This Privacy Policy describes how ma77 collects, uses, stores, shares, and protects the personal data of its users in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines. By using the ma77 platform, you consent to the practices described in this Policy.
This Privacy Policy ("Policy") is issued by ma77 ("ma77," "we," "us," or "our"), the operator of the online gaming platform at ma77.win. This Policy applies to all personal data processed in connection with your use of the ma77 website, mobile platform, and related services (collectively, the "Platform"). This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations. Please read this Policy carefully. If you do not agree with the practices described herein, you must refrain from using the ma77 Platform.
This Policy applies to all natural persons who interact with the ma77 Platform, including registered account holders ("Players"), visitors who browse ma77.win without registering, and individuals who contact ma77 through any support channel. It covers all personal data processed by ma77 whether collected directly from you, generated through your use of the Platform, or received from third-party sources.
This Policy does not apply to third-party websites, payment processors, game studios, or other external services that may be accessed through or alongside the ma77 Platform. Those third parties maintain their own privacy policies, and ma77 does not assume responsibility for their data handling practices.
ma77 collects the following categories of personal data in connection with the operation of the Platform:
| Category | Examples of Data Collected |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued Philippine ID number (PhilSys, passport, driver's license), and facial or document images submitted for KYC verification. |
| Contact Data | Philippine mobile number, email address, and residential address (including barangay, city/municipality, and province). |
| Account Data | Username, account creation date, account status, login history, session timestamps, and IP addresses associated with account access. |
| Financial Data | GCash account number, Maya account number, bank account details (BPI, BDO, Metrobank), deposit and withdrawal history, transaction amounts, and payment method verification records. |
| Gaming Activity Data | Game session records, bet amounts, wager outcomes, bonus usage, game type preferences, and cumulative gaming statistics. |
| Technical Data | Device type, operating system, browser type and version, screen resolution, mobile network carrier, and connection type (Wi-Fi or mobile data). |
| Communications Data | Records of customer support interactions, live chat transcripts, email correspondence, and any written or verbal communications submitted to ma77. |
| Marketing Preferences | Your opt-in or opt-out status for promotional emails, SMS notifications, and in-app marketing messages. |
ma77 collects personal data through the following methods:
ma77 processes personal data only for lawful purposes with a valid legal basis under the DPA. The table below identifies the primary processing purposes and their corresponding legal bases:
| Processing Purpose | Legal Basis (DPA) |
|---|---|
| Account registration and management | Performance of contract (Section 12[b] DPA) |
| Identity verification (KYC) | Compliance with PAGCOR regulation and RA 9160 (AML Act) |
| Processing deposits and withdrawals | Performance of contract |
| Game provision and result recording | Performance of contract; legitimate interest in dispute resolution |
| Fraud and AML monitoring | Legal obligation under RA 9160; legitimate interest |
| Customer support | Performance of contract; legitimate interest |
| Marketing and promotions | Consent (opt-in) — Section 12[a] DPA |
| Platform improvement and analytics | Legitimate interest — improvement of service quality |
| Regulatory reporting to PAGCOR / AMLC | Legal obligation under applicable Philippine law |
ma77 will not use your personal data for any purpose that is incompatible with the purposes set out above without first obtaining your explicit consent or identifying a separate legal basis under the DPA.
ma77 does not sell, rent, or trade your personal data to third parties for commercial purposes. Personal data is shared only in the following circumstances and only to the extent necessary for the stated purpose:
ma77 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law, whichever period is longer. The following retention periods apply as general guidelines:
Upon expiry of applicable retention periods, personal data will be securely deleted or anonymized in accordance with NPC guidelines and ma77's data disposal procedures.
ma77 implements technical, organizational, and physical security measures appropriate to the nature of the personal data processed and the risks presented by unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to:
Cookies are small text files stored on your device by your browser when you visit a website. ma77 uses cookies and similar technologies (including pixel tags and local storage) to operate and improve the Platform.
| Cookie Type | Purpose |
|---|---|
| Essential / Session | Required for the Platform to function. They maintain your login session, remember your language preference, and enable secure access to your account. Cannot be disabled without impairing platform functionality. |
| Analytics | Used to collect aggregated data on how Players navigate the Platform, which pages are visited, and how long sessions last. This data helps ma77 identify performance issues and improve the user experience. |
| Functional | Enable personalization features such as remembering your preferred game lobby section, display settings, or most recently played games. |
| Security | Used to detect and prevent fraudulent login attempts, bot activity, and other suspicious behavior on the Platform. |
You may control cookie settings through your browser's privacy settings. Disabling non-essential cookies will not prevent you from using the Platform, but certain personalization features may be unavailable. Disabling essential session cookies will prevent you from logging in to your ma77 account.
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data processed by ma77. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Subject Rights Request."
The right to know what personal data ma77 collects, why, and how it is processed — as set out in this Policy.
The right to request a copy of the personal data ma77 holds about you and information about how it is being used.
The right to request correction of inaccurate or incomplete personal data held in your ma77 account or KYC records.
The right to request deletion of personal data that is no longer necessary for the purpose for which it was collected, subject to retention obligations under Philippine law.
The right to object to the processing of your personal data where ma77 relies on legitimate interest, including the right to opt out of direct marketing communications.
The right to receive a copy of your personal data in a structured, commonly used format for transfer to another controller, where technically feasible.
The right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, or unlawfully obtained personal data, as provided under Section 16(f) of the DPA.
If you believe ma77 has violated your privacy rights, you may file a complaint with the National Privacy Commission (NPC) of the Philippines.
ma77 will respond to verified data subject rights requests within fifteen (15) business days of receipt. Complex requests may require up to thirty (30) days. ma77 reserves the right to decline requests that cannot be fulfilled without compromising the rights of third parties or that conflict with legal retention obligations.
If you are a parent or guardian and believe that a person under 21 in your care has registered an account on ma77 without authorization, please contact ma77 support immediately at [email protected]. We will act promptly to close the account and delete the associated personal data to the extent legally permissible.
ma77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable Philippine privacy law, NPC regulatory guidance, platform functionality, or data processing practices. Material changes will be communicated to registered Players via email or in-account notification prior to taking effect.
The current version of this Policy, including the effective date displayed at the top of this page, supersedes all previous versions. Your continued use of the ma77 Platform after the effective date of an amendment constitutes your acceptance of the revised Policy. We encourage you to review this page periodically.
ma77 has designated a Data Protection Officer (DPO) as required under Section 21 of the Data Privacy Act. The DPO is responsible for overseeing compliance with this Policy and the DPA, and serves as the primary point of contact for data subject rights requests and privacy-related inquiries.
For all privacy matters, data subject rights requests, or questions about this Policy, please contact:
You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.
Six ways the ma77 Privacy Policy translates into real, practical data protection for Filipino players.
Every byte of data transmitted between your device and the ma77 platform is protected by the same 256-bit TLS encryption standard used by Philippine banks like BPI and BDO. Your login credentials, financial data, and personal information are never sent over the network in plaintext.
ma77's data practices are designed to comply with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines. A designated Data Protection Officer (DPO) oversees adherence to the law, and players retain the full suite of data subject rights provided under the DPA.
ma77 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Data is shared only with service providers bound by processing agreements, and regulatory bodies where Philippine law requires — nothing else.
Your rights under the DPA — access, rectification, erasure, portability, and objection — are real rights you can exercise. Submit a request to [email protected] and ma77 commits to a response within 15 business days. Not a boilerplate promise.
ma77 does not knowingly collect data from persons under 21. KYC age verification is mandatory before any withdrawal is processed. Accounts identified as belonging to underage individuals are suspended immediately and reported where required by PAGCOR regulations.
Promotional emails, SMS notifications, and in-app marketing from ma77 are opt-in only. You can withdraw your marketing consent at any time through your account settings or by contacting support — and ma77 will stop sending marketing communications promptly.
ma77 was built for Filipino players who deserve a secure, transparent, and legally compliant gaming experience. Your data is protected, your rights are respected, and your winnings get to you fast.
200+ live dealer tables with real cards, real dealers, and real-time streaming. Baccarat, blackjack, Dragon Tiger.
Certified RNG slots with published RTP. Progressive jackpots, Megaways, and classic reels from ₱10/spin.
Withdraw your winnings via GCash or Maya in minutes. Your money, in your wallet, fast.
Philippine Data Privacy Act compliant. Your data is handled with the same care as your funds.
Your personal data is processed in accordance with the Data Privacy Act of 2012 (RA 10173) of the Philippines. For data subject rights requests or privacy concerns, contact [email protected]. You may also file a complaint with the National Privacy Commission (NPC) of the Philippines.