boss77 Privacy Policy

01 Introduction

boss77 is committed to protecting the privacy and personal information of all Filipino players who use our online casino and sports betting services. We recognize that when you trust us with your personal data, you are placing trust in our ability to keep that data secure and use it only for legitimate purposes consistent with this Privacy Policy.

This Privacy Policy is designed to comply with Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), and all implementing rules and regulations issued by the National Privacy Commission of the Philippines. It describes our practices concerning the collection, use, storage, sharing, and protection of personal information in clear, plain language.

If you have any questions or concerns about how boss77 handles your personal data, please contact our Data Protection Officer using the details provided in Section 14 of this Privacy Policy.

02 Data Controller

For the purposes of applicable data protection laws, including the Philippine Data Privacy Act of 2012, the data controller responsible for your personal information is boss77, operating the platform at boss77.lat.

boss77 determines the purposes for which and the manner in which your personal data is processed. We are registered with and accountable to the National Privacy Commission of the Philippines for our data processing activities.

03 Information We Collect

boss77 collects several categories of personal information to provide you with gaming services, comply with legal obligations, and improve your experience on the platform. The information we collect includes:

3.1 Information You Provide Directly

When you register an account on boss77, we collect:

• Identity information: Full name, date of birth, nationality, gender;
• Contact information: Email address, mobile phone number, residential address;
• Account credentials: Username, password (stored in hashed form), security questions and answers;
• Financial information: Payment method details (GCash account, Maya account, bank account numbers), transaction history;
• Verification documents: Government-issued ID (passport, driver's license, UMID, postal ID), proof of address, selfie photos for identity verification.

3.2 Information Collected Automatically

When you use the boss77 platform, we automatically collect:

• Device information: IP address, device type, operating system, browser type and version, screen resolution;
• Usage data: Pages viewed, features accessed, time spent on the platform, click patterns, games played;
• Gaming data: Bets placed, winnings, losses, bonus usage, game preferences;
• Location data: General geographic location inferred from IP address to confirm Philippine residency;
• Communication records: Live chat transcripts, email correspondence, customer service call logs.

3.3 Information from Third Parties

We may receive information about you from:

• Payment processors (GCash, Maya, banks) to verify transactions;
• Identity verification services to confirm your identity and age;
• Fraud prevention services to detect suspicious account activity;
• Credit reference agencies (only where legally required for anti-money laundering compliance).

04 How We Use Your Data

boss77 uses your personal information for the following purposes, each of which is necessary for the provision of our services or required by law:

boss77 will not use your personal information for purposes outside those described in this Privacy Policy without first obtaining your explicit consent, unless required or permitted by law.

05 Legal Basis for Processing

Under the Philippine Data Privacy Act, boss77 must have a lawful basis for processing your personal data. Our legal bases for processing include:

• Consent: You have given clear, informed consent for us to process your personal data for specific purposes, such as receiving marketing communications;
• Contract performance: Processing is necessary to fulfill our contractual obligations to you as outlined in the Terms & Conditions, including providing gaming services and processing payments;
• Legal obligation: Processing is required to com ply with applicable Philippine laws, including the Anti-Money Laundering Act, the Data Privacy Act of 2012, and gaming regulatory requirements imposed by PAGCOR;
• Legitimate interests: Processing is necessary for boss77's legitimate business interests, such as fraud prevention, platform security, and improving our services, where these interests are not overridden by your rights;
• Vital interests: In exceptional circumstances, processing may be necessary to protect the vital interests of a data subject or another person, such as in a responsible gaming emergency situation.

Where we rely on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

06 Data Sharing & Disclosure

boss77 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may, however, share your information with the following categories of recipients where strictly necessary:

6.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These include payment processors (GCash, Maya, BPI, BDO, Metrobank), identity verification providers, cloud hosting and infrastructure providers, customer support platform providers, and fraud detection services.

6.2 Regulatory and Law Enforcement Authorities

boss77 may be legally required to disclose personal data to Philippine regulatory authorities, including the National Privacy Commission, the Anti-Money Laundering Council (AMLC), PAGCOR, and law enforcement agencies, where required by applicable law, court order, or regulatory direction. Such disclosures will be made only to the extent legally required.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of boss77's business, your personal data may be transferred to the relevant third party as part of that transaction. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.

6.4 Responsible Gaming Partners

Where you have requested self-exclusion, boss77 may share limited information with registered self-exclusion schemes and responsible gaming organizations operating in the Philippines to give effect to your exclusion request across participating platforms.

07 International Data Transfers

Some of our third-party service providers are located or operate infrastructure outside the Philippines. Where personal data is transferred internationally, boss77 ensures that appropriate safeguards are in place in accordance with the requirements of the Philippine Data Privacy Act of 2012 and the implementing rules of the National Privacy Commission.

Such safeguards may include standard contractual clauses approved by the National Privacy Commission, data processing agreements that impose obligations equivalent to those required under Philippine law, and transfers only to jurisdictions that provide an adequate level of data protection as recognized by the Commission.

You may request further information about the safeguards in place for international transfers by contacting our Data Protection Officer at the address listed in Section 14.

08 Data Retention

boss77 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your account plus a minimum of five (5) years following account closure, as required by Philippine anti-money laundering regulations;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction in compliance with AMLC requirements;
• Customer support communications: Retained for three (3) years from the date of each interaction;
• Marketing consent records: Retained until you withdraw consent, plus one (1) additional year to evidence the withdrawal;
• Self-exclusion records: Retained permanently to prevent future registration during exclusion periods and to honor permanent exclusion requests.

When retention periods expire, personal data is securely deleted or anonymized in a manner that prevents re-identification. Where data must be retained for legal reasons beyond the period you might otherwise expect, we will inform you of the legal basis for such extended retention.

09 Security Measures

boss77 implements a comprehensive suite of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, and disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and boss77 servers is encrypted using TLS 1.2 or higher (256-bit SSL);
• Encryption at rest: Sensitive personal data, including financial details and identity documents, is encrypted when stored on our servers;
• Access controls: Access to personal data is restricted on a strict need-to-know basis, with role-based permissions and multi-factor authentication required for all staff with data access;
• Password security: Account passwords are stored using one-way cryptographic hashing and are never stored or transmitted in plain text;
• Regular security audits: Our platform undergoes regular penetration testing and security audits by independent third parties;
• Incident response: We maintain a formal data breach response plan and will notify affected users and the National Privacy Commission in accordance with statutory requirements in the event of a qualifying breach.

While boss77 takes all reasonable precautions to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect any unauthorized use of your boss77 account.

10 Your Rights Under Philippine Data Privacy Law

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by boss77:

• Right to be informed: You have the right to know how your personal data is being collected and processed, which this Privacy Policy is designed to fulfill;
• Right to access: You may request a copy of the personal data boss77 holds about you, including information about the purposes for which it is processed;
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you;
• Right to erasure (right to be forgotten): You may request deletion of your personal data where there is no longer a legal basis for us to retain it, subject to our legal retention obligations;
• Right to object: You may object to certain types of processing, including direct marketing and processing based on legitimate interests;
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format where technically feasible;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing;
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. We will respond to all valid requests within thirty (30) days, or notify you if a longer period is required due to the complexity of the request.

11 Cookies & Tracking Technologies

boss77 uses cookies and similar tracking technologies to operate and improve the platform, to remember your preferences, to analyze usage patterns, and to deliver a personalized experience. The categories of cookies we use include:

• Strictly necessary cookies: Essential for the platform to function, including session management, login authentication, and security. These cannot be disabled;
• Functional cookies: Remember your language preferences, display settings, and other account customizations to provide a consistent experience;
• Analytics cookies: Collect aggregated, anonymized data about how users interact with the boss77 platform to help us identify areas for improvement;
• Performance cookies: Monitor platform performance and load times to help us maintain a fast and reliable gaming experience.

You can manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the boss77 platform. boss77 does not use third-party advertising cookies or cross-site tracking technologies for external advertising networks.

12 Marketing Communications

With your consent, boss77 may send you promotional communications about new games, bonus offers, seasonal promotions, and platform updates via email, SMS, Messenger, or Viber. You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email;
• Updating your communication preferences in your boss77 account settings;
• Contacting customer support via live chat or email to request removal from marketing lists.

Opting out of marketing communications will not affect your ability to receive transactional or service communications that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, and security alerts.

13 Changes to This Privacy Policy

boss77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or improvements to our services. When we make material changes to this policy, we will notify registered users by posting a prominent notice on the boss77 platform and by sending an email notification to the address associated with your account.

The updated Privacy Policy will take effect immediately upon publication on the platform, unless a later effective date is specified. We encourage you to review this page periodically to stay informed about how boss77 protects your personal data. Your continued use of the boss77 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

The version of the Privacy Policy that was current at the time of any relevant data processing activity will apply to that activity.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how boss77 handles your personal data, please contact our Data Protection Officer. We are committed to addressing all privacy-related inquiries promptly and in good faith.

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. You may also refer to our Terms & Conditions and Responsible Gaming pages for related policies governing your use of boss77.