phy777 Privacy Policy

This Privacy Policy ("Policy") describes how phy777 ("we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "Player", "User") who access or use the phy777 online gaming platform at phy777.net and its associated mobile interface ("Platform").

This Policy applies to all personal data processing activities conducted by phy777 in connection with the Platform, including account registration, identity verification, deposits and withdrawals, game play, customer support interactions, and marketing communications where consented to.

This Policy should be read alongside phy777's Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions on privacy-related matters, this Policy prevails.

We may update this Policy from time to time. The current version is always published at phy777.net/privacy-policy, with the effective date and last-reviewed date displayed at the top of the document.

For the purposes of the Philippine Data Privacy Act of 2012, phy777 is the Personal Information Controller (PIC) responsible for your personal data collected through the Platform.

All privacy-related correspondence is handled within thirty (30) calendar days of receipt, in accordance with NPC guidelines.

phy777 collects the following categories of personal data. We apply the principle of data minimisation — collecting only what is genuinely necessary for the stated purpose.

phy777 does not intentionally collect sensitive personal information (as defined under RA 10173) such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where a government ID submitted for KYC incidentally contains such information. Such information is not extracted, processed separately, or used for any purpose beyond confirming identity.

phy777 collects personal data through the following channels:

• Direct Collection: Information you provide when creating an account, completing the KYC process, making deposits or withdrawal requests, contacting customer support, or responding to surveys and promotions.
• Automated Technical Collection: Data collected automatically when you visit and interact with the Platform, including via cookies, web beacons, server logs, and session tracking technologies. See Section 8 for details.
• Payment Processors: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard networks when you make deposits or withdrawals. phy777 receives only the minimum data necessary to confirm and reconcile payment transactions and does not receive or store your full card numbers or e-wallet PINs.
• Identity Verification Partners: Where phy777 uses a third-party KYC verification service, that service may process your ID documents and return a verification result to phy777. These partners are contractually bound by strict data processing agreements and Philippine data privacy obligations.
• Game Providers: Aggregated, anonymised game performance data from third-party game studios integrated into the Platform for purposes of platform analytics and responsible gaming monitoring.

phy777 uses your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your phy777 account, including processing login authentication, password resets, and account security alerts.
• Identity Verification & KYC: Verifying your identity, age (21+ requirement), and eligibility to participate in real-money gaming on the Platform as required by PAGCOR and Philippine AMLA regulations.
• Payment Processing: Facilitating deposits and withdrawal requests, matching withdrawal requests to verified payment accounts, and preventing payment fraud and unauthorised transactions.
• Regulatory Compliance: Meeting our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), the Terrorism Financing Prevention and Suppression Act, and other applicable Philippine laws.
• Responsible Gaming: Monitoring player behaviour to identify signs of problem gambling, enforcing self-exclusion and deposit limits requested by players, and complying with PAGCOR responsible gaming requirements.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, multi-accounting, bonus abuse, collusion, money laundering, and unauthorised access to player accounts.
• Customer Support: Responding to enquiries, resolving disputes, and managing complaints submitted through live chat, email, or other support channels.
• Platform Improvement: Analysing usage patterns in aggregate to improve the Platform's features, performance, game selection, and user experience for Filipino players.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates via email or SMS — only where you have explicitly opted in. You may withdraw marketing consent at any time by updating your Account Settings or by contacting support.
• Legal Proceedings: Using personal data as necessary to establish, exercise, or defend legal claims in Philippine courts or regulatory proceedings.

Under the Data Privacy Act of 2012 and its Implementing Rules, phy777 processes your personal data on the following legal bases:

phy777 does not sell, rent, or trade your personal data. We share your data only in the following circumstances and only to the minimum extent necessary:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard — to facilitate deposits and withdrawals. These entities process your payment data under their own privacy policies and applicable Philippine financial regulations.
• KYC and Identity Verification Providers: Third-party verification services contracted by phy777 to assist with document verification during the KYC process. All such providers are bound by data processing agreements aligned with RA 10173.
• Game Content Providers: Where required by technical integration, minimum session and wager data may be shared with licensed game studios to enable game delivery and fairness auditing. No personally identifiable information beyond a pseudonymous player ID is shared with game providers.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies — when required by law, regulation, court order, or legitimate regulatory request.
• Law Enforcement: Philippine law enforcement agencies where disclosure is required to investigate or prevent fraud, money laundering, terrorism financing, or other criminal activities, or where required by a valid court order.
• Professional Advisers: Lawyers, auditors, and compliance consultants acting under professional confidentiality obligations where access to personal data is necessary for their engagement.
• Business Transfers: In the event of a merger, acquisition, or sale of phy777's business assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections and advance notice to affected players.

phy777 uses the following types of cookies and similar technologies on the Platform:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including session authentication tokens, load balancing identifiers, and security cookies that prevent cross-site request forgery (CSRF) attacks. These cannot be disabled without breaking core Platform functionality.
• Performance Cookies: Used to collect anonymised data about how players interact with the Platform — such as which pages are most visited and where technical errors occur — to help phy777 improve Platform performance. These do not identify individual users.
• Functional Cookies: Used to remember your preferences, such as language settings, preferred lobby view, and responsible gaming tool settings, to provide a more personalised experience on return visits.
• Fraud Prevention Cookies: Short-lived cookies and fingerprinting signals used by our fraud detection systems to identify anomalous login patterns, multi-accounting attempts, and suspicious session behaviour.

phy777 does not use third-party advertising cookies, social media tracking pixels, or any technology that tracks your browsing activity on websites outside of phy777.net.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. Most modern browsers allow you to view, delete, and block specific cookies; please refer to your browser's help documentation for instructions.

phy777 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• Encryption in Transit: All data exchanged between your device and phy777 servers is encrypted using TLS 1.2 or higher (256-bit SSL). The Platform enforces HTTPS on all pages.
• Encryption at Rest: Sensitive personal data, including KYC documents and financial records, is stored in encrypted form using industry-standard AES-256 encryption.
• Access Controls: Access to personal data within phy777 is restricted on a strict need-to-know basis. Employees and contractors who handle personal data are subject to confidentiality obligations and receive regular data privacy training.
• Two-Factor Authentication (2FA): phy777 offers and encourages players to enable 2FA on their accounts for additional login security, protecting against unauthorised account access even if login credentials are compromised.
• Security Monitoring: phy777 operates continuous intrusion detection and anomaly monitoring on its infrastructure to detect and respond to potential security incidents promptly.
• Incident Response: In the event of a personal data breach that poses a real risk to player rights, phy777 will notify the National Privacy Commission (NPC) and affected players in accordance with NPC Circular requirements and applicable timelines.

phy777 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of individual identities.

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by phy777:

• Right to be Informed: The right to be told what personal data phy777 collects, how it is used, and who it is shared with — fulfilled by this Privacy Policy.
• Right to Access: The right to request a copy of the personal data phy777 holds about you, along with information about its source, purpose, and any third parties it has been shared with.
• Right to Correction: The right to have inaccurate or incomplete personal data corrected. Many details (email, address, phone number) can be updated directly in your Account Settings. KYC-verified details require a formal correction request to the DPO.
• Right to Erasure / Blocking: The right to request deletion or blocking of personal data where it is no longer necessary, where consent has been withdrawn, or where processing is unlawful — subject to phy777's legal retention obligations.
• Right to Object: The right to object to processing of your personal data for direct marketing, automated decision-making, or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive personal data you have provided to phy777 in a structured, machine-readable format for transfer to another controller, where technically feasible.
• Right to File a Complaint: If you believe phy777 has violated your data privacy rights, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, submit a written request to our Data Protection Officer at support@phy777.net with the subject line "DPO — Privacy Request". We will respond within thirty (30) calendar days. We may request proof of identity before processing your request to prevent unauthorised disclosure.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact phy777's Data Protection Officer through the following channels:

• Email: support@phy777.net — subject line: "DPO — Privacy Request"
• Live Chat: Available 24/7 on the phy777 Platform — use the subject tag "Privacy Inquiry" when initiating the chat.

If you are unsatisfied with phy777's response to a privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the independent government body responsible for enforcing the Data Privacy Act of 2012.

phy777 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, PAGCOR regulatory requirements, or NPC guidelines. The updated Policy will be published at phy777.net/privacy-policy with a revised effective date.

Where changes are material — such as a change in the categories of data collected, a new purpose for processing, or a new category of data recipient — phy777 will notify you by email to the address registered on your Account at least seven (7) days before the change takes effect.

Your continued use of the Platform after the effective date of any amended Policy constitutes your acknowledgement of the changes. If you do not agree with the revised Policy, you should cease using the Platform and may request account closure and data deletion in accordance with Section 11.