np77 Privacy Policy

For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173), the Personal Information Controller responsible for the personal data collected through np77.asia is the operator of the np77 platform ("np77," "we," "us," or "our"). np77 operates the online casino and sports betting platform accessible at np77.asia, serving players across the Philippines.

np77 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and with RA 10173. Contact details for the DPO are provided in Section 12. The DPO is the appropriate point of contact for any privacy-related inquiry, data subject rights request, or complaint.

np77 processes personal data of players located in the Philippines. This Policy applies to all personal data collected via np77.asia, through our customer support channels, and through interactions with the np77 platform including registration, gaming, deposits, withdrawals, and promotional participation.

np77 collects personal data across several categories depending on how you interact with the platform. The following table summarizes the categories of personal data we collect, the source of that data, and the primary purpose for collection.

Under RA 10173, certain categories of data are classified as sensitive personal information and attract heightened protection. np77 may collect government ID numbers as part of KYC verification. This data is handled with elevated security controls, access-restricted to authorized personnel only, and is not used for any purpose beyond identity verification and regulatory compliance.

Some personal data collection is mandatory for the operation of specific platform features — for example, identity data is required for KYC, and financial data is required for deposits and withdrawals. Where you choose not to provide mandatory data, np77 may be unable to provide the relevant service or feature. Optional data fields are clearly identified as such in the relevant form or process.

np77 uses personal data for the following specific purposes. We do not use personal data for purposes incompatible with those listed below without first obtaining your explicit consent or establishing a separate lawful basis.

• Account Registration and Management: To create and maintain your np77 account, verify your identity and age (21+ as required by PAGCOR), manage your account preferences, and communicate account-related information.
• Provision of Gaming Services: To enable your participation in casino games, sports betting, bingo, and arcade titles; to record game outcomes and betting history; to process winnings and apply bonuses.
• Payment Processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and other supported payment channels; to detect and prevent payment fraud; to comply with anti-money laundering obligations under the Philippine AMLA.
• KYC and Regulatory Compliance: To verify player identity and age; to comply with PAGCOR requirements, AMLA reporting obligations, and any other applicable Philippine regulatory framework.
• Responsible Gaming: To operate player-set limit systems, session monitoring, responsible gaming alerts, and self-exclusion mechanisms; to identify players who may be exhibiting signs of problem gambling and to act in accordance with responsible gaming protocols.
• Security and Fraud Prevention: To detect unauthorized access, fraudulent activity, multi-accounting, bonus abuse, and other prohibited conduct; to investigate and respond to security incidents; to maintain login activity logs.
• Customer Support: To respond to your inquiries, resolve disputes, and process complaints submitted to np77's support team.
• Platform Improvement: To analyze aggregated and anonymized platform usage data in order to improve game selection, interface design, payment processing efficiency, and customer support quality.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may withdraw this consent at any time.
• Legal Proceedings: To establish, exercise, or defend legal claims arising from your use of np77, and to comply with any court order, regulatory requirement, or legal process.

Under RA 10173, np77 must identify a lawful basis for each category of personal data processing. The following bases apply to np77's processing activities:

• Contractual Necessity: Processing required to fulfil our agreement with you — including account management, game operation, and payment processing — is necessary for the performance of our contract with you as set out in the np77 Terms & Conditions.
• Legal Obligation: Processing required to comply with PAGCOR regulations, the Philippine AMLA, RA 10173, and other applicable Philippine laws — including KYC verification, AML transaction monitoring, and age verification — is carried out to fulfill legal obligations binding on np77.
• Legitimate Interests: Processing for platform security, fraud prevention, responsible gaming monitoring, and platform improvement is carried out on the basis of np77's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications is based on your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawal of marketing consent does not affect your ability to use np77.

np77 does not sell personal data. We share personal data only in the following limited and controlled circumstances:

np77 engages third-party service providers who process personal data on our behalf as Personal Information Processors under RA 10173. These include payment processing partners (GCash/Maya integration providers, bank payment gateways), KYC identity verification service providers, game content providers (who receive anonymized session data only), and IT infrastructure and cloud hosting providers. All Personal Information Processors engaged by np77 are contractually required to process personal data only in accordance with np77's documented instructions, to implement appropriate security measures, and to comply with RA 10173.

np77 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government authorities where required to do so by law, court order, or valid regulatory demand. np77 will use reasonable means to notify affected players of such disclosures where legally permitted to do so.

In the event of a merger, acquisition, or sale of all or substantially all of the assets of the np77 platform, personal data held by np77 may be transferred to the successor entity. Affected players will be notified prior to any such transfer, and the successor entity will be required to honour this Privacy Policy.

np77.asia uses cookies and similar tracking technologies to operate the platform, maintain session security, and improve user experience. The following cookie categories are used:

• Strictly Necessary Cookies: Required for platform operation — session authentication, security tokens, and platform functionality. These cannot be disabled without impairing platform operation.
• Functional Cookies: Remember your preferences such as language, display settings, and recently played games. These improve your experience but are not essential to core functionality.
• Analytics Cookies: Collect anonymized and aggregated data about how players use np77.asia — page visits, navigation paths, and device types — to help us improve the platform. These cookies do not identify individual players.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access, and bot activity. These are essential for platform security and account protection.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the np77 platform. np77 does not use third-party advertising cookies or cross-site behavioral tracking cookies.

np77 retains personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account and Identity Data: Retained for the duration of the active account relationship and for a period of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and Philippine AMLA obligations.
• Financial Transaction Records: Retained for five (5) years from the date of each transaction, as required by the Philippine AMLA and BSP regulations applicable to payment service providers.
• Gaming History: Retained for three (3) years from the date of the relevant session, for the purposes of dispute resolution and regulatory compliance.
• KYC Documents: Retained for five (5) years following account closure or the date of the last transaction, whichever is later, as required by AMLA and PAGCOR.
• Customer Support Records: Retained for two (2) years from the date of the most recent interaction, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained until consent is withdrawn and for a further period of one (1) year thereafter, as evidence of consent.
• Technical Logs: Retained for twelve (12) months from the date of creation, for security monitoring and incident investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized using industry-standard methods. Anonymized data — from which no individual can reasonably be re-identified — may be retained for longer periods for aggregate statistical analysis.

np77 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we hold. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data in transit between your device and np77 servers.
• Password hashing using industry-standard one-way cryptographic functions — np77 staff cannot read your password, only reset it.
• Two-factor authentication (2FA) available for all player accounts, with mandatory OTP verification for new device logins where 2FA is enabled.
• Role-based access controls limiting access to personal data to np77 personnel with a documented legitimate need for that data in the performance of their duties.
• Encrypted data at rest on np77's production database infrastructure.
• Login activity logging with anomaly detection for unusual access patterns.
• Regular security assessments of the np77 platform infrastructure.
• Data breach response procedures including mandatory notification to the National Privacy Commission and affected data subjects within the timeframes specified by RA 10173 where a breach meets the notification threshold.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by np77. Requests to exercise these rights should be submitted in writing to np77's Data Protection Officer using the contact details in Section 12. np77 will respond to verified data subject rights requests within fifteen (15) business days of receipt.

The np77 platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR requirements for online casino participation in the Philippines. np77 does not knowingly collect personal data from any individual under the age of 21.

Age verification is conducted as part of the KYC process for all np77 accounts. Where np77 becomes aware that personal data has been collected from an individual under 21 years of age, that data will be deleted promptly, the associated account will be closed, and any deposits or winnings associated with the account will be handled in accordance with applicable regulations.

np77 reserves the right to update this Privacy Policy at any time. Updates will be published on this page with a revised Effective Date. Where a change is material — meaning it significantly affects how np77 processes your personal data or affects your rights as a data subject — np77 will provide advance notice via the email address registered on your account before the change takes effect.

Your continued use of the np77 platform after the Effective Date of any updated Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the updated Policy, you should discontinue use of the platform and may request account closure in accordance with the np77 Terms & Conditions.

The version history of this Privacy Policy is available upon written request to the np77 Data Protection Officer. Prior versions are retained for reference purposes for a period of three (3) years from the date of each supersession.

For any privacy-related inquiries, data subject rights requests, complaints about np77's data processing practices, or questions about this Privacy Policy, please contact the np77 Data Protection Officer. All correspondence should include your registered username or account number (where applicable) and a clear description of your request or inquiry.

Note: The email address above is displayed as plain text. It is not a clickable link. Please copy the address into your email client to compose your message.

If you are not satisfied with np77's response to a privacy inquiry or data subject rights request, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing RA 10173.