xm777 Privacy Policy

1 Introduction

xm777 ("xm777," "we," "us," or "our") operates the online gaming platform accessible at xm777.win and is committed to protecting the privacy and personal data of all registered Members and visitors. This Privacy Policy ("Policy") describes how xm777 collects, processes, stores, and protects personal information in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), and its implementing rules and regulations issued by the National Privacy Commission (NPC) of the Philippines.

By registering an account, accessing the xm777 platform, or submitting any personal information to xm777, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue your use of the xm777 platform.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, xm777 acts as the Personal Information Controller (PIC) with respect to the personal data of its Members and platform visitors. xm777 determines the purposes and means by which personal information is processed in connection with the operation of the xm777.win gaming platform.

xm777 has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with data protection obligations. Members may contact the DPO through the contact information provided in Section 13 of this Policy.

3 Information We Collect

xm777 collects personal data from Members and platform visitors through the following means and in the following categories:

3.1 Registration Data. When you create an xm777 account, we collect:

• Full legal name;
• Date of birth (to verify the 21+ age requirement);
• Email address;
• Mobile phone number;
• Residential address (province, city/municipality);
• Username and encrypted password.

3.2 Identity Verification Data (KYC). To comply with PAGCOR regulatory requirements and anti-money laundering obligations, xm777 may collect:

• Copies of government-issued identification (e.g., Philippine National ID, driver's license, passport, SSS/GSIS ID, voter's ID);
• Proof of address documents;
• Selfie photographs for identity matching purposes;
• Proof of payment method ownership.

3.3 Financial Transaction Data. When you deposit to or withdraw from your xm777 wallet:

• GCash or PayMaya account reference (masked);
• BPI, BDO, or Metrobank account details (as applicable, masked);
• Transaction amounts, dates, and reference numbers;
• Wallet balance history.

3.4 Platform Usage Data. During your use of the xm777 platform, we automatically collect:

• IP address and approximate geographic location;
• Device type, operating system, and browser information;
• Login timestamps and session durations;
• Game activity records, bet histories, and win/loss data;
• Pages visited, features accessed, and interaction patterns.

3.5 Communications Data. When you contact xm777 customer support via live chat or email, we retain records of those communications, including any personal information you voluntarily provide therein.

4 How xm777 Uses Your Personal Data

xm777 processes the personal data described above for the following specific purposes:

5 Legal Basis for Processing

xm777 processes personal data only where a lawful basis exists under the Data Privacy Act of 2012. The primary legal bases applicable to xm777's data processing activities are:

• Contractual Necessity: Processing required to fulfill the obligations of the xm777 Member Agreement, including account management and payment processing;
• Legal Obligation: Processing required to comply with applicable Philippine laws including the Anti-Money Laundering Act (AMLA), the PAGCOR regulatory framework, and the Data Privacy Act of 2012;
• Legitimate Interest: Processing necessary for fraud prevention, platform security, and improving the xm777 user experience, where such interests are not overridden by the data subject's rights;
• Consent: Where xm777 relies on your consent as the lawful basis (e.g., for promotional communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

6.1 xm777 does not sell, rent, or trade your personal data to third parties for their own commercial purposes.

6.2 xm777 may share your personal data with the following categories of recipients, solely to the extent necessary for the specified purpose:

• Payment Processors: GCash (Mynt), PayMaya (PayMongo), and banking partners (BPI, BDO, Metrobank) receive transaction data necessary to process deposits and withdrawals;
• Game Providers: Licensed game studios (e.g., JILI, PG Soft, Pragmatic Play) may receive anonymized session identifiers necessary to deliver game content — they do not receive your full identity data;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government agencies may receive data as required by law;
• IT and Security Service Providers: Trusted third-party providers who supply infrastructure, hosting, fraud detection, or cybersecurity services to xm777 under data processing agreements that impose equivalent privacy obligations;
• Legal and Professional Advisors: Where required for the resolution of legal disputes, compliance assessments, or regulatory inquiries.

6.3 Any third party with whom xm777 shares personal data is required to handle such data in compliance with applicable Philippine privacy law and is prohibited from using the data for any purpose beyond the specified purpose of sharing.

7 Cookies & Tracking Technologies

7.1 The xm777 platform uses cookies and similar tracking technologies to enhance user experience, maintain session authentication, and analyze platform usage patterns.

7.2 The following categories of cookies are used on xm777.win:

• Strictly Necessary Cookies: Required for xm777 login session management and core platform functionality. These cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: Remember your preferences (e.g., language, game settings) to provide a more personalized xm777 experience.
• Analytics Cookies: Collect anonymized data about how Filipino players navigate the xm777 platform — used to improve site performance and content relevance.

7.3 You may manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the xm777 platform.

8 Data Retention

8.1 xm777 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law.

8.2 The following retention periods apply as a general guide:

• Account and KYC data: Retained for the duration of the Member relationship and for a minimum of five (5) years following account closure, in accordance with AMLA record-keeping obligations;
• Transaction records: Retained for a minimum of five (5) years as required by the Anti-Money Laundering Act;
• Game activity logs: Retained for three (3) years from the date of each gaming session;
• Customer support communications: Retained for two (2) years from the date of the last interaction;
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter as proof of prior consent.

9 Data Security

9.1 xm777 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and xm777.win;
• Encrypted storage of passwords and sensitive account credentials;
• Two-factor authentication (2FA) available for all xm777 accounts;
• Access controls limiting internal data access to authorized personnel on a need-to-know basis;
• Regular security assessments and vulnerability testing of the xm777 platform;
• Anomaly detection systems to identify and respond to suspicious login activity.

9.2 In the event of a personal data breach that is likely to result in serious harm to xm777 Members, xm777 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected Members without undue delay, in accordance with the Data Privacy Act of 2012.

10 Your Rights as a Data Subject

Under the Data Privacy Act of 2012, registered Members of xm777 who are Philippine residents hold the following rights with respect to their personal data:

• Right to be Informed: The right to be notified of how your personal data is collected, used, and shared — which this Privacy Policy fulfills;
• Right to Access: The right to request a copy of the personal data xm777 holds about you;
• Right to Rectification: The right to request correction of inaccurate or outdated personal data on your xm777 account;
• Right to Erasure or Blocking: The right to request deletion or blocking of personal data that is no longer necessary, was unlawfully processed, or where consent has been withdrawn — subject to legal retention obligations;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format where technically feasible;
• Right to Object: The right to object to the processing of your personal data for purposes other than those required by law or contract — including direct marketing;
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission if you believe xm777 has violated your data privacy rights.

To exercise any of the above rights, contact xm777's Data Protection Officer using the contact details provided in Section 13. xm777 will respond to all verified rights requests within fifteen (15) working days.

11 Children and Minors

11.1 The xm777 platform is strictly for individuals aged twenty-one (21) years and above. xm777 does not knowingly collect personal data from persons under 21 years of age.

11.2 If xm777 becomes aware that personal data has been collected from an individual under 21 without verified parental or guardian consent, xm777 will immediately suspend the associated account, delete the personal data collected, and refund any deposits made, in accordance with applicable Philippine law.

11.3 If you are a parent or guardian and believe that your child under 21 has registered an account on xm777, please contact xm777 support immediately using the contact details in Section 13.

12 Amendments to This Policy

12.1 xm777 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable law, regulatory guidance from the NPC or PAGCOR, or changes to xm777's data processing practices.

12.2 Material changes to this Policy will be communicated to registered Members via email or through a prominent notice on the xm777 platform prior to the change taking effect. The effective date at the top of this document will be updated accordingly.

12.3 Continued use of the xm777 platform following notification of any amendment constitutes acceptance of the revised Privacy Policy.

13 Contact & Complaints

For privacy-related inquiries, data subject rights requests, or to contact xm777's Data Protection Officer, please use the following:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy Request – [Your Full Name]"
• Live Chat: Available 24/7 on the xm777 platform
• Response Time: Within 15 working days for formal data subject requests

If you are not satisfied with xm777's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC's contact details are available through official Philippine government channels.