pl777 Privacy Policy

pl777 ("pl777," "we," "us," "the Platform," "the Operator"), the operator of the online gaming platform accessible at https://pl777.club, acts as the Data Controller for personal data collected from users ("Player," "you," "your") in connection with your use of the pl777 website, mobile interfaces, and all associated gaming and payment services.

As Data Controller, pl777 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with applicable data protection legislation, including the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines.

This Privacy Policy applies to all data processing activities carried out by pl777 in connection with your registration, account use, gaming activity, deposits and withdrawals, customer support interactions, and marketing communications. By registering an account on pl777 and accepting our Terms & Conditions, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

pl777 collects personal data that is necessary for the provision of our online gaming services, the fulfilment of our legal obligations, and the continuous improvement of the player experience. The categories of personal data we collect are set out below.

Full legal name, date of birth, Philippine mobile number, email address (if provided), and government-issued identification details (PhilSys National ID number, passport number, driver's licence number, UMID, or SSS ID) submitted during account registration or KYC verification.

GCash wallet reference numbers, PayMaya account identifiers, Philippine bank account details (BPI, BDO, Metrobank, or other supported institutions), transaction records including deposit amounts, withdrawal amounts, dates, and payment method references. pl777 does not store full credit or debit card numbers on our own servers; card payment processing is handled by our PCI-DSS compliant payment processors.

Account login records, session timestamps and durations, game play history (games played, wager amounts, win/loss records), bonus claim and wagering activity, responsible gaming tool usage (deposit limit settings, self-exclusion requests, session time alert configurations), and account correspondence.

IP address, device type and model, operating system version, browser type and version, screen resolution, language settings, mobile network operator (Globe, Smart, DITO), and geolocation data (country and city level) derived from your IP address. pl777 does not collect precise GPS-level location data.

Records of your communications with the pl777 customer support team, including live chat transcripts, support ticket contents, and any supporting documentation or images you provide in connection with a support request. Communications are retained for quality assurance, dispute resolution, and compliance purposes.

Your marketing communication preferences, including opt-in and opt-out records for SMS and in-platform promotional messages. pl777 does not send unsolicited marketing communications to players who have not opted in.

pl777 collects your personal data through the following primary channels:

• Direct Submission: Information you provide when registering your pl777 account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or updating your account profile settings.
• Automated Technical Collection: Technical and device data collected automatically when you access the pl777 platform, including through cookies, web beacons, server logs, and similar tracking technologies as described in Section 8 of this Policy.
• Payment Service Providers: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard, or other payment processors when you make a deposit or withdrawal on the pl777 platform.
• Identity Verification Partners: Identity and age verification data returned by our KYC service providers in connection with the verification of government-issued Philippine identification documents.
• Third-Party Game Providers: Aggregated or pseudonymised game session data received from our licensed game studios (including JILI Games, PG Soft, Evolution Gaming, Pragmatic Play, and others) in connection with your gameplay on the pl777 platform.

pl777 processes your personal data only for specified, explicit, and legitimate purposes. The table below summarises our primary processing activities, their purposes, and the applicable legal basis under Philippine data protection law.

pl777 does not sell your personal data to third parties. We share your data only in the circumstances set out below, and only to the extent necessary for the stated purpose.

We engage third-party service providers who process data on our behalf under written data processing agreements that require them to maintain appropriate security standards and to process data only on pl777's documented instructions. These include KYC and identity verification providers, payment processors (GCash operator Mynt, PayMaya Networks, Visa/Mastercard acquiring banks), cloud infrastructure and hosting providers, customer support technology providers, and fraud and risk analytics platforms.

pl777 may disclose personal data to PAGCOR (Philippine Amusement and Gaming Corporation), the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), or other relevant Philippine government bodies and law enforcement authorities where required or permitted to do so by applicable law, court order, or regulatory direction.

In connection with your use of games provided by our licensed studio partners (JILI Games, PG Soft, Evolution Gaming, Pragmatic Play, and others), limited pseudonymised player session data — including session identifiers and wager amounts — may be transmitted to the applicable game provider's servers for game resolution and RTP auditing purposes. These providers do not receive your full identity data.

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of pl777's business assets, personal data held about registered players may be transferred to the acquiring entity as part of the transaction, subject to that entity assuming pl777's data protection obligations. Affected players will be notified of any such transfer and material change in data controller in advance.

pl777 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, as set out in this Policy, and to comply with applicable legal and regulatory retention obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your active pl777 account relationship plus a minimum of five (5) years following account closure, consistent with Philippine AML record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended).
• KYC and identity verification documents: Retained for the duration of the account relationship plus five (5) years after account closure.
• Customer support communications: Retained for three (3) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Marketing preference records: Retained for the duration of your account relationship or until you withdraw consent, whichever is earlier, plus six (6) months for audit purposes.
• Technical and device logs: Retained for up to twelve (12) months for security monitoring and fraud detection purposes.

Upon expiry of the applicable retention period, your personal data will be securely deleted or permanently anonymised in a manner that prevents re-identification.

pl777 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, or alteration. Our primary security controls include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the pl777 platform is encrypted using industry-standard 256-bit SSL/TLS protocols — the same standard applied by BDO, BPI, and Metrobank for online banking.
• Data Encryption at Rest: Sensitive personal data stored on pl777's servers — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Personal data is accessible only to pl777 personnel and contracted service providers who require access for legitimate business purposes. Role-based access controls and multi-factor authentication are enforced for all system access by pl777 staff.
• Two-Factor Authentication: Player accounts support two-factor authentication (2FA) via OTP sent to the registered Philippine mobile number, providing an additional layer of protection for account access.
• Penetration Testing & Security Audits: pl777's platform undergoes regular third-party security penetration testing and vulnerability assessments to identify and remediate security risks.
• Fraud Monitoring: Active automated and manual fraud monitoring systems operate continuously across all pl777 accounts to detect and respond to suspicious activity.

Despite these measures, no data transmission over the internet or electronic storage method is guaranteed to be 100% secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, pl777 will notify the National Privacy Commission and affected players in accordance with the notification requirements of the Philippine Data Privacy Act.

pl777 uses cookies and similar tracking technologies on our platform to enable essential functionality, improve user experience, and gather aggregated analytics data. The types of cookies we use are described below.

Strictly necessary for the operation of the pl777 platform. These cookies enable login session management, security tokens, and core platform functionality. The pl777 website cannot function without these cookies and they cannot be disabled.

Enable personalisation features such as remembering your language preference, game lobby view settings, and responsible gaming tool configurations. These cookies improve the convenience of your pl777 experience but are not strictly required for platform operation.

Used to collect aggregated, anonymised data about how players interact with the pl777 platform — including which pages are visited most frequently, how long sessions last, and which features are used most often. This data helps us improve the platform. Analytics cookies do not identify individual players.

You may manage non-essential cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from accessing the pl777 platform but may limit certain personalisation features. Instructions for managing cookies are available in the help documentation of your browser (Chrome, Safari, Firefox, or your preferred browser on Android or iOS).

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by pl777. To exercise any of these rights, please contact us as described in Section 14 of this Policy.

The pl777 platform and all associated services are strictly intended for use by adults aged 21 (twenty-one) years of age and above, consistent with the minimum legal gambling age prescribed by PAGCOR for online gaming platforms in the Philippines. pl777 does not knowingly collect personal data from individuals under the age of 21.

If pl777 becomes aware that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to delete that data, close the associated account, and — where applicable — refund any deposited funds to the payment method from which they originated. Age verification is conducted at registration and again during KYC processing to enforce this requirement.

If you believe that a minor under the age of 21 has registered an account on the pl777 platform, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action.

In connection with the provision of our services, personal data may be processed on servers located outside the Philippines — including in the Asia-Pacific region — by pl777's cloud infrastructure providers and certain game studio partners. Where such transfers occur, pl777 ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to that required by the Philippine Data Privacy Act of 2012.

Such safeguards may include: contractual clauses that bind the recipient to applicable data protection standards; transfers to jurisdictions whose data protection laws the National Privacy Commission has recognised as providing adequate protection; or other safeguards permitted by the Data Privacy Act and its Implementing Rules.

The pl777 platform may contain technical integrations with third-party game providers and payment processors whose privacy practices are governed by their own privacy policies. pl777 is not responsible for the privacy or security practices of third-party service providers beyond the contractual protections described in Section 5.1 of this Policy.

When you use GCash, PayMaya, BPI, BDO, Metrobank, or any other payment service to make a deposit or withdrawal on the pl777 platform, your interaction with that payment service is governed by the applicable terms and privacy policy of that payment provider. pl777 recommends that you review the privacy policies of any third-party services you use in connection with your pl777 account.

pl777 reserves the right to update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform functionality. Material changes to this Policy will be communicated to registered players via the mobile number or email address on file, or through a prominent notice on the pl777 platform, with a minimum of fourteen (14) calendar days' notice prior to the effective date of the change.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the pl777 platform following the effective date of any amended Privacy Policy constitutes your acknowledgement of the revised Policy. We encourage you to review this Policy periodically to stay informed about how pl777 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or pl777's handling of your personal data, or if you wish to exercise any of the rights described in Section 9 of this Policy, please contact the pl777 Data Protection Officer using the details below.