1q777 Privacy Policy

This Privacy Policy applies to all personal information processed by 1q777 in connection with the operation of the 1q777 online gaming platform accessible at 1q777.vip, including all related web pages, account services, customer support functions, marketing communications, and payment processing activities.

Data Controller: For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173), the personal information controller responsible for the processing of data collected through the 1q777 Platform is the legal entity operating 1q777, which holds the applicable PAGCOR authorization to offer online gaming services to Filipino players. Enquiries regarding the identity of the legal entity may be directed to the Data Protection Officer using the contact details in Section 14.

This Policy applies to all individuals who:

• Register or apply to register an account with 1q777;
• Access or use any part of the 1q777 Platform, including as a visitor without an account;
• Contact 1q777 through any support, feedback, or communications channel;
• Participate in any 1q777 promotion, survey, or research activity.

1q777 collects the following categories of personal information, the specific items collected depending on how you interact with the Platform:

2.1 Identity & Contact Information

• Full legal name as it appears on a government-issued Philippine ID;
• Date of birth (used to verify compliance with the 21+ age requirement);
• Residential address in the Philippines;
• Mobile phone number (Philippine network, e.g., Globe, Smart, DITO);
• Email address;
• Copies of government-issued ID documents (e.g., PhilSys National ID, Driver's License, Passport, SSS UMID, PhilHealth ID).

2.2 Financial & Transaction Information

• GCash mobile wallet number and verified account name;
• Maya (formerly PayMaya) account details;
• Bank account name and account number for BPI, BDO, Metrobank, UnionBank, PNB, or Landbank transactions;
• Records of all deposits, withdrawals, and in-platform transactions including timestamps and amounts in Philippine Pesos (₱);
• Source-of-funds documentation where required by PAGCOR anti-money laundering obligations.

2.3 Gaming Activity Data

• Game session history including game titles played, wager amounts, outcomes, and session duration;
• Sports betting selections, odds accepted, and settlement results;
• Bonus claim history and wagering progress records;
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status).

2.4 Technical & Device Data

• IP address at time of each login and session;
• Device type, operating system, and browser type and version;
• Mobile network operator (where applicable);
• Geolocation data (country-level only, used to confirm Philippines-based access);
• Session cookies and authentication tokens.

2.5 Communications Data

• Content of live chat interactions with 1q777 support agents;
• Email correspondence with the support or compliance team;
• Survey responses and voluntary feedback submitted through the Platform.

1q777 collects personal data through the following channels and methods:

Where data is collected from third parties (such as identity verification service providers or payment processors), 1q777 ensures that such third parties have a lawful basis for sharing that data and that the collection is limited to what is necessary for the relevant compliance purpose.

Under the Data Privacy Act of 2012, 1q777 processes personal information on the following legal bases:

• Performance of Contract (Section 12[b], RA 10173): Processing necessary to fulfil the account agreement with the player — including account creation, game access, deposit handling, withdrawal processing, and customer support.
• Compliance with Legal Obligation (Section 12[c], RA 10173): Processing required by PAGCOR regulations, the Anti-Money Laundering Act (RA 9160 as amended by RA 10365), Republic Act No. 10927 (AMLA Amendment extending to casinos), and other applicable Philippine statutes.
• Legitimate Interests (Section 12[f], RA 10173): Processing for fraud prevention, platform security, responsible gaming monitoring, internal auditing, and service improvement — where such interests are not overridden by the data subject's rights.
• Consent (Section 12[a], RA 10173): Processing for optional marketing communications and non-essential analytics, where the player has provided explicit, informed, and freely given consent that can be withdrawn at any time.

Personal data collected by 1q777 is used exclusively for the following declared purposes:

5.1 Account Management & Platform Access

To create and maintain your 1q777 account; to authenticate your identity at each login; to process your game activity and maintain your session; to manage account settings and preferences; and to enforce single-account policies across the Platform.

5.2 Payment Processing

To verify ownership of GCash, Maya, QR Ph, GrabPay, and bank accounts used for deposits and withdrawals; to process incoming and outgoing transactions in Philippine Pesos; to maintain accurate financial records; and to apply and enforce withdrawal eligibility requirements including KYC verification status.

5.3 Regulatory Compliance & AML

To fulfil 1q777's obligations under PAGCOR's licensing requirements; to comply with the AMLA (RA 9160 as amended) — specifically transaction monitoring, suspicious transaction reporting, and customer due diligence obligations applicable to online gaming platforms; and to respond to lawful requests from PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine authorities.

5.4 Responsible Gaming

To monitor player gaming activity for indicators of problem gambling behaviour; to enforce deposit limits, session limits, and self-exclusion settings set by the player; to proactively contact players where behavioural patterns suggest gambling-related harm; and to comply with PAGCOR responsible gaming programme requirements.

5.5 Fraud Prevention & Security

To detect and prevent unauthorised access, fraudulent account activity, bonus abuse, multi-accounting, and other prohibited conduct; to investigate security incidents and take remedial action; and to protect the legitimate interests of 1q777, its game studio partners, and other players on the Platform.

5.6 Customer Support

To identify you when you contact the 1q777 support team; to access relevant account history to resolve your query efficiently; to maintain records of support interactions for quality assurance and training; and to follow up on open support cases.

5.7 Marketing Communications (Consent-Based)

Where you have given explicit consent, to send you promotional offers, bonus notifications, new game announcements, and other marketing communications via SMS, email, or in-platform notification. You may opt out of such communications at any time without affecting your account access.

1q777 does not sell personal data to third parties. Personal data is disclosed to third parties only in the following circumstances and subject to the conditions described:

6.1 Licensed Game Studios & Content Providers

Game studios (including PG Soft, Pragmatic Play, Evolution Gaming, and Playtech) receive technical session data necessary to operate games within the 1q777 lobby. Studios receive only pseudonymised session identifiers — they do not receive your name, mobile number, or payment details. All studio partners operate under data processing agreements that bind them to confidentiality and security obligations compatible with RA 10173.

6.2 Payment Service Providers

Payment processors (GCash, Maya, BPI, BDO, and other supported providers) receive the minimum personal and financial data necessary to execute your requested deposit or withdrawal transaction. All payment processors engaged by 1q777 are duly licensed by the Bangko Sentral ng Pilipinas (BSP) and are subject to their own regulatory data protection obligations.

6.3 Identity Verification Partners

Third-party KYC verification service providers receive identity document images and personal data solely for the purpose of verifying that you are who you say you are and that you meet 1q777's eligibility requirements. These providers are contractually bound not to use or retain your data for any purpose beyond the specific verification service they provide.

6.4 Regulatory Authorities

1q777 is legally required to disclose personal data to PAGCOR, the AMLC, the National Privacy Commission, and other competent Philippine government authorities upon lawful demand. Such disclosures are made in compliance with applicable law and are limited to the specific data requested.

1q777 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal retention obligations. The following standard retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with NPC-approved data disposal standards. Where retention for a longer period is required by law, 1q777 will retain the data for such extended period and notify the data subject where practicable.

1q777 implements physical, technical, and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• Transport Encryption: All data transmitted between your device and 1q777's servers is encrypted using TLS 1.3 / 256-bit SSL. This applies to login sessions, cashier transactions, KYC document uploads, and all other data exchanges.
• At-Rest Encryption: Personal data stored in 1q777's databases is encrypted using AES-256 encryption at rest.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Internal staff with access to player data are subject to formal access control policies and undergo regular data privacy training as required by NPC guidelines.
• Two-Factor Authentication: 1q777 offers and encourages the use of two-factor authentication (2FA) for player accounts to add an additional layer of protection against unauthorised login.
• Penetration Testing: 1q777's platform infrastructure undergoes regular independent security penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: 1q777 maintains a documented data breach response plan consistent with NPC Circular 16-03 requirements. In the event of a personal data breach, affected players and the NPC will be notified within the prescribed timeframes.
• Vendor Security Assessments: All third-party service providers with access to 1q777 player data are subject to security assessment before onboarding and periodic review thereafter.

1q777 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help the Platform function correctly and allow 1q777 to understand how the Platform is being used. The following categories of cookies are used:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to operate and cannot be switched off. They include session authentication tokens (so you remain logged in across pages), security cookies (to detect and prevent fraudulent sessions), and cashier session cookies (to maintain your active payment session during deposit and withdrawal flows). These cookies do not store personally identifiable information beyond what is necessary for session management.

9.2 Functional Cookies

These cookies enable enhanced Platform functionality — including remembering your preferred game lobby display, language settings, and responsible gaming notification preferences. Disabling functional cookies may affect your experience but will not prevent access to core Platform features.

9.3 Analytics Cookies (Optional, Consent-Required)

Where you have provided consent, 1q777 uses analytics cookies to collect aggregated, anonymised data about how players navigate the Platform — which game categories are visited most, which features generate support queries, and where technical errors occur. This data is used solely to improve the Platform. It is not used to build individual player profiles or for advertising purposes.

You may withdraw consent to analytics cookies at any time through Account Settings or by using your browser's cookie management settings. This will not affect your account or your access to any Platform feature.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 1q777. You may exercise these rights by contacting the Data Protection Officer using the contact details in Section 14.

• Right to Access (Section 16[c], RA 10173): You have the right to request a copy of the personal data 1q777 holds about you, information on how it is being processed, and the identity of third parties with whom it has been shared.
• Right to Rectification (Section 16[d], RA 10173): You have the right to request correction of inaccurate or incomplete personal data held about you. Corrections to identity-critical data (name, date of birth) will be processed following re-submission of supporting documentation.
• Right to Erasure or Blocking (Section 16[e], RA 10173): You have the right to request deletion or blocking of personal data where processing is unlawful, where consent has been withdrawn, or where the data is no longer necessary for the declared purpose — subject to 1q777's legal retention obligations under PAGCOR and AMLA requirements, which may override erasure requests.
• Right to Object (Section 16[f], RA 10173): You have the right to object to the processing of your personal data, particularly where 1q777 relies on legitimate interests as the legal basis. You have an absolute right to object to direct marketing at any time.
• Right to Data Portability: Where technically feasible, you may request that personal data you have provided to 1q777 be delivered to you in a structured, machine-readable format.
• Right to File a Complaint with the NPC: If you believe that 1q777 has processed your personal data in violation of RA 10173, you have the right to file a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph).

The 1q777 Platform is intended exclusively for adults aged 21 years and older, as required by PAGCOR's minimum age regulations for online gaming in the Philippines. Age verification is a mandatory step in the registration and KYC process, and 1q777 will not activate a player account without confirming that the applicant meets the minimum age requirement.

In the event that 1q777 becomes aware that personal data has been inadvertently collected from an individual under 21 years of age, 1q777 will:

• Immediately suspend the associated account;
• Securely delete all personal data associated with the underage account as promptly as permitted by applicable legal obligations;
• Refund any deposited funds to the source payment method; and
• Notify PAGCOR as required by its minors protection regulations.

If you are a parent or guardian and believe that a minor in your care has accessed or registered with 1q777, please contact the Data Protection Officer immediately using the contact details in Section 14.

In the course of 1q777's operations, personal data may be transferred to, stored in, or processed by systems located outside the Philippines — specifically in connection with cloud infrastructure providers and certain international game studio partners whose technical operations are based abroad.

Any cross-border transfer of personal data by 1q777 is subject to the requirements of RA 10173 and NPC Circular 17-01. Specifically, 1q777 ensures that:

• The destination country or organisation has an adequate level of data protection, or is subject to appropriate safeguards (such as binding contractual clauses consistent with NPC-approved standards);
• The transfer is necessary for the performance of the account agreement between 1q777 and the player, for the implementation of pre-contractual measures, or for the compliance with legal obligations;
• All international service providers processing Philippine player data have entered into data processing agreements that impose data protection obligations no less stringent than those required by RA 10173.

1q777 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform features. All updates are effective from the date indicated in the "Effective" date at the top of this Policy.

Where changes are material — that is, where they meaningfully affect your rights as a data subject or the way 1q777 uses your personal data — 1q777 will provide advance notice through:

• A prominent notification displayed on the Platform homepage and within the account dashboard;
• A direct notification sent to your registered mobile number or email address at least 15 days before the change takes effect.

Your continued use of the 1q777 Platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the updated Policy, you should cease using the Platform and contact the Data Protection Officer to exercise your erasure rights where applicable.

Previous versions of this Privacy Policy are archived and available upon request from the Data Protection Officer.

1q777 has appointed a Data Protection Officer (DPO) as required by Section 21 of the Data Privacy Act of 2012 and NPC Circular 17-01. The DPO is responsible for overseeing 1q777's data protection programme and for handling data subject rights requests, privacy complaints, and regulatory correspondence.

To exercise any of your rights under Section 10 of this Policy, to submit a privacy concern, or to request a copy of any data processing agreement, please contact the 1q777 Data Protection Officer through the following channels:

• Live Chat: Available 24/7 directly on the 1q777 Platform. Request to speak with the Data Protection Officer or submit a privacy enquiry. Average initial response: under 2 minutes.
• Email: [email protected] — Please use the subject line "Data Privacy Request – [Your Account Username]" for faster routing. Response within 4 hours during standard operating hours (PHT).

All privacy correspondence is handled confidentially by the DPO and designated privacy team staff. Identity verification will be required before any personal data is disclosed or actioned on a data subject rights request.