This Privacy Policy explains how em77 collects, uses, stores, and protects your personal data in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and PAGCOR regulatory requirements.
em77's core data privacy commitments — this summary does not replace the full policy below:
Your personal data is protected by 256-bit SSL encryption, access controls, and regular security audits on Philippine-based servers.
em77 does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes — ever.
You have full rights to access, correct, erase, and object to the processing of your personal data held by em77.
Data is stored and processed on servers located within the Philippines, subject to Philippine law and NPC oversight.
em77 retains personal data only for as long as required for the stated purpose or by applicable law — no indefinite storage.
In the event of a data breach affecting your personal data, em77 will notify you and the NPC within 72 hours as required by law.
Summary: em77 is committed to protecting the privacy of every Filipino player. This policy explains exactly what data we collect, why we collect it, who we share it with, and what your rights are under Philippine law. We will never use your data in ways that are not described here.
em77 ("we", "us", "our") is the data controller responsible for the personal data collected through the em77 online gaming platform accessible at em77.lat and its associated subdomains. em77 operates under a PAGCOR license and is subject to the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and the regulations issued by the National Privacy Commission of the Philippines.
As data controller, em77 determines the purposes and means by which your personal data is processed. We have appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection law. Contact details for the DPO are provided in Section 13 of this Policy.
em77 collects personal data from Players through several channels: directly during account registration and KYC verification, through your use of the Platform, and through automated technical systems. The categories of personal data we collect include:
Full legal name, date of birth, Philippine mobile number, email address, and password (stored only as a bcrypt hash — the plain-text password is never retained).
Copies of Philippine government-issued photo identification (e.g., PhilSys National ID, passport, driver's licence, Voter's ID, SSS/GSIS card), selfie photographs, proof of address documents where required, and the results of automated identity verification checks.
GCash account numbers, PayMaya (Maya) account identifiers, BPI/BDO/Metrobank account references, card details (processed and tokenised by PCI-DSS compliant payment processors — em77 does not store full card numbers), transaction amounts, dates, and references for all deposits and withdrawals.
Game session logs, wager amounts, game outcomes, bonus utilisation records, and all other activity conducted through your em77 Account. This data is retained for regulatory compliance, dispute resolution, and responsible gaming monitoring purposes.
IP address, device type and model, operating system, browser type, session timestamps, login history, and geolocation data (city/province level, derived from IP address). This data is used for security monitoring, fraud prevention, and service optimisation.
Records of all communications between you and em77 support, including live chat transcripts, email correspondence, and support ticket content. These records are retained for quality assurance and dispute resolution purposes.
Self-exclusion requests, deposit limit settings, session time preferences, and any information you share with em77's responsible gaming team. This data is handled with additional sensitivity and is accessible only to authorised responsible gaming personnel.
em77 processes your personal data only for specified, legitimate purposes. The purposes for which we use your personal data are:
Under the Philippine Data Privacy Act of 2012, em77 processes your personal data on the following legal bases:
5.1 em77 does not sell, rent, trade, or disclose your personal data to third parties for their own marketing or commercial purposes under any circumstances.
5.2 em77 may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:
5.3 All third-party data processors engaged by em77 are subject to contractual obligations requiring them to process data only on em77's documented instructions, to maintain appropriate security measures, and to comply with the Philippine Data Privacy Act.
6.1 The em77 Platform uses cookies and similar tracking technologies to maintain your login session, remember your preferences, and analyse Platform usage. Cookies are small text files stored on your device by your browser.
6.2 em77 uses the following categories of cookies:
6.3 You may manage cookie preferences through your browser settings. Blocking all cookies may impair your ability to log in to and use the em77 Platform. em77 does not use cross-site tracking cookies or cookies for third-party advertising purposes.
7.1 em77 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
7.2 While em77 takes all reasonable measures to protect your data, no internet transmission is completely secure. You should use a strong, unique password for your em77 Account and enable two-factor authentication to maximise the security of your own access credentials.
8.1 em77 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable Philippine law and PAGCOR regulations.
8.2 Specific retention periods applicable to em77 data categories:
8.3 Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with em77's data disposal procedures.
As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by em77:
Request a copy of the personal data em77 holds about you and information about how it is processed.
Request correction of inaccurate or incomplete personal data held in your em77 Account.
Request deletion of personal data where retention is no longer necessary, subject to legal retention obligations.
Object to processing of your personal data for direct marketing purposes at any time, with immediate effect.
Request your personal data in a structured, machine-readable format for transfer to another service provider.
Request restriction of processing while a dispute about data accuracy or lawfulness of processing is resolved.
To exercise any of the above rights, contact em77's Data Protection Officer using the details provided in Section 13. em77 will respond to all data subject rights requests within thirty (30) days. Where a request is complex or numerous, em77 may extend the response period by a further thirty (30) days with notification.
You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe em77 has processed your personal data in violation of the Data Privacy Act.
10.1 The em77 Platform is strictly restricted to persons aged 21 years and above in accordance with PAGCOR regulations and Philippine law. em77 does not knowingly collect personal data from persons under the age of 21.
10.2 If em77 determines that personal data has been collected from a person under 21, the associated Account will be immediately suspended and the personal data deleted or anonymised in accordance with applicable law. Any funds held in such an Account will be handled in compliance with PAGCOR's guidelines on underage gambling.
10.3 If you believe that em77 may have inadvertently collected personal data from a person under 21, please contact our Data Protection Officer immediately using the details provided in Section 13.
11.1 em77's primary data storage and processing infrastructure is located within the Philippines. Where em77 engages third-party service providers whose operations involve processing your data outside the Philippines — for example, international payment card networks or cloud security services — such transfers are subject to appropriate contractual safeguards.
11.2 Any cross-border transfer of personal data is conducted in accordance with Section 21 of the Philippine Data Privacy Act, which requires that the receiving jurisdiction or organisation provide an adequate level of protection for personal data comparable to Philippine standards, or that appropriate contractual protections are in place.
11.3 em77 maintains a record of all third-party processors and the jurisdictions in which they operate. This information is available to Players upon written request to the Data Protection Officer.
12.1 em77 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Material changes to this Policy will be communicated to Players via their registered email address and through a prominent notice on the em77 Platform, at least seven (7) days before the changes take effect.
12.2 Your continued use of the em77 Platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the revised terms. If you do not accept the updated Policy, you may request closure of your Account by contacting em77 support.
12.3 The current version of this Privacy Policy, including its effective and last-updated dates, is always available on the em77 Platform at em77.lat/privacy-policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or em77's processing of your personal data, please contact our Data Protection Officer through the following channel:
Email (plain text): [email protected]
Subject Line: "Data Privacy Request – [Your Account Reference]"
Live Chat: Available 24/7 via the em77 Platform
Response Time: Within 30 days of receipt of your request
National Privacy Commission (NPC) Philippines: If you believe your privacy rights have been violated and em77 has not adequately addressed your complaint, you have the right to file a complaint with the NPC Philippines. The NPC is the independent authority responsible for enforcing the Data Privacy Act of 2012. Information on NPC complaint procedures is available through the NPC's official Philippine government channels.
em77 is the Philippines' most trusted PAGCOR-licensed online casino. Your personal data is protected under Philippine law. GCash-ready, 500+ games, 24/7 support. 21+ only.
Access em77 Casino21+ only | PAGCOR Licensed | Data Privacy Act Compliant | Gamble Responsibly