xs777 Privacy Policy

For the purposes of the Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations (IRR), xs777 is the Personal Information Controller (PIC) in respect of the personal data collected from users of the xs777 platform. xs777 determines the purposes for which and the means by which personal data is processed through the xs777 platform at xs777.co.

xs777 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable Philippine data protection law. Contact details for the xs777 DPO are provided in Section 15 of this Policy.

xs777 collects and processes the following categories of personal data from players and users of the platform:

2.1 Identity & Registration Data

• Full legal name as appearing on government-issued identification
• Date of birth (to verify compliance with the 21+ age requirement)
• Gender (as declared during registration)
• Government-issued ID type and number (e.g., Philippine Passport, PhilSys ID, Driver's License, UMID)
• Username chosen by the player at registration

2.2 Contact Data

• Philippine mobile number (used as primary account identifier and for OTP verification)
• Email address (where provided)
• Residential or mailing address (collected during KYC verification)
• City and region of residence (e.g., Manila, Cebu City, Davao City, Quezon City, Makati)

2.3 Financial & Transaction Data

• GCash account number or mobile number (for deposit and withdrawal processing)
• PayMaya account details where applicable
• Bank account name, bank name, and account number for bank transfer transactions
• Cryptocurrency wallet addresses used for USDT or Bitcoin transactions
• Complete deposit history, withdrawal history, and transaction reference numbers
• Bonus credits received, wagering activity, and bonus conversion history

2.4 Technical & Device Data

• IP address at the time of registration and each subsequent login to xs777
• Device type, model, and operating system (e.g., Android 14, iOS 17)
• Browser type and version
• Mobile network carrier (e.g., Globe, Smart, DITO)
• Session timestamps, duration, and frequency of xs777 platform access
• xs777 app version (if applicable)

2.5 Gaming Behavioral Data

• Game titles played, bet amounts, win/loss outcomes, and session durations
• Sports events and markets bet upon through xs777
• Bingo rooms accessed and cards purchased
• Bonus offers viewed, accepted, or declined
• Responsible gaming tool usage (e.g., deposit limits set, cooling-off periods activated)

2.6 Communications Data

• Content of live chat conversations between you and xs777 support agents
• Email correspondence sent to or received from xs777
• Records of any formal complaints or dispute notifications submitted to xs777

xs777 collects personal data through the following methods:

• Direct Collection — Registration: When you create an xs777 account, you voluntarily provide your name, mobile number, date of birth, and password. This data is required to establish your xs777 account.
• Direct Collection — KYC Verification: When xs777 requests identity verification, you provide government-issued ID documents, proof of address, and proof of payment method ownership. This is mandatory for withdrawal processing and for accounts that reach specified transaction thresholds.
• Direct Collection — Support Interactions: When you contact xs777 customer support via live chat or email, the content of those communications is recorded and retained.
• Automatic Collection — Platform Usage: xs777's systems automatically log technical and behavioral data each time you access the platform, including IP addresses, device information, and game activity.
• Automatic Collection — Cookies and Tracking: xs777 uses cookies and similar tracking technologies to collect session data, remember preferences, and analyze platform usage patterns. See Section 7 for full cookie details.
• Third-Party Sources: xs777 may receive data from payment processors (e.g., GCash, PayMaya, bank partners) to verify the status and ownership of payment accounts used for deposits or withdrawals.

Under the Data Privacy Act of 2012, xs777 processes personal data on the following legal bases:

• Contractual Necessity: The majority of xs777's data processing — including account management, payment processing, withdrawal handling, and customer support — is necessary for the performance of the contract between xs777 and the player as set out in the Terms & Conditions.
• Legal Obligation: xs777 is required to process certain personal data — particularly identity documents, transaction records, and source of funds information — in order to comply with PAGCOR regulatory requirements, Anti-Money Laundering Act (AMLA) obligations, and other applicable Philippine laws.
• Legitimate Interests: xs777 processes technical and behavioral data on the basis of legitimate interests including platform security, fraud prevention, responsible gaming monitoring, and service improvement — provided those interests do not override players' fundamental rights and freedoms.
• Consent: Where xs777 seeks to use personal data for optional purposes such as sending promotional communications, receiving survey invitations, or enabling optional personalization features, xs777 will request your explicit consent at the point of collection. You may withdraw consent at any time via your account settings.

xs777 uses the personal data it collects for the following specific, legitimate purposes:

• Account Creation and Management: To register, maintain, authenticate, and secure your xs777 account, including processing logins, OTP verifications, and password resets.
• Age and Identity Verification: To verify that all xs777 players meet the mandatory 21 years of age minimum requirement under PAGCOR regulations, and to confirm the identity of account holders as required for KYC compliance.
• Transaction Processing: To process deposits from GCash, PayMaya, banks, and cryptocurrency networks, and to process withdrawal requests to verified payment accounts.
• Regulatory Compliance: To fulfill xs777's obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act, and any lawful request from the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, identity theft, and unauthorized account access on the xs777 platform.
• Responsible Gaming: To monitor gaming behavior for indicators of problem gambling and, where appropriate, to implement protective measures such as session limits, deposit restrictions, or self-exclusion as requested by the player or required by xs777's responsible gaming policy.
• Customer Support: To handle inquiries, resolve disputes, investigate complaints, and provide technical assistance to xs777 players across the Philippines.
• Platform Improvement: To analyze aggregated, anonymized usage patterns to improve xs777's game catalog, interface design, payment systems, and overall player experience.
• Marketing Communications (with consent): Where you have opted in to marketing communications, xs777 may use your contact details to send promotional offers, bonus notifications, game launch announcements, and event invitations relevant to the xs777 platform. You may opt out at any time.

xs777 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. xs777 shares personal data only in the following limited and necessary circumstances:

• Game Technology Providers: xs777 shares necessary session data (player ID, bet amounts, game results) with licensed game providers (e.g., JILI Games, PG Soft, Pragmatic Play, Evolution Gaming) to enable real-time game functionality. These providers process data as Personal Information Processors under contracts requiring them to protect the data to xs777's standards.
• Payment Processors: xs777 shares transaction data with payment service providers (GCash/GXI, PayMaya/Maya Bank, BancNet, and cryptocurrency exchange partners) as necessary to process deposits and withdrawals on behalf of players.
• KYC and Identity Verification Services: xs777 may share identity document data with licensed third-party identity verification providers for automated KYC processing.
• Regulatory and Law Enforcement Authorities: xs777 is legally obligated to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or any court of competent jurisdiction in the Philippines when required by law, court order, or regulatory directive.
• Fraud Prevention Networks: xs777 may share fraud signals and risk indicators with industry fraud prevention networks to protect the integrity of the Philippine online gaming ecosystem.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or substantially all of xs777's business assets, personal data held by xs777 may be transferred to the acquiring entity as part of the business assets, subject to the acquiring entity assuming the obligations of this Privacy Policy.

xs777 uses cookies and similar technologies (including local storage, session storage, and web beacons) on the xs777 platform. Cookies are small text files placed on your device when you visit xs777.co that help xs777 deliver a more functional and secure experience.

xs777 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the xs777 platform to function correctly. They maintain your login session state, remember your language and region preferences, and ensure that your xs777 account is properly authenticated during each visit. These cookies cannot be disabled without breaking core platform functionality.
• Performance and Analytics Cookies: xs777 uses anonymized analytics cookies to understand how players interact with the platform — which game categories are most visited, where navigation flows break down, and how page load performance varies across different Philippine mobile networks and device types. This data is aggregated and does not identify individual players.
• Functional Cookies: These cookies remember your preferences on xs777, such as your preferred game lobby sort order, previously opened game categories, and responsible gaming settings, to provide a more personalized experience on return visits.
• Security Cookies: xs777 uses security cookies to support fraud detection functions, including recognizing known devices associated with your verified xs777 account and flagging login attempts from unfamiliar devices or locations.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the xs777 platform. xs777 does not use third-party advertising cookies or behavioral retargeting technologies.

xs777 implements technical, organizational, and physical security measures designed to protect personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Key security measures in place on the xs777 platform include:

• Encryption in Transit: All data transmitted between your device and xs777.co is encrypted using TLS 1.2 or higher (256-bit SSL encryption). The padlock icon in your browser confirms this protection is active during your xs777 session.
• Encryption at Rest: Sensitive personal data — including identity documents, financial account details, and password hashes — is encrypted at rest within xs777's database infrastructure using AES-256 encryption.
• Access Controls: Access to personal data within xs777's internal systems is restricted to authorized personnel on a need-to-know basis. xs777 employees access only the data required to fulfill their specific role. All internal access is logged and periodically audited.
• Password Security: xs777 does not store passwords in plain text. All xs777 account passwords are stored as salted cryptographic hashes using industry-standard algorithms.
• Two-Factor Authentication: xs777 provides OTP-based two-factor authentication for all account logins and sensitive operations, including password resets and high-value withdrawals.
• Security Monitoring: xs777's security team monitors platform infrastructure 24/7 for anomalous activity, unauthorized access attempts, and data breach indicators.
• Penetration Testing: xs777 engages independent security specialists to conduct periodic penetration testing of platform infrastructure and applications.

xs777 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal and regulatory retention requirements. The following retention periods apply to xs777 player data:

• Active Account Data: Personal, contact, financial, and behavioral data associated with an active xs777 account is retained for the full duration of the account's active status.
• Post-Account Closure: Following voluntary or involuntary account closure, xs777 retains personal data for a minimum period of five (5) years after the date of account closure. This retention period is required to satisfy xs777's obligations under PAGCOR regulations, AMLA record-keeping requirements, and Philippine tax law.
• KYC Documents: Identity verification documents (copies of government IDs, proof of address) are retained for the duration of the player's account plus five years post-closure, consistent with anti-money laundering record-keeping obligations.
• Transaction Records: Financial transaction records (deposits, withdrawals, bets, wins, bonus credits) are retained for a minimum of five years from the date of each transaction.
• Support Communications: Live chat transcripts and email correspondence are retained for a period of three years from the date of the communication.
• Technical Logs: Server access logs, IP logs, and session logs are retained for a maximum of twelve months, after which they are automatically purged unless required for an ongoing investigation.

Upon expiry of the applicable retention period, xs777 will securely delete or anonymize personal data such that it can no longer be associated with an identifiable individual.

Under the Data Privacy Act of 2012 (RA 10173), all xs777 players who are Philippine residents have the following rights with respect to their personal data:

xs777 will respond to verified data rights requests within 15 business days of receipt. For complex requests, xs777 may extend this period by up to 30 days with written notice to the requesting player. xs777 will not charge a fee for exercising these rights, unless requests are manifestly unfounded, excessive, or repetitive.

The xs777 platform is strictly an adult online gaming service. xs777 does not knowingly collect, process, or retain personal data from any individual who is under 21 years of age — the minimum age for online gambling participation in the Philippines under PAGCOR regulations.

xs777 employs multiple verification mechanisms at registration and throughout the account lifecycle to prevent minors from accessing the platform, including OTP verification of Philippine mobile numbers, government ID age checks during KYC, and behavioral monitoring for age-inconsistent activity patterns.

If xs777 discovers that personal data has been collected from an individual under 21, that data will be immediately and securely deleted, the associated xs777 account will be permanently closed, and any deposited funds will be handled in accordance with PAGCOR guidelines. Where required, xs777 will report confirmed underage gambling incidents to appropriate Philippine authorities.

If you are a parent or guardian and believe your child has registered with or accessed xs777, please contact xs777 support immediately at [email protected] so that xs777 can take immediate protective action.

As an online gaming platform, xs777 works with technology and service providers that may be located outside the Philippines, including game studios operating in Europe, Asia, and North America, and cloud infrastructure providers with globally distributed data centers.

Where xs777 transfers personal data outside the Philippines, xs777 ensures that appropriate safeguards are in place to protect the transferred data to a standard consistent with the Data Privacy Act of 2012, including:

• Standard contractual data processing agreements with all overseas service providers that bind them to xs777's data protection standards
• Transfer only to jurisdictions that provide an adequate level of data protection as recognized by the National Privacy Commission
• Strict limitation of transferred data to the minimum necessary for the specific service being provided by the overseas processor

xs777 does not transfer player financial data, government ID documents, or full KYC records to overseas parties except where legally required by a Philippine regulatory authority or court order.

The xs777 platform may contain references or functional integrations with third-party services, including payment platforms (GCash, PayMaya) and game studio interfaces. When you interact with a third-party service accessed through xs777, you are subject to that third party's own privacy policy, which is separate from this Policy.

xs777 is not responsible for the privacy practices of third-party platforms or service providers. xs777 recommends that players review the privacy policies of any third-party service they access in connection with their use of the xs777 platform, particularly the privacy policies of their payment providers (GCash/GXI, Maya Bank) which govern how those providers handle the financial account data players use to transact with xs777.

xs777 reserves the right to update or amend this Privacy Policy from time to time in response to changes in applicable Philippine law, National Privacy Commission guidance, PAGCOR regulatory requirements, or xs777's own data processing practices. xs777 will notify registered players of material changes via email to their registered address or via a prominent notice displayed on xs777.co at least 7 days before the updated Policy takes effect.

The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of the xs777 platform following notification of an updated Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using xs777 and contact support to request account closure before the effective date of the changes.

For all privacy-related inquiries, data subject rights requests, or concerns about xs777's handling of your personal data, you may contact xs777's Data Protection Officer (DPO) through the following channels:

• Email: [email protected] — use the subject line "Data Privacy Request" or "DPO Inquiry" for priority routing to the xs777 privacy team
• Live Chat: The 24/7 xs777 live chat widget on xs777.co can escalate privacy inquiries to the DPO team during Philippine business hours (9AM–6PM, Monday to Saturday)

xs777's DPO team is staffed by Philippine-based privacy professionals with training in RA 10173 compliance and NPC regulatory requirements. xs777 aims to acknowledge all formal privacy requests within 3 business days and to resolve them fully within 15 business days.

If you are not satisfied with xs777's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph. The NPC is the independent government body responsible for administering and enforcing the Data Privacy Act of 2012 in the Philippines.