Privacy Policy

Ha77 ("ha77," "we," "us," "our") is committed to protecting the privacy and personal data of all players, visitors, and users ("you," "Data Subject") who access or use the ha77 online gaming platform at ha77.asia and associated mobile applications (collectively, the "Platform").

This Privacy Policy describes the types of personal data ha77 collects, the purposes for which it is processed, the parties with whom it may be shared, the security measures applied to protect it, and the rights available to you as a data subject under applicable Philippine law, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

By registering an account on ha77 or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Privacy Policy, please discontinue use of the Platform immediately.

Ha77 is the personal information controller responsible for the processing of personal data collected through the ha77 Platform. For all data privacy inquiries, requests, and concerns, ha77 can be reached at:

Ha77's Data Protection Officer (DPO) oversees compliance with the Data Privacy Act of 2012 and handles all formal data subject requests.

Ha77 collects the following categories of personal data in connection with the provision of the Platform and its gaming services:

3.1 Identity and Registration Data. This includes your full legal name, date of birth, nationality, government-issued identification number (e.g., Philippine National ID, passport, driver's licence, SSS/GSIS/TIN number), and a copy of your identity document where required for KYC (Know Your Customer) verification.

3.2 Contact Data. This includes your email address, Philippine mobile phone number, residential address (including city, province, and postal code), and, where provided, secondary contact details.

3.3 Financial Data. This includes your GCash number, PayMaya account, bank account details (BPI, BDO, Metrobank, or other institutions), credit or debit card information (processed through certified payment gateways — ha77 does not store raw card numbers), and transaction history including deposits, withdrawals, and gaming activity.

3.4 Technical Data. This includes your IP address, device type and model, operating system, browser type, unique device identifiers, session tokens, login timestamps, and geographic location data derived from your IP address.

3.5 Gameplay and Behavioral Data. This includes your game history, bet amounts, win/loss records, session duration, game preferences, and responsible gaming tool usage (e.g., deposit limits set, self-exclusion periods activated).

3.6 Communications Data. This includes records of your communications with ha77 support, live chat transcripts, and any correspondence submitted via email or in-platform messaging.

Ha77 collects personal data through the following means:

• Direct registration: Data you provide when creating or updating your ha77 account.
• Identity verification: Documents submitted for KYC verification in compliance with anti-money laundering and responsible gaming requirements.
• Payment processing: Data transmitted when you make deposits or request withdrawals via GCash, PayMaya, or bank transfer.
• Platform usage: Data automatically generated through your use of the ha77 Platform, including gameplay, session activity, and technical logs.
• Cookies and tracking: Data collected via cookies, web beacons, and analytics tools as described in Section 10.
• Support interactions: Data you provide when contacting ha77 customer support.
• Third-party sources: Identity verification and fraud screening data from authorised third-party verification providers, consistent with applicable law.

Ha77 processes personal data on the following legal bases under the Data Privacy Act of 2012 and applicable regulations:

• Consent: Where you have provided explicit consent for a specific processing activity, such as receiving promotional communications.
• Contractual necessity: Processing required to perform the contract between you and ha77, including account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including anti-money laundering (AMLA) obligations, PAGCOR reporting requirements, and tax law.
• Legitimate interests: Processing necessary for ha77's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your rights and interests.

Ha77 uses the personal data it collects for the following purposes:

• Creating and managing your ha77 account and verifying your identity
• Processing deposits and withdrawals via GCash, PayMaya, and bank transfers
• Delivering gaming services, including live casino, slots, bingo, sabong, and sports betting
• Enforcing the 21+ age restriction and responsible gaming obligations
• Preventing and detecting fraud, money laundering, and prohibited conduct
• Responding to your support requests and account inquiries
• Complying with PAGCOR regulatory requirements and Philippine law
• Improving the ha77 Platform through analytics and performance monitoring
• Sending you account-related notifications (required service communications)
• Sending promotional offers and marketing communications where you have consented

Ha77 does not sell your personal data to third parties for their own marketing purposes.

Ha77 may share your personal data with the following categories of recipients in connection with the provision of its services:

7.1 Payment Service Providers. GCash (Mynt), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, and certified card payment processors receive financial data necessary to process your transactions. These providers operate under their own privacy frameworks and applicable Philippine financial regulations.

7.2 Game Providers. Third-party game content providers whose titles are available on the ha77 Platform may receive limited gameplay data necessary for game delivery, RNG certification, and jackpot management.

7.3 Identity Verification and KYC Providers. Authorised identity verification service providers may receive identity documents and data for the purpose of KYC compliance and age verification.

7.4 Regulatory Authorities. Ha77 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine regulatory bodies when required by law, court order, or regulatory directive.

7.5 Technology and Infrastructure Providers. Cloud hosting, database, and security service providers operating under contractual data processing agreements with ha77 may process personal data in connection with platform operations.

Ha77 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following specific retention periods:

• Account data: Retained for the duration of your ha77 account and for a minimum of five (5) years following account closure, consistent with PAGCOR and AMLA record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years following the date of the transaction, as required by Philippine anti-money laundering regulations.
• KYC and identity documents: Retained for the period required by applicable law, typically five (5) years from account closure.
• Support communications: Retained for two (2) years following the resolution of the relevant inquiry.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ha77's data destruction procedures.

Ha77 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ha77 Platform
• Encrypted storage of sensitive data including passwords (stored as salted hashes) and financial records
• Access controls and role-based authorisation limiting internal access to personal data on a need-to-know basis
• Regular security audits, penetration testing, and vulnerability assessments
• Two-factor authentication (2FA) available for all ha77 accounts
• Session monitoring and anomalous login detection with automated security alerts

While ha77 employs industry-standard security practices, no method of transmission or storage over the internet can be guaranteed as completely secure. You are responsible for maintaining the security of your own account credentials. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ha77 will notify affected Data Subjects and the National Privacy Commission in accordance with applicable breach notification requirements.

Ha77 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function, including session management, login authentication, and security features. These cannot be disabled without affecting Platform functionality.
• Performance and analytics cookies: Used to understand how players use the ha77 Platform, identify performance issues, and improve the user experience. Data collected is aggregated and anonymised where possible.
• Functional cookies: Used to remember your preferences (such as language settings and game preferences) to personalise your experience on ha77.
• Marketing cookies: Used, where you have consented, to deliver relevant promotions and measure the effectiveness of ha77's marketing activities.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect your ability to use some features of the ha77 Platform.

Under the Data Privacy Act of 2012 and applicable regulations, you have the following rights with respect to your personal data held by ha77:

• Right to be informed: The right to be notified of the collection and processing of your personal data, including the purposes and legal basis for processing.
• Right of access: The right to obtain a copy of the personal data ha77 holds about you, along with information about how it is processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used format and to have it transmitted to another controller, where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ha77 has processed your personal data in violation of applicable law.

To exercise any of the above rights, please contact ha77's Data Protection Officer at [email protected]. Ha77 will respond to all legitimate data subject requests within thirty (30) calendar days, or within such other period as required by applicable law.

The ha77 Platform is strictly intended for individuals who are at least twenty-one (21) years of age. Ha77 does not knowingly collect personal data from individuals under the age of 21. If ha77 becomes aware that personal data has been collected from an underage individual, that data will be deleted immediately and the associated account will be closed.

Parents or guardians who believe that a minor has submitted personal data to ha77 should contact [email protected] immediately so that appropriate action can be taken.

Ha77 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to registered players via email or prominent notice on the Platform at least seven (7) days prior to taking effect. The "Last updated" date at the top of this Privacy Policy will be revised accordingly.

Your continued use of the ha77 Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. Ha77 recommends that you review this Privacy Policy periodically to remain informed of how your personal data is handled.

For all data privacy inquiries, requests to exercise your data subject rights, or concerns about the handling of your personal data by ha77, please contact:

For concerns about ha77's compliance with the Data Privacy Act of 2012, you may also contact the National Privacy Commission of the Philippines directly through the NPC's official channels.

For matters relating to responsible gaming, self-exclusion, and player protection tools, please visit ha77's Responsible Gaming page.