Privacy Policy – How 777hs Casino Handles Your Data

This Privacy Policy applies to all personal data collected, processed, and stored by 777hs Casino in connection with your use of the platform accessible at https://777hs.org, including all associated pages, services, games, and mobile-optimised interfaces operated under the same domain.

777hs takes data privacy seriously. The information we collect from Filipino players — whether in Metro Manila, Cebu, Davao, Quezon City, Makati, or elsewhere in the Philippines — is handled with care, processed for legitimate purposes only, and protected using appropriate technical and organisational security measures.

This Policy should be read alongside the 777hs Terms & Conditions and Responsible Gaming Policy, both of which form part of your complete agreement with 777hs. Where this Policy refers to personal data, it means any information that identifies or could reasonably be used to identify you as an individual.

For the purposes of the Philippine Data Privacy Act of 2012, 777hs Casino is the Personal Information Controller (PIC) responsible for the personal data collected through the platform. As a PAGCOR-regulated operator, 777hs is bound by PAGCOR's data governance standards in addition to the requirements of the National Privacy Commission (NPC).

All data processing activities carried out by 777hs are governed by a documented Data Processing Agreement framework. Third-party service providers acting as Personal Information Processors (PIPs) on behalf of 777hs are contractually bound to process personal data only for the purposes authorised by 777hs and in compliance with applicable Philippine data privacy law.

For all data privacy enquiries, please contact our Data Protection Officer (DPO) — contact details are provided in Section 15 of this Policy.

777hs collects the following categories of personal data from players and website visitors. The specific data collected depends on how you interact with the platform:

777hs does not collect sensitive personal information (as defined under the Philippine DPA) unless specifically required for regulatory compliance, in which case collection is limited to the minimum necessary and handled under strict access controls.

777hs collects personal data through the following channels and mechanisms:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, update your account settings, or use any platform feature that requires input.
• Automatically: When you access the 777hs website or platform, technical data including IP address, device identifiers, browser type, and session data is collected automatically via server logs and cookies (see Section 8).
• From payment processors: When you make a transaction via GCash, PayMaya, BPI, BDO, Metrobank, or card payment, transaction reference data and payment confirmation details are received from the relevant payment processor.
• From identity verification partners: Where 777hs uses third-party KYC or identity verification services, data returned from those services (such as ID verification status and document authenticity results) is stored in association with your Account.
• From fraud prevention services: 777hs may receive data from third-party fraud detection and AML screening services as part of our regulatory compliance obligations under PAGCOR requirements and the Philippine Anti-Money Laundering Act (AMLA).

777hs processes personal data for the following purposes:

• Account management: To register, verify, and maintain your 777hs Account, including processing your login credentials and managing account preferences.
• Identity verification (KYC): To comply with PAGCOR's KYC requirements and verify that account holders meet the eligibility criteria set out in the 777hs Terms & Conditions, including the mandatory 21+ age restriction.
• Payment processing: To process deposits, withdrawals, and refunds via GCash, PayMaya, BPI, BDO, Metrobank, and card payment methods, and to maintain accurate financial records of all transactions.
• Platform service delivery: To provide access to games, display your account balance, apply bonuses, record game outcomes, and deliver the full range of 777hs platform services.
• Regulatory compliance: To fulfil 777hs's obligations under PAGCOR regulations, the Philippine AMLA, the Data Privacy Act of 2012, and other applicable Philippine laws. This includes transaction monitoring, suspicious activity reporting to the AMLC, and maintaining audit records.
• Responsible gaming: To implement and monitor responsible gaming tools including deposit limits, self-exclusion, and cooling-off periods. To identify players who may be showing signs of problem gambling and to provide appropriate support or intervention in accordance with PAGCOR's responsible gaming guidelines.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, unauthorised account access, and other prohibited conduct as defined in the Terms & Conditions.
• Customer support: To respond to your enquiries, resolve complaints, and maintain records of support interactions for quality assurance and dispute resolution purposes.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may withdraw consent at any time by updating your notification preferences within your Account settings.
• Platform improvement: To analyse aggregated usage patterns, identify technical issues, and improve the overall performance, security, and user experience of the 777hs platform.

Under the Philippine Data Privacy Act of 2012, all personal data processing must be based on at least one of the following criteria. 777hs processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between you and 777hs — specifically, to create and maintain your Account, process transactions, and deliver platform services as described in the Terms & Conditions.
• Legal obligation: Processing is required to comply with PAGCOR licensing conditions, the Philippine AMLA, the DPA 2012, and other applicable regulatory obligations. This includes KYC verification, transaction monitoring, and AMLC reporting.
• Legitimate interests: Processing is necessary for 777hs's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and improving the quality of the platform, provided these interests are not overridden by your data privacy rights.
• Consent: Where processing is based on your consent — such as the sending of marketing communications — you retain the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

777hs does not sell your personal data to third parties. We share your personal data only in the circumstances described below:

• Payment processors: GCash (GXI), PayMaya, BPI, BDO, Metrobank, and card payment networks receive the minimum data necessary to process your financial transactions.
• KYC and identity verification providers: Third-party identity verification services that assist with document authentication and age/identity verification for KYC compliance purposes.
• Game providers: JILI, Pragmatic Play, PG Soft, Evolution Gaming, and other certified game providers may receive session identifiers and wager data necessary to deliver game functionality. Game providers do not receive your full personal profile.
• Fraud prevention and AML services: Third-party screening services used to detect fraudulent activity and fulfil our AMLA obligations, including potential reporting to the Anti-Money Laundering Council (AMLC) as required by Philippine law.
• Regulatory authorities: PAGCOR and other competent Philippine regulatory or law enforcement authorities where disclosure is required by law, court order, or regulatory direction.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers who process data on our behalf under Data Processing Agreements that require them to maintain confidentiality and comply with the DPA 2012.

All third parties with whom 777hs shares personal data are contractually required to process that data only for the purposes specified, to maintain appropriate security standards, and to comply with applicable Philippine data privacy law.

The 777hs platform uses cookies and similar tracking technologies to support platform functionality, improve user experience, and fulfil our security and compliance obligations. The following types of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These enable you to log in, maintain your session, and use core platform features. These cookies cannot be disabled without affecting your ability to use 777hs.
• Functional cookies: Remember your preferences and settings (such as language preference and notification settings) to personalise your experience across sessions.
• Analytics cookies: Collect aggregated, anonymised data about how users interact with the platform, which pages are visited most frequently, and where technical errors occur. This data is used solely to improve platform performance.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats. These are part of our PAGCOR-mandated security framework.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to access certain platform features. 777hs does not use third-party advertising cookies or behavioural targeting cookies.

777hs retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data lifecycle management procedures. Where deletion is not immediately possible due to backup or archival processes, the data is restricted from active processing until deletion can be completed.

777hs implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and the 777hs platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest, including financial records and KYC documents, is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to 777hs personnel and authorised processors on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular data privacy training.
• Infrastructure security: The 777hs platform is hosted on secure, audited cloud infrastructure with intrusion detection systems, firewall protection, and regular security penetration testing.
• Account security features: Two-factor authentication (2FA), session timeout controls, and login anomaly detection are implemented to protect individual player accounts from unauthorised access.
• Incident response: 777hs maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to affected individuals, 777hs will notify the National Privacy Commission (NPC) and affected data subjects within the timeframes required by the DPA 2012 and NPC regulations.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 777hs. To exercise any of these rights, contact our Data Protection Officer using the details in Section 15.

777hs will respond to all data privacy rights requests within thirty (30) days of receipt. In cases of complexity or volume, this period may be extended by a further thirty (30) days, in which case you will be notified of the extension and the reason for it. Please note that certain rights are subject to exceptions — for example, data that must be retained to comply with PAGCOR regulations or the AMLA cannot be deleted on request before the applicable retention period expires.

The 777hs platform is strictly intended for individuals aged 21 years and above. 777hs does not knowingly collect personal data from any person under the age of 21. This is both a regulatory requirement under PAGCOR licensing conditions and a core commitment of 777hs's responsible gaming framework.

If 777hs becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately, the associated Account will be suspended, and any deposited funds will be returned in accordance with applicable regulations.

If you are a parent or guardian and believe that a person under 21 in your care has registered an Account or provided personal data to 777hs, please contact our Data Protection Officer immediately using the contact details in Section 15.

The primary processing of personal data by 777hs takes place within the Philippines. However, certain third-party service providers (including game providers, KYC services, and cloud infrastructure providers) may process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, 777hs ensures that such transfers are governed by appropriate safeguards in accordance with NPC regulations on cross-border data flows. These safeguards include: contractual clauses requiring recipient organisations to maintain data protection standards equivalent to those required by the Philippine DPA 2012; verification that recipient jurisdictions provide an adequate level of data protection; and, where required, seeking NPC approval for cross-border data sharing arrangements.

Personal data transferred outside the Philippines is limited to what is strictly necessary for the specific processing purpose and is protected by binding contractual obligations on the recipient.

777hs reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via SMS or in-platform notification no less than fourteen (14) days before the changes take effect, except where immediate changes are required by law or regulatory direction.

The current version of this Privacy Policy, together with its effective date, is always available at https://777hs.org/privacy-policy. We encourage you to review this Policy periodically. Your continued use of the 777hs platform following the effective date of any updated Policy constitutes your acknowledgement of the changes.

If any change to this Policy materially affects how we process your personal data in a way that requires your consent, we will seek that consent before the change takes effect.

777hs has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests related to your personal data or this Policy, you may contact us through the following channels:

• Data Protection Officer: [email protected] — Subject line: "Data Privacy Request" (plain text only — not a clickable link)
• Live Chat Support: Available 24/7 from within your 777hs Account dashboard. Filipino and English-speaking agents are available at all times.

For complaints that cannot be resolved through 777hs's internal process, you have the right to escalate to the National Privacy Commission (NPC) of the Philippines, the government authority responsible for administering and enforcing the Data Privacy Act of 2012.