eg777 Privacy Policy

1. About This Policy

This Privacy Policy applies to all personal data processed by eg777 in connection with the operation of the eg777 online gaming platform accessible at eg777.co, including all games, account services, customer support, and promotional activities. It applies to all registered Players, prospective registrants, and visitors to the eg777 platform.

eg777 acts as a Personal Information Controller as defined under Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), with respect to the personal data collected through the platform. Where eg777 engages third-party service providers to process data on its behalf, those providers act as Personal Information Processors subject to data processing agreements that require compliance with the DPA.

By registering an eg777 account or using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein, where consent is the applicable legal basis for processing. For processing carried out under other legal bases (such as legal obligation or legitimate interest), consent is not required but you will be informed of such processing through this Policy.

2. Data We Collect

2.1 Registration and Identity Data

When you create an eg777 account, we collect: your full legal name, date of birth, nationality, residential address, email address, and Philippine mobile number. For KYC (Know Your Customer) verification required under PAGCOR and Anti-Money Laundering Act obligations, we additionally collect: copies of government-issued photo ID (PhilSys, driver's license, passport, SSS, UMID, or equivalent), proof of address documents, and selfie photographs for identity matching.

2.2 Financial and Transaction Data

We collect data related to all financial transactions conducted through eg777, including: deposit amounts, payment method details (e.g., GCash-registered mobile number, bank account name — but not full account numbers or card numbers, which are handled by the payment processor), withdrawal requests, transaction reference numbers, and transaction timestamps.

2.3 Gaming Activity Data

We record your gaming activity on the platform, including: games played, bet amounts and outcomes, session duration and timing, game preferences, and bonus usage history. This data is required for game integrity, dispute resolution, and responsible gaming monitoring purposes.

2.4 Technical and Device Data

We automatically collect certain technical data when you access the eg777 platform: IP address, device type and operating system, browser type and version, screen resolution, session identifiers, and referring URL. This data is used for security monitoring, fraud prevention, and platform optimization.

2.5 Communications Data

When you contact eg777 customer support, we collect and retain records of those communications — including live chat transcripts, email correspondence, and support ticket content — for quality assurance, dispute resolution, and regulatory record-keeping purposes.

2.6 Sensitive Personal Information

eg777 may collect sensitive personal information as defined under the DPA — specifically, government ID numbers — solely for the purpose of KYC identity verification as required by PAGCOR and AMLA regulations. This data is processed under legal obligation and is handled with the heightened protection requirements applicable to sensitive personal information under the DPA.

3. How We Use Your Data

eg777 does not use personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by anti-money-laundering screening systems operating under legal obligation.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act, eg777 processes personal data under the following legal bases:

• Contract Performance: Processing necessary to register your account, provide gaming services, and process your deposits and withdrawals under the Terms and Conditions you agree to;
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, Anti-Money Laundering Act (RA 9160) requirements, AMLA Council reporting obligations, and National Privacy Commission regulations;
• Legitimate Interest: Processing for fraud prevention, platform security, and customer support quality assurance, where eg777's interest does not override your rights and freedoms;
• Consent: Processing for marketing communications, where you have provided explicit opt-in consent. You may withdraw marketing consent at any time via your account settings or by contacting support.

5. Data Sharing & Disclosure

eg777 shares personal data only in the following circumstances:

5.1 Service Providers (Personal Information Processors)

eg777 engages third-party service providers to perform functions on its behalf, including: payment processing (GCash/Maya integrations, bank transfer processors), KYC and identity verification services, game software providers, cloud infrastructure providers, and customer support platforms. All such providers are bound by data processing agreements requiring them to process personal data only as instructed by eg777 and in compliance with the DPA.

5.2 Regulatory and Legal Disclosure

eg777 is required to disclose personal data to: PAGCOR (as the licensing authority), the Anti-Money Laundering Council (AMLC) where transaction reporting obligations are triggered under RA 9160, law enforcement authorities pursuant to valid legal orders or warrants, and courts or arbitral bodies in connection with legal proceedings.

5.3 Business Transfers

In the event of a merger, acquisition, or transfer of all or substantially all of eg777's assets, personal data held by eg777 may be transferred to the acquiring entity, subject to equivalent data protection obligations. Players will be notified of any such transfer that materially affects the processing of their personal data.

6. Cookies & Tracking Technologies

eg777 uses cookies and similar technologies to operate the platform and improve user experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for session authentication, security, and core platform functionality. These cannot be disabled without impairing platform use.
• Functional Cookies: Remember your preferences (e.g., language, game lobby layout, notification settings) to personalise your experience.
• Analytics Cookies: Collect aggregated usage data to understand how players interact with the platform and identify areas for improvement. Data collected is anonymised where possible.
• Security Cookies: Assist in detecting and preventing fraudulent access and suspicious account activity.

eg777 does not use third-party advertising or tracking cookies that share data with advertising networks. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may prevent full platform functionality.

7. Data Retention

eg777 retains personal data for the following periods, subject to regulatory requirements that may mandate longer retention:

• Account and KYC data: Retained for the duration of your account plus 5 years after account closure, in compliance with AMLA record-keeping requirements;
• Transaction records: Retained for 5 years from the date of the transaction, in compliance with AMLA and PAGCOR audit requirements;
• Gaming activity logs: Retained for 3 years from the date of each session, for dispute resolution and regulatory audit purposes;
• Customer support records: Retained for 2 years from the date of the interaction;
• Marketing consent records: Retained until you withdraw consent, plus 1 year thereafter for compliance demonstration purposes.

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with eg777's data disposal procedures.

8. Data Security

eg777 implements the following technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• TLS/SSL encryption for all data transmitted between your device and the eg777 platform;
• Encryption of sensitive data at rest in eg777's database systems;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Two-factor authentication (OTP via Philippine mobile number) available on all Player accounts;
• Regular security audits and penetration testing of the platform infrastructure;
• Incident response procedures aligned with the NPC's mandatory data breach notification requirements under NPC Circular 16-03.

9. Your Data Subject Rights

Under the Philippine Data Privacy Act (RA 10173), you have the following rights with respect to your personal data held by eg777:

• Right to be Informed: You have the right to be informed of the nature, purpose, and extent of processing of your personal data — this Privacy Policy fulfils that obligation;
• Right of Access: You may request a copy of the personal data eg777 holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data in your account;
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where processing is no longer necessary, subject to overriding retention obligations under AMLA, PAGCOR regulations, and other applicable law;
• Right to Data Portability: You may request a copy of personal data you provided to eg777 in a structured, commonly used, machine-readable format;
• Right to Object: You may object to processing carried out under legitimate interest or for direct marketing purposes;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe eg777 has processed your personal data in violation of the DPA.

To exercise any of the above rights, contact the eg777 Data Protection Officer at the contact details provided in Section 13. eg777 will respond to data subject requests within 30 calendar days. Where a request is particularly complex, eg777 may extend this period by a further 30 days with notification to you.

10. Children's Privacy and Age Restriction

If you believe that a minor has provided personal information to eg777, please contact us immediately at the details in Section 13 so that we may take prompt action.

11. Cross-Border Data Transfers

Some of eg777's service providers (including cloud infrastructure and game software providers) may process personal data in jurisdictions outside the Philippines. Where such cross-border transfers occur, eg777 ensures that adequate safeguards are in place as required under Section 21 of the DPA, including: contractual clauses requiring the recipient to provide at least the same level of protection as the DPA, and transfer to jurisdictions recognised by the National Privacy Commission as providing adequate data protection.

Personal data transferred outside the Philippines is subject to the same use limitations, security standards, and data subject rights protections described in this Privacy Policy.

12. Changes to This Privacy Policy

eg777 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform features. Material changes will be communicated to registered Players via email or SMS notification to the contact details on file at least 14 days before the changes take effect. The most current version of this Privacy Policy is always available at eg777.co/privacy-policy. Continued use of the platform after the effective date of any update constitutes acceptance of the revised Privacy Policy.

13. Contact & Data Protection Officer

For any privacy-related enquiries, data subject rights requests, or complaints regarding eg777's handling of your personal data, please contact the eg777 Data Protection Officer:

You also have the right to lodge a complaint with the National Privacy Commission (NPC) if you are not satisfied with eg777's handling of your data subject rights request. The NPC is the Philippine government authority responsible for enforcement of the Data Privacy Act. NPC contact details are available on the NPC official website.