as777 Privacy Policy

as777 is committed to handling your personal information responsibly, transparently, and in full compliance with Philippine data privacy law. This Policy applies to all personal data collected from players registered on the as777 platform, visitors to the as777 website, and individuals who contact as777 customer support.

This Policy should be read alongside as777's Terms & Conditions and Responsible Gaming Policy, all of which together govern the relationship between as777 and its players.

as777 recognises that Filipino players entrust the platform with sensitive personal and financial information. That trust is taken seriously — your data is used to run your account and comply with legal obligations, not to be monetised or shared unnecessarily.

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules, as777 acts as the Personal Information Controller in respect of all personal data collected from players and visitors through the as777 platform.

This means as777 determines the purposes for which your personal data is processed and the means by which that processing is carried out. as777 has appointed a Data Protection Officer (DPO) in compliance with the requirements of the National Privacy Commission.

Contact details for as777's Data Protection Officer and privacy-related inquiries are provided in Section 15 of this Policy.

as777 collects personal data across several categories. The specific data collected depends on how you interact with the platform:

as777 uses your personal data for the following specific purposes:

• Account Creation and Management: Creating and maintaining your as777 player account, verifying your identity and age (21+ requirement), managing login security including Two-Factor Authentication, and processing account closure requests.
• Payment Processing: Processing PHP deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank; verifying that payment accounts are registered in your name; maintaining transaction records as required by law.
• PAGCOR Compliance and Regulatory Reporting: Meeting all data collection, retention, and reporting obligations imposed by PAGCOR as a condition of as777's gaming licence. This includes player activity reporting, suspicious transaction reporting under anti-money laundering law, and cooperation with PAGCOR investigations.
• Anti-Money Laundering (AML) Obligations: Screening player data against financial crime watchlists, monitoring deposit and withdrawal patterns for suspicious activity, and reporting as required under the Anti-Money Laundering Act (Republic Act No. 9160, as amended).
• Responsible Gaming: Using gaming activity data to identify potentially problematic gambling patterns, administering deposit limits, session controls, and self-exclusion requests, and maintaining records of responsible gaming interactions as required by PAGCOR.
• Customer Support: Responding to player queries, resolving account disputes, investigating complaints, and maintaining support records.
• Platform Security and Fraud Prevention: Detecting and preventing unauthorized account access, bonus abuse, collusion, account duplication, and other prohibited conduct under as777's Terms & Conditions.
• Service Improvement: Analysing aggregated and anonymised platform usage data to improve game performance, payment processing speed, mobile compatibility across Philippine network conditions, and customer support quality.
• Marketing Communications (with consent): Sending promotional offers, bonus notifications, and platform updates via SMS, email, or push notification — only to players who have opted in and have not subsequently withdrawn consent.

as777 processes your personal data only where a lawful basis exists. Under the Data Privacy Act of 2012 and its Implementing Rules, as777's processing activities are based on the following legal grounds:

• Contract Performance: Processing your registration data, KYC information, and financial data is necessary to provide the as777 gaming service you have contracted for and to fulfil as777's obligations under the Terms & Conditions.
• Legal Obligation: Processing for PAGCOR reporting, AML compliance, age verification, and data breach notification obligations is required by applicable Philippine law. as777 cannot waive these obligations at a player's request.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement is based on as777's legitimate interest in maintaining a secure and functional platform. These interests do not override your privacy rights where you have expressly objected.
• Consent: Processing for direct marketing communications is based solely on your explicit opt-in consent. You may withdraw this consent at any time through your Account Settings or by contacting as777 support.

as777 uses cookies and similar tracking technologies to operate the platform, remember your session preferences, and analyse usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, CSRF protection tokens, and security cookies. These cannot be disabled without preventing access to the platform.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and last-used payment method to provide a more convenient experience.
• Analytics Cookies: Used by as777 to understand aggregate platform usage patterns — page load performance, game lobby navigation, and payment flow completion rates. Analytics data is anonymised and not linked to individual player identities for reporting purposes.
• Marketing Cookies: Used only if you have opted in to marketing communications. These track which promotional messages you have viewed or interacted with, to avoid sending duplicate communications.

as777 does not use third-party advertising networks or retargeting pixels. Cookies set by as777 are not used to track your activity outside of the as777 platform.

as777 does not sell, rent, or commercially share your personal data with third parties. as777 discloses personal data only in the following limited circumstances:

• PAGCOR and Philippine Regulatory Authorities: as777 is legally required to provide player data to PAGCOR and other competent Philippine government authorities (including the Anti-Money Laundering Council) upon lawful request or as part of mandatory periodic reporting under as777's gaming licence.
• Payment Processors: Necessary financial data (not full personal files) is shared with payment service providers (GCash, PayMaya, and banking institutions) solely to process your deposits and withdrawals. Payment processors operate under their own privacy policies and Philippine financial data regulations.
• Game Content Providers: as777's certified game providers may receive anonymised session data (bet amounts, game results, session timestamps) as required to operate their games, investigate disputes, and provide RNG audit records. Game providers do not receive your personal identity information.
• Identity Verification Service Providers: Third-party KYC verification services may process copies of your identity documents to perform the age and identity checks required by PAGCOR. These providers are contractually bound to process your data only for KYC purposes and to maintain appropriate security standards.
• Legal and Law Enforcement: as777 may disclose personal data to Philippine law enforcement agencies, courts, or other government bodies where required by law, court order, or where disclosure is necessary to protect the rights, safety, or property of as777 or other persons.
• Business Transfers: In the event of a merger, acquisition, or transfer of as777's business, player data may be transferred as part of the transaction, subject to appropriate confidentiality obligations and without diminishing your privacy rights under Philippine law.

as777's primary data processing and storage infrastructure is located within the Philippines. Where personal data must be transferred to service providers or game content providers operating outside the Philippines (for example, game studios based elsewhere in Southeast Asia or internationally), as777 applies the following safeguards:

• Data transfer agreements incorporating the standard contractual clauses approved by the National Privacy Commission;
• Contractual requirements that recipient organisations maintain data security standards equivalent to those required by Philippine law;
• Data minimisation — only the minimum necessary data is transferred, and full player identity information is not transmitted to offshore partners without a specific lawful basis.

as777 will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate contractual safeguards.

as777 retains personal data only for as long as is necessary for the purposes described in this Policy or as required by applicable law. The following retention periods apply:

• Active Account Data: Personal, financial, and gaming activity data is retained for the duration of your active as777 account relationship.
• Closed Account Data: Upon account closure, as777 retains your KYC, financial transaction history, and gaming activity records for a minimum of five (5) years as required by PAGCOR licensing conditions and Philippine anti-money laundering regulations.
• Customer Support Records: Support interaction records are retained for three (3) years following account closure to allow for late complaints or regulatory investigations.
• Marketing Data: Marketing preference records and opt-in evidence are retained for three (3) years after your last marketing interaction or account closure, whichever is later.
• Technical and Security Logs: Server logs, security event records, and session data are retained for twelve (12) months for fraud detection and security investigation purposes.

Upon expiry of the applicable retention period, as777 will securely delete or anonymise your personal data in accordance with the Data Privacy Act's requirements for secure disposal.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by as777:

• Right to Be Informed: The right to be notified about the collection and processing of your personal data — which this Policy fulfils.
• Right of Access: The right to request a copy of the personal data as777 holds about you, along with information about the purposes for which it is processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update basic account information directly through your as777 Account Settings. Changes to KYC documentation require a formal rectification request.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose collected, where consent has been withdrawn, or where processing is unlawful. Note that as777 is legally required to retain certain data under PAGCOR regulations and AML law — these legal retention obligations take precedence over erasure requests in those specific categories.
• Right to Object: The right to object to processing based on as777's legitimate interests (including marketing based on legitimate interests, where applicable). You may always object to direct marketing processing, in which case as777 must cease that processing immediately.
• Right to Data Portability: The right to receive a structured, commonly used, machine-readable copy of the personal data you have provided to as777 where processing is based on consent or contract, and the processing is carried out by automated means.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe as777 has processed your personal data in violation of the Data Privacy Act. Information on the NPC complaints process is available through official Philippine government channels.

as777 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in Transit: All data transmitted between your device and as777's servers is encrypted using 256-bit TLS/SSL — the same standard applied by GCash, BPI, and BDO in their digital banking platforms.
• Encryption at Rest: Sensitive personal data stored in as777's databases, including KYC documents and financial records, is encrypted at rest using industry-standard symmetric encryption.
• Password Security: as777 never stores plaintext passwords. All account passwords are one-way hashed using bcrypt with appropriate salt rounds before storage.
• Access Controls: as777 applies the principle of least privilege — employees and systems access only the personal data necessary for their specific role. Access to player data requires documented authorisation and is subject to audit logging.
• Two-Factor Authentication: as777 offers 2FA for all player accounts, adding a second verification layer (OTP via Philippine mobile number) to prevent unauthorised login even if credentials are compromised.
• Penetration Testing: as777's platform infrastructure undergoes periodic security assessments and penetration testing by qualified information security professionals.
• Incident Response: as777 maintains a documented data breach incident response procedure. In the event of a breach affecting your personal data, as777 will notify you and the National Privacy Commission within 72 hours of becoming aware of the breach, as required by NPC regulations.

While as777 applies extensive security measures, no digital platform can guarantee absolute security. Players share responsibility for account security by maintaining strong passwords and protecting their credentials.

The as777 platform is strictly for persons aged 21 years or older, in compliance with PAGCOR's minimum age requirement for online casino gaming in the Philippines. as777 does not knowingly collect personal data from individuals under 21 years of age.

If as777 becomes aware that personal data has been collected from an individual who is under 21 — either through KYC verification results or other means — as777 will:

• Immediately suspend the relevant account;
• Forfeit any real-money balance held in the account in accordance with as777's Terms & Conditions;
• Securely delete the personal data of the underage individual, subject to any mandatory retention requirements under Philippine law;
• Report the matter to PAGCOR as required under as777's licensing obligations.

If you are a parent or guardian and believe your child has registered an as777 account, please contact as777 customer support immediately at [email protected].

as777 sends marketing communications — including bonus offers, promotional event notifications, and platform updates — only to players who have explicitly opted in to receive them.

Marketing communications may be delivered via:

• SMS to your registered Philippine mobile number;
• Email to your registered email address;
• Push notifications through the as777 platform (where enabled).

You may withdraw your marketing consent at any time by:

• Updating your communication preferences in Account Settings;
• Using the unsubscribe link included in all as777 marketing emails;
• Replying "STOP" to any as777 marketing SMS message;
• Contacting as777 customer support and requesting opt-out.

Withdrawal of marketing consent will be processed within 5 business days. Opting out of marketing communications does not affect your receipt of transactional communications (such as deposit confirmations, withdrawal notifications, and account security alerts), which as777 sends as part of the account service and which cannot be disabled while your account is active.

as777 may update this Privacy Policy from time to time to reflect changes in our data processing practices, new legal or regulatory requirements, or the introduction of new platform features. The following conditions apply to policy updates:

• The effective date displayed at the top of this Policy will be updated upon each revision;
• Material changes — meaning changes that significantly affect your privacy rights or as777's data processing purposes — will be communicated to registered players via email or SMS at least 7 calendar days before the effective date of the change;
• Minor updates (such as typographical corrections or clarifications that do not alter the substance of the Policy) may take effect immediately upon publication;
• Continued use of the as777 platform after the effective date of a material policy update constitutes acceptance of the revised terms.

Players who do not agree to a material policy change may close their as777 account before the effective date of the change, which does not affect their right to withdraw any confirmed real-money balance that has met applicable wagering requirements.

For all privacy-related inquiries, data subject rights requests, or concerns about as777's handling of your personal data, please contact as777's Data Protection Officer through the following channels:

• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line of your email.
• Live Chat: as777's 24/7 Filipino-speaking customer support is available through the platform's live chat function in both Tagalog and English.
• Response Time: Privacy inquiries are acknowledged within 5 business days. Substantive responses to data subject rights requests are provided within 15 business days, or within such shorter period as may be mandated by NPC regulations.

Regulatory Complaints: If you believe as777 has processed your personal data in violation of the Data Privacy Act of 2012, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC complaints process is accessible through official Philippine government channels. as777 will cooperate fully with any NPC investigation or inquiry.