ha77 Privacy Policy

1. Scope & Application

This Privacy Policy governs the collection, processing, storage, and disclosure of personal data by ha77 in connection with all services provided through the ha77 online casino and sportsbook platform accessible at ha77.lat. It applies to all registered players, prospective players who interact with the Platform, and visitors to the ha77 website.

This Policy applies to personal data processed by ha77 regardless of the device, operating system, or network used to access the Platform, including desktop computers, mobile phones, and tablets. It covers data collected through account registration, gameplay, financial transactions, customer support interactions, and any other means of engagement with the ha77 Platform.

2. Data Controller

For the purposes of data protection law, ha77 — the company that owns and operates the ha77 online casino platform at ha77.lat — is the Data Controller responsible for your personal data. As Data Controller, ha77 determines the purposes for which, and the means by which, personal data is processed.

Questions and requests related to this Privacy Policy or the processing of your personal data may be directed to ha77's customer support team via the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

ha77 collects the following categories of personal data in connection with the operation of its services:

3.1 Identity & Registration Data

• Full legal name as it appears on a government-issued Philippine identification document
• Date of birth (used for age verification — players must be 21 years of age or older)
• Nationality and country of residence
• Government-issued ID number and copies of identification documents submitted for KYC verification (e.g., UMID, Passport, Driver's License, PhilSys National ID)
• Profile photograph where required for identity verification purposes

3.2 Contact Data

• Email address
• Philippine mobile telephone number
• Residential address (province, city, barangay)

3.3 Financial & Transaction Data

• Payment method details associated with your ha77 account (GCash number, Maya account reference, bank account details for BPI, BDO, or Metrobank as applicable)
• Deposit history, withdrawal records, and wallet balance information
• Transaction identifiers and timestamps
• Source of funds declarations where required by anti-money laundering compliance procedures

3.4 Gameplay & Platform Usage Data

• Game session records including games played, bets placed, outcomes, and session durations
• Bonus and promotion usage history
• VIP tier progression and loyalty point accrual records
• Responsible gaming settings and self-imposed limits

3.5 Technical & Device Data

• IP address and approximate geolocation derived therefrom
• Device type, operating system, and browser type and version
• Session tokens and authentication data
• Platform access logs and error reports

3.6 Communications Data

• Records of live chat conversations with ha77 customer support
• Email correspondence submitted to ha77's support address
• Records of any formal complaints or dispute submissions

4. How We Collect Your Data

ha77 collects personal data through the following means:

• Directly from you: when you register an account, complete KYC verification, make deposits or withdrawal requests, contact customer support, or participate in promotions.
• Automatically through the Platform: via cookies, web beacons, and similar tracking technologies that record your interactions with ha77.lat, your device characteristics, and your gameplay activity.
• From third-party service providers: including payment processors (GCash, Maya, BPI, BDO, Metrobank), identity verification services, fraud detection providers, and game providers — to the extent necessary to deliver, verify, and secure the services you use.
• From public sources: where necessary for anti-money laundering compliance, ha77 may verify information against publicly available registers or government-maintained databases.

5. Purposes & Legal Basis for Processing

ha77 processes your personal data only for defined, legitimate purposes. The primary purposes and their applicable legal bases are as follows:

• Account registration and management — necessary for the performance of the contract between you and ha77.
• Identity verification (KYC) and age verification — necessary for compliance with PAGCOR licensing obligations and the legal requirement that all players be 21 years of age or older.
• Payment processing and fraud prevention — necessary for contract performance and for compliance with anti-money laundering obligations under Philippine law.
• Game provision and platform operation — necessary for contract performance.
• Customer support and dispute resolution — necessary for contract performance and legitimate interests.
• Responsible gaming monitoring and intervention — necessary to comply with PAGCOR's player protection requirements and ha77's responsible gaming obligations.
• Marketing and promotional communications — based on your consent, which you may withdraw at any time by contacting ha77 support or using the unsubscribe option in any marketing email.
• Platform security and fraud detection — based on ha77's legitimate interests in protecting the integrity of the platform and the safety of all players.
• Legal compliance and regulatory reporting — necessary for compliance with applicable law, including reporting obligations to PAGCOR and Philippine anti-money laundering authorities.

6. Sharing of Personal Data

6.1 Service Providers

ha77 shares personal data with third-party service providers who assist in operating the Platform and delivering services to you. These include payment processors, identity verification providers, game providers, cloud hosting and infrastructure providers, customer support software providers, and fraud detection services. All such providers are contractually required to process data only for the purposes specified by ha77 and to maintain appropriate security standards.

6.2 Regulatory Authorities

ha77 is required by law and by its licensing obligations to disclose player information to PAGCOR and to the Anti-Money Laundering Council (AMLC) of the Philippines where required. ha77 will comply with all lawful orders and requests from competent Philippine government authorities without notice to affected players where notification is legally prohibited.

6.3 Law Enforcement

ha77 may disclose personal data to law enforcement agencies in the Philippines or internationally where required by a lawful court order, subpoena, or equivalent legal process, or where disclosure is necessary to protect the safety of players or the public.

6.4 No Sale of Data

ha77 does not sell, rent, auction, or otherwise transfer your personal data to third parties for their own independent commercial use or marketing purposes.

6.5 Business Transfers

In the event that ha77 undergoes a merger, acquisition, restructuring, or sale of all or a material part of its business, personal data held by ha77 may be transferred to the successor entity as part of that transaction. Players will be notified of any such transfer and any material change to their data processing rights that results from it.

7. Cookies & Tracking Technologies

ha77 uses cookies and similar tracking technologies on its Platform for the following purposes:

• Essential cookies: Required for the Platform to function correctly, including maintaining your login session, processing your game activity, and securing your account. These cannot be disabled without disrupting your ability to use ha77.
• Performance and analytics cookies: Used to understand how players navigate the Platform, identify technical errors, and measure the effectiveness of platform features. Data collected is aggregated and anonymised where possible.
• Functional cookies: Used to remember your preferences, such as display language and responsible gaming limit settings, to provide a more personalized experience.

You may manage non-essential cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform. ha77 does not use third-party advertising cookies or tracking pixels for retargeting purposes.

8. Data Retention

ha77 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to the following retention standards:

• Account data: Retained for the duration of your active ha77 account and for a minimum of five (5) years following account closure, to satisfy PAGCOR record-keeping requirements and applicable Philippine anti-money laundering legislation.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLC reporting and record-keeping obligations.
• KYC verification documents: Retained for the duration of your account and for five (5) years following closure, unless a longer period is required by law.
• Customer support records: Retained for three (3) years from the date of the interaction, or longer if the matter relates to an unresolved dispute or ongoing legal matter.
• Marketing consent records: Retained until you withdraw consent or close your account, whichever occurs first, plus an additional reasonable period to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9. Data Security

ha77 implements a multi-layered approach to the security of your personal data, including the following technical and organizational measures:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ha77's servers
• Encryption of sensitive data fields at rest within ha77's database infrastructure
• Role-based access controls limiting access to personal data to staff with a documented operational need
• Two-factor authentication requirements for internal systems that handle player data
• Regular security assessments and penetration testing of platform infrastructure
• Incident response procedures including player notification protocols in the event of a data breach affecting registered accounts

Despite these measures, no system is entirely immune to security threats. Players are encouraged to use strong, unique passwords for their ha77 account and to enable Two-Factor Authentication from their Account Security Settings. ha77 will never ask you for your password via any communication channel.

10. International Data Transfers

As an online platform, ha77 may engage service providers and infrastructure partners located outside the Philippines — including cloud hosting providers and game suppliers whose servers are located in other countries. Where personal data is transferred outside the Philippines, ha77 takes steps to ensure that the recipient provides an adequate level of data protection through contractual safeguards, including data processing agreements that incorporate standard data protection clauses consistent with the requirements of the Philippine Data Privacy Act of 2012 and the National Privacy Commission's implementing rules.

Players whose data is transferred internationally retain all rights under this Privacy Policy and under applicable Philippine law regardless of the location of the data processing.

11. Your Data Rights

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing regulations, registered ha77 players have the following rights with respect to their personal data:

12. Children & Minors

ha77 does not knowingly collect personal data from any person under the age of 21 years. The Platform is strictly restricted to adults aged 21 and above, in accordance with PAGCOR's minimum age requirement for online gaming in the Philippines.

If ha77 becomes aware that personal data has been collected from a person under 21 years of age, the affected account will be immediately suspended, all associated personal data will be deleted or anonymised to the extent legally permissible, and any balances will be handled in accordance with ha77's underage account policy set out in the Terms & Conditions.

If you are a parent or guardian and believe your minor child has created an account on ha77, please contact our support team immediately via live chat so that we can take prompt action.

13. Third-Party Links

The ha77 Platform may contain links to third-party websites, including game provider information pages and payment processor portals. ha77 is not responsible for the privacy practices of any third-party website and this Privacy Policy does not extend to those sites. Players are encouraged to review the privacy policies of any third-party sites they visit via links from the ha77 Platform.

ha77's payments page may redirect players to the secure portals of GCash, Maya, BPI, BDO, Metrobank, or other payment processors. Data submitted to those processors is governed by their respective privacy policies in addition to this Policy.

14. Policy Updates

ha77 reserves the right to update this Privacy Policy at any time. Material changes — meaning changes that affect your rights or how ha77 uses your personal data in a significant way — will be communicated to registered players via email to their registered address or through an in-platform notification, at least seven (7) days before the change takes effect.

Non-material clarifications and corrections may be made without advance notice. The Effective Date at the top of this page will always reflect the date of the most recent update. Your continued use of ha77 following notification of a material update constitutes your acceptance of the revised Policy. If you do not agree to the updated Policy, you may request account closure in accordance with the ha77 Terms & Conditions.

15. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ha77, please contact us through the following channels:

• Live Chat: Available 24/7 on the ha77 Platform. Average first response time: under 2 minutes. This is the fastest channel for data rights requests and urgent privacy concerns.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" or "Data Rights" in your subject line. Average response: within 4–6 hours.

ha77 aims to resolve all privacy-related requests and complaints promptly and in good faith. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph (please visit the NPC's official website independently — ha77 does not link to external sites in this Policy).