hs777 Privacy Policy

1. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations ("IRR"), the data controller responsible for the personal information processed through the hs777 Platform is hs777, the operator of the online gaming platform accessible at hs777.app ("hs777," "we," "us," or "our").

hs777 has registered with the National Privacy Commission (NPC) of the Philippines as required under RA 10173 and maintains a designated Data Protection Officer ("DPO") responsible for overseeing compliance with applicable data privacy law. Contact details for the DPO are provided in Section 16 of this Policy.

2. Personal Data We Collect

When you register an hs777 account, we collect the following personal information: full legal name as it appears on your government-issued ID; date of birth; gender; nationality; residential address; Philippine mobile number; and email address. This information is mandatory for account creation and cannot be substituted with pseudonyms or partial information.

To comply with PAGCOR regulations and the Philippine Anti-Money Laundering Act (RA 9160 as amended), hs777 collects identity document information including: government-issued photo ID type and number (e.g., PhilSys ID, UMID, Passport, Driver's License); a clear photographic image of your identity document; and, where required, a selfie image for biometric verification. We may also request proof of address documentation and source-of-funds information for enhanced due diligence purposes.

hs777 collects transaction-related financial data including: GCash and Maya mobile wallet account numbers; bank account details where bank transfer is used; USDT wallet addresses for cryptocurrency transactions; deposit and withdrawal transaction histories; account balance data; and bonus and wagering records. hs777 does not collect or store complete credit or debit card numbers.

hs777 automatically collects technical and behavioral data when you access and use the Platform, including: IP address and approximate geographic location; device type, model, and operating system; browser type and version; pages visited, games played, and session duration; betting history including game type, stake amounts, results, and timestamps; login times, frequency, and session patterns.

When you contact hs777 customer support, we retain records of your communications including: live chat transcripts; email correspondence; and any supporting documentation you provide in the course of your support interactions.

3. How We Collect Your Data

hs777 collects personal information through the following mechanisms:

• Direct collection: Information you voluntarily provide during account registration, KYC verification, deposit and withdrawal processes, and communications with customer support.
• Automated collection: Technical data collected automatically through cookies, web beacons, log files, and similar tracking technologies when you use the Platform (see Section 8).
• Third-party sources: Identity verification and AML screening data from authorized third-party KYC and AML service providers; payment confirmation data from GCash, Maya, and banking partners; and, where applicable, information from PAGCOR's player registration and self-exclusion databases.
• Publicly available sources: Information from publicly available Philippine government databases used for identity and AML verification purposes only.

4. Purposes of Processing

hs777 processes your personal information for the following specific and legitimate purposes:

5. Legal Basis for Processing

hs777 processes your personal data only where a lawful basis exists under RA 10173 and its IRR. The applicable legal bases for hs777's processing activities are:

• Contractual necessity: Processing required to perform the contract between hs777 and you as a registered player, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR regulatory requirements, the Anti-Money Laundering Act (RA 9160), RA 10173, and other applicable legislation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing and promotional communications, where your prior consent has been obtained and can be withdrawn at any time.

6. Disclosure of Your Data

hs777 does not sell, rent, or trade your personal information to any third party for their independent marketing or commercial purposes. hs777 discloses your personal data only in the following circumstances and to the following categories of recipients:

• PAGCOR and regulatory authorities: Disclosure required by Philippine law, PAGCOR's regulatory oversight functions, or lawful direction from the National Privacy Commission, Anti-Money Laundering Council (AMLC), or other competent Philippine authority.
• KYC and AML service providers: Authorized third-party identity verification and AML screening providers who process data as data processors under written agreements with hs777.
• Payment service providers: GCash (Mynt/G-Xchange), Maya (Paymaya Philippines), BSP-supervised banks, and cryptocurrency payment processors, solely to facilitate your deposits and withdrawals.
• Game technology providers: Certified game studios (including JILI Games and other providers) who may receive limited transactional data for game operation purposes under data processing agreements with hs777.
• Cloud and IT infrastructure providers: Hosting, database, and security service providers who process data as data processors on behalf of hs777.
• Law enforcement: Where disclosure is required by a valid court order, warrant, or lawful direction from Philippine law enforcement authorities.

7. Data Retention

hs777 retains your personal data for the period necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by applicable Philippine law:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, as required under PAGCOR regulations and the Anti-Money Laundering Act.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required under the Anti-Money Laundering Act.
• Game history records: Retained for a minimum of three (3) years from the date of each game session.
• Customer support records: Retained for a minimum of two (2) years from the date of each interaction.
• Marketing consent records: Retained for the duration of the consent plus two (2) years following withdrawal of consent.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with NPC-approved data disposal procedures.

8. Cookies & Tracking Technologies

hs777 uses cookies and similar tracking technologies (including web beacons, local storage, and session identifiers) on the hs777 Platform for the following purposes:

• Essential cookies: Strictly necessary for Platform operation, including session management, login authentication, and security functions. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Remembering your language preferences, game settings, and other personalization choices to improve your experience on the Platform.
• Analytics cookies: Collecting aggregated, anonymized data about how players use the Platform to help hs777 improve its services. hs777 uses first-party analytics tools only.
• Security cookies: Supporting fraud detection and security verification functions to protect your account and the Platform's integrity.

You may control non-essential cookies through your browser settings. Note that disabling cookies may affect the functionality of certain Platform features. hs777 does not use third-party advertising cookies or behavioral tracking cookies for cross-site advertising purposes.

9. Data Security

hs777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the hs777 Platform;
• AES-256 encryption for sensitive data stored in hs777's databases;
• Multi-factor authentication requirements for hs777 staff accessing personal data;
• Role-based access controls limiting data access to personnel with a legitimate operational need;
• Regular penetration testing and security vulnerability assessments;
• Secure, geographically redundant data centre facilities;
• Comprehensive employee data privacy and security training programmes.

10. International Data Transfers

hs777 primarily processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers or infrastructure located outside the Philippines (for example, cloud infrastructure or certain certified game providers), hs777 ensures that such transfers comply with RA 10173 and NPC regulations, including by implementing appropriate contractual safeguards such as Standard Contractual Clauses approved by the NPC, or by transferring only to jurisdictions determined by the NPC to provide an adequate level of data protection.

11. Your Rights Under RA 10173

As a data subject under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by hs777:

To exercise any of these rights, please submit a written request to hs777's Data Protection Officer using the contact details in Section 16. hs777 will respond to all data rights requests within fifteen (15) business days of receipt. Identity verification may be required before hs777 can process your request. If you are not satisfied with hs777's response, you may lodge a complaint with the National Privacy Commission of the Philippines.

12. Children's Privacy

The hs777 Platform is strictly prohibited for use by persons under the age of twenty-one (21) years. hs777 does not knowingly collect personal data from persons under 21. If hs777 discovers that personal data has been collected from a person under 21, the relevant account will be immediately closed and the data will be deleted, subject to any retention obligations required to investigate the underage registration incident and comply with PAGCOR reporting requirements. Parents or guardians who believe a minor may have registered an hs777 account should contact hs777's Data Protection Officer immediately.

13. Marketing Communications

hs777 may send you marketing communications about promotions, new games, bonuses, and hs777 news via SMS, email, or in-platform notifications where you have provided your consent to receive such communications during account registration or at any subsequent time.

You may withdraw your consent to receive marketing communications at any time by: (a) updating your communication preferences in your hs777 account settings; (b) clicking the "unsubscribe" link in any marketing email from hs777; or (c) contacting hs777 customer support via live chat. Withdrawal of consent will not affect the lawfulness of marketing processed before the withdrawal. Note that certain service and account communications (e.g., transaction confirmations, security alerts, KYC requests) are not marketing communications and will continue to be sent regardless of your marketing preferences.

14. Third-Party Links

The hs777 Platform may contain links to third-party websites or services (for example, GCash or Maya payment interfaces). hs777 is not responsible for the privacy practices of any third-party website or service. This Privacy Policy applies solely to personal data collected and processed by hs777 through the hs777 Platform. We encourage you to review the privacy policies of any third-party services you access in connection with your use of hs777.

15. Amendments to This Policy

hs777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or NPC guidance. Material amendments will be notified to registered players via the email address on their account or via a prominent notice on the Platform at least seven (7) days before taking effect. The "Last Updated" date at the top of this Policy will always reflect the most recent revision. Your continued use of the Platform following notification of any amendment constitutes your acknowledgment of the revised Privacy Policy.

16. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or hs777's data processing practices, please contact hs777's designated Data Protection Officer through the following channels:

• Live Chat Support: Available 24/7 via the chat widget on the hs777 Platform — the fastest channel for privacy queries
• Email (DPO): [email protected] — mark your subject line "PRIVACY / DATA REQUEST" for prioritized routing to the DPO team

hs777's DPO team targets a response to all privacy-related written enquiries within five (5) business days. For formal data subject rights requests, hs777 will respond within fifteen (15) business days of receipt and identity verification.

If you are not satisfied with hs777's handling of your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines — the independent supervisory authority responsible for data protection enforcement under RA 10173.