af777 Privacy Policy

1.1  af777 operates as a PAGCOR-licensed online casino and sports betting platform serving players in the Philippines. In the course of providing our services, af777 collects and processes certain personal data. This Privacy Policy governs how that data is handled and applies to all interactions with the af777 platform, whether you are a registered player, a visitor browsing the site without an account, or a user of any feature offered by af777.

1.2  af777 complies with the Philippine Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations, and applicable issuances from the National Privacy Commission (NPC). Where af777's operations involve international data handling — for example, through payment processing partners or game software providers based outside the Philippines — af777 ensures that appropriate data protection standards are applied consistent with Philippine law.

1.3  By registering an account, making a deposit, or using any service offered on the af777 platform, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy. If you do not consent to these practices, you should not use the af777 platform.

2.1  For the purposes of the Philippine Data Privacy Act of 2012, af777 acts as the personal information controller with respect to the data of its players and platform visitors. This means af777 determines the purposes and means by which personal data collected through the af777 platform is processed.

2.2  Where af777 engages third-party service providers — such as payment processors, game software providers, identity verification services, and customer support technology vendors — those parties act as personal information processors under af777's instruction and are contractually bound to handle player data solely in accordance with af777's directions and applicable Philippine data protection law.

2.3  af777 has designated a Data Protection Officer (DPO) responsible for overseeing data protection compliance and serving as the point of contact for data-related inquiries and requests. Contact details for af777's DPO are provided in Section 14 of this Policy.

3.1  af777 collects the following categories of personal data in connection with the registration, operation, and maintenance of player accounts and the delivery of gaming services:

3.2  af777 does not collect sensitive personal information beyond what is strictly required for identity verification under applicable KYC and AML regulations. Specifically, af777 does not collect medical, biometric, or religious affiliation data except where government-issued identification submitted for KYC incidentally contains such information on the face of the document.

4.1  af777 collects personal data through the following means:

• Direct Registration: Information you provide when creating your af777 account, including your mobile number, chosen username, and date of birth confirmation.
• KYC Submission: Identity and address documents submitted voluntarily or in response to af777's verification requests for withdrawal processing or account upgrade.
• Payment Transactions: Financial data transmitted during deposit and withdrawal operations through GCash, Maya, BPI, BDO, UnionBank, and other accepted payment methods.
• Platform Interaction: Game sessions, betting activity, login events, and navigation behavior recorded automatically while you use the af777 platform.
• Device and Network Signals: Technical data collected automatically via standard web and application logging, including IP addresses, device identifiers, and session metadata.
• Customer Support Interactions: Data you provide when contacting af777 support via live chat, including the content of your messages and any documents you share during the support session.
• Cookies and Tracking Technologies: See Section 8 for a full explanation of how af777 uses cookies and similar technologies on its platform.

5.1  Under the Philippine Data Privacy Act of 2012, af777 relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing required to register your af777 account, process deposits and withdrawals, deliver games, and fulfill af777's obligations under its Terms and Conditions.
• Legal Obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act (RA 9160, as amended), tax reporting requirements, and other applicable Philippine law.
• Legitimate Interests: Processing carried out to prevent fraud and abuse, ensure platform security, monitor for problematic gambling patterns as part of our responsible gaming obligations, and improve the af777 platform — where such interests do not override your fundamental rights and freedoms.
• Consent: For marketing communications and optional data uses where af777 has specifically sought and obtained your prior consent. You may withdraw consent for marketing communications at any time through your account notification settings.

6.1  af777 uses your personal data only for the purposes described below. We do not process personal data for purposes incompatible with those stated in this Policy without providing you with additional notice and, where required, seeking your consent.

• Account Management: Creating and maintaining your af777 account, verifying your identity, processing credential changes, and managing session security.
• Payment Processing: Executing deposits from and withdrawals to your registered Philippine payment methods, verifying payment ownership, and maintaining transaction records as required by law.
• Regulatory Compliance: Meeting af777's obligations under PAGCOR licensing conditions, RA 9160 (Anti-Money Laundering), and NPC data protection requirements, including the reporting of suspicious transactions where legally required.
• Fraud and Security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, bot use, collusion, and other prohibited conduct on the af777 platform.
• Responsible Gaming: Monitoring player activity to identify potential problematic gambling behavior and providing or suggesting appropriate responsible gaming tools, consistent with af777's duty of care obligations under PAGCOR licensing.
• Customer Support: Responding to inquiries, resolving disputes, processing account adjustment requests, and documenting support interactions for quality assurance.
• Platform Improvement: Analyzing aggregated and anonymized platform usage data to improve game offerings, interface design, payment processes, and overall user experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform announcements to players who have opted in — only through the channels (SMS, in-platform notifications) they have indicated they prefer.

7.1  af777 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Service Providers: GCash, Maya, BPI, BDO, UnionBank, and other payment processors receive the minimum necessary financial and identity data required to execute your transactions and comply with payment network rules.
• Game Software Providers: Certified game providers whose games are accessible through af777 may receive a session token and stake/win data for the purpose of game operation. These providers do not receive your identity documents or full financial data.
• KYC and Identity Verification Services: Third-party identity verification providers engaged by af777 to verify government-issued identification documents in compliance with KYC obligations.
• PAGCOR and Philippine Regulatory Authorities: af777 is legally required to provide player data to PAGCOR and other competent Philippine authorities upon lawful request, including in connection with compliance inspections and regulatory reporting.
• Law Enforcement and Anti-Money Laundering Authorities: The Anti-Money Laundering Council (AMLC) and other law enforcement agencies may receive transaction and identity data where af777 is legally required to file suspicious transaction reports under RA 9160.
• Technology Infrastructure Providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on af777's behalf under strict data processing agreements.
• Legal and Professional Advisors: Lawyers, auditors, and compliance consultants engaged by af777 who require access to data in order to provide professional advice and services to af777.

7.2  All third-party service providers who process personal data on af777's behalf are bound by written data processing agreements that restrict use of your data to the purposes specified by af777 and require them to implement appropriate security measures consistent with Philippine data protection law.

8.1  af777 uses cookies and similar tracking technologies on its platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for core platform functions including user authentication, session management, load balancing, and security. These cookies cannot be disabled without preventing access to the platform.
• Functional Cookies: Store your preferences such as language settings, last-played game, and interface customizations so you don't have to reset them on every visit.
• Analytical Cookies: Collect aggregated and anonymized information about how players navigate the af777 platform — which game categories are most visited, where players encounter errors, and how long sessions typically run. This data is used to improve the platform experience.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot traffic, and other automated abuse of the af777 platform.

8.2  af777 does not use advertising or behavioral tracking cookies that follow you to third-party websites or build cross-site profile data for retargeting purposes.

8.3  You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from accessing the af777 platform. Disabling functional or analytical cookies may reduce your experience quality but will not prevent basic platform access.

9.1  af777 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the af777 platform is encrypted using 256-bit SSL/TLS, the same standard used by Philippine banks and major financial institutions.
• Password Hashing: Account passwords are stored using a one-way cryptographic hash function. af777's systems never store or transmit passwords in plaintext form.
• Access Controls: Access to personal data within af777's internal systems is restricted on a need-to-know basis, with role-based access controls and comprehensive audit logging of all data access events.
• Multi-Factor Authentication: Administrative access to af777's data systems requires multi-factor authentication. Player accounts support OTP-based two-step verification for login from unrecognized devices.
• Regular Security Audits: af777's platform and data infrastructure are subject to regular security assessments and penetration testing by qualified cybersecurity professionals.
• Segregated Player Funds: Player wallet balances are held in accounts segregated from af777's operational funds, protecting player money in the event of business disruption.

9.2  While af777 maintains robust security measures, no internet-based system is entirely immune to risk. af777 encourages players to protect their accounts by using strong, unique passwords and enabling OTP verification on their af777 accounts.

10.1  af777 retains personal data for the periods necessary to fulfill the purposes for which it was collected, subject to any longer retention periods required by applicable Philippine law. The following general retention guidelines apply:

10.2  Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification, unless a longer retention period is required by a specific legal obligation or an active legal dispute requires the data to be preserved.

11.1  Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to the personal data af777 holds about you:

• Right to Be Informed: The right to know what personal data af777 collects about you and how it is used — which is the purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data af777 holds about you, including account information, transaction records, and gaming history within your account dashboard.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held by af777, where such correction does not conflict with KYC or AML verification records.
• Right to Erasure: The right to request deletion of personal data where it is no longer necessary for the original purpose, subject to af777's legal retention obligations and any ongoing regulatory requirements.
• Right to Object: The right to object to processing carried out on the basis of af777's legitimate interests, and to opt out of direct marketing communications at any time through your account notification settings.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format where technically feasible and legally permissible.
• Right to Lodge a Complaint: The right to lodge a complaint with the Philippine National Privacy Commission (NPC) if you believe af777 has processed your personal data in violation of RA 10173.

11.2  To exercise any of the above rights, please contact af777's Data Protection Officer using the contact details in Section 14. af777 will respond to verified data rights requests within thirty (30) calendar days of receipt, consistent with the NPC's guidelines on data subject request processing timelines.

11.3  Certain data rights requests may be limited where fulfilling them would conflict with af777's legal obligations — for example, transaction records that must be retained under RA 9160 cannot be deleted upon request, even where you exercise your right to erasure.

12.1  The af777 platform is strictly for individuals who are 21 years of age or older, in accordance with PAGCOR's minimum age requirements for online gambling in the Philippines. af777 does not knowingly collect personal data from persons under the age of 21.

12.2  Where af777 discovers or has reasonable grounds to believe that an account has been registered by or is being used by a person under the age of 21, af777 will immediately suspend the account, void any gaming activity associated with it, and take steps to return any real-money balance that can be verified as belonging to an adult account holder in the same household. af777 will not retain personal data relating to a minor any longer than necessary to fulfill these obligations and any legal reporting requirements.

12.3  Parents and guardians who become aware that a minor has accessed the af777 platform or provided personal data to af777 should contact af777 support immediately via live chat or the email address in Section 14.

13.1  af777 may update this Privacy Policy from time to time to reflect changes in our data practices, updates to Philippine data protection law, changes in PAGCOR regulatory requirements, or improvements to our platform. The "Effective Date" at the top of this Policy reflects the date of the most recent revision.

13.2  For material changes — those that significantly affect the scope of data collected, the purposes for which it is used, or the rights available to you — af777 will notify registered players through in-platform notifications and SMS to their registered Philippine mobile number at least seven (7) calendar days prior to the change taking effect.

13.3  For non-material updates such as typographical corrections, clearer explanations of existing practices, or minor formatting changes, af777 will update the Policy without advance notice. Your continued use of the af777 platform after any update constitutes your acceptance of the revised Policy.

13.4  af777 recommends that players review this Privacy Policy periodically. If you have questions about any changes, please contact af777's Data Protection Officer using the details in Section 14.

14.1  For any questions, concerns, or formal requests relating to this Privacy Policy or af777's personal data practices, please contact:

• Data Protection Officer (DPO): af777 Data Protection Office
• Email: [email protected] — Please include "Data Privacy Request" in the subject line for DPO matters.
• Live Chat: Available 24/7 through the af777 platform. For DPO matters, state at the start of your chat that you have a data privacy inquiry and request escalation to the compliance team.
• Platform: af777.bio — The sole official and authorized af777 web address.

14.2  If your data privacy concern is not resolved to your satisfaction after contacting af777's DPO, you have the right to file a complaint with the Philippine National Privacy Commission (NPC) through NPC's official channels. af777 cooperates fully with all NPC investigations and inquiries.