AP777 Casino – Privacy Policy

AP777 Casino ("AP777," "we," "us," or "our") operates the online gaming platform accessible at https://ap777.casino and through the AP777 mobile application (collectively, the "Platform"). As a data controller, AP777 is responsible for the personal information we collect from players and visitors in the Philippines and is committed to handling that information with transparency, integrity, and care.

This Privacy Policy ("Policy") describes what personal data AP777 collects, why we collect it, how we use and protect it, with whom we may share it, and what rights you have as a data subject under Philippine law. This Policy applies to all registered players, prospective players, and visitors to the AP777 Platform, regardless of whether they are located in Metro Manila, Cebu, Davao, Quezon City, or any other part of the Philippines.

This Policy should be read alongside our Terms & Conditions, which govern your use of the AP777 Platform. Capitalized terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

If you have any questions about this Policy or how AP777 handles your personal data, please contact our Data Protection Officer (DPO) using the contact details provided in Section 14 of this Policy.

AP777 collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

AP777 does not intentionally collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance. Where sensitive data such as government ID numbers is collected, it is handled with heightened security measures and access controls.

AP777 collects personal data through the following means:

• Direct interactions: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, pixel tags, and server logs. See Section 7 for more detail on cookies.
• Third-party sources: Identity verification providers, payment processors (such as GCash, PayMaya, BPI, BDO, and Metrobank), fraud prevention services, and publicly available sources, where permitted by applicable law.
• Regulatory sources: Information received from PAGCOR or other regulatory authorities in connection with compliance obligations.

AP777 will always inform you at the point of collection whether providing certain personal data is mandatory or voluntary, and the consequences of not providing it. In most cases, mandatory data is required to create and maintain a verified account and to comply with our legal obligations.

AP777 uses your personal data for the following purposes:

• Account management: Creating, verifying, and maintaining your AP777 player account, including processing your registration and KYC documentation.
• Platform operation: Providing access to games, processing deposits and withdrawals, crediting bonuses, and delivering all features of the AP777 Platform.
• Legal and regulatory compliance: Meeting our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and other applicable Philippine laws. This includes conducting AML checks, filing regulatory reports, and responding to lawful requests from authorities.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, bonus abuse, and other prohibited conduct.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behavior, enforcing self-exclusion requests, and applying deposit or loss limits set by the player.
• Customer support: Responding to your inquiries, resolving disputes, and improving the quality of our support services.
• Marketing communications: Sending you promotional offers, game updates, and platform news where you have provided consent or where we have a legitimate interest to do so. You may opt out at any time.
• Platform improvement: Analyzing usage patterns and player feedback to improve the AP777 Platform, fix bugs, and develop new features.
• Legal claims: Establishing, exercising, or defending legal claims in connection with the AP777 Platform.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, AP777 processes your personal data on the following legal bases:

• Consent: Where you have given clear, informed, and freely given consent to the processing of your personal data for a specific purpose, such as receiving marketing communications or the use of non-essential cookies.
• Contractual necessity: Where processing is necessary to perform the contract between you and AP777 — specifically, to provide you with access to the AP777 Platform and its services as described in the Terms & Conditions.
• Legal obligation: Where processing is required to comply with a legal or regulatory obligation applicable to AP777, including PAGCOR licensing requirements, AMLA obligations, and tax reporting duties.
• Legitimate interests: Where processing is necessary for the legitimate interests of AP777 or a third party, provided those interests are not overridden by your rights and interests. This includes fraud prevention, platform security, and improving the AP777 gaming experience.
• Vital interests: In exceptional circumstances, where processing is necessary to protect the vital interests of a data subject or another person.

Where AP777 relies on consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

AP777 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML service providers who assist AP777 in verifying player identities and screening against sanctions lists and politically exposed persons (PEP) databases.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law or regulatory obligation.
• Technology and infrastructure providers: Cloud hosting providers, cybersecurity firms, and software vendors who process data on AP777's behalf under strict data processing agreements.
• Professional advisors: Legal counsel, auditors, and accountants, where necessary for AP777 to obtain professional advice or to establish, exercise, or defend legal claims.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of AP777's business, your personal data may be transferred to the relevant successor entity, subject to the same privacy protections described in this Policy.

AP777 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyze usage patterns, and support security functions. A cookie is a small text file placed on your device when you visit the AP777 Platform.

The types of cookies AP777 uses include:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting Platform functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and login status to provide a more personalized experience.
• Analytics cookies: Collect anonymized data about how players use the Platform — such as which games are most popular and how long sessions last — to help AP777 improve the Platform.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorized access attempts, and bot traffic.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the AP777 Platform. AP777 does not use third-party advertising cookies or cross-site tracking technologies for the purpose of serving targeted advertisements on external websites.

AP777 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR licensing requirements and AMLA obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and its implementing regulations.
• Gaming history: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Support communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required for an ongoing dispute or legal claim.
• Marketing data: Retained until you withdraw consent or opt out, after which it will be deleted or anonymized within thirty (30) days.

When personal data is no longer required, AP777 will securely delete or anonymize it in accordance with industry best practices and applicable data protection standards.

AP777 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the AP777 Platform — the same standard used by major Philippine banks such as BPI and BDO.
• Encryption of sensitive data at rest, including identity documents and financial information.
• Role-based access controls ensuring that only authorized AP777 personnel with a legitimate need can access personal data.
• Regular security audits, vulnerability assessments, and penetration testing conducted by independent cybersecurity specialists.
• Multi-factor authentication (MFA) for internal systems and administrative access.
• Continuous monitoring of the Platform for suspicious activity, unauthorized access attempts, and data anomalies.
• Staff training on data protection obligations and secure data handling practices.

While AP777 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, AP777 will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of the Data Privacy Act of 2012.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by AP777:

• Right to be informed: The right to be informed of how your personal data is being collected and processed, as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data AP777 holds about you, along with information about how it is being used.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data AP777 holds about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to AP777's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller where technically feasible.
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe AP777 has not handled your personal data in accordance with the Data Privacy Act of 2012.

To exercise any of these rights, please contact AP777's Data Protection Officer using the details in Section 14. AP777 will respond to all data subject requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, with prior notice to you.

The AP777 Platform is strictly intended for adults aged twenty-one (21) years and above, in accordance with PAGCOR regulations governing online casino gaming in the Philippines. AP777 does not knowingly collect personal data from individuals under the age of 21.

If AP777 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has registered on the AP777 Platform, please contact our support team immediately so that we can take appropriate action.

AP777 primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to, or accessed by, service providers located outside the Philippines — for example, cloud infrastructure providers or cybersecurity specialists operating in other jurisdictions.

Where such transfers occur, AP777 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under the Data Privacy Act of 2012. These safeguards may include contractual clauses approved by the National Privacy Commission, binding corporate rules, or transfers to jurisdictions recognized as providing an adequate level of data protection.

AP777 will not transfer your personal data to any jurisdiction that does not provide adequate protections without your explicit consent or a lawful basis for doing so.

AP777 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, AP777 will notify registered players via the email address on file and/or through a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how AP777 protects your personal data. Your continued use of the AP777 Platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or AP777's handling of your personal data, please contact our Data Protection Officer (DPO). AP777 is committed to responding to all privacy-related inquiries within thirty (30) days.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. AP777 encourages players to contact us first so that we have the opportunity to address your concern directly.