dali77 Privacy Policy

1.1 dali77 ("dali77", "we", "us", "our") is a licensed online casino and sports betting platform operating under PAGCOR regulatory oversight and serving Filipino players across the Philippines via the website at dali77.net. For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173), dali77 is the Personal Information Controller (PIC) in respect of all personal data collected through the dali77 platform.

1.2 This Privacy Policy applies to all personal data collected from registered players, prospective players who browse dali77.net without registering, and any individual who contacts dali77 through its support channels. It covers data collected via the dali77 website, mobile browser experience, and any related services operated by dali77.

1.3 This Privacy Policy should be read alongside dali77's Terms and Conditions and Responsible Gaming Policy, both of which are accessible from the footer of this website. By registering a dali77 account or using the dali77 platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

2.1 Registration Data. When you create a dali77 account, we collect the following information: full legal name, date of birth, Philippine mobile number, email address, residential address, and a chosen username and password. This information is required to create and operate your account in compliance with PAGCOR know-your-customer (KYC) requirements.

2.2 Identity Verification (KYC) Data. To comply with PAGCOR regulations and the Philippine Anti-Money Laundering Act (AMLA), we are required to verify the identity of our players before processing withdrawals and at other trigger points. KYC data may include:

• A copy of a valid government-issued Philippine ID (e.g., PhilSys National ID, passport, driver's license, SSS card, UMID, PhilHealth ID, Voter's ID, or PRC ID);
• A selfie or live photo for facial matching purposes;
• Proof of residential address (e.g., utility bill, bank statement, or barangay certificate dated within 3 months);
• Proof of payment method ownership where required for AML purposes.

2.3 Financial Transaction Data. We collect details of all deposits and withdrawals processed through your dali77 account, including transaction amounts, timestamps, payment method references (e.g., GCash or Maya account numbers, bank account identifiers), and transaction status. Full payment card numbers are never stored by dali77 — card processing is handled by PCI-DSS-compliant third-party payment processors.

2.4 Gaming Activity Data. We maintain detailed records of your gaming activity on the dali77 platform, including: games played, bet amounts, outcomes, session durations, win/loss history, bonus claims and wagering progress, and responsible gaming tool usage. This data is required for regulatory reporting, dispute resolution, and responsible gaming monitoring.

2.5 Technical & Device Data. When you access dali77.net, we automatically collect certain technical data including: IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, and session timestamps. This data is used for security monitoring, fraud prevention, and platform performance optimization.

3.1 dali77 uses your personal data only for the purposes for which it was collected and for compatible purposes as disclosed in this Privacy Policy. The primary purposes for which we process your data are set out in the table below:

3.2 dali77 may use aggregated and anonymized data — from which all personally identifying information has been stripped — for internal analytics, product development, and reporting purposes. Anonymized data is no longer personal data under RA 10173 and is not subject to the protections described in this Policy.

3.3 Where dali77 uses your personal data for direct marketing communications (such as promotional emails or SMS about bonuses and new games), we will do so only where you have provided explicit consent during registration or via account settings. You may withdraw this consent at any time by updating your communication preferences in account settings or by contacting support.

4.1 Contract Performance. The majority of personal data processing by dali77 is necessary for the performance of the contract between dali77 and you as a registered player — i.e., operating your account, processing your deposits and withdrawals, enabling gameplay, and providing customer support. Without this processing, dali77 cannot provide its services to you.

4.2 Legal Obligation. dali77 is subject to a number of legal obligations as a PAGCOR-regulated online gaming operator, including KYC and AML obligations under PAGCOR's regulatory framework and the Anti-Money Laundering Act (Republic Act No. 9160, as amended). These obligations require us to collect and retain certain categories of personal data regardless of individual player preferences.

4.3 Legitimate Interests. dali77 processes certain personal data on the basis of its legitimate interests as a business, where those interests are not overridden by your privacy rights. This includes fraud detection and prevention, platform security, responsible gaming monitoring beyond minimum regulatory requirements, and internal analytics. dali77 has conducted legitimate interest assessments (LIAs) for these processing activities.

4.4 Consent. Where dali77 relies on your consent as the legal basis for processing — primarily for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawal of consent for marketing does not affect your ability to continue using the dali77 platform.

5.1 dali77 does not sell, rent, or trade your personal data to any third party. We share personal data only where necessary and with the following categories of recipients, all of whom are bound by confidentiality and data protection obligations:

• Payment Processors: GCash (Mynt), Maya (Voyager Innovations), GrabPay, InstaPay network banks, PesoNet network banks, Coins.ph, and cryptocurrency payment gateways — to facilitate deposits and withdrawals on your behalf;
• Identity Verification Providers: Third-party KYC and eKYC service providers used to automate document and facial verification in compliance with PAGCOR requirements;
• Game Software Providers: Licensed game studios and live casino operators whose software is integrated into the dali77 platform — these providers may receive gaming session data necessary to deliver their games;
• Fraud Prevention & AML Services: Third-party providers of transaction monitoring, device fingerprinting, and fraud scoring services;
• Cloud Infrastructure Providers: Hosting and data storage providers operating under data processing agreements that comply with RA 10173 standards;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities where required by law or court order.

5.2 All third-party service providers who process personal data on behalf of dali77 are required to enter into data processing agreements that obligate them to process personal data only on dali77's documented instructions, to maintain appropriate security measures, and to comply with applicable Philippine privacy law.

5.3 dali77 will disclose personal data to law enforcement, regulatory authorities, or courts where required to do so by applicable Philippine law, regulation, or legal process, including PAGCOR compliance audits and AMLC suspicious transaction reporting obligations.

5.4 In the event of a merger, acquisition, or sale of dali77's business or assets, your personal data may be transferred to the acquiring entity. dali77 will notify you of any such transfer and the new entity's privacy policy before the transfer takes effect, to the extent permitted by law.

5.5 dali77 does not share your personal data with any third-party advertising networks, data brokers, social media platforms, or analytics providers for external marketing or profiling purposes.

6.1 dali77.net uses cookies and similar technologies (such as local storage and session tokens) to operate the platform and improve your experience. Cookies are small text files stored on your device by your browser when you visit dali77.net. They serve a number of functions described below.

6.2 dali77 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the operation of the dali77 platform — including session authentication tokens that keep you logged in, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality;
• Functional Cookies: Remember your preferences such as language settings, game display options, and responsible gaming alert settings across sessions;
• Analytics Cookies: Used internally by dali77 to understand how players navigate the platform, identify performance issues, and optimize the user experience. dali77 uses self-hosted analytics only — your data from these cookies is not shared externally;
• Security Cookies: Used by dali77's fraud prevention systems to detect unusual account access patterns, device fingerprinting anomalies, and other security threats.

6.3 dali77 does not use third-party advertising cookies or tracking pixels from social media platforms on dali77.net. You will not be retargeted with dali77 advertisements on other websites based on cookies placed during your visit to dali77.net.

6.4 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging into the dali77 platform. Disabling functional or analytics cookies will not affect your ability to play but may reduce the quality of your experience.

7.1 dali77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, and audit requirements. The following retention periods apply:

7.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with dali77's data disposal procedures. Secure deletion involves overwriting stored data using methods that prevent recovery.

7.3 Where a legal hold is in place — for example, where data is relevant to ongoing litigation, regulatory investigation, or a PAGCOR compliance audit — data will be retained beyond the standard retention period until the legal hold is lifted.

8.1 Under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, dali77 players in the Philippines have the following rights with respect to their personal data:

• Right to be Informed: You have the right to be informed of what personal data dali77 collects about you, the purposes for which it is processed, and the legal basis for that processing — which this Privacy Policy fulfils;
• Right to Access: You have the right to obtain a copy of the personal data dali77 holds about you, and information about how it is used;
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data dali77 holds about you;
• Right to Erasure / Right to be Forgotten: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to dali77's legal retention obligations under PAGCOR and AMLA requirements;
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on dali77's legitimate interests, or where it is used for direct marketing purposes;
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format to facilitate transfer to another service provider, where technically feasible;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe dali77 has violated your rights under RA 10173.

8.2 To exercise any of these rights, please contact dali77's Data Protection Officer via the live chat support channel. We will acknowledge your request within 3 business days and aim to resolve it within 30 calendar days, or within the timeframe required under applicable NPC regulations.

8.3 dali77 may ask you to verify your identity before processing a data rights request, to ensure that we do not disclose personal data to unauthorized parties.

8.4 Some rights are subject to limitations. For example, dali77 cannot delete transaction records or KYC data that must be retained under PAGCOR regulations or AMLA obligations, regardless of a deletion request.

9.1 The dali77 platform is strictly for individuals who are at least 21 years of age, as required by PAGCOR regulations and Philippine gaming law. dali77 does not knowingly collect personal data from individuals under the age of 21. The dali77 registration process requires all applicants to confirm their date of birth and consent to age verification checks.

9.2 If dali77 discovers that personal data has been collected from a person under 21, the account will be immediately suspended, all transactions will be voided in accordance with our Terms and Conditions, and the personal data will be securely deleted as soon as practicable, subject to any legal obligations to retain evidence for regulatory purposes.

9.3 Parents and guardians are responsible for ensuring that minors do not access the dali77 platform using shared devices or accounts. If you believe a minor has registered on dali77, please contact our support team via live chat immediately so that we can take appropriate action.

10.1 dali77 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• AES-256 encryption for personal data at rest and TLS 1.3 for all data in transit between your browser and dali77's servers;
• Multi-factor authentication (MFA) required for all internal staff access to systems containing player personal data;
• Role-based access controls ensuring that dali77 staff can only access personal data strictly necessary for their job function;
• Regular penetration testing and vulnerability assessments conducted by independent third-party security firms;
• 24/7 intrusion detection and security information and event management (SIEM) monitoring;
• Formal data breach response plan with defined escalation procedures and NPC notification workflows;
• Annual security awareness training for all dali77 staff with access to player personal data.

10.2 KYC documents (government IDs, selfies, proof of address) are stored in an isolated, access-controlled document management system separate from the main player account database, with additional encryption and audit logging of all access events.

10.3 Payment card data is never stored on dali77 servers. All card processing is handled by PCI-DSS Level 1 certified payment processors. GCash and Maya transactions are processed via their respective secure APIs using tokenized payment references only.

10.4 While dali77 takes all reasonable precautions to protect your personal data, no security system is completely impenetrable. You also play a role in protecting your data — please use a strong, unique password for your dali77 account, enable two-factor authentication, and contact support immediately if you suspect unauthorized access.

11.1 dali77 primarily processes and stores personal data within data centers located in the Philippines or in jurisdictions that have been assessed as providing adequate protection for personal data under RA 10173 standards. Some of dali77's third-party service providers — including game software studios and cloud infrastructure providers — may process data in other countries.

11.2 Where personal data is transferred to a third country, dali77 ensures that appropriate safeguards are in place as required by the NPC's rules on cross-border data flows. These safeguards may include: contractual data transfer agreements incorporating the NPC's standard contractual clauses; binding corporate rules where the recipient is part of the same corporate group; or reliance on the recipient jurisdiction's NPC-recognized adequacy determination.

11.3 You may request information about the specific safeguards in place for any international transfer of your personal data by contacting dali77's Data Protection Officer via the support channel.

12.1 dali77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, new regulatory requirements from PAGCOR or the NPC, updates to Philippine privacy law, or improvements to our platform and services. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

12.2 Where a change to this Privacy Policy materially affects your rights or how we process your personal data, dali77 will provide advance notice via the email address registered to your account and/or via a prominent notice on the dali77 platform at least 14 days before the change takes effect. For non-material changes — such as typographical corrections or clarifications that do not affect your rights — we may update the Policy without individual notice.

12.3 Continued use of the dali77 platform after the effective date of a Privacy Policy update constitutes your acknowledgment of the updated Policy. If you do not agree with any change to this Privacy Policy, you should discontinue use of the platform and may request closure of your account in accordance with our Terms and Conditions.

13.1 dali77 has appointed a Data Protection Officer (DPO) as required under Section 21 of the Data Privacy Act of 2012 and NPC Circular No. 17-01. The DPO is responsible for overseeing dali77's compliance with RA 10173, managing privacy impact assessments, handling data subject rights requests, and serving as the primary point of contact with the National Privacy Commission.

13.2 If you have any questions, concerns, or complaints about this Privacy Policy or about how dali77 handles your personal data, you may contact the dali77 Data Protection Officer through the following channels:

• Live Chat: Available 24/7 via the dali77 platform — select "Privacy / Data Protection" as your support category;
• Email: [email protected] — please include "DPO Request" in the subject line of your message;
• Response Time: dali77 aims to acknowledge all DPO inquiries within 3 business days and to resolve them within 30 calendar days of receipt.

13.3 If you are not satisfied with dali77's response to a privacy complaint, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines:

• National Privacy Commission (NPC) — the independent Philippine government agency responsible for administering and implementing RA 10173;
• NPC complaints can be filed via the official NPC website or by visiting their offices in Pasay City, Metro Manila.