777pop Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how 777pop ("we," "us," "our," "the Company") collects, processes, uses, stores, and protects personal data in connection with the operation of the 777pop online gaming and sports betting platform, accessible at 777pop.club and all associated digital interfaces (collectively, the "Platform").

777pop is committed to protecting the privacy and personal data of all users of the Platform in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), the issuances of the National Privacy Commission (NPC) of the Philippines, and applicable PAGCOR data governance requirements.

By registering an account on 777pop or accessing any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read together with 777pop's Terms and Conditions, which govern your overall use of the Platform.

Data Controller Identity

For the purposes of the Data Privacy Act of 2012 and its IRR, the data controller responsible for the personal data processed in connection with the 777pop Platform is:

• Platform Name: 777pop
• Website: 777pop.club
• Contact Email: [email protected]
• Regulatory Body: Philippine Amusement and Gaming Corporation (PAGCOR)
• Data Protection Officer: Contactable via the support email address above, subject line "Data Privacy Inquiry"

777pop has designated a Data Protection Officer (DPO) as required under Section 21 of the Data Privacy Act. The DPO is responsible for overseeing 777pop's compliance with data protection obligations and may be contacted directly for any privacy-related inquiries, complaints, or data subject rights requests.

Personal Data We Collect

777pop collects personal data that is necessary for the lawful operation of a PAGCOR-regulated online gaming platform. The categories of personal data we collect are described in the table below.

How We Collect Your Data

777pop collects personal data through the following channels and mechanisms:

4.1 Direct Collection

Information you actively provide to 777pop during account registration, KYC verification, deposit and withdrawal requests, support interactions, promotional participation, and responsible gaming self-assessment tools.

4.2 Automated Collection

Technical data collected automatically when you access or use the Platform, including IP address, device identifiers, browser information, session data, and Platform usage patterns. This data is collected through standard web server logs, session management systems, and analytics tools operating under agreements that comply with Philippine data privacy law.

4.3 Third-Party Sources

In limited circumstances, 777pop may receive personal data from authorised third parties, including:

• Payment processors (e.g., GCash, PayMaya, BPI, BDO, Metrobank) for transaction verification and fraud prevention purposes;
• Identity verification service providers for KYC compliance;
• Regulatory bodies including PAGCOR, where player data is shared for compliance and oversight purposes.

4.4 Cookies and Tracking Technologies

The 777pop Platform uses cookies and similar technologies as described in Section 10 of this Policy. You may control cookie preferences through your browser settings, subject to the limitations described in that section.

Legal Basis for Processing

Under the Data Privacy Act of 2012, 777pop processes personal data on the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of the agreement between you and 777pop constituted by acceptance of the Terms and Conditions, including account management, game facilitation, payment processing, and customer support;
• Legal Obligation: Processing is required for compliance with PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), the Data Privacy Act (RA 10173), and other applicable Philippine law;
• Legitimate Interests: Processing necessary for 777pop's legitimate interests in operating a secure, fair, and fraud-resistant platform, including security monitoring, fraud detection, and platform improvement, where those interests are not overridden by your data protection rights;
• Consent: Where you have provided explicit consent, including for direct marketing communications and voluntary participation in platform improvement surveys.

How We Use Your Personal Data

777pop uses the personal data we collect for the following specific purposes, each of which is grounded in a lawful basis identified in Section 5:

• Account Creation and Management: Creating, maintaining, and administering your 777pop player account, including account verification, balance management, and security configuration;
• Identity and Age Verification: Confirming that you meet the 21+ age requirement mandated by PAGCOR and verifying your identity in compliance with KYC obligations;
• Payment Processing: Processing your GCash, PayMaya, and bank transfer deposits and withdrawals, reconciling transactions, and maintaining financial records;
• Regulatory Compliance: Fulfilling all reporting and record-keeping obligations under PAGCOR licensing conditions and the Anti-Money Laundering Act, including suspicious transaction reporting to the Anti-Money Laundering Council (AMLC);
• Responsible Gaming: Monitoring gaming activity to identify patterns that may indicate problem gambling, administering self-exclusion and limit-setting tools, and contacting players where welfare concerns are identified;
• Security and Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, money laundering, and other prohibited conduct;
• Customer Support: Responding to your inquiries, resolving disputes, and maintaining records of support interactions;
• Platform Improvement: Analyzing aggregated and anonymized usage data to improve Platform performance, game offering, and user experience;
• Marketing Communications: Sending promotional offers, bonus notifications, and relevant Platform updates — only where you have not opted out of such communications.

Disclosure to Third Parties

777pop may disclose your personal data to the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data processing agreements and confidentiality obligations:

7.1 Regulatory and Law Enforcement Authorities

PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law, court order, or regulatory direction. 777pop is legally obligated to cooperate fully with these authorities and cannot withhold data where a lawful disclosure obligation exists.

7.2 Payment Service Providers

GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard, and other payment processors, to the extent necessary to facilitate your deposit and withdrawal transactions. These providers are bound by their own regulatory obligations and data protection requirements.

7.3 Identity Verification Services

Third-party KYC and identity verification providers engaged by 777pop to conduct document verification and fraud screening as part of our PAGCOR compliance obligations. These providers operate under data processing agreements that comply with the Data Privacy Act.

7.4 Technology and Infrastructure Providers

Cloud hosting, security, and platform infrastructure providers who process data on 777pop's behalf as data processors. All such providers are subject to contractual obligations that meet the requirements of the Data Privacy Act.

7.5 Professional Advisers

Legal counsel, auditors, and compliance advisers, where disclosure is necessary for the conduct of their professional services in connection with 777pop's operations, subject to professional confidentiality obligations.

Data Retention

777pop retains personal data only for as long as is necessary for the purposes for which it was collected, or for as long as required by applicable law. The following retention periods apply:

• Active Accounts: All personal data associated with an active 777pop account is retained for the duration of the account's existence plus the minimum regulatory retention period;
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of verification, in accordance with PAGCOR and AMLC record-keeping requirements;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act;
• Gaming Activity Logs: Retained for a minimum of three (3) years from the date of each gaming session;
• Customer Support Records: Retained for a minimum of two (2) years from the date of the last support interaction;
• Closed Accounts: Core identity and financial data for closed accounts is retained for a minimum of five (5) years from account closure for regulatory compliance purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC guidelines and 777pop's internal data disposal procedures.

Security Measures

777pop implements technical and organizational security measures proportionate to the risks associated with processing personal data in the context of a PAGCOR-regulated online gaming platform. These measures include:

• Encryption in Transit: All data transmitted between your device and the 777pop Platform is encrypted using 256-bit SSL/TLS encryption — the same standard used by Philippine banking institutions;
• Encryption at Rest: Sensitive personal data and financial information stored in 777pop's systems is encrypted at rest using industry-standard algorithms;
• Password Security: Account passwords are hashed using industry-standard cryptographic algorithms. 777pop does not store passwords in readable form and cannot access your original password;
• Access Controls: Access to personal data within 777pop's systems is restricted on a strict need-to-know basis, with role-based access controls, multi-factor authentication for administrative access, and comprehensive access logging;
• Security Monitoring: 777pop maintains continuous security monitoring of its systems, including intrusion detection, anomaly detection, and threat intelligence;
• Penetration Testing: Regular third-party penetration testing is conducted on the Platform to identify and remediate security vulnerabilities;
• Data Breach Response: 777pop maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, 777pop will notify the NPC within seventy-two (72) hours of becoming aware of the breach, and will notify affected data subjects as required under the Data Privacy Act.

Cookies & Tracking Technologies

The 777pop Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to secure user sessions, and to improve Platform performance. The categories of cookies used are as follows:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They are used for session authentication, security token management, and maintaining your login state. No opt-out is available for strictly necessary cookies, as their removal would prevent the Platform from functioning.

10.2 Functional Cookies

These cookies remember your preferences and settings (such as language and game preferences) to provide a more personalized experience on the Platform. They are activated based on your use of the Platform and can be disabled through your browser settings, though this may affect Platform functionality.

10.3 Analytics Cookies

Anonymous analytics cookies are used to understand how users interact with the Platform, which pages are visited most frequently, and where performance improvements can be made. The data collected by analytics cookies is aggregated and does not identify individual users. These cookies can be disabled through your browser settings or by managing cookie preferences where available on the Platform.

You may control cookie settings through your browser's privacy settings. Note that disabling certain categories of cookies may affect the functionality and security of the 777pop Platform.

Your Data Subject Rights

Under the Data Privacy Act of 2012 and its IRR, you have the following rights with respect to your personal data processed by 777pop. These rights may be exercised by contacting 777pop's Data Protection Officer at the contact details provided in Section 15.

• Right to be Informed: You have the right to be informed about the collection and processing of your personal data, including the purposes for which it is processed. This Policy constitutes fulfilment of that obligation.
• Right of Access: You have the right to obtain confirmation of whether 777pop holds personal data about you and to access a copy of that data, together with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by 777pop, subject to any legal constraints on modifying verified identity data.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 777pop's legal obligations to retain certain data under PAGCOR and AML requirements.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to other processing activities based on legitimate interests, subject to 777pop's assessment of competing considerations.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible, for data processed on the basis of your consent or for contractual necessity.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated. Information on the NPC complaint process is available through NPC official channels.

Children's Privacy

The 777pop Platform is strictly for adults aged 21 years and older, in accordance with PAGCOR licensing requirements for online gambling services in the Philippines. 777pop does not knowingly collect personal data from any individual under the age of 21.

Age verification is a mandatory step in the 777pop registration and KYC process. If 777pop discovers that it has collected personal data from an individual who does not meet the minimum age requirement, the affected account will be permanently suspended, all associated data will be deleted or retained solely for regulatory reporting purposes, and any funds handled in accordance with PAGCOR guidelines.

Parents or legal guardians who believe that their minor child has registered on 777pop should contact our Data Protection Officer immediately using the contact details in Section 15.

Cross-Border Data Transfers

Where 777pop transfers personal data outside the Philippines — for example, to technology infrastructure providers or payment processors operating internationally — such transfers are conducted in compliance with Section 21 of the Data Privacy Act and the NPC's rules on cross-border data transfers.

Specifically, cross-border transfers occur only where:

• The receiving country provides an adequate level of data protection, as assessed by the NPC; or
• Appropriate safeguards are in place, such as standard contractual clauses approved by the NPC, binding corporate rules, or other mechanisms recognized under Philippine data privacy law; or
• The transfer is necessary for the performance of a contract with you, for legal compliance, or to protect your vital interests.

777pop does not transfer personal data to jurisdictions that lack adequate data protection frameworks without appropriate contractual safeguards in place.

Policy Amendments

777pop reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material changes to this Policy will be communicated to registered account holders via the mobile number or email address on file, or by a prominent notice displayed upon your next login to the Platform.

The effective date of this Policy, and the date of any subsequent revision, is stated at the top of this document. We encourage you to review this Policy periodically to stay informed of how 777pop protects your personal data. Your continued use of the Platform following any amendment constitutes your acceptance of the updated Policy.

Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or 777pop's handling of your personal data, please contact:

• Data Protection Officer, 777pop
• Email: [email protected] — subject line: "Data Privacy Inquiry"
• Live Chat: Available 24/7 within the 777pop Platform dashboard
• Response Time: DPO inquiries acknowledged within 3 business days; substantive response within the timelines required by the Data Privacy Act

If you are not satisfied with 777pop's response to your privacy concern or data rights request, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. Information regarding the NPC complaints process is available through the NPC's official government channels.