em77 is committed to protecting the personal data of every Filipino player on our platform. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the rights you hold under Philippine law.
Please Read Carefully: By registering an account with em77 or continuing to use the em77 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside the em77 Terms & Conditions.
em77 Asia ("em77," "We," "Us," or "Our") operates the em77 Casino platform accessible at https://em77.asia and associated subdomains, mobile interfaces, and software applications (collectively, the "Platform"). em77 is a Philippine Amusement and Gaming Corporation (PAGCOR)-regulated online gaming operator serving Filipino players across the Philippines.
We take the privacy of our players seriously. Filipino players entrust em77 with personal information — their names, Philippine mobile numbers, financial data, and gameplay activity — and we handle that data with the diligence and care it deserves. This Privacy Policy describes, in plain language, what personal information we collect from you, why we need it, how we use and protect it, who we may share it with, and what rights you have over it under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.
This Policy applies to all individuals who access or interact with the em77 Platform, including registered players, prospective players who visit the Platform without registering, and individuals who contact em77's customer support. It covers data collected online via the Platform, via email, via live chat, and via any other channel through which you interact with em77.
For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, the personal information controller responsible for your data is:
em77 Asia
Platform: https://em77.asia
Regulator: Philippine Amusement and Gaming Corporation (PAGCOR)
Support Email: [email protected]
Data Protection Officer: [email protected]
Support Hours: 24 hours a day, 7 days a week
All inquiries relating to this Privacy Policy, including requests to exercise your data subject rights, should be directed to the Data Protection Officer (DPO) contact above.
em77 collects the following categories of personal data. Not all categories are collected from every user — the data collected depends on how you interact with the Platform.
Sensitive Personal Information: Where em77 collects sensitive personal information (as defined under the Data Privacy Act), including government ID documents for KYC and financial account details, this data is encrypted at rest and in transit and is accessible only to authorized personnel with a legitimate processing purpose.
em77 collects personal data through the following means:
em77 processes your personal data for the following clearly defined purposes:
| Purpose | Data Categories Used |
|---|---|
| Account registration and authentication | Identity, contact, technical data |
| Age verification (21+ requirement per PAGCOR) | Date of birth, KYC documents |
| KYC verification and identity authentication | Identity data, KYC documents |
| Processing deposits and withdrawals | Financial data, identity data |
| AMLA compliance and transaction monitoring | Financial data, identity data, gaming activity |
| Providing gaming services and game history | Gaming activity data |
| Bonus and promotion administration | Identity data, gaming activity, financial data |
| Customer support and dispute resolution | All relevant categories as applicable |
| Responsible gaming monitoring and intervention | Gaming activity, financial data, communications |
| Fraud detection and security monitoring | Technical data, financial data, gaming activity |
| PAGCOR regulatory reporting and compliance | Identity, financial, and gaming data |
| Platform analytics and service improvement | Technical data, gaming activity (aggregated/anonymized) |
| Direct marketing (with your consent) | Contact data, communication preferences |
em77 does not process your personal data for any purpose beyond those listed above without first obtaining your explicit consent or where such processing is required by Philippine law.
Under the Data Privacy Act of 2012, em77 relies on the following legal bases for processing your personal data:
em77 does not sell your personal data. We do not share your personal data with third parties for their independent marketing purposes. We may share your personal data with the following categories of recipients, strictly to the extent necessary for each stated purpose:
em77 is required by PAGCOR's licensing conditions and the Anti-Money Laundering Act (AMLA) to report certain player activity and transaction data to PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies upon lawful demand. Compliance with these obligations is mandatory and cannot be waived by player request.
To facilitate deposits and withdrawals, em77 shares necessary transaction data with GCash (G-Xchange, Inc.), Maya Philippines, BPI, BDO, Metrobank, and other payment processors as applicable. Each processor handles your data under their own privacy policies and applicable Philippine regulations.
em77 engages third-party identity verification services to authenticate KYC documents submitted during registration. These providers process identity documents on em77's behalf under strict data processing agreements and are prohibited from using your data for any independent purpose.
Third-party game providers (live dealer studios, slot game developers, sportsbook data providers) may receive limited player session data required to deliver their gaming services, such as a player session token. These providers do not receive your full personal identity data and process session data under contractual obligations with em77.
em77 may share relevant personal data with legal counsel, auditors, accountants, and insurers where necessary for legitimate business and compliance purposes, subject to professional confidentiality obligations.
em77 will disclose personal data to Philippine law enforcement agencies and courts where required by a lawful order, warrant, or subpoena issued under Philippine law.
Where em77 engages service providers whose systems are located outside the Philippines — such as cloud infrastructure providers or game technology vendors — your personal data may be transferred to and processed in countries other than the Philippines. em77 ensures that all such international transfers are conducted under appropriate safeguards consistent with the Data Privacy Act of 2012 and National Privacy Commission (NPC) guidelines, including contractual data processing agreements that require the receiving party to maintain equivalent data protection standards.
em77 does not transfer personal data internationally without first conducting a legitimate transfer impact assessment and ensuring that the recipient jurisdiction or specific contractual arrangement provides adequate protections for Filipino data subjects.
em77 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | PAGCOR license condition |
| KYC documents and identity records | Duration of account + 5 years post-closure | AMLA, PAGCOR requirement |
| Financial transaction records | 5 years from transaction date | AMLA (Republic Act No. 9160) |
| Gaming activity logs | 5 years from activity date | PAGCOR license condition |
| Customer support communications | 3 years from last interaction | Legitimate interest / dispute resolution |
| Marketing communication preferences | Until consent withdrawn + 1 year | Consent basis |
| Technical access and security logs | 12 months from creation | Security / fraud prevention |
Upon expiry of the applicable retention period, em77 will securely delete or anonymize your personal data in a manner that prevents reconstruction. Where anonymization is not technically feasible, em77 will implement pseudonymization and access controls to render the data effectively inaccessible.
The em77 Platform uses cookies and similar tracking technologies to maintain session state, prevent fraud, measure Platform performance, and deliver a consistent user experience. The following categories of cookies are used:
em77 does not use third-party advertising cookies or behavioral tracking cookies that profile you for the purpose of displaying advertisements on other websites. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform.
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by em77:
Request a copy of the personal data em77 holds about you, along with information about how it is being used and with whom it has been shared.
Request the correction of inaccurate, outdated, or incomplete personal data held in your em77 account. Minor corrections can be made directly in account settings.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected and no legal retention obligation applies. Note that AMLA and PAGCOR obligations require certain data to be retained for up to five years.
Object to processing carried out on the basis of legitimate interest, including direct marketing communications. Where you object to marketing, em77 will cease such processing immediately.
Request a copy of your personal data in a structured, machine-readable format where processing is carried out by automated means on the basis of consent or contract.
Lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe em77 has processed your data in violation of the Data Privacy Act of 2012.
To exercise any of the above rights, contact em77's Data Protection Officer at [email protected] (plain text — not a clickable link). em77 will respond to verified data subject requests within fifteen (15) business days of receipt. em77 may request additional documentation to verify your identity before processing a request.
em77 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:
Your Role in Security: em77's security measures protect data in transit and at rest, but account security also depends on you. Never share your em77 password or OTP with anyone — including individuals claiming to be em77 support staff. em77 will never ask for your password.
The em77 Platform is strictly restricted to individuals aged twenty-one (21) years and above, as mandated by PAGCOR and applicable Philippine law. em77 does not knowingly collect or process personal data from individuals under 21 years of age.
During registration, all players are required to confirm their age and submit a government-issued Philippine ID for KYC verification. Where em77 discovers that an account has been registered by a person under 21 years of age, the account will be immediately and permanently closed, all funds will be handled in accordance with PAGCOR regulatory requirements, and the personal data of the minor will be deleted to the extent permitted by law.
If you believe that a minor has registered an em77 account, please contact support via live chat or at [email protected] immediately.
em77 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in Philippine law, NPC guidance, PAGCOR regulatory requirements, or em77's data processing practices. When material changes are made, em77 will notify registered players by email or in-platform notification at least seven (7) days before the revised Policy takes effect.
The effective date at the top of this document indicates when the current version took effect. We encourage you to review this Policy periodically. Your continued use of the em77 Platform after an updated Privacy Policy takes effect constitutes your acknowledgement of the updated Policy.
For all privacy-related inquiries, data subject rights requests, or concerns about em77's data processing practices, please contact our Data Protection Officer through the following channels:
If you are not satisfied with em77's response to your privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines, the government body responsible for enforcing the Data Privacy Act of 2012.
em77 Casino is operated under a valid PAGCOR online gaming license and complies with all Philippine data protection and anti-money laundering regulations. For licensing details, visit our About Us page.
How em77 Protects You
Six concrete ways em77 protects the personal data of every Filipino player on the platform.
Every connection between your device and em77 is protected by the same 256-bit SSL encryption standard used by BPI, BDO, and GCash. Your login credentials and financial data are never transmitted in plain text.
Your personal data is accessible only to em77 employees who have a documented, legitimate reason to process it. Two-factor authentication is mandatory on all internal systems that handle player data.
Sensitive data — including your KYC documents, government ID scans, and financial account details — is encrypted at rest in em77's database infrastructure, not stored in readable form.
em77 complies in full with Republic Act No. 10173 (Data Privacy Act of 2012) and National Privacy Commission guidelines — giving every Filipino player legally enforceable rights over their personal data.
em77 does not sell, rent, or trade your personal data to third parties for their marketing purposes. Data is shared only with the specific partners required to deliver the em77 service — payment processors, KYC providers, and game platforms — under strict data processing agreements.
In the event of a personal data breach that poses a risk to your rights, em77 follows a mandatory 72-hour notification protocol to the National Privacy Commission (NPC) and will notify affected players promptly in accordance with NPC guidance.
Play with Confidence
em77 Casino is built for Filipino players who want a regulated, secure online gaming platform. PAGCOR-licensed, GCash-ready, Data Privacy Act compliant. 500+ games. Minimum deposit ₱100. 21+ only.
PAGCOR-regulated • Data Privacy Act compliant • 21+ only • Please gamble responsibly