aq77 Casino — Privacy Policy

This Privacy Policy is issued by aq77 (referred to in this document as "aq77", "we", "us", or "the Company"), the operator of the online gaming platform accessible at aq77.win and regulated by the Philippine Amusement and Gaming Corporation ("PAGCOR").

aq77 is the data controller in respect of personal data collected from players, prospective players, and visitors to the aq77 Platform in the Philippines. As data controller, aq77 determines the purposes and means of processing your personal data and is responsible for ensuring that all processing activities comply with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR), as administered by the National Privacy Commission ("NPC") of the Philippines.

This Privacy Policy applies to all personal data collected through the aq77 Platform — including through the website at aq77.win, the mobile-optimized web interface, account registration processes, customer support interactions, payment transactions, and any other point of contact between you and aq77.

This Privacy Policy applies to:

• Registered aq77 account holders, including players who have fully completed the registration and KYC verification process.
• Persons who have commenced but not completed the aq77 registration process, to the extent that personal data was submitted during that process.
• Visitors to the aq77.win website who have not registered an account, to the extent that data is automatically collected through cookies and analytics tools described in Section 8.
• Individuals who contact aq77's customer support team, regardless of whether they hold an aq77 account.

This Policy does not apply to third-party websites, services, or applications that may be linked to or integrated with the aq77 Platform. aq77 is not responsible for the privacy practices of third-party game providers, payment processors operating under their own privacy frameworks, or any external platform. Players should review the privacy policies of third-party services independently.

aq77 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

aq77 collects personal data through the following means:

• Direct submission by you: Information you provide when registering your aq77 account, completing KYC verification, using the cashier, updating account settings, or contacting aq77's support team.
• Automatic collection: Technical and device data collected automatically through server logs, cookies, session management systems, and Platform analytics when you access or use aq77.win. This occurs whether or not you are logged in to an Account.
• Third-party payment processors: Financial data provided by your payment provider (GCash, PayMaya, BPI, BDO, Metrobank) when you initiate a deposit or withdrawal transaction. aq77 receives transaction confirmation and reference data; it does not directly access your payment provider's full account data.
• Identity verification partners: Where aq77 uses a third-party KYC service to verify identity documents submitted during account verification, that service may return verification outcome data (pass/fail, identity match confidence score) to aq77. aq77 does not receive raw biometric data.
• PAGCOR and regulatory bodies: Information provided to aq77 by PAGCOR or other Philippine regulatory authorities in connection with licensing, compliance monitoring, or regulatory investigation may be incorporated into aq77's player records where required.

Under the Data Privacy Act of 2012, aq77 must have a lawful basis for each category of personal data processing. The following lawful bases apply to aq77's processing activities:

• Contractual necessity: Processing required to fulfill aq77's obligations under the account agreement with you — including account management, game access, payment processing, withdrawal fulfillment, and customer support. Without this processing, aq77 cannot provide Platform services to you.
• Legal obligation: Processing required for aq77 to comply with applicable Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), the Data Privacy Act (RA 10173), and any lawful direction from a Philippine regulatory authority or court.
• Legitimate interests: Processing conducted for aq77's legitimate business interests where those interests do not override your privacy rights — including fraud detection, security monitoring, Platform performance optimization, and responsible gaming oversight.
• Consent: Where aq77 processes personal data for purposes not covered by the above lawful bases — such as marketing communications via SMS or email — aq77 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent for marketing communications at any time by contacting support or updating your notification preferences in account settings.

aq77 uses the personal data it collects for the following purposes:

• Account creation and management: To register your Account, verify your identity and age (21+), maintain your account record, and authenticate your aq77 login sessions.
• Platform service delivery: To provide access to the game lobby, process Real Money Wagers, calculate game outcomes, record transaction history, and process deposit and withdrawal requests in PHP.
• Payment processing: To initiate, process, and reconcile GCash, PayMaya, and bank transfer transactions associated with your Account, and to fulfill withdrawal requests to your nominated payment method.
• Identity and fraud verification: To verify the identity documents you submit during KYC review, to detect and prevent fraudulent account activity, bonus abuse, multi-accounting, and unauthorized payment instrument use.
• Anti-money laundering compliance: To monitor financial transactions for patterns consistent with money laundering or other financial crime, and to fulfill aq77's mandatory reporting obligations under RA 9160.
• Responsible gaming: To apply and monitor the deposit limits, loss limits, session reminders, and self-exclusion settings on your Account, and to identify account activity patterns that may indicate problem gambling requiring proactive intervention.
• Customer support: To respond to your support queries, resolve Account disputes, and maintain records of support interactions for quality assurance and legal purposes.
• Security and Platform integrity: To detect and prevent unauthorized access to the Platform, identify cheating or collusion, investigate Terms violations, and maintain the technical security of aq77's systems.
• Communications: To send you transactional notifications (deposit confirmations, withdrawal updates, security alerts, OTP codes) and, where you have given consent, promotional communications about aq77 offers and games.
• Regulatory compliance and reporting: To fulfill aq77's reporting obligations to PAGCOR, the NPC, and other Philippine regulatory bodies as required under applicable gaming, privacy, and financial regulation.

aq77 does not sell, rent, or trade your personal data. aq77 shares personal data with third parties only in the following limited circumstances:

• Licensed game providers: Game providers whose titles are available in the aq77 lobby receive the minimum data necessary to authenticate your game session and record game outcomes. Game providers are bound by data processing agreements requiring them to handle your data in compliance with Philippine privacy standards.
• Payment processors: Regulated payment service providers (including GCash, PayMaya, and Philippine banks) receive the transaction data necessary to process your deposits and withdrawals. These processors are independently regulated financial institutions subject to Bangko Sentral ng Pilipinas (BSP) oversight.
• KYC and identity verification services: Where aq77 uses a third-party identity verification provider for KYC document review, your submitted identity documents are transmitted to that provider under a data processing agreement. Verified outcome data is returned to aq77; the provider's use of your data is governed by their own privacy terms which aq77 reviews as part of vendor due diligence.
• PAGCOR and Philippine regulatory authorities: aq77 discloses account and transaction data to PAGCOR as required under its operating license and to other Philippine regulatory bodies (including the Anti-Money Laundering Council, NPC, and law enforcement) where disclosure is required by law, court order, or valid regulatory direction.
• Technology and infrastructure providers: Cloud hosting, database management, and cybersecurity service providers who process data on aq77's behalf under data processing agreements that impose equivalent data protection obligations.

aq77 uses cookies and similar tracking technologies on the aq77.win website. A cookie is a small text file placed on your device by a web server that enables the website to recognize your browser and remember certain information across sessions.

aq77 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session authentication cookies that maintain your aq77 login state, security cookies that prevent cross-site request forgery, and cookies that remember your language and currency preferences. These cookies cannot be disabled as they are required for Platform operation.
• Performance and analytics cookies: Collect anonymized or aggregated data about how visitors interact with aq77.win — including pages visited, time spent, and error occurrences — to help aq77 identify performance issues and improve Platform stability. These cookies do not identify individual users by name.
• Functionality cookies: Remember your stated preferences such as game display settings and notification preferences to personalize your Platform experience across sessions.
• Security monitoring cookies: Used by aq77's fraud and security systems to collect device fingerprint data for login anomaly detection. These cookies store a device identifier that is compared against your registered account's known device history to flag unusual login patterns.

aq77 does not use third-party advertising or behavioral targeting cookies. No cookie data is shared with advertising networks or used to deliver targeted advertising to your other devices or browsing sessions outside of aq77.win.

aq77 implements technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Key security measures include:

• Encryption: Personal data is encrypted at rest using AES-256 encryption standards and in transit using TLS 1.2 or higher. All aq77 login sessions and cashier transactions are secured with 256-bit SSL certificates.
• Access controls: Access to personal data within aq77's systems is restricted on a need-to-know basis. Staff members are granted access only to the data categories required for their specific role. Access logs are maintained and reviewed periodically.
• Authentication: Internal systems handling personal data require multi-factor authentication for staff access. Player accounts are protected by password hashing (not plain-text storage) and optional OTP verification on new device logins.
• Regular security assessments: aq77 conducts periodic vulnerability assessments and security reviews of its systems and data handling practices. Material findings are remediated according to risk severity.
• Incident response: aq77 maintains a data breach response procedure in compliance with NPC notification requirements. In the event of a personal data breach affecting your data, aq77 will notify the NPC within the required timeframe and will notify affected individuals where the breach poses a real risk of serious harm.

No digital security system can guarantee absolute protection against all threats. aq77 cannot warrant that its systems are impenetrable against all possible attack vectors. Players are advised to use strong, unique passwords for their aq77 accounts and to enable OTP verification on their registered Philippine mobile numbers to reduce the risk of unauthorized access.

aq77 retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Active account data: Retained for the duration of the Account's active status, plus a minimum post-closure retention period required by PAGCOR gaming regulations and anti-money laundering law.
• KYC and identity documents: Retained for a minimum of five (5) years following the termination or closure of the Account, as required by RA 9160 (Anti-Money Laundering Act) and PAGCOR licensing conditions.
• Financial transaction records: Retained for a minimum of five (5) years following the date of the transaction, consistent with anti-money laundering record-keeping requirements.
• Customer support records: Retained for a minimum of three (3) years following the final interaction, for dispute resolution and legal defense purposes.
• Marketing consent records: Retained for the duration of the Account and for a period following Account closure sufficient to evidence historical consent if required.
• Anonymized analytics data: Analytics data that has been irreversibly anonymized (i.e., that cannot be re-linked to an individual) may be retained indefinitely for Platform performance analysis purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Where legal holds or active regulatory investigations require extended retention, aq77 will retain the relevant data until the hold or investigation concludes and the statutory retention period has elapsed.

As a data subject under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by aq77. These rights are enforceable under Philippine law and aq77 has procedures in place to respond to all valid rights requests within the timeframes required by the NPC.

To exercise any of the above rights, contact aq77's Data Privacy Officer using the details in Section 14. aq77 will respond to valid rights requests within fifteen (15) calendar days of receipt of a complete request with sufficient identifying information.

aq77 is a real-money online gaming platform and is strictly restricted to persons who are 21 years of age or older, as required by PAGCOR regulations. aq77 does not knowingly collect personal data from persons under the age of 21.

Account registration requires confirmation of eligibility, including age eligibility, and KYC identity verification. The age verification process is designed to identify and reject registrations by underage persons before an Account becomes active.

If aq77 becomes aware that personal data has been collected from a person under the age of 21 — whether as a result of fraudulent registration or for any other reason — aq77 will immediately close the Account, delete the personal data to the extent not required to be retained under applicable law, and escalate the matter to PAGCOR in accordance with its regulatory obligations.

aq77 may update this Privacy Policy from time to time to reflect changes in its data processing practices, applicable Philippine law, NPC guidance, PAGCOR regulatory requirements, or Platform technology. All updates will be published on this page with a revised effective date.

Where changes are material — meaning they affect the nature of data collected, the purposes for which it is used, or your rights as a data subject — aq77 will provide advance notice through one or more of the following channels before the revised Policy takes effect:

• A notification displayed prominently on the aq77.win Platform for a minimum of seven (7) days prior to the effective date.
• An SMS notification to your registered Philippine mobile number.
• An in-Platform notification displayed on your Account dashboard upon your next login.

Your continued use of the aq77 Platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated processing practices described therein. If you do not accept the revised Policy, you may request voluntary Account closure in accordance with the Terms & Conditions.

aq77 has appointed a Data Privacy Officer (DPO) as required under the Data Privacy Act of 2012 and the NPC's implementing rules. The DPO is responsible for overseeing aq77's compliance with RA 10173, handling data subject rights requests, and coordinating aq77's response to NPC inquiries and data breach obligations.

You may contact aq77's Data Privacy Officer or submit a data subject rights request through the following channels:

• Live Chat: Via the aq77 Platform support chat, available 24/7. Indicate that your query relates to a data privacy matter and the support agent will escalate to the DPO team.
• Email: [email protected] — please use the subject line "DATA PRIVACY REQUEST" for all privacy-related correspondence. This ensures correct routing to the DPO team.
• Messenger and Viber: Available through aq77's official channels for Filipino players who prefer these communication methods.

For general questions about this Privacy Policy — for example, clarifications about what data aq77 holds or how to update your account information — aq77's regular customer support team handles first-level privacy queries. Support agents are available via Live Chat with an average response time of 3–5 minutes.

If you are not satisfied with aq77's response to a data privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) through the NPC's official complaint process.