phplus777 Privacy Policy

1. Introduction

1.1 This Privacy Policy applies to all personal data collected by phplus777 through the phplus777 website, mobile platform, and any related services (collectively, the "Platform"). It applies to all registered players, prospective players, and visitors to the Platform.

1.2 phplus777 is committed to processing personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines.

1.3 This Privacy Policy should be read alongside the phplus777 Terms and Conditions. Capitalised terms not defined in this Policy have the meanings given to them in the Terms and Conditions.

2. Data Controller

2.1 For the purposes of the Data Privacy Act of 2012, phplus777 is the personal information controller in respect of the personal data collected through the Platform.

2.2 phplus777 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection law. Contact details for the DPO are set out in Section 15 of this Policy.

3. Data We Collect

3.1 Registration Data. When you create a phplus777 account, we collect: full name, date of birth, email address, mobile number, and residential address. This information is required to create and maintain your account.

3.2 Identity Verification (KYC) Data. To comply with PAGCOR regulations and anti-money-laundering requirements, phplus777 collects copies of government-issued identification documents (e.g., Philippine passport, PhilSys National ID, SSS ID, driver's licence), proof of address, and proof of payment method ownership.

3.3 Financial Data. phplus777 collects transaction records including deposit amounts, withdrawal amounts, payment method identifiers (e.g., GCash mobile number, bank account last four digits), and transaction timestamps. phplus777 does not store full payment card numbers.

3.4 Gaming Data. phplus777 collects records of all gaming activity on the Platform, including game sessions, wager amounts, game outcomes, bonus usage, and account balance history. This data is required for regulatory compliance, dispute resolution, and responsible gaming monitoring.

3.5 Technical Data. When you access the phplus777 Platform, we automatically collect certain technical information, including: IP address, device type and operating system, browser type and version, referring URL, pages visited, and session duration. This data is collected via cookies and server logs.

3.6 Communications Data. If you contact phplus777 support via live chat, email, or any other channel, we retain records of those communications, including the content of messages and any attachments you provide.

3.7 Marketing Preferences. If you opt in to receive promotional communications from phplus777, we record your consent and your communication preferences.

4. How We Collect Data

4.1 phplus777 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings;
• Automatically — through cookies, server logs, and similar technologies when you access or use the Platform;
• From third parties — including identity verification service providers, payment processors, and fraud prevention services, where necessary to verify your identity or process transactions;
• From regulatory bodies — where phplus777 is required to obtain or verify information in connection with its regulatory obligations.

5. How We Use Your Data

5.1 phplus777 uses the personal data it collects for the following purposes:

• To create, maintain, and manage your phplus777 account;
• To verify your identity and age in compliance with PAGCOR regulations and the Data Privacy Act;
• To process deposits, withdrawals, and other financial transactions;
• To detect and prevent fraud, money laundering, and other illegal activity;
• To monitor gaming activity for responsible gaming purposes, including identifying players who may be at risk of gambling-related harm;
• To provide customer support and resolve disputes;
• To send you transactional communications (e.g., deposit confirmations, withdrawal notifications, security alerts);
• To send you promotional communications, where you have given your consent;
• To improve the Platform through aggregate analytics and user research;
• To comply with applicable laws, regulations, and regulatory directions from PAGCOR and the NPC.

5.2 phplus777 does not use personal data for automated decision-making that produces legal or similarly significant effects on players, except where required by law or where you have given explicit consent.

6. Legal Basis for Processing

6.1 phplus777 processes personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity — processing required to perform our contract with you, including account management and payment processing;
• Legal obligation — processing required to comply with applicable laws and regulations, including PAGCOR licensing conditions, anti-money-laundering laws, and NPC requirements;
• Legitimate interests — processing necessary for phplus777's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights;
• Consent — processing based on your freely given, specific, and informed consent, including the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Data Sharing

7.1 phplus777 does not sell, rent, or trade your personal data to third parties for marketing purposes.

7.2 phplus777 may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors and e-wallet providers (e.g., GCash, PayMaya, BPI, BDO, and other Philippine banks) — to process deposits and withdrawals;
• Identity verification and KYC service providers — to verify your identity and age in compliance with regulatory requirements;
• Fraud prevention and security service providers — to detect and prevent fraudulent activity on the Platform;
• Game software providers — to the extent necessary to deliver game content and resolve game-related disputes;
• Regulatory authorities — including PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and law enforcement agencies, where required by law or regulatory direction;
• Professional advisers — including lawyers, auditors, and accountants, where necessary for the conduct of phplus777's business.

7.3 All third-party service providers engaged by phplus777 are required to process personal data only in accordance with phplus777's instructions and to implement appropriate technical and organisational security measures.

8. Cookies & Tracking Technologies

8.1 phplus777 uses cookies and similar technologies (collectively, "cookies") on the Platform. Cookies are small text files stored on your device that help the Platform function correctly and allow us to understand how players use the Platform.

8.2 phplus777 uses the following categories of cookies:

• Strictly necessary cookies — required for the Platform to function. These include session cookies that maintain your login state and security cookies that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional cookies — used to remember your preferences (e.g., language settings, display preferences) to improve your experience on the Platform.
• Analytics cookies — used to collect aggregate, anonymised data about how players use the Platform, including pages visited and session duration. This data is used solely to improve the Platform and is not linked to individual player identities.

8.3 phplus777 does not use third-party advertising cookies, cross-site tracking cookies, or social media tracking pixels.

8.4 You may control cookie settings through your browser. Please note that disabling strictly necessary cookies may affect the functionality of the Platform.

9. Data Retention

9.1 phplus777 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and KYC data — retained for a minimum of five (5) years from the date of account closure, in accordance with PAGCOR licensing conditions and anti-money-laundering regulations;
• Transaction records — retained for a minimum of five (5) years from the date of each transaction;
• Gaming activity records — retained for a minimum of three (3) years from the date of each gaming session;
• Support communications — retained for a minimum of two (2) years from the date of the communication;
• Marketing consent records — retained for the duration of your account and for two (2) years following account closure.

9.2 Upon expiry of the applicable retention period, phplus777 will securely delete or anonymise your personal data, unless retention is required by law or for the establishment, exercise, or defence of legal claims.

10. Data Security

10.1 phplus777 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the phplus777 Platform;
• Encryption of sensitive data at rest, including KYC documents and payment identifiers;
• Role-based access controls limiting access to personal data to authorised personnel only;
• Regular security assessments and penetration testing of the Platform;
• Multi-factor authentication for administrative access to systems containing personal data;
• Staff training on data protection and information security obligations.

10.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phplus777 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012.

10.3 While phplus777 takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. You are responsible for maintaining the security of your phplus777 account credentials.

11. Your Rights

11.1 Under the Data Privacy Act of 2012 (RA 10173), you have the following rights in respect of your personal data held by phplus777:

• Right to be informed — the right to be informed of how your personal data is collected and processed, as set out in this Privacy Policy;
• Right of access — the right to request a copy of the personal data phplus777 holds about you;
• Right to rectification — the right to request correction of inaccurate or incomplete personal data;
• Right to erasure — the right to request deletion of your personal data, subject to phplus777's legal retention obligations;
• Right to object — the right to object to the processing of your personal data on grounds of legitimate interests or for direct marketing purposes;
• Right to data portability — the right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to lodge a complaint — the right to lodge a complaint with the National Privacy Commission if you believe phplus777 has processed your personal data in violation of the Data Privacy Act.

11.2 To exercise any of the above rights, please contact the phplus777 Data Protection Officer using the contact details in Section 15. phplus777 will respond to all verified requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, with notice to you.

11.3 phplus777 may need to verify your identity before processing a data rights request. This is to ensure that personal data is not disclosed to unauthorised persons.

12. Children's Privacy

12.1 The phplus777 Platform is strictly for individuals aged twenty-one (21) years and above. phplus777 does not knowingly collect personal data from individuals under the age of 21.

12.2 If phplus777 becomes aware that it has collected personal data from an individual under the age of 21, it will take immediate steps to delete that data and close the associated account. If you believe that phplus777 may have collected data from a minor, please contact support immediately.

13. Cross-Border Data Transfers

13.1 phplus777 primarily processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines (for example, game software providers or cloud infrastructure providers), phplus777 will ensure that such transfers are made in compliance with the Data Privacy Act of 2012 and NPC regulations.

13.2 Cross-border transfers of personal data will only be made to countries or organisations that provide an adequate level of data protection, or where appropriate safeguards (such as contractual clauses approved by the NPC) are in place.

14. Changes to This Policy

14.1 phplus777 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via the email address on file or via a prominent notice on the Platform, at least fourteen (14) days before the changes take effect.

14.2 The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the phplus777 Platform after the effective date of any change constitutes your acceptance of the updated Privacy Policy.

14.3 If you do not agree to the updated Privacy Policy, you must cease using the Platform and may request account closure in accordance with the Terms and Conditions.

15. Contact & Data Protection Officer

15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phplus777, please contact our Data Protection Officer:

• Email: [email protected]
• Postal Address: phplus777 Data Protection Officer, Philippines

15.2 phplus777 aims to respond to all privacy-related enquiries within fifteen (15) business days of receipt.

15.3 If you are not satisfied with phplus777's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at www.privacy.gov.ph (for reference only — not a clickable link).