fa77 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how fa77 ("fa77," "we," "us," or "the Platform") collects, processes, stores, and protects personal data provided by or obtained about users ("Player," "you") of the fa77 website at fa77.vu and all related services, including online casino games, sports betting, bingo, live dealer tables, and account management functions.

fa77 is committed to protecting the privacy and personal data of all players, including Filipino players subject to the protections afforded by Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations. By creating an account or using the fa77 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Data Controller Information

For the purposes of applicable data protection law, fa77 is the data controller responsible for the personal data of players who use the fa77.vu platform. For all data protection inquiries, requests to exercise data subject rights, or complaints, please contact fa77 using the details provided in Section 14 of this Policy.

fa77 has designated a point of contact for data protection matters who is responsible for ensuring compliance with this Policy, applicable data protection laws, and the requirements of the National Privacy Commission of the Philippines where applicable.

3. Personal Data We Collect

fa77 collects personal data through multiple channels in the course of providing its services. The categories of personal data we collect include:

3.1 Registration Data

When you create an fa77 account, we collect your full legal name, date of birth, email address, mobile phone number, and a username and password of your choosing. This information is required to create and maintain your account.

3.2 Identity Verification (KYC) Data

To comply with PAGCOR requirements and anti-money laundering obligations, fa77 requires identity verification before processing withdrawals. KYC data includes copies of government-issued identification documents (such as PhilSys National ID, passport, or driver's license), proof of address, and a live selfie photograph for facial verification purposes.

3.3 Financial Data

fa77 collects payment-related information including GCash account references, PayMaya wallet identifiers, bank account details (for BPI, BDO, or Metrobank transfers), and cryptocurrency wallet addresses as applicable. fa77 does not store full card numbers or CVV codes. Payment data is processed through PCI-DSS compliant payment processors.

3.4 Transaction and Gameplay Data

fa77 automatically records transaction histories (deposits, withdrawals, bonus credits), game session data (games played, stakes, results, session duration), and account activity logs. This data is retained for regulatory compliance, dispute resolution, and responsible gaming monitoring purposes.

3.5 Technical and Device Data

fa77 collects technical data including your IP address, device type and operating system, browser type and version, approximate geolocation derived from IP address, and session timestamps. This data is used for security monitoring, fraud prevention, and platform optimization.

3.6 Communications Data

When you contact fa77's customer support team via live chat, email, or any other channel, the content of those communications and associated metadata are recorded and retained for quality assurance, training, and dispute resolution purposes.

4. How We Use Your Personal Data

fa77 uses the personal data we collect for the following purposes:

• Account Management: Creating, maintaining, and securing your fa77 account, including processing login requests, password resets, and account updates.
• Identity Verification: Conducting KYC checks to verify your age (21+ requirement), identity, and the source of funds as required by PAGCOR and AML obligations.
• Service Delivery: Processing deposits and withdrawals via GCash, PayMaya, and other accepted payment methods; enabling access to games; crediting bonuses; and maintaining your transaction history.
• Security and Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, multi-accounting, and other prohibited conduct.
• Regulatory Compliance: Meeting our obligations under PAGCOR licensing requirements, the Data Privacy Act, the Anti-Money Laundering Act, and other applicable Philippine laws.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behavior and to enforce deposit limits, loss limits, and self-exclusion tools requested by players.
• Customer Support: Responding to your inquiries, resolving disputes, and providing assistance through live chat and email support.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have consented to receive such communications. Players may opt out at any time.
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve the fa77 platform, optimize game selection, and enhance the player experience for Filipino users.

5. Legal Basis for Processing

fa77 processes personal data on the following legal grounds under the Data Privacy Act of 2012 and applicable data protection principles:

• Consent: Where you have provided explicit consent, including consent to receive marketing communications and consent to the processing of sensitive personal information for KYC purposes.
• Contractual Necessity: Processing necessary to perform our obligations under the Terms and Conditions you accepted upon registration, including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with fa77's legal and regulatory obligations, including PAGCOR licensing conditions, AML reporting, and data retention requirements.
• Legitimate Interests: Processing necessary for fa77's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, provided such interests are not overridden by your fundamental rights and freedoms.

6. Data Sharing and Third Parties

fa77 does not sell your personal data to third parties. fa77 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• Payment Processors: GCash (GCash by Globe), PayMaya (Maya Philippines), and partner banks (BPI, BDO, Metrobank) to process your deposits and withdrawals. These providers process your financial data under their own privacy policies and PCI-DSS obligations.
• Game Providers: Licensed game providers such as JILI Gaming and PG Soft receive session data necessary to deliver game content. Game providers do not receive your full personal profile.
• KYC and Identity Verification Providers: Third-party identity verification services used to process government ID documents and facial verification during KYC. These providers are bound by confidentiality agreements and applicable data protection requirements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government authorities where fa77 is legally required to report or disclose information.
• Legal and Professional Advisers: Legal counsel, auditors, and compliance consultants engaged by fa77, subject to professional confidentiality obligations.
• Service Providers: Cloud hosting providers, cybersecurity firms, and customer support technology vendors who process data on fa77's behalf under data processing agreements that require equivalent data protection standards.

7. Cookies and Tracking Technologies

fa77 uses cookies and similar tracking technologies on the fa77.vu website to deliver, maintain, and improve its services. The categories of cookies used by fa77 include:

• Strictly Necessary Cookies: Essential for the operation of the platform, including session management, login authentication, and security features. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your preferences such as language settings and last-accessed game categories to personalize your fa77 experience.
• Analytics Cookies: Collect anonymized data about how players navigate and use the fa77 platform, helping us identify areas for improvement. Analytics data is aggregated and does not identify individual players.
• Security Cookies: Used for fraud detection and the prevention of unauthorized access, including device fingerprinting to identify anomalous login patterns.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to use the fa77 platform. fa77 does not use cookies for the purpose of serving third-party advertising.

8. Data Retention

fa77 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention standards:

• Account Data: Retained for the duration of your active account plus five (5) years following account closure, in accordance with PAGCOR record-keeping requirements and AML obligations.
• KYC and Identity Documents: Retained for a minimum of five (5) years following the end of the business relationship, as required by anti-money laundering regulations.
• Transaction Records: Retained for five (5) years from the date of each transaction for regulatory compliance and dispute resolution purposes.
• Customer Support Communications: Retained for two (2) years from the date of the communication, unless related to an unresolved dispute in which case retention continues until final resolution.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, at which point your data will be removed from marketing lists within thirty (30) days.

At the end of applicable retention periods, personal data is securely deleted or anonymized in a manner that renders individual identification impossible.

9. Data Security

fa77 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the fa77 platform.
• Encryption of sensitive data fields at rest, including financial account references and identity document images.
• Access controls ensuring that fa77 staff may only access personal data on a strict need-to-know basis, with all access logged and auditable.
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists.
• Two-factor authentication (2FA) available to all players and mandatory for fa77 staff accessing internal systems.
• Incident response procedures ensuring that data breaches are identified, contained, and reported to affected players and the National Privacy Commission within required timeframes where applicable.

While fa77 maintains robust security practices, no internet-based platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their fa77 accounts and to enable 2FA.

10. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 and applicable data protection law, you have the following rights in relation to your personal data held by fa77:

• Right to Be Informed: The right to be informed of how fa77 collects and uses your personal data, as described in this Policy.
• Right of Access: The right to request a copy of the personal data fa77 holds about you, along with information about how it is processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update most account information directly through your fa77 account settings.
• Right to Erasure: The right to request deletion of your personal data where retention is no longer necessary, subject to fa77's legal and regulatory retention obligations.
• Right to Object: The right to object to processing based on legitimate interests, including the right to opt out of direct marketing communications at any time.
• Right to Data Portability: The right to receive a copy of personal data you have provided to fa77 in a structured, machine-readable format.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission of the Philippines if you believe fa77 has processed your personal data in a manner inconsistent with the Data Privacy Act.

To exercise any of the above rights, please contact fa77 at [email protected]. fa77 will respond to data subject requests within thirty (30) days. Requests may be subject to identity verification before fa77 fulfils them.

11. Children and Minors

The fa77 platform is strictly for adults aged twenty-one (21) years and older, in accordance with PAGCOR requirements. fa77 does not knowingly collect personal data from individuals under the age of 21. If fa77 becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all personal data associated with the minor will be deleted, and any funds deposited will be returned to the originating payment method following verification.

If you believe that a minor has registered on the fa77 platform, please notify fa77 immediately at [email protected] so that appropriate action can be taken without delay.

12. International Data Transfers

fa77 may transfer personal data to service providers and technology partners located outside the Philippines, including cloud hosting infrastructure and game provider servers. Where personal data is transferred internationally, fa77 takes appropriate steps to ensure that the receiving party provides an adequate level of data protection, including through the use of contractual data protection clauses, as required by the Data Privacy Act and its Implementing Rules and Regulations.

By using the fa77 platform, you acknowledge and consent to the transfer of your personal data to servers and service providers that may be located outside the Philippines, subject to the protections described in this Policy.

13. Changes to This Privacy Policy

fa77 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, fa77 will notify registered players via email and/or a prominent notice on the fa77.vu website. The date of the most recent revision is displayed at the top of this page.

Continued use of the fa77 platform following notification of changes to this Policy constitutes acceptance of the updated Policy. If you do not agree with any changes, you should cease using the platform and may request deletion of your personal data as described in Section 10.

14. Contact and Complaints

For all data protection inquiries, requests to exercise your data subject rights, or complaints regarding fa77's handling of your personal data, please contact fa77 using the following channels:

• Email: [email protected] (response within 4 hours for general inquiries; data subject requests addressed within 30 days)
• Live Chat: Available 24/7 via the fa77.vu website for immediate assistance

If you are not satisfied with fa77's response to a data protection complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.