Privacy Policy – oo777 Casino

1. Who We Are

This Privacy Policy applies to oo777, the online gaming platform accessible at oo777.lat and any associated subdomains or mobile interfaces ("Platform"). For the purposes of this Policy, oo777 is the data controller responsible for the personal data of players and visitors who access the Platform. References to "oo777," "we," "us," or "our" throughout this Policy refer to the oo777 operating entity.

oo777 operates in the Philippines and serves Filipino players. Our data handling practices are designed to comply with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and applicable issuances from the National Privacy Commission ("NPC").

2. Personal Data We Collect

oo777 collects personal data through the following means: information you provide directly when registering or using the Platform; information collected automatically as you interact with the Platform; and information received from third-party service providers as part of our verification and payment processes.

oo777 does not intentionally collect sensitive personal information beyond what is required for identity verification and responsible gaming compliance (specifically, age verification and, where applicable, self-exclusion records). We do not collect payment card numbers directly — all card-based payment data is handled by PCI-DSS compliant third-party processors.

3. How We Use Your Personal Data

oo777 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, verify, and secure your oo777 account, including password recovery and login verification.
• Service Delivery: To process deposits and withdrawals, deliver game access, calculate and pay winnings, and operate the Platform's features.
• Identity Verification (KYC): To verify your identity and age in compliance with PAGCOR requirements and applicable Philippine law. Players must be at least 21 years of age.
• Legal and Regulatory Compliance: To meet our obligations under the DPA, PAGCOR regulations, Anti-Money Laundering Act ("AMLA"), and any other applicable Philippine law, including reporting obligations.
• Responsible Gaming: To monitor for problem gambling indicators, enforce self-exclusion and deposit limits, and provide player protection tools in accordance with PAGCOR responsible gaming standards.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, money laundering, and other prohibited activities.
• Customer Support: To respond to your inquiries, resolve disputes, and process complaints through our support channels.
• Service Improvement: To analyze usage patterns, optimize the Platform's performance, and develop new features. This analysis is conducted on aggregated or pseudonymized data where possible.
• Marketing Communications: To send you promotional offers and platform updates, where you have given consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, oo777 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the oo777 Terms and Conditions, including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR regulations, AMLA reporting requirements, and NPC directives.
• Legitimate Interest: Processing necessary for our legitimate interests in operating a secure and compliant gaming platform, including fraud detection, security monitoring, and platform analytics — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and certain optional features, where we have obtained your prior consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

oo777 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly as necessary:

• Payment Processors: GCash (Mynt / Globe Fintech), Maya (PayMaya Philippines), BPI, BDO, Metrobank, and other payment service providers to process deposits and withdrawals. These processors receive only the data necessary to execute the specific transaction.
• KYC and Identity Verification Providers: Third-party services used to verify government-issued Philippine IDs and confirm player age as required by PAGCOR.
• Game Providers: JILI, PG Soft, Pragmatic Play, EVO Gaming, and other licensed game studios receive the minimum account data necessary to deliver game sessions and calculate outcomes (typically an anonymized player ID and session token — not your name or contact details).
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council ("AMLC"), the National Privacy Commission, and law enforcement agencies in the Philippines, where disclosure is required by law, court order, or regulatory directive.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by oo777, subject to professional confidentiality obligations.
• Technology and Infrastructure Providers: Cloud hosting, cybersecurity, analytics, and platform support vendors who process data on oo777's behalf under binding data processing agreements that prohibit independent use of your data.

In the event of a business transfer, merger, or acquisition involving oo777, your personal data may be transferred to the acquiring entity. You will be notified in advance and your data will remain subject to the protections set out in this Policy.

6. Cookies and Tracking Technologies

oo777 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us recognize your browser, remember your preferences, maintain session security, and analyze Platform usage.

We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without breaking Platform functionality.
• Functional Cookies: Remember your language preferences, display settings, and other personalization choices to improve your oo777 experience.
• Analytics Cookies: Collect anonymized data about how players interact with the Platform — pages visited, session duration, and error encounters — to help us improve performance and usability.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats.

oo777 does not use advertising or behavioral tracking cookies for third-party ad targeting. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may impair your ability to access and use the Platform.

7. Data Retention

oo777 retains personal data for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required by law. Specific retention periods include:

• Account Data: Retained for the duration of your active oo777 account, plus five (5) years following account closure, to satisfy AMLC record-keeping requirements and support dispute resolution.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA and BSP record-keeping guidelines applicable to payment service providers.
• KYC Documents: Retained for five (5) years following account closure or the date of the last transaction, whichever is later.
• Support Communications: Retained for three (3) years from the date of each interaction.
• Technical and Usage Logs: Retained for twelve (12) months from collection, unless retained longer for an active security investigation.

When personal data is no longer required and the applicable retention period has expired, oo777 will securely delete or anonymize the data so that it can no longer be associated with you.

8. Data Security

oo777 implements a multi-layered security framework to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Security measures include:

• 256-bit AES encryption for data stored at rest in our databases;
• TLS 1.2 or higher (256-bit SSL) for all data transmitted between your device and oo777 servers;
• Role-based access controls ensuring that only authorized personnel can access personal data, limited to what is necessary for their specific job function;
• Multi-factor authentication required for all oo777 system administrators;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Incident response protocols that include notification procedures in the event of a personal data breach, as required by NPC Circular 16-03.

While oo777 implements industry-standard security measures, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your oo777 login credentials. If you suspect unauthorized access to your account, please contact oo777 support immediately.

9. Your Privacy Rights

Under the Data Privacy Act of 2012 and oo777's commitment to player data rights, you have the following rights with respect to your personal data:

• Right to Be Informed: The right to know that oo777 is processing your personal data and to receive clear information about how it is used — which is the purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data oo777 holds about you, along with information about how it is processed.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected. You may update most account information directly from your oo777 account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to oo777's legal and regulatory retention obligations.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format, where processing is based on your consent or contractual necessity.
• Right to Object: The right to object to processing based on legitimate interests, including direct marketing. You may opt out of marketing communications at any time through your account settings or by contacting support.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) at privacy.gov.ph if you believe oo777 has violated your data privacy rights.

To exercise any of these rights, please contact oo777 at [email protected]. oo777 will respond to verified requests within fifteen (15) working days, in accordance with NPC guidelines.

10. Children's and Minors' Privacy

The oo777 Platform is strictly intended for individuals aged 21 years and above. oo777 does not knowingly collect or process personal data from persons under 21 years of age. The 21+ age minimum reflects the legal requirement under applicable PAGCOR guidelines for participation in online casino-style gaming in the Philippines.

If oo777 discovers that personal data has been collected from a person under 21 years of age, the relevant account will be immediately closed, all associated funds will be forfeited in accordance with the oo777 Terms and Conditions, and the personal data will be securely deleted to the extent permitted by law. If you have reason to believe that a minor has registered an oo777 account, please contact us immediately at [email protected].

11. International Data Transfers

Some of oo777's third-party service providers — including game providers, cloud infrastructure vendors, and certain KYC and analytics platforms — may process personal data outside of the Philippines. Where such transfers occur, oo777 ensures that the recipient provides a level of data protection equivalent to that required by the Data Privacy Act of 2012, typically through contractual data processing agreements incorporating the NPC's standard contractual clauses or equivalent safeguards.

oo777 does not transfer personal data to jurisdictions that lack adequate data protection frameworks unless appropriate safeguards are in place. If you have questions about specific international transfers, please contact oo777 support.

12. Updates to This Privacy Policy

oo777 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. When we make material changes, we will post the revised Policy on this page with an updated "last updated" date. For changes that significantly affect your rights or how we handle your data, we will provide additional notice via email to your registered address at least fourteen (14) days before the changes take effect.

Your continued use of the oo777 Platform following the effective date of any update constitutes acceptance of the revised Privacy Policy. If you do not accept the updated terms, you should contact oo777 to request account closure before the changes take effect.

13. Contact and Data Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or oo777's data handling practices, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 via the oo777 Platform

oo777 aims to acknowledge all privacy-related inquiries within two (2) business days and to resolve substantive requests within fifteen (15) working days of identity verification. If you are not satisfied with oo777's response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.