Privacy Policy

This Privacy Policy ("Policy") applies to all personal data collected, processed, stored, and shared by x777 app Casino ("x777 app," "we," "us," or "our") through the website x777app.club, the x777 app mobile application, and any related services (collectively, the "Platform").

x777 app is committed to handling your personal data responsibly and in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). Where applicable, we also observe internationally recognized data protection principles.

By registering an account, accessing the Platform, or using any x777 app service, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please discontinue use of the Platform immediately.

x777 app Casino is the personal information controller (PIC) for all personal data collected through the Platform, as defined under the Data Privacy Act of 2012. As PIC, x777 app determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

For all data privacy inquiries, requests, and complaints, you may contact our designated Data Protection Officer (DPO) at the contact details provided in Section 13 of this Policy.

x777 app collects the following categories of personal data:

3.1 Data You Provide Directly

• Registration Data: Full name, date of birth, mobile number, email address, username, and password (stored in hashed form).
• Identity Verification (KYC) Data: Government-issued ID (Philippine passport, driver's license, SSS/UMID card, PhilSys national ID), selfie/photo for liveness verification, and proof of address.
• Financial Data: GCash account number, PayMaya/Maya account number, bank account details (BPI, BDO, Metrobank, UnionBank, etc.), and debit card details (card number, expiry, CVV — processed by our PCI-DSS compliant payment processor; x777 app does not store raw card data).
• Source of Funds: Documentation provided for anti-money laundering (AML) compliance purposes.
• Support Communications: Messages, chat transcripts, and attachments submitted to x777 app customer support.

3.2 Data Collected Automatically

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, games played, session duration, bet history, transaction history, and navigation patterns within the Platform.
• Location Data: Approximate geographic location derived from IP address, used for regulatory compliance and fraud prevention.
• Cookies & Tracking Technologies: See Section 9 for full details.

3.3 Data from Third Parties

• Identity verification results from our KYC/AML service providers.
• Transaction confirmation data from payment processors (GCash, PayMaya, banks).
• Fraud risk scores from fraud detection service providers.

x777 app processes your personal data for the following purposes:

x777 app does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or with your explicit consent.

Under the Data Privacy Act of 2012, x777 app processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you (account management, payment processing, game provision).
• Legal Obligation: Processing required to comply with applicable laws, including PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our interests do not override your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit, informed consent. You may withdraw consent at any time.

x777 app does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment Processors: GCash, PayMaya/Maya, BPI, BDO, Metrobank, UnionBank, and other Philippine banks and payment service providers, for the purpose of processing deposits and withdrawals.
• KYC/AML Service Providers: Third-party identity verification and anti-money laundering screening providers.
• Fraud Detection Providers: Service providers that help x777 app detect and prevent fraudulent activity on the Platform.
• Game Software Providers: Licensed game studios and live dealer operators whose games are available on the Platform. These providers may receive limited gameplay data necessary to operate their games.
• IT Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity service providers that support the operation of the Platform.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where required by law or court order.
• Professional Advisors: Legal counsel, auditors, and accountants, subject to professional confidentiality obligations.

x777 app retains your personal data for as long as necessary to fulfill the purposes for which it was collected, and as required by applicable law:

• Account Data: Retained for the duration of your account and for a minimum of 5 years after account closure, in compliance with PAGCOR record-keeping requirements and AMLA obligations.
• KYC/Identity Documents: Retained for a minimum of 5 years after the end of the business relationship, as required by the Anti-Money Laundering Act.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Support Communications: Retained for 2 years from the date of the last communication, unless a longer period is required for dispute resolution.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever is earlier.

Upon expiry of the applicable retention period, x777 app will securely delete or anonymize your personal data in accordance with our data disposal procedures.

x777 app implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and the x777 app Platform is encrypted using TLS 1.2 or higher (256-bit SSL). Sensitive data at rest is encrypted using AES-256.
• Access Controls: Access to personal data is restricted to authorized x777 app personnel on a strict need-to-know basis. All access is logged and audited.
• Two-Factor Authentication: x777 app offers 2FA for player accounts and requires it for all administrative access to systems containing personal data.
• PCI-DSS Compliance: Payment card data is processed by PCI-DSS Level 1 compliant payment processors. x777 app does not store raw card data on its own systems.
• Penetration Testing: The Platform undergoes regular security assessments and penetration testing by independent cybersecurity firms.
• Incident Response: x777 app maintains a data breach response plan. In the event of a personal data breach that poses a real risk to your rights, x777 app will notify the National Privacy Commission and affected individuals within 72 hours of discovery, as required by NPC Circular 16-03.

x777 app uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyze usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in during your visit. These cannot be disabled.
• Functional Cookies: Remember your preferences (e.g., language, display settings) to provide a personalized experience.
• Analytics Cookies: Collect aggregated, anonymized data about how users interact with the Platform, used to improve performance and user experience.
• Marketing Cookies: Used to deliver relevant promotional content. These are only set with your explicit consent.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. For marketing cookies, you may withdraw consent at any time through your account settings.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by x777 app:

• Right to Be Informed: The right to know what personal data x777 app collects, how it is used, and with whom it is shared — as set out in this Policy.
• Right of Access: The right to request a copy of the personal data x777 app holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure / Right to be Forgotten: The right to request deletion of your personal data, subject to x777 app's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe x777 app has violated your data privacy rights. The NPC can be reached at privacy.gov.ph.

To exercise any of these rights, please submit a written request to our Data Protection Officer using the contact details in Section 13. x777 app will respond to all verified requests within 15 business days. We may require proof of identity before processing your request.

The x777 app Platform is strictly intended for users who are 21 years of age or older, in accordance with Philippine gaming regulations. x777 app does not knowingly collect personal data from persons under 21 years of age.

If x777 app discovers that personal data has been collected from a person under 21, that account will be immediately suspended, all associated data will be deleted, and any deposits will be returned to the originating payment method after verification.

If you are a parent or guardian and believe your child has registered on the Platform, please contact our support team immediately so we can take appropriate action.

x777 app reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, x777 app will notify registered users via email or an in-platform notification at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically.

For all data privacy inquiries, requests to exercise your rights, or complaints regarding x777 app's handling of your personal data, please contact our designated Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you are not satisfied with x777 app's response to your data privacy concern.