yj77 Privacy Policy – How We Handle Your Personal Data in the Philippines

1 About This Privacy Policy

This Privacy Policy governs the collection, processing, storage, and disclosure of personal data by yj77 in connection with its online casino and sports betting platform accessible at https://yj77.app (the "Platform"). It applies to all individuals who register for, access, or interact with the yj77 Platform, regardless of whether they are located in Metro Manila, Cebu, Davao, or any other part of the Philippines.

By creating a yj77 account or by continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood how yj77 handles your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and close your account.

This Policy is incorporated by reference into the yj77 Terms & Conditions and forms part of the binding agreement between you and yj77.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, yj77 acts as the Personal Information Controller (PIC) in respect of personal data collected from users of the yj77 Platform. yj77 determines the purposes and means of processing personal data obtained through the Platform.

Certain personal data processing activities may be delegated to Personal Information Processors (PIP) acting under yj77's instruction – for example, payment processors handling GCash and BPI transaction data, or game providers processing game interaction logs. Such PIPs are contractually bound to process data solely in accordance with yj77's instructions and this Policy.

For data privacy enquiries, please contact yj77's designated Data Protection Officer (DPO) at: [email protected]

3 Categories of Personal Data We Collect

yj77 collects the following categories of personal data, to the extent necessary for the purposes described in Section 5:

yj77 does not collect sensitive personal information as defined under RA 10173 (such as health information, political affiliations, or biometric data) except where required by PAGCOR regulations for identity verification purposes (e.g., facial image on a government-issued ID).

4 How We Collect Personal Data

yj77 collects personal data through the following means:

• Direct collection: Data you provide when registering a yj77 account, completing KYC verification, contacting support, or updating account settings.
• Automated collection: Technical data collected automatically when you access the yj77 Platform, including IP address, device identifiers, session data, and cookies (see Section 10).
• Third-party collection: Data received from payment processors (e.g., GCash transaction confirmation data), identity verification service providers, and fraud detection partners, to the extent necessary to operate the Platform and meet regulatory obligations.

5 Purposes of Processing & Legal Basis

yj77 processes your personal data for the following purposes, each grounded in a lawful basis under RA 10173:

• Account registration and management – necessary for the performance of the contract between you and yj77.
• Identity and age verification (KYC) – required by PAGCOR licensing conditions and to comply with the Anti-Money Laundering Act (RA 9160) as amended. Processing is necessary for compliance with a legal obligation.
• Payment processing – necessary for contract performance. Includes processing GCash, PayMaya, BPI, BDO, and Metrobank transaction data.
• Game delivery and session management – necessary for contract performance.
• Fraud prevention and security monitoring – necessary for yj77's legitimate interest in protecting the Platform and its users from unauthorized access, fraud, and financial crime.
• Responsible gaming monitoring – necessary for compliance with PAGCOR responsible gaming requirements and yj77's legitimate interest in player welfare.
• Customer support communications – necessary for contract performance and legitimate interests.
• Marketing communications – based on your consent, where provided. You may withdraw consent at any time by updating your communication preferences in your yj77 account settings.
• Legal and regulatory reporting – necessary for compliance with legal obligations under Philippine law, including PAGCOR reporting requirements.

6 Data Sharing & Disclosure

yj77 does not sell your personal data to third parties. yj77 may share your personal data with the following categories of recipients, strictly to the extent necessary for the purposes described in Section 5:

• Payment processors: GCash (G-Xchange, Inc.), PayMaya (Maya Bank, Inc.), BPI, BDO, Metrobank, and card networks (Visa, Mastercard) to process deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers engaged to verify identity documents and age during account verification.
• Game providers: Licensed game software providers whose games are hosted on the yj77 Platform may receive session identifiers and bet data necessary to operate their games.
• Fraud and AML compliance services: Third-party platforms used to detect suspicious transaction patterns in compliance with RA 9160.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities as required by law or lawful order.
• Professional advisers: Legal counsel, auditors, and accountants, subject to professional confidentiality obligations.

All third-party processors engaged by yj77 are required by contract to implement appropriate technical and organizational data protection measures consistent with RA 10173.

7 International Data Transfers

Certain yj77 service providers and game platform operators may process personal data outside the Philippines. Where such international transfers occur, yj77 ensures that appropriate safeguards are in place in accordance with NPC guidelines, including contractual data protection clauses that provide equivalent protections to those afforded under RA 10173.

yj77 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate contractual or technical safeguards.

8 Data Retention

yj77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your yj77 account and for a minimum of five (5) years following permanent account closure, as required by PAGCOR licensing conditions and AML obligations.
• Financial transaction records: Retained for a minimum of five (5) years following the transaction date, as required under the Anti-Money Laundering Act.
• Gaming session logs: Retained for a minimum of two (2) years for dispute resolution and regulatory audit purposes.
• Marketing communications data: Retained until consent is withdrawn or the account is permanently closed, whichever is earlier.
• Technical and cookie data: Retained for up to twelve (12) months unless a shorter period applies under applicable cookie regulations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with yj77's data disposal procedures.

9 Security Measures

yj77 implements technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and yj77 servers.
• Bcrypt hashing for stored account passwords – yj77 never stores passwords in plaintext.
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of the yj77 Platform infrastructure.
• Segregation of player funds from yj77 operational accounts as required by PAGCOR.
• Login activity monitoring and anomalous access alerts for Member accounts.

In the event of a personal data breach that is likely to result in harm to affected individuals, yj77 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of discovery, and notify affected Members without undue delay, in accordance with RA 10173 and NPC Circular No. 16-03.

10 Cookies & Tracking Technologies

The yj77 Platform uses cookies and similar tracking technologies to deliver and improve Platform functionality, maintain your logged-in session, detect fraud, and (with your consent) deliver relevant promotional content. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for Platform operation, including session authentication and security tokens. These cannot be disabled without disrupting Platform functionality.
• Functional Cookies: Remember your Platform preferences (language, game lobby view) across sessions.
• Analytics Cookies: Collect anonymised data about how Members interact with the Platform to improve user experience. Used only with your consent.
• Marketing Cookies: Used to deliver promotional content relevant to your gaming activity. Used only with your consent.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the yj77 Platform. Cookie preferences for analytics and marketing can also be managed via your yj77 account settings.

11 Your Rights Under RA 10173

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by yj77:

• Right to be Informed: The right to be informed of how your personal data is being collected and processed – fulfilled by this Privacy Policy.
• Right to Access: The right to request a copy of the personal data yj77 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure / Right to be Forgotten: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Right to Object: The right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format for transfer to another controller, where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of these rights, submit a written request to yj77's Data Protection Officer at [email protected]. yj77 aims to respond to all data subject requests within fifteen (15) business days. Some requests may be subject to identity verification before processing.

12 Children & Minors

The yj77 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations. yj77 does not knowingly collect personal data from persons under 21 years of age. If yj77 discovers that personal data has been collected from an individual under 21, that data will be deleted and the associated account suspended immediately.

If you are a parent or guardian and believe that a minor has created a yj77 account, please contact yj77 support immediately at [email protected].

13 Third-Party Platform Links

The yj77 Platform may contain references to third-party game providers whose software is integrated into the yj77 lobby. While yj77 contractually requires all integrated game providers to maintain data privacy standards consistent with RA 10173, yj77 is not responsible for the independent privacy practices of third-party providers in respect of data collected directly by their systems.

This Privacy Policy applies solely to personal data processed by yj77 as Personal Information Controller. Members should review the privacy policies of individual game providers where concerns exist about provider-level data practices.

14 Amendments to This Policy

yj77 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or Platform practices. Material amendments will be communicated to active Members via email notification to the registered account address no less than seven (7) days before the amendment takes effect. The updated Policy will be published at yj77.app/privacy-policy with a revised effective date.

Continued use of the yj77 Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

15 Contact & Data Protection Officer

For all data privacy enquiries, data subject access requests, or complaints regarding yj77's handling of your personal data, please contact:

• Data Protection Officer – yj77
• Email: [email protected]
• Response target: within fifteen (15) business days of receipt
• Support Hours: Monday–Sunday, 8:00 AM – 10:00 PM PHT

If you are not satisfied with yj77's response to your data privacy concern, you may file a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.