tz77 Privacy Policy

1. Introduction

tz77 ("we", "us", "our", "Platform") operates the online gaming and casino platform accessible at tz77.org and its associated mobile applications. This Privacy Policy ("Policy") governs the collection, processing, storage, and disclosure of personal information relating to registered users and visitors of the tz77 platform ("you", "User", "Player").

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations. tz77 is registered as a personal information controller with the National Privacy Commission (NPC) of the Philippines.

By registering an account or otherwise using the tz77 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must not create an account or use the tz77 platform.

2. Personal Data We Collect

tz77 collects the following categories of personal data:

We do not intentionally collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance (e.g., government ID numbers required for KYC). We do not collect racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond facial verification for KYC purposes.

3. How We Collect Your Data

tz77 collects personal data through the following means:

• Direct registration: Information you provide when creating a tz77 account, submitting KYC documents, or completing your profile;
• Platform activity: Data automatically generated as you use tz77, including bets placed, games accessed, deposits made, and sessions logged;
• Payment processors: Transaction data received from GCash, Maya, BPI, BDO, and other payment partners when you make deposits or request withdrawals;
• Customer support: Information you share when contacting tz77 support via live chat or email;
• Cookies and tracking technologies: Session and analytics data collected via cookies as described in Section 6 of this Policy;
• Third-party identity verification providers: Where tz77 uses a third-party KYC service to verify government-issued IDs.

4. Purpose and Legal Basis for Processing

tz77 processes your personal data only for specified, legitimate purposes. The table below outlines our processing activities and their legal basis under the Data Privacy Act of 2012:

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal. Withdrawal of consent for essential processing (such as KYC) may result in the suspension of your account.

5. Data Sharing and Disclosure

tz77 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following circumstances:

• Payment service providers: GCash, Maya, BPI, BDO, UnionBank, Metrobank, and other payment partners, solely for the purpose of processing your transactions;
• KYC/identity verification providers: Third-party services engaged to verify government-issued IDs and facial images during account verification;
• Game providers: Game studios such as PG Soft, Pragmatic Play, Evolution Gaming, and Jili receive pseudonymized gaming session data to deliver their games;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement bodies where disclosure is required by Philippine law;
• Fraud prevention services: Providers of fraud detection and cybersecurity services who process data under strict confidentiality obligations;
• Professional advisors: Legal counsel, auditors, and accountants under professional secrecy obligations.

All third-party service providers who process personal data on behalf of tz77 are required to sign data processing agreements that obligate them to process data only as instructed, maintain adequate security measures, and comply with applicable Philippine data protection law.

6. Cookies and Tracking Technologies

tz77 uses cookies and similar tracking technologies to enhance your platform experience, maintain your login session, and analyze platform usage. The types of cookies we use include:

• Essential cookies: Required for the platform to function, including session management and security tokens. These cannot be disabled without affecting platform functionality.
• Analytics cookies: Used to understand how Players use tz77 so we can improve the platform. Data collected is aggregated and does not identify individual users.
• Preference cookies: Store your language and display preferences across sessions.

You can manage or delete cookies through your browser settings. Note that disabling essential cookies will affect your ability to use the tz77 platform. tz77 does not use cookies for third-party advertising purposes.

7. Data Retention

tz77 retains personal data for as long as necessary to fulfill the purposes described in this Policy, subject to the following minimum retention periods required by Philippine law:

• KYC and identity verification records: Minimum 5 years from the date of account closure, as required by PAGCOR and AMLC regulations;
• Financial transaction records: Minimum 5 years from the date of each transaction, in compliance with the Anti-Money Laundering Act;
• Active account data: Retained for the duration of the Player's account and for 5 years following account closure;
• Support correspondence: 3 years from the date of the last interaction;
• Marketing consent records: Retained until consent is withdrawn, plus 1 year thereafter as evidence of prior consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with tz77's data destruction procedures.

8. Data Security

tz77 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and tz77 servers;
• Encryption at rest for sensitive data fields including identity documents and financial information;
• Role-based access control limiting staff access to personal data on a need-to-know basis;
• Two-factor authentication for all tz77 administrative systems;
• Regular penetration testing and vulnerability assessments by independent cybersecurity firms;
• 24/7 security monitoring with automated alerts for anomalous access patterns.

Despite these measures, no data transmission over the internet is 100% secure. In the event of a personal data breach that poses a real risk of harm to affected Players, tz77 will notify the NPC and affected individuals in accordance with NPC Circular 16-03.

9. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by tz77:

• Right to be Informed: To know what personal data we collect and how it is processed;
• Right to Access: To request a copy of the personal data tz77 holds about you;
• Right to Rectification: To request correction of inaccurate or incomplete personal data;
• Right to Erasure or Blocking: To request deletion or blocking of personal data where processing is unlawful or no longer necessary, subject to legal retention obligations;
• Right to Data Portability: To receive your personal data in a structured, commonly used format;
• Right to Object: To object to processing based on legitimate interests or for direct marketing purposes;
• Right to Damages: To claim compensation for damages suffered as a result of tz77's violation of the Data Privacy Act.

To exercise any of these rights, contact tz77's Data Protection Officer at the contact details provided in Section 13 of this Policy. We will respond to verified requests within 15 business days. We may require proof of identity before processing your request.

10. Children's Privacy

11. Cross-Border Data Transfers

Certain of tz77's service providers — including game studios, cloud infrastructure providers, and cybersecurity services — may be located outside the Philippines. Where personal data is transferred outside the Philippines, tz77 ensures that such transfers comply with Section 21 of the Data Privacy Act of 2012, including through the use of data processing agreements incorporating appropriate data protection safeguards equivalent to Philippine standards.

tz77 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing additional contractual or technical safeguards.

12. Updates to This Policy

tz77 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform operations. The "Last Updated" date at the top of this page will reflect the most recent revision. Where changes are material, tz77 will notify registered Players via email or a prominent platform notification prior to the changes taking effect.

Continued use of the tz77 platform following notification of an updated Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically.

13. Contact & Data Protection Officer

tz77 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and the Data Privacy Act of 2012. For privacy-related inquiries, data subject rights requests, or to report a potential data breach, please contact:

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that tz77 has violated your data privacy rights. Visit the NPC website for guidance on filing a complaint.