Your personal data belongs to you. This Privacy Policy explains what information np77 collects, why we collect it, how we use it, who we share it with, and what rights you have as a Filipino player under the Data Privacy Act of 2012.
np77 processes all personal data in strict compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and the implementing rules and regulations issued by the National Privacy Commission of the Philippines.
Every data transmission between your device and the np77 platform is protected by 256-bit SSL/TLS encryption — the same standard used by Philippine banking apps. Your credentials, personal details, and payment data are never sent in plain text.
np77 does not sell, rent, or trade your personal information to third-party marketers or data brokers. The data you provide is used only for the purposes stated in this Privacy Policy — operating your account, processing payments, and improving your experience on the platform.
Player personal data and account balance information are stored on secure, access-controlled servers. Internal access to personal data is restricted to np77 staff who require it to perform their specific roles, and is logged for audit purposes.
As a Filipino data subject under the DPA, you have the right to access, correct, erase, object to, and port your personal data held by np77. You may exercise any of these rights by contacting our Data Protection Officer at the contact details provided in this policy.
In the event of a personal data breach that is likely to result in serious harm to affected players, np77 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay as required by the DPA.
np77 ("np77," "we," "us," "our") respects the privacy of all players who access and use the np77 online gaming platform at np77.app ("Platform"). This Privacy Policy describes how np77 collects, uses, stores, shares, and protects personal data in connection with the operation of the Platform and the provision of gaming services to players in the Philippines.
This Privacy Policy applies to:
This Privacy Policy should be read together with the np77 Terms & Conditions and the Responsible Gaming Policy, which together govern your relationship with np77. In the event of any conflict between this Privacy Policy and the Terms & Conditions regarding data privacy matters, this Privacy Policy shall take precedence.
np77 is the personal information controller ("PIC") as defined under the Data Privacy Act of 2012 (Republic Act No. 10173) with respect to all personal data processed in connection with the Platform. np77 determines the purposes for which your personal data is collected and the means by which it is processed.
np77 has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Privacy Policy and with applicable Philippine data privacy law. The DPO's contact details are provided in Section 14 of this Privacy Policy.
np77 collects personal data that you provide directly, data generated through your use of the Platform, and data received from third parties in connection with identity verification and payment processing. The categories of personal data we collect include:
When you create an np77 account, we collect: full legal name; date of birth; residential address in the Philippines (city, province, ZIP code); email address; Philippine mobile number; and username.
To comply with PAGCOR regulations and the Anti-Money Laundering Act of 2001 (as amended), np77 requires identity verification before processing withdrawals above threshold amounts. KYC data includes: government-issued identification documents (e.g., PhilSys ID, passport, driver's license, SSS ID, GSIS ID, PRC ID); selfie photograph for liveness verification; and source of funds documentation where required by AML procedures.
np77 collects transaction records including: deposit amounts, timestamps, and payment method identifiers (GCash wallet numbers, BPI/BDO/Metrobank account details as needed for bank transfers, card type and last four digits for card payments); withdrawal requests and processing details; account balance history; and bonus and promotional activity records.
When you access and use the Platform, np77 automatically collects technical data including: IP address and approximate geolocation; device type, operating system, and browser type; session duration, login timestamps, and pages accessed; game session logs including games played, bet amounts, and outcomes; and referring website or source if accessing the Platform via a link.
If you contact np77's customer support, responsible gaming team, or any other department, we collect records of that communication, including: live chat transcripts; email correspondence; any attachments or documents you submit; and the nature and resolution of your enquiry.
np77 uses the personal data it collects for the following purposes:
| Purpose | Categories of Data Used |
|---|---|
| Creating and managing your np77 account | Registration data, KYC data |
| Processing deposits, withdrawals, and account balance management | Financial data, KYC data |
| Verifying your identity and age (21+) as required by PAGCOR | KYC data, registration data |
| AML screening and suspicious transaction reporting under Philippine law | KYC data, financial data, usage data |
| Providing customer support and resolving disputes | Registration data, communications data, transaction data |
| Responsible gaming monitoring and intervention | Usage data, financial data, communications data |
| Sending account-related notifications (deposits, withdrawals, security alerts) | Registration data, contact data |
| Sending promotional communications where you have consented | Registration data, contact data, usage data |
| Platform security, fraud prevention, and abuse detection | Technical data, usage data, financial data |
| Analytics and platform improvement | Usage data, technical data (aggregated/anonymised) |
| Legal compliance and regulatory reporting to PAGCOR and other authorities | All categories as required |
np77 does not use automated decision-making processes — including profiling — that produce legal or similarly significant effects on you without human review, unless required to do so by applicable law.
np77 processes your personal data on the following legal bases under the Data Privacy Act of 2012:
np77 does not sell, rent, or trade your personal data. We share personal data only in the following circumstances and with the following categories of recipients:
np77 uses cookies and similar technologies on the Platform to support essential functionality, improve your experience, and gather analytics data. The categories of cookies we use are:
You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair Platform functionality. Disabling analytics or marketing cookies will not affect your ability to play.
np77 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration and KYC data | 5 years after account closure | PAGCOR licensing requirements |
| Financial transaction records | 5 years from transaction date | Anti-Money Laundering Act |
| AML reports and supporting documents | 5 years from report date | AMLA IRR requirements |
| Customer support communications | 3 years from last communication | Dispute resolution and legal claims |
| Game session logs | 2 years from session date | Fair play audit and dispute resolution |
| Marketing consent records | Until consent is withdrawn plus 1 year | Consent management compliance |
| Technical / server logs | 90 days (rolling) | Security monitoring |
Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.
Some of np77's technology providers and game content partners are located outside the Philippines. Where personal data is transferred to a recipient in another country, np77 will ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012. Such safeguards may include data processing agreements incorporating standard contractual clauses approved by the National Privacy Commission, or transfers to countries that the NPC has assessed as providing an adequate level of data protection.
np77 does not transfer your personal data to countries that do not provide an adequate level of protection unless specific NPC-approved safeguards are in place.
np77 implements technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
While np77 takes data security seriously and implements industry-standard measures, no digital system can be guaranteed to be entirely secure. You should also take precautions to protect your own account, including using a strong password and enabling two-factor authentication.
Under the Data Privacy Act of 2012, as a Filipino data subject you have the following rights with respect to your personal data held by np77:
Request a copy of the personal data np77 holds about you and information about how it is being processed.
Request correction of inaccurate or incomplete personal data held by np77 about you.
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
Object to the processing of your personal data for direct marketing, or on grounds relating to your particular situation where np77 processes data on the basis of legitimate interests.
Receive a copy of personal data you have provided to np77 in a structured, commonly used, machine-readable format.
Withdraw consent to any processing based on your consent at any time, without affecting processing already completed before withdrawal.
To exercise any of these rights, please contact np77's Data Protection Officer using the contact details in Section 14. np77 will respond to all valid data subject requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days with notice to you. There is no charge for exercising your rights, unless a request is manifestly unfounded or excessive.
If you are not satisfied with np77's handling of your personal data or your data subject request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.
Age verification is a mandatory step in the np77 KYC process. If np77 becomes aware that personal data has been collected from an individual under 21, that data will be deleted immediately, the associated account will be closed, and any deposits will be returned to the original payment source at np77's discretion.
If you believe that a minor has created an np77 account or otherwise provided personal data to np77, please contact our support team or Data Protection Officer immediately using the details in Section 14.
np77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance from the National Privacy Commission. All changes will be reflected in the updated Privacy Policy published at np77.app/privacy-policy.
Where changes are material — affecting the nature of data collected, the purposes for which it is used, or your rights as a data subject — np77 will notify you via your registered email address or via a prominent in-platform notice at least fourteen (14) days before the changes take effect. For non-material changes, the "Last Updated" date at the top of this Privacy Policy will be updated to reflect the revision date.
Your continued use of the np77 platform after the effective date of any changes constitutes your acknowledgement of the revised Privacy Policy. If you do not accept any changes, you must stop using the Platform and may request account closure.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by np77, please contact us through the following channels:
All email addresses above are displayed as plain text and are not clickable links. Please copy the address and use your preferred email client to compose your message.
np77 aims to respond to all privacy-related enquiries within five (5) business days. For formal data subject access requests or complaints, the response period is up to thirty (30) calendar days as noted in Section 11.
Your data is protected. Your payments are secure. Your games are certified fair. Experience the Philippines' premier online casino — GCash payouts, live dealers, 1,000+ games. 21+ only. PAGCOR regulated.