0g777 Privacy Policy — How We Handle Your Data

This Privacy Policy ("Policy") describes how 0g777 ("we," "us," "our") collects, processes, uses, stores, and discloses personal data relating to individuals ("Users," "you") who access or use the 0g777 online gaming platform available at 0g777.cam and all associated services.

0g777 operates as a PAGCOR-licensed online gaming operator serving Filipino players. As a data controller, 0g777 is subject to the requirements of Republic Act No. 10173, the Philippine Data Privacy Act of 2012 ("DPA"), its implementing rules and regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC"). We take these obligations seriously, and this Policy is designed to give you full visibility into our data practices.

By registering an account or using the 0g777 Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we process your personal data, please do not use the Platform. You may contact us at any time with questions before deciding to register.

The data controller responsible for the personal data collected and processed through the 0g777 Platform is the operator of 0g777.cam, a PAGCOR-licensed online gaming entity. For all data privacy matters, inquiries, and requests relating to this Policy, please contact our Data Protection Officer using the details in Section 16 of this Policy.

As data controller, 0g777 determines the purposes and means of processing your personal data in accordance with the DPA. Where 0g777 engages third-party service providers (such as game studios, payment processors, or identity verification providers) to process data on our behalf, those parties act as data processors under written agreements that require them to protect your data to the same standard that we apply.

0g777 collects personal data that is necessary to operate the Platform, comply with legal obligations, and provide you with a safe and fair gaming experience. The categories of data we collect include:

0g777 collects personal data through the following channels:

• Directly from you: when you register an account, complete KYC verification, make deposits or withdrawal requests, contact customer support, or respond to surveys and promotions.
• Automatically through the Platform: via cookies, log files, and session tracking technologies when you interact with the website or mobile interface. See Section 10 for details.
• From third-party verification providers: where 0g777 uses licensed identity verification or fraud prevention services to cross-check the information you provide.
• From payment processors: GCash, PayMaya, and banking partners may transmit transaction confirmation data to 0g777 as part of processing your deposits and withdrawals.
• From regulatory authorities: PAGCOR or other Philippine regulatory bodies may share information with 0g777 relevant to compliance obligations.

0g777 processes your personal data only for specified, explicit, and legitimate purposes. The table below summarises the primary processing purposes and the legal basis for each under the DPA:

0g777 does not sell or rent your personal data to third parties. We may share your personal data in the following limited circumstances:

• Game Providers: JILI Games, Evolution Gaming, SA Gaming, and other licensed game studios may receive game session data (player ID, bet amounts, game round identifiers) necessary to operate their games within the 0g777 environment. Game providers do not receive your full identity or payment details.
• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and cryptocurrency processing services receive the minimum financial data necessary to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC providers licensed to operate in the Philippines may process your identification documents on behalf of 0g777 under data processing agreements that require equivalent data protection standards.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and law enforcement authorities in the Philippines may receive personal data where 0g777 is required by law or valid legal process to disclose it.
• Professional Advisors: Lawyers, auditors, and compliance consultants engaged by 0g777 may access limited personal data under strict confidentiality obligations in the course of providing professional services.

Some of 0g777's third-party service providers — including certain game studios, cloud infrastructure providers, and payment processors — operate servers or processing facilities outside the Philippines. Where personal data is transferred internationally, 0g777 ensures that appropriate safeguards are in place as required by the DPA and the NPC's cross-border data transfer regulations.

These safeguards include: contractual clauses requiring the recipient to apply data protection standards equivalent to those of the Philippine DPA; verification that the receiving jurisdiction has been recognised by the NPC as providing an adequate level of protection; or other mechanisms approved by the NPC. You may request details of the specific safeguards applicable to any particular transfer by contacting our Data Protection Officer.

0g777 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to applicable legal retention obligations. The following general retention periods apply:

• Account and KYC records: Retained for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and the AMLA.
• Financial and transaction records: Retained for a minimum of five (5) years in compliance with AMLC record-keeping requirements and BIR obligations.
• Gaming activity logs: Retained for three (3) years following the session date, or longer where required for dispute resolution or regulatory review.
• Customer support communications: Retained for two (2) years following the resolution of the support matter.
• Marketing consent records: Retained for the duration of your account and for one (1) year following any withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely destroyed or anonymised in a manner that prevents re-identification, in accordance with NPC guidelines.

0g777 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption on all data transmitted between your device and our servers;
• Encryption at rest for all stored personal data including KYC documents and payment information;
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access personal data;
• Multi-factor authentication for administrative access to systems holding personal data;
• Regular security assessments and penetration testing of Platform infrastructure;
• Secure deletion protocols for data that has reached its retention period end date.

While 0g777 takes all reasonable steps to protect your data, no system is entirely impenetrable. Users are reminded to use strong, unique passwords for their 0g777 accounts and to enable two-factor authentication, which is available in account security settings.

0g777 uses cookies and similar tracking technologies on the Platform. Cookies are small data files placed on your device that help us operate the Platform effectively and understand how it is used.

You may manage cookie preferences through your browser settings. Note that disabling non-essential cookies will not affect your ability to use the core features of the Platform, though some personalisation features may be unavailable. 0g777 does not use third-party advertising cookies or share cookie data with external ad networks.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to personal data that 0g777 holds about you. These rights may be exercised by submitting a written request to our Data Protection Officer at the contact details in Section 16:

0g777 will respond to data subject requests within fifteen (15) calendar days of receipt, or such longer period as permitted by the NPC where the request is complex. We may need to verify your identity before processing any data subject request to ensure we are not disclosing data to an unauthorised person.

The 0g777 Platform is strictly for individuals aged 21 years and above. 0g777 does not knowingly collect or process personal data from individuals under the age of 21. The mandatory KYC verification process is specifically designed to confirm that all registered Users meet this age requirement before any real-money play is permitted.

If 0g777 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the personal data to the extent permitted by our legal obligations, and report the incident to PAGCOR as required by our licensing conditions. Parents or guardians who believe a minor has created an account on 0g777 should contact us immediately at [email protected].

In the event of a personal data breach that is reasonably likely to result in serious harm to the rights and freedoms of affected Users, 0g777 will comply with the breach notification obligations prescribed by the NPC. This includes notifying the NPC within seventy-two (72) hours of becoming aware of the breach, and notifying affected data subjects without undue delay where the breach is likely to result in high risk to their rights and freedoms.

Breach notifications to affected Users will be sent to the registered email address on file. The notification will describe the nature of the breach, the categories and approximate number of data subjects affected, the likely consequences, and the measures taken or proposed to address the breach.

0g777 maintains an internal data breach register and conducts post-incident reviews to prevent recurrence. Users who suspect that their 0g777 account has been compromised should contact support immediately so that the account can be secured pending investigation.

The 0g777 Platform may contain references to third-party services, including game providers and payment processors. While 0g777 carefully selects partners and requires contractual data protection commitments from them, we are not responsible for the privacy practices of third-party organisations. Where a third party processes your data as an independent data controller — rather than as a processor on behalf of 0g777 — their own privacy policy will govern that processing.

0g777 does not include outbound links to external websites unrelated to Platform operations, and users are advised to exercise caution if they encounter any unsolicited communications purporting to be from 0g777 that direct them to external websites. 0g777 will only contact you from verified official channels using the domain 0g777.cam.

0g777 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Where changes are material, we will provide advance notice to registered Users by email or prominent on-Platform notification at least seven (7) days before the revised Policy takes effect, except where immediate changes are required by law or to address a security vulnerability.

The current version of this Policy, together with its effective date, is always accessible at 0g777.cam/privacy-policy. Your continued use of the Platform following the effective date of a revised Policy constitutes your acknowledgment of the changes. If you do not accept the revised Policy, you should cease using the Platform and may contact us to close your account.

For all privacy-related inquiries, data subject requests, or concerns about how 0g777 handles your personal data, please contact our Data Protection Officer (DPO):