Privacy Policy – xs777

1. Introduction

xs777 ("we", "us", "the Platform") operates the online casino and sports betting platform accessible at xs777.win. This Privacy Policy explains how xs777 collects, processes, stores, and protects personal data relating to players and visitors ("you") who access or use the xs777 platform.

xs777 is committed to protecting the privacy and personal data of Filipino players in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. By registering an account or using any xs777 service, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

xs777 is the data controller responsible for the personal data processed through the xs777 platform. All enquiries, data access requests, and complaints relating to the privacy practices described in this Policy should be directed to the xs777 Data Privacy Officer at the contact details provided in Section 14 of this Policy.

3. Personal Data We Collect

xs777 collects the following categories of personal data in connection with account registration, platform use, and regulatory compliance:

• Identity data: Full legal name, date of birth, nationality, and government-issued identification document details (e.g., Philippine passport, UMID, PhilSys ID, SSS ID, or driver's license).
• Contact data: Email address, mobile phone number, and residential address.
• Financial data: GCash account details, Maya account details, bank account names (BPI, BDO), deposit and withdrawal transaction records, and account balance history.
• Technical data: IP address, browser type and version, device type and operating system, session duration, and pages visited within the xs777 platform.
• Usage data: Game history, betting records, wagering patterns, and bonus utilization within xs777.
• Communications data: Records of support interactions, complaints, and correspondence with the xs777 team.
• Verification data: Identity verification photographs (selfies with ID) submitted for KYC compliance.

xs777 does not collect sensitive personal data beyond what is required for age verification and identity compliance under PAGCOR regulations.

4. How xs777 Uses Your Personal Data

xs777 processes your personal data for the following purposes:

• Account management: Creating and maintaining your xs777 registered account, verifying your identity, and processing login authentication.
• Payment processing: Facilitating deposits via GCash, Maya, BPI, BDO, and other supported payment methods, and processing withdrawal requests to your verified payment accounts.
• Regulatory compliance: Fulfilling PAGCOR licensing requirements, anti-money laundering (AML) obligations under Philippine law, and Know Your Customer (KYC) verification mandates.
• Platform security: Detecting and preventing fraud, unauthorized access, account compromise, and abuse of xs777 promotional offers.
• Customer support: Responding to enquiries, resolving disputes, and processing complaints submitted by xs777 players.
• Service improvement: Analyzing aggregate, anonymized usage data to improve game selection, platform performance, and user experience on xs777.
• Responsible gaming: Monitoring gameplay patterns to identify and support players who may be experiencing gambling-related harm, in accordance with xs777's responsible gaming commitments.
• Communications: Sending transactional notifications (deposit confirmations, withdrawal status updates, security alerts) and, where you have consented, promotional communications about xs777 offers.

5. Legal Basis for Processing

xs777 processes personal data on the following legal grounds under the Philippine Data Privacy Act:

• Contractual necessity: Processing required to perform the xs777 Player Agreement (account registration, payment processing, game delivery).
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AML regulations, and other applicable Philippine laws.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and aggregate analytics that do not override your privacy rights.
• Consent: Where xs777 relies on your consent (e.g., for optional marketing communications), you may withdraw that consent at any time by updating your xs777 account communication preferences.

6. Data Sharing & Disclosure

xs777 does not sell, rent, or trade your personal data to third parties for commercial purposes. xs777 may share your data only in the following limited circumstances:

• Payment providers: GCash, Maya, BPI, BDO, and other payment processors receive transaction data necessary to process your deposits and withdrawals.
• Game providers: Game studios that supply titles to the xs777 platform may receive anonymized session identifiers necessary for game delivery and fairness auditing.
• KYC and AML service providers: Third-party identity verification providers contracted by xs777 to support regulatory compliance.
• Regulatory and law enforcement authorities: xs777 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities where required by law or court order.
• Professional advisers: Legal, accounting, and audit professionals engaged by xs777 under strict confidentiality obligations.

All third-party service providers engaged by xs777 are contractually required to process personal data only for the purposes specified by xs777 and in compliance with applicable Philippine data protection law.

7. International Data Transfers

Where xs777 engages service providers or technology infrastructure located outside the Philippines, personal data may be transferred internationally. xs777 ensures that any such transfers are protected by appropriate contractual safeguards, including standard data protection clauses, and that the receiving parties uphold data protection standards at least equivalent to those required under the Philippine Data Privacy Act.

8. Data Retention

xs777 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, subject to minimum retention periods required by Philippine law. In particular:

• Account and transaction records are retained for a minimum of five (5) years following account closure, in compliance with AML and tax record-keeping requirements.
• Identity verification documents (KYC records) are retained for a minimum of five (5) years from the date of verification.
• Support communications are retained for three (3) years.
• Technical logs are retained for a maximum of twelve (12) months.

Following the expiry of applicable retention periods, xs777 will securely delete or anonymize your personal data.

9. Cookies & Tracking Technologies

The xs777 platform uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies used by xs777 are as follows:

• Essential cookies: Required for the xs777 platform to function. These include session authentication tokens and security cookies. These cannot be disabled.
• Preference cookies: Remember your xs777 platform settings (e.g., language preference, display settings) between sessions.
• Analytics cookies: Collect anonymized, aggregate data about how players use xs777, which pages are visited most frequently, and where platform performance can be improved.

xs777 does not use third-party advertising cookies or cross-site tracking technologies. You can manage cookie preferences through your browser settings, though disabling essential cookies will prevent access to certain xs777 platform features.

10. Security Measures

xs777 implements technical and organizational security measures appropriate to the nature of the personal data processed, including:

• TLS encryption for all data in transit between your device and xs777 servers.
• Encryption of stored personal and financial data at rest.
• Access controls limiting xs777 staff access to personal data on a strict need-to-know basis.
• Regular security assessments and platform vulnerability testing.
• Multi-factor authentication options for player accounts.

While xs777 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. Players are encouraged to maintain strong, unique passwords for their xs777 accounts and to enable two-factor authentication where available.

11. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, xs777 players hold the following rights with respect to their personal data:

• Right to be informed: The right to know what personal data xs777 holds about you and how it is processed.
• Right of access: The right to request a copy of the personal data xs777 holds about your account.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data in your xs777 account.
• Right to erasure: The right to request deletion of your personal data, subject to xs777's legal retention obligations.
• Right to object: The right to object to processing of your personal data for legitimate interest purposes, including direct marketing.
• Right to data portability: The right to receive a copy of your xs777 data in a structured, machine-readable format.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, contact the xs777 Data Privacy Officer at the email address listed in Section 14.

12. Children and Minors

The xs777 platform is strictly restricted to individuals aged 21 years and above in accordance with PAGCOR regulations. xs777 does not knowingly collect personal data from individuals below the age of 21. If xs777 becomes aware that a minor has registered an account, that account will be immediately closed, all balances will be suspended pending investigation, and personal data will be deleted in accordance with applicable law.

If you believe a minor has gained access to xs777, please contact xs777 support immediately.

13. Changes to This Privacy Policy

xs777 reserves the right to update this Privacy Policy at any time to reflect changes in the platform, applicable law, or data processing practices. Material changes will be communicated to registered players via email notification or a prominent notice on the xs777 platform. The date of the most recent revision is displayed at the top of this Policy. Continued use of xs777 following notification of changes constitutes acceptance of the updated Policy.

14. Contact & Complaints

For any questions, data access requests, or privacy complaints relating to the xs777 platform, please contact the xs777 Data Privacy Officer. The xs777 support contact email address is: [email protected]

xs777 aims to acknowledge all privacy-related enquiries within 3 business days and to resolve them within 30 calendar days. Where resolution requires additional time, xs777 will notify you of the expected timeline.

If you are not satisfied with xs777's response to your privacy complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines.