Summary for Filipino Players: zs77 collects your information to operate your account, process GCash/Maya payments, verify your identity under PAGCOR regulations, and keep our platform secure. We do not sell your personal data to third parties. You have full rights over your data under the Philippine Data Privacy Act (RA 10173).
1. Data Controller
zs77 ("zs77," "we," "us," or "our") is the data controller responsible for the personal information collected through the zs77 platform at https://zs77.org. zs77 operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR) and processes personal data in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations.
For all privacy-related inquiries, data subject requests, or concerns, you may contact our Data Protection Officer (DPO) at [email protected]. We aim to acknowledge all privacy requests within five (5) business days.
2. Personal Data We Collect
zs77 collects personal data through your interactions with the platform — at registration, during use, and at account verification. The categories of personal data we collect include:
2.1 Registration and Identity Data
- Full legal name (as it appears on your Philippine government-issued ID)
- Date of birth (for age verification — players must be 21 or older)
- Philippine mobile number (used as your primary login identifier and for OTP verification)
- Username and encrypted password
- Email address (if provided during registration)
2.2 KYC and Identity Verification Data
- Government-issued Philippine ID (passport, driver's license, SSS, UMID, PhilSys ID) — submitted as image upload for identity verification prior to first withdrawal
- Proof of payment method ownership (e.g., screenshot of GCash account name)
- Source of funds documentation for transactions exceeding AMLC reporting thresholds under Republic Act No. 9160 as amended
2.3 Financial and Transaction Data
- Deposit and withdrawal records, including amounts, timestamps, and payment method used (GCash, Maya, BPI, BDO, Metrobank, USDT)
- Account balance history
- Betting history across all game categories (slots, live casino, sports, sabong, bingo)
- Bonus claims and wagering records
2.4 Technical and Device Data
- IP address and approximate geolocation at time of login
- Device type, operating system, and browser information
- Session logs including login times, duration, and logout method
- Cookies and local storage identifiers (see Section 6)
2.5 Communications Data
- Records of live chat, email, and other support interactions with zs77 customer service
- Feedback, complaint, and dispute submissions
- Marketing preference settings and consent records
3. How We Use Your Personal Data
zs77 uses the personal data we collect for the following specific purposes:
| Purpose |
Data Used |
| Creating and maintaining your zs77 account |
Registration and identity data |
| Processing deposits and withdrawals via GCash, Maya, and banks |
Financial and transaction data, KYC data |
| Verifying your identity (KYC) before first withdrawal |
Government ID, proof of payment method |
| Complying with PAGCOR licensing requirements and AMLC reporting |
All personal data categories |
| Detecting fraud, account abuse, and security threats |
Technical, financial, and transaction data |
| Providing responsible gaming tools (limits, self-exclusion) |
Account and session data |
| Delivering customer support services |
Communications data, account data |
| Sending promotional offers (with your consent) |
Contact details, marketing preferences |
| Improving platform performance and game recommendations |
Aggregated, anonymized usage data |
zs77 does not use your personal data for automated decision-making that produces significant legal effects without human review, except where required for AMLC compliance or fraud prevention, in which case you retain the right to request human review of any automated decision affecting your account.
4. Legal Basis for Processing
zs77 processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:
- Contractual necessity: Processing required to fulfil our contractual obligations to you under the zs77 Terms and Conditions — including account operation, payment processing, and game delivery.
- Legal obligation: Processing required to comply with PAGCOR licensing conditions, AMLC anti-money laundering requirements under RA 9160, and other applicable Philippine law.
- Legitimate interests: Processing for fraud prevention, platform security, and abuse detection — where these interests do not override your privacy rights.
- Consent: Processing for marketing communications and non-essential cookies — where you have provided explicit, freely given consent that you may withdraw at any time.
5. Data Sharing & Disclosure
zs77 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances:
- Payment processors: GCash (Mynt), Maya (PayMaya Philippines), BPI, BDO, Metrobank, and cryptocurrency processors receive transaction data necessary to process your deposits and withdrawals. Each processor handles data under their own privacy policies and applicable Philippine financial regulations.
- Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government bodies as required by law or regulatory mandate. zs77 will notify you of such disclosures where legally permitted to do so.
- Identity verification services: Licensed KYC verification providers who process your government ID data solely for identity authentication on our behalf, under strict data processing agreements.
- Game content providers: Licensed game studios may receive anonymized session and wagering data for game integrity monitoring and technical support. They do not receive personally identifiable information.
- Legal proceedings: Where required to comply with a valid Philippine court order, subpoena, or law enforcement request.
All third parties receiving personal data from zs77 are bound by contractual obligations to handle that data securely and solely for the purpose for which it was shared.
6. Cookies & Tracking Technologies
zs77 uses cookies and similar technologies to operate the platform, maintain your login session, detect fraud, and — with your consent — deliver personalized content. The cookies we use fall into four categories:
- Essential cookies: Required for the platform to function. These include session authentication tokens, security identifiers, and load-balancing cookies. They cannot be disabled without breaking core functionality.
- Functional cookies: Remember your preferences such as language settings and responsible gaming limit configurations. Disabled by default on first visit; enabled by your acceptance.
- Analytics cookies: Aggregate, anonymized data about how players use the platform — used to improve game recommendations and site performance. No personally identifiable information is included in analytics data.
- Marketing cookies: Used only with your explicit consent to deliver relevant promotional content. You may withdraw consent at any time through your account settings.
You may manage cookie preferences through your browser settings or through the zs77 account settings panel. Disabling essential cookies will prevent you from logging into zs77.
7. Data Retention
zs77 retains personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable Philippine law. Our standard retention periods are:
- Account and identity data: Retained for the lifetime of your account plus five (5) years following permanent account closure, in compliance with PAGCOR recordkeeping requirements.
- Financial and transaction records: Retained for seven (7) years following the transaction date, in accordance with Philippine tax law and AMLC record-keeping obligations under RA 9160.
- KYC documents: Retained for five (5) years from the date of submission or account closure, whichever is later.
- Support communications: Retained for three (3) years from the date of the interaction, or for the duration required by any related dispute or legal proceedings.
- Marketing consent records: Retained for the duration of the consent plus three (3) years to demonstrate compliance.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized using industry-standard methods. Where anonymization is used, the resulting data may be retained indefinitely for statistical purposes.
8. Data Security
zs77 implements technical and organizational security measures proportionate to the sensitivity of the personal data we hold. Our security infrastructure includes:
- 256-bit SSL/TLS encryption for all data transmitted between your device and zs77 servers
- AES-256 encryption for sensitive personal data at rest, including government ID images and payment details
- Multi-factor authentication (MFA) available to all players for account login protection
- Regular third-party penetration testing and vulnerability assessments
- Strict access controls ensuring only authorized zs77 personnel can access personal data, on a need-to-know basis
- Automated fraud detection systems monitoring for unauthorized access patterns and suspicious account activity
- Incident response procedures including mandatory notification to affected players and the National Privacy Commission (NPC) in the event of a personal data breach
While zs77 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You play an important role in your own account security — please maintain a strong, unique password and enable two-factor authentication in your account settings.
9. Your Rights as a Data Subject
Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by zs77:
- Right to be informed: To know that your personal data is being collected and how it will be used — fulfilled by this Privacy Policy.
- Right of access: To obtain a copy of the personal data zs77 holds about you, along with information about how it is being processed.
- Right to rectification: To have inaccurate or incomplete personal data corrected promptly. You may update most account information directly from your zs77 account settings.
- Right to erasure ("right to be forgotten"): To request deletion of your personal data where it is no longer necessary for the purpose collected, subject to our legal retention obligations under PAGCOR and AMLC requirements.
- Right to object: To object to processing based on legitimate interests, including direct marketing communications. Marketing opt-outs take effect immediately upon request.
- Right to data portability: To receive your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
- Right to damages: To claim compensation for actual damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data.
- Right to file a complaint: To lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your rights under RA 10173 have been violated.
To exercise any of these rights, contact our DPO at
[email protected] with the subject line "Data Subject Request." We will acknowledge your request within five (5) business days and fulfil it within fifteen (15) business days, or notify you of any extension required by complexity.
10. Children & Minors
zs77 is strictly prohibited to individuals under 21 years of age as required by PAGCOR regulations. zs77 does not knowingly collect personal data from any person under 21. If we become aware that a minor has registered on the platform, we will immediately close the account, forfeit any balance, and delete the associated personal data in accordance with our legal obligations.
If you are a parent or guardian and believe your child under 21 has accessed or registered on zs77, please contact us immediately at [email protected] so we can take the appropriate action.
11. International Data Transfers
zs77 is a Philippines-based platform and stores the majority of personal data on servers located within the Philippines. In limited circumstances — such as where we use internationally headquartered game content providers or cloud infrastructure services with Philippine data centers — personal data may be processed by entities outside the Philippines.
Where such transfers occur, zs77 ensures that appropriate safeguards are in place, including contractual data processing agreements that bind the receiving party to data protection standards at least equivalent to those required under RA 10173. We will not transfer your personal data to jurisdictions that do not provide adequate levels of data protection without your prior informed consent.
12. Changes to This Privacy Policy
zs77 reserves the right to update this Privacy Policy at any time. The "Last Updated" date at the top of this page will reflect the date of the most recent revision. For material changes — particularly those that expand the categories of data we collect or introduce new third-party sharing — we will provide advance notice to registered players via SMS to the mobile number on file, or via a prominent notice on the zs77 platform, at least fourteen (14) days before the change takes effect.
Your continued use of zs77 after any update to this Privacy Policy constitutes your acknowledgement of the revised policy. If you do not agree with any material change, you may close your account prior to the effective date of the change by contacting [email protected].
13. Contact the Data Protection Officer
For all privacy matters, data subject requests, or questions about this Privacy Policy, please contact the zs77 Data Protection Officer through the following channels:
- Email: [email protected] — subject line: "Privacy / Data Subject Request"
- Live Chat: Available 24/7 on zs77 — average response 3–5 minutes
If your concern is not resolved to your satisfaction through our internal process, you may escalate to the National Privacy Commission (NPC) of the Philippines, the independent regulatory body responsible for enforcing RA 10173.
Your Privacy at zs77 — At a Glance
We Never Sell Your Data
zs77 does not sell, rent, or trade your personal data to advertisers or data brokers. Your information stays within zs77 and the strictly necessary service partners that operate your account.
256-bit Encryption
All data in transit between your device and zs77 is protected by SSL/TLS 256-bit encryption. Sensitive stored data, including KYC documents, is encrypted at rest with AES-256.
RA 10173 Compliant
zs77 processes personal data in full compliance with the Philippine Data Privacy Act of 2012 (RA 10173) and all applicable NPC regulations — your legal rights are actively protected.
Your Full Data Rights
Access, correct, delete, or export your personal data at any time. Contact our DPO and receive a response within 5 business days. Your rights under RA 10173 are enforceable.
PAGCOR & AMLC Compliance
Regulatory data sharing with PAGCOR and AMLC is strictly limited to legal requirements. We notify you where permitted when your data is requested by a regulatory authority.
Easy Marketing Opt-Out
Promotional messages require your explicit consent. Withdraw consent at any time from your account settings or by contacting support — opt-outs take effect immediately.
Play on zs77 — Where Your Privacy Is Protected
Thousands of Filipino players trust zs77 with their data every day — because we earn that trust through transparency, compliance, and genuine respect for your privacy rights.
21+ PAGCOR regulated. RA 10173 compliant. Play responsibly.