boos77 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") is issued by boos77 ("boos77," "we," "us," or "our") and applies to all personal data collected from users ("you," "Player," or "User") who access or use the boos77 website, mobile platform, and all associated services (collectively, the "Platform"). This Policy is a binding component of the boos77 Terms and Conditions.

boos77 is committed to protecting your personal data in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR). By registering an account with boos77, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein.

This Policy applies to all Filipino players who access boos77 from anywhere in the Philippines, including Metro Manila, Cebu, Davao, Iloilo, Quezon City, Makati, and all other provinces and regions. It also applies to any overseas Filipino who accesses boos77 from abroad.

2. Personal Data We Collect

2.1 Registration Data

When you create a boos77 account, we collect the following information necessary to establish and maintain your account:

• Full legal name (as it appears on your government-issued ID);
• Date of birth (for age verification — boos77 is strictly 21+ only);
• Philippine mobile number (used for OTP authentication);
• Email address (used for account communications and recovery);
• Residential address in the Philippines;
• Username and encrypted password.

2.2 Know Your Customer (KYC) Data

Before processing any withdrawal, boos77 requires KYC verification. During this process, we collect:

• A scanned or photographed copy of a valid government-issued Philippine ID (PhilSys, UMID, Passport, Driver's License, or Voter's ID);
• A selfie photograph of you holding the submitted ID;
• For enhanced due diligence cases: proof of income, source of funds documentation, or additional identity confirmation materials.

2.3 Financial and Transaction Data

boos77 records financial data related to your account activity, including:

• Deposit and withdrawal amounts, timestamps, and payment methods used (GCash, Maya, BPI, BDO, etc.);
• Transaction reference numbers and payment processor IDs;
• Bonus activations, wagering history, and promotional credits used.

boos77 does not store full GCash or bank account credentials. Payment authentication is handled directly by the respective payment processor (GCash, Maya, bank), and boos77 receives only transaction confirmation data.

2.4 Gaming Activity Data

boos77 records your gaming activity for operational, compliance, and responsible gaming purposes, including:

• Games played, bet amounts, outcomes, and session durations;
• Wagering patterns and account balance changes;
• Responsible gaming tool activations (deposit limits, cooling-off periods, self-exclusion requests).

2.5 Technical and Device Data

When you access boos77, we automatically collect certain technical data to ensure platform security and optimize your experience:

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Login timestamps and session duration;
• Referral URL and navigation path within the Platform.

2.6 Communications Data

All communications between you and the boos77 support team — including live chat transcripts, email exchanges, and in-platform messages — are recorded and retained for quality assurance, dispute resolution, and regulatory compliance purposes.

3. How boos77 Uses Your Personal Data

boos77 uses your personal data for the following lawful purposes, each of which constitutes a legitimate legal basis for processing under the Data Privacy Act of 2012:

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, device data	Contractual necessity
Age and identity verification (KYC)	KYC documents, registration data	Legal obligation
Payment processing and withdrawals	Financial data, KYC data	Contractual necessity
Fraud prevention and security monitoring	Technical data, transaction data	Legitimate interests
Customer support and dispute resolution	Communications data, account data	Contractual necessity
Responsible gaming tools and monitoring	Gaming activity data, account data	Legal obligation / legitimate interests
Regulatory reporting and compliance	All categories as required	Legal obligation
Platform improvement and analytics	Technical data, gaming data (aggregated)	Legitimate interests
Promotional communications (opt-in only)	Contact data, gaming preferences	Consent

boos77 will not use your personal data for any purpose not listed above without first obtaining your explicit consent or establishing an alternative legal basis for processing. If you receive promotional communications from boos77, you may opt out at any time via your account notification settings or by contacting live chat support.

4. Cookies and Tracking Technologies

4.1 Types of Cookies Used

boos77 uses cookies and similar tracking technologies to operate the Platform, maintain your session, and improve your experience. The following categories of cookies are used:

• Essential cookies: Required for the Platform to function. These include session cookies that keep you logged in and security cookies that prevent unauthorized access. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred payment methods, and game lobby filters. These improve your experience but are not strictly necessary.
• Analytics cookies: Help boos77 understand how the Platform is used — which pages are most visited, how long sessions last, and where technical issues occur. This data is aggregated and anonymized.
• Security cookies: Used for fraud detection, bot prevention, and rate limiting to protect your account and the integrity of the Platform.

4.2 Managing Cookies

You can manage non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or restrict cookies for individual websites. Please note that disabling essential cookies will impair your ability to use boos77 — you may be unable to log in or access certain features.

boos77 does not use third-party advertising networks or retargeting cookies. We do not place cookies on your device for the purpose of tracking your activity on other websites.

5. Data Sharing and Disclosure

5.1 Third-Party Service Providers

boos77 shares personal data with a limited number of trusted third-party service providers who assist us in operating the Platform. These providers are contractually bound to process your data only as instructed by boos77 and to maintain security standards consistent with this Privacy Policy. Categories of recipients include:

• Payment processors: GCash (G-Xchange Inc.), Maya Philippines Inc., partner banks (BPI, BDO, Metrobank, UnionBank), and other licensed payment intermediaries — for the purpose of processing deposits and withdrawals;
• KYC and identity verification partners: Licensed identity verification service providers used to automate document verification during the KYC process;
• Fraud prevention and security providers: Anti-fraud technology providers who process device and behavioral data to detect and prevent account fraud;
• Game software providers: Game developers (JILI, Pragmatic Play, PG Soft, etc.) may receive anonymized or session-level data necessary to deliver game content and verify RNG outcomes;
• Cloud hosting providers: Secure, access-controlled cloud infrastructure providers on whose servers boos77 data is stored.

5.2 Regulatory and Legal Disclosures

boos77 may disclose your personal data to regulatory authorities, law enforcement agencies, or courts of law when required to do so by Philippine law, lawful legal process, or a valid court order. In such cases, boos77 will disclose only the minimum information required to satisfy the legal obligation.

boos77 cooperates fully with the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other Philippine regulatory bodies as required by applicable law.

5.3 No Sale of Personal Data

boos77 does not sell, rent, trade, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. Your data is not a revenue source for boos77 beyond the gaming services we provide to you directly.

6. Data Retention

boos77 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with applicable legal and regulatory retention requirements. The following retention periods apply:

• Account and registration data: Retained for the lifetime of your active boos77 account, plus five (5) years after account closure — in compliance with anti-money laundering record-keeping obligations under the AMLA;
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by specific regulatory instructions;
• Transaction and financial records: Retained for a minimum of five (5) years in compliance with AMLA and financial record-keeping requirements;
• Gaming activity data: Retained for three (3) years from the date of each gaming session for responsible gaming monitoring and dispute resolution purposes;
• Support communications: Retained for two (2) years from the date of the communication, unless the communication relates to an unresolved dispute;
• Technical and device data: Log data is typically retained for ninety (90) days for security monitoring, after which it is aggregated and anonymized.

Upon expiration of the applicable retention period, personal data is securely deleted or permanently anonymized. You may request deletion of your personal data before the expiration of the retention period, subject to boos77's legal obligations to retain certain records — see Section 8 for details on exercising your data rights.

7. Security Measures

boos77 implements a layered security framework to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include:

• Encryption in transit: TLS 1.3 / 256-bit SSL for all data transmitted between your device and boos77 servers;
• Encryption at rest: AES-256 encryption for all stored personal data and KYC documents;
• Access controls: Role-based access control (RBAC) ensures that boos77 staff can only access data necessary for their specific function. KYC documents are accessible only to compliance personnel;
• Multi-factor authentication: OTP-based login authentication for user accounts; hardware security keys for administrative access to backend systems;
• Intrusion detection: Continuous monitoring of network traffic for anomalous patterns, unauthorized access attempts, and potential breaches;
• Regular security audits: Periodic penetration testing and security audits conducted by independent third-party security firms;
• Data breach response: A defined incident response plan that includes notification to affected users and the National Privacy Commission within the timeframes prescribed by the Data Privacy Act.

8. Your Privacy Rights Under the Data Privacy Act

Under the Data Privacy Act of 2012 (RA 10173) and its IRR, you have the following rights with respect to your personal data held by boos77:

• Right to be informed: The right to be told what data boos77 collects, why we collect it, how long we keep it, and who we share it with — which this Privacy Policy addresses;
• Right to access: The right to request a copy of the personal data boos77 holds about you, including a description of how it is used and with whom it has been shared;
• Right to rectification: The right to correct inaccurate or incomplete personal data in your boos77 account;
• Right to erasure: The right to request deletion of your personal data, subject to boos77's legal obligations to retain certain records under Philippine law;
• Right to object: The right to object to the processing of your personal data where boos77 relies on legitimate interests as the legal basis for processing;
• Right to data portability: The right to receive your personal data in a structured, machine-readable format for transfer to another service provider;
• Right to damages: The right to seek compensation for damages suffered as a result of a violation of your privacy rights under the DPA;
• Right to complain: The right to file a complaint with the National Privacy Commission (NPC) if you believe boos77 has violated your privacy rights.

To exercise any of the above rights, contact boos77 via live chat support or by email. We will respond to data rights requests within fifteen (15) business days. In some cases, we may need to verify your identity before processing your request.

8.1 Opting Out of Marketing Communications

If you have consented to receiving promotional communications from boos77 (via SMS, email, or in-platform notifications) and wish to withdraw that consent, you may do so at any time by updating your notification preferences in your boos77 account settings, or by contacting live chat support. Withdrawal of marketing consent does not affect the lawfulness of processing that occurred prior to withdrawal, and does not affect communications that are necessary for account operation (such as transaction confirmations and security alerts).

9. Children's Privacy and Underage Access Prevention

boos77 is strictly a platform for adults aged 21 years and older, in accordance with Philippine gambling regulations. We do not knowingly collect personal data from individuals under the age of 21.

If boos77 becomes aware that personal data has been collected from an individual who is under 21 years of age, we will immediately close the account, void all wagers, and delete the minor's personal data (except where retention is required by law). Deposited funds from underage accounts will be handled in accordance with applicable regulatory guidance.

Parents and guardians who become aware that a minor has created a boos77 account should contact boos77 immediately via live chat support so that the account can be closed and the minor's data removed.

10. Changes to This Policy and Contact Information

10.1 Policy Updates

boos77 may update this Privacy Policy periodically to reflect changes in our data practices, operational requirements, or applicable legal obligations. When material changes are made, boos77 will notify registered users via email, SMS, or in-platform notification prior to the changes taking effect. The updated Policy will be published at this URL with a revised "Last Updated" date.

Your continued use of the boos77 platform after a revised Privacy Policy has been posted constitutes your acknowledgement of and agreement to the updated terms. If you do not agree to the revised Policy, you must cease using boos77 and may request account closure via live chat support.

10.2 Contacting boos77 About Privacy

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by boos77, please contact us through the following channels:

• Live Chat: Available 24/7 via the boos77 Platform — average response time under 2 minutes. This is the fastest channel for urgent privacy concerns.
• Email: [email protected] — for formal data rights requests, please use the subject line "Privacy / Data Rights Request."

For complaints that are not resolved to your satisfaction through the boos77 support process, you have the right to file a complaint with the National Privacy Commission of the Philippines (NPC) at its official address or via its official website.