pera77 Privacy Policy

pera77 ("we," "us," or "the Company") is committed to protecting the privacy and personal data of every player who uses the pera77 platform ("Platform"). This Privacy Policy describes how pera77 collects, uses, stores, shares, and protects personal information in connection with your use of the Platform, including all games, services, promotions, and account features available at pera77.app.

This Privacy Policy applies to all registered players, visitors to the Platform, and any individual whose personal data is processed by pera77 in connection with the services we provide. It should be read together with our Terms & Conditions, which govern your use of the Platform.

By registering on pera77 or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact us to close your account.

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, pera77 acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes in connection with the Platform.

As Personal Information Controller, pera77 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently. Where pera77 engages third-party service providers to process data on its behalf, those providers act as Personal Information Processors (PIPs) and are bound by data processing agreements that require them to handle your data in accordance with this Policy and applicable law.

Our designated Data Protection Officer (DPO) can be contacted using the details provided in Section 13 of this Policy.

pera77 collects personal data from you in the following ways: directly when you register or interact with the Platform, automatically when you use the Platform, and from third parties where permitted by law. The categories of personal data we collect include:

pera77 does not intentionally collect sensitive personal information (as defined under RA 10173) unless strictly required for regulatory compliance purposes, such as anti-money laundering (AML) obligations. Where sensitive data is collected, it is handled with additional safeguards and processed only on a lawful basis.

pera77 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and manage your pera77 account, including processing your registration, verifying your identity, and enabling you to log in securely.
• Service Delivery: To provide you with access to all games, promotions, and features available on the Platform, and to process your deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels.
• Regulatory Compliance: To fulfill our obligations under applicable Philippine law, including Know Your Customer (KYC) requirements, Anti-Money Laundering (AML) obligations, and any reporting requirements imposed by relevant regulatory authorities.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, to enforce self-exclusion requests, and to apply deposit and session limits set by you or required by regulation.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, and other illegal or prohibited activities on the Platform.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance in connection with your pera77 account.
• Platform Improvement: To analyze usage patterns, conduct internal research, and improve the performance, features, and user experience of the Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about pera77 — but only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time.
• Legal Claims: To establish, exercise, or defend legal claims in connection with your use of the Platform.

pera77 processes your personal data only where a lawful basis exists under the Data Privacy Act of 2012. The legal bases we rely on are:

• Contractual Necessity: Processing is necessary to perform the contract between you and pera77 — specifically, to provide you with access to the Platform and its services in accordance with our Terms & Conditions.
• Legal Obligation: Processing is necessary to comply with applicable Philippine laws and regulations, including KYC, AML, and gaming regulatory requirements.
• Legitimate Interests: Processing is necessary for pera77's legitimate interests, including fraud prevention, platform security, and improving our services, provided those interests are not overridden by your rights and interests.
• Consent: Where we rely on your consent as the legal basis for processing (e.g., for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

pera77 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to the extent necessary to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML service providers engaged to verify your identity and comply with regulatory obligations.
• Game Content Providers: Licensed game studios and software providers whose games are available on the Platform, where necessary for game operation and dispute resolution.
• IT & Security Service Providers: Cloud hosting, cybersecurity, and technical infrastructure providers who process data on our behalf under strict data processing agreements.
• Regulatory Authorities: Philippine government agencies, law enforcement bodies, and gaming regulators, where disclosure is required by law or a valid legal order.
• Professional Advisers: Lawyers, auditors, and other professional advisers, where necessary for legal compliance, dispute resolution, or business operations.

All third-party processors engaged by pera77 are required to implement appropriate technical and organizational security measures and to process personal data only in accordance with pera77's documented instructions.

pera77 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in accordance with AML and gaming regulatory requirements.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations.
• KYC / Verification Documents: Retained for the duration of your account and for five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing Consent Records: Retained for as long as you remain opted in, plus three (3) years following withdrawal of consent, to demonstrate compliance.
• Technical / Log Data: Typically retained for twelve (12) months, unless required for longer periods for security investigations or legal purposes.

When personal data is no longer required, pera77 will securely delete or anonymize it in accordance with our internal data disposal procedures.

pera77 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. We use the following types of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in to your pera77 account and security tokens that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences, such as language settings and display options, to provide a more personalized experience on pera77.
• Analytics Cookies: Help us understand how players use the Platform — which pages are visited most, where players encounter issues, and how we can improve the overall experience. Data collected is aggregated and anonymized where possible.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access attempts, and other security threats to your pera77 account.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.

pera77 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the pera77 Platform is encrypted using SSL/TLS protocols. Sensitive data at rest, including financial information and identity documents, is encrypted using industry-standard algorithms.
• Access Controls: Access to personal data is restricted to authorized pera77 personnel and third-party processors on a strict need-to-know basis. All access is logged and regularly audited.
• Secure Infrastructure: The Platform is hosted on secure, regularly patched server infrastructure with firewall protection, intrusion detection systems, and continuous security monitoring.
• Incident Response: pera77 maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission and affected individuals in accordance with the requirements of RA 10173.
• Staff Training: All pera77 personnel with access to personal data receive regular training on data privacy obligations and security best practices.

While pera77 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your pera77 login credentials and for notifying us immediately if you suspect unauthorized access to your account.

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by pera77:

• Right to Be Informed: The right to be told how your personal data is being collected and processed — which is the purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data pera77 holds about you, along with information about how it is being used.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format, where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 13. We will respond to all verified requests within thirty (30) days. In complex cases, we may extend this period by a further thirty (30) days, with prior notice to you.

The pera77 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. pera77 does not knowingly collect personal data from individuals under the age of 21.

If pera77 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on pera77, please contact us immediately using the details in Section 13.

Parents and guardians are encouraged to use parental control tools and to monitor the online activities of minors in their care to prevent underage access to gambling platforms.

pera77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we provide. When material changes are made, we will notify registered players via email or an in-platform notification prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how pera77 protects your personal data. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgment of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by pera77, please contact our Data Protection Officer (DPO):

• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 through the pera77 Platform
• Response Time: We aim to acknowledge all privacy-related requests within 5 business days and to resolve them within 30 days.

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.