mm77 Privacy
Policy

mm77 is committed to protecting the privacy and personal data of every player who uses our platform. We understand that Filipino players place significant trust in us when they share personal and financial information, and we take that responsibility seriously.

This Privacy Policy applies to all personal data collected through: the mm77.vu website; the mm77 account registration and KYC verification process; all gaming, betting, and financial transactions conducted through mm77; communications between you and mm77's customer support team; and any other interaction you have with the mm77 platform or its staff.

This Policy does not apply to third-party websites, services, or applications that may be linked from mm77.vu or that interact with our platform as technology providers. Those third parties operate under their own privacy policies, which we encourage you to review independently.

mm77 collects personal data through several channels. The categories of data we collect are set out below:

2.1 Data You Provide Directly

2.2 Data Collected Automatically

When you access mm77.vu, we automatically collect certain technical and behavioural data, including:

• IP address and approximate geographic location (city/region level);
• Device type, operating system, and browser version;
• Session duration, pages visited, and navigation patterns within the platform;
• Game session data — games played, bet amounts, outcomes, and session timestamps;
• Login timestamps and device fingerprint data for security monitoring;
• Referral source (how you reached mm77.vu).

2.3 Data From Third Parties

mm77 may receive data about you from third-party sources including: payment processors (transaction verification data from GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank); identity verification service providers used in our KYC process; fraud prevention and AML screening services; and PAGCOR regulatory databases where applicable.

mm77 uses your personal data only for specific, lawful purposes. These purposes are:

• Account management: Creating, maintaining, verifying, and securing your mm77 account, including authentication and fraud prevention;
• Regulatory compliance: Fulfilling our obligations under PAGCOR licensing requirements, including age verification, identity verification, AML checks, and mandatory reporting to regulators;
• Payment processing: Processing deposits and withdrawals through your chosen payment method (GCash, PayMaya, bank transfer), reconciling transactions, and issuing receipts;
• Platform operation: Delivering the gaming and sports betting services you have requested, maintaining game records, calculating and settling winnings, and managing your account balance;
• Customer support: Responding to your inquiries, resolving disputes, processing complaints, and communicating important account information;
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling indicators and administering self-exclusion, deposit limits, and cooling-off requests in accordance with PAGCOR requirements;
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, money laundering, and violations of our Terms & Conditions;
• Marketing communications: Where you have consented, sending promotional offers, bonus notifications, and updates about mm77 services. You may opt out at any time;
• Platform improvement: Analysing aggregated, anonymised usage data to improve the mm77 platform, game selection, and user experience.

mm77 does not use your personal data for automated individual decision-making that produces legal or similarly significant effects without human review, except where such processing is required by PAGCOR regulation.

Under the Philippine Data Privacy Act of 2012 (RA 10173), mm77 processes your personal data on the following legal bases:

• Contractual necessity: Processing necessary to perform the services you have requested through your mm77 account — account management, game delivery, payment processing, and customer support;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, Philippine AML laws (Republic Act 9160 as amended), and other applicable Philippine statutes and regulations;
• Legitimate interests: Processing necessary for mm77's legitimate interests in fraud prevention, account security, and platform integrity — provided those interests are not overridden by your privacy rights;
• Consent: Marketing communications and any optional data processing for which we have obtained your explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5.1 Regulatory Authorities

mm77 is legally required to share certain data with PAGCOR and other Philippine regulatory and law enforcement authorities, including but not limited to: identity verification records, transaction reports, suspicious activity reports under AML obligations, and any other information required by valid legal process or regulatory directive.

5.2 Service Providers

mm77 engages third-party service providers who process data on our behalf under contractual data processing agreements that prohibit them from using your data for any purpose other than providing the specified service to mm77. These include:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank — for transaction processing only;
• KYC and identity verification providers — for age and identity verification required by PAGCOR;
• Fraud detection and AML screening services;
• IT infrastructure and cloud hosting providers operating the mm77 platform;
• Customer support software providers;
• Game providers (JILI, Evolution Gaming, SA Gaming) — who receive only the minimum session data required to operate games.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of mm77's business, your personal data may be transferred to the successor entity. You will be notified via your registered email address if such a transfer occurs and a new privacy policy becomes applicable.

5.4 Legal Process

mm77 may disclose your personal data where required by court order, subpoena, warrant, or other valid legal process issued by a Philippine court or competent authority. We will notify you of such requests where legally permitted to do so.

mm77 retains your personal data for as long as necessary to fulfil the purposes described in this Policy, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. The following retention periods apply:

After the applicable retention period expires, mm77 will securely delete or anonymise your personal data such that it can no longer be attributed to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for analytical purposes.

mm77 uses cookies and similar tracking technologies on mm77.vu. A cookie is a small text file placed on your device by the website. The following types of cookies are used:

You can manage cookie preferences through your browser settings. Note that disabling non-essential cookies may affect certain platform features but will not prevent you from accessing the core gaming and account management functions of mm77.

mm77 implements a comprehensive set of technical, organisational, and procedural security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your device and mm77.vu uses TLS 1.3 / 256-bit SSL encryption;
• Encryption at rest: Sensitive personal data, including KYC documents and payment details, is encrypted at rest using AES-256;
• Access controls: Access to personal data within mm77's systems is restricted on a strict need-to-know basis. Staff access is logged, audited, and subject to regular review;
• Two-factor authentication: Available to all players for account login, and required for certain administrative operations;
• Intrusion detection: mm77's infrastructure is protected by continuous intrusion detection and monitoring systems;
• Third-party audits: mm77's security controls are subject to periodic third-party security assessments as part of PAGCOR licensing compliance;
• Incident response: mm77 maintains a data breach response plan. In the event of a breach affecting your personal data, you will be notified within 72 hours where feasible and as required by RA 10173.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by mm77:

To exercise any of these rights, contact mm77's Data Protection Officer at [email protected] with the subject line "Privacy Rights Request." We will acknowledge your request within 5 business days and provide a substantive response within 30 days. Identity verification will be required before processing any data access or deletion request.

During the account registration process, mm77 requires users to confirm that they are 21 years of age or older. Before any withdrawal is permitted, mm77 conducts KYC verification that includes confirmation of the user's date of birth against a valid Philippine government-issued ID.

If mm77 discovers that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, void all balances and game records associated with that account, delete the minor's personal data (subject to any mandatory reporting obligations), and notify PAGCOR as required by regulation.

If you are a parent or guardian and believe that a minor has accessed mm77 and provided personal data, please contact us immediately at [email protected] and we will take immediate action.

mm77 reserves the right to update, modify, or replace this Privacy Policy at any time. Where material changes are made — changes that substantively affect how we use or share your personal data — mm77 will notify you by:

• Sending a notification to your registered email address at least 14 days before the change takes effect;
• Displaying a prominent notice on mm77.vu for a period of 14 days before the effective date;
• Updating the "Last Updated" date at the top of this document.

Your continued use of the mm77 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, you must discontinue use of the platform and may request account closure in accordance with our Terms & Conditions.

mm77 has appointed a Data Protection Officer (DPO) as required under the Philippine Data Privacy Act. The DPO is responsible for overseeing mm77's compliance with RA 10173 and PAGCOR data protection requirements, and for handling data subject rights requests.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact:

If you are not satisfied with mm77's response to your privacy inquiry, you have the right to lodge a complaint with the Philippine National Privacy Commission (NPC), the government authority responsible for enforcing RA 10173.