Your xx77 account holds your balance, your personal details, and your transaction history. Keeping it secure is partly our job and partly yours. Here's what we do on our end and what you can do on yours.
What xx77 Does for Your Security
Every login session on xx77 runs over an SSL-encrypted connection. This means the data travelling between your device and the platform — your credentials, your session tokens, everything — is encrypted in transit. You can verify this by checking for the padlock icon in your browser's address bar when you're on the site.
OTP-based two-factor authentication is built into the platform. If you choose to log in via OTP, a one-time PIN is sent to your registered Philippine mobile number. That PIN expires after a short period and cannot be reused. Even if someone had your password, they would also need physical access to your SIM card to get in.
xx77 also monitors login activity. Unusual access — logins from new devices or unfamiliar locations — may trigger additional verification steps to protect your account.
What You Can Do
Use a password that is unique to your xx77 account and not shared with any other site or app. A strong password mixes uppercase and lowercase letters, numbers, and symbols. Avoid using your name, birthday, or easy sequences like 123456.
Never share your password or OTP with anyone — including anyone claiming to be xx77 staff. xx77 will never ask you for your password or OTP via chat, SMS, or email. If anyone requests this, it is not a legitimate request from xx77.
If you're logging in on a shared or public device, uncheck "Remember me" and log out completely when you're done. Do not save your password in the browser on a shared device.