Your personal data belongs to you. This Privacy Policy explains exactly what information rj77 collects, why we collect it, how we use it, and the rights you hold as a Filipino data subject under Philippine law.
rj77 operates in full compliance with Republic Act 10173 — the Philippine Data Privacy Act of 2012.
rj77 never sells, rents, or trades your personal data to any third party for marketing or commercial purposes.
rj77 collects only the personal data necessary to operate your account, process payments, and comply with regulations.
As a Philippine data subject, you have the right to access, correct, erase, and port your personal data held by rj77.
All personal data stored by rj77 is protected using industry-standard encryption at rest and in transit.
rj77 retains personal data only for as long as necessary for legal, regulatory, and operational purposes — then deletes it.
rj77 ("rj77," "we," "us," "our") operates the online gaming platform accessible at rj77.asia and is committed to protecting the privacy and personal data of every individual who registers, accesses, or uses the Platform. This Privacy Policy ("Policy") explains how rj77 collects, processes, stores, shares, and protects your personal information in connection with your use of our Platform and services.
This Policy applies to all users of the rj77 Platform, including registered Players, visitors who browse the Platform without registering, and individuals who contact rj77's customer support team. It covers all personal data processed by rj77 regardless of the device or channel through which you access the Platform.
This Policy should be read together with rj77's Terms and Conditions and Responsible Gaming Policy. By registering an Account or using the rj77 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
rj77 is the data controller responsible for the personal data of Players and users of the rj77 Platform. As data controller, rj77 determines the purposes and means by which your personal data is processed. rj77 is registered as a personal information controller with the National Privacy Commission (NPC) of the Philippines as required under the Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations.
rj77 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection law. The DPO's contact details are set out in Section 16 of this Policy. You may contact the DPO directly with any privacy-related queries, requests to exercise your data subject rights, or complaints.
rj77 collects only the personal data that is necessary and proportionate to provide our services, comply with our legal and regulatory obligations, and maintain the security and integrity of the Platform. The categories of personal data we collect include the following:
rj77 collects your personal data through the following channels and methods:
Most of the personal data rj77 holds is provided directly by you when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a promotion. You are responsible for ensuring that the information you provide to rj77 is accurate, complete, and kept up to date.
When you access the rj77 Platform, certain technical data is automatically collected by our systems, including your IP address, device identifiers, session data, and browsing behavior on the Platform. This data is collected using server logs, session tracking, and cookies (see Section 10).
When you make a deposit or request a withdrawal, rj77 receives transactional confirmation data from GCash, Maya, InstaPay, PesoNet, and connected banking partners. This data is limited to what is necessary to verify and record the transaction — rj77 does not receive or store your full payment credentials.
Where rj77 uses a third-party KYC verification service to authenticate identity documents submitted by Players, that service provider may return a verification result and associated data to rj77. All such providers are contractually bound to process data only for the purpose of identity verification and are subject to applicable data protection obligations.
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, rj77 must have a lawful basis for each instance of personal data processing. The following table summarises the primary legal bases on which rj77 processes your personal data:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and management | Performance of contract (Terms & Conditions) |
| Processing deposits and withdrawals | Performance of contract |
| KYC identity and age verification | Legal obligation (PAGCOR regulations, AML law) |
| Anti-money laundering monitoring | Legal obligation (AMLA, FATF guidelines) |
| Responsible gaming monitoring | Legal obligation / legitimate interest |
| Customer support communications | Performance of contract / legitimate interest |
| Platform security and fraud prevention | Legitimate interest |
| Promotional communications (opt-in) | Consent |
| Analytics and service improvement | Legitimate interest (anonymised/aggregated) |
| Regulatory reporting to PAGCOR / NPC | Legal obligation |
rj77 uses the personal data we collect strictly for the purposes described below. We do not process your data in ways that are incompatible with the purposes for which it was originally collected.
Your identity and contact data is used to create, maintain, and administer your rj77 Account — including managing your login credentials, Account Balance, transaction history, and communication preferences. This is the core contractual use of your data and is necessary for the performance of our service agreement with you.
Financial data is used to process your deposits via GCash, Maya, QR Ph, InstaPay, PesoNet, and connected Philippine bank accounts, and to return your withdrawals to your verified payment method. rj77 retains transaction records to satisfy financial regulatory obligations and to resolve any payment disputes.
rj77 is required by PAGCOR regulations and applicable Philippine anti-money laundering law (Republic Act 9160, as amended) to verify the identity of Players before processing withdrawals and to monitor account activity for suspicious transactions. Identity documents submitted during KYC are used solely for this purpose and are processed with appropriate technical and organisational safeguards.
rj77 uses gameplay data, session duration records, and account activity patterns to support our responsible gaming monitoring obligations. Where our systems or support team identify patterns consistent with problem gambling — such as unusual deposit frequency, session length, or loss patterns — we may use this information to contact the Player, offer responsible gaming tools, or take protective action where warranted.
Technical and usage data including IP addresses, device identifiers, and login records are used to protect the security and integrity of the Platform and Player Accounts. This includes detecting duplicate accounts, identifying fraudulent activity, and investigating suspected collusion or bonus abuse.
Communications data from your live chat and email interactions with rj77 support agents is retained to allow us to provide effective, contextual assistance, track the resolution of complaints, and train our support team to improve service quality.
Where you have opted in to receive promotional communications, rj77 may use your email address or mobile number to send you information about rj77 offers, bonuses, and new games. You may withdraw consent to marketing communications at any time by contacting rj77 support via live chat or by following the unsubscribe instructions in any marketing communication you receive.
rj77 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances:
rj77 engages carefully selected third-party service providers to support the operation of the Platform. These include payment processors (GCash/GXI, Maya/Paymaya), KYC verification providers, cloud hosting infrastructure, IT security vendors, and customer support tooling providers. All third-party service providers are:
rj77 may disclose personal data to government authorities, law enforcement agencies, PAGCOR, the Anti-Money Laundering Council (AMLC), or the National Privacy Commission (NPC) where required to do so by applicable Philippine law, valid legal process, or regulatory directive. Where permissible, rj77 will notify affected Players of such disclosures.
In the event that rj77 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, personal data held by rj77 may be transferred to a successor entity as part of that transaction. In such circumstances, rj77 will notify affected Players prior to the transfer and ensure that the receiving entity commits to equivalent data protection standards.
Some of rj77's third-party service providers — including cloud hosting infrastructure and security vendors — may process data on servers located outside the Philippines. Where such cross-border data transfers occur, rj77 ensures that appropriate safeguards are in place consistent with the requirements of the Data Privacy Act of 2012 and the NPC's guidelines on cross-border data flows.
These safeguards include requiring that all international recipients of Philippine personal data are subject to contractual obligations equivalent in standard to those imposed by Philippine data protection law, and that data is not transferred to jurisdictions lacking adequate data protection frameworks without appropriate supplementary measures.
rj77 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following minimum retention periods required by applicable law and regulation:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of Account + 5 years post-closure | PAGCOR / AML legal obligation |
| KYC identity documents | Duration of Account + 5 years post-closure | Republic Act 9160 (AMLA) |
| Financial transaction records | 10 years from transaction date | AMLA / BIR requirements |
| Customer support communications | 3 years from last interaction | Legitimate interest / complaint handling |
| Marketing consent records | Until consent withdrawn + 2 years | Legal obligation (proof of consent) |
| Technical / session log data | 13 months from collection | Security / fraud prevention |
Upon expiry of the applicable retention period, rj77 will securely delete or irreversibly anonymise your personal data in accordance with its data disposal procedures.
The rj77 Platform uses cookies and similar session-tracking technologies to provide a functional and secure user experience. The following types of cookies may be present on the Platform:
rj77 does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings; however, disabling essential cookies will affect your ability to log in and use the Platform normally.
As a data subject under the Philippine Data Privacy Act of 2012, you are entitled to the following rights in respect of your personal data held by rj77. To exercise any of these rights, please contact rj77's Data Protection Officer using the details in Section 16.
Request a copy of the personal data rj77 holds about you, including information on how it is being processed.
Request correction of inaccurate or incomplete personal data held about you on the rj77 Platform.
Request deletion of your personal data where it is no longer necessary for the purposes collected, subject to legal retention obligations.
Object to processing of your personal data based on rj77's legitimate interests, including direct marketing communications.
Receive a copy of the personal data you provided to rj77 in a structured, commonly used, machine-readable format.
Lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe rj77 has breached your data rights.
rj77 will respond to all data subject rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, and rj77 will notify you of any extension within the initial response window. Requests to exercise data rights are free of charge unless demonstrably unfounded or excessive.
The rj77 Platform is intended solely for individuals who are aged 21 years and above, as required by PAGCOR's regulations on online gaming in the Philippines. rj77 does not knowingly collect, process, or store personal data belonging to individuals under 21 years of age.
If rj77 discovers or is notified that a registered Account holder is under 21 years of age, we will immediately suspend the Account, delete the associated personal data to the extent permitted by applicable law, return any deposits minus any winnings accrued, and permanently close the Account. rj77 will never knowingly retain personal data of underage individuals beyond what is strictly necessary to satisfy this closure process.
Parents and guardians concerned that a minor may have registered on rj77 should contact our Data Protection Officer immediately via live chat or email so that we may investigate and take appropriate action without delay.
rj77 implements appropriate technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:
In the event of a personal data breach that poses a risk to the rights and freedoms of affected Players, rj77 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach and will notify affected Players promptly thereafter, in compliance with the requirements of the Data Privacy Act of 2012.
The rj77 Platform may contain references to or integrations with third-party services — most notably the payment platforms GCash (operated by G-Xchange, Inc.) and Maya (operated by Maya Philippines, Inc.). When you interact with these third-party services — for example, by initiating a GCash deposit — you are subject to the privacy policy and terms of the relevant third party in respect of that interaction.
rj77 is not responsible for the privacy practices of third-party services accessed through the Platform. We recommend that you review the privacy policies of GCash, Maya, and any other third-party service you use in connection with your rj77 Account. rj77 selects payment partners based in part on their compliance with applicable Philippine financial regulation and data protection requirements.
rj77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance from the National Privacy Commission. The date of the most recent revision will always be displayed at the top of this Policy.
Where we make material changes to this Policy — that is, changes that substantively affect how we use your data or your rights as a data subject — rj77 will notify registered Players via email to their registered address and/or via a prominent notice on the Platform at least seven (7) days before the changes take effect.
Your continued use of the rj77 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgment and acceptance of the revised Policy. If you do not accept the changes, you must cease using the Platform and may request Account closure by contacting our support team via live chat.
For all privacy-related queries, requests to exercise your data subject rights, or concerns about how rj77 handles your personal data, please contact our Data Protection Officer through the following channels:
Please include your registered username or email address, a clear description of your request, and any supporting documentation where relevant. rj77 will acknowledge receipt of your request within 24 hours and provide a substantive response within thirty (30) calendar days.
If you are not satisfied with rj77's handling of your privacy concern, you have the right to escalate the matter to the National Privacy Commission of the Philippines (NPC). The NPC accepts complaints and inquiries through its official government channels and is the competent supervisory authority for data protection matters in the Philippines.
Ready to play? rj77 protects your data, pays out fast, and keeps gaming fair for Filipino players. 21+ only. Play responsibly.
21+ only. Please gamble responsibly. Gambling can be addictive — know your limits.