pp777 Privacy Policy

This Privacy Policy ("Policy") is issued by pp777 ("pp777", "we", "us", "our"), the operator of the online gaming platform accessible at https://pp777.bio (the "Platform"). It applies to all personal data processed in connection with your registration, use of Platform services, participation in promotions, and any communication with pp777.

pp777 is committed to handling personal data responsibly and in accordance with the Republic Act No. 10173 — the Data Privacy Act of 2012 of the Philippines (the "DPA") — and the implementing rules and regulations issued by the National Privacy Commission (NPC). Where applicable, this Policy also reflects the compliance obligations arising from PAGCOR-regulated gaming operations.

By creating a pp777 account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of this Policy, you should discontinue your use of the Platform. For any privacy-related queries, the contact details in Section 15 apply.

For the purposes of the Data Privacy Act of 2012 and this Policy, pp777 acts as the Personal Information Controller in respect of personal data collected through the Platform. This means pp777 determines the purposes for which and the manner in which your personal data is processed.

Where pp777 engages third-party service providers — such as payment processors, game software providers, identity verification services, or IT infrastructure providers — who process personal data on pp777's behalf, such parties act as Personal Information Processors and are bound by data processing agreements that restrict their use of your data to the specific, documented purposes for which they were engaged.

pp777 collects the following categories of personal data from registered users and visitors to the Platform:

3.1 Identity & Registration Data

• Full legal name as it appears on a government-issued identification document;
• Date of birth (collected to verify the mandatory 21+ age requirement);
• Gender;
• Nationality and country of residence;
• Username chosen by the user at registration.

3.2 Contact Data

• Email address;
• Philippine mobile number (used for account login, OTP verification, and SMS notifications);
• Residential address (collected during KYC verification).

3.3 Identity Verification (KYC) Data

• Copies or photographs of government-issued identity documents (e.g., PhilSys National ID, LTO Driver's Licence, Philippine Passport, UMID, Voter's ID);
• Selfie photograph for liveness and document matching purposes;
• Proof of address documentation where enhanced verification is required.

3.4 Financial Data

• Payment method identifiers (e.g., GCash mobile number, Maya account number, bank account number) — not full card or account credentials;
• Transaction history including deposits, withdrawals, and bonus credits;
• Source of funds documentation where required by anti-money laundering obligations.

3.5 Gaming Activity Data

• Game session records, wager amounts, game outcomes, and win/loss history;
• Responsible gaming settings configured on your account (deposit limits, session reminders, self-exclusion status);
• Bonus and promotion participation history.

3.6 Technical & Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, browser type and version;
• Session timestamps, login and logout times;
• Platform navigation behaviour and feature usage patterns (aggregated where possible).

3.7 Communication Data

• Records of communications with pp777 customer support (live chat transcripts, emails);
• Survey and feedback responses where voluntarily provided.

pp777 collects personal data through the following methods:

• Directly from you — during account registration, KYC submission, payment processing, responsible gaming settings configuration, and customer support interactions;
• Automatically — via cookies, web beacons, and server logs that record technical and usage data when you access the Platform (see Section 7 for cookie details);
• From third parties — from KYC and identity verification service providers engaged to validate identity documents; from payment processors to confirm transaction status; from fraud prevention and anti-money laundering screening services; and from analytics providers that process aggregated, anonymised usage data.

All data collected from third parties is processed in accordance with those parties' own privacy policies and is shared with pp777 solely to the extent necessary for the stated purposes. pp777 does not purchase personal data from data brokers.

pp777 processes personal data only for specific, legitimate purposes. The table below summarises those purposes and the corresponding legal basis under the Data Privacy Act of 2012:

pp777 does not process your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where such processing is expressly required by applicable regulations (e.g., automated AML screening).

pp777 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Personal data is shared only in the following circumstances:

6.1 Service Providers (Personal Information Processors)

pp777 engages service providers who process personal data solely on pp777's documented instructions. These include: KYC and identity verification platforms; payment processors and e-wallet providers (including GCash, Maya, BPI, BDO, and Metrobank integrations); IT infrastructure and cloud hosting providers; fraud prevention and AML screening services; and customer support platform providers. All such providers are bound by contractual data processing terms consistent with the DPA.

6.2 Regulatory & Legal Authorities

pp777 may disclose personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), law enforcement agencies, or courts of competent jurisdiction where disclosure is required by applicable Philippine law, court order, regulatory directive, or is necessary to protect the legitimate rights of pp777 or third parties.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a material portion of pp777's business, personal data held by pp777 may be transferred as part of that transaction. Any such transfer will be subject to appropriate confidentiality obligations and this Privacy Policy will continue to apply to transferred data.

6.4 With Your Consent

pp777 may share personal data with third parties in circumstances not covered above where you have given express prior written consent to such sharing. You may withdraw consent at any time, subject to applicable legal constraints.

pp777 uses cookies and similar technologies on the Platform to enable core functionality, analyse usage, and where applicable, deliver relevant communications to users who have opted in. A cookie is a small text file placed on your device by a web server.

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will prevent the Platform from functioning correctly. For full guidance on managing cookies on your Philippine mobile device, consult your browser's help documentation.

pp777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. The following retention periods apply as a general guide:

• Account data (active accounts): Retained for the duration of the account relationship and until all associated obligations are fulfilled;
• KYC and identity documents: Retained for a minimum of five (5) years following account closure, in accordance with Anti-Money Laundering Act requirements applicable to PAGCOR-regulated operators;
• Financial transaction records: Retained for a minimum of five (5) years following the date of the transaction, as required by applicable AML and tax regulations;
• Gaming activity records: Retained for a minimum of three (3) years following account closure for dispute resolution and regulatory compliance purposes;
• Customer support communications: Retained for two (2) years from the date of the final communication in a support thread;
• Technical logs: Retained for up to twelve (12) months for security and fraud investigation purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised using methods appropriate to the data type. Anonymised, aggregated data derived from personal data may be retained indefinitely for statistical and analytical purposes without identifying any individual user.

pp777 implements technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include, but are not limited to:

• Encryption: All data transmitted between your device and the Platform is encrypted using Transport Layer Security (TLS). Personal data stored at rest in pp777's systems is encrypted using industry-standard encryption methods;
• Access Controls: Access to personal data within pp777's internal systems is restricted on a need-to-know basis and governed by role-based access controls. All staff with access to personal data receive appropriate data privacy training;
• Multi-Factor Authentication: New device logins on the Platform trigger SMS OTP verification to protect accounts from unauthorised access;
• Intrusion Detection: pp777's infrastructure is monitored for unusual access patterns and potential security incidents on a continuous basis;
• Third-Party Audits: Security controls are subject to periodic review to ensure they remain effective against current threat landscapes.

While pp777 applies reasonable and appropriate security measures, no data transmission over the internet or electronic storage system can be guaranteed as absolutely secure. In the event of a personal data breach that poses a significant risk to your rights and freedoms, pp777 will notify affected users and the National Privacy Commission in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular 16-03.

As a data subject under the Data Privacy Act of 2012, you have the following rights in respect of personal data held about you by pp777:

• Right to be Informed: You have the right to be informed about how your personal data is collected and processed — which this Policy fulfils;
• Right of Access: You may request a copy of the personal data pp777 holds about you, together with information about how it is being processed;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held about you;
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations;
• Right to Data Portability: You may request that personal data provided by you to pp777 be transmitted to you or to another controller in a structured, commonly used, and machine-readable format, where technically feasible;
• Right to Object: You may object to the processing of your personal data where pp777 relies on legitimate interest as the legal basis, subject to pp777's ability to demonstrate compelling grounds for the processing;
• Right to Withdraw Consent: Where pp777 processes your data on the basis of consent (e.g., for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe pp777 has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the above rights, please contact pp777 using the details in Section 15. pp777 will respond to all verified data subject requests within fifteen (15) business days of receipt, or within such extended period as may be required by the complexity of the request, with notification to you of any such extension.

The pp777 Platform is strictly intended for adults aged 21 years and above in accordance with Philippine gaming regulations. pp777 does not knowingly collect, solicit, or process personal data from persons under the age of 21. If pp777 discovers that personal data has been collected from a person below the age of 21, the associated account will be immediately suspended and all personal data related to that account will be deleted or returned to the depositing payment source to the extent technically possible.

If you are a parent or guardian and have reason to believe that a person in your care has created a pp777 account or provided personal data to the Platform, please contact us immediately using the contact details in Section 15.

The pp777 Platform may contain links to third-party websites or services for informational or functional purposes (for example, links to the PAGCOR website or payment provider portals). pp777 is not responsible for the privacy practices of any third-party website, and this Policy does not apply to data collected by those sites. You are encouraged to review the privacy policies of any third-party website you access via a link on the Platform.

Game software provided by third-party game studios integrated into the Platform is operated under those studios' certified and audited systems. Any personal data processed directly by game software providers in connection with game delivery is governed by their respective agreements with pp777, which require compliance with applicable privacy standards.

pp777 primarily processes personal data of Filipino players within the Philippines or through service providers that maintain data infrastructure in compliance with Philippine data protection standards. In circumstances where personal data is processed or stored outside of the Philippines — such as by globally hosted cloud infrastructure providers or internationally based KYC platforms — pp777 ensures that:

• Such transfers are governed by contractual arrangements that impose data protection obligations equivalent to those required under the DPA;
• The recipient country or organisation provides an adequate level of data protection as assessed by the National Privacy Commission or by reference to comparable international standards;
• Cross-border transfers are limited to the minimum necessary and are documented in pp777's data processing records.

pp777 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, NPC guidance, operational practices, or the services offered on the Platform. Material amendments will be communicated to registered users via in-platform notification and/or email to the registered address at least seven (7) calendar days before the effective date of the change.

The date of the most recent review appears at the top of this Policy. Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgement of the revised Policy. If any amendment materially reduces your rights or introduces new uses of your personal data that require consent, pp777 will seek fresh consent where required by the DPA.

For all privacy-related enquiries, data subject rights requests, or complaints regarding pp777's handling of your personal data, please contact us through the following:

• Data Privacy Email: [email protected] (plain text — not a clickable link)
• In-Platform Live Chat: Available 24/7 after logging in to your pp777 account
• Subject Line for Data Requests: Please use "Data Privacy Request — [Your Username]" for faster routing
• Response Commitment: pp777 aims to acknowledge all privacy requests within two (2) business days and to provide a substantive response within fifteen (15) business days

If you are dissatisfied with pp777's response to a privacy complaint, you have the right to refer the matter to the National Privacy Commission of the Philippines for independent review and resolution.