og777 Privacy Policy

1.1 og777 ("we," "us," or "our") is committed to protecting the privacy and personal data of every individual who interacts with the og777 platform at og777.lat. This Privacy Policy has been prepared in compliance with Republic Act No. 10173, also known as the Philippine Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines.

1.2 This Privacy Policy applies to all personal data collected through: (a) the og777 website and mobile-browser interface; (b) the account registration and KYC verification process; (c) all financial transactions processed through the platform; (d) communications between you and og777 support; and (e) your gameplay activity on the og777 platform.

1.3 By creating an og777 account, depositing funds, or using any feature of the og777 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not consent to this Privacy Policy, please do not register for or continue to use the og777 platform.

2.1 For the purposes of the Philippine Data Privacy Act of 2012, og777 acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes through the og777 platform. As PIC, og777 determines the purposes for which and the means by which personal data is processed.

2.2 og777 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with applicable data protection laws and serving as the primary point of contact for data subjects exercising their rights. Contact details for the og777 DPO are provided in Section 14 of this Policy.

3.1 og777 collects only the personal data that is necessary and proportionate to the purposes outlined in this Policy. The categories of personal data we collect are described below:

Registration and Identity Data

Collected when you create and verify your og777 account:

• Full legal name (as it appears on your government-issued ID);
• Date of birth (for age verification — you must be 21 or older);
• Email address and chosen username;
• Philippine mobile number (for SMS verification and 2FA);
• Residential address in the Philippines;
• Government-issued identification document type, number, and image (e.g., UMID, Driver's License, PhilSys ID, Passport).

Financial Transaction Data

Collected during deposits, withdrawals, and payment processing:

• GCash account number or Maya account number;
• Bank account details (BPI, BDO, Metrobank, UnionBank) where bank transfer is used;
• Transaction amounts, dates, reference numbers, and payment method identifiers;
• USDT wallet address (for cryptocurrency transactions via USDT TRC20);
• Deposit and withdrawal history.

Account Activity and Gaming Data

• Login timestamps, IP addresses, and device identifiers;
• Game session history, bet amounts, game titles played, and outcomes;
• Bonus claims, wagering progress, and promotional participation records;
• Responsible gaming tool settings (deposit limits, session timers, self-exclusion status).

Communication Data

• Records of support chat, email correspondence, and feedback submissions;
• Survey responses and voluntary feedback provided to og777.

Technical and Device Data

• Browser type, operating system, and device model;
• IP address and general geographic location (country/region level);
• Session duration, page interaction data, and performance metrics;
• Cookie identifiers (see Section 7).

4.1 og777 collects personal data through the following channels:

5.1 og777 processes personal data only for specific, legitimate purposes. The following table outlines each processing purpose and its corresponding legal basis under the Philippine Data Privacy Act:

6.1 og777 does not sell, rent, or trade your personal data to third-party marketers or data brokers. Your personal information is shared only where necessary and under controlled conditions as described below.

Service Providers (Personal Information Processors)

og777 engages third-party service providers who process personal data strictly on og777's behalf and under og777's instructions, including:

• Payment processors: GCash (G-Xchange, Inc.), Maya (PayMaya Philippines, Inc.), BancNet, and other licensed Philippine payment service providers — for transaction processing only;
• KYC and identity verification providers: Licensed identity verification service providers for document and liveness verification;
• Cloud infrastructure providers: Certified data center and cloud computing providers hosting og777 platform infrastructure, operating under strict data processing agreements;
• Game providers: PG Soft, JILI, Pragmatic Play, Hacksaw Gaming, FC Gaming, and other licensed game studios — limited game session and bet data required for game operation and audit.

Legal and Regulatory Disclosure

og777 may disclose personal data to competent Philippine government authorities, law enforcement agencies, or regulatory bodies (including PAGCOR and the AMLC) where required to do so by law, valid court order, or legal process, without prior notice to the affected Member where legally permissible.

Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of og777's assets, personal data held by og777 may be transferred to the successor entity, subject to the same privacy protections described in this Policy. Members will be notified of any such transfer in advance.

7.1 og777 uses cookies and similar browser-based technologies to operate the platform, maintain your session state, and analyze aggregate usage patterns. The types of cookies og777 uses are described below:

7.2 Managing Cookies. You may configure your browser to block or delete cookies at any time. Please note that disabling essential cookies will impair or entirely prevent your ability to log in to og777 and use platform features. Disabling preference and analytics cookies will not affect your ability to play.

7.3 og777 does not use third-party advertising cookies or behavioral tracking pixels that profile your gaming activity for advertising purposes.

8.1 og777 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal retention requirements. The following minimum retention periods apply:

• Account and KYC records: Retained for a minimum of 5 years following account closure, as required under Philippine AML regulations (AMLA and AMLC rules);
• Transaction records: Retained for a minimum of 5 years from the date of the transaction;
• Game session records: Retained for a minimum of 3 years from the date of the session, for audit and dispute resolution purposes;
• Support correspondence: Retained for 2 years from the date of last contact;
• Analytics data: Aggregated and anonymized within 12 months; individual session logs retained for up to 24 months;
• Marketing consent records: Retained for the duration of the Member's opt-in consent, plus 1 year following opt-out to demonstrate compliance.

8.2 Upon the expiry of applicable retention periods, og777 will securely delete or anonymize personal data using industry-standard data destruction procedures.

9.1 og777 implements technical and organizational security measures appropriate to the sensitivity of the personal data it processes. These measures include:

• Encryption in transit: All data transmitted between your browser and og777's servers is encrypted using TLS 1.3 (Transport Layer Security), ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit;
• Encryption at rest: Sensitive data fields — including KYC documents, payment identifiers, and authentication credentials — are encrypted at rest using AES-256 encryption;
• Password security: User passwords are stored as salted cryptographic hashes. og777 staff cannot read or retrieve your password in plain text;
• Access controls: Access to production systems containing personal data is restricted to authorized personnel on a strict need-to-know basis, with activity logging and regular access reviews;
• Two-Factor Authentication: 2FA is available to all og777 Members and is strongly recommended as an additional layer of account protection;
• Security monitoring: og777 systems are continuously monitored for unauthorized access attempts, anomalous login patterns, and data exfiltration indicators.

9.2 Data Breach Response. In the event of a personal data breach that is likely to result in serious harm to affected Members, og777 will notify the Philippine National Privacy Commission and affected individuals within 72 hours of becoming aware of the breach, in accordance with NPC Circular 16-03 (Breach Notification Requirements).

10.1 As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by og777:

10.2 To exercise any of the above rights, please submit a written request to og777's Data Protection Officer at the contact details provided in Section 14. og777 will acknowledge your request within 5 business days and respond substantively within 30 calendar days. For complex requests, og777 may extend this period by a further 30 days with notification to you.

10.3 Some rights are subject to limitations. For example, og777 cannot delete your account and transaction records during the legally mandated AML retention period, and cannot provide you with information that would compromise the security of another Member's data.

11.1 The og777 platform and all its services are strictly intended for individuals aged 21 years and above, consistent with Philippine gaming regulations. og777 does not knowingly collect personal data from individuals under 21 years of age.

11.2 If og777 becomes aware that personal data has been collected from an individual who is under 21 years of age, it will immediately close the associated account, delete or anonymize the collected personal data to the extent permitted by applicable legal retention requirements, and return any deposited funds after deducting applicable processing costs.

11.3 Parents or guardians who have reason to believe that a minor has registered with og777 should contact our support team at [email protected] immediately. We will investigate and act upon all such reports as a matter of priority.

12.1 og777's primary data processing operations are conducted within the Philippines or in jurisdictions that provide an adequate level of data protection under frameworks comparable to the Philippine DPA.

12.2 Where personal data is transferred to third-party service providers operating infrastructure outside the Philippines — such as cloud hosting providers or game technology suppliers — og777 ensures that such transfers are governed by appropriate safeguards, including:

• Standard contractual clauses aligned with NPC-approved data processing agreements;
• Binding corporate rules where applicable;
• Contractual assurance that the recipient jurisdiction provides an adequate level of personal data protection.

12.3 og777 does not transfer Filipino Member data to jurisdictions that the NPC has determined to provide inadequate data protection, without first implementing supplementary technical and legal safeguards.

13.1 og777 may update this Privacy Policy from time to time to reflect changes in applicable law, our data processing practices, or the introduction of new platform features. Material changes to this Policy will be communicated to registered Members via email to their registered address and/or through a prominent notice on the og777 platform prior to the effective date of the change.

13.2 The effective date of the current version of this Privacy Policy is displayed at the top of this page. We encourage you to review this Policy periodically. Your continued use of the og777 platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy.

13.3 If any amendment to this Privacy Policy materially reduces your rights or increases the categories of personal data we collect or share, you will be given the opportunity to withdraw consent prior to the amendment taking effect, without penalty to your account balance or pending withdrawal requests.

14.1 For all privacy-related inquiries, data subject rights requests, or concerns about og777's personal data handling practices, please contact the og777 Data Protection Officer:

14.2 If you are not satisfied with og777's response to a privacy concern, or believe your data rights under the Philippine DPA have been violated, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines: