ma77 Casino Privacy Policy

This Privacy Policy ("Policy") describes how ma77 ("ma77," "we," "us," or "our") collects, uses, discloses, stores, and protects personal information relating to individuals ("Players," "you," or "your") who access or use the online gaming platform operated at ma77.bet and all associated sub-domains, mobile browser interfaces, and related digital services (collectively, the "Platform").

This Policy forms part of ma77's overall terms of service. By registering an account, accessing the Platform, or providing personal information to ma77 in any manner, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

This Policy applies to all personal data processed by ma77 in connection with the Platform, regardless of the medium through which it is submitted — including via web browser, customer support communications, and payment transactions.

For the purposes of applicable data protection legislation, ma77 is the data controller responsible for the personal information collected and processed through the Platform. As data controller, ma77 determines the purposes and means of processing your personal data.

Inquiries regarding this Policy, requests to exercise your data rights, or complaints about ma77's data processing practices should be directed to our designated data privacy contact at:

The categories of personal data ma77 collects depend on how you interact with the Platform. The following table summarizes what we collect and why:

ma77 does not intentionally collect sensitive personal data beyond what is necessary for identity and age verification, financial transaction processing, and regulatory compliance. We do not collect data regarding religion, political views, health status, or sexual orientation.

ma77 collects personal data through the following channels and methods:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser information, and session activity logs. This occurs through server logs, cookies, and similar tracking technologies.
• Payment Processors: Transaction confirmation data received from GCash, Maya, BPI, BDO, Metrobank, UnionBank, and other payment service providers used to process your deposits and withdrawals.
• KYC Verification Partners: Identity verification results and risk assessments from third-party KYC service providers who authenticate the documents you submit.
• Fraud and Risk Detection Systems: Device fingerprinting and behavioural analysis data generated by our fraud prevention systems to protect your account and the integrity of the Platform.

ma77 processes personal data only where a lawful basis exists under the Philippine Data Privacy Act and applicable regulations. The following sets out our processing purposes and the corresponding legal basis for each:

• Account Registration and Management: Processing is necessary for the performance of our contract with you as a registered Player. We cannot operate your account without your identity and contact data.
• KYC and Age Verification (21+): Processing is required by Philippine regulatory obligations applicable to online gaming operators. Collection of identity documents and verification of your date of birth is mandatory.
• Payment Processing: Processing is necessary for contract performance (executing deposits you request and paying out withdrawals you initiate) and for compliance with Philippine anti-money laundering (AML) regulations.
• Responsible Gaming Monitoring: Processing is carried out in compliance with our regulatory obligations and in your legitimate interests. Monitoring gaming activity allows us to identify potential gambling harm indicators and apply protective interventions where appropriate.
• Fraud Prevention and Platform Security: Processing is in our legitimate interests and yours. We maintain technical and device data to detect and prevent unauthorized account access, payment fraud, and platform abuse.
• Legal and Regulatory Compliance: Processing is required by law. We may be required to process and disclose personal data in response to requests from PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine regulatory or law enforcement authorities.
• Marketing and Promotions: Where you have provided consent, we may use your contact data to send you information about ma77 promotions, bonuses, and platform updates. You may withdraw this consent at any time.
• Platform Improvement and Analytics: In our legitimate interests, we use aggregated and anonymized usage data to understand how players interact with the Platform and to improve its performance, design, and game offering.

ma77 does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment Service Providers: GCash, Maya, BPI, BDO, Metrobank, UnionBank, 7-Eleven Cliqq, Coins.ph, and USDT TRC20 processors receive the financial data necessary to execute your deposits and withdrawals.
• KYC and Identity Verification Providers: Third-party KYC service providers receive identity document data to conduct verification on our behalf. These providers are bound by strict confidentiality and data security obligations.
• Fraud Detection and Security Vendors: Device and behavioural data may be processed by our security partners to identify and prevent fraudulent activity. These partners act as data processors under our instructions.
• Game Software Providers: Game providers (such as JILI, PG Soft, Pragmatic Play) may receive anonymized session data necessary to deliver their games through the Platform. They do not receive your identity or financial data.
• Regulatory and Law Enforcement Authorities: ma77 will disclose personal data to PAGCOR, AMLC, the National Privacy Commission, the Philippine National Police, or other government bodies when required to do so by law, court order, or valid regulatory request.
• Professional Advisers: Legal, accounting, and auditing professionals who are bound by professional confidentiality obligations may access limited personal data in the course of providing services to ma77.
• Business Succession: In the event of a merger, acquisition, or sale of all or substantially all of ma77's business assets, personal data held by ma77 may be transferred to the successor entity. Players will be notified of any such transfer prior to the change taking effect.

Some of the third-party service providers used by ma77 — including game software providers and technology infrastructure partners — operate outside the Philippines. When personal data is transferred internationally, ma77 ensures appropriate safeguards are in place, including:

• Contractual clauses requiring the recipient to protect personal data to a standard equivalent to that required under Philippine law.
• Transfer only to jurisdictions with data protection frameworks recognized as providing adequate protection.
• Technical security measures including encryption of data in transit and at rest.

Where international transfers involve sensitive data categories — such as identity documents submitted for KYC — ma77 applies heightened transfer controls including data minimization (sharing only what is strictly necessary) and explicit contractual data security requirements with receiving entities.

ma77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following retention periods apply:

• Account and Identity Data: Retained for a minimum of five (5) years following permanent account closure. This period aligns with Philippine AML record-keeping requirements under Republic Act No. 9160 (Anti-Money Laundering Act) and its amendments.
• Transaction and Financial Records: Retained for a minimum of five (5) years following each transaction, consistent with AML obligations and general statutory limitation periods for financial claims under Philippine law.
• KYC Documents (Government-Issued ID): Retained for the duration of the account relationship plus five (5) years following account closure.
• Gaming Activity Logs: Retained for three (3) years from the date of each gaming session for the purposes of dispute resolution, responsible gaming monitoring, and regulatory reporting.
• Customer Support Communications: Retained for two (2) years from the date of the last communication in a support thread, or until any related dispute is finally resolved, whichever is later.
• Marketing Consent Records: Retained for two (2) years from the date consent was withdrawn or an account was closed.
• Technical and Device Logs: Retained for twelve (12) months from the date of collection, except where a specific log is required for an ongoing investigation or legal proceeding.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized. Anonymized data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

ma77 implements technical and organizational security measures appropriate to the sensitivity of the personal data it holds. These measures include, but are not limited to:

• Encryption in Transit: All communications between your device and the ma77 Platform are encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all login activity, payment transactions, and KYC document uploads.
• Encryption at Rest: Sensitive data — including identity documents, financial account details, and authentication credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff who access personal data are subject to confidentiality obligations and receive privacy and security training.
• Two-Factor Authentication: 2FA is available to all Players and is required for all staff accessing internal systems containing personal data.
• Intrusion Detection and Monitoring: ma77's technical infrastructure is monitored continuously for unauthorized access attempts, unusual activity, and potential security incidents.
• Regular Security Audits: The Platform undergoes regular security assessments and penetration testing by qualified third-party security professionals.

ma77 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device by a website server. The following categories of cookies are used:

• Essential Cookies: Strictly necessary for the Platform to function. These include session cookies that maintain your login state and security cookies that protect against CSRF attacks. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences — such as preferred language, display settings, and whether you have acknowledged certain notifications. These improve your experience but are not mandatory for Platform operation.
• Analytics Cookies: Aggregate, anonymized data about how Players use the Platform — which pages are visited most frequently, where errors occur, and how navigation flows are used. This data is used solely to improve the Platform and is not linked to individual identities.
• Security and Fraud Detection Cookies: Used by our fraud prevention systems to detect unusual behaviour patterns, identify device consistency, and protect your account from unauthorized access.

ma77 does not use advertising network cookies, social media tracking pixels, or any cookies that track your activity across third-party websites.

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you hold the following rights with respect to your personal data held by ma77:

To exercise any of the above rights, please submit your request to [email protected] with the subject line "Privacy / Data Request," including your registered username and a description of your request. ma77 will respond within fifteen (15) business days.

Please note that certain rights are subject to limitations. For example, the right to erasure does not apply where retention is required by Philippine law (e.g., AML record-keeping obligations). Where a right cannot be exercised in full, ma77 will explain the applicable limitation in its response.

ma77 may send marketing communications — including promotional offers, bonus notifications, and platform updates — to Players who have provided consent during registration or subsequently through account settings.

Marketing communications from ma77 may be delivered by:

• Email to your registered email address.
• SMS to your registered Philippine mobile number.
• In-platform notifications displayed after login.

Opt-Out: You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences in Account Settings → Notifications.
• Using the unsubscribe link included in any marketing email from ma77.
• Contacting our support team at [email protected] with a request to opt out.

Withdrawing consent for marketing communications does not affect your ability to use the Platform or receive transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts), which are necessary for account management and cannot be disabled.

The ma77 Platform is strictly restricted to individuals aged twenty-one (21) years and above. ma77 does not knowingly collect personal data from individuals under the age of 21.

Parents or guardians who believe that their child (under 21) has accessed or registered on the ma77 Platform should contact us immediately at [email protected]. ma77 will investigate and take appropriate action within 48 hours of receiving such a report.

The ma77 Platform may reference or integrate with third-party services — including payment processors such as GCash and Maya, and game software providers. These third parties operate their own privacy policies and data practices independent of ma77.

ma77 is not responsible for the privacy practices or content of third-party services. When you interact with a third-party payment processor to complete a deposit or withdrawal, you are subject to that provider's privacy policy in addition to this Policy. We encourage you to review the privacy policies of all third-party services you interact with in connection with your ma77 account.

ma77 reserves the right to amend this Privacy Policy at any time. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Display a notification on the Platform upon your next login if the change is material to your rights or the way your data is processed.
• Send an email notification to your registered email address for significant changes to data processing purposes or third-party sharing arrangements.

Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the updated Policy. If you do not agree with the changes, you should cease using the Platform and request account closure and data deletion (subject to our legal retention obligations) by contacting [email protected].

For all privacy-related inquiries, data access requests, or complaints, please contact our Data Privacy team:

If you believe ma77 has not handled your personal data in accordance with this Privacy Policy or the Philippine Data Privacy Act of 2012, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the regulatory body responsible for enforcing data privacy rights in the Philippines. Information about filing a complaint with the NPC is available through official Philippine government channels.

ma77 takes all privacy complaints seriously and will investigate each complaint thoroughly and in good faith. We aim to resolve all complaints within thirty (30) days of receipt, and will keep you informed of the progress of your complaint throughout the investigation.