requested during enhanced verification

3.3 Financial and Transaction Data

• GCash wallet number and/or PayMaya account linked to your plu77 account
• Bank account details (BPI, BDO, Metrobank) used for deposits or withdrawals
• Deposit amounts, withdrawal amounts, and transaction timestamps
• Tokenized payment method references (we do not store full card numbers)
• Complete transaction history associated with your plu77 account

3.4 Gaming Activity Data

• Game session logs including game type, bet amounts, outcomes, and timestamps
• Bonus claims, wagering progress, and promotion participation records
• Responsible gaming tool usage (deposit limits, session limits, self-exclusion status)

3.5 Technical and Device Data

• IP address and approximate geographic location at time of login
• Device type, operating system, and browser or app version
• Session identifiers, cookies, and authentication tokens
• Platform navigation logs and feature interaction data used to improve user experience

3.6 Communications Data

• Support chat transcripts and email correspondence with the plu77 team
• Records of any complaints, disputes, or account enquiries submitted

4. How We Collect Your Data

plu77 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, contact support, or update account settings.
• Automatically — through cookies, server logs, and technical tracking as you interact with the plu77 platform, including login events, game sessions, and page navigation.
• From third-party partners — including KYC verification service providers, payment processors (GCash, PayMaya, bank partners), and fraud detection services, where necessary to fulfil our legal and operational obligations.

5. Purposes and Legal Basis for Processing

plu77 processes personal data on the following legal bases:

• Performance of a contract — processing your registration, deposits, withdrawals, and game participation is necessary to provide the services you have requested.
• Legal obligation — KYC/AML compliance, age verification, transaction record-keeping, and reporting obligations imposed by applicable Philippine regulations.
• Legitimate interests — fraud prevention, platform security, responsible gaming monitoring, and improving the platform experience, where these interests do not override your fundamental data rights.
• Consent — for non-essential communications such as promotional emails or SMS notifications, where you have opted in to receive them.

6. How We Use Your Personal Data

plu77 uses your personal data for the following purposes:

• To create and manage your plu77 player account
• To verify your identity and age eligibility (21+ requirement) in compliance with applicable standards
• To process deposits, withdrawals, and maintain accurate account balance records in PHP
• To deliver gaming services, including live casino, slots, and bingo room access
• To detect, investigate, and prevent fraud, money laundering, account abuse, and other prohibited conduct
• To administer responsible gaming tools, including monitoring for problem gambling indicators and enforcing self-exclusion requests
• To provide customer support via live chat and email
• To communicate important account notifications, security alerts, and updates to our Terms or Policies
• To send promotional communications where you have consented to receive them
• To analyze platform usage patterns and improve the plu77 user experience
• To comply with applicable legal and regulatory obligations

7. Sharing of Personal Data

plu77 does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash (Mynt/Globe Fintech), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, and card payment processors — for deposit and withdrawal processing.
• KYC and identity verification providers: Third-party services used to verify Philippine government-issued IDs and conduct liveness checks as part of our compliance obligations.
• Fraud detection and security services: Technology partners who assist with IP reputation monitoring, device fingerprinting, and anti-fraud analysis.
• Regulatory and law enforcement authorities: Where required by applicable Philippine law, court order, or binding regulatory instruction.
• Professional advisors: Legal counsel, auditors, and compliance consultants, subject to strict professional confidentiality obligations.

All third-party data processors engaged by plu77 are contractually bound to process your personal data only as instructed by plu77 and in accordance with applicable data protection standards.

8. Cookies and Tracking Technologies

plu77 uses the following categories of cookies and similar tracking technologies:

• Strictly Necessary Cookies: Session tokens and authentication cookies required to keep you logged in and maintain your account session securely. These cannot be disabled without breaking core platform functionality.
• Performance Cookies: Anonymous data on page load times, error rates, and feature usage patterns — used internally to identify and resolve technical issues and improve platform stability.
• Security Cookies: Device fingerprinting and fraud-detection signals used to identify suspicious login attempts or account access patterns inconsistent with your normal behavior.

plu77 does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to the plu77 platform.

9. Data Retention

plu77 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable legal and regulatory obligations. Specific retention periods apply as follows:

• Account and KYC records: Retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements applicable in the Philippine context.
• Transaction records: Retained for a minimum of five (5) years to support financial audits and regulatory reporting.
• Support and communications records: Retained for three (3) years following the last interaction, for dispute resolution and quality assurance purposes.
• Technical and session logs: Retained for up to twelve (12) months for security monitoring and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with plu77's internal data lifecycle management procedures.

10. Security of Your Personal Data

plu77 implements industry-standard technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and plu77 servers
• AES-256 encryption for sensitive personal data stored at rest
• Two-factor authentication (2FA) available for all player accounts
• Restricted internal access to personal data on a strict need-to-know basis
• Regular security audits and penetration testing by qualified security professionals
• Tokenization of payment method data to prevent storage of sensitive financial credentials

While plu77 takes all reasonable precautions to protect your data, no internet transmission is completely secure. In the event of a data breach that is likely to result in a high risk to your rights, plu77 will notify affected players without undue delay.

11. Your Rights as a Data Subject

As a player registered with plu77, you have the following rights with respect to your personal data:

• Right of Access: You may request a copy of the personal data plu77 holds about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data in your account.
• Right to Erasure: You may request deletion of your personal data, subject to legal retention obligations that may require us to retain certain records.
• Right to Restriction: You may request that plu77 restrict the processing of your data in certain circumstances, such as while a dispute is under investigation.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format for transfer to another service.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes. You may opt out of promotional communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

To exercise any of the above rights, contact plu77 at support at plu77.org or via live chat. We will respond to verified requests within thirty (30) days.

12. Children and Minors

plu77 is strictly for adults who are 21+ years of age or older. We do not knowingly collect personal data from individuals under 21. If we discover that a minor has registered an account or submitted personal data to plu77, we will immediately close the account, delete all associated personal data, and reverse any transactions made.

If you believe a minor has accessed the plu77 platform using false information, please contact us immediately at support at plu77.org so we can investigate and take appropriate action.

13. Changes to This Privacy Policy

plu77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. Material changes will be communicated to registered players via email or prominent in-platform notice at least seven (7) days before the changes take effect, where reasonably practicable.

The "Last updated" date at the top of this Policy indicates when it was most recently revised. Continued use of the plu77 platform following any amendment constitutes your acceptance of the revised Privacy Policy.

14. Contact and Data Enquiries

For any questions, requests, or complaints regarding this Privacy Policy or plu77's data practices, please contact our Data Protection team through the following channels:

• Email: support at plu77.org
• Live Chat: Available 24/7 from your logged-in plu77 account dashboard

We aim to acknowledge all data-related enquiries within 48 hours and to resolve them fully within thirty (30) days. Our support agents are available in both English and Tagalog.

You also have the right to lodge a complaint with the relevant Philippine data protection authority if you believe your personal data rights have been violated.