Privacy Policy – plu777

1. Introduction

plu777 ("plu777," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses our online gaming platform at plu777.com and through the plu777 mobile application. This Privacy Policy describes how plu777 collects, uses, stores, shares, and protects your personal information when you interact with our platform.

This Privacy Policy applies to all registered players, visitors to the plu777 website, and users of the plu777 mobile application. It should be read together with our Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference into this Privacy Policy.

By registering an account with plu777 or continuing to use the plu777 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you should discontinue use of the plu777 platform and contact us to close your account.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, plu777 is the Personal Information Controller in respect of the personal data you provide when using the plu777 platform. plu777 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

plu777 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with applicable data privacy laws and this Privacy Policy. Contact details for the DPO are provided in Section 15 of this Policy.

3. Personal Data We Collect

3.1 Registration & Identity Data

When you create a plu777 account, we collect:

• Full legal name as it appears on your government-issued ID
• Date of birth (to verify you are 21 years of age or older)
• Residential address in the Philippines (e.g., Manila, Cebu, Davao, Quezon City, Makati)
• Valid email address and mobile phone number
• Username and encrypted password
• Nationality and citizenship information

3.2 Identity Verification (KYC) Data

To comply with PAGCOR regulations and anti-money laundering (AML) requirements, plu777 may collect copies of:

• Government-issued photo identification (Philippine passport, SSS ID, UMID, PhilSys National ID, or driver's licence)
• Proof of residential address (utility bill, bank statement, or barangay certificate)
• Proof of payment method ownership (e.g., screenshot of GCash or PayMaya account, bank statement from BPI, BDO, or Metrobank)
• Source of funds documentation where required by AML regulations

3.3 Financial & Transaction Data

We collect records of all financial transactions conducted through your plu777 account, including:

• Deposit and withdrawal amounts, dates, and payment methods
• GCash, PayMaya, BPI, BDO, and Metrobank account references (partial, masked)
• Bonus credits, wagering activity, and balance history
• Chargeback and dispute records

3.4 Gaming Activity Data

plu777 records all gaming activity on the platform, including game sessions, wager amounts, game outcomes, win/loss history, and session durations across all games including Dragon Gate, European Blackjack, Hip Hop Panda, Captain's Bounty, Charge Buffalo, and Treasures of Aztec.

3.5 Technical & Device Data

When you access plu777, we automatically collect:

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session timestamps and duration
• Pages visited and features used within the plu777 platform
• Referral source (how you arrived at plu777)

3.6 Communications Data

We retain records of communications between you and plu777, including live chat transcripts, support ticket correspondence, and email exchanges. This data is used for quality assurance, dispute resolution, and regulatory compliance.

4. How We Collect Your Data

plu777 collects your personal data through the following means:

• Directly from you — when you register, complete KYC verification, make deposits or withdrawals, contact support, or update your account settings.
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you access the plu777 website or mobile application.
• From third parties — including identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud prevention services, and PAGCOR regulatory databases where permitted by law.

5. How We Use Your Personal Data

plu777 uses your personal data for the following purposes:

Purpose	Description
Account Management	Creating, maintaining, and securing your plu777 account; processing login and authentication.
KYC & Age Verification	Verifying your identity and confirming you are 21 years of age or older as required by PAGCOR.
Payment Processing	Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other approved methods.
Regulatory Compliance	Meeting PAGCOR licensing obligations, AML/CTF reporting requirements, and NPC data privacy regulations.
Responsible Gaming	Monitoring gaming behaviour to identify problem gambling indicators and enforcing self-exclusion or limit settings.
Fraud Prevention	Detecting and preventing fraudulent activity, money laundering, bonus abuse, and unauthorised account access.
Customer Support	Responding to your enquiries, resolving disputes, and improving the quality of plu777 support services.
Platform Improvement	Analysing usage patterns to improve plu777 features, game offerings, and overall user experience.
Marketing	Sending promotional offers and updates about plu777 where you have provided consent. You may opt out at any time.

6. Legal Basis for Processing

plu777 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity — processing required to fulfil our obligations under the plu777 Terms & Conditions, including account management, payment processing, and game provision.
• Legal obligation — processing required to comply with PAGCOR regulations, AML/CTF laws, tax obligations, and NPC requirements.
• Legitimate interests — processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your privacy rights.
• Consent — processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Disclosure

7.1 Regulatory Authorities

plu777 is legally required to share certain player data with PAGCOR and other Philippine regulatory and law enforcement authorities upon lawful request. This includes transaction records, identity data, and gaming activity where required for AML/CTF compliance, tax reporting, or criminal investigations.

7.2 Payment Processors

To process your deposits and withdrawals, plu777 shares necessary financial data with approved payment service providers including GCash, PayMaya, BPI, BDO, and Metrobank. These providers are contractually bound to process your data only for the purpose of completing your transactions.

7.3 Identity Verification Providers

plu777 uses third-party KYC and identity verification services to confirm player identities and ages. These providers receive only the data necessary to perform verification and are prohibited from using your data for any other purpose.

7.4 Technology & Infrastructure Partners

plu777 works with technology partners for platform hosting, security monitoring, and analytics. These partners act as data processors under written agreements that restrict their use of your data to the specific services they provide to plu777.

7.5 No Sale of Personal Data

plu777 does not sell, rent, lease, or otherwise commercially transfer your personal data to any third party for their own marketing or commercial purposes. This is an absolute commitment to every plu777 player.

8. Cookies & Tracking Technologies

plu777 uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies we use are:

• Essential cookies — required for the plu777 platform to function, including session management, login authentication, and security features. These cannot be disabled.
• Analytics cookies — used to understand how players use plu777, which pages are most visited, and where technical issues occur. This data is aggregated and anonymised.
• Preference cookies — used to remember your language, display, and notification preferences on plu777.

plu777 does not use third-party advertising or retargeting cookies. You can manage or delete non-essential cookies through your browser settings at any time. Note that disabling essential cookies may affect the functionality of the plu777 platform.

9. Data Retention

plu777 retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulatory obligations. Specifically:

• Account and identity data — retained for a minimum of five (5) years following account closure, as required by PAGCOR AML regulations.
• Transaction records — retained for a minimum of five (5) years from the date of each transaction.
• Gaming activity logs — retained for three (3) years from the date of each session.
• Support communications — retained for two (2) years from the date of the last communication.
• Marketing consent records — retained until you withdraw consent, plus one (1) year thereafter for compliance purposes.

Upon expiry of the applicable retention period, plu777 will securely delete or anonymise your personal data in accordance with NPC guidelines.

10. Data Security

plu777 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and plu777 servers
• Encryption of sensitive data at rest, including financial records and identity documents
• Multi-factor authentication options for player accounts
• Regular security audits and penetration testing of the plu777 platform
• Strict access controls limiting employee access to personal data on a need-to-know basis
• Continuous monitoring for suspicious activity and potential data breaches

In the event of a personal data breach that poses a risk to your rights and freedoms, plu777 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, as required by the Data Privacy Act of 2012.

11. Your Data Privacy Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in respect of your personal data held by plu777:

• Right to be informed — you have the right to know what personal data plu777 collects about you and how it is used, as described in this Privacy Policy.
• Right of access — you may request a copy of the personal data plu777 holds about you at any time.
• Right to rectification — you may request correction of any inaccurate or incomplete personal data in your plu777 account.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to data portability — you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object — you may object to the processing of your personal data for direct marketing purposes at any time.
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint — you have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe plu777 has violated your data privacy rights.

To exercise any of these rights, please contact the plu777 Data Protection Officer using the details provided in Section 15. plu777 will respond to all verified data subject requests within thirty (30) days of receipt.

12. Children's Privacy

If you are a parent or guardian and believe that a minor has registered with plu777, please contact us immediately at the details provided in Section 15 so that we can take prompt action.

13. International Data Transfers

plu777 primarily stores and processes your personal data within the Philippines. In certain circumstances, your data may be transferred to and processed in countries outside the Philippines — for example, where plu777 uses cloud infrastructure or technology service providers with servers in other jurisdictions.

Where such transfers occur, plu777 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under Philippine law, including through contractual data processing agreements with all international service providers. plu777 will not transfer your personal data to any country that does not provide an adequate level of data protection without your explicit consent or a lawful transfer mechanism.

14. Changes to This Privacy Policy

plu777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where changes are material, plu777 will notify registered players by email to the address on file and/or through a prominent notice on the plu777 platform at least fourteen (14) days before the changes take effect. Your continued use of plu777 following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how plu777 protects your personal data.

15. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by plu777, please contact our Data Protection Officer:

plu777 aims to respond to all data privacy enquiries and subject access requests within thirty (30) calendar days. For complex requests, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it.