This Privacy Policy explains how penas77 collects, processes, stores, and protects your personal data in accordance with the Philippine Data Privacy Act of 2012 and PAGCOR's regulatory requirements.
Your Rights Under RA 10173
About This Policy: This Privacy Policy ("Policy") describes how penas77 ("we," "us," "our") collects, uses, stores, shares, and protects personal data about registered Players and visitors to penas77.net, in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and PAGCOR's applicable data protection obligations. By registering an account or using the Platform, you acknowledge and consent to the practices described in this Policy.
1.1 This Policy applies to all personal data collected by penas77 in connection with your use of the penas77 online casino and sports betting platform, including data collected through account registration, identity verification, payment transactions, customer support interactions, and your use of any game or feature available at penas77.net.
1.2 This Policy does not apply to information collected by third-party websites, services, or applications that may be linked to or integrated with penas77, except where penas77 acts as a data controller in relation to that data. Third-party services are governed by their own respective privacy policies.
1.3 This Policy is incorporated by reference into the penas77 Terms & Conditions and should be read together with those Terms. In the event of any conflict between this Policy and the Terms & Conditions on a privacy matter, this Policy shall prevail.
1.4 penas77 is committed to protecting the privacy and security of your personal data. We process personal data lawfully, fairly, and transparently, and only for specified, explicit, and legitimate purposes as described in this Policy.
2.1 penas77 is the personal information controller ("PIC") in respect of the personal data it collects and processes in connection with the penas77 platform and services. As the PIC, penas77 is responsible for determining the purposes and means by which personal data is processed.
2.2 penas77 has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with the Philippine Data Privacy Act, this Policy, and all related data protection obligations. Contact details for the DPO are provided in Section 15 of this Policy.
2.3 Where penas77 engages third-party service providers to process personal data on its behalf, such providers act as personal information processors ("PIP") and are bound by data processing agreements requiring them to process personal data only as instructed by penas77 and in accordance with applicable Philippine data protection law.
3.1 penas77 collects the following categories of personal data from Players and users:
| Data Category | Examples |
|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government-issued ID number (e.g., PhilSys, passport, driver's license, UMID), selfie photograph for KYC |
| Contact Data | Philippine mobile number, email address, residential address |
| Account Data | Username, hashed password, account creation date, account status, preferences, language settings |
| Financial Data | GCash account number (masked), PayMaya wallet reference, bank account details (masked), deposit and withdrawal transaction records, wallet balance history |
| Gaming Data | Game activity logs, bet amounts, game results, session duration, wagering history, bonus usage |
| Technical Data | IP address, device type and model, operating system, browser type and version, session tokens, cookies, access timestamps |
| Communications Data | Live chat transcripts, email correspondence, support ticket content, user-submitted feedback |
| AML & Compliance Data | Source of funds declarations, politically exposed person (PEP) status, sanctions screening results, suspicious transaction reports where applicable |
3.2 penas77 does not intentionally collect sensitive personal information as defined under the DPA (such as health information, religious beliefs, or sexual orientation) except where explicitly required for responsible gaming assessments or where voluntarily provided by the Player in a support communication.
4.1 penas77 collects personal data through the following means:
4.2 Where penas77 receives personal data from third-party sources, we ensure that those sources are lawfully authorized to share such data and that an appropriate legal basis exists for our receipt and further processing of that data.
5.1 penas77 processes your personal data for the following purposes and on the following legal bases under the Philippine Data Privacy Act:
5.2 penas77 does not process your personal data for any purpose incompatible with those listed above without providing you with notice and, where required by law, obtaining your additional consent.
penas77 does not sell your personal data. Disclosures to third parties occur only as described in this section, and only where a valid legal basis exists for such disclosure.
6.1 penas77 may share your personal data with the following categories of recipients:
6.2 All third parties engaged by penas77 as personal information processors are required by contract to implement appropriate technical and organizational security measures and to process personal data only for the purposes specified by penas77.
7.1 penas77 implements a comprehensive information security program that includes the following technical and organizational measures:
7.2 In the event of a personal data breach that is likely to result in serious harm to you, penas77 will notify the National Privacy Commission (NPC) within 72 hours of discovery and will notify affected Players without undue delay, in accordance with the DPA's breach notification requirements.
7.3 While penas77 takes significant steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your penas77 login credentials and for notifying penas77 immediately of any suspected unauthorized access to your Account.
8.1 penas77 retains personal data for the periods set out below, after which data is securely deleted or anonymized:
| Data Category | Retention Period |
|---|---|
| Account and Identity (KYC) Data | 5 years after account closure, as required by PAGCOR and AML regulations |
| Financial Transaction Records | 5 years after the transaction date, in compliance with Philippine AML law |
| Gaming Activity Logs | 3 years after the relevant gaming session, subject to PAGCOR requirements |
| Customer Support Records | 2 years after resolution of the relevant support interaction |
| Technical and Access Logs | 12 months, unless extended due to an active security investigation |
| Marketing Consent Records | Until consent is withdrawn, plus 2 years for compliance evidence |
| AML Compliance Records | 10 years, as required by the Anti-Money Laundering Act (RA 9160 as amended) |
8.2 Where retention is required by law beyond the periods stated above, penas77 will retain data for the minimum period required by the applicable legal obligation. Upon expiry of the applicable retention period, data will be securely and irreversibly destroyed.
9.1 Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by penas77:
9.2 To exercise any of the above rights, contact penas77's Data Protection Officer using the details in Section 15. penas77 will respond to all data subject requests within fifteen (15) Philippine business days of receipt, in accordance with NPC guidelines.
9.3 Certain data subject rights may be subject to limitations where processing is required by law (for example, AML and KYC retention obligations), where the data concerns third parties, or where exercising a right would prevent penas77 from fulfilling its regulatory obligations. penas77 will explain any applicable limitations clearly when responding to your request.
10.1 penas77 uses cookies and similar tracking technologies to operate the Platform, maintain your session, detect fraud, and analyze Platform usage. The following categories of cookies are used:
10.2 penas77 does not use third-party behavioral advertising cookies or sell cookie data to advertising networks. penas77 does not display third-party advertising on the Platform.
10.3 You may manage cookie preferences through your browser settings. Please note that disabling Strictly Necessary Cookies will prevent you from logging in to or using the penas77 Platform.
penas77 strictly prohibits access by persons under 21 years of age in compliance with Philippine law and PAGCOR regulations. We do not knowingly collect personal data from individuals under 21.
11.1 penas77 enforces a minimum age of 21 years for all registered Players. Age is verified during the mandatory KYC process through government-issued identification. Any account determined to belong to a person under 21 will be closed immediately and all associated personal data will be deleted, except where retention is required by law.
11.2 If a parent or guardian believes that a person under 21 has registered on penas77 or provided personal data to penas77, they should contact our Data Protection Officer immediately using the details in Section 15. penas77 will take prompt action to investigate and delete such data.
12.1 penas77 primarily processes personal data within the Philippines. Where personal data is transferred to or accessed by service providers located outside the Philippines (for example, game technology providers or cloud infrastructure providers with servers in other countries), penas77 ensures that such transfers comply with the requirements of the Philippine Data Privacy Act and NPC regulations governing cross-border data flows.
12.2 Cross-border transfers of personal data from penas77 to overseas processors are conducted only where:
12.3 penas77 maintains a register of all cross-border data transfers and their legal bases, available for inspection by the NPC upon request.
13.1 The penas77 Platform integrates with third-party services including payment providers (GCash, PayMaya, BDO, BPI, Metrobank), game technology providers, and KYC verification services. These integrations may involve the transmission of personal data to those third parties to the extent necessary to perform the relevant service.
13.2 Each third-party service provider engaged by penas77 is subject to a data processing agreement that binds them to: process personal data only as instructed by penas77; implement appropriate security measures; not further disclose personal data to sub-processors without penas77's consent; and cooperate with data subject rights requests.
13.3 penas77 is not responsible for the privacy practices of independent third-party websites or services that are not operated by penas77, even if links to those services appear within a game or in player communications. Players should review the privacy policies of any third-party services they use independently of penas77.
14.1 penas77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in Philippine data protection law, NPC guidance, or updates to our regulatory obligations under PAGCOR's licensing conditions.
14.2 Material changes to this Policy will be communicated to registered Players via the email address or mobile number associated with their penas77 Account, or through a prominent notice on the Platform, at least seven (7) days before the amended Policy takes effect.
14.3 Continued use of penas77 following the effective date of any Policy amendment constitutes your acceptance of the revised Privacy Policy. The current effective version of this Policy is always accessible at penas77.net/privacy-policy.
15.1 For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by penas77, please contact our Data Protection Officer through the following channels:
15.2 penas77 will acknowledge all data subject requests within two (2) Philippine business days and respond substantively within fifteen (15) Philippine business days of receipt, in accordance with NPC guidelines. Complex requests may require additional time, in which case penas77 will notify you of the extended timeline and the reasons for it.
15.3 If you are not satisfied with penas77's response to a data privacy concern, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.
Effective Date: This Privacy Policy is effective as of January 1, 2026, and supersedes all prior versions. penas77 recommends saving or printing a copy of this Policy for your records. The most current version is always available at penas77.net/privacy-policy.
21+ and Responsible Gaming: penas77 processes gaming activity data to support responsible gaming monitoring in compliance with PAGCOR requirements. All players must be 21 or older. Visit our Responsible Gaming page for guidance, self-assessment tools, and support resources.
penas77 is built on PAGCOR compliance, RA 10173 data protection, and a genuine commitment to your privacy. Play on a platform that takes Filipino players' data as seriously as their entertainment.
Sign In to penas77By using penas77, you acknowledge that you have read and understood this Privacy Policy. Players must be 21 or older.