Privacy Policy — pnas77 Data Protection

Last Updated: October 8, 2026

1. Introduction and Scope

This Privacy Policy describes how pnas77 ("we," "us," "our," or the "Company"), a PAGCOR-licensed online gaming platform operating at https://pnas77.cam (the "Website"), collects, uses, processes, discloses, and protects the personal information of users ("you," "your," or "Player") who access and use our Services.

By creating an account with pnas77, accessing the Website, or using our Services, you acknowledge that you have read, understood, and consent to the collection and processing of your personal data as described in this Privacy Policy. If you do not agree with our data practices, please do not use our Services.

This Privacy Policy complies with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and relevant issuances of the National Privacy Commission of the Philippines. It also adheres to PAGCOR regulations regarding player data protection and responsible gaming operator requirements.

2. Data Controller and Contact Information

pnas77 is the data controller responsible for the collection and processing of your personal data. For questions, concerns, or requests regarding your personal information or this Privacy Policy, you may contact our Data Protection Officer:

• Company Name: pnas77 Gaming Corporation
• Address: Registered with PAGCOR, Philippines
• Data Protection Officer Email: privacy [at] pnas77 [dot] cam
• Customer Support: Available 24/7 via live chat on the Website

We aim to respond to all privacy-related inquiries within seven (7) business days. For urgent matters, please contact our 24/7 customer support team.

3. Information We Collect

pnas77 collects various types of personal information necessary to provide gaming services, ensure account security, prevent fraud, and comply with legal and regulatory obligations. The categories of data we collect include:

3.1 Information You Provide Directly

When you register for an account or use our Services, you voluntarily provide:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued ID numbers (passport, driver's license, UMID, SSS number)
• Contact Information: Email address, mobile phone number, residential address, postal code
• Account Credentials: Username, password (stored in encrypted form), security questions and answers
• Financial Information: Payment method details (bank account numbers, e-wallet IDs for GCash/Maya, cryptocurrency wallet addresses), transaction history, deposit and withdrawal records
• Verification Documents: Copies of government-issued IDs, proof of address documents (utility bills, bank statements), selfie photos for identity verification
• Communication Content: Messages sent through customer support chat, emails, feedback forms, and survey responses

3.2 Information Collected Automatically

When you access and use the Website, we automatically collect:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address)
• Connection Information: IP address, internet service provider, geolocation data (country, city, region)
• Usage Data: Pages visited, time and date of visits, session duration, games played, betting patterns, click-through rates, referral sources
• Technical Data: Cookies, web beacons, pixel tags, local storage data, crash logs, error reports

3.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment Processors: Transaction verification data from GCash, Maya, banks, and cryptocurrency payment providers
• Identity Verification Services: Age and identity verification results from third-party KYC (Know Your Customer) providers
• Game Providers: Gameplay data, wagering activity, and game outcomes from third-party software providers (Evolution Gaming, Pragmatic Play, etc.)
• Fraud Prevention Services: Risk assessment data, fraud scores, and blacklist checks from anti-fraud service providers
• Regulatory Authorities: Verification requests and compliance information from PAGCOR and other regulatory bodies

4. How We Use Your Personal Data

pnas77 processes your personal information for the following purposes, based on legal grounds established by the Data Privacy Act and PAGCOR regulations:

4.1 Account Management and Service Provision

• Create, maintain, and manage your player account
• Authenticate your identity and verify age (21+ requirement)
• Process deposits, withdrawals, and gaming transactions
• Provide access to games, bonuses, and promotions
• Track gameplay, wagering requirements, and account balances
• Communi cate with you via email, SMS, and in-app notifications
• Respond to customer support inquiries and resolve disputes

4.2 Legal and Regulatory Compliance

• Comply with PAGCOR licensing requirements and gaming regulations
• Fulfill Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) obligations under Philippine law
• Conduct Know Your Customer (KYC) verification and due diligence
• Report suspicious transactions to the Anti-Money Laundering Council (AMLC)
• Maintain required transaction records and audit trails
• Respond to lawful requests from government authorities, law enforcement, and courts
• Enforce our Terms and Conditions and prevent terms violations

4.3 Security, Fraud Prevention, and Risk Management

• Detect and prevent fraudulent activity, money laundering, and account abuse
• Identify multiple accounts, collusion, bonus abuse, and unfair gameplay
• Monitor for unusual betting patterns and suspicious transactions
• Protect against hacking, unauthorized access, and cyber attacks
• Verify payment method ownership and prevent chargebacks
• Conduct security audits and vulnerability assessments

4.4 Responsible Gaming and Player Protection

• Monitor player behavior for signs of problem gambling
• Enforce deposit limits, betting limits, and self-exclusion settings
• Provide access to responsible gaming tools and resources
• Prevent underage gambling through age verification measures
• Support self-exclusion programs and cooling-off periods

4.5 Marketing and Communications (With Your Consent)

• Send promotional emails about bonuses, tournaments, and new games
• Deliver personalized offers based on your gaming preferences
• Send SMS notifications about account activity and promotions
• Display targeted advertisements and marketing content
• Conduct customer satisfaction surveys and feedback requests

You may opt out of marketing communications at any time through your account settings or by contacting customer support. Opting out does not affect transactional communications (deposit confirmations, withdrawal updates, security alerts) which are necessary for service operation.

4.6 Analytics and Service Improvement

• Analyze website usage patterns and user behavior
• Optimize website performance, speed, and user experience
• Develop new features, games, and services
• Conduct A/B testing and product experiments
• Generate aggregated statistics and business intelligence reports

5. Data Sharing and Disclosure

pnas77 does not sell your personal information to third parties. However, we may share your data with the following categories of recipients for the purposes described below:

5.1 Service Providers and Business Partners

• Payment Processors: GCash, Maya, banks, and cryptocurrency payment gateways to process deposits and withdrawals
• Game Providers: Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, and other software providers to deliver gaming content
• KYC Verification Services: Third-party identity verification providers to confirm age and identity
• Fraud Prevention Services: Anti-fraud and risk management platforms to detect suspicious activity
• Cloud Hosting Providers: Secure server hosting and data storage services
• Customer Support Tools: Live chat platforms and helpdesk software providers
• Email and SMS Services: Communication platforms for sending transactional and marketing messages
• Analytics Providers: Google Analytics and similar services for website usage analysis

All service providers are contractually bound to protect your data and may only use it for the specific purposes we authorize. They are required to maintain appropriate security measures and comply with applicable data protection laws.

5.2 Regulatory and Government Authorities

We may disclose your information to:

• PAGCOR for licensing compliance and regulatory audits
• Anti-Money Laundering Council (AMLC) for suspicious transaction reports
• Philippine National Police (PNP) and National Bureau of Investigation (NBI) in response to lawful requests
• Courts, tribunals, and dispute resolution bodies in legal proceedings
• National Privacy Commission in response to data breach notifications or investigations

5.3 Legal Obligations and Rights Protection

We may disclose your information when required to:

• Comply with valid legal process (subpoena, court order, warrant)
• Enforce our Terms and Conditions, Privacy Policy, and user agreements
• Protect the rights, property, and safety of pnas77, our users, and the public
• Investigate and prevent fraud, security breaches, and illegal activity
• Respond to emergency situations involving potential harm to individuals

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring or successor entity. You will be notified via email and website notice of any such change in ownership or control of your personal data.

6. Data Security Measures

pnas77 implements industry-leading technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security practices include:

6.1 Technical Security Controls

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols
• Data-at-Rest Encryption: Sensitive data stored in databases is encrypted using AES-256 encryption
• Password Security: User passwords are hashed using bcrypt with salt, never stored in plain text
• Firewall Protection: Multi-layer firewall systems protect against unauthorized network access
• Intrusion Detection: Real-time monitoring systems detect and respond to potential security threats
• DDoS Protection: Distributed Denial of Service attack mitigation and traffic filtering
• Vulnerability Scanning: Regular automated and manual security assessments
• Secure API Communication: Token-based authentication and encrypted API endpoints

6.2 Administrative Security Controls

• Access Controls: Strict role-based access control (RBAC) limiting employee access to personal data on a need-to-know basis
• Employee Training: Mandatory data protection and security awareness training for all staff
• Confidentiality Agreements: All employees and contractors sign non-disclosure agreements
• Background Checks: Security clearance and background verification for employees with data access
• Incident Response Plan: Documented procedures for detecting, responding to, and recovering from data breaches
• Audit Logs: Comprehensive logging of all access to personal data with regular review

6.3 Physical Security Controls

• Data centers with 24/7 surveillance, biometric access controls, and security personnel
• Redundant power supplies, backup systems, and disaster recovery facilities
• Secure disposal procedures for hardware containing sensitive data

7. Data Retention and Deletion

pnas77 retains your personal information only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

7.1 Retention Periods

• Active Accounts: Personal data is retained for the duration of your active account plus regulatory retention period
• Closed Accounts: Data is retained for 5-7 years after account closure to comply with PAGCOR record-keeping requirements, AML obligations, and potential dispute resolution
• Transaction Records: Financial transaction data is retained for 7 years as required by anti-money laundering regulations
• KYC Documents: Identity verification documents are retained for 5 years after account closure
• Marketing Data: Opt-out and consent records are retained for 3 years to honor your preferences
• Dispute Records: Data related to complaints and disputes is retained until resolution plus 2 years
• Inactive Accounts: Accounts with no activity for 18 months may have certain non-essential data deleted

7.2 Secure Deletion

When personal data is no longer required, it is securely deleted using industry-standard data destruction methods. This includes overwriting data multiple times, degaussing magnetic media, and physically destroying storage devices where appropriate. Anonymized or aggregated data that cannot identify individuals may be retained indefinitely for statistical and analytical purposes.

8. Your Privacy Rights

Under the Philippine Data Privacy Act, you have the following rights regarding your personal information:

8.1 Right to Information

You have the right to be informed whether personal data pertaining to you is being processed, and to receive information about the nature and extent of such processing.

8.2 Right to Access

You may request access to your personal data and obtain a copy of the information we hold about you. You can access most of your data directly through your account settings. For a complete data export, contact our Data Protection Officer.

8.3 Right to Rectification

You have the right to correct inaccurate or incomplete personal data. You can update your contact information, address, and preferences directly in your account settings. For changes to identity documents or financial information, contact customer support with supporting documentation.

8.4 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if you withdraw consent. However, we may retain certain data where required by law (e.g., AML record-keeping requirements) or to establish, exercise, or defend legal claims.

8.5 Right to Object

You have the right to object to processing of your personal data for direct marketing purposes at any time. You can opt out of marketing communications through your account settings or by clicking "unsubscribe" in emails. You may also object to automated decision-making and profiling.

8.6 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (e.g., CSV, JSON) and to transmit that data to another service provider where technically feasible.

8.7 Right to File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with pnas77's Data Protection Officer. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines:

• National Privacy Commission
• 5th Floor, Philippine International Convention Center, Vicente Sotto Avenue, Pasay City, Metro Manila
• Email: [email protected]
• Hotline: (+632) 8234-2228

8.8 Exercising Your Rights

To exercise any of your privacy rights, please contact our Data Protection Officer at privacy [at] pnas77 [dot] cam or through our customer support live chat. We will respond to verified requests within fifteen (15) business days. We may request additional information to verify your identity before processing requests involving sensitive data or account closure.

9. Cookies and Tracking Technologies

pnas77 uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your browsing experience, analyze website usage, and deliver personalized content.

9.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality, user authentication, and security. These cannot be disabled without affecting site operation.
• Functional Cookies: Remember your preferences (language, currency) and settings to provide enhanced features.
• Analytics Cookies: Collect information about how visitors use the website (Google Analytics, Hotjar) to improve performance.
• Marketing Cookies: Track your browsing activity to display relevant advertisements and measure campaign effectiveness.
• Third-Party Cookies: Set by game providers, payment processors, and advertising networks embedded in our website.

9.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies, though this may impair website functionality. To opt out of Google Analytics tracking, install the Google Analytics Opt-out Browser Add-on. For mobile devices, you can reset your advertising identifier (IDFA on iOS, AAID on Android) in your device settings.

10. Children's Privacy and Age Restrictions

pnas77 services are intended exclusively for individuals aged 21 years or older, in compliance with Philippine gambling regulations. We do not knowingly collect personal information from minors under the age of 21.

If we become aware that we have inadvertently collected personal data from an individual under 21 years of age, we will take immediate steps to delete such information and close the account. Parents or guardians who believe their child has provided personal information to pnas77 should contact our Data Protection Officer immediately.

We employ age verification measures including document verification, database cross-checks, and behavioral analysis to prevent underage gambling. Any attempt by a minor to register or use the Services will result in permanent account closure and reporting to appropriate authorities where required.

11. International Data Transfers

pnas77 primarily operates within the Philippines and stores data on servers located in secure data centers within Philippine territory. However, some of our service providers (cloud hosting, game providers, payment processors) may be located in other countries including the United States, European Union, and Singapore.

When we transfer personal data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the National Privacy Commission
• Adequacy determinations by the NPC for countries with equivalent data protection laws
• Binding Corporate Rules for multinational service providers
• Explicit consent for transfers where required by law

By using pnas77 services, you consent to such international transfers where necessary to provide gaming services, process payments, and deliver customer support.

12. Changes to This Privacy Policy

pnas77 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When material changes are made, we will notify you through one or more of the following methods:

• Email notification sent to your registered email address at least 14 days before changes take effect
• Prominent notice on the Website homepage and login page
• In-app notification when you next access your account
• SMS notification for significant changes affecting your rights

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent changes were made. Your continued use of pnas77 services after the effective date of changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you must close your account before the effective date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. The most current version will always be available on our Website.