This Privacy Policy ("Policy") describes how xy777 ("xy777," "we," "us," "our") collects, uses, stores, discloses, and protects the personal information of individuals ("Data Subjects," "Players," "you," "your") who access and use the xy777 online gaming platform at https://xy777.co.
xy777 is committed to complying with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the relevant issuances of the National Privacy Commission ("NPC"). By creating an xy777 account or using any part of the platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal information as described herein.
This Policy applies to all personal information collected through the xy777 website, mobile browser platform, customer support channels, and any other service operated by xy777. It does not apply to third-party websites or services that may be referenced from the xy777 platform.
Where xy777 processes personal information on behalf of third-party game providers or payment processors, those parties maintain their own privacy policies. xy777 selects service partners with equivalent or higher privacy standards to those maintained by xy777 itself.
For the purposes of the Philippine Data Privacy Act of 2012, xy777 acts as the Personal Information Controller ("PIC") in respect of the personal data it collects from Filipino players and platform users.
xy777 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with data privacy obligations, responding to data subject requests, and coordinating with the National Privacy Commission where required. The DPO may be contacted via the support channel detailed in Section 14 of this Policy.
xy777's Data Protection Officer is accessible to all registered players and may be contacted at any time with questions, data access requests, or privacy complaints. All DPO correspondence is treated as confidential and handled separately from general support interactions.
xy777 collects only the personal information that is necessary for the specific purposes described in this Policy. The categories of personal data collected include:
xy777 does not collect sensitive personal information as defined under the Philippine DPA — such as health records, political affiliations, religious beliefs, or biometric data — except where facial verification is specifically required for KYC purposes under applicable gaming regulations, in which case data subjects are notified and consent obtained prior to collection.
xy777 collects personal information through the following channels:
| Collection Method | Examples |
|---|---|
| Directly from you | Registration forms, KYC document uploads, deposit/withdrawal requests, support interactions |
| Automatically from your device | IP address, browser type, device identifiers, session logs, cookies |
| From payment providers | GCash, Maya, BPI, BDO, Metrobank transaction confirmation data |
| From identity verification services | KYC verification outcomes from third-party identity verification partners |
| From regulatory sources | Sanctions screening databases, PAGCOR self-exclusion registers |
xy777 processes personal information for the following specific, explicit, and legitimate purposes:
Marketing opt-out: You may withdraw consent for marketing communications at any time by contacting xy777 support or adjusting your notification preferences within your account settings. Withdrawal of marketing consent does not affect the lawfulness of prior processing or your access to platform services.
xy777 processes personal information only where a lawful basis exists under the Philippine Data Privacy Act of 2012. The applicable legal bases for xy777's processing activities are:
xy777 does not sell your personal information. xy777 does not share your personal information with unaffiliated third parties for their independent marketing purposes. Personal data is shared only in the following controlled circumstances:
xy777 engages third-party service providers who process personal data strictly on xy777's behalf and under binding data processing agreements. These include:
xy777 may disclose personal information to:
Cross-border transfers: Where xy777's service providers are located outside the Philippines, xy777 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to or exceeding the requirements of the Philippine DPA, consistent with NPC guidelines on cross-border data transfers.
xy777 retains personal information for no longer than is necessary for the purposes for which it was collected, subject to the following retention schedules:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years | AML / regulatory compliance |
| KYC documents | 5 years from account closure | AMLA and PAGCOR requirements |
| Financial transaction records | 5 years from transaction date | Philippine tax and AML law |
| Gameplay and betting history | 5 years from account closure | Regulatory audit trail |
| Support communications | 3 years from resolution | Complaint and quality management |
| Technical / session logs | 90 days from collection | Security monitoring |
| Marketing consent records | Until consent withdrawn + 1 year | Consent audit trail |
Upon expiry of the applicable retention period, personal information is securely deleted or anonymized in a manner that prevents re-identification. Self-exclusion records are retained indefinitely to prevent re-registration during active exclusion periods.
xy777 implements a multi-layered information security framework to protect personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. The technical and organizational measures maintained by xy777 include:
Despite these measures, no online platform can guarantee absolute security. You also play a role in protecting your own data — keep your xy777 login credentials confidential, enable 2FA, and report any suspected unauthorized account access to xy777 support immediately.
xy777 uses cookies and similar browser-based tracking technologies to support platform functionality, maintain login sessions, and understand how players use the platform. The categories of cookies used by xy777 are as follows:
| Cookie Type | Purpose | Required? |
|---|---|---|
| Strictly Necessary | Maintain your login session, prevent cross-site request forgery, and enable core platform functions without which the service cannot operate | Yes — cannot be disabled |
| Functional | Remember your preferences (language, game view settings, responsible gaming display options) across sessions | Recommended |
| Analytics | Aggregate, anonymized data on how players navigate the platform — used to identify usability issues and improve the experience | Optional |
| Security | Detect and prevent fraudulent activity, bot traffic, and suspicious session behavior | Yes — cannot be disabled |
You may manage non-essential cookie preferences through your browser settings. Note that disabling functional cookies may affect the performance of certain platform features. xy777 does not use cookies to serve third-party advertising or share browsing data with advertising networks.
Under the Philippine Data Privacy Act of 2012, you hold the following rights with respect to your personal information processed by xy777. These rights may be exercised by contacting the xy777 Data Protection Officer via the channels described in Section 14.
Request a copy of the personal data xy777 holds about you and information about how it is processed.
Request correction of inaccurate or incomplete personal data in your xy777 account.
Request deletion of your personal data where it is no longer necessary — subject to legal retention obligations.
Object to processing based on legitimate interests, including profiling and marketing communications.
Request suspension of processing where data accuracy is contested or the processing is unlawful.
Receive a structured, machine-readable copy of data you provided to xy777, where technically feasible.
Seek indemnity for actual damages sustained as a result of inaccurate, incomplete, or unlawful processing by xy777.
Lodge a complaint with the National Privacy Commission if you believe xy777 has violated your data privacy rights.
xy777 will respond to verified data subject requests within fifteen (15) business days of receipt. For complex requests, a thirty (30) day extension may apply, and you will be informed accordingly. Requests that cannot be actioned — for example, where a legal retention obligation prevents deletion — will be explained in writing.
To exercise your data subject rights, please contact xy777 via the support email at [email protected] or through live chat within your account. Please include your registered mobile number and a brief description of your request. xy777 may need to verify your identity before processing the request to ensure the security of your data.
The xy777 platform is strictly intended for individuals who are twenty-one (21) years of age or older, in accordance with Philippine gaming regulations. xy777 does not knowingly collect or process personal information from any person under the age of twenty-one (21).
Where xy777 becomes aware that personal information has been collected from a person under the minimum age, xy777 will immediately:
If you are a parent or guardian and believe that your child may have registered on xy777, please contact support immediately at [email protected]. The matter will be treated as a priority complaint.
xy777 reviews this Privacy Policy periodically and reserves the right to update it to reflect changes in data processing practices, applicable law, or regulatory guidance from the National Privacy Commission of the Philippines.
Where amendments are material — meaning they significantly affect how your personal data is processed or the rights available to you — xy777 will notify registered Players via the mobile number associated with their account at least fourteen (14) days before the changes take effect, unless a shorter period is required by law.
The Effective Date at the top of this Policy reflects the date of the most recent review. Continued use of the xy777 platform following the effective date of an amendment constitutes acknowledgment of the updated Policy. If you do not accept a material amendment, you may request closure of your xy777 account as described in the Terms & Conditions.
xy777 recommends bookmarking this page and reviewing it each time you receive a privacy policy update notification. The most current version of this Policy is always available at https://xy777.co/privacy-policy.
For any questions about this Privacy Policy, to exercise your data subject rights, or to raise a privacy concern or complaint, please contact xy777 through the following channels:
xy777 acknowledges all privacy complaints within three (3) business days and aims to provide a full written response within fifteen (15) business days. Complex matters involving data erasure or cross-border transfer queries may take up to thirty (30) business days, and you will be kept informed throughout.
If you are not satisfied with xy777's response to your privacy complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph. xy777 cooperates fully with all NPC investigations and will not take any adverse action against a player for exercising their right to complain to the NPC.
xy777 is committed to being a trustworthy steward of the personal information Filipino players entrust to us. Privacy is not a compliance checkbox at xy777 — it is a genuine operating standard that we hold ourselves accountable to, every day that the platform runs.