Privacy Policy — me7777

1.1 This Privacy Policy governs the collection, use, storage, disclosure, and protection of personal data by me7777 ("me7777," "we," "us," or "the Company"), the operator of the online gaming platform accessible at me7777.co.

1.2 me7777 is the personal information controller ("PIC") in respect of the personal data collected from players and visitors as described in this Policy. As PIC, me7777 determines the purposes and means by which personal data is processed and is accountable for ensuring that processing is conducted in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules and regulations, and the issuances of the National Privacy Commission (NPC).

1.3 me7777 operates under the Philippine Amusement and Gaming Corporation (PAGCOR) regulatory framework, which imposes specific data collection, retention, and reporting obligations. Compliance with these obligations forms part of our lawful basis for certain categories of data processing described in this Policy.

1.4 Capitalized terms not defined in this Policy have the meanings given in the me7777 Terms & Conditions, available at me7777.co/terms-conditions.

2.1 me7777 collects the following categories of personal data, limited to what is necessary for the purposes described in Section 5:

2.2 me7777 does not collect sensitive personal information as defined under the Data Privacy Act (e.g., health data, biometric data other than photograph for KYC, religious beliefs, political views) unless you voluntarily provide such information in the course of a support interaction, in which case it will be treated with the heightened protections applicable to sensitive personal information under the DPA.

3.1 Directly from you. The majority of personal data me7777 holds is provided directly by you during account registration, identity verification, payment transactions, support interactions, and participation in promotions. This includes data entered into forms on the Platform and documents uploaded for KYC purposes.

3.2 Automatically through Platform use. When you access the me7777 Platform, technical and usage data is collected automatically through cookies, log files, and similar technologies. This includes IP address, device identifiers, browser attributes, and navigation behaviour. See Section 7 for full details on cookies.

3.3 From payment processors. When you deposit or withdraw funds, our payment service providers (GCash, PayMaya, bank partners, and card schemes) may transmit transaction confirmation data to me7777 for reconciliation and fraud prevention purposes.

3.4 From identity verification partners. To comply with PAGCOR KYC requirements and the Anti-Money Laundering Act, me7777 may use third-party identity verification services to cross-reference the information you provide against official databases. These partners process personal data on behalf of me7777 under data processing agreements.

3.5 From publicly available sources. In limited circumstances related to fraud prevention or AML compliance, me7777 may verify information against publicly available sources such as government registries or sanctions screening databases.

4.1 me7777 processes personal data only where a lawful basis exists under the Data Privacy Act of 2012. The applicable legal bases are as follows:

• Contractual necessity: Processing is necessary for the performance of the me7777 player account agreement, including account creation, payment processing, game provision, and support.
• Legal obligation: Processing is necessary to comply with applicable Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate interests: Processing is necessary for legitimate interests pursued by me7777, including fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and freedoms.
• Consent: Where processing is for marketing communications, optional personalization features, or other purposes not covered by the above bases, me7777 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5.1 me7777 uses the personal data described in Section 2 for the following purposes, in each case only to the extent necessary and proportionate to that purpose:

• Account registration and management: Creating and maintaining your me7777 Account, verifying your identity, and managing your Account settings and preferences.
• Payment processing: Facilitating deposits to and withdrawals from your Player Wallet via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels.
• KYC and regulatory compliance: Verifying your identity and age in accordance with PAGCOR requirements and the Anti-Money Laundering Act. This may include requesting and reviewing documentary evidence of identity and source of funds.
• Game provision and platform operation: Delivering casino games, live dealer tables, sports betting markets, bingo, and fishing games through the Platform, and maintaining platform functionality and stability.
• Fraud prevention and security: Detecting, investigating, and preventing fraud, money laundering, account takeover, and other prohibited activities. This includes automated risk scoring, pattern analysis, and device fingerprinting.
• Customer support: Responding to support queries, resolving disputes, processing complaints, and maintaining records of support interactions for quality assurance.
• Responsible gaming: Implementing player protection tools including deposit limits, self-exclusion, and session time reminders, and monitoring account activity for indicators of problem gambling.
• Marketing communications: Sending promotional offers, bonus notifications, new game announcements, and Platform updates to players who have opted in to receive such communications. All marketing emails and SMS messages include an unsubscribe mechanism.
• Platform improvement and analytics: Analysing usage patterns to improve Platform design, game selection, payment processes, and the overall player experience. Analytics data is aggregated and anonymized where possible.
• Legal and regulatory reporting: Complying with legal obligations including mandatory reporting to PAGCOR, the AMLC, the NPC, and other government authorities as required by Applicable Law.

6.1 me7777 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Personal data is shared only in the following circumstances:

6.2 In the event of a merger, acquisition, or sale of all or substantially all of the assets of me7777, personal data held by me7777 may be transferred to the acquiring entity, subject to that entity assuming the data protection obligations set out in this Policy. Players will be notified of any such transfer that materially affects the terms of this Policy.

7.1 me7777 uses cookies and similar technologies (including local storage, session storage, and pixel tags) on the Platform to enable core functionality, remember your preferences, and gather usage analytics.

7.2 The categories of cookies used by me7777 are as follows:

• Strictly necessary cookies: These are essential for the Platform to function correctly, including maintaining your login session, processing transactions, and preserving security settings. These cookies cannot be disabled without severely impairing Platform functionality.
• Performance and analytics cookies: These cookies collect aggregated, anonymized information about how players use the Platform — which pages are visited most frequently, how long sessions last, and where errors occur. This information is used to improve Platform performance and design.
• Functional cookies: These cookies remember your preferences such as language settings, preferred currency display, and game lobby layout to provide a more personalized experience across sessions.
• Marketing cookies: Where you have consented, marketing cookies may be used to deliver relevant promotional content and measure the effectiveness of me7777's marketing campaigns. These cookies do not track your activity on third-party websites.

7.3 You may manage your cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies may prevent you from accessing certain features of the Platform. Most mobile browsers provide equivalent cookie management controls within their privacy settings.

8.1 me7777 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Applicable Law, whichever is longer. The following general retention periods apply:

• Account and identity data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements and AML reporting obligations under Republic Act No. 9160.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, in accordance with AMLC and BIR requirements.
• Game session and wagering data: Retained for a minimum of three (3) years to support dispute resolution, regulatory audit, and responsible gaming monitoring.
• Support and communications data: Retained for a minimum of two (2) years following the closure of the relevant support interaction.
• Marketing and analytics data: Retained for a maximum of two (2) years from collection, or until you withdraw consent, whichever is earlier.
• Technical and log data: Retained for a maximum of twelve (12) months, except where specific log data is required to be preserved for a longer period in connection with an ongoing investigation.

8.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with any individual. Physical documents containing personal data are destroyed by secure shredding.

9.1 me7777 implements and maintains appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• AES-256 encryption for personal data at rest on me7777 servers;
• TLS 1.2 or higher encryption for all data transmitted between player devices and the Platform;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Role-based access controls limiting employee access to personal data to the minimum necessary for their function;
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security specialists;
• Payment card data handling in accordance with the PCI Data Security Standard (PCI-DSS);
• Formal security incident response procedures, including notification protocols aligned with NPC breach reporting requirements.

9.2 Security Incident Notification. In the event of a personal data breach that is likely to give rise to a real risk of serious harm to affected individuals, me7777 will notify the NPC within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with Section 20(f) of the Data Privacy Act and the NPC's Personal Data Breach Management Guidelines.

9.3 Notwithstanding the security measures described above, no method of electronic transmission or storage is 100% secure. Players are responsible for maintaining the security of their own login credentials and for promptly notifying me7777 of any suspected unauthorized account access.

10.1 Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by me7777:

• Right to be informed: You have the right to be informed about the collection and processing of your personal data, which is fulfilled in part by this Privacy Policy.
• Right to access: You may request a copy of the personal data me7777 holds about you, along with information about how it is processed. Requests will be fulfilled within thirty (30) business days.
• Right to correction: You may request correction of any inaccurate or incomplete personal data in your Account at any time. Some corrections can be made directly in Account Settings; others require verification before they can be applied.
• Right to erasure or blocking: You may request deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, or where processing has been based on withdrawn consent. Note that certain data must be retained by me7777 for legally mandated periods (see Section 8) regardless of erasure requests.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you believe your rights and freedoms override those interests.
• Right to data portability: Where technically feasible and legally permissible, you may request a structured, machine-readable copy of personal data you have provided to me7777 for transfer to another controller.
• Right to lodge a complaint: If you believe me7777 has violated your data privacy rights, you may lodge a complaint with the National Privacy Commission via its official channels. me7777 requests that you contact our Data Protection Officer first so that we may attempt to resolve the matter directly.

10.2 To exercise any of the above rights, please contact the me7777 Data Protection Officer as described in Section 14 of this Policy. All requests will be acknowledged within five (5) business days and substantively addressed within thirty (30) business days. me7777 may request proof of identity before processing a data rights request to protect against fraudulent requests.

11.1 The me7777 Platform is strictly intended for use by persons aged twenty-one (21) years and above, in accordance with PAGCOR regulations and applicable Philippine law. me7777 does not knowingly collect personal data from individuals under the age of 21.

11.2 Age verification is conducted during the account registration process and before the processing of the first withdrawal. Any Account found to have been created by an individual under 21 years of age will be immediately suspended, and any related personal data will be deleted except to the extent that retention is required for regulatory reporting or law enforcement purposes.

11.3 If you have reason to believe that a minor has registered an Account on the me7777 Platform or that their personal data has been inadvertently collected, please notify me7777 immediately at [email protected] with the subject line "Minor Account Report." me7777 will investigate and take appropriate action within five (5) business days.

12.1 me7777 primarily stores and processes personal data within servers located in jurisdictions that provide adequate levels of data protection. Where personal data is transferred to third-party service providers (such as game technology providers or cloud infrastructure partners) located outside the Philippines, me7777 ensures that such transfers are subject to appropriate contractual safeguards, including data processing agreements that impose obligations equivalent to those applicable under Philippine law.

12.2 Players in the Philippines should be aware that certain game providers whose titles are accessible through the me7777 Platform process game session data on servers located outside the Philippines. In each such case, me7777 has conducted due diligence to verify that the provider's data handling practices meet an adequate standard of protection, and data processing agreements are in place.

12.3 me7777 does not transfer personal data to jurisdictions that are subject to sanctions, embargoes, or that have been identified by the NPC as providing inadequate levels of data protection, without implementing appropriate additional safeguards.

13.1 me7777 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform services. The "Last Updated" date at the top of this Policy will be amended to reflect the date of the most recent revision.

13.2 For material changes that significantly affect the rights of players or the nature of data processing, me7777 will provide at least seven (7) days' advance notice by email to registered Account holders, or by a prominent notice displayed on the Platform, prior to the changes taking effect.

13.3 Your continued use of the me7777 Platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree with any change, you may request account closure before the revised Policy takes effect.

13.4 Players are encouraged to review this Privacy Policy periodically to remain informed about how me7777 protects their personal data.

14.1 me7777 has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the me7777 DPO through any of the following channels:

• Email: [email protected] — please include "Data Privacy Request" in the subject line
• Live Chat: Available 24/7 through your Account dashboard — request escalation to the Data Protection team
• Response time: DPO acknowledges requests within five (5) business days; substantive responses within thirty (30) business days

14.2 If you remain dissatisfied following the DPO's response to your concern, you have the right to file a complaint with the National Privacy Commission of the Philippines. Information on how to file a complaint with the NPC is available through the NPC's official channels. me7777 fully cooperates with NPC investigations and requests for information.

14.3 For support inquiries unrelated to data privacy — including account issues, payment queries, and responsible gaming tools — please contact the me7777 Player Support team via live chat or at [email protected].