All data transmitted between you and penas77 is encrypted end-to-end using industry-standard SSL technology.
Your personal information is never sold, rented, or traded to third-party advertisers or data brokers.
penas77 processes personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).
You have the right to access, correct, delete, and port your personal data held by penas77 at any time.
penas77 collects only the personal data that is strictly necessary to provide and secure its services.
Data retention periods are defined and disclosed. We do not keep your data longer than is necessary or legally required.
This Privacy Policy ("Policy") is issued by penas77 ("penas77," "we," "us," "our") and applies to all personal data collected, processed, stored, and shared by penas77 in connection with the operation of the online gaming and betting platform accessible at penas77.club and all associated subdomains, mobile interfaces, and related digital services (collectively, the "Platform").
This Policy applies to all users of the Platform, including registered account holders, visitors who browse the Platform without registering, and any individual whose personal data is otherwise submitted to penas77 in connection with the use of our services. It covers personal data processed both online and in connection with our customer support and compliance operations.
penas77 is committed to protecting the personal data of its users in compliance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and any issuances of the National Privacy Commission ("NPC") of the Philippines. Where applicable, penas77 also observes anti-money laundering data obligations under Republic Act No. 9160 (Anti-Money Laundering Act) as amended.
This Policy should be read together with the penas77 Terms & Conditions, which govern the overall contractual relationship between penas77 and its users.
For the purposes of the DPA and this Policy, penas77 acts as the personal information controller in respect of all personal data processed through the Platform. This means that penas77 determines the purposes and means by which your personal data is collected and processed.
penas77 operates in compliance with applicable PAGCOR (Philippine Amusement and Gaming Corporation) online gaming guidelines, which impose obligations regarding player identity verification, transaction monitoring, and data protection that intersect with this Policy.
penas77 collects personal data that is necessary to provide our services, meet our legal obligations, and maintain the security and integrity of the Platform. We observe the principle of data minimization — we do not collect more data than is reasonably required for the stated purposes.
When you register a penas77 account, we collect:
When identity verification is required, we additionally collect:
penas77 collects personal data through the following means:
| Collection Method | Description |
|---|---|
| Direct submission | Data you provide when registering, updating your account, submitting KYC documents, or contacting support. |
| Automated collection | Technical and device data collected automatically when you access or use the Platform, including via cookies and server logs. |
| Transaction processing | Financial data generated when you deposit or withdraw funds, processed through our integrated payment providers. |
| Gameplay systems | Gaming activity data recorded by game engines and the penas77 platform systems as you play. |
| Third-party verification | Identity and fraud verification data obtained from KYC service providers as part of our regulatory compliance obligations. |
penas77 processes your personal data only where a lawful basis exists under the DPA. The following table sets out the primary purposes for which we process personal data and the corresponding legal basis:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract; compliance with legal obligation (age verification) |
| Processing deposits and withdrawals | Performance of contract |
| KYC and identity verification | Compliance with legal obligation (PAGCOR, AMLA) |
| Fraud detection and prevention | Legitimate interest; compliance with legal obligation |
| Customer support | Performance of contract; legitimate interest |
| Responsible gaming monitoring | Compliance with legal obligation; legitimate interest (duty of care) |
| Promotional communications | Consent (opt-in); you may withdraw consent at any time |
| Platform analytics and improvement | Legitimate interest |
| Regulatory reporting and audit | Compliance with legal obligation |
penas77 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may, however, share your personal data with the following categories of recipients in the circumstances described:
We engage third-party service providers to perform functions on our behalf. These include payment processors (GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard network processors), KYC and identity verification providers, customer support platform providers, hosting and cloud infrastructure providers, and fraud detection system operators. These parties process personal data only on penas77's instructions and are contractually bound to implement appropriate security and confidentiality measures. They are prohibited from using your data for their own independent purposes.
Game providers (including Evolution, Pragmatic Play, JILI, Microgaming, NetEnt, Play'n GO, Playtech, Spadegaming, and CQ9) may receive session identifiers and gameplay-relevant data necessary to deliver their games on the Platform. These providers are licensed game suppliers and are bound by their own data handling obligations.
penas77 may be required to disclose personal data to PAGCOR, the Anti-Money Laundering Council ("AMLC"), the National Privacy Commission, Philippine law enforcement agencies, or courts of competent jurisdiction where required by law, court order, or binding regulatory direction. Such disclosures are made only to the extent strictly required by the applicable legal obligation.
In the event that penas77 undergoes a corporate restructuring, merger, acquisition, or sale of assets, personal data held by penas77 may be transferred to the relevant successor entity as part of that transaction. You will be notified of any such transfer and any material change in data handling practices that results from it.
Some of penas77's service providers — particularly cloud hosting providers, game platform infrastructure operators, and global KYC verification services — may process personal data on servers located outside the Republic of the Philippines. Where such international transfers occur, penas77 ensures that appropriate safeguards are in place in accordance with Section 21 of the DPA and NPC guidelines, including:
By using the penas77 Platform and accepting this Policy, you acknowledge and consent to such international transfers where they are necessary for the provision of our services and are conducted with appropriate safeguards as described above.
penas77 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, detect fraudulent activity, and analyze how the Platform is used so that we can continuously improve it.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Essential for the Platform to function — login sessions, security tokens, load balancing | Session / short-term |
| Functional | Remembers your preferences (language, display settings, responsible gaming choices) | Up to 12 months |
| Analytical | Aggregated, anonymized data on how users navigate the Platform — used to improve performance and UX | Up to 24 months |
| Security | Fraud detection, unusual login pattern identification, brute-force protection | Session / persistent |
penas77 does not use advertising cookies or share tracking data with third-party advertising networks. You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the Platform and your ability to log in to your account.
penas77 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law and regulation. The following general retention guidelines apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account + 5 years after closure (AMLA compliance) |
| KYC and identity documents | Duration of account + 5 years (or as required by PAGCOR / AMLC) |
| Financial transaction records | Minimum 5 years from the date of each transaction |
| Gaming activity records | Duration of account + 2 years after closure |
| Customer support communications | 3 years from the date of the interaction |
| Technical / access logs | 12 months from collection |
| Promotional opt-in records | Until consent is withdrawn, plus 1 year for audit trail |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in a manner that prevents re-identification. Where data is required for ongoing legal proceedings, regulatory investigations, or the resolution of an outstanding dispute, the retention period will be extended until such matter is resolved.
penas77 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:
As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data processed by penas77. These rights are available to all registered account holders and, where applicable, to non-registered users whose data penas77 processes.
You have the right to be informed that your personal data is being collected and processed, and to receive clear information about the purposes and legal basis for that processing. This Privacy Policy fulfills that obligation.
You have the right to request a copy of the personal data penas77 holds about you, together with information about how it is being processed. Requests will be fulfilled within 15 business days of receipt, subject to identity verification.
You have the right to request correction of any inaccurate or incomplete personal data held by penas77. Basic account details can be updated directly through your account settings. Changes to identity-verified data require supporting documentation.
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to overriding legal retention obligations (e.g., AMLA requires us to retain transaction data for a minimum of five years).
You have the right to object to processing based on legitimate interests, including profiling. You also have an unconditional right to object to processing for direct marketing purposes at any time. To exercise this right, contact penas77 support or update your marketing preferences in your account.
Where processing is based on your consent or a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible.
Under the DPA, you have the right to claim compensation for damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data, subject to the provisions and limitations of Republic Act No. 10173.
To exercise any of the above rights, please submit a request to [email protected] with the subject line "Data Rights Request." penas77 will acknowledge your request within 3 business days and respond substantively within 15 business days. We may require identity verification before fulfilling your request.
The penas77 Platform is strictly intended for adults aged 21 years and above. penas77 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the registration process and through KYC procedures. The processing of date of birth information collected during registration is necessary for the purpose of age verification and constitutes a legal obligation under Philippine gambling regulations.
If penas77 becomes aware that personal data has been collected from an individual under the age of 21 — whether through registration fraud, misrepresentation, or any other means — such data will be deleted as promptly as practicable, the associated account will be suspended, and any funds held in that account will be handled in accordance with our Terms & Conditions and applicable regulations.
Parents and guardians who believe that a person under the age of 21 may have registered on or accessed the penas77 Platform are encouraged to contact our support team immediately at [email protected].
penas77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or NPC guidance. The effective date of any revision will be displayed prominently at the top of this page.
Where changes are material — that is, where they significantly affect how we use your personal data — penas77 will provide advance notice via your registered email address or a prominent in-platform notification at least seven (7) days before the changes take effect. For non-material changes (such as clarifications, reformatting, or corrections), the revised Policy will simply be published with an updated effective date.
Your continued use of the penas77 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the Platform and may request account closure in accordance with the procedures set out in our Terms & Conditions.
For all queries, requests, or concerns regarding this Privacy Policy or penas77's data processing practices, please contact us using the details below:
If you are not satisfied with penas77's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the independent body responsible for administering and implementing the Data Privacy Act of 2012, and it accepts complaints from data subjects regarding alleged violations of their data privacy rights.
Information on how to file a complaint with the NPC is available on the NPC's official website. penas77 encourages you to first attempt to resolve any concern with us directly before escalating to the NPC, as most issues can be resolved promptly through our internal process.