pnl77 Privacy Policy

This Privacy Policy ("Policy") is issued by pnl77 ("pnl77", "we", "us", "our") and applies to all personal data collected from individuals ("Players", "you", "your") who access, register for, or use the pnl77 online gaming platform accessible at pnl77.app, including all associated subpages, features, mobile-optimized interfaces, and customer support channels.

This Policy is intended to comply with the requirements of Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA") of the Philippines, its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission ("NPC") of the Philippines. pnl77 processes the personal data of Filipino players in accordance with the principles of transparency, legitimate purpose, and proportionality as established under the DPA.

By creating a pnl77 account and using the platform, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. This Policy is incorporated by reference into pnl77's Terms and Conditions. Continued use of the platform constitutes ongoing acceptance of this Policy and any updates made to it.

For the purposes of the Data Privacy Act of 2012 and this Policy, pnl77 is the personal information controller ("PIC") in respect of personal data collected from Players using the pnl77 platform. As the PIC, pnl77 determines the purposes for which and the means by which personal data is processed.

pnl77 has designated a Data Protection Officer ("DPO") responsible for ensuring compliance with data protection obligations under Philippine law and for responding to data subject requests and complaints. Inquiries relating to data privacy, requests to exercise your data rights, and privacy-related complaints may be directed to pnl77's support team via the Live Chat service available within the platform, or by email at [email protected] with the subject line "Data Privacy."

pnl77 collects the following categories of personal data from Players. All data collected is limited to what is necessary for the purposes described in this Policy:

• GCash account number and registered mobile number associated with the GCash wallet used for deposits or withdrawals.
• PayMaya account details used for payment transactions.
• Bank account numbers, bank name, and account holder name for bank transfer transactions (BDO, BPI, Metrobank, Unionbank).
• Transaction history: deposit amounts, withdrawal requests, timestamps, payment references, and transaction statuses.
• Wallet balance and Bonus Credit balances associated with a Player's Account.
• Source of funds information where required for compliance with anti-money laundering regulations.

• IP address and general geolocation data derived from IP address at the time of login and session activity.
• Device type, operating system, browser type and version, and screen resolution.
• Session timestamps, login history, and duration of platform sessions.
• Game activity: games played, wager amounts, outcomes, and session activity by game category.
• Interaction logs: pages visited within the platform, features accessed, and support chat transcripts.
• Cookie and similar tracking technology data as described in Section 8 of this Policy.

• Records of communications between Players and pnl77 support staff, including Live Chat transcripts, email correspondence, and any documentation submitted in relation to support requests or disputes.
• Voluntary feedback, survey responses, or promotional participation data provided by Players.

pnl77 collects personal data through the following means:

• Direct collection: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to promotional communications.
• Automated technical collection: Data automatically generated when you access and use the pnl77 platform, including IP address, device identifiers, session logs, and game activity data.
• Payment processor data: Confirmation and reference data received from payment processors (GCash, PayMaya, BDO, BPI, Metrobank, Unionbank) when transactions are initiated or completed.
• Identity verification providers: Results and verification status data from third-party identity verification services used to conduct KYC checks on Player-submitted documents.
• Fraud prevention and AML screening services: Risk signals and screening results from third-party compliance services used to detect and prevent financial crime.
• Cookies and tracking technologies: Session and analytics data collected via cookies and similar tracking technologies as described in Section 8 of this Policy.

Under the Data Privacy Act of 2012, pnl77 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to establish and maintain your pnl77 account, process deposits and withdrawals, and deliver the gaming services you have registered to use.
• Consent: Where you have provided explicit consent to data processing for specific purposes, such as receiving promotional communications or participating in optional loyalty programs. You may withdraw consent at any time by contacting pnl77 support.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including KYC and age verification requirements, anti-money laundering (AML) obligations, tax reporting requirements, and any lawful regulatory directive.
• Legitimate interests: Processing carried out in pursuit of pnl77's legitimate interests in operating a secure and compliant gaming platform, preventing fraud, ensuring platform integrity, and improving the quality of services offered to Filipino players — provided that such processing does not override Players' fundamental rights and freedoms.

pnl77 uses the personal data collected from Filipino Players for the following specific purposes:

• Creating, maintaining, and administering your pnl77 Account, including authentication, session management, and account security.
• Verifying your identity and age (21+ requirement) as part of the KYC process and ongoing compliance obligations.
• Processing deposits and withdrawals through GCash, PayMaya, and banking channels, and maintaining accurate transaction records.
• Administering promotions, bonuses, loyalty points, and VIP program benefits associated with your Account.
• Providing 24/7 customer support in Tagalog and English via Live Chat and email, and maintaining records of communications for quality assurance and dispute resolution.

• Meeting Philippine legal and regulatory obligations, including AML/CFT compliance, KYC verification, and regulatory reporting requirements.
• Detecting, investigating, and preventing fraud, unauthorized account access, bonus abuse, money laundering, and other prohibited activity on the pnl77 platform.
• Enforcing pnl77's Terms and Conditions, including investigating violations and taking appropriate account action.
• Processing and responding to responsible gaming requests, including deposit limit applications, self-exclusion requests, and account restriction requests.

• Analyzing aggregated and anonymized usage data to understand platform performance, identify technical issues, and improve the user experience for Filipino players.
• Sending transactional communications, including deposit confirmations, withdrawal notifications, account security alerts, and policy update notices.
• Sending promotional communications, offers, and personalized game recommendations — only where you have consented to receive such communications and have not opted out.

pnl77 does not sell, rent, or trade your personal data to third parties for their independent marketing or commercial purposes. Personal data may be disclosed to the following categories of third parties solely to the extent necessary for the purposes described in this Policy:

• Payment processors: GCash (GXI), PayMaya (Maya Philippines), and Philippine banking institutions — solely for the purpose of processing deposits and withdrawals initiated by you.
• Identity verification providers: Third-party KYC and document verification services used to confirm your identity and age as required by Philippine regulatory obligations.
• Game providers: Certified third-party game studios (JILI, Pragmatic Play, PG Soft, and others) receive limited session and wager data required for game delivery and RNG auditing purposes. No financial or detailed identity data is shared with game providers.
• Fraud prevention and AML compliance services: Risk screening and transaction monitoring service providers engaged to assist in detecting and preventing financial crime.
• Regulatory and law enforcement authorities: Philippine government agencies and regulatory bodies where disclosure is required by law, court order, regulatory directive, or legitimate law enforcement request.
• Professional advisors: Legal, accounting, and auditing professionals engaged by pnl77 under confidentiality obligations where access to personal data is required in the course of professional services.
• Business successors: In the event of a merger, acquisition, or sale of pnl77's business, personal data may be transferred to the acquiring entity subject to equivalent data protection obligations being maintained. Players will be notified in the event of such a transfer.

All third parties to whom pnl77 discloses personal data are required to maintain appropriate security standards and to use the data only for the specific purposes for which it was disclosed. pnl77 does not permit third-party processors to use Player data for any independent purpose beyond the scope of the services they provide to pnl77.

pnl77 uses cookies and similar session tracking technologies to operate the platform, maintain login sessions, prevent fraud, and improve the user experience. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without preventing platform use.
• Functional cookies: Remember your preferences, such as language settings, game view preferences, and responsible gaming notification settings, to provide a consistent experience across sessions.
• Analytics cookies: Collect anonymized and aggregated usage data to help pnl77 understand how Filipino players interact with the platform and identify areas for improvement. This data is never shared in identifiable form.
• Security and fraud prevention cookies: Assist in detecting and preventing fraudulent login attempts, automated bot activity, and unauthorized access to Player Accounts.

Most browsers allow you to control cookies through their settings. Disabling strictly necessary cookies will impair or prevent your use of the pnl77 platform. Disabling analytics and functional cookies will not prevent access but may reduce the consistency of your experience. pnl77 does not use third-party advertising or retargeting cookies.

pnl77 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account data (identity, contact, KYC): Retained for the duration of the active Account relationship and for a minimum of five (5) years following permanent Account closure, as required for AML compliance and regulatory audit purposes under Philippine law.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required under Philippine AML and tax record-keeping obligations.
• Game activity and session logs: Retained for a minimum of two (2) years for operational purposes, dispute resolution, and regulatory compliance.
• Support communications: Retained for two (2) years from the date of the last communication, unless the communication relates to a formal dispute or investigation, in which case it is retained for five (5) years.
• Analytics and technical data: Aggregated and anonymized analytics data may be retained indefinitely for platform improvement purposes. Raw technical logs are retained for a maximum of ninety (90) days.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized using industry-standard methods.

pnl77 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• TLS 1.3 / 256-bit SSL encryption for all data transmitted between your browser or device and pnl77's servers — the same standard used by Philippine online banking institutions.
• AES-256 encryption for sensitive data at rest, including stored identity documents and financial reference data.
• Token-based session authentication with automatic session expiry on inactivity, preventing unauthorized access to inactive sessions.
• Multi-factor authentication (OTP via SMS) available and recommended for all pnl77 Accounts.
• Role-based access controls limiting internal staff access to personal data on a need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of platform infrastructure.
• Secure data center facilities with physical access controls and environmental monitoring.
• Staff data protection training and confidentiality obligations for all personnel with access to personal data.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights in relation to your personal data held by pnl77. To exercise any of these rights, contact pnl77 support via Live Chat or email at [email protected]:

• Right to be informed: You have the right to be informed of how your personal data is being processed, which this Privacy Policy fulfills. You may request clarification on any aspect of this Policy at any time.
• Right to access: You have the right to request a copy of the personal data pnl77 holds about you, including the categories of data, the purposes of processing, and any third parties to whom it has been disclosed.
• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data held by pnl77. You may update basic account information (email, mobile number) directly through Account Settings; changes to identity or KYC data require submission to support.
• Right to erasure: You have the right to request deletion of your personal data, subject to pnl77's legal obligations to retain certain data for AML, regulatory, and audit purposes as described in Section 9.
• Right to object: You have the right to object to processing of your personal data for direct marketing or profiling purposes. Opting out of promotional communications can be done through Account Settings or by contacting support.
• Right to data portability: You have the right to request a copy of your personal data in a structured, machine-readable format for transfer to another service provider, where technically feasible.
• Right to file a complaint: If you believe pnl77 has not handled your personal data in compliance with the Data Privacy Act, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.

pnl77 will respond to data rights requests within thirty (30) calendar days of receipt. Where requests are complex or numerous, pnl77 may extend this period by up to sixty (60) additional days, with prior written notice provided to the requesting Player.

pnl77 is strictly an adult gaming platform. The platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21. In the Philippines, online real-money gaming is restricted to adults aged 21 years and above.

Age verification is conducted on all new Accounts as part of the KYC process. Where pnl77 identifies or has reasonable grounds to suspect that a registered Player is under 21 years of age, the Account will be immediately suspended pending investigation, and if confirmed, permanently terminated with all associated data retained only as required for regulatory compliance and then securely deleted.

If you are a parent or guardian and believe your child may have accessed pnl77, please contact our support team immediately via Live Chat or email. We will investigate and take appropriate action promptly.

In the course of delivering its services, pnl77 may transfer certain categories of personal data to servers or service providers located outside the Philippines — for example, to cloud infrastructure providers or certified game studio servers in other jurisdictions. Where such transfers occur, pnl77 ensures that:

• The receiving jurisdiction provides an adequate level of data protection, or equivalent contractual safeguards (such as standard contractual clauses or binding corporate rules) are in place to protect the transferred data.
• The transfer is limited to the minimum data necessary for the specific purpose and is not used by the recipient for any purpose beyond what pnl77 has authorized.
• Receiving third parties are bound by data processing agreements that impose equivalent data protection obligations to those described in this Policy.

The primary personal data of Filipino players — including identity, financial, and contact data — is stored and processed in server environments with security standards meeting or exceeding those required by the Data Privacy Act of 2012.

pnl77 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business practices, or platform features. When material changes are made, pnl77 will notify registered Players via an in-platform notification and/or email to their registered address at least seven (7) calendar days before the updated Policy takes effect.

The effective date at the top of this Policy reflects the date of the most recent material revision. The current version of the Privacy Policy is always available at pnl77.app/privacy-policy and supersedes all prior versions. Continued use of the pnl77 platform after the effective date of any amendments constitutes acceptance of the updated Policy.

For any questions, requests, or complaints relating to this Privacy Policy or pnl77's data processing practices, please contact us through the following channels:

• Live Chat: Available 24/7 within the pnl77 platform after login. Our team responds in Tagalog and English and can handle data privacy requests directly.
• Email: [email protected] — use subject line "Data Privacy Request" for fastest routing. Responses within 24 hours for most inquiries.

If you are not satisfied with pnl77's response to a data privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the Philippine government agency responsible for administering and enforcing the Data Privacy Act of 2012.