This Privacy Policy explains how mnl77 collects, uses, stores, shares, and protects your personal data in compliance with the Data Privacy Act of 2012 (Republic Act 10173) and applicable PAGCOR regulatory requirements.
mnl77 collects only the personal data that is strictly necessary for account operation, regulatory compliance, and service delivery. We do not collect data speculatively or for undefined future uses.
We tell you what data we collect, why we collect it, how long we keep it, and who we share it with — in plain language, not buried in footnotes. This Policy is the complete and authoritative statement of our data practices.
Under the Data Privacy Act of 2012, you have the right to access, correct, delete, and restrict the processing of your personal data held by mnl77. We honour all valid data subject requests within the statutory timeframes.
256-bit SSL encryption protects data in transit. Data at rest is encrypted using AES-256. Access to personal data by mnl77 staff is restricted on a strict need-to-know basis with full audit logging.
Personal data is retained only as long as necessary for the purpose it was collected, or as required by Philippine law and PAGCOR obligations. Data is securely deleted or anonymised upon expiry of retention periods.
mnl77's data processing is governed by Philippine law. Personal data of Filipino players is processed and stored in compliance with RA 10173 and the regulations of the National Privacy Commission (NPC).
This Privacy Policy ("Policy") describes how mnl77 ("mnl77", "we", "us", "our") — the operator of the online gaming platform accessible at mnl77.one — collects, processes, stores, and protects the personal data of players and website visitors ("you", "your", "Data Subject") in the Republic of the Philippines.
mnl77 is the Personal Information Controller (PIC) as defined under the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations. mnl77 processes personal data in compliance with the DPA, the regulations of the National Privacy Commission (NPC), and applicable PAGCOR licensing requirements for online gaming operators.
This Policy applies to all personal data collected through the mnl77 website (mnl77.one), mobile applications, live chat support interactions, and any other channel through which you interact with the mnl77 platform.
Please Note: By registering an account or using the mnl77 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree, you must not use the mnl77 Services.
mnl77 collects the following categories of personal data, as applicable to the Services you use:
| Category | Data Elements | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID type and number | Account registration, KYC/AML compliance, age verification (21+) |
| Contact Data | Philippine mobile number, email address | Account creation, OTP delivery, support communications, promotional notices |
| Financial Data | GCash account reference, Maya account reference, bank account details (BPI/BDO), transaction history, deposit/withdrawal records | Payment processing, withdrawal verification, AML monitoring |
| KYC Documents | Photographs of government-issued ID, selfie with ID, proof of payment method | Identity verification, PAGCOR regulatory compliance, fraud prevention |
| Gaming Data | Game session logs, bet history, win/loss records, bonus usage, VIP tier, game preferences | Service delivery, responsible gaming monitoring, dispute resolution, product improvement |
| Technical Data | IP address, device type and OS, browser type, session timestamps, login history, geolocation (approximate) | Security monitoring, fraud detection, platform optimisation |
| Communications Data | Live chat transcripts, support ticket content, email correspondence | Support service delivery, quality assurance, dispute resolution |
We do not collect sensitive personal information (as defined under the DPA) beyond what is strictly required for KYC compliance and responsible gaming obligations.
mnl77 collects personal data through the following methods:
Under the Data Privacy Act of 2012, mnl77 processes your personal data on the following legal grounds:
mnl77 uses personal data collected from Filipino players for the following purposes:
mnl77 does not use personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required for immediate fraud prevention action, in which case you may request human review of the decision.
mnl77 does not sell your personal data to third parties. Personal data is shared only in the following circumstances and with appropriate data protection safeguards in place:
Cross-Border Transfers: Where personal data is transferred outside the Philippines (e.g., to game provider servers or international payment processing infrastructure), mnl77 ensures that such transfers comply with the DPA's cross-border data transfer requirements, including the use of appropriate contractual safeguards.
The mnl77 platform uses cookies and similar tracking technologies to deliver and improve the Services. The following categories of cookies are used:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Required for the platform to function — session authentication, login state, security tokens | Session / up to 30 days |
| Functional | Remembers your preferences — language settings, remembered login device, recently played games | Up to 1 year |
| Analytics | Aggregated usage statistics used to improve platform performance and game recommendations (anonymised) | Up to 2 years |
| Security | Device fingerprinting and anomaly detection for fraud prevention and login security | Up to 90 days |
Essential and security cookies cannot be disabled without disrupting your access to the platform. Functional and analytics cookies may be managed via your browser settings. Disabling analytics cookies does not affect your ability to play games or process transactions.
mnl77 retains personal data for the following periods, after which data is securely deleted or irreversibly anonymised:
Where retention is required beyond these standard periods by a specific legal obligation, court order, or ongoing investigation, data will be retained for the duration of that requirement.
Under the Data Privacy Act of 2012, registered players and website visitors have the following rights in respect of personal data held by mnl77:
To exercise any of the above rights, contact mnl77's Data Protection Officer (DPO) at the contact details provided in Section 14. mnl77 will respond to all valid data subject requests within 15 business days of receipt of a complete request, as required under the DPA.
Some rights are subject to limitations — for example, the right to erasure does not apply to data that mnl77 is legally required to retain for PAGCOR, AMLC, or other regulatory compliance purposes. Where a right cannot be fully exercised, mnl77 will explain the applicable limitation in its response.
If you are dissatisfied with mnl77's response to a data rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
mnl77 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:
No online platform can guarantee absolute security. While mnl77 employs industry-standard security measures, you are responsible for maintaining the security of your own account credentials and for notifying mnl77 immediately if you suspect unauthorised access to your account.
The mnl77 platform is strictly prohibited for persons under the age of 21 years. This is the minimum legal age for gambling in the Philippines under applicable law and PAGCOR regulations.
mnl77 does not knowingly collect personal data from persons under 21 years of age. Age verification is conducted at account registration and again during KYC review. Any account found to belong to a person under 21 will be immediately closed and all associated data deleted, except where retention is required by applicable law.
If you believe that a person under 21 has registered an account or that mnl77 has inadvertently collected personal data from a minor, please contact our DPO immediately at the contact details in Section 14. We will investigate and take appropriate action promptly.
The mnl77 platform may contain references to third-party services such as payment processors and game providers. This Privacy Policy applies only to personal data processed by mnl77 directly. When you interact with a third-party service (for example, completing a GCash payment), that third party's own privacy policy governs the processing of your data by that party.
mnl77 is not responsible for the privacy practices of third-party services and encourages you to review the privacy policies of any third-party service with which you interact.
mnl77 may update this Privacy Policy periodically to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. Where changes are material, mnl77 will provide at least 14 days' advance notice via the registered email address and/or an in-platform notification before the changes take effect.
The effective date of the current version of this Policy is displayed at the top of this page. Your continued use of the mnl77 platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the updated Policy, you must cease using the Services and may request account closure.
Previous versions of this Policy are available upon request to the mnl77 DPO.
For all data privacy matters — including data subject rights requests, questions about this Policy, or to report a potential data breach — please contact the mnl77 Data Protection Officer:
Data Protection Officer — mnl77
Email: [email protected] (plain text only — not a clickable link)
Subject line: DATA PRIVACY REQUEST
Response time: Within 15 business days of receipt of a complete request
General Support (24/7 Live Chat): Available after login via the mnl77 platform
You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have not been respected. The NPC is the supervisory authority for data protection in the Philippines.
Regulated, encrypted, and fully compliant with Philippine data protection law. Play with confidence — your personal information is protected to the same standard as a Philippine bank. For players 21 and above only.