plush77 Privacy Policy

1.1 plush77 is the Philippines' premier online casino and sports betting platform, designed for Filipino players across Manila, Cebu, Davao, Makati, Quezon City, and the rest of the country. We understand that your personal data is valuable and that you trust us to handle it with care and transparency.

1.2 This Policy applies to all personal data collected by plush77 through the plush77.net website, any associated mobile-optimised web pages, and any communications between you and plush77, including customer support interactions conducted by email or live chat.

1.3 This Policy is intended to comply with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR"), as administered and enforced by the National Privacy Commission ("NPC") of the Philippines.

1.4 This Policy should be read in conjunction with the plush77 Terms and Conditions and the plush77 Responsible Gaming Policy, both of which are available on this website. Together, these documents form the complete framework governing your relationship with plush77.

1.5 If you are located outside the Philippines and are accessing the plush77 platform, please be aware that your data will be processed in accordance with Philippine data protection law. By continuing to use the platform, you consent to this processing arrangement.

2.1 plush77 collects personal data in the following categories, depending on how you interact with our platform:

2.2 Registration & Identity Data

When you create a plush77 account, we collect your full legal name, date of birth, Philippine mobile number, email address, username, and the password you set (stored in encrypted form only). This data is necessary to establish and manage your account.

2.3 Identity Verification (KYC) Data

As part of our Know Your Customer ("KYC") obligations and to comply with anti-money laundering ("AML") regulations, plush77 may require you to provide: a government-issued Philippine identification document (e.g., PhilSys National ID, passport, driver's licence, UMID, SSS ID, voter's ID), a selfie photograph for facial verification, proof of address (e.g., utility bill or bank statement), and proof of ownership of your nominated payment method (e.g., GCash or PayMaya account screenshot).

2.4 Financial & Transaction Data

plush77 records all deposit and withdrawal transactions processed through your plush77 account, including the payment method used (GCash, PayMaya, BPI, BDO, Metrobank, USDT), transaction amounts in Philippine Peso (PHP) or USDT, transaction timestamps, and transaction reference numbers. We do not store full bank account credentials or card numbers on our servers.

2.5 Gaming & Betting Activity Data

We collect data relating to your gaming sessions on plush77, including the games you play (baccarat, mini baccarat, bingo, slots, sports betting, sabong), wager amounts, game outcomes, session duration, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting.

2.6 Technical & Device Data

When you access plush77.net, our servers automatically collect technical data including your IP address, browser type and version, device type (desktop, mobile, tablet), operating system, referring URL, pages visited on plush77.net, and timestamps of access. This data is used for security monitoring, fraud detection, and platform optimisation.

2.7 Communications Data

If you contact plush77 customer support via email or live chat, we retain a record of those communications, including the content of messages, timestamps, and any attachments you submit. This helps us provide consistent support and resolve disputes accurately.

2.8 Marketing Preferences

Where you have opted in to receive marketing communications from plush77, we retain a record of your marketing preferences and the communications sent to you. You may update or withdraw your marketing consent at any time through your plush77 account settings.

2.9 plush77 does not intentionally collect sensitive personal information ("SPI") as defined under the DPA, such as racial or ethnic origin, political opinions, religious beliefs, or health data, beyond what may be incidentally provided by you during KYC or support interactions and only to the extent strictly necessary.

3.1 plush77 uses your personal data strictly for the purposes listed in the table below. We apply the principle of purpose limitation — your data will not be used for any purpose that is incompatible with the original purpose for which it was collected without your separate consent.

3.2 plush77 will never use your personal data to make automated decisions that produce significant legal effects on you without providing you with an opportunity to request human review of that decision, as required under applicable Philippine law.

4.1 Under the Data Privacy Act of 2012, plush77 processes your personal data on one or more of the following lawful bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and plush77 — i.e., to provide the gaming and betting services you have registered to use.
• Legal Obligation: Processing is necessary for plush77 to comply with applicable Philippine laws and regulations, including KYC/AML obligations under the Anti-Money Laundering Act (AMLA) and PAGCOR regulatory requirements.
• Legitimate Interests: Processing is necessary for plush77's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights and freedoms.
• Consent: Where plush77 relies on your consent as the lawful basis for processing (e.g., for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4.2 Where processing is based on consent, plush77 will maintain clear records of when and how your consent was obtained, and will make it straightforward for you to withdraw consent at any time through your plush77 account settings or by contacting support.

5.1 plush77 does not sell or rent your personal data to any third party. We may, however, share your personal data with the following categories of recipients, strictly as necessary for the purposes described in this Policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and USDT network processors receive transaction data necessary to complete deposit and withdrawal requests. Each processor operates under their own privacy policy and applicable data protection obligations.
• KYC / Identity Verification Providers: plush77 may engage third-party KYC service providers to assist with identity document verification and facial recognition checks. These providers process your KYC data under strict data processing agreements with plush77.
• Game Content Providers: Third-party game software providers whose games are hosted on the plush77 platform may receive limited gaming session data (e.g., player ID, wager amounts) solely for the purpose of delivering and settling game outcomes.
• Regulatory Authorities: plush77 is obligated to report certain player data and transaction records to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities as required by law.
• Legal and Compliance Advisers: plush77 may share data with its legal counsel and compliance advisers under professional confidentiality obligations where necessary to obtain legal advice or to defend or pursue legal claims.
• IT Infrastructure Providers: Cloud hosting, database management, and cybersecurity service providers may have access to personal data in the course of providing infrastructure services to plush77. All such providers are bound by data processing agreements.

5.2 In the event that plush77 undergoes a corporate restructuring, merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer via your registered email address.

5.3 plush77 will never disclose your personal data to any government authority except where required to do so by applicable Philippine law or by a valid and binding court order or regulatory directive.

6.1 plush77 uses cookies and similar tracking technologies (collectively, "Cookies") on plush77.net to enhance your user experience, maintain session state, and collect platform analytics. Cookies are small text files stored on your device by your web browser.

6.2 The following categories of Cookies are used on plush77.net:

• Strictly Necessary Cookies: These Cookies are essential for the plush77 platform to function. They enable core features such as user authentication, session management, and security. These Cookies cannot be disabled without rendering the platform non-functional.
• Performance & Analytics Cookies: These Cookies collect aggregated, anonymised information about how players use plush77.net — such as which pages are visited most frequently and how players navigate between pages. This data is used solely to improve platform performance.
• Functional Cookies: These Cookies allow plush77.net to remember your preferences and personalisation choices, such as your preferred language, display settings, and game lobby layout.
• Marketing Cookies: Where you have consented to receive marketing communications from plush77, marketing cookies may be used to help plush77 understand the effectiveness of promotional campaigns. These Cookies are only set with your prior consent.

6.3 You can control and manage Cookie settings through your web browser preferences. Please note that disabling strictly necessary Cookies may impair your ability to log in to and use the plush77 platform. Instructions for managing Cookies can be found in the help section of your specific browser.

6.4 plush77 does not use cross-site tracking, fingerprinting, or any other covert method to track your activity outside of the plush77.net domain.

7.1 plush77 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law, whichever is the longer period.

7.2 The following general retention periods apply:

• Account and KYC Data: Retained for a minimum of five (5) years following account closure, as required under the Anti-Money Laundering Act and PAGCOR regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, consistent with AML reporting obligations.
• Gaming Activity Logs: Retained for a period of three (3) years from the date of the gaming session, for dispute resolution and responsible gaming compliance purposes.
• Customer Support Communications: Retained for two (2) years from the date of the last interaction, unless the matter is subject to ongoing legal proceedings.
• Technical & Device Logs: Retained for twelve (12) months from the date of collection, for security and fraud detection purposes.
• Marketing Consent Records: Retained for as long as the consent is active, plus two (2) years thereafter as evidence of consent.

7.3 Upon expiry of the applicable retention period, plush77 will securely destroy or permanently anonymise your personal data in accordance with its internal data disposal procedures.

8.1 plush77 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and the plush77.net servers;
• Encryption of passwords and sensitive KYC document data at rest using industry-standard cryptographic algorithms;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing of the plush77 platform infrastructure;
• Multi-factor authentication (MFA) for administrative access to plush77 systems containing personal data;
• Automated fraud detection and anomaly monitoring systems operating 24 hours a day, 7 days a week;
• Secure physical and virtual data centre facilities with access logging.

8.2 Despite our security measures, no data transmission over the internet or electronic storage system is one hundred percent (100%) secure. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, plush77 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, as required under the DPA.

8.3 You play an important role in keeping your plush77 account secure. You are responsible for maintaining the confidentiality of your login credentials and for using a strong, unique password. If you suspect that your account has been compromised, contact plush77 support immediately.

9.1 As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by plush77:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, shared, and protected — which is the primary purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data that plush77 holds about you, along with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to plush77's legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on plush77's legitimate interests, including profiling for direct marketing purposes.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to plush77 in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe that your data protection rights have been violated.

9.2 To exercise any of the above rights, please contact the plush77 Data Protection Officer at [email protected]. plush77 will respond to all valid data subject requests within thirty (30) calendar days of receipt, consistent with NPC guidelines.

9.3 plush77 will not charge a fee for processing data subject requests unless the request is manifestly unfounded or excessive, in which case a reasonable fee may be applied.

10.1 plush77 takes underage gambling prevention extremely seriously. Our registration process includes mandatory date-of-birth collection and age verification checks. Players found to be under 21 years of age will have their accounts immediately suspended and any deposited funds returned to the originating payment method.

10.2 If plush77 discovers that it has inadvertently collected personal data from a person under 21 years of age, that data will be promptly deleted from our systems and the relevant account will be permanently closed.

10.3 If you are a parent or guardian and believe that a minor in your care has created a plush77 account, please contact our support team immediately at [email protected] so that we can take prompt action.

11.1 plush77 is a Philippines-focused platform and processes the majority of player data within the Philippines. However, certain service providers engaged by plush77 — such as cloud infrastructure providers, KYC verification platforms, and game software suppliers — may be located outside the Philippines and may process your personal data in their respective jurisdictions.

11.2 Where personal data is transferred outside the Philippines, plush77 will ensure that appropriate safeguards are in place to protect your data, including data processing agreements that impose data protection obligations equivalent to those required by the Data Privacy Act of 2012 and its IRR.

11.3 plush77 will not transfer your personal data to a foreign jurisdiction unless we are satisfied that the recipient provides an adequate level of protection for that data, or that appropriate contractual safeguards are in place to ensure equivalent protection.

12.1 plush77 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable Philippine law, or guidance issued by the National Privacy Commission.

12.2 When material changes are made to this Policy, plush77 will notify registered players by email to the address associated with their plush77 account and/or by placing a prominent notice on the plush77.net website. The updated Policy will take effect on the date indicated in the "Effective Date" header at the top of the page.

12.3 Your continued use of the plush77 platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you must cease using the plush77 platform and may request account closure in accordance with the Terms and Conditions.

12.4 We encourage you to review this Privacy Policy periodically to stay informed about how plush77 is protecting your personal data.

13.1 plush77 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or complaints regarding this Policy or the way plush77 handles your personal data, please contact the plush77 DPO using the details below:

13.2 If you are not satisfied with plush77's response to your privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines. The NPC can be reached through its official website and complaint channels as published by the Commission.

13.3 plush77 takes all privacy complaints seriously and will acknowledge receipt of your complaint within five (5) business days, with a full response provided within thirty (30) calendar days in accordance with NPC guidelines.