tz77 Privacy Policy

1. Who We Are

tz77 is the operator of the online gaming platform accessible at tz77.asia (the "Platform"). For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173) and this Policy, tz77 is the Personal Information Controller — the entity that determines the purposes and means of processing your personal data.

tz77 operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR). Our designated Data Protection Officer (DPO) can be reached at the contact details provided in Section 14 of this Policy.

2. Data We Collect

tz77 collects the following categories of personal data from its users:

tz77 does not collect full payment card numbers, CVV codes, or online banking passwords. Financial data is limited to the identifiers needed to process GCash, PayMaya, and bank transfers.

3. How We Collect Your Data

tz77 collects personal data through the following means:

• Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey.
• Automated collection: Through cookies, web beacons, and server logs when you browse or interact with the tz77 platform. See Section 7 for details on cookies.
• Third-party sources: From payment processors (GCash, PayMaya, BPI, BDO, Metrobank) to confirm transaction status; from identity verification services during KYC; and from fraud prevention providers to assess account risk.
• Game providers: Certified third-party game studios provide tz77 with game session logs, RNG records, and technical error reports associated with your account activity.

4. Legal Basis for Processing

tz77 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to create and maintain your account, process transactions, and provide gaming services under our Terms and Conditions.
• Legal obligation: Processing required to comply with PAGCOR regulations, Philippine AML laws (RA 9160 as amended), and tax reporting obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where these interests do not override your privacy rights.
• Consent: Processing for optional marketing communications, where you have provided explicit opt-in consent. You may withdraw this consent at any time via Account Settings.

5. How We Use Your Data

tz77 uses the personal data it collects for the following purposes:

• Creating and managing your tz77 account, including identity and age verification (21+ compliance).
• Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank.
• Delivering gaming services, including slot games, live casino, bingo, Tongits Go, Mines Grand, and other titles available on the platform.
• Awarding bonuses, processing promotional claims, and managing wagering requirement compliance.
• Detecting, investigating, and preventing fraud, money laundering, collusion, and other prohibited conduct.
• Monitoring gaming behavior for responsible gaming purposes — including detecting patterns that may indicate problem gambling — and enforcing self-exclusion or deposit limit requests.
• Complying with PAGCOR reporting requirements, AML obligations, and responses to lawful requests from Philippine government authorities.
• Providing customer support and resolving complaints.
• Sending account-related notifications (transaction confirmations, security alerts, policy updates).
• Sending promotional and marketing communications, where you have opted in to receive them.
• Analyzing aggregate usage data to improve platform performance, game selection, and user experience.

6. Data Sharing & Disclosure

tz77 does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly for the purposes outlined in this Policy:

• Payment processors: GCash (Mynt), PayMaya (Voyager Innovations), BPI, BDO, and Metrobank — to process deposits and withdrawals.
• Game providers: Certified third-party studios whose games are available on the tz77 platform — limited to session data necessary for game operation.
• Identity verification providers: Third-party KYC service providers who assist in verifying government-issued Philippine IDs and facial matching during account verification.
• Fraud and AML screening services: Service providers who assist tz77 in detecting unusual transaction patterns and screening against watchlists.
• Regulatory authorities: PAGCOR and other competent Philippine government bodies, when required by law or pursuant to a valid legal order.
• Professional advisors: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third-party service providers engaged by tz77 are bound by data processing agreements requiring them to handle your personal data in accordance with the Philippine Data Privacy Act and tz77's security standards.

7. Cookies & Tracking Technologies

The tz77 platform uses cookies and similar tracking technologies for the following purposes:

• Essential cookies: Required for basic platform functionality — login session management, security tokens, and load balancing. Cannot be disabled without affecting platform operation.
• Functional cookies: Store your preferences such as language settings, game lobby view, and notification preferences.
• Analytics cookies: Collect anonymized data on how users navigate the platform to help tz77 identify and fix usability issues and optimize the game lobby layout.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and account takeover attempts.

tz77 does not use third-party advertising cookies or share browsing data with ad networks. You may manage cookie preferences through your browser settings, noting that disabling essential cookies will impair platform functionality.

8. Data Retention

8.1 tz77 retains personal data for as long as your account remains active and for a minimum period following account closure as required by applicable law and regulatory obligations:

• Account and identity data: Retained for a minimum of five (5) years after account closure, in compliance with PAGCOR record-keeping requirements and Philippine AML regulations.
• Financial transaction records: Retained for a minimum of five (5) years, consistent with AML obligations under RA 9160 as amended.
• Gaming activity records: Retained for three (3) years after the last session, or five (5) years if any related dispute, bonus claim, or regulatory inquiry remains unresolved.
• Support and complaint records: Retained for three (3) years from the date of resolution.
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year thereafter as evidence of consent management.

8.2 Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized.

9. Security Measures

tz77 implements the following technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and tz77 servers.
• Password hashing using industry-standard bcrypt algorithms — tz77 never stores passwords in plain text.
• Two-factor authentication (2FA) available to all registered users for login sessions.
• Access controls limiting tz77 employee access to personal data on a strict need-to-know basis.
• Regular independent security audits and penetration testing of the tz77 platform infrastructure.
• Automated monitoring for anomalous login patterns, unusual transaction volumes, and potential account compromises.
• Physical and network security controls at data center facilities hosting tz77 servers.

While tz77 employs robust security measures, no internet-based platform can guarantee absolute security. In the event of a personal data breach that poses a real risk of serious harm, tz77 will notify affected users and the National Privacy Commission (NPC) within seventy-two (72) hours of discovery, as required under NPC rules.

10. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by tz77:

• Right to be Informed: The right to know that tz77 is processing your personal data and the purpose for which it is being processed — as fulfilled by this Privacy Policy.
• Right of Access: The right to obtain a copy of the personal data tz77 holds about you, and information about how it is being processed.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected. Most account data (email, mobile number, address) can be updated directly via Account Settings.
• Right to Erasure / Right to be Forgotten: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to tz77's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe tz77 has not handled your personal data in accordance with the Data Privacy Act.

To exercise any of the above rights, contact tz77's Data Protection Officer at the details in Section 14. tz77 will respond to rights requests within thirty (30) calendar days of receipt.

11. Children's Privacy

The tz77 platform is strictly for individuals aged 21 years and above, consistent with PAGCOR's minimum gambling age requirement. tz77 does not knowingly collect personal data from individuals under 21 years of age.

If tz77 discovers that an account belongs to a person under 21, the account will be immediately closed and all personal data associated with the underage account will be deleted (subject to any mandatory reporting obligations triggered by the discovery). If you believe a person under 21 has registered on the platform, please contact tz77 support immediately.

12. Cross-Border Data Transfers

Some of tz77's third-party service providers — including game studios and technical infrastructure providers — may process personal data outside of the Philippines. Where such transfers occur, tz77 ensures that:

• The recipient country or organization provides an adequate level of data protection as determined by the National Privacy Commission; or
• Appropriate safeguards are in place via contractual arrangements, such as standard data protection clauses, that require the recipient to protect your personal data to a standard equivalent to Philippine law.

tz77 does not transfer personal data to jurisdictions subject to international sanctions or known to have materially deficient data protection frameworks without implementing additional protective measures.

13. Changes to This Privacy Policy

tz77 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or platform practices. Material changes will be communicated to registered users via email to the address on file and/or via a prominent notice on the tz77 platform, at least seven (7) days before the updated Policy takes effect.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. Your continued use of the tz77 platform after the effective date of any revision constitutes your acceptance of the updated Policy.

14. Contact & Complaints

For privacy-related inquiries, to exercise your data subject rights, or to submit a complaint regarding tz77's handling of your personal data, please contact our Data Protection Officer:

Email: [email protected]

Subject line: Privacy Request – [Your Account Username]

tz77 will acknowledge your request within 5 business days and respond fully within 30 calendar days. If you are not satisfied with tz77's response, you may escalate your complaint to the National Privacy Commission of the Philippines (privacy.gov.ph).