z8777 Privacy Policy

1.Introduction

z8777 ("z8777," "we," "us," "the Company") is committed to protecting the privacy and personal data of all users ("Player," "User," "you") of the z8777 online casino and sports betting platform accessible at z8777.org (the "Platform"). This Privacy Policy ("Policy") describes the personal information z8777 collects, the purposes for which it is used, how it is protected, and the rights available to you as a data subject under the laws of the Republic of the Philippines.

This Policy is issued in compliance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and applicable circulars issued by the National Privacy Commission ("NPC"). z8777 operates under a Philippine Amusement and Gaming Corporation ("PAGCOR") license and is subject to PAGCOR's data governance and know-your-customer ("KYC") requirements in addition to NPC regulations.

By registering a z8777 account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not register an account or use the Platform.

2.Data Controller

The data controller responsible for your personal information collected through the z8777 Platform is z8777, operating under PAGCOR license in the Republic of the Philippines. For all data privacy inquiries, requests, and complaints, z8777 can be reached via the contact details specified in Section 15 of this Policy. z8777 has designated a Data Protection Officer ("DPO") as required under the DPA, who can be contacted at the same address.

3.Personal Data We Collect

z8777 collects the following categories of personal data:

3.1 Registration & Identity Data. Full legal name; date of birth (to verify the 21+ age requirement as mandated by PAGCOR); Philippine mobile number; email address; username; and government-issued identification document details (e.g., Philippine passport, SSS ID, PhilHealth ID, UMID, or driver's licence number and expiry) provided during KYC verification.

3.2 Contact & Address Data. Residential address in the Philippines (required for KYC verification above applicable withdrawal thresholds); province/city of residence (e.g., Metro Manila, Cebu, Davao, Iloilo).

3.3 Financial Data. GCash number, Maya account number, BPI/BDO/UnionBank account details, or other payment method identifiers registered to your z8777 account; transaction history including deposit amounts, withdrawal amounts, dates, and payment method used. z8777 does not store full bank account numbers or card numbers on its own servers — this information is handled by regulated payment processors.

3.4 Gaming & Betting Data. Records of all games played, bets placed, wager amounts, game outcomes, session durations, and bonus utilization on the z8777 Platform. This data is required under PAGCOR regulations and AMLA obligations.

3.5 Technical & Device Data. IP address; device type and operating system; browser type and version; session timestamps; geolocation data (city/region level, used to verify Philippine jurisdiction); and cookies and similar tracking identifiers as described in Section 8.

3.6 Communications Data. Records of your communications with z8777 customer support, including live chat transcripts and email correspondence, retained for quality assurance, dispute resolution, and regulatory compliance purposes.

3.7 Responsible Gaming Data. Voluntary information provided in connection with responsible gaming tools, including self-imposed deposit limits, session time limits, or self-exclusion requests. This data is treated with heightened confidentiality.

4.How We Collect Your Data

z8777 collects personal data through the following means:

• Directly from you — at account registration, during KYC verification, when you make deposits or withdrawal requests, when you contact customer support, and when you voluntarily provide information through the Platform;
• Automatically — through cookies, web analytics tools, server logs, and device fingerprinting when you access and use the Platform (see Section 8);
• From payment processors — transaction confirmation data from GCash, Maya, BPI, BDO, and other payment providers when you initiate deposits or withdrawals;
• From identity verification services — where z8777 uses third-party identity verification providers to authenticate government-issued IDs submitted during KYC;
• From regulatory authorities — where PAGCOR, the AMLC, or other Philippine regulatory bodies provide or require disclosure of information in the course of regulatory compliance.

5.Legal Basis for Processing

z8777 processes your personal data on the following legal bases as provided under the DPA and its IRR:

• Contractual necessity — processing required to create and manage your z8777 account, process deposits and withdrawals, and provide gaming services under the Terms and Conditions you have accepted;
• Legal obligation — processing required to comply with PAGCOR licensing requirements, AMLA obligations under Republic Act No. 9160 (as amended), National Privacy Commission regulations, and other applicable Philippine law;
• Legitimate interests — processing necessary for z8777's legitimate interests in fraud prevention, platform security, and responsible gaming enforcement, where these interests are not overridden by your privacy rights;
• Consent — processing for marketing communications and optional features, where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6.How We Use Your Personal Data

z8777 uses collected personal data for the following purposes:

• Creating, verifying, and managing your z8777 account;
• Processing deposits, withdrawals, and in-Platform transactions in Philippine Peso;
• Verifying your identity and age (21+) in compliance with PAGCOR's KYC requirements;
• Detecting and preventing fraud, money laundering, and other prohibited conduct under PAGCOR regulations and the AMLA;
• Providing customer support and resolving disputes;
• Administering bonuses and promotional offers to eligible accounts;
• Enforcing responsible gaming tools including deposit limits, loss limits, and self-exclusion;
• Improving Platform performance, game offerings, and user experience through aggregate analytics;
• Sending transactional communications (account notifications, security alerts, withdrawal confirmations) by SMS and email;
• Sending promotional communications where you have opted in to receive them;
• Complying with lawful requests from PAGCOR, the NPC, AMLC, BIR, or other Philippine government authorities.

7.Disclosure to Third Parties

7.1 z8777 does not sell, rent, or trade your personal data to third-party marketers or advertisers.

7.2 z8777 may disclose your personal data to the following categories of recipients where necessary:

• Payment processors — GCash (G-Xchange Inc.), Maya (PayMaya Philippines Inc.), BPI, BDO, UnionBank, and other licensed Philippine payment service providers, solely to facilitate financial transactions on your account;
• Identity verification providers — third-party KYC and document verification services engaged to authenticate identification documents submitted by players;
• Game providers — JILI, PG Soft, Pragmatic Play, and other certified game content providers, who may receive anonymized session data to support game operation and audit;
• IT and cloud service providers — data hosting and platform infrastructure providers bound by contractual data processing agreements and DPA-compliant security standards;
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where disclosure is required by law, regulation, or lawful order;
• Legal and professional advisers — lawyers and compliance consultants engaged by z8777, subject to professional confidentiality obligations;
• Law enforcement — Philippine law enforcement agencies where disclosure is required pursuant to a valid legal process.

7.3 All third-party recipients with whom z8777 shares personal data are required to process such data only for the specified purpose, to maintain security standards equivalent to those required under the DPA, and to comply with all applicable Philippine data protection laws.

8.Cookies & Tracking Technologies

z8777 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies — required for the Platform to function, including session authentication, security validation, and maintaining your logged-in state;
• Performance cookies — anonymized analytics data used to measure Platform performance and identify technical issues;
• Functional cookies — remember your preferences such as language, display settings, and last-viewed game categories;
• Responsible gaming cookies — track session duration to support session time reminder functionality as part of z8777's responsible gaming tools.

Strictly necessary cookies are deployed on a legitimate interest basis and do not require separate consent. All other cookie categories are deployed only where you have consented via z8777's cookie consent interface. You may withdraw cookie consent or manage cookie preferences through your browser settings at any time. Disabling certain cookies may affect Platform functionality.

9.Data Security

z8777 implements technical and organizational security measures appropriate to the nature of the personal data processed and the risks associated with online gaming and financial services, including:

• 256-bit SSL/TLS encryption for all data in transit between your device and z8777's servers;
• Encryption of sensitive data at rest, including KYC documents and financial identifiers;
• Role-based access controls ensuring that z8777 staff access personal data only on a need-to-know basis;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Incident response procedures including notification to the NPC within 72 hours of discovering a personal data breach that poses a real risk of serious harm, as required under NPC Circular No. 16-03.

While z8777 implements industry-standard safeguards, no data transmission over the internet or storage system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your z8777 login credentials and for notifying z8777 promptly if you suspect unauthorized account access.

10.Data Retention

z8777 retains personal data for the following periods:

• Account and KYC data — for the duration of your account and for a minimum of five (5) years following account closure, as required under PAGCOR licensing conditions and AMLA record-keeping obligations;
• Transaction and gaming records — for a minimum of five (5) years from the date of each transaction, pursuant to AMLA and PAGCOR requirements;
• Customer support communications — for three (3) years from the date of the last communication, for dispute resolution and quality assurance purposes;
• Marketing consent records — for the duration of your account or until consent is withdrawn, plus one (1) year to demonstrate consent compliance;
• Technical logs — for up to twelve (12) months, used for security monitoring and fraud investigation.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymized in accordance with NPC guidelines.

11.Your Rights as a Data Subject

Under the DPA and applicable NPC regulations, you have the following rights in relation to your personal data held by z8777:

• Right to be informed — to receive clear information about how your personal data is collected and used (as set out in this Policy);
• Right of access — to request a copy of the personal data z8777 holds about you;
• Right to rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure — to request deletion of your personal data where it is no longer necessary for the purposes collected, subject to mandatory retention obligations under PAGCOR, AMLA, and other applicable law;
• Right to object — to object to the processing of your personal data for direct marketing purposes, or on grounds of legitimate interest;
• Right to data portability — to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible;
• Right to complain — to lodge a complaint with the National Privacy Commission if you believe your data protection rights have been violated.

To exercise any of these rights, submit a written request to z8777 via the contact details in Section 15. z8777 will respond to verified requests within fifteen (15) business days. Identity verification may be required before requests are processed.

12.Cross-Border Data Transfers

z8777 primarily processes personal data within the Philippines. Where personal data is transferred to service providers or game content providers located outside the Philippines (for example, game studios based in Asia or cloud hosting providers), z8777 ensures that such transfers are subject to appropriate contractual safeguards — including NPC-compliant data processing agreements — that provide a level of protection equivalent to that afforded under the DPA. z8777 will not transfer personal data to jurisdictions that do not provide adequate data protection without explicit player consent or without implementing appropriate contractual safeguards as approved by the NPC.

13.Children's Privacy & the 21+ Requirement

z8777 does not knowingly collect personal data from individuals under the age of 21. The z8777 Platform is strictly restricted to players who are 21 years of age or older, as required by PAGCOR regulation. Age verification is performed during account registration and KYC. If z8777 discovers that personal data has been collected from a person under 21 years of age, the account will be immediately closed, the balance will be handled in accordance with PAGCOR guidelines, and the personal data will be deleted promptly. If you are a parent or guardian and believe a minor has registered a z8777 account, please contact z8777 immediately using the details in Section 15.

14.Changes to This Privacy Policy

z8777 reviews this Privacy Policy periodically and may update it to reflect changes in applicable law, NPC regulations, PAGCOR requirements, or z8777's data processing practices. The effective date of the current version appears at the top of this Policy. Where changes are material, z8777 will notify registered players by email to the address on file or by prominent notice on the Platform at least fourteen (14) days before the changes take effect. Continued use of the Platform following notification of material changes constitutes your acceptance of the revised Policy.

15.Contact & Data Privacy Complaints

For questions about this Privacy Policy, to exercise your data subject rights, or to contact z8777's Data Protection Officer, please reach out through the following channels:

• Live Chat: Available 24/7 via the z8777 Platform (fastest response for general inquiries)
• Email (DPO): [email protected] — subject line: "Data Privacy Request" (displayed as plain text; not a clickable link)

If z8777 does not resolve your data privacy complaint to your satisfaction, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official website.