Privacy Policy

iq77 ("iq77," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who registers and uses the iq77 online gaming platform at iq77.app (the "Platform"). This Privacy Policy ("Policy") describes how iq77 collects, uses, stores, shares, and protects your personal data when you access or use the Platform.

This Policy applies to all registered players, visitors to the Platform, and any individual whose personal data is processed by iq77 in connection with the operation of the Platform. It should be read together with our Terms & Conditions, which govern your use of the iq77 Platform.

By registering an account on iq77 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

For the purposes of the Data Privacy Act of 2012 and this Policy, iq77 is the personal information controller responsible for your personal data. This means iq77 determines the purposes and means by which your personal data is collected and processed in connection with the operation of the Platform.

Where iq77 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, and platform analytics services — those providers act as personal information processors and are bound by data processing agreements that require them to process your data only on iq77's documented instructions and in compliance with applicable Philippine data privacy law.

iq77 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data privacy legislation. Contact details for the DPO are provided in Section 16 of this Policy.

iq77 collects the following categories of personal data in connection with the operation of the Platform:

iq77 does not collect sensitive personal information as defined under the Data Privacy Act of 2012 (such as health data, political opinions, or religious beliefs) unless specifically required by law or with your explicit consent.

iq77 collects personal data through the following means:

• Direct Collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser information, and session activity logs, collected via cookies and similar tracking technologies (see Section 10).
• Third-Party Sources: Identity and fraud-risk data received from licensed identity verification providers and payment processors in connection with KYC and AML compliance obligations.
• Regulatory Sources: Information received from PAGCOR or other competent Philippine regulatory authorities in connection with player protection or compliance requirements.

Where iq77 receives personal data about you from a third party, we will inform you of this at the earliest practicable opportunity, unless doing so would compromise a fraud investigation or is otherwise restricted by law.

iq77 uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your iq77 player account, including processing deposits, withdrawals, and bonus credits.
• Identity Verification: To verify your identity and age (21+) in compliance with Philippine law and PAGCOR player protection requirements.
• AML & Fraud Prevention: To detect, investigate, and prevent money laundering, fraud, bonus abuse, and other prohibited conduct as described in our Terms & Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Responsible Gaming: To monitor gaming behaviour, enforce responsible gaming tools (deposit limits, self-exclusion, cooling-off periods), and identify players who may be at risk of problem gambling.
• Legal Compliance: To comply with applicable Philippine laws and regulations, including the Data Privacy Act of 2012, Anti-Money Laundering Act, and any directives issued by PAGCOR or the National Privacy Commission.
• Platform Improvement: To analyse usage patterns, troubleshoot technical issues, and improve the features and performance of the iq77 Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications (see Section 13).

Under the Data Privacy Act of 2012, iq77 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and iq77 (i.e., the Terms & Conditions), including account management, payment processing, and the provision of gaming services.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including KYC and AML obligations under the Anti-Money Laundering Act, age verification requirements, and PAGCOR regulatory directives.
• Legitimate Interests: Processing is necessary for iq77's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and business analytics, provided those interests are not overridden by your rights and interests.
• Consent: Where processing is based on your consent — such as for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

iq77 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing deposits and withdrawals.
• Identity Verification Providers: Licensed KYC and AML compliance service providers engaged to verify player identity and assess fraud risk.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities, where disclosure is required by law or regulatory directive.
• Law Enforcement: Philippine law enforcement agencies, where disclosure is required pursuant to a valid court order, subpoena, or other lawful process.
• Platform Service Providers: Cloud hosting providers, cybersecurity firms, and platform analytics providers engaged to support the technical operation of the iq77 Platform, subject to data processing agreements.
• Professional Advisers: Legal counsel, auditors, and other professional advisers engaged by iq77, subject to professional confidentiality obligations.

All third-party processors engaged by iq77 are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with iq77's documented instructions.

iq77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Active Account Data: Retained for the duration of your account registration and for a period of five (5) years following account closure, in compliance with AML record-keeping requirements under Philippine law.
• KYC Verification Documents: Retained for a minimum of five (5) years following account closure, as required by the Anti-Money Laundering Act and PAGCOR regulations.
• Transaction Records: Retained for a minimum of five (5) years following the date of the transaction.
• Support Communications: Retained for a period of two (2) years following the resolution of the relevant support interaction.
• Technical Logs: Retained for a period of twelve (12) months, unless a longer retention period is required for an ongoing security investigation.
• Marketing Consent Records: Retained for the duration of your consent and for a period of three (3) years following withdrawal of consent, as evidence of the consent given.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with iq77's data disposal procedures.

iq77 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the iq77 Platform is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Encryption at Rest: Sensitive personal data stored on iq77's servers, including KYC documents and financial data, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised iq77 personnel and processors on a strict need-to-know basis. All access is logged and subject to regular audit.
• Two-Factor Authentication: iq77 offers two-factor authentication (2FA) for player accounts and enforces 2FA for all internal administrative access to systems containing personal data.
• Penetration Testing: iq77's platform and infrastructure are subject to regular independent security assessments and penetration testing.
• Incident Response: iq77 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, iq77 will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012.

While iq77 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the security of your account credentials. iq77 will never ask you for your password via email, live chat, or telephone.

iq77 uses cookies and similar tracking technologies (collectively, "Cookies") on the Platform. Cookies are small text files placed on your device that allow the Platform to recognise your browser and remember certain information about your session and preferences.

iq77 uses the following categories of Cookies:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including maintaining your login session, remembering your responsible gaming settings, and enabling secure payment processing. These Cookies cannot be disabled without affecting Platform functionality.
• Performance Cookies: Used to collect anonymised data about how players use the Platform, including which pages are visited most frequently and any error messages encountered. This data is used to improve Platform performance.
• Functionality Cookies: Used to remember your preferences, such as your preferred language and display settings, to provide a more personalised experience.
• Analytics Cookies: Used to analyse aggregate usage patterns and Platform performance. Data collected via analytics Cookies is anonymised and does not identify individual players.

You can manage Cookie preferences through your browser settings. Most browsers allow you to refuse or delete Cookies. Please note that disabling strictly necessary Cookies may affect your ability to use certain features of the Platform, including maintaining your login session.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by iq77:

• Right to Be Informed: The right to be informed of how your personal data is collected, used, and processed, as set out in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data iq77 holds about you, together with information about how it is processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data held by iq77. You may update certain account information directly through your account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to iq77's legal retention obligations under AML and PAGCOR regulations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. You may exercise this right at any time by updating your communication preferences in your account settings or by contacting our support team.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe that iq77 has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the above rights, please contact iq77's Data Protection Officer using the contact details provided in Section 16. iq77 will respond to all data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

The iq77 Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law governing online gambling. iq77 does not knowingly collect personal data from individuals under the age of 21.

iq77 employs automated and manual age verification procedures at the point of registration and at the time of the first withdrawal request. Where iq77 discovers that personal data has been collected from an individual under the age of 21, the account will be suspended immediately, any deposits returned, and the personal data deleted without undue delay.

If you believe that a minor has registered an account on the iq77 Platform, please contact our support team immediately at the contact details provided in Section 16.

With your consent, iq77 may send you promotional communications about bonuses, new games, platform features, and special events — including promotions tied to PBA season openers, major international sporting events, and Filipino holidays.

You may opt in to marketing communications during the registration process or at any time through your account settings. You may withdraw your consent and opt out of marketing communications at any time by:

• Updating your communication preferences in your iq77 account settings;
• Clicking the "Unsubscribe" link in any marketing email sent by iq77; or
• Contacting our support team at the details provided in Section 16.

Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to withdrawal, and does not affect iq77's ability to send you transactional communications related to your account (such as deposit confirmations, withdrawal notifications, and security alerts), which are sent on the basis of contractual necessity rather than consent.

The iq77 Platform may contain links to third-party websites or services for informational purposes. iq77 has no control over the content, privacy practices, or data processing activities of any third-party website, and this Privacy Policy does not apply to any third-party site.

iq77 is not responsible for the privacy practices of any third-party website linked from the Platform. We encourage you to review the privacy policy of any third-party website you visit before providing any personal data to that site.

iq77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The most current version of this Policy will always be available on the Platform at iq77.app/privacy-policy.

Where amendments are material — meaning they significantly affect your rights or the way in which iq77 processes your personal data — iq77 will provide at least seven (7) days' advance notice via the email address registered to your account before the amended Policy takes effect.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the revised Policy, you must cease using the Platform and may request account closure in accordance with the Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or iq77's data processing practices, please contact our Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe your data privacy rights have been violated. The NPC can be reached through its official government website.