This Privacy Policy explains how sx77 ("the Company," "we," "us") collects, processes, stores, and protects your personal data in accordance with Republic Act No. 10173, the Data Privacy Act of 2012, and the guidelines of the National Privacy Commission of the Philippines.
We know privacy policies can be heavy reading. Here's the short version: sx77 collects your personal data to run your account, process payments, comply with Philippine gaming and anti-money-laundering law, and keep the platform secure. We do not sell your personal data to third parties for their independent marketing purposes. You have rights over your data under Philippine law, and there's a designated person you can contact when you have questions.
The full policy below is the legally operative document. The summary above is provided for convenience only.
This Privacy Policy ("Policy") is issued by sx77, the operator of the online gaming platform accessible at sx77.one and all associated subdomains and mobile-optimized versions of the same platform (collectively, the "Platform"). This Policy applies to all visitors, registered users, and any other persons whose personal data is processed by sx77 in connection with the Platform.
sx77 is committed to safeguarding the privacy and security of your personal data. This Policy describes in transparent terms what personal data we collect, why we collect it, how we use it, with whom we share it, how long we retain it, and what rights you have as a data subject under Philippine law.
This Policy is implemented in compliance with:
By registering an account or using the sx77 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, please discontinue use of the Platform and contact our Data Protection Officer to request account closure.
2.1 Identity of the Data Controller. For purposes of the Data Privacy Act of 2012, the data controller responsible for your personal data processed through the sx77 Platform is the operator of sx77.one. The data controller determines the purposes and means of processing your personal data.
2.2 Data Protection Officer. In accordance with Section 21 of the DPA and its Implementing Rules, sx77 has designated a Data Protection Officer ("DPO") responsible for ensuring compliance with this Policy and with applicable data protection law. The DPO serves as the primary point of contact for all data privacy-related queries, complaints, and rights requests from data subjects.
The sx77 DPO can be reached through the following contact:
2.3 NPC Registration. sx77's data processing activities are registered with the National Privacy Commission of the Philippines as required under the DPA and NPC Circular No. 16-01.
The categories of personal data that sx77 collects and processes are set out in the table below. We collect only the data that is necessary for the specific purposes described in Section 5 of this Policy.
| Category | Specific Data Points | Required / Optional |
|---|---|---|
| Identity Data | Full legal name, date of birth, government-issued ID type and number (PhilSys, UMID, Driver's License, Passport), selfie photographs for KYC | Required |
| Contact Data | Email address, Philippine mobile number, residential address | Required |
| Financial Data | GCash account number, Maya wallet ID, bank account details (BPI/BDO), USDT wallet address, transaction history, deposit and withdrawal records | Required for transactions |
| Gaming Activity Data | Game history, bet amounts and outcomes, session durations, sports bet selections, bonus usage, responsible gaming tool activations | Automatically collected |
| Technical Data | IP address, device type and identifiers, operating system, browser type and version, cookie identifiers, referring URL, pages visited, session timestamps | Automatically collected |
| Communications Data | Customer support chat transcripts, email correspondence, complaint records | When you contact us |
| Preference Data | Language settings, notification preferences, marketing consent records, favorite games | Optional |
sx77 does not collect special categories of sensitive personal data (e.g., health information, racial or ethnic origin, religious beliefs, or political opinions) except where voluntarily disclosed by you in the context of a responsible gaming or self-exclusion request, in which case such data is processed with heightened safeguards and used solely for the welfare-related purpose for which it was provided.
sx77 collects personal data through the following channels and methods:
4.1 Direct Collection. Information you provide directly to sx77 when you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact customer support, respond to surveys, or participate in promotions.
4.2 Automated Collection. Technical data collected automatically when you access the Platform, including through cookies, log files, pixel tags, and similar tracking technologies described in Section 7 of this Policy. This data is collected from every visitor to the Platform, whether registered or not.
4.3 Third-Party Sources. In limited circumstances, sx77 may receive personal data about you from third-party sources, including:
4.4 Game Providers. When you play games hosted by third-party game providers on the sx77 Platform, those providers may share game session data (bet amounts, outcomes, session identifiers) with sx77 for account management, dispute resolution, and regulatory reporting purposes.
sx77 processes your personal data for the following specific, legitimate, and declared purposes:
sx77 does not process your personal data for any purpose incompatible with those listed above without first obtaining your explicit consent or establishing a separate lawful basis for such processing.
In accordance with Section 12 of the Data Privacy Act of 2012, sx77 relies on the following lawful bases for the processing of your personal data:
For each processing activity, the applicable legal basis is identifiable from the purpose described in Section 5. Where processing is based on consent, we maintain records of when and how consent was obtained.
7.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit. They serve various functions, from keeping you logged in to helping us understand how players use the Platform.
7.2 Types of Cookies Used by sx77.
| Cookie Type | Purpose | Consent Required? |
|---|---|---|
| Strictly Necessary | Session management, authentication tokens, security (CSRF protection), load balancing | No — essential to Platform function |
| Functional | Remembering language preferences, device type, responsible gaming settings | No — support core functionality |
| Analytics | Aggregated data on page visits, game popularity, error rates — used to improve the Platform | Yes — consent-based |
| Marketing | Tracking referral sources to manage affiliate partnerships and promotion attribution | Yes — consent-based |
7.3 Managing Cookies. You can control non-essential cookies through your browser settings. Note that disabling cookies may affect the functionality of the sx77 Platform, including your ability to stay logged in. Instructions for managing cookies are available in your browser's help documentation. Most modern browsers on Android and iOS also allow cookie management through the browser settings menu.
sx77 does not sell, rent, or trade your personal data to any third party for their independent commercial purposes. We share your personal data only in the following circumstances and only to the extent necessary for the stated purpose:
8.1 Service Providers (Data Processors). Third-party vendors who provide services to sx77 under written data processing agreements that prohibit independent use of your data:
8.2 Game Providers. When you access games on the Platform, your account identifier, session data, and wager amounts are shared with the relevant third-party game provider to facilitate gameplay and resolve any disputes. Game providers are contractually prohibited from using this data for any purpose other than providing the game service.
8.3 Regulatory Authorities. sx77 is legally required to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government authorities in the following circumstances: compliance with a lawful directive or subpoena, filing of suspicious transaction reports under AMLA, or responding to a formal regulatory inquiry.
8.4 Business Transfers. In the event of a merger, acquisition, sale of assets, or restructuring affecting sx77, your personal data may be transferred to the successor entity as part of the transaction, subject to equivalent data protection obligations being assumed by the recipient.
8.5 Your Consent. In any other circumstance not described above, sx77 will seek your explicit consent before sharing your personal data with a third party.
Some of sx77's service providers and game providers are based outside the Philippines. When your personal data is transferred to recipients in other countries, sx77 ensures that adequate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012.
Such safeguards include:
You may request details of the specific safeguards applied to any international transfer of your personal data by contacting the sx77 DPO at the address provided in Section 15 of this Policy.
sx77 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention schedule applies:
| Data Category | Retention Period | Primary Basis |
|---|---|---|
| Account & Identity (KYC) Data | Duration of active account + 5 years post-closure | AMLA compliance, PAGCOR requirements |
| Financial Transaction Records | 10 years from the date of transaction | Republic Act No. 9160 (AMLA), as amended |
| Gaming Activity & Bet Records | 5 years from the date of the relevant activity | PAGCOR record-keeping obligations |
| Customer Support Communications | 3 years from the date of last interaction | Legitimate interests (dispute resolution) |
| Marketing Consent Records | Until consent is withdrawn, then 3 years | DPA compliance (evidence of consent) |
| Technical & Log Data | 12 months from collection | Security and fraud prevention |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC-approved data disposal standards. Anonymized aggregate data (which no longer relates to an identifiable individual) may be retained indefinitely for statistical and analytical purposes.
sx77 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures are reviewed and updated regularly in response to evolving security threats and technological developments.
Technical Measures include:
Organizational Measures include:
While sx77 maintains robust security practices, no system is entirely immune from security threats. You are responsible for maintaining the confidentiality of your account credentials and for notifying sx77 immediately if you suspect unauthorized access to your account.
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by sx77. These rights are exercisable by submitting a written request to the sx77 Data Protection Officer (see Section 15):
You have the right to obtain confirmation of whether sx77 holds personal data about you, and to receive a copy of that data together with information about how it is used.
You have the right to request rectification of inaccurate or incomplete personal data held about you, including updating your registered contact details or correcting a name spelling.
You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected and no legal retention obligation applies.
You have the right to object to the processing of your personal data where that processing is based on sx77's legitimate interests, or to withdraw consent where processing is consent-based.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have that data transmitted to another controller where technically feasible.
If you believe sx77 has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission of the Philippines through the NPC's formal complaints procedure.
sx77 will respond to data subject rights requests within fifteen (15) business days of receipt of a verifiable request. In complex cases, this period may be extended by a further fifteen (15) business days, of which you will be notified. Requests may be subject to identity verification to prevent unauthorized disclosure of personal data to third parties.
The sx77 Platform is strictly prohibited for use by persons under the age of twenty-one (21) years, as mandated by PAGCOR regulations governing online gaming in the Philippines. sx77 does not knowingly collect personal data from persons under 21 years of age.
If sx77 discovers that personal data has been collected from a person who has not met the minimum age requirement, the following actions will be taken immediately:
If you are a parent or guardian and believe that your child has provided personal data to sx77 without your consent, please contact our Data Protection Officer immediately at the contact details provided in Section 15.
sx77 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable Philippine law or NPC guidance, changes in our business operations, or in response to feedback from regulators or players.
When material changes are made to this Policy, sx77 will notify registered users by email to their registered address and by a prominent notice on the Platform. The updated Policy will display a revised effective date at the top of the document.
Your continued use of the sx77 Platform following notification of a material change constitutes your acknowledgment of the revised Policy. Where the change requires a fresh lawful basis (e.g., a new purpose requiring consent), we will seek your consent separately before processing your data under the new purpose.
We recommend bookmarking this page at sx77.one/privacy-policy and reviewing it periodically. The Policy currently in force at any given time is the version published at that URL at that date.
For any question, concern, or formal request relating to this Privacy Policy or to sx77's processing of your personal data, please contact our Data Protection Officer using the following information:
If you are dissatisfied with sx77's response to your data privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines. The NPC's contact information and complaints procedure are available on the NPC's official government website.
This Privacy Policy was last reviewed and updated on 1 January 2026. This document supersedes all prior privacy statements published by sx77.
A summary of the concrete steps sx77 takes to keep your personal data safe and your rights protected as a Filipino player.
All sx77 data processing activities comply with Republic Act 10173 (DPA 2012) and NPC guidelines. Our DPO is registered with the NPC and data processing systems are documented in a compliance register maintained for NPC inspection.
Every interaction between your device and sx77 — login, deposit, game play, withdrawal — is protected by SSL/TLS encryption. Your GCash details, account credentials, and KYC documents are never transmitted in plaintext.
sx77 makes it straightforward to exercise your DPA rights — access, correction, erasure, portability, and objection — through a direct DPO email contact. All rights requests receive substantive responses within 15 business days.
sx77 does not sell your personal data to third parties for their own commercial purposes. Data sharing is limited to service providers, game studios, payment processors, and regulators — all under strict contractual data protection obligations.
sx77 maintains a documented data retention schedule aligned with AMLA's 10-year financial record requirements and PAGCOR's 5-year gaming record standards. Data is deleted or anonymized when its retention period expires.
In the event of a personal data breach posing risk to your rights, sx77 follows a documented incident response procedure targeting NPC notification within 72 hours and individual notification to affected users as required under the DPA.
sx77 is built on the foundation of trust — transparent data practices under Philippine law, GCash-native banking, 500+ fair games, and a PAGCOR-compliant platform designed specifically for Filipino players. Register free today.
Must be 21 or older · PAGCOR-compliant · RA 10173 data privacy protected