777pin Privacy Policy

This Privacy Policy applies to all personal data collected and processed by 777pin in connection with the registration, use, and termination of player accounts on the 777pin platform at 777pin.vip, including all games, payment services, customer support interactions, and promotional activities offered on or through the platform.

777pin is the data controller in respect of personal data collected directly from Players and processed for the primary purposes described in this Policy. Where 777pin engages third-party service providers who process data on its behalf, those providers act as data processors under written agreements that impose data protection obligations consistent with RA 10173.

This Policy does not apply to third-party websites, applications, or services that may be linked to or from the 777pin platform. 777pin is not responsible for the privacy practices of any third-party operator. Players who access third-party content through the platform should review the applicable third-party privacy policies independently.

777pin collects the following categories of personal data from players in connection with account registration, KYC verification, platform use, and payment processing:

2.1 Identity & Contact Data

2.2 Financial & Transaction Data

2.3 Gaming & Platform Activity Data

2.4 Technical & Device Data

777pin collects personal data through the following channels and mechanisms:

• Direct Registration: When you create a 777pin account, you voluntarily provide identity, contact, and authentication data through the registration form.
• KYC Verification Process: When you submit identity documents, photographs, or liveness verification data as part of the account verification or withdrawal verification process.
• Payment Transactions: When you make a deposit or request a withdrawal, financial data associated with the transaction is collected through our integrated payment providers.
• Platform Use: As you navigate and use the 777pin platform, technical and activity data is automatically collected through server logs, cookies, and similar tracking technologies.
• Customer Support: When you contact the 777pin support team via live chat, email, or other channels, communications and associated data are recorded and stored.
• Third-Party Verification Services: Where you consent to identity verification through a third-party KYC provider, data may be sourced from that provider's records in accordance with their applicable terms and your consent.
• Responsible Gaming Interactions: When you use self-exclusion, limit-setting, or other responsible gaming tools, data related to your responsible gaming preferences and restrictions is collected.

777pin processes personal data for the following specific, legitimate purposes:

Under the Philippine Data Privacy Act of 2012, 777pin relies on the following legal bases for the processing of personal data:

• Contractual Necessity: Processing is necessary for the performance of the contract between 777pin and the Player — specifically, to provide account services, process payments, and deliver gaming services as described in the Terms & Conditions.
• Legal Obligation: Processing is required by applicable Philippine law and regulatory requirements, including PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160, as amended), and the Data Privacy Act.
• Legitimate Interest: Processing is necessary for the legitimate interests of 777pin, including platform security, fraud prevention, service improvement, and responsible gaming enforcement — provided such interests are not overridden by the rights and interests of data subjects.
• Consent: Where processing is not required by contract or law — particularly for optional promotional communications and certain analytics activities — 777pin relies on freely given, specific, informed, and unambiguous consent from the Player. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

777pin does not sell, rent, or share your personal data with third parties for their independent commercial or marketing use. Personal data is shared with third parties only in the following circumstances:

6.1 Service Providers (Data Processors)

777pin engages authorised third-party service providers who process personal data on our behalf under written data processing agreements. These include payment processors (GCash/Maya/banking APIs), KYC/identity verification providers, cloud infrastructure providers, and customer support platform operators. All processors are contractually required to maintain data protection standards consistent with RA 10173 and to process data only on documented instructions from 777pin.

6.2 Regulatory Authorities

777pin is required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities upon lawful request, court order, or as required by applicable Philippine law. 777pin will use reasonable efforts to notify affected players of such disclosures where legally permitted to do so.

6.3 Fraud Prevention and Security

Where 777pin has reasonable grounds to suspect fraud, money laundering, or other illegal activity, limited personal data may be shared with law enforcement, relevant financial institutions, or industry fraud prevention bodies to the extent permitted by applicable law.

6.4 Corporate Transactions

In the event of a merger, acquisition, corporate restructuring, or sale of all or substantially all of 777pin's business assets, player personal data may be transferred as part of the transaction. Affected players will be notified prior to any such transfer and will have the opportunity to exercise their data subject rights.

777pin uses cookies and similar tracking technologies on the platform to deliver a functional, personalised, and secure gaming experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the operation of the 777pin platform, including session management, login authentication, security token validation, and responsible gaming tool enforcement. These cookies cannot be disabled without affecting core platform functionality.
• Functional Cookies: Store your preferences and settings, such as language selection, remembered login state (where you enable this), and game lobby display preferences. These cookies improve your experience but are not essential to basic platform operation.
• Analytics Cookies: Collect anonymised or pseudonymised data about how players navigate and use the 777pin platform — page views, session duration, navigation paths, and error reports. This data is used solely to improve the platform. 777pin uses first-party analytics and does not share raw analytics data with third-party advertising platforms.
• Security Cookies: Used to detect and prevent fraudulent activity, automated bot access, and credential stuffing attacks. These cookies are strictly necessary for platform security.

777pin does not use third-party advertising or retargeting cookies. Your browsing activity on 777pin is not shared with advertising networks for the purpose of displaying targeted advertisements on other websites.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use the 777pin platform. Mobile app users may manage tracking preferences through their device's app privacy settings.

777pin implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security infrastructure includes, but is not limited to:

• Encryption in Transit: All data transmitted between players' devices and the 777pin platform is encrypted using TLS 1.2 or higher (256-bit SSL), ensuring that data cannot be intercepted during transmission.
• Encryption at Rest: Sensitive personal data and payment data stored on 777pin infrastructure is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within 777pin's systems is restricted to authorised personnel on a need-to-know basis. Role-based access controls, multi-factor authentication, and audit logging are applied to all systems holding player personal data.
• Pseudonymisation: Where technically feasible, personal data used in analytics and internal testing processes is pseudonymised or anonymised to reduce the risk of re-identification.
• Security Monitoring: 777pin's infrastructure is monitored continuously for intrusion attempts, unusual access patterns, and security anomalies. Automated alerting and incident response procedures are in place.
• Third-Party Security Audits: 777pin engages independent security specialists to conduct periodic assessments of its data security controls and platform infrastructure.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, 777pin will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with RA 10173.

777pin retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law and regulatory requirements. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of the active account relationship, plus a minimum of five (5) years following account closure, as required by AMLC regulations and PAGCOR licensing conditions.
• KYC Documentation: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later, in compliance with Anti-Money Laundering Act requirements.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of each transaction, consistent with AMLC record-keeping obligations.
• Gaming Activity Logs: Retained for three (3) years from the date of the relevant gaming session, for dispute resolution, responsible gaming audit, and PAGCOR compliance purposes.
• Customer Support Records: Retained for two (2) years from the date of the last relevant interaction, unless the record relates to an unresolved dispute or legal proceeding.
• Marketing Consent Records: Retained for as long as the consent remains active plus two (2) years from the date of consent withdrawal, to demonstrate compliance with consent management obligations.
• Technical Logs: Retained for ninety (90) days unless flagged for security investigation, in which case relevant records are retained for the duration of the investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with 777pin's data destruction procedures.

As a registered 777pin player and data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data:

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Subject Rights Request" and include your registered account details for identity verification purposes. 777pin will respond within fifteen (15) business days of receiving a valid request. Identity verification may be required before processing certain requests.

The 777pin platform is strictly restricted to individuals who are 21 years of age or older, in compliance with PAGCOR responsible gaming requirements and applicable Philippine law governing gaming activities. 777pin does not knowingly collect personal data from individuals below the age of 21.

777pin employs mandatory age verification as part of its KYC process. All new accounts are subject to age verification. Where 777pin discovers or has reasonable grounds to believe that an account has been created by or on behalf of a person below the age of 21, the account will be immediately suspended, all associated data will be reviewed, and the account will be permanently closed in accordance with applicable PAGCOR guidelines.

If a parent or guardian becomes aware that their child under the age of 21 has created an account on 777pin, they should immediately contact 777pin support at [email protected]. 777pin will promptly close the account and delete any personal data collected from the minor, except where retention is required by applicable law.

777pin primarily processes player personal data within the Republic of the Philippines. However, some of our authorised third-party service providers may be located in, or operate infrastructure in, other countries. Where personal data is transferred outside the Philippines, 777pin ensures that such transfers are made only to recipients that provide adequate levels of data protection, through one or more of the following mechanisms:

• Transfer to countries deemed by the National Privacy Commission (NPC) to provide adequate protection for personal data.
• Execution of data transfer agreements with recipient entities incorporating standard contractual clauses approved by the NPC or equivalent data protection authority.
• Transfer to recipient entities that have implemented binding corporate rules or equivalent certification mechanisms recognised under applicable data protection law.

Where a cross-border transfer is required, 777pin will take all reasonable steps to ensure that your data remains protected to the standards required by RA 10173. Players may request information about specific transfer mechanisms by contacting [email protected].

777pin processes personal data specifically related to responsible gaming activities as a mandatory component of its PAGCOR-regulated operations. This includes:

• Self-Exclusion Records: Where a player activates a self-exclusion, their account status, exclusion period, and exclusion request details are recorded and retained. This data is used to enforce the exclusion and to prevent the creation of new accounts during the exclusion period.
• Deposit and Loss Limit Records: Limit settings, change history, and the dates on which limits were activated or modified are recorded to ensure accurate enforcement and to maintain an audit trail.
• Session and Activity Monitoring: Aggregated gaming activity data is used to identify patterns that may be indicative of problem gambling behaviour, in fulfilment of PAGCOR responsible gaming obligations.
• Responsible Gaming Communications: Where 777pin contacts a player regarding responsible gaming concerns, records of such communications are retained.

Responsible gaming data is treated with the highest level of sensitivity and is accessible only to designated responsible gaming and compliance personnel within 777pin. It is not used for marketing or commercial profiling purposes.

For more information about 777pin's responsible gaming practices, tools, and player support resources, please visit our Responsible Gaming page.

777pin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, PAGCOR regulatory requirements, or operational changes to the platform. The "Last Updated" date at the top of this document indicates when the most recent revision was made.

Where changes to this Policy are material — in particular, where they affect your rights as a data subject or introduce new categories of data processing — 777pin will provide advance notice to registered players via email to their registered address and/or via a prominent platform notification, prior to the changes taking effect.

Continued use of the 777pin platform following the effective date of any amended Privacy Policy constitutes your acknowledgment of and agreement to the updated Policy. If you do not agree to material changes, you may close your account by contacting 777pin support.

The current version of this Privacy Policy is always available at 777pin.vip/privacy-policy.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 777pin, please contact us using the details below. 777pin is committed to responding to all data protection enquiries promptly and in accordance with the timelines required by RA 10173.

777pin acknowledges all privacy enquiries within three (3) business days and aims to provide a substantive response within fifteen (15) business days. Complex requests involving large volumes of data or technical investigation may require additional time; players will be informed of any such extension within the initial 15-day window.