Privacy Policy

1. Who We Are (Data Controller)

This Privacy Policy is issued by x77 Casino ("x77," "we," "us," or "our"), the operator of the online gaming platform accessible at x77.one ("Platform"). x77 acts as the Personal Information Controller (PIC) in respect of the personal data it collects from users of the Platform, as defined under the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") of the Philippines.

This Privacy Policy applies to all personal data collected through the x77 Platform, including data collected during account registration, gameplay, financial transactions, customer support interactions, and use of our website. It should be read together with our Terms & Conditions.

2. Personal Data We Collect

x77 collects the following categories of personal data, depending on how you interact with the Platform:

x77 does not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. x77 does not collect information about your race, religion, political affiliations, or health status unless directly relevant to a responsible gaming assessment you have voluntarily initiated.

3. How We Collect Your Data

x77 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including IP addresses, device identifiers, browser information, and cookies (see Section 7).
• Third-party sources: Identity verification providers, payment processors (GCash, Maya, banks), fraud prevention services, and PAGCOR regulatory databases, where permitted by law.
• Publicly available sources: Publicly accessible government databases or watchlists used for AML/CTF screening purposes.

4. How We Use Your Personal Data

x77 uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your x77 account; verifying your identity; processing your login credentials.
• KYC & age verification: Confirming that you are at least 21 years of age and verifying your identity as required by PAGCOR regulations and Philippine law.
• Payment processing: Processing deposits and withdrawals via approved Philippine payment methods; preventing payment fraud; complying with AMLA reporting obligations.
• Game delivery: Providing access to x77's games, recording game outcomes, calculating winnings, and maintaining game integrity.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour; administering self-exclusion, deposit limits, and cooling-off periods.
• Legal compliance: Complying with PAGCOR licensing requirements, the Anti-Money Laundering Act (RA 9160), the Data Privacy Act (RA 10173), and other applicable Philippine laws.
• Customer support: Responding to your enquiries, resolving disputes, and improving our support services.
• Security & fraud prevention: Detecting and preventing unauthorised access, cheating, collusion, and other fraudulent activity on the Platform.
• Marketing communications: Sending you promotional offers and updates about x77, where you have given your consent. You may opt out at any time.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the x77 Platform's performance, features, and user experience.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, x77 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you (the Terms & Conditions), including account management, game delivery, and payment processing.
• Legal obligation: Processing required to comply with Philippine law, including PAGCOR licensing conditions, AMLA obligations, and tax reporting requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

x77 does not sell your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: GCash, Maya/PayMaya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process your financial transactions.
• Identity verification providers: Third-party KYC and liveness-check providers used to verify your identity and age.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC ), the National Privacy Commission (NPC), and other Philippine government authorities, where required by law or court order.
• Fraud prevention services: Third-party providers that help x77 detect and prevent fraudulent activity, money laundering, and cheating on the Platform.
• IT infrastructure providers: Cloud hosting, database, and security service providers who process data on x77's behalf under strict data processing agreements.
• Customer support platforms: Third-party helpdesk software providers used to manage customer support interactions, bound by confidentiality obligations.
• Professional advisers: Lawyers, auditors, and accountants who require access to your data in the course of providing professional services to x77, subject to professional confidentiality obligations.

7. Cookies & Tracking Technologies

x77 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the x77 website. The following types of cookies are used:

You can manage your cookie preferences through your browser settings at any time. Disabling strictly necessary cookies may affect the functionality of the x77 Platform. x77 does not use cookies to track your activity on third-party websites.

8. Data Security

x77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and the x77 Platform is encrypted using TLS 1.2 or higher (HTTPS).
• Encryption at rest: Sensitive personal and financial data stored on x77 servers is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorised x77 personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Password security: User passwords are stored as salted cryptographic hashes and are never stored in plain text.
• Regular security audits: x77 conducts regular vulnerability assessments and penetration testing to identify and remediate security weaknesses.
• Incident response: x77 maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights, x77 will notify the National Privacy Commission (NPC) within 72 hours and affected users as required by the DPA.

9. Data Retention

x77 retains your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable Philippine law. The following general retention periods apply:

Upon expiry of the applicable retention period, x77 will securely delete or anonymise your personal data in a manner that prevents reconstruction or identification.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by x77:

• Right to be informed: The right to know what personal data x77 collects about you and how it is used — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data x77 holds about you, including information on how it has been processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data x77 holds about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to x77's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe x77 has violated your data privacy rights.

To exercise any of these rights, please contact x77's Data Protection Officer (see Section 14). x77 will respond to all data subject requests within fifteen (15) business days of receipt, as required by the DPA's Implementing Rules and Regulations. x77 may request proof of identity before processing your request.

11. Children's Privacy and the 21+ Rule

The x77 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. x77 does not knowingly collect personal data from individuals under the age of 21.

If x77 discovers that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all associated data will be deleted, and any funds will be returned to the payment source after verification. If you believe a minor has registered on the x77 Platform, please contact our support team immediately.

12. Cross-Border Data Transfers

x77 primarily processes your personal data within the Philippines. In some cases, data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international fraud prevention services.

Where such transfers occur, x77 ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required by the DPA of 2012.
• Transfers only to countries or organisations that the National Privacy Commission has determined provide an adequate level of data protection.
• Your explicit consent, where required by law.

x77 will not transfer your personal data to jurisdictions that do not provide adequate data protection safeguards without your prior consent and appropriate contractual protections in place.

13. Updates to This Privacy Policy

x77 may update this Privacy Policy from time to time to reflect changes in our data practices, the x77 Platform, or applicable Philippine law. When material changes are made, x77 will notify registered users via email or an in-platform notification at least seven (7) days before the changes take effect.

The version date displayed at the top of this page indicates when this Privacy Policy was last updated. x77 recommends that you review this Privacy Policy periodically. Your continued use of the x77 Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

Previous versions of this Privacy Policy are available upon request by contacting our Data Protection Officer.

14. Contact Us & Data Protection Officer

x77 has appointed a Data Protection Officer (DPO) as required under the Data Privacy Act of 2012. If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact:

• Data Protection Officer, x77 Casino
• Email: privacy@x77.one
• General Support: support@x77.one
• Live Chat: Available 24/7 via the x77 Platform

If you are not satisfied with x77's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for enforcing the Data Privacy Act of 2012.

For responsible gaming concerns, please contact the PAGCOR Problem Gambling Helpline at 1553 — free, confidential, and available 24 hours a day, 7 days a week.