777jl Privacy Policy —
How We Handle Your Personal Data

1 Data Controller Identity

777jl ("the Platform," "we," "us," "our") is the personal information controller responsible for the personal data collected through https://777jl.cam and all associated services operated under the 777jl brand. 777jl operates as a PAGCOR-regulated online gaming platform serving Filipino players throughout the Philippines.

This Privacy Policy governs the collection, use, storage, disclosure, and disposal of personal data that 777jl collects from registered players, prospective registrants, and website visitors in connection with the provision of online casino, sports betting, bingo, e-sports, and related gaming services. It has been prepared in compliance with Republic Act No. 10173 (the Data Privacy Act of 2012), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

2 Personal Data We Collect

777jl collects personal data from you in the following categories, depending on your interaction with the platform:

777jl does not intentionally collect special categories of personal data (such as health, racial, or religious information) unless you voluntarily provide such information in a support communication. Where sensitive personal information is received incidentally, it is treated with the heightened protection standards required under the Data Privacy Act.

3 How We Use Your Personal Data

777jl processes your personal data only for legitimate, specified, and explicit purposes. The primary purposes for which we use your data are:

• Account creation and management: Setting up and maintaining your 777jl account, authenticating your identity at login, and enabling access to platform features.
• Service delivery: Processing deposits and withdrawals, crediting game winnings and bonuses, and facilitating access to all games and betting markets on the platform.
• Regulatory compliance: Fulfilling PAGCOR licensing obligations, complying with the Anti-Money Laundering Act (RA 9160), KYC/AML reporting requirements, and any other applicable Philippine laws and NPC regulations.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, unauthorized account access, bonus abuse, and other prohibited activities.
• Responsible gaming: Monitoring gaming behavior to enable responsible gaming interventions, implementing player-requested deposit limits, and enforcing self-exclusion requests.
• Customer support: Responding to inquiries, resolving complaints, and providing technical assistance through live chat and email.
• Platform improvement: Analyzing aggregated, anonymized gaming and navigation data to improve the platform's functionality, game offering, and user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in. You may opt out at any time through your account settings or by contacting support.

777jl does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review, except where such processing is explicitly required for AML or fraud prevention screening mandated by applicable law.

4 Legal Basis for Processing

Under the Data Privacy Act of 2012 and its IRR, 777jl processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to provide the services you have registered to receive, including account management, game access, and payment processing.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, RA 9160 (Anti-Money Laundering Act), RA 10927 (Casino Operators AML Act), BSP regulations, and other applicable Philippine laws and regulations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your rights and freedoms.
• Consent: Processing for direct marketing communications, and any optional processing activities for which we have obtained your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

5 Sharing and Disclosure of Your Data

777jl does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

• Payment processors: GCash (GXI), Maya (PayMaya Philippines), BancNet, and other Philippine payment service providers receive the minimum data necessary to process your deposits and withdrawals. Each processor is bound by their own NPC-compliant privacy policies and contractual data processing obligations with 777jl.
• Identity verification providers: Accredited KYC and AML screening services process your government ID and verification selfie solely for the purpose of identity confirmation. These providers operate under data processing agreements with 777jl and are prohibited from using your data for any independent purpose.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies as required by law or upon valid legal demand.
• Game studios and platform technology providers: Providers of games accessible through 777jl receive anonymized session data necessary for game delivery and RNG auditing. No personally identifiable information beyond an anonymized player identifier is transmitted to game studios.
• Professional advisors: Legal counsel, auditors, and compliance consultants retained by 777jl may access player data on a need-to-know basis under strict confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or transfer of all or part of 777jl's business, your data may be transferred to the successor entity, provided that the successor is bound by data protection obligations at least equivalent to those in this Privacy Policy. You will be notified of such transfers.

6 Data Retention

777jl retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and registration data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required under PAGCOR licensing conditions and RA 9160 AML record-keeping obligations.
• KYC / identity documents: Retained for a minimum of five (5) years after account closure or the last transaction date, whichever is later, in accordance with AMLC and PAGCOR requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction as required under RA 9160 and BSP record-keeping regulations.
• Gaming activity logs: Retained for three (3) years for platform integrity monitoring and dispute resolution purposes, and for five (5) years where required for regulatory reporting.
• Support communications: Retained for two (2) years from the date of the last communication, or longer if the subject matter relates to an unresolved dispute or regulatory investigation.
• Marketing preferences and consent records: Retained for the duration of the account and for two (2) years after account closure as evidence of consent or opt-out status.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification, consistent with NPC-recommended data disposal procedures.

7 Security Measures

777jl implements a comprehensive suite of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your browser and 777jl servers is protected by TLS 1.2 or higher encryption. Look for the padlock icon in your browser address bar.
• Encryption at rest: Sensitive data fields — including payment details and KYC documents — are encrypted at rest using AES-256 encryption.
• Password security: Passwords are never stored in plain text. We use industry-standard adaptive hashing algorithms with per-user salts. Even 777jl staff cannot retrieve your actual password.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis using role-based access controls and multi-factor authentication for all staff accounts.
• Penetration testing: 777jl commissions independent penetration testing of its platform infrastructure on a regular basis to identify and remediate security vulnerabilities.
• Incident response: 777jl maintains a documented personal data breach response procedure consistent with NPC Circular No. 16-03, including 72-hour notification timelines to the NPC.

Despite these measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials and for promptly notifying 777jl if you suspect unauthorized access to your account.

8 Cookies and Tracking Technologies

777jl uses cookies and similar tracking technologies to operate the platform, maintain your session, and analyze platform usage. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function — including session management, login state maintenance, security tokens, and load balancing. These cannot be disabled without impairing platform functionality.
• Functional cookies: Remember your preferences, such as language settings and responsible gaming tool configurations, to personalize your experience on subsequent visits.
• Analytics cookies: Used by 777jl to understand how players navigate the platform in aggregate — which game sections are most visited, where players encounter friction, and how to improve the platform experience. Analytics data is aggregated and anonymized before analysis.
• Marketing cookies: Only activated if you have consented to marketing communications. These track interactions with promotional content to help 777jl deliver relevant offers.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent you from logging in or using core platform features. Disabling optional cookies will not prevent you from using the platform but may limit personalization.

9 Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by 777jl. To exercise any of these rights, contact our Data Protection Officer using the details in Section 13.

• Right to be Informed (Sec. 16a): The right to be notified of how your personal data is being processed, which this Privacy Policy fulfils.
• Right to Access (Sec. 16b): The right to request a copy of the personal data 777jl holds about you, information on how it is being used, and a list of third parties with whom it has been shared.
• Right to Object (Sec. 16c): The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests, where you have grounds related to your particular situation.
• Right to Erasure or Blocking (Sec. 16d): The right to request deletion or blocking of your personal data where it is incomplete, outdated, false, unlawfully obtained, or no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to Rectification (Sec. 16c): The right to request correction of inaccurate, incomplete, or outdated personal data held by 777jl.
• Right to Data Portability (Sec. 18): The right to obtain a structured, commonly used, machine-readable copy of your personal data for transmission to another personal information controller, where technically feasible.
• Right to Damages (Sec. 16f): The right to be indemnified for damages sustained as a result of inaccurate, incomplete, outdated, false, or unlawfully processed personal data.
• Right to Complain: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe 777jl has processed your data in violation of RA 10173.

777jl will respond to verified data subject requests within fifteen (15) business days of receipt. We may request proof of identity before processing a request to protect against unauthorized data access. Where a request is complex or voluminous, we may extend the response period by a further 15 business days with prior notice.

10 Minors and Age Verification

777jl strictly prohibits access to and use of its platform by individuals under the age of 21 years, consistent with PAGCOR regulations governing real-money gambling in the Philippines. 777jl does not knowingly collect, use, or retain personal data from any person under 21 years of age.

Age is verified through the mandatory KYC identity verification process, which requires submission of a government-issued Philippine ID establishing date of birth. Where 777jl discovers that personal data has been collected from a person under 21 — whether through fraudulent registration or otherwise — the relevant account will be immediately suspended, all associated personal data will be deleted to the extent permitted by law, and the matter will be reported to PAGCOR as required.

If you are a parent or guardian and believe a minor has registered or used a 777jl account, please contact our support team immediately via live chat or at the contact details in Section 13.

11 Cross-Border Data Transfers

Certain service providers engaged by 777jl — including cloud infrastructure providers, identity verification processors, and game platform technology vendors — may process personal data outside of the Philippines. Where such transfers occur, 777jl ensures that appropriate safeguards are in place consistent with Section 21 of the Data Privacy Act and NPC guidelines on cross-border data flows.

Applicable safeguards may include: data processing agreements incorporating standard contractual clauses approved or recognized by the NPC; confirmation that the receiving jurisdiction provides a comparable level of data protection; or reliance on another lawful transfer mechanism recognized under RA 10173.

You may request details of the specific safeguards in place for any cross-border transfer affecting your personal data by contacting our Data Protection Officer as described in Section 13.

12 Changes to This Privacy Policy

777jl may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or NPC guidance. When material changes are made, we will notify registered players via email to the address on their account and post a prominent notice on the 777jl website for at least 30 days prior to the effective date.

The effective date of the current version is displayed at the top of this page. Continued use of the 777jl platform after the effective date of a revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree to a material change, you should close your account before the effective date and contact support to request deletion of your personal data to the extent permitted by applicable retention requirements.

13 Contact Us and Data Protection Officer

If you have questions about this Privacy Policy, wish to exercise your data subject rights under RA 10173, or want to report a data privacy concern, you may contact 777jl through the following channels:

• Live Chat Support: Available 24 hours a day, 7 days a week through the support widget inside your 777jl account dashboard. Fastest route for account-related privacy matters.
• Email — General Support: [email protected] (plain text contact; do not send sensitive documents via unencrypted email — use the secure upload function in your account for KYC and identity documents).
• Data Protection Officer (DPO): For formal data subject rights requests under RA 10173, please contact the 777jl DPO at [email protected] with the subject line "DATA PRIVACY REQUEST." We will respond to verified DPO requests within 15 business days.

If you are not satisfied with 777jl's response to a privacy concern, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing RA 10173. Information about filing an NPC complaint is available on the NPC's official website.