Privacy Policy – em7777

1.1 The data controller responsible for the personal information processed in connection with the em7777 Platform (accessible at em7777.club) is the operator of em7777, a PAGCOR-licensed online gaming entity operating under Philippine law.

1.2 As data controller, em7777 determines the purposes and means by which personal data collected from Filipino players and visitors is processed. em7777 has appointed a Data Protection Officer (DPO) as required under the Data Privacy Act of 2012 and the National Privacy Commission's (NPC) implementing rules.

1.3 For all data privacy inquiries, rights requests, and complaints, you may contact em7777's Data Protection Officer via the contact details provided in Section 13 of this Policy.

2.1 Registration & Identity Data. When you register for an em7777 Account, we collect:

• Full legal name as it appears on your government-issued Philippine identification document
• Date of birth (required for mandatory 21+ age verification under PAGCOR rules)
• Registered Philippine mobile number (used for OTP authentication and account communications)
• Username and encrypted password hash
• Residential address in the Philippines
• Email address (optional, but required for certain account notifications)

2.2 Identity Verification (KYC) Data. To comply with PAGCOR Know Your Customer requirements and the Anti-Money Laundering Act (RA 9160, as amended), em7777 collects:

• Copies of government-issued Philippine identification documents (e.g., Philippine Passport, SSS ID, UMID, PhilHealth ID, Voter's ID, or Driver's License)
• Proof of address documents where required
• Source of funds documentation for players with high transaction volumes as required by AML regulations

2.3 Financial Transaction Data. When you deposit to or withdraw from your em7777 Account, we collect:

• Payment method details (GCash mobile number, Maya account reference, bank account name and number, e-wallet references)
• Transaction amounts, dates, and reference numbers
• Deposit and withdrawal history associated with your Account

2.4 Gaming Activity Data. em7777 records all gaming activity on the Platform, including:

• Games played, bet amounts, outcomes, and timestamps
• Session duration and frequency data
• Bonus claims, wagering progress, and promotional participation history
• Responsible gaming tool settings and any self-imposed limits or exclusions

2.5 Technical & Device Data. When you access the em7777 Platform, our systems automatically collect:

• Internet Protocol (IP) address and approximate geolocation (country and region level)
• Device type, operating system, and browser information
• Session identifiers and authentication tokens
• Platform interaction logs including pages visited, features accessed, and error reports

2.6 Communications Data. If you contact em7777 support via live chat or email, we retain records of those communications, including the content of messages, timestamps, and the support agent involved, for service quality, training, and dispute resolution purposes.

3.1 Directly from You. The majority of personal data em7777 holds is collected directly from you — through the registration form, identity verification submission, payment transactions, support communications, and your in-platform activity.

3.2 Automatically. Technical and device data (Section 2.5) is collected automatically through cookies, session logs, and our Platform's security monitoring systems when you access em7777.club. See Section 6 for details on our cookie practices.

3.3 From Third Parties. In limited circumstances, em7777 may receive personal data from third parties, including:

• Payment processors — confirmation data from GCash, Maya, BPI, BDO, Metrobank, and other payment channels that you use to transact on em7777;
• Identity verification services — third-party KYC providers used to verify documents submitted during account registration, operating under data processing agreements with em7777;
• PAGCOR and Philippine regulatory authorities — in the context of regulatory enquiries, compliance checks, or investigations where em7777 is required to receive or share player information.

4.1 em7777 processes personal data only where there is a lawful basis under the Data Privacy Act of 2012. The table below sets out the primary purposes for which we process your personal data and the corresponding legal basis:

4.2 Where em7777 relies on your consent as the legal basis for processing — primarily for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5.1 em7777 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing purposes. Data is shared only in the circumstances described below:

• Payment processors & financial institutions — GCash, Maya, BPI, BDO, Metrobank, and other payment service providers receive the minimum data necessary to process your deposit or withdrawal transactions on em7777.
• KYC and identity verification providers — Third-party identity verification services process your KYC documents under data processing agreements that bind them to appropriate confidentiality and security obligations.
• Game content providers — Providers such as Pragmatic Play, PG Soft, and Jili operate game servers and may receive a pseudonymised player session identifier and game stake/result data to settle game outcomes. They do not receive your name, contact details, or Philippine ID information.
• IT infrastructure and cloud services — em7777's Platform infrastructure is hosted on enterprise-grade servers. Infrastructure providers are bound by data processing agreements and have no independent right to use your personal data.
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies may receive personal data where em7777 is legally required to report or disclose information under applicable law.
• Law enforcement — em7777 may disclose personal data to the Philippine National Police, National Bureau of Investigation, or other law enforcement agencies where required by valid legal process, court order, or statutory obligation.

6.1 em7777 uses cookies and similar tracking technologies on the em7777.club Platform to operate core Platform functionality, maintain your session when you are logged in, and improve the performance and user experience of the Platform for Filipino players.

6.2 The categories of cookies used by em7777 are as follows:

• Strictly Necessary Cookies — These are essential for the em7777 Platform to function correctly. They include session cookies that keep you logged in to your em7777 Account, CSRF protection tokens, and security cookies. These cannot be disabled without impairing core functionality.
• Functional Cookies — These remember your preferences on the em7777 Platform, such as your selected game lobby view, preferred language, and responsible gaming settings. Disabling these cookies may result in some features not working as expected.
• Analytics Cookies — em7777 uses aggregated, anonymised analytics data to understand how Filipino players use the Platform and to make performance improvements. These analytics are conducted internally — em7777 does not use Google Analytics or other third-party analytics services that transfer data outside our controlled environment.
• Security Cookies — Used to detect and prevent fraudulent activity, including unusual login patterns, bot access attempts, and multi-account behaviour.

6.3 You can manage or delete cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from accessing your em7777 Account. Most modern mobile browsers used by Filipino players — including Chrome for Android and Safari for iOS — allow cookie management through the browser settings menu.

7.1 em7777 retains personal data only for as long as is necessary for the purpose for which it was collected, and in accordance with applicable legal and regulatory retention obligations. The following retention periods apply as a general guide:

• Active account data (identity, contact, and KYC documents): Retained throughout the period your em7777 Account is active and for a minimum of five (5) years following Account closure, in compliance with AMLA record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and PAGCOR audit obligations.
• Gaming activity logs: Retained for three (3) years from the date of each session or bet, and for five (5) years if linked to any regulatory investigation or dispute.
• Customer support communications: Retained for two (2) years from the date of the interaction, or for the duration of any active dispute, whichever is longer.
• Marketing consent records: Retained for three (3) years following withdrawal of consent or Account closure, to demonstrate compliance with consent obligations.
• Technical and device logs: Retained for up to twelve (12) months from the date of creation for standard operational logs; security-related logs may be retained for up to three (3) years if linked to a security incident.

7.2 At the end of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with any individual player.

8.1 em7777 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS 1.3) and 256-bit SSL encryption for all data transmitted between your device and the em7777 Platform
• AES-256 encryption for sensitive personal data stored at rest on em7777 servers
• Bcrypt hashing with salt for all stored player passwords — em7777 staff cannot see or recover your password in plain text
• Multi-factor authentication (SMS OTP) for player logins from unrecognised devices
• Role-based access controls ensuring em7777 staff can access only the personal data necessary for their specific job function
• Regular security audits and penetration testing of the em7777 Platform by qualified information security professionals
• Intrusion detection systems and real-time security monitoring covering the em7777 infrastructure 24/7
• Staff data privacy training and confidentiality obligations as a condition of employment

8.2 Personal Data Breach Notification. In the event of a personal data breach that is likely to adversely affect the rights and freedoms of Filipino players, em7777 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC requirements. Affected players will be notified without undue delay where the breach poses a high risk to their rights and freedoms, in compliance with Section 20(f) of the Data Privacy Act.

9.1 As a Filipino data subject under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by em7777. You may exercise any of these rights by contacting em7777's Data Protection Officer (see Section 13):

10.1 The em7777 Platform is strictly intended for adults who are at least twenty-one (21) years of age, in compliance with PAGCOR's minimum age requirements for online gaming in the Philippines. em7777 does not knowingly collect personal data from any person under the age of 21.

10.2 Parents and guardians who become aware that a minor has registered on the em7777 Platform using false information should contact em7777's support team or Data Protection Officer immediately. em7777 will cooperate fully with the family and with PAGCOR or Philippine law enforcement authorities in investigating and resolving any such case.

11.1 em7777 may send you promotional communications — including bonus offers, new game announcements, sports betting specials, and platform updates — via SMS to your registered Philippine mobile number, subject to your marketing consent preferences.

11.2 Marketing communications from em7777 are entirely opt-in. You will be asked to indicate your marketing preference during Account registration. You may update your marketing communication preferences at any time through your Account Settings or by contacting em7777 support.

11.3 Opting out of marketing communications does not affect your receipt of transactional or service-related communications, which include Account security alerts, OTP messages, deposit confirmations, withdrawal notifications, and regulatory communications — these are sent regardless of marketing preference as they are necessary for Account operation.

11.4 em7777 will never use your personal data to send unsolicited third-party marketing or to share your contact information with external marketing parties.

12.1 em7777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new regulatory requirements, or changes to the em7777 Platform and services.

12.2 Material changes to this Privacy Policy — those that meaningfully affect the way em7777 processes your personal data or your rights as a data subject — will be communicated to all registered Players by notification to your registered Philippine mobile number or by an in-Platform notice at your next login. The updated Policy will take effect fourteen (14) days after notification.

12.3 Non-material changes — including corrections of typographical errors, minor clarifications, and reformatting — may be made without specific prior notification. The effective date at the top of this page reflects the date of the most recent update.

12.4 Your continued use of the em7777 Platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated Policy. If you do not agree with any change, you may close your Account and request deletion of your personal data subject to applicable retention obligations.

13.1 For all data privacy inquiries, requests to exercise your data subject rights, or concerns about em7777's handling of your personal data, please contact our Data Protection Officer through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the em7777.club Platform. For data privacy matters, please identify your inquiry as a "Data Privacy Request" at the start of the chat so it can be routed directly to the DPO team. Average response time for DPO escalations is within 24 hours of initial contact.
• Email: [email protected] — For data privacy requests by email, please include "Data Privacy Request" in the subject line and identify the specific right or concern you are raising. All data privacy email requests are treated as confidential.

13.2 If you are not satisfied with em7777's response to your privacy concern, you have the right to escalate the matter to the National Privacy Commission of the Philippines through their official complaint process. em7777 cooperates fully with NPC investigations and will provide all information requested by the Commission in connection with any formal complaint.

13.3 You may also file concerns directly with PAGCOR's regulatory division regarding em7777's compliance with gaming-related data protection obligations.