me77 Privacy Policy

1 Introduction

me77 ("we," "us," or "our") is committed to protecting the privacy and personal data of all users ("you" or "Player") who access or use the me77 online casino platform at me77.app (the "Platform"). This Privacy Policy describes how we collect, use, store, share, and protect your personal information in connection with your use of the Platform.

This Privacy Policy is incorporated into and forms part of the me77 Terms & Conditions. By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

me77 operates in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its implementing rules and regulations. We are committed to upholding the principles of transparency, legitimate purpose, and proportionality in all data processing activities.

2 Data We Collect

me77 collects the following categories of personal data from players:

2.1 Identity and Contact Data

• Full legal name
• Date of birth
• Gender
• Nationality
• Email address
• Mobile phone number
• Residential address (including city, province, and postal code)

2.2 Identity Verification Data (KYC)

• Government-issued photo identification (e.g., Philippine passport, SSS ID, UMID, driver's licence, PhilSys National ID)
• Proof of address documents
• Selfie or facial image for identity verification purposes
• Source of funds documentation where required

2.3 Financial Data

• GCash account number or registered mobile number
• PayMaya / Maya account details
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) where applicable
• Transaction history including deposits, withdrawals, and wager records

2.4 Technical and Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Login timestamps and session duration
• Pages visited and features used on the Platform
• Game history and betting activity

2.5 Communications Data

• Records of communications with our customer support team (chat logs, email correspondence)
• Survey responses and feedback submitted through the Platform
• Marketing preferences and communication opt-in/opt-out records

3 How We Collect Your Data

me77 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, and similar tracking technologies.
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from anti-fraud partners; payment data from payment processors such as GCash and PayMaya.
• Publicly available sources: Information from public databases or government registries where necessary for compliance purposes.

4 How We Use Your Data

me77 uses your personal data for the following purposes:

me77 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

5 Legal Basis for Processing

me77 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations and regulatory reporting requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and analytics, where these interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing and Disclosure

me77 does not sell your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, and banking partners (BPI, BDO, Metrobank) to process your financial transactions.
• Identity verification providers: Third-party KYC service providers to verify your identity and age in compliance with regulatory requirements.
• Fraud prevention and AML partners: Service providers that assist in detecting and preventing fraudulent activity and money laundering.
• Technology and hosting providers: Cloud infrastructure and software providers that support the operation of the Platform, bound by data processing agreements.
• Regulatory authorities: PAGCOR and other Philippine government agencies where disclosure is required by law or regulatory directive.
• Law enforcement: Where required by a valid court order, subpoena, or applicable law.

All third-party service providers who process personal data on our behalf are required to enter into data processing agreements with me77 and are contractually obligated to process your data only in accordance with our instructions and applicable law.

7 Cookies & Tracking Technologies

me77 uses cookies and similar tracking technologies to enhance your experience on the Platform. A cookie is a small text file placed on your device when you visit a website. We use the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function correctly, including maintaining your login session and enabling secure transactions. These cannot be disabled.
• Performance and analytics cookies: Help us understand how players use the Platform so we can improve functionality and user experience. Data collected is aggregated and anonymised where possible.
• Functional cookies: Remember your preferences such as language settings and display options to personalise your experience.
• Marketing cookies: Used to deliver relevant promotional content based on your interests and activity on the Platform. These are only set with your consent.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform. For detailed instructions on managing cookies, refer to your browser's help documentation.

8 Data Retention

me77 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML and regulatory requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for up to three (3) years from the date of the last interaction.
• Marketing preferences: Retained until you withdraw consent or request deletion, subject to any overriding legal obligation.
• Technical and usage data: Retained for up to twenty-four (24) months from collection, unless required longer for security or legal purposes.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be associated with you.

9 Data Security

me77 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls ensuring that only authorised personnel can access personal data on a need-to-know basis.
• Regular security assessments, vulnerability scanning, and penetration testing of Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Staff training on data protection obligations and security best practices.

While me77 takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, me77 will notify you and the National Privacy Commission (NPC) in accordance with applicable law.

10 Your Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by me77:

• Right to be informed: The right to know what personal data we collect, how we use it, and with whom we share it — as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data we hold about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 14. We will respond to all verified requests within thirty (30) days. In complex cases, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

Please note that certain rights may be limited where me77 is required to retain or process your data to comply with a legal obligation or to establish, exercise, or defend legal claims.

11 Children's Privacy

The me77 Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling regulations. me77 does not knowingly collect personal data from individuals under the age of 21.

If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the Platform, please contact us immediately at the details provided in Section 14.

me77 employs age verification procedures during the registration and KYC process to prevent underage access to the Platform.

12 International Data Transfers

me77 primarily processes and stores your personal data within the Philippines. In some cases, your data may be transferred to and processed in countries outside the Philippines — for example, where we use cloud infrastructure or third-party service providers whose servers are located abroad.

Where such transfers occur, me77 ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require the recipient to provide a level of data protection equivalent to that required under Philippine law. By using the Platform, you consent to such transfers where they are necessary for the provision of our services.

13 Updates to This Privacy Policy

me77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform features. When we make material changes, we will notify you by posting the updated Privacy Policy on the Platform and updating the "Last updated" date at the top of this page.

Where required by law, we will seek your consent before implementing material changes that affect how we process your personal data. Your continued use of the Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how me77 protects your information.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way me77 handles your personal data, please contact our Data Protection Officer:

Data Protection Officer — me77
Email: [email protected]

For general support enquiries, you may also reach our customer support team at: [email protected]

We aim to respond to all data privacy requests within thirty (30) days of receipt. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.