crazy77 Privacy Policy

1. Who We Are

This Privacy Policy is issued by the operator of crazy77, the online casino and sports betting platform accessible at crazy77.app. crazy77 is licensed and regulated by the Philippine Amusement and Gaming Corporation (PAGCOR) and operates in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as overseen by the National Privacy Commission (NPC).

For the purposes of this Policy, crazy77 acts as the Personal Information Controller (PIC) in respect of the personal data of players registered on the Platform. Where third-party service providers process data on our behalf, they act as Personal Information Processors (PIP) under data processing agreements that bind them to strict confidentiality and security obligations.

This Policy applies to all personal data collected through the crazy77 website, mobile browser interface, customer support channels, and any other interaction you have with crazy77. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy.

2. Personal Data We Collect

crazy77 collects the following categories of personal data from players:

2.1 Identity & Contact Data

• Full legal name as it appears on a valid government-issued Philippine ID
• Date of birth (for age verification — players must be 21 or older)
• Residential address (province, city or municipality, barangay, postal code)
• Email address
• Philippine mobile number
• Nationality and citizenship

2.2 Verification & KYC Data

• Copies of government-issued identification documents (e.g., PhilSys National ID, SSS ID, GSIS ID, driver's license, passport, Voter's ID, PRC ID)
• Proof of address documents where required
• Selfie or liveness verification images for identity confirmation
• Source of funds declarations for large deposits where required by AML regulations

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts, dates, and payment method references
• GCash or Maya account references (mobile number associated with the wallet)
• Bank account name and last few digits for bank transfer verification
• Bonus and promotional credit history
• Wagering history and game session records

2.4 Technical & Usage Data

• IP address and geolocation data at the time of login and transactions
• Device type, operating system, and browser information
• Session timestamps, login history, and activity logs
• Game play records including bet amounts, outcomes, and session duration
• Cookies and similar tracking technologies (see Section 7)

2.5 Communication Data

• Records of customer support interactions via chat, email, or any other support channel
• Survey responses and feedback submissions
• Marketing preference settings and opt-in/opt-out records

3. How We Collect Your Data

crazy77 collects personal data through the following means:

• Account Registration: When you create a crazy77 account, you provide identity, contact, and age verification information directly through the registration form.
• KYC Verification: When you submit identity documents through our verification portal to complete the KYC process required before withdrawals are processed.
• Deposits & Withdrawals: Payment transaction data is captured when you initiate cashier transactions through GCash, Maya, BPI, BDO, Metrobank, UnionBank, Coins.ph, 7-Eleven Cliqq, or USDT TRC20.
• Gameplay: Game session data is automatically recorded by the Platform during the course of your betting and gaming activity.
• Technical Collection: IP addresses, device data, and cookies are collected automatically when you access the crazy77 website.
• Customer Support: When you contact our support team, the content and metadata of those communications are recorded for quality assurance and dispute resolution.
• Third-Party Verification Services: In some cases, identity or address data may be cross-referenced against third-party databases as part of our fraud prevention and AML compliance procedures.

4. How We Use Your Personal Data

The table below outlines the specific purposes for which crazy77 processes your personal data:

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, crazy77 must have a lawful basis for processing personal data. The legal bases we rely on are:

• Contractual Necessity: Processing is required to perform our contract with you — specifically, to provide the crazy77 gaming and betting services you signed up for, including account management and payment processing.
• Legal Obligation: Processing is necessary to comply with Philippine laws applicable to crazy77, including PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), and the Data Privacy Act of 2012.
• Legitimate Interest: crazy77 has a legitimate interest in preventing fraud, maintaining platform security, and improving our services, provided that your fundamental rights and freedoms are not overridden.
• Consent: For marketing communications and certain non-essential cookies, we rely on your explicit opt-in consent. You may withdraw consent at any time.

6. Data Sharing & Disclosure

crazy77 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. We may share your data with the following categories of recipients only where necessary and under appropriate legal safeguards:

• PAGCOR: As our licensing authority, PAGCOR may require access to player account data, transaction records, and game logs as part of regulatory oversight and audit functions.
• Anti-Money Laundering Council (AMLC): crazy77 is legally required to report suspicious transactions and submit covered transaction reports to the AMLC under the Anti-Money Laundering Act.
• Payment Processors: GCash, Maya, BPI, BDO, Metrobank, UnionBank, Coins.ph, and other payment partners receive transaction reference data necessary to process your deposits and withdrawals. They are bound by their own regulatory obligations and privacy frameworks.
• KYC & Identity Verification Providers: Third-party identity verification services may process copies of your ID documents to confirm your identity on our behalf under strict data processing agreements.
• IT & Platform Service Providers: Cloud hosting, cybersecurity, and technical support providers who maintain the Platform infrastructure may have access to data as necessary to perform their functions, bound by confidentiality obligations.
• Law Enforcement & Courts: We may disclose personal data to the National Bureau of Investigation (NBI), Philippine National Police (PNP), or courts of competent jurisdiction where legally compelled to do so by valid legal process.

7. Cookies & Tracking Technologies

crazy77 uses cookies and similar tracking technologies on the Platform to deliver and improve our services. A cookie is a small text file stored on your device when you visit a website.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. You cannot opt out of these without disabling Platform functionality.
• Performance & Analytics Cookies: Help us understand how players interact with the Platform — which pages are most visited, where errors occur, and how sessions flow. Data is aggregated and anonymized where possible.
• Functional Cookies: Remember your preferences such as language settings, previously visited game categories, and display preferences to personalize your experience.
• Marketing Cookies: Used with your consent to deliver relevant promotional content. You may opt out of marketing cookies through your account settings at any time.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. For detailed instructions on managing cookies in popular browsers, refer to your browser's help documentation.

8. Data Retention

crazy77 retains personal data only for as long as necessary to fulfill the purposes outlined in this Policy or as required by applicable Philippine law. The following retention periods apply:

• Account & Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AML regulations.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years in compliance with the Anti-Money Laundering Act.
• KYC Documents: Identity verification documents are retained for five (5) years from the date of submission or from the date of account closure, whichever is later.
• Communication Records: Customer support chat and email records are retained for two (2) years from the date of the interaction.
• Technical & Log Data: Server logs and access records are retained for up to twelve (12) months for security and fraud prevention purposes.
• Marketing Consent Records: Records of your marketing opt-in consent are retained for the duration of your account plus three (3) years as evidence of lawful processing.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with NPC guidelines.

9. Data Security

crazy77 implements robust technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your browser and our servers
• At-rest encryption for stored personal data and sensitive documents
• Role-based access controls limiting data access to authorized personnel with a legitimate business need
• Multi-factor authentication (MFA) requirements for all administrative system access
• Regular security audits, penetration testing, and vulnerability assessments
• 24/7 intrusion detection and monitoring systems
• PCI-DSS compliant payment processing — raw payment card data is never stored on crazy77 systems
• Staff training on data protection and privacy obligations under RA 10173

10. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by crazy77:

• Right to Be Informed: You have the right to be told what personal data is being collected, the purposes of processing, and to whom it may be disclosed — which is the purpose of this Privacy Policy.
• Right of Access: You may request a copy of the personal data crazy77 holds about you, including information on how it is being processed.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request correction. For name or ID corrections, documentary evidence may be required.
• Right to Erasure or Blocking: Subject to our legal retention obligations (see Section 8), you may request the deletion or blocking of your personal data where continued processing is no longer lawfully justified.
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Object: You may object to processing based on legitimate interest, including the use of your data for direct marketing purposes. We will cease processing upon a valid objection unless there are compelling legitimate grounds that override your interests.
• Right to Lodge a Complaint: If you believe crazy77 has not handled your personal data in accordance with RA 10173, you have the right to lodge a complaint with the National Privacy Commission (NPC) at privacy.gov.ph.

To exercise any of the above rights, please contact our Data Protection Officer using the contact details in Section 14. We will respond to verified requests within thirty (30) calendar days of receipt. We may need to verify your identity before processing your request.

11. Children's Privacy

The crazy77 Platform is strictly intended for persons aged 21 years and above, in compliance with PAGCOR regulations. We do not knowingly collect personal data from minors. If you are under the age of 21, you are not permitted to use crazy77 services.

If crazy77 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data, close the associated account, and return any deposits in accordance with our regulatory obligations. If you are a parent or guardian and believe your child has registered on crazy77, please contact us immediately at the details in Section 14.

12. International Data Transfers

The primary servers and data storage infrastructure used by crazy77 are located within jurisdictions that maintain data protection standards appropriate for the nature of the data processed. Where technical service providers or cloud infrastructure partners are located outside the Philippines, crazy77 ensures that equivalent data protection safeguards are in place through contractual clauses, adequacy determinations, or other lawful transfer mechanisms recognized under RA 10173.

No international transfer of your personal data takes place for the purpose of selling, renting, or sharing your information with foreign marketing entities. Transfers are limited to the technical operation of the Platform and the provision of services described in this Policy.

13. Changes to This Privacy Policy

crazy77 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform services. When we make material changes, we will notify you by posting a prominent notice on the Platform and, where feasible, by sending a notification to your registered email address prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically. Your continued use of the crazy77 Platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

Prior versions of this Privacy Policy are retained internally and are available upon request. If you have concerns about any changes, you may contact our Data Protection Officer before the changes take effect.

14. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or to crazy77's handling of your personal data, please contact our designated Data Protection Officer (DPO):

• Email: [email protected]
• Subject Line: Please include "Privacy / Data Request" in your subject line to ensure prompt routing to the DPO team.
• Response Time: We aim to acknowledge all privacy-related inquiries within five (5) business days and resolve them within thirty (30) calendar days.

For unresolved complaints, you also have the right to contact the National Privacy Commission (NPC) of the Philippines directly. The NPC is the government body responsible for administering and enforcing the Data Privacy Act of 2012.

This Privacy Policy was last reviewed and updated on January 1, 2026. All prior versions of this Policy are superseded by this document. crazy77 reserves all rights not expressly granted herein.