ma77 Privacy Policy

This Privacy Policy ("Policy") is issued by ma77 ("ma77," "we," "us," or "our") and applies to all personal data collected from users ("you," "Player," or "User") who access or use the ma77 online gaming platform, including the website at ma77.club, all associated mobile interfaces, games, promotions, and related services (collectively, the "Platform").

ma77 is committed to protecting the privacy and personal data of all Filipino players who use our Platform. This Policy explains what personal data we collect, the purposes for which we process it, how we protect it, who we share it with, and what rights you have in relation to your personal data under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, or "DPA") and its implementing rules and regulations.

This Policy should be read together with ma77's Terms & Conditions, which govern your use of the Platform. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.

ma77 collects personal data from you in several ways: directly when you register an account or interact with the Platform, automatically through your use of the Platform, and from third parties such as payment processors and identity verification providers. The categories of personal data we collect include:

ma77 processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which ma77 processes your personal data are:

• Account Registration and Management: To create and maintain your ma77 player account, verify your identity, and manage your account settings and preferences.
• Identity Verification (KYC): To verify that you meet the eligibility requirements to use the Platform, including age verification (21+) and identity confirmation, in compliance with PAGCOR regulations and anti-money laundering (AML) requirements.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods, and to maintain accurate financial records of all transactions.
• Game Provision and Platform Operation: To provide access to ma77's games — including live casino, slots, bingo, and sports betting — and to ensure the Platform functions correctly and securely.
• Regulatory Compliance: To comply with PAGCOR licensing requirements, AML obligations, tax reporting requirements, and any other applicable Philippine laws and regulations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct on the Platform.
• Responsible Gaming: To monitor gaming behavior for signs of problem gambling and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion.
• Customer Support: To respond to your queries, resolve disputes, and provide technical assistance.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about ma77 — but only where you have opted in to receive such communications. You can opt out at any time.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the functionality, design, and content of the ma77 Platform.

Under the Philippine Data Privacy Act of 2012, ma77 must have a lawful basis for processing your personal data. Depending on the specific processing activity, ma77 relies on one or more of the following legal bases:

• Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose — for example, when you opt in to receive marketing communications from ma77.
• Contractual Necessity: Where processing is necessary to perform the contract between you and ma77 — specifically, to provide you with access to the Platform and its services as described in the Terms & Conditions.
• Legal Obligation: Where processing is necessary for ma77 to comply with a legal obligation under Philippine law — including PAGCOR licensing requirements, AML obligations under Republic Act No. 9160 (Anti-Money Laundering Act), and tax reporting requirements.
• Legitimate Interests: Where processing is necessary for ma77's legitimate business interests — such as fraud prevention, platform security, and improving the quality of our services — provided that these interests are not overridden by your rights and interests.

ma77 does not sell, rent, or trade your personal data to third parties. However, in order to operate the Platform and comply with our legal obligations, ma77 may share your personal data with the following categories of third parties:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing deposits and withdrawals. These providers receive only the data necessary to complete the transaction.
• Identity Verification Providers: Third-party KYC and identity verification service providers who assist ma77 in verifying player identities and ages in compliance with PAGCOR requirements.
• Game Software Providers: Licensed game developers and providers whose games are available on the ma77 Platform. These providers may receive anonymized or pseudonymized gaming data for the purpose of game operation and integrity monitoring.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where disclosure is required by law or regulatory obligation.
• IT and Security Service Providers: Cloud hosting providers, cybersecurity firms, and IT infrastructure providers who support the operation and security of the ma77 Platform. All such providers are bound by data processing agreements that require them to protect your data.
• Professional Advisors: Lawyers, auditors, and accountants who provide professional services to ma77, where access to your data is necessary for those services.

ma77 does not transfer personal data outside the Philippines except where necessary to comply with international regulatory requirements or where the recipient country provides an adequate level of data protection as determined by the National Privacy Commission.

ma77 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and support security and fraud prevention measures. A cookie is a small text file placed on your device when you visit the ma77 website.

The types of cookies used on the ma77 Platform include:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as account login, session management, and security. These cookies cannot be disabled.
• Performance and Analytics Cookies: These cookies collect anonymized information about how players use the Platform — such as which pages are visited most frequently and how long sessions last — to help ma77 improve the Platform's performance and user experience.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, display settings, and game history — to provide a more personalized experience on the Platform.
• Security Cookies: These cookies help ma77 detect and prevent fraudulent activity, unauthorized account access, and other security threats on the Platform.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the ma77 Platform. Strictly necessary cookies cannot be disabled as they are essential for the Platform to operate.

ma77 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, ma77 will securely delete or anonymize your personal data in accordance with our data disposal procedures. Where data is anonymized rather than deleted, the anonymized data may be retained indefinitely for statistical and analytical purposes, as it can no longer be linked to you as an individual.

ma77 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the ma77 Platform is encrypted using industry-standard 256-bit SSL/TLS encryption, ensuring that your data cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive personal data — including identity documents, financial account details, and passwords — is stored in encrypted form on secure servers with restricted access.
• Access Controls: Access to personal data within ma77 is strictly limited to authorized personnel who require access to perform their job functions. All staff with access to personal data are subject to confidentiality obligations.
• Two-Factor Authentication: ma77 supports and encourages the use of OTP-based two-factor authentication on all player accounts to prevent unauthorized access.
• Regular Security Audits: ma77 conducts regular security assessments and penetration testing to identify and address potential vulnerabilities in our systems.
• Incident Response: ma77 maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, ma77 will notify the National Privacy Commission and affected players in accordance with RA 10173 requirements.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by ma77:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfills ma77's obligation to inform you.
• Right to Access: You have the right to request a copy of the personal data that ma77 holds about you, along with information about how it is being processed.
• Right to Correction: You have the right to request that ma77 correct any inaccurate or incomplete personal data we hold about you. You can update most account information directly through your ma77 account dashboard.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ma77's legal retention obligations under PAGCOR and AML regulations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes. You can exercise this right by updating your marketing preferences in your account dashboard or by contacting our Data Protection Officer.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that this data be transmitted to another data controller where technically feasible.
• Right to Lodge a Complaint: If you believe that ma77 has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

The ma77 Platform is strictly intended for adults who are 21 years of age or older, in compliance with PAGCOR regulations governing online gaming in the Philippines. ma77 does not knowingly collect personal data from individuals under the age of 21.

If ma77 discovers or is notified that personal data has been collected from a person under 21 years of age, we will immediately:

• Suspend the associated account pending investigation.
• Delete all personal data collected from the underage individual.
• Refund any deposits made, at ma77's sole discretion, in accordance with our Terms & Conditions.
• Report the incident to PAGCOR as required by our licensing obligations.

If you are a parent or guardian and believe that your child has registered an account on the ma77 Platform, please contact us immediately at [email protected] so that we can take prompt action.

ma77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or the features and services available on the Platform.

When material changes are made to this Policy, ma77 will notify registered players via email or through a prominent notice on the Platform. The "Last Updated" date at the top of this page will be revised to reflect the date of the most recent changes.

Your continued use of the ma77 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with any changes to this Policy, you must stop using the Platform and may request account closure by contacting ma77 support.

ma77 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act of 2012 and the implementing rules and regulations of the National Privacy Commission. The DPO is responsible for overseeing ma77's compliance with RA 10173 and for handling all data privacy-related inquiries and requests from players.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how ma77 handles your personal data, please contact our Data Protection Officer using the details below:

If you are not satisfied with ma77's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC is the government authority responsible for administering and enforcing RA 10173 in the Philippines.