xd777 Privacy Policy

1Introduction

This Privacy Policy ("Policy") describes how xd777 ("xd777", "we", "us", or "our") collects, uses, stores, shares, and protects the personal information of individuals ("you", "Player", or "User") who access or use the xd777 online casino and sports betting platform available at xd777.ws (the "Platform").

xd777 is committed to protecting your privacy in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and any relevant issuances of the National Privacy Commission ("NPC"). By accessing or using the xd777 Platform, you acknowledge that you have read, understood, and agreed to the terms of this Policy.

This Policy applies to all personal data collected through: your registration and use of the Platform; your interactions with xd777 customer support; your participation in promotions or surveys; and your use of any xd777 mobile application or other digital touchpoint operated by xd777.

2Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, xd777 acts as the Personal Information Controller with respect to the personal data it collects directly from Players and Platform visitors. xd777 determines the purposes and means of processing your personal data in connection with the operation of the Platform.

Where xd777 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, and cloud hosting providers — such third parties act as Personal Information Processors and are bound by contractual data processing agreements that require them to handle your data only on xd777's documented instructions and in compliance with applicable Philippine data privacy law.

3Data We Collect

xd777 collects the following categories of personal data, as further detailed in the summary table in the preceding section of this page:

3.1 Identity and Verification Data

This includes your full legal name, date of birth, nationality, gender, and copies of government-issued Philippine identification documents (such as a PhilSys National ID, SSS ID, UMID, driver's licence, or passport) submitted for Know Your Customer ("KYC") and age verification purposes. A selfie or live photo may also be collected as part of biometric liveness checks conducted by our third-party KYC provider. Age verification is mandatory — xd777 only accepts players who are 21 years of age or older in compliance with applicable Philippine gaming regulations.

3.2 Contact Data

This includes your mobile phone number (used for one-time password verification), email address, and, where provided, your home address including city, province, and postal code. Contact data is used for account communications, transactional notifications, and customer support correspondence.

3.3 Financial and Payment Data

This includes your registered GCash mobile number, PayMaya account reference, or bank account name with BPI, BDO, or Metrobank, as provided during deposit and withdrawal transactions. xd777 does not store your full GCash PIN, PayMaya password, or online banking credentials. Transaction records including deposit amounts, withdrawal requests, and betting history are retained for AML compliance and regulatory reporting purposes.

3.4 Technical and Device Data

This includes your IP address, device type and model, operating system, browser type and version, device fingerprint, and approximate geolocation (derived from IP address). Technical data is used for fraud prevention, duplicate account detection, and platform security monitoring.

3.5 Usage and Behavioural Data

This includes information about how you use the Platform: pages visited, games played, bet amounts and outcomes, session start and end times, responsible gaming tool usage, bonus redemptions, and in-platform search queries. Usage data is analysed in aggregate to improve Platform features and to support our responsible gaming monitoring obligations.

3.6 Communications Data

This includes the content of your support chat sessions, email correspondence with xd777, and any feedback or survey responses you submit. Communications data is retained for quality assurance, dispute resolution, and regulatory audit purposes.

4How We Collect Your Data

xd777 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions;
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs (see Section 8 — Cookies & Tracking);
• Third-party sources: Identity verification data validated against Philippine government databases or third-party KYC providers; fraud signals from payment processors; and regulatory watchlist screening data from compliance data providers;
• Inferred data: Data inferred from your usage patterns, device characteristics, and transaction history for fraud detection and responsible gaming monitoring purposes.

5How We Use Your Data

xd777 uses your personal data for the following purposes:

• To create, verify, maintain, and secure your xd777 player account;
• To verify your age (21+) and identity in compliance with applicable Philippine gaming regulatory requirements;
• To process deposits, withdrawals, and gaming transactions in Philippine Peso (PHP);
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities;
• To operate and improve the Platform's features, game offerings, and user experience;
• To send you transactional communications including deposit confirmations, withdrawal status updates, and security alerts;
• To administer promotional offers and bonuses for which you are eligible, subject to applicable promotion terms;
• To support responsible gaming monitoring — including automated detection of problem gambling patterns — and to administer self-exclusion or deposit limit requests;
• To comply with applicable Philippine law, regulatory obligations, court orders, and requests from competent authorities;
• To resolve customer disputes and respond to support enquiries.

xd777 does not use your personal data for profiling for direct marketing purposes, nor does it sell your data to advertising networks or data brokers.

6Legal Basis for Processing

Under the Data Privacy Act of 2012, xd777 relies on the following legal bases for processing your personal data:

• Contract performance: Processing necessary to enter into or perform a contract with you — including registering your account, processing transactions, and providing gaming services;
• Legal obligation: Processing required for compliance with applicable Philippine laws and regulations, including AML reporting, KYC requirements, and gaming regulatory obligations;
• Legitimate interest: Processing necessary for xd777's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and Platform improvement, where such interests are not overridden by your privacy rights;
• Consent: For processing activities where the DPA requires your specific consent — such as optional marketing communications and non-essential cookies — xd777 will seek your express consent and provide an easy mechanism to withdraw it at any time.

7Data Sharing & Disclosure

xd777 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing safeguards:

7.1 Payment Processors

GCash (Mynt), PayMaya (Voyager Innovations), and partner banks including BPI, BDO, and Metrobank receive the minimum financial data necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and applicable Bangko Sentral ng Pilipinas (BSP) regulations.

7.2 KYC and Identity Verification Providers

xd777 engages third-party KYC service providers to assist with identity verification, document authentication, and age verification. These providers process identity documents and biometric data on xd777's behalf under contractual data processing agreements and are prohibited from using your data for any purpose other than KYC verification for xd777.

7.3 Cloud Hosting and Infrastructure Providers

xd777's Platform is hosted on cloud infrastructure operated by certified data centre providers. These providers store and process Platform data solely as directed by xd777 and under strict data processing agreements. xd777 ensures that all hosting infrastructure meets applicable security standards.

7.4 Regulatory and Law Enforcement Authorities

xd777 may disclose your personal data to the relevant Philippine gaming regulatory authorities, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent government bodies when required by applicable law, court order, or regulatory direction. xd777 will, to the extent permitted by law, notify you of any such mandatory disclosure.

7.5 Professional Advisors

xd777 may share personal data with its legal counsel, auditors, or other professional advisors on a confidential basis, strictly for the purpose of obtaining professional advice in connection with xd777's legal and regulatory obligations.

8Cookies & Tracking Technologies

xd777 uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device by the Platform that help us provide a better user experience and enable core Platform functionality.

8.1 Types of Cookies Used

• Essential cookies: Required for the Platform to function correctly — including maintaining your login session, remembering your language preference, and securing the Platform against CSRF attacks. These cookies cannot be disabled without breaking core Platform functionality;
• Analytics cookies: Used to collect aggregate, anonymised data about how visitors use the Platform — such as most-visited pages and average session duration — to help xd777 improve Platform performance. xd777 uses privacy-respecting analytics tools that do not share data with advertising networks;
• Preference cookies: Used to remember your Platform preferences, such as display settings and responsible gaming limits, to provide a more personalised experience;
• Security cookies: Used for fraud detection, bot prevention, and duplicate account identification. These cookies are essential for Platform security and cannot be disabled.

8.2 Managing Cookies

You can manage or delete non-essential cookies through your browser settings at any time. Please note that disabling essential cookies may prevent the xd777 Platform from functioning correctly and may result in loss of your login session. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

9Data Retention

xd777 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account, plus a minimum of five (5) years following account closure, in compliance with applicable AML record-keeping requirements;
• Financial transaction data: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act (AMLA) of the Philippines and applicable gaming regulatory requirements;
• KYC documents: Retained for the duration of your account plus five (5) years post-closure, or longer if required by a specific regulatory direction or ongoing investigation;
• Communications and support data: Retained for three (3) years from the date of the communication, unless required for longer in connection with a dispute or investigation;
• Technical and usage data: Retained in aggregate, anonymised form for platform analytics for up to two (2) years; identifiable technical logs are retained for up to twelve (12) months;
• Cookie and session data: Session cookies expire at the end of your browser session; persistent analytics cookies expire within twelve (12) months.

Upon expiry of the applicable retention period, xd777 will securely delete or anonymise your personal data in accordance with industry-standard data destruction practices.

10Data Security

xd777 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, destruction, or accidental loss. These measures include:

• Transport Layer Security (TLS 1.2 or higher) encryption for all data transmitted between your device and xd777's servers;
• AES-256 encryption at rest for sensitive personal and financial data stored on xd777 servers;
• Role-based access controls ensuring that only authorised xd777 personnel with a legitimate need can access player personal data;
• Multi-factor authentication requirements for access to xd777 internal systems that handle personal data;
• Regular security vulnerability assessments and penetration testing of the Platform;
• 24/7 automated intrusion detection and anomaly monitoring;
• Regular staff training on data privacy obligations and secure data handling practices.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in serious harm to affected players, xd777 will notify the National Privacy Commission (NPC) and affected individuals in accordance with the timeframes and procedures prescribed by the DPA and NPC Circular No. 16-03.

11Your Rights Under the Data Privacy Act

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by xd777:

• Right to be informed: The right to be told what personal data xd777 collects about you and how it is used — which this Privacy Policy fulfils;
• Right of access: The right to request a copy of the personal data xd777 holds about you, along with information about how it is processed;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data held by xd777 about you;
• Right to erasure or blocking: The right to request deletion or blocking of your personal data where it is no longer necessary for the purpose for which it was collected, or where processing lacks a valid legal basis — subject to xd777's legal retention obligations under applicable Philippine law;
• Right to object: The right to object to the processing of your personal data where xd777 relies on legitimate interest as the legal basis, or to object to processing for direct marketing purposes;
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to request its transmission to another service provider, where technically feasible;
• Right to damages: The right to be compensated for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data by xd777, in accordance with the DPA;
• Right to file a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe xd777 has processed your personal data in violation of the DPA.

To exercise any of the above rights, please submit a written request to xd777's Data Protection Officer at [email protected] with the subject line "Data Privacy Request". xd777 will acknowledge your request within five (5) business days and respond substantively within fifteen (15) business days, or such other period as may be prescribed by the NPC.

12Children's Privacy

The xd777 Platform is strictly intended for adults aged 21 years and older in compliance with applicable Philippine gaming regulations. xd777 does not knowingly collect, store, or process personal data of any individual under the age of 21.

If xd777 becomes aware that personal data of an individual under the age of 21 has been collected — whether through misrepresentation during registration or any other means — xd777 will immediately suspend the relevant account, delete all associated personal data, and report the incident to the relevant Philippine gaming regulatory authority as required.

13Third-Party Links

The xd777 Platform may contain links to third-party websites or services — for example, payment provider portals or regulatory authority websites. This Privacy Policy applies solely to the xd777 Platform at xd777.ws and does not extend to any third-party websites or services.

xd777 has no control over and accepts no responsibility for the privacy practices, content, or data handling of any third-party website. When you leave the xd777 Platform by clicking a link to a third-party site, we encourage you to read the privacy policy of that site before submitting any personal data.

14Changes to This Privacy Policy

xd777 reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable Philippine law, regulatory requirements, xd777's data processing practices, or Platform features. The revised Policy will be posted on this page with an updated effective date.

For material changes — that is, changes that significantly affect how xd777 processes your personal data or that reduce your privacy rights — xd777 will provide advance notice via email to your registered address or via a prominent in-Platform notification at least fourteen (14) days before the change takes effect. Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms.

15Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or xd777's data processing practices, please contact the xd777 Data Protection Officer using the details below:

If you believe xd777 has violated your data privacy rights and are not satisfied with our response, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the government authority responsible for administering and enforcing the Data Privacy Act of 2012.

xd777 takes all data privacy complaints seriously and will cooperate fully with any NPC investigation or enquiry. We are committed to resolving all legitimate data privacy concerns promptly, fairly, and in accordance with Philippine law.