xz77 is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights under Philippine law.
Last updated: June 2026 · Effective upon account registration or first use of xz77.one
These highlights summarise our core data practices. They complement — and do not replace — the full Privacy Policy below.
xz77 complies with the Philippines' Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations (IRR). Your personal data is processed only on lawful grounds, for specified purposes, and with appropriate safeguards. We are registered with the National Privacy Commission (NPC) as a personal information controller.
xz77 does not sell, rent, or trade your personal information to third parties for their marketing purposes. Data is shared only with service providers who support xz77's operations (payment processors, KYC verification services, game providers) under strict data processing agreements, and with regulators as required by law.
Personal and financial data transmitted to and from xz77 is encrypted using TLS. Sensitive data at rest is stored using industry-standard encryption. Access controls, audit logs, and regular security assessments are part of xz77's data protection programme. Payment card details are not stored on xz77's systems — they are processed directly by certified payment processors.
Under RA 10173, you have the right to access, correct, and request deletion of your personal data held by xz77. You also have the right to data portability and the right to object to specific processing activities. xz77 provides a clear process for exercising these rights — see Section 9 of this Policy for details.
xz77 retains personal data only as long as necessary for the purposes for which it was collected, or as required by law. Account data is retained for a minimum of 5 years after account closure to comply with PAGCOR and AMLA requirements. Marketing preferences and session data are retained for shorter periods.
xz77's primary data processing infrastructure is focused on Philippine-compliant operations. Where data is processed or stored outside the Philippines (e.g., by a game provider or cloud infrastructure provider), xz77 ensures that adequate safeguards are in place consistent with RA 10173's cross-border transfer requirements.
Scope: This Privacy Policy applies to all personal data collected by xz77 through the xz77.one website, its mobile-optimised interfaces, and any related services. By using xz77, you acknowledge that you have read and understood this Policy. If you do not agree with how xz77 processes personal data, you should not use the Platform.
xz77 ("xz77", "we", "us") is an online casino platform operating at xz77.one, serving the Philippines market under the regulatory framework of the Philippine Amusement and Gaming Corporation (PAGCOR). For the purposes of the Data Privacy Act of 2012 (Republic Act 10173), xz77 is the Personal Information Controller in respect of the personal data of its registered Players and website visitors.
xz77's designated Data Protection Officer (DPO) can be reached via the contact details in Section 13 of this Policy. The DPO is responsible for overseeing xz77's compliance with RA 10173 and handling data subject rights requests and complaints.
xz77 collects the following categories of personal data:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number | Account registration, KYC / age verification |
| Contact Data | Email address, Philippine mobile number, residential address | Account communication, OTP delivery, support |
| Financial Data | GCash number, bank account name and number (for withdrawals), transaction history | Payment processing, withdrawal verification, AMLA compliance |
| Account Data | Username, account balance, gaming history, bonus history, VIP tier | Service provision, responsible gaming monitoring |
| Technical Data | IP address, device type, browser, operating system, session logs | Security, fraud detection, platform optimisation |
| Communications Data | Live chat transcripts, support emails, feedback submissions | Support, compliance, quality assurance |
xz77 does not knowingly collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where sensitive data (e.g., government ID document images) is collected during KYC, it is handled under heightened security controls.
xz77 collects personal data through the following means:
xz77 processes your personal data under the following lawful bases as recognised under RA 10173:
xz77 uses your personal data for the following purposes:
xz77 does not sell your personal data. We share personal data only in the following circumstances:
All third-party service providers who process personal data on xz77's behalf are bound by data processing agreements that require them to process data only on xz77's instructions and maintain appropriate security standards consistent with RA 10173.
xz77.one uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies used include:
You may configure your browser to block or delete cookies. Note that disabling strictly necessary cookies will impair your ability to log in and use xz77. xz77 does not use third-party advertising cookies or tracking pixels.
xz77 retains personal data for the following minimum periods, or longer if required by law:
Upon expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual.
Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by xz77:
To exercise any of these rights, contact xz77's Data Protection Officer as described in Section 13. xz77 will respond to valid data subject rights requests within 15 business days of receipt. Identity verification will be required before fulfilling access or portability requests.
xz77 is strictly prohibited for persons under 21 years of age. xz77 does not knowingly collect personal data from anyone under 21. If we become aware that personal data has been collected from a person who is underage, the account will be immediately suspended, the data will be deleted (subject to any legal hold requirements), and any deposited funds will be returned to the deposit source following identity verification.
If you are a parent or guardian and believe your child has registered an account on xz77, please contact xz77 support immediately so that the account can be closed.
In the event of a personal data breach that is likely to result in significant harm to affected data subjects, xz77 will comply with the notification obligations under RA 10173 and its IRR. This includes notifying the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and notifying affected data subjects as soon as practicable if the breach involves sensitive personal information or is likely to result in harm.
xz77 maintains an incident response plan and conducts regular security assessments to minimise the risk of data breaches. All xz77 staff with access to personal data receive regular data protection training.
xz77 may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. Material changes will be communicated to registered Players via email or on-platform notification at least 7 days before the revised Policy takes effect. The "Last updated" date at the top of this page will always reflect the current version. Continued use of xz77 after the effective date of any changes constitutes acceptance of the updated Policy.
For questions, concerns, or requests relating to this Privacy Policy or the exercise of your data subject rights, please contact xz77's Data Protection Officer:
Please provide your full name, registered email address, and a clear description of your request. xz77 will acknowledge receipt within 2 business days and provide a substantive response within 15 business days. For complaints that cannot be resolved directly with xz77, you may escalate to the National Privacy Commission of the Philippines.
Your data is protected under Philippine law. xz77 — PAGCOR-regulated, GCash-ready, 500+ games. For players 21 and above.
Join xz77 Casino