xg777 Privacy Policy

1. About This Privacy Policy

This Privacy Policy ("Policy") is published by xg777 ("xg777," "we," "us," or "our") and applies to all users ("you," "Player," or "User") of the xg777 online gaming platform accessible at xg777.app and any associated mobile web applications (collectively, the "Platform").

xg777 is committed to protecting the personal information of Filipino players in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). Where applicable, we also comply with international data protection standards relevant to our operations.

This Policy describes what personal data we collect, why we collect it, how we use and protect it, how long we retain it, with whom we share it, and what rights you have as a data subject under Philippine law. By registering an xg777 account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

2. Personal Data We Collect

xg777 collects the following categories of personal data from players and Platform users:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification.
• Date of birth (for age verification — xg777 requires players to be at least 21 years old).
• Gender (optional, for account personalization).
• Nationality and country of residence.
• Residential address in the Philippines (barangay, city/municipality, province, postal code).

2.2 Contact Data

• Philippine mobile number (used for account verification, OTP delivery, and support communication).
• Email address (used for account confirmation, security alerts, promotional communications where consented).

2.3 Identity Verification (KYC) Documents

• Copies of valid Philippine government-issued identification documents (e.g., PhilSys ID, passport, driver's license, UMID, SSS/GSIS ID, voter's ID).
• Proof of address documents (e.g., utility bill, bank statement, barangay certificate) dated within the last 90 days.
• Selfie or liveness verification image, where required for enhanced KYC.

2.4 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts, dates, and payment method references.
• GCash or Maya wallet reference numbers (not your full wallet credentials — xg777 does not store e-wallet PINs or passwords).
• Bank account or card details used for deposits or withdrawals, stored only to the extent required for transaction processing and AML compliance.
• Account balance history and bonus transaction records.

2.5 Gaming Activity Data

• Gameplay logs including games played, bet amounts, game outcomes, session durations, and win/loss records.
• Sports betting activity including markets selected, stakes placed, and settlement results.
• Bonus usage and wagering progress data.

2.6 Technical & Device Data

• IP address and approximate geolocation data derived from IP.
• Device type, operating system, and browser information.
• Session timestamps and login history.
• Cookies and similar tracking technology data (see Section 10).

2.7 Communications Data

• Records of communications with the xg777 support team, including live chat transcripts and support ticket contents.
• Feedback, survey responses, and promotional opt-in/opt-out preferences.

3. How We Collect Your Data

xg777 collects personal data through the following means:

• Directly from you when you register an account, complete KYC verification, make deposits or withdrawals, contact support, or participate in promotions.
• Automatically through your use of the Platform, including via server logs, session tracking, and cookie-based technologies.
• From third-party verification providers engaged by xg777 to conduct identity verification and fraud screening on our behalf.
• From payment processors including GCash, Maya, BPI, BDO, Metrobank, and other payment service providers, to the extent necessary to process and reconcile transactions.
• From regulatory or law enforcement authorities where we are legally required to process or receive data for compliance purposes.

4. Purposes of Processing Your Personal Data

xg777 processes your personal data for the following purposes:

• Account creation and management: To register, verify, and maintain your xg777 player account.
• Age and identity verification: To confirm that you are at least 21 years of age and are who you claim to be, as required by applicable gaming regulations.
• Transaction processing: To process deposits, withdrawals, and bonus transactions accurately and securely in Philippine Peso.
• Anti-money laundering (AML) and fraud prevention: To monitor transactions and account activity for signs of money laundering, fraud, collusion, or other prohibited conduct, in compliance with applicable Philippine AML laws.
• Regulatory compliance: To satisfy reporting obligations to PAGCOR and other applicable Philippine regulatory authorities.
• Customer support: To respond to your queries, complaints, and support requests efficiently.
• Platform security: To detect and prevent unauthorized access, technical abuse, bot activity, and account takeover attempts.
• Responsible gaming: To monitor gaming patterns and intervene where indicators of problem gambling are detected, in accordance with our Responsible Gaming obligations.
• Marketing communications: To send you promotional offers, bonuses, and platform updates where you have provided consent. You may withdraw consent at any time by contacting support or updating your communication preferences.
• Platform improvement: To analyze aggregated, anonymized usage data to improve the xg777 Platform for Filipino players.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, xg777 processes your personal data on the following legal bases:

• Consent: For marketing communications and optional data collection where you have provided explicit consent.
• Contractual necessity: Processing required to perform our contractual obligations to you under the xg777 Terms and Conditions, including account management, gameplay, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws, including AML regulations, tax reporting, and PAGCOR regulatory obligations.
• Legitimate interests: Processing required for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interests do not override your fundamental rights and freedoms.

6. Sharing of Personal Data

xg777 does not sell your personal data to third parties. We may share your personal data only in the following circumstances:

• Service providers: We engage trusted third-party service providers to perform functions on our behalf, including identity verification, payment processing, fraud detection, IT infrastructure, and customer support tooling. These providers are contractually bound to process your data only as instructed by xg777 and in accordance with applicable data protection law.
• Payment processors: Your financial transaction data is shared with applicable payment processors (GCash, Maya, BPI, BDO, Metrobank, etc.) to the extent required to complete your requested transactions.
• Regulatory authorities: xg777 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other Philippine regulatory or law enforcement authorities when required to do so by law, court order, or regulatory directive.
• Corporate transactions: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the relevant acquiring entity, subject to equivalent data protection commitments.

xg777 will not disclose your personal data to any third party for their own independent marketing or commercial purposes without your explicit consent.

7. International Data Transfers

xg777's primary operations and player data are processed within the Philippines. Where data processing involves service providers or infrastructure located outside the Philippines, xg777 ensures that such transfers are made only to jurisdictions or recipients that provide an adequate level of data protection, or that appropriate contractual safeguards are in place in accordance with the Data Privacy Act of 2012 and NPC guidelines.

In all cases, the protections afforded to your personal data under this Policy will continue to apply regardless of where the data is processed.

8. Data Retention

xg777 retains your personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following retention guidelines:

• Active account data: Retained for the duration of your account relationship with xg777.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure, in compliance with AML retention requirements under Philippine law.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable Philippine financial regulations.
• Support and communication records: Retained for two (2) years following the resolution of the relevant interaction, unless a longer period is required for dispute resolution or regulatory purposes.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter to demonstrate compliance.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymized in accordance with xg777's data destruction procedures.

9. Security Measures

xg777 implements technical and organizational security measures designed to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and xg777 servers.
• Encryption of sensitive data fields at rest, including KYC document storage.
• Role-based access controls limiting employee access to personal data to those with a demonstrated need.
• Multi-factor authentication requirements for internal system access by xg777 personnel.
• Regular security assessments and vulnerability testing of Platform infrastructure.
• Incident response procedures to detect, report, and address personal data breaches in accordance with NPC notification requirements.

While xg777 takes data security seriously, no electronic transmission or storage system is completely immune to risk. You are encouraged to use strong, unique passwords and to enable two-factor authentication on your xg777 account as an additional layer of personal protection.

10. Cookies & Tracking Technologies

xg777 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function correctly, including maintaining your login session and remembering your language preference.
• Analytics cookies: Used to collect aggregated, anonymized information about how Filipino players use the xg777 Platform, enabling us to improve performance and user experience.
• Security cookies: Used to detect fraudulent activity, bot traffic, and anomalous login patterns to protect your account.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to log in and use the xg777 Platform. xg777 does not use cookies to serve third-party advertising or track users across third-party websites.

11. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by xg777:

• Right to be informed: The right to be notified about how your personal data is collected, used, and processed — which this Policy fulfils.
• Right of access: The right to request a copy of the personal data xg777 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data in your xg777 account.
• Right to erasure: The right to request deletion of your personal data, subject to xg777's legal retention obligations under applicable Philippine law.
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to object: The right to object to certain processing activities, including direct marketing communications.
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact xg777 at [email protected]. We will respond to your request within the timeframe required by applicable Philippine law. xg777 will not discriminate against you for exercising your data subject rights.

12. Minors

The xg777 Platform is strictly intended for users who are 21 years of age or older, in compliance with Philippine gaming age restrictions. xg777 does not knowingly collect personal data from individuals under 21 years of age. If xg777 discovers that personal data has been collected from a minor, the relevant account will be immediately closed, all associated data will be deleted, and any funds in the account will be handled in accordance with applicable regulatory requirements.

If you are a parent or guardian and believe that a minor has registered on the xg777 Platform using their personal details or your payment methods, please contact us immediately at [email protected].

13. Third-Party Links

The xg777 Platform does not contain links to third-party websites for commercial or advertising purposes. Any links present on the Platform direct users exclusively to other sections within the xg777 website. xg777 is not responsible for the privacy practices of any third-party payment providers or services that you access independently in the course of using their payment platforms (e.g., GCash, Maya) to transact with xg777. We encourage you to review the privacy policies of all third-party services you use.

14. Changes to This Privacy Policy

xg777 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, Platform functionality, or applicable Philippine law. The updated Policy will be published on this page with the effective date clearly indicated at the top. Where changes are material, xg777 will endeavor to notify registered players via email or an in-Platform notification prior to the changes taking effect.

Your continued use of the xg777 Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not accept the changes, you must discontinue use of the Platform and may request account closure in accordance with the xg777 Terms and Conditions.

15. Contact & Data Protection

For any privacy-related enquiries, data subject rights requests, or concerns about how xg777 handles your personal data, please contact the xg777 data protection team:

• Email (plain text — not a clickable link): [email protected]
• Subject line: "Privacy / Data Request – [Your Registered Name]"
• Live Chat: Available 24/7 via the xg777 Platform
• Response target: Within 15 business days for formal data subject requests, as prescribed under the Data Privacy Act of 2012.

If you are not satisfied with xg777's response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.