af777 Privacy Policy

1 Introduction & Scope

This Privacy Policy applies to all personal data collected, processed, and stored by af777 in connection with the operation of the af777 online casino and sports betting platform at af777.co ("the Platform"). It governs data collected from registered players, prospective players who visit the Platform without registering, and individuals who contact af777 support.

af777 is committed to protecting the privacy and security of all individuals whose personal data we process. This Policy is designed to be fully compliant with the Republic of the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC).

By registering an account on the af777 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any provision of this Policy, you should not use the af777 Platform or provide your personal data to af777.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, af777 (operating through af777.co) is the Personal Information Controller (PIC) in respect of all personal data collected from players and visitors of the Platform.

As Personal Information Controller, af777 determines the purposes and means of processing your personal data. af777 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with applicable data protection law and handling data subject requests. Contact details for the DPO are set out in Section 16 of this Policy.

3 Data We Collect

af777 collects the following categories of personal data from players and Platform visitors:

af777 does not intentionally collect sensitive personal information as defined under RA 10173 beyond what is strictly necessary for identity verification and regulatory compliance. Where sensitive information is collected (such as government ID numbers for KYC purposes), it is treated with the heightened protections required by applicable law.

4 How We Collect Data

af777 collects personal data through the following methods:

4.1 Directly from You

The majority of the personal data af777 holds is provided directly by you during the account registration process, through identity verification submissions, when setting payment method details, when contacting af777 customer support, or when responding to promotional communications.

4.2 Automatically Through Platform Use

When you access the af777 Platform, certain technical data is collected automatically through cookies, web beacons, and server logs. This includes your IP address, browser type, device identifiers, and session activity data. This automatic data collection is necessary for the secure operation of the Platform and for fraud prevention purposes.

4.3 From Third Parties

af777 may receive personal data from third parties in the following contexts:

• Identity verification service providers used to cross-check KYC documentation;
• Payment processing partners (GCash, PayMaya, BPI, BDO, Metrobank) who confirm transaction status;
• Fraud detection and anti-money-laundering screening services;
• Credit reference agencies or watch-list screening services as required by regulatory compliance obligations.

5 Purposes of Processing

af777 processes your personal data for the following specific purposes:

1. Account Creation and Management: To create, verify, and maintain your af777 player account, including processing your registration, authenticating logins, and managing account settings.
2. Transaction Processing: To process deposits and withdrawal requests, verify payment method ownership, and maintain accurate financial records of all transactions in your af777 account.
3. Identity Verification (KYC): To fulfil af777's regulatory obligations to verify the identity and age of players before processing withdrawals and as required by applicable gaming and anti-money-laundering regulations.
4. Regulatory Compliance: To comply with obligations under applicable Philippine gaming regulations, anti-money-laundering law, and tax reporting requirements, including retaining transaction records for the periods required by law.
5. Responsible Gaming: To monitor gameplay patterns for indicators of problematic gambling behavior, administer responsible gaming tools (deposit limits, self-exclusion), and comply with self-exclusion requests made by players.
6. Platform Security and Fraud Prevention: To detect, prevent, and investigate suspicious activity, unauthorized account access, bonus abuse, collusion, and money laundering.
7. Customer Support: To respond to player enquiries, resolve disputes, and maintain records of support interactions for quality assurance purposes.
8. Platform Improvement: To analyse aggregate user behavior data to improve the af777 Platform's performance, user experience, and game offering. This analysis uses anonymised or pseudonymised data wherever possible.
9. Direct Marketing (with consent): To send you promotional communications about af777 bonuses, new games, and special events, where you have provided consent to receive such communications. You may withdraw consent at any time through your account preferences.

6 Legal Basis for Processing

af777 processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

• Consent: Where you have given explicit consent to processing, such as for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Contract Performance: Where processing is necessary to fulfil af777's obligations under the player account agreement — including account management, game access, transaction processing, and support services.
• Legal Obligation: Where processing is required to comply with a legal obligation applicable to af777, including KYC requirements, regulatory reporting, anti-money-laundering compliance, and mandatory record retention.
• Legitimate Interests: Where processing is necessary for af777's legitimate business interests (such as fraud prevention, platform security, and responsible gaming monitoring), provided that those interests are not overridden by your data protection rights and interests.

7 Data Sharing & Disclosure

af777 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. af777 shares personal data only in the following limited circumstances:

7.1 Authorized Service Partners

af777 engages third-party service providers who process personal data on af777's behalf as Personal Information Processors (PIPs) under data processing agreements that require them to maintain appropriate data security standards and use data only as directed by af777. These include:

• Payment processing and e-wallet service providers (GCash, PayMaya, BPI, BDO, Metrobank);
• Identity verification and KYC service providers;
• Fraud detection and anti-money-laundering screening providers;
• Cloud infrastructure and hosting providers;
• Customer support software providers;
• Game software studios whose certified games are offered on the af777 platform.

7.2 Regulatory and Legal Disclosures

af777 may disclose personal data to the following entities where required or permitted by law:

• The Philippine Amusement and Gaming Corporation (PAGCOR) or other competent regulatory authorities;
• The Anti-Money Laundering Council (AMLC) as required by Republic Act No. 9160 (Anti-Money Laundering Act) and its amendments;
• Law enforcement agencies pursuant to a valid court order, subpoena, or legal process;
• The National Privacy Commission in connection with regulatory inquiries or investigations.

7.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of all or substantially all of af777's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. af777 will notify affected players prior to any such transfer and ensure that the acquiring entity is bound by data protection obligations at least equivalent to those in this Policy.

8 International Data Transfers

In the course of providing its services, af777 may transfer your personal data to service providers whose infrastructure or operations are located outside of the Philippines. Where such transfers occur, af777 takes appropriate safeguards to ensure that your data continues to receive a level of protection consistent with the Data Privacy Act of 2012.

These safeguards include: contractual clauses requiring the receiving party to maintain data protection standards equivalent to Philippine law, transfers only to jurisdictions with adequate data protection frameworks recognized by the NPC, and technical and organizational security measures applied throughout the data transfer process.

9 Data Retention

af777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and transaction records: Retained for a minimum of five (5) years from the date of account closure or last transaction, as required by anti-money-laundering regulations applicable in the Philippines.
• KYC documentation: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later, as required by regulatory compliance obligations.
• Customer support communications: Retained for a period of three (3) years from the date of the interaction unless the communication is relevant to an unresolved dispute or legal matter, in which case it is retained until final resolution.
• Technical and log data: Retained for up to twelve (12) months for security monitoring and fraud prevention purposes, after which it is deleted or anonymised.
• Marketing consent records: Retained for the duration of your af777 account and for three (3) years following account closure, to demonstrate a valid legal basis for any marketing communications sent during the account's active period.

Upon expiry of applicable retention periods, af777 securely deletes or anonymises personal data so that it can no longer be attributed to any individual player.

10 Cookies & Tracking Technologies

af777 uses cookies and similar tracking technologies to operate the Platform, improve user experience, and support security and analytics functions. A cookie is a small data file placed on your device by the af777 Platform when you access it through a browser.

10.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for core Platform functionality including session authentication, security token management, and maintaining your login state. These cookies cannot be disabled without breaking Platform functionality.
• Functional Cookies: Store your preferences such as language settings, game display preferences, and responsible gaming settings so they are retained between sessions.
• Analytics Cookies: Collect anonymised data about how players use the Platform to help af777 improve page performance, identify popular game categories, and optimize the user experience.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and unauthorized login attempts.

10.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to block or delete cookies through their privacy and security settings. Note that disabling strictly necessary cookies will impair your ability to use the af777 Platform, including the ability to remain logged in to your account.

11 KYC & Identity Verification

As an online gaming platform operating in the Philippines, af777 is required by applicable gaming regulations and anti-money-laundering law to verify the identity of its players before processing withdrawal requests and at other regulatory checkpoints.

KYC verification at af777 requires you to submit a copy of a valid Philippine government-issued photo identity document (PhilSys National ID, passport, driver's license, SSS/GSIS ID, or equivalent) and proof of your registered address. For financial verification, documents confirming ownership of your registered payment method may also be required.

KYC documents are processed by af777's identity verification team and, where applicable, by af777's authorized third-party identity verification service provider. Documents are stored securely with encryption at rest and are retained in accordance with the retention schedule described in Section 9. KYC documents are never used for any purpose other than player identity verification and regulatory compliance.

12 Security Measures

af777 implements a comprehensive set of technical and organizational security measures to protect personal data against unauthorized access, accidental loss, destruction, or disclosure:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and af777 servers is encrypted using industry-standard SSL/TLS encryption, the same standard used by Philippine banking platforms.
• Encryption at Rest: Sensitive personal data stored on af777 servers, including identity documents and financial details, is encrypted at rest using AES-256 encryption.
• Access Controls: af777 employee access to personal data is strictly limited on a need-to-know basis. Access to sensitive player data requires multi-factor authentication and is logged and audited regularly.
• Intrusion Detection: af777's infrastructure is monitored continuously for unauthorized access attempts, anomalous activity, and potential security incidents.
• Regular Security Reviews: af777 conducts periodic security assessments of its platform infrastructure and data handling practices to identify and remediate vulnerabilities.
• Data Breach Response: af777 maintains a documented incident response procedure. In the event of a personal data breach that poses a risk to affected players, af777 will notify affected individuals and the National Privacy Commission within the timeframes required by applicable law.

While af777 takes all reasonable measures to protect your personal data, no internet-based system is completely immune from security threats. You play an important role in your own data security by maintaining strong, unique passwords for your af777 account and protecting your login credentials.

13 Children's Privacy — Strict 21+ Enforcement

af777 services are strictly restricted to persons aged 21 years of age and older in compliance with the age requirements applicable to casino-style gambling in the Philippines. af777 does not knowingly collect personal data from individuals under the age of 21.

If af777 discovers that personal data has been collected from an individual below the age of 21, af777 will immediately suspend the associated account, delete the personal data of the minor, and return any deposited funds to the originating payment method, subject to applicable anti-money-laundering compliance review.

If you are a parent or guardian and believe that a minor may have created an af777 account, please contact af777 immediately at [email protected] so that the matter can be investigated and resolved promptly.

14 Exercising Your Rights

To exercise any of your data subject rights described in this Privacy Policy — including access, rectification, erasure, objection, or data portability — please submit a written request to af777's Data Protection Officer at [email protected] with the subject line "Data Privacy Request."

Your request should include your full registered name, your af777 account email address or registered mobile number, a clear description of the right you wish to exercise, and sufficient information for af777 to verify your identity before processing the request. af777 may request additional verification documents before fulfilling data subject requests to prevent unauthorized access to another person's data.

af777 will acknowledge receipt of your request within three (3) business days and will respond to the substance of your request within thirty (30) calendar days, or such shorter period as may be required by applicable law. Where a request involves complex processing, af777 may extend the response period by a further sixty (60) days, in which case you will be notified of the extension and its reason.

If you are not satisfied with af777's handling of your data subject request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

15 Changes to This Policy

af777 may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory guidance, af777's data practices, or the services offered through the Platform. af777 will notify registered players of any material changes to this Policy by sending a notification to their registered email address at least fourteen (14) days before the changes take effect, and by posting the updated Policy on af777.co with a revised "Last Updated" date.

Where changes to this Policy are required by law or regulatory direction, af777 may implement such changes immediately and will notify players as soon as reasonably practicable. Your continued use of the af777 Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the updated Policy.

If you do not accept changes to the Privacy Policy, you should cease using the af777 Platform and request account closure. Prior versions of the Privacy Policy are available upon request from [email protected].

16 Contact & Data Protection Officer

For all privacy-related inquiries, data subject requests, or concerns regarding af777's handling of your personal data, please contact af777's Data Protection Officer through the following channel:

• Email: [email protected] (Subject: "Data Privacy Request")
• Terms & Conditions: af777 Terms & Conditions
• Responsible Gaming: af777 Responsible Gaming Page

af777 is committed to responding to all privacy inquiries promptly and transparently. Our Data Protection Officer is available to assist Filipino players with any questions about how their personal data is collected, used, stored, or shared by af777.