Privacy Policy

01 Introduction

This Privacy Policy ("Policy") is issued by 777play ("777play," "we," "us," "our") and applies to all personal data collected through the 777play website, mobile platform, and any related services (collectively, the "Platform"). This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy.

777play is committed to protecting the privacy and personal data of all users of the Platform, including registered players, prospective players, and visitors. We process personal data in accordance with applicable Philippine data protection laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as any other applicable legislation.

By accessing or using the 777play Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

02 Data We Collect

777play collects personal data from you in the following ways: directly from you when you register an account or interact with the Platform; automatically when you use the Platform; and from third parties such as payment processors and identity verification providers. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name;
• Date of birth (to verify you are 21 years of age or older);
• Residential address (including barangay, city, province, and postal code);
• Email address;
• Mobile phone number;
• Username and encrypted password;
• Government-issued ID details (e.g., Philippine passport number, driver's licence number, SSS/UMID number) submitted during KYC verification.

2.2 Financial Data

• GCash or PayMaya account number (last four digits only, for verification purposes);
• Bank account details (BPI, BDO, Metrobank, or other linked bank) submitted for withdrawal processing;
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method used;
• Bonus and promotional activity records.

2.3 Gaming Activity Data

• Game session logs, including games played, bet amounts, win/loss records, and session duration;
• Responsible gaming tool settings (deposit limits, loss limits, self-exclusion status);
• Customer support interaction records.

2.4 Technical & Usage Data

• IP address and approximate geolocation;
• Device type, operating system, and browser type;
• Pages visited, features used, and time spent on the Platform;
• Cookie identifiers and similar tracking data (see Section 6).

03 How We Use Your Data

777play uses the personal data we collect for the following purposes:

• Account creation and management: To register your 777play account, verify your identity, and manage your account settings;
• Age verification: To confirm that you are at least 21 years of age before permitting access to gaming services, as required under applicable Philippine gaming regulations;
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods;
• KYC and AML compliance: To verify your identity and monitor transactions in accordance with anti-money laundering obligations;
• Platform operation and improvement: To deliver, maintain, and improve the 777play Platform, including personalising your gaming experience;
• Responsible gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits and self-exclusion;
• Customer support: To respond to your enquiries, complaints, and support requests;
• Marketing and promotions: To send you information about 777play bonuses, promotions, and new games, where you have consented to receive such communications;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, and other prohibited conduct;
• Legal compliance: To comply with applicable laws, regulations, and orders from regulatory authorities.

04 Legal Basis for Processing

777play processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you (i.e., to operate your 777play account and provide gaming services);
• Legal obligation: Processing required to comply with applicable laws, including KYC, AML, and gaming regulatory requirements;
• Legitimate interests: Processing necessary for 777play's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights;
• Consent: Processing based on your freely given, specific, and informed consent, including for direct marketing communications. You may withdraw your consent at any time by contacting our support team.

05 Data Sharing & Disclosure

777play does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to process your deposits and withdrawals;
• Identity verification providers: Third-party KYC and AML service providers engaged to verify your identity and screen transactions;
• Game software providers: Licensed game developers and providers whose games are available on the 777play Platform, to the extent necessary to deliver game services;
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers engaged to operate and secure the Platform;
• Regulatory authorities: Philippine gaming regulators and law enforcement agencies, where required by law or regulatory order;
• Professional advisers: Lawyers, auditors, and other professional advisers engaged by 777play in connection with its business operations.

All third parties with whom 777play shares personal data are required to process that data in accordance with applicable data protection laws and 777play's data processing requirements.

06 Cookies & Tracking Technologies

777play uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. We use the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function, including session management and security. These cannot be disabled.
• Functional cookies: Remember your preferences (such as language settings and responsible gaming tool configurations) to improve your experience.
• Analytics cookies: Collect anonymised data about how players use the Platform, helping us identify areas for improvement.
• Marketing cookies: Used to deliver relevant promotions and measure the effectiveness of our marketing campaigns, where you have consented.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For more information, refer to the cookie settings available within your 777play account.

07 Data Retention

777play retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, and reporting requirements. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML and gaming regulatory requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Gaming activity logs: Retained for a minimum of three (3) years;
• Customer support records: Retained for two (2) years from the date of the interaction;
• Marketing consent records: Retained until you withdraw your consent or for three (3) years from the date of last interaction, whichever is earlier.

After the applicable retention period has expired, 777play will securely delete or anonymise your personal data in accordance with its data destruction procedures.

08 Data Security

777play implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 777play Platform;
• Encryption at rest for sensitive personal and financial data stored on our servers;
• Multi-factor authentication options for player accounts;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing conducted by independent cybersecurity specialists;
• Intrusion detection systems and 24/7 security monitoring of the Platform infrastructure.

While 777play takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 777play will notify you and the relevant regulatory authority in accordance with applicable law.

09 Your Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by 777play:

• Right to be informed: The right to be told what personal data we collect and how we use it — which is the purpose of this Policy;
• Right of access: The right to request a copy of the personal data we hold about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation;
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13. We will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request.

10 Children's Privacy

The 777play Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. Age verification is conducted on all accounts as part of our KYC process, and any account found to belong to a person under 21 will be immediately closed and all associated data deleted, except where retention is required by law.

If you believe that a person under the age of 21 has registered an account on the 777play Platform, please contact our support team immediately at [email protected] so that we can take appropriate action.

11 Third-Party Links

The 777play Platform may contain links to third-party websites or services. This Privacy Policy applies solely to the 777play Platform and does not cover the privacy practices of any third-party websites. 777play is not responsible for the content or privacy practices of any third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

12 Changes to This Policy

777play reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players by email and by posting a prominent notice on the Platform. The revised Policy will take effect from the date specified in the notice.

We encourage you to review this Policy periodically to stay informed about how 777play protects your personal data. Your continued use of the Platform following the posting of any changes constitutes your acceptance of the revised Policy.

13 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the 777play Data Protection Officer (DPO):

• Email: [email protected]
• Business & Legal: [email protected]
• Live Chat: Available 24/7 on the 777play Platform — average response time under 5 minutes

All data-related requests should clearly state your registered account name, the nature of your request, and any relevant details to allow us to process your request efficiently. We will acknowledge receipt of your request within five (5) business days and provide a full response within thirty (30) days.