Data Protection Effective 2025 Philippines

boss77 Privacy Policy

Your personal data is handled with care at boss77. This Privacy Policy explains what information we collect, how we use it, and the rights you have as a player on our Philippines-based online gaming platform. We are committed to keeping your data secure and transparent at every step. If you have questions after reading this page, our FAQ and Responsible Gaming pages offer additional guidance.

What We Collect and Why

A clear breakdown of the personal information boss77 gathers and the purpose behind each category.

Registration & Identity Data

When you create a boss77 account, we collect your full legal name, date of birth, mobile number, and email address. This information is required to verify that you meet the minimum age requirement of 21 years and to comply with Philippine anti-money laundering regulations. We may also request a government-issued ID or other supporting documents during the verification process. Your identity data is stored securely and is never sold or shared with third parties for marketing purposes. We use this information solely to manage your account, process transactions, and fulfil our legal obligations as a licensed platform operating in the Philippines.

Usage & Activity Data

We automatically collect data about how you interact with the boss77 platform, including pages visited, games played, bets placed, session duration, and device type. This data helps us improve platform performance, personalise your experience, and detect unusual activity that may indicate fraud or account compromise. Usage data is collected through standard server logs and first-party analytics tools — we do not use third-party advertising trackers. Aggregated and anonymised usage statistics may be used internally to guide product development decisions. You can review your activity history at any time by logging into your account and navigating to the activity section.

Financial & Transaction Data

To process deposits and withdrawals in Philippine pesos (PHP), we collect payment method details such as GCash account references, bank account identifiers, or e-wallet information. We do not store full card numbers or sensitive authentication credentials on our servers — payment processing is handled through encrypted, PCI-compliant channels. Transaction records including amounts, dates, and payment methods are retained for a minimum of five years in accordance with Philippine financial regulations. This data is used exclusively for processing your transactions, resolving disputes, and meeting our regulatory reporting obligations. If you have concerns about a specific transaction, please refer to our FAQ page for guidance on how to raise a query.

Communications Data

When you contact our support team or respond to platform notifications, we retain records of those communications to help us resolve issues efficiently and improve our service quality. This includes messages sent through in-platform chat, email correspondence, and any feedback you submit through official channels. Communications data is accessible only to authorised support and compliance staff and is not shared externally except where required by law. We may send you service-related notifications such as account alerts, transaction confirmations, and security updates — these are not optional as they are necessary for the safe operation of your account. Promotional communications are separate and can be managed through your account notification preferences at any time.

Your Rights as a Player

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have specific rights regarding your personal data. boss77 is committed to honouring these rights promptly and transparently. Below is a summary of what you are entitled to and how to exercise each right.

To submit a data request, log in to your account and use the support channel, or send a written request to our data protection contact. We aim to respond to all verified requests within 15 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

Read Our FAQ

Right to Access

You may request a copy of the personal data we hold about you at any time. We will provide this in a clear, readable format within the legally required timeframe.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to request a correction. Supporting documentation may be required for identity-related changes.

Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations under Philippine law.

Right to Object

You may object to the processing of your personal data for direct marketing purposes at any time. Objections to other forms of processing will be assessed on a case-by-case basis.

How We Keep Your Data Safe

boss77 applies industry-standard security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security), ensuring that your login credentials, payment details, and personal information remain private during transit. Our servers are hosted in secure data centres with restricted physical and logical access controls, and we conduct regular security audits to identify and address potential vulnerabilities.

Access to personal data within our organisation is strictly limited to staff who require it to perform their job functions, and all personnel with data access are bound by confidentiality obligations. In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the National Privacy Commission in accordance with the timelines prescribed by Philippine law. We also maintain an incident response plan to ensure that any security events are contained and resolved as quickly as possible.

We encourage you to play your part in keeping your account secure by using a strong, unique password, enabling any available two-factor authentication, and logging out of your account when using shared devices. If you ever suspect that your account has been accessed without your permission, please contact our support team immediately so we can take protective action on your behalf.

TLS Encryption

All data in transit between your browser or app and our servers is protected by TLS encryption, preventing interception by third parties on any network.

Secure Server Infrastructure

Our platform runs on hardened servers with access controls, firewalls, and regular penetration testing to maintain a robust security posture at all times.

Staff Access Controls

Personal data is accessible only to authorised personnel on a need-to-know basis. All staff undergo data privacy training and are bound by strict confidentiality agreements.

Regular Security Audits

We conduct scheduled and unscheduled security reviews to proactively identify risks and ensure our data protection practices remain current and effective.

Questions About Your Privacy?

If you have any questions about how boss77 handles your personal data, or if you would like to exercise any of your data rights, our FAQ page has detailed answers. You can also create an account and manage your privacy preferences directly from your profile settings.