xx777 Privacy Policy

1. Introduction

xx777 ("xx777," "we," "us," or "our") operates the online casino and sports betting platform accessible at xx777.lat (the "Platform"). As the personal information controller of data collected through the Platform, xx777 is committed to processing your personal data lawfully, fairly, transparently, and in strict compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and the applicable issuances of the National Privacy Commission (NPC) of the Philippines.

This Privacy Policy ("Policy") applies to all users of the Platform, including registered Players, prospective registrants who browse without completing registration, and any individual who contacts xx777 for support purposes. It covers data collected directly by xx777, data collected automatically through the Platform, and data received from third-party sources where applicable.

By accessing or using the xx777 Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you should cease using the Platform immediately. For Players who have completed account registration, continued use of the Platform following notification of material changes to this Policy constitutes acceptance of the revised terms.

2. Personal Data We Collect

xx777 collects personal data that is necessary and proportionate to the purposes described in this Policy. The categories of data we collect include:

xx777 does not collect sensitive personal information as defined under RA 10173 (such as health records, political opinions, or religious beliefs) unless required by a specific regulatory obligation, in which case such collection will be handled with heightened safeguards.

3. How We Collect Personal Data

3.1 Directly from You

The majority of personal data xx777 holds is provided directly by you during account registration, KYC verification, financial transactions, support interactions, and promotional participation. You provide this data voluntarily; however, certain data (such as identity information for KYC) is required to comply with legal obligations, and failure to provide it may prevent us from offering full Platform services.

3.2 Automatically Through the Platform

When you access and use the xx777 Platform, technical data is collected automatically through server logs, cookies, and similar tracking technologies. This includes your IP address, device identifiers, session timestamps, pages visited, games played, and interaction patterns within the Platform interface. This data is collected to maintain Platform security, improve service quality, detect fraud, and ensure compliance with geographic access restrictions.

3.3 From Third Parties

xx777 may receive personal data about you from third-party sources where permitted by law, including:

• Payment providers (GCash, Maya, BPI, BDO, Metrobank) confirming transaction status and account verification information;
• Identity verification service providers used in the KYC process;
• Fraud prevention and anti-money laundering screening services;
• Regulatory databases maintained by PAGCOR or other Philippine gaming authorities, including self-exclusion registers.

4. Purposes of Processing

xx777 processes your personal data for the following purposes:

• Account creation and management: Registering your account, authenticating your identity at login, maintaining your account settings and preferences, and managing your VIP tier status.
• KYC and identity verification: Verifying your identity and age (21+) as required under applicable Philippine gaming regulations and anti-money laundering law (RA 9160, as amended).
• Processing financial transactions: Facilitating deposits to and withdrawals from your xx777 wallet via GCash, Maya, and Philippine bank transfers.
• Providing gaming services: Delivering game content, recording and settling bets, calculating and crediting winnings, and maintaining your game and transaction history.
• Fraud prevention and security: Detecting and investigating suspicious activity, protecting against unauthorized account access, and complying with anti-money laundering and counter-terrorism financing obligations.
• Regulatory compliance: Fulfilling record-keeping obligations under Philippine gaming regulations, responding to lawful requests from PAGCOR, the NPC, AMLC, and other competent authorities.
• Customer support: Responding to your inquiries, resolving disputes, and providing assistance through live chat and email support channels.
• Responsible gaming: Administering deposit limits, session timers, loss limits, and self-exclusion periods requested by or applied to your account.
• Platform improvement: Analyzing aggregated usage patterns to improve Platform performance, user experience, game catalog, and feature design.
• Marketing communications: Sending promotional notifications about bonuses, new games, and Platform updates, subject to your communication preferences and applicable opt-in requirements.

5. Legal Bases for Processing

Under the Data Privacy Act of 2012, xx777 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the xx777 Player Agreement (Terms & Conditions), including account management, deposit processing, game delivery, and withdrawal settlement.
• Legal obligation: Processing required to comply with Philippine gaming regulations, anti-money laundering law (RA 9160), the Data Privacy Act, and lawful directions from PAGCOR, AMLC, the NPC, and other regulatory bodies.
• Legitimate interests: Processing for fraud detection, Platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your fundamental rights.
• Consent: Processing for optional marketing communications, where you have provided explicit opt-in consent. You may withdraw this consent at any time through your account notification settings without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

xx777 does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. We share your personal data only in the following circumstances and only to the extent necessary for the relevant purpose:

6.1 Service Providers and Processors

xx777 engages third-party service providers acting as personal information processors under binding data processing agreements. These include payment processors (GCash/Maya API integrations, bank transfer gateways), KYC identity verification providers, fraud and AML screening providers, cloud hosting and infrastructure providers, customer support platform operators, and game software providers whose games are integrated into the Platform lobby.

6.2 Regulatory and Law Enforcement Authorities

xx777 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, and other competent authorities where required to do so by law, court order, or regulatory direction. xx777 will, where legally permissible, notify you of such disclosure.

6.3 Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring involving xx777, personal data held about registered Players may be transferred to the successor entity, subject to the same privacy protections described in this Policy. Players will be notified of any such transfer in advance.

7. International Data Transfers

The xx777 Platform is primarily operated for Filipino players within the Philippines. Where personal data is processed by service providers or game software infrastructure located outside the Philippines, xx777 ensures that appropriate safeguards are in place to protect the data in accordance with the Data Privacy Act of 2012 and NPC regulations on cross-border data transfers.

Such safeguards include contractual clauses requiring overseas processors to maintain data protection standards substantially equivalent to those required under Philippine law, and requiring the processor to notify xx777 of any personal data breach affecting Filipino Player data in a timely manner.

8. Data Retention

xx777 retains your personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required under anti-money laundering regulations.
• Financial transaction data: Retained for a minimum of five (5) years from the date of the transaction, in compliance with RA 9160 (AMLA) record-keeping requirements.
• Gaming data: Retained for a minimum of three (3) years to support dispute resolution and regulatory inquiries.
• Customer support communications: Retained for two (2) years from the date of the last communication in the relevant support thread.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, at which point marketing-specific data is suppressed from further use.
• Technical and log data: Retained for twelve (12) months from collection for security monitoring purposes, after which it is anonymized or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted, anonymized, or rendered permanently inaccessible using industry-standard data destruction methods.

9. Cookies and Tracking Technologies

The xx777 Platform uses cookies and similar tracking technologies to operate core Platform functions, maintain your authenticated session, and analyze usage patterns for service improvement. The categories of cookies used include:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your visit. These cannot be disabled without breaking core functionality.
• Functional cookies: Remember your Platform preferences such as language settings, display preferences, and last-played games. These improve your experience but are not essential to Platform operation.
• Analytics cookies: Collect aggregated, anonymized data about how users interact with the Platform — pages visited, time spent, click patterns — to inform product improvements. No individual user is identified through analytics data.
• Security cookies: Used for fraud detection, bot prevention, and session integrity verification.

xx777 does not use third-party advertising or behavioral retargeting cookies. You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012 and its IRR, you have the following rights with respect to your personal data held by xx777:

• Right to be informed: The right to be notified of how your personal data is collected, used, stored, and shared — which is the purpose of this Policy.
• Right of access: The right to request a copy of the personal data xx777 holds about you, together with information about how it is being processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. For most account data, you can update this directly through your account settings.
• Right to erasure or blocking: The right to request deletion or blocking of your personal data where it is no longer necessary for the purpose collected, where you have withdrawn consent (where consent was the basis), or where processing violates your rights. This right is subject to xx777's regulatory retention obligations, which may require us to retain certain data regardless of your request.
• Right to data portability: The right to receive your personal data in a structured, commonly used format for transfer to another controller, where technically feasible.
• Right to object: The right to object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe xx777 has violated your privacy rights.

To exercise any of the above rights, contact xx777's Data Protection Officer via the support channels listed in Section 14. xx777 will respond to all valid requests within fifteen (15) business days of receipt.

11. Security Measures

xx777 implements technical and organizational measures designed to protect your personal data against unauthorized access, disclosure, alteration, destruction, or loss. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and xx777's servers;
• Encrypted storage of passwords using industry-standard one-way hashing (bcrypt);
• Access controls limiting employee access to personal data on a strict need-to-know basis;
• Two-factor authentication (2FA) options for Player accounts;
• Regular security audits and penetration testing of Platform infrastructure;
• Incident response procedures including mandatory notification of the NPC in the event of a personal data breach affecting your rights.

12. Children's Privacy and Age Restriction

All new account registrations are subject to KYC age verification using a valid Philippine government-issued identification document. Where xx777 discovers or has reasonable grounds to believe that a registered account belongs to an individual under 21 years of age, xx777 will immediately close the account, void all associated transactions and balances, and delete the personal data of the underage individual to the extent not required for regulatory reporting purposes.

Parents and guardians who believe a minor has accessed the Platform using their identity or payment credentials should contact xx777 Support immediately via live chat.

13. Changes to This Privacy Policy

xx777 may update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements, Platform features, or applicable law. Material changes — those that significantly affect your privacy rights or how your data is processed — will be communicated to registered Players via the Platform's in-account notification system or by email at least seven (7) days before the change takes effect.

Non-material amendments (such as clarifications, formatting updates, or typographical corrections) may take effect upon publication without advance notice. The "Last updated" date at the top of this Policy reflects the most recent revision. We recommend that you review this Policy periodically to remain informed about how xx777 protects your data.

14. Contact Information — Data Protection Officer

For any privacy-related inquiries, data subject access requests, complaints, or to exercise your rights under this Policy and the Data Privacy Act, please contact the xx777 Data Protection Officer through the following channels:

• Live Chat: Available 24/7 within your logged-in xx777 account. State that your inquiry is privacy-related and it will be escalated to the DPO team.
• Email: [email protected] with subject line "Privacy Request – [Your Username]"

xx777 is committed to responding to all data privacy requests within fifteen (15) business days. Complex requests involving large volumes of data or requiring consultation with regulatory authorities may take up to thirty (30) days, in which case xx777 will notify you of the expected timeline.