an77 Privacy Policy

1. Introduction

an77 ("an77", "we", "us", "our") operates the online gaming platform accessible at https://an77.bio and values the privacy of every individual who uses our services. This Privacy Policy ("Policy") describes how an77 collects, uses, stores, shares, and protects the personal information of registered players and visitors ("you", "your") in connection with your use of the an77 platform, including all games, promotions, payment services, and customer support features.

By registering an an77 account or continuing to use the an77 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of the an77 Terms & Conditions, which are incorporated by reference.

If you do not agree with any part of this Policy, you must discontinue use of the an77 platform and may request closure of your account by contacting our support team.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, an77 acts as the Personal Information Controller in respect of the personal data it collects and processes through the platform. an77 determines the purposes for which, and the means by which, your personal data is processed.

Where an77 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, and game technology suppliers — those parties act as Personal Information Processors under written agreements that require them to process data only on an77's documented instructions and to maintain appropriate security standards.

An77's designated Data Protection Officer (DPO) can be reached via the contact details set out in Section 12 of this Policy.

3. Personal Data We Collect

3.1 Registration Data

When you create an an77 account, we collect the following information you provide directly:

• Full legal name (as it appears on your government-issued identification)
• Date of birth (to verify you meet the 21+ age requirement)
• Philippine mobile number
• Email address
• Residential address (city, province, and country)
• Username and encrypted password
• Preferred currency (Philippine Peso, PHP)

3.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) and anti-money laundering compliance obligations, we may collect:

• Copies of government-issued photo ID (Philippine passport, PhilSys National ID, SSS ID, driver's licence, or PRC ID)
• Proof of address documents (utility bills, bank statements, or Barangay certifications dated within three months)
• Selfie photographs or liveness-check images submitted for identity verification
• Payment method ownership documentation (e.g., screenshot of GCash or PayMaya account bearing your registered name)

3.3 Financial Transaction Data

When you make deposits or withdrawals on an77, we collect:

• Payment method type (GCash, PayMaya, BPI, BDO, Metrobank, Visa, or Mastercard)
• Transaction reference numbers and amounts in Philippine Peso (PHP)
• Deposit and withdrawal history linked to your an77 account
• Partial payment card details (last four digits only — an77 does not store full card numbers)

3.4 Gameplay and Platform Activity Data

We automatically collect data about your interactions with the an77 platform, including:

• Games played, bet amounts, game outcomes, session durations, and wagering history
• Bonus and promotion claims, wagering progress, and reward redemptions
• Login timestamps, session activity logs, and platform navigation patterns
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests)

3.5 Technical and Device Data

When you access an77, our systems automatically collect certain technical data:

• IP address and approximate geolocation (country and region level)
• Device type, operating system, browser type and version
• Unique device identifiers and mobile advertising IDs (where applicable)
• Referring URL and pages visited within the an77 platform

3.6 Communications Data

When you contact an77 customer support via live chat or email, we collect and retain records of those communications, including the content of your messages, support ticket reference numbers, and the resolution outcome. This data is used to improve our support services and maintain a record of any disputes or investigations.

4. Purpose of Processing & Legal Basis

The table below summarises the primary purposes for which an77 processes your personal data and the corresponding legal basis under the Data Privacy Act of 2012:

Where an77 processes personal data based on your consent, you have the right to withdraw that consent at any time by contacting our support team or updating your communication preferences in your account settings. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to withdrawal.

5. Data Sharing & Disclosure

5.1 Service Providers

an77 shares personal data with carefully selected third-party service providers who assist us in operating the platform. These include:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and card scheme partners, solely to process your financial transactions
• Identity verification providers: KYC and liveness-check technology suppliers engaged to verify your identity documents
• Game technology providers: Software suppliers whose games are hosted on the an77 platform
• Cloud infrastructure providers: Hosting and server infrastructure partners who store platform data under strict data processing agreements
• Customer support tools: Live chat platform providers used to deliver our 24/7 support service

All third-party processors are bound by written data processing agreements that prohibit use of your data for any purpose other than providing services to an77 and require them to implement appropriate technical and organisational security measures.

5.2 Regulatory and Law Enforcement Disclosure

an77 may disclose personal data to competent Philippine authorities — including the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies — where required to do so by applicable law, court order, or regulatory directive. Such disclosures will be made without prior notice to the affected player where notice is prohibited by law or would compromise an ongoing investigation.

5.3 Business Transfers

In the event that an77 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, personal data held by an77 may be transferred to the acquiring entity as part of that transaction, subject to the same privacy protections described in this Policy. an77 will notify affected players of any such transfer through the platform or by email to the address registered on their account.

5.4 No Sale of Personal Data

an77 does not sell, rent, lease, or otherwise disclose your personal data to third-party advertisers or data brokers for their own marketing purposes. Any sharing of data with third parties is strictly limited to the purposes described in this Section 5.

6. Data Retention

an77 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal and regulatory retention requirements. The following general retention periods apply:

• Account and registration data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements under Philippine law
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction
• Gameplay activity logs: Retained for a minimum of two (2) years from the date of each session
• Customer support communications: Retained for three (3) years from the date of the communication
• Marketing consent records: Retained for the duration of the consent and for two (2) years following withdrawal of consent

Where data is retained solely to comply with legal or regulatory obligations and is no longer needed for operational purposes, it is stored in a restricted archive accessible only to authorised compliance personnel.

7. Security Measures

an77 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These include:

• Encryption in transit: All data transmitted between your device and the an77 platform is encrypted using TLS 1.2 or higher with 256-bit SSL certificates
• Encryption at rest: Sensitive personal data and financial records stored on an77 servers are encrypted at rest using AES-256 encryption
• Access controls: Access to personal data is restricted on a strict need-to-know basis. an77 staff with access to personal data are subject to confidentiality obligations and regular security training
• Multi-factor authentication (MFA): an77 offers OTP-based MFA for player accounts to provide an additional layer of login security
• Intrusion detection and monitoring: an77 systems are monitored continuously for suspicious activity, attempted breaches, and anomalous access patterns
• Regular security assessments: an77 conducts periodic vulnerability assessments and penetration testing of its platform infrastructure
• Incident response: an77 maintains a documented data breach response plan. In the event of a breach that poses risk to your rights and freedoms, we will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and notify affected players without undue delay

While an77 takes all reasonable steps to secure your personal data, no system is completely immune to security risks. You are responsible for maintaining the confidentiality of your an77 account credentials. If you suspect your account has been compromised, contact our 24/7 live chat support immediately.

8. Cookies & Tracking Technologies

The an77 platform uses cookies and similar tracking technologies to enhance your experience, maintain your login session, and analyse platform usage. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that keep you logged in during your visit and security cookies that detect fraudulent activity. These cookies cannot be disabled.
• Functional cookies: Remember your preferences such as language, display settings, and game lobby filters so you do not have to reconfigure them on each visit.
• Analytics cookies: Help an77 understand how players navigate the platform so we can identify and fix usability issues and improve the overall experience. Data collected is aggregated and does not identify you personally.
• Marketing cookies: Used only if you have opted in to receive personalised promotions. These cookies track which an77 promotions you have viewed or claimed so we can show you relevant offers.

You can manage your cookie preferences through your browser settings at any time. Note that disabling certain categories of cookies may affect the functionality of the an77 platform. Strictly necessary cookies cannot be disabled as they are required for the platform to operate.

9. Your Data Privacy Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in respect of your personal data held by an77:

• Right to be informed: You have the right to be informed of how your personal data is collected, used, and processed, as set out in this Policy.
• Right of access: You may request a copy of the personal data an77 holds about you, along with information about the purposes for which it is processed and the third parties with whom it has been shared.
• Right to rectification: If you believe that any personal data held about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure: Subject to legal and regulatory retention requirements, you may request that an77 delete your personal data. Where deletion is not possible due to a legal obligation, we will inform you accordingly.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest, subject to an77 demonstrating compelling legitimate grounds that override your interests.
• Right to data portability: You may request that an77 provide your personal data in a structured, commonly used, machine-readable format, or transmit it directly to another personal information controller where technically feasible.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: If you believe that an77 has processed your personal data in breach of the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact the an77 Data Protection Officer using the details in Section 12. an77 will respond to all data rights requests within thirty (30) calendar days of receipt, or within any extended period permitted under applicable law for complex requests.

10. Minors & Age Restriction

The an77 platform is strictly intended for individuals aged 21 years and above, consistent with Philippine regulations governing casino-style online gaming. an77 does not knowingly collect personal data from anyone under the age of 21.

If an77 discovers or reasonably suspects that personal data has been collected from an individual under 21 years of age, we will immediately suspend that account, delete the relevant personal data, and if appropriate, report the incident to relevant authorities. If you are a parent or guardian and believe that a minor has registered on the an77 platform using false age information, please contact our support team immediately so that we can investigate and take appropriate action.

11. Changes to This Privacy Policy

an77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The effective date at the top of this Policy will be updated whenever a change is made.

Where changes are material — meaning they significantly affect your rights or how your personal data is used — an77 will notify registered players by email to the address on their account, or by a prominent notice on the platform, at least fourteen (14) days before the changes take effect. Your continued use of the an77 platform following the effective date of any revised Policy constitutes your acceptance of the changes.

We encourage you to review this Privacy Policy periodically to stay informed about how an77 is protecting your information.

12. Contact Us & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by an77, please contact our Data Protection Officer:

• Live Chat: Available 24/7 directly through the an77 platform — the fastest way to reach us from anywhere in the Philippines, including Manila, Cebu, Davao, Quezon City, and Makati
• Email: [email protected] (plain text — not a clickable link)

If you are not satisfied with an77's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for administering and enforcing the Data Privacy Act of 2012.

an77 takes all privacy complaints seriously and will investigate each one promptly and thoroughly. We are committed to resolving any data privacy concerns in a fair, transparent, and timely manner — because trust is the foundation of everything we do as a platform built for Filipino players.