777xx Casino — Privacy Policy

This Privacy Policy applies to all personal data processed by 777xx in connection with the operation of the 777xx online gaming platform accessible at 777xx.co and its associated interfaces (the "Platform"). It applies to all current and former account holders, as well as any individual who visits the Platform without registering an account.

For the purposes of this Policy, "personal data" means any information from which a natural person can be directly or indirectly identified, as defined under Republic Act No. 10173, the Philippine Data Privacy Act of 2012 ("DPA"). "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, and deletion.

777xx acts as the Personal Information Controller in respect of all personal data collected from users of the Platform. Where 777xx engages third-party service providers to process personal data on its behalf, those providers act as Personal Information Processors and are bound by data processing agreements consistent with the DPA.

This Policy should be read alongside the 777xx Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference.

777xx collects the following categories of personal data from Platform users:

2.1 Identity and Registration Data

• Full legal name;
• Date of birth (to verify the 21+ minimum age requirement);
• Nationality and country of residence;
• Government-issued identification number and ID document scans (UMID, Passport, Driver's License, SSS, PhilHealth, or Voter's ID) for KYC verification;
• Photograph or selfie submitted for identity verification purposes.

2.2 Contact and Communication Data

• Email address;
• Philippine mobile number;
• Home or mailing address (required for enhanced verification);
• Records of all communications between you and the 777xx support team, including live chat transcripts and email correspondence.

2.3 Financial and Transaction Data

• GCash account number and transaction references;
• PayMaya account details and transaction references;
• Bank account details (BPI, BDO, Metrobank, UnionBank) for withdrawals;
• Deposit amounts, dates, and methods;
• Withdrawal requests, amounts, processing dates, and outcomes;
• Bonus credits received, wagering activity, and redemption history.

2.4 Gaming and Betting Activity Data

• Game session logs including titles played, bet amounts, results, and session duration;
• Sports bets placed, markets selected, odds accepted, and bet outcomes;
• Bingo room participation and ticket purchase history;
• Responsible gaming tool settings (deposit limits, session timers, self-exclusion status).

2.5 Technical and Device Data

• IP address and approximate geolocation at the time of access;
• Device type, operating system, and browser version;
• Cookie identifiers and session tokens;
• Platform access timestamps and session duration logs.

777xx collects personal data through the following mechanisms:

Under the Philippine Data Privacy Act, 777xx processes your personal data on the following legal bases:

• Contractual necessity: Processing that is required to perform the contract you enter into when you register a 777xx account — including account management, processing deposits and withdrawals, facilitating gameplay, and providing customer support;
• Legal obligation: Processing required to comply with applicable laws — including PAGCOR licensing requirements, anti-money laundering obligations under Republic Act No. 9160 as amended, age verification requirements, and tax reporting obligations;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement, where these interests are not overridden by your rights and interests;
• Consent: Where we rely on consent as the legal basis for specific processing activities (such as certain marketing communications), we will make this clear at the point of collection and provide a straightforward mechanism to withdraw consent at any time.

777xx uses your personal data for the following purposes:

5.1 Account and Platform Operations

• Creating and maintaining your 777xx account;
• Verifying your identity and confirming your eligibility to use the Platform (including the 21+ age requirement);
• Processing deposits through GCash, PayMaya, bank transfers, and other accepted payment methods;
• Processing withdrawal requests to your verified payment method;
• Administering the 777xx Rewards program and calculating tier status and cashback entitlements;
• Providing customer support and resolving disputes.

5.2 Regulatory Compliance

• Meeting PAGCOR reporting requirements applicable to licensed online gaming operators;
• Conducting anti-money laundering (AML) and counter-terrorist financing (CTF) screening;
• Responding to lawful requests from Philippine regulatory authorities and law enforcement;
• Maintaining records required under applicable financial and gaming regulations.

5.3 Security and Fraud Prevention

• Detecting and investigating suspected fraud, money laundering, or other prohibited conduct;
• Monitoring for unauthorized access to your account and Platform security threats;
• Verifying the legitimacy of payment transactions and identifying suspicious activity patterns.

5.4 Responsible Gaming

• Monitoring gaming behavior for signs of problem gambling as required by responsible gaming obligations;
• Enforcing deposit limits, loss limits, and self-exclusion orders you have voluntarily placed on your account;
• Complying with third-party self-exclusion registers applicable in the Philippines.

5.5 Marketing and Promotions (Consent-Based)

Where you have provided consent, 777xx may use your contact information to send you information about promotions, bonuses, new game launches, and special events on the 777xx Platform. You may withdraw consent for marketing communications at any time by contacting 777xx support or using the unsubscribe mechanism in any marketing email you receive.

777xx may share your personal data with the following categories of recipients:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and cryptocurrency processors — solely to execute your deposit and withdrawal transactions;
• Identity verification providers: Third-party KYC service providers engaged to verify your identity documents and fraud risk profile;
• Game content providers: JILI, PG Soft, Pragmatic Play, and other certified game studios may receive aggregated gameplay data for game certification and audit purposes; individually identifiable player data is not shared with game studios for marketing purposes;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement authorities as required by applicable Philippine law;
• Platform service providers: Cloud hosting, cybersecurity, customer support platform, and analytics service providers engaged to operate the Platform infrastructure, all bound by data processing agreements;
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to confidentiality obligations.

In the event that 777xx undergoes a merger, acquisition, or sale of its business or assets, personal data held about Platform users may be transferred to the acquiring entity, subject to the acquiring entity assuming the data protection obligations under this Policy.

777xx uses cookies and similar tracking technologies to operate the Platform, maintain session states, prevent fraud, and analyze Platform usage patterns. By using the 777xx Platform, you consent to the use of cookies as described in this section.

7.1 Types of Cookies Used

You may configure your browser to block or delete cookies. Note that blocking strictly necessary cookies will prevent the Platform from functioning correctly — you may be unable to log in or complete transactions. Blocking analytics or functional cookies will not affect core Platform access.

777xx retains personal data for the following periods:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized. Anonymized data — from which no individual can be identified — may be retained indefinitely for statistical analysis and Platform improvement purposes.

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules, you have the following rights in respect of your personal data held by 777xx:

To exercise any of these rights, contact the 777xx Data Protection Officer using the details in Section 16. 777xx will respond to your request within thirty (30) calendar days. We may ask you to provide proof of identity before processing your request.

777xx implements the following technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction:

• Encryption in transit: All data transmitted between your device and the 777xx Platform is protected by 256-bit TLS/SSL encryption;
• Encryption at rest: Sensitive personal data — including KYC documents, financial records, and identity information — is encrypted in storage;
• Access controls: Access to personal data is restricted to authorized 777xx personnel and processors on a need-to-know basis, using role-based access control and multi-factor authentication for administrative systems;
• Intrusion detection: 777xx systems are monitored for unauthorized access attempts and suspicious activity through automated intrusion detection systems;
• Security testing: 777xx conducts regular security assessments and vulnerability testing of its Platform infrastructure;
• Incident response: 777xx maintains a documented data breach incident response procedure aligned with DPA notification requirements.

While 777xx takes all reasonable precautions to secure your personal data, no system is completely impenetrable. You are responsible for maintaining the security of your own login credentials and for promptly notifying 777xx of any suspected unauthorized access to your account.

If 777xx becomes aware that personal data has been collected from a person under the age of 21, that account will be suspended immediately, all associated data will be handled in accordance with applicable law, and any balance held in the account will be dealt with in compliance with PAGCOR requirements.

If you believe a person under 21 has registered a 777xx account, please notify the 777xx Data Protection Officer immediately using the contact details in Section 16.

The primary data processing infrastructure for the 777xx Platform is located within data centers serving the Asia-Pacific region. Some third-party service providers engaged by 777xx — including cloud infrastructure providers and certain KYC verification services — may process your personal data in data centers located outside the Philippines.

Where personal data is transferred to processors outside the Philippines, 777xx ensures that such transfers are governed by appropriate contractual safeguards consistent with the requirements of the Philippine Data Privacy Act and the National Privacy Commission's guidance on cross-border data transfers. This includes data processing agreements that require overseas processors to apply data protection standards equivalent to those required under Philippine law.

The 777xx Platform integrates with third-party services including payment processors, game content providers, and identity verification services. While 777xx selects these providers carefully and binds them to data processing agreements, each third party also operates under its own privacy policy in respect of data you provide directly to them.

777xx is not responsible for the privacy practices of third-party game developers, payment processors, or other service providers beyond what is specified in the data processing agreements between 777xx and those parties. We recommend that you review the privacy policies of any third-party services you interact with independently of 777xx.

The 777xx Platform does not contain links to external websites. No external hyperlinks appear within the Platform pages.

777xx may amend this Privacy Policy from time to time to reflect changes in applicable law, changes in our data processing practices, or other operational reasons. Where changes are material, 777xx will provide advance notice by posting the updated policy on the Platform and, where practicable, by notifying users through their registered email address.

The "Last updated" date at the top of this Policy reflects the most recent revision. Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgment of the updated Policy. If you do not accept the updated Policy, you should cease using the Platform and contact 777xx support to request account closure.

In the event of a personal data breach that poses a real risk of serious harm to affected data subjects, 777xx will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03 on personal data breach management.

Where the breach is likely to result in a high risk to the rights and freedoms of affected users — for example, unauthorized access to financial data, identity documents, or login credentials — 777xx will also notify affected users directly through their registered email address without undue delay. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps 777xx is taking to address and mitigate the breach.

Platform: 777xx
Data Protection Officer Contact: [email protected] (mark the subject line: Privacy / DPO Request)
Live Support: Available 24/7 through the Platform live chat — for account-related data queries, identify yourself and specify your request
Supervisory Authority: National Privacy Commission of the Philippines (NPC)

You have the right to lodge a complaint with the National Privacy Commission if you believe that 777xx has processed your personal data in a manner inconsistent with the Philippine Data Privacy Act of 2012. The NPC provides formal complaint mechanisms for Philippine data subjects.

This Privacy Policy is also linked from the 777xx Terms & Conditions and is incorporated into those Terms by reference. For questions about responsible gaming data — including how self-exclusion data is managed — see the Responsible Gaming page.