🔒 Data Protection • RA 10173 Compliance • PAGCOR Regulated • Filipino Player Privacy
xs777 takes the privacy of every Filipino player seriously. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have over your information under Philippine law. We are committed to full compliance with Republic Act 10173, the Data Privacy Act of 2012.
xs777's data practices are governed by Republic Act 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations. All Filipino players are entitled to the full protection afforded by this law, including the right to access, correct, and erase personal data held about them.
All personal data held by xs777 is stored on secure servers protected by industry-standard encryption. Sensitive data such as payment information and identity documents are encrypted at rest and in transit using 256-bit SSL protocols — the same standard used by Philippine banks like BPI and BDO.
xs777 does not sell, rent, or trade your personal information to third parties for marketing or commercial purposes. We share your data only where required by law, by PAGCOR regulatory obligation, or with service providers who are contractually bound to protect your information to the same standard as xs777.
We believe every Filipino player has the right to understand exactly what data xs777 holds about them and why. This Policy is written in plain, accessible English — not legal jargon designed to obscure. If any section is unclear, our support team is available in English and Filipino to explain it.
As a Filipino player, you have legally enforceable rights over your personal data under RA 10173. xs777 commits to responding to all valid data subject requests — access, correction, deletion, data portability — within the timeframes prescribed by Philippine law and the National Privacy Commission (NPC).
xs777 reviews this Privacy Policy at least annually and whenever Philippine data protection law changes require it. Material changes will be communicated to registered Filipino players via SMS to their registered Philippine mobile number at least 14 days before the updated policy takes effect.
xs777 (referred to as "we," "us," or "xs777") is the data controller responsible for the personal information of all registered users of the xs777 online gaming platform at xs777.one. As data controller, xs777 determines the purposes and means by which personal data is processed in connection with the operation of the xs777 Platform.
xs777 operates under a licence issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the regulatory oversight of both PAGCOR and the National Privacy Commission (NPC) of the Philippines in matters relating to data privacy and protection.
xs777 has appointed a Data Protection Officer (DPO) in compliance with Republic Act 10173 and NPC Circular No. 16-01. Contact details for the xs777 DPO are provided in Section 13 of this Policy.
xs777 collects personal data from Filipino players through several channels: directly from you during account registration and use of our services; automatically through your use of the xs777 Platform; and from third-party service providers where necessary for legal compliance and service delivery. The categories of personal data we collect are detailed below.
xs777 processes personal data only where a lawful basis exists under Republic Act 10173 and its Implementing Rules and Regulations. The applicable legal bases for our data processing activities are summarised in the table below.
| Processing Activity | Legal Basis |
|---|---|
| Account registration and identity verification | Contract performance; Legal obligation (PAGCOR KYC requirements) |
| Age verification (21+ requirement) | Legal obligation (Philippine gambling law; PAGCOR regulations) |
| Processing deposits and withdrawals via GCash, Maya, BPI, BDO | Contract performance |
| Anti-money laundering (AML) checks and fraud prevention | Legal obligation (RA 9160, Anti-Money Laundering Act) |
| Customer support communications | Contract performance; Legitimate interest |
| Responsible gaming monitoring and tool provision | Legal obligation (PAGCOR responsible gaming requirements) |
| Sending promotional offers and xs777 news | Consent (may be withdrawn at any time) |
| Platform analytics and service improvement | Legitimate interest |
| Regulatory reporting to PAGCOR and NPC | Legal obligation |
xs777 uses your personal data for the following purposes:
We use your registration and identity data to create and manage your xs777 Account, verify your identity and age, process your GCash and Maya deposits and withdrawals, provide access to the full xs777 game library, and deliver customer support services in English and Filipino. This is the primary purpose for which xs777 collects personal data and it is essential for your use of the Platform.
As a PAGCOR-licensed online gaming operator, xs777 is subject to mandatory legal obligations that require collection and processing of certain personal data. These include Know Your Customer (KYC) identity verification, age verification to enforce the 21+ minimum age requirement under Philippine law, Anti-Money Laundering (AML) transaction monitoring under RA 9160, and regulatory reporting to PAGCOR, the Anti-Money Laundering Council (AMLC), and the NPC where required.
xs777 uses technical and device data, login records, and transaction history to detect and prevent fraudulent activity, unauthorised account access, bonus abuse, and other prohibited conduct as defined in the xs777 Terms and Conditions. This processing is in the legitimate interest of xs777 and all Filipino players who use the Platform.
xs777 uses gaming activity data and responsible gaming tool settings to monitor player behaviour for signs of problem gambling and to enforce self-imposed limits set by players through their Account settings. This processing is both a legal obligation under PAGCOR responsible gaming regulations and a core commitment of xs777 to Filipino player welfare.
Where you have provided consent, xs777 may use your contact details and gaming preferences to send you promotional offers, bonus notifications, and xs777 news via SMS to your registered Philippine mobile number. You may withdraw consent to marketing communications at any time by updating your communication preferences in your Account settings or by contacting xs777 support.
Aggregated and anonymised data derived from gaming activity and platform usage is used by xs777 to improve the Platform, optimise game recommendations, and enhance the overall experience for Filipino players. This data is processed in a form that does not identify individual players.
xs777 uses cookies and similar tracking technologies to operate the Platform, recognise returning Filipino players, maintain session security, and analyse Platform usage patterns. A summary of the cookies used by xs777 is provided below.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Session management, login authentication, security tokens | Session / 24 hours |
| Functional | Remember login preferences, language settings, responsible gaming tool states | 30 days |
| Analytics | Anonymised platform usage data, page performance, error tracking | 90 days |
| Marketing | Tracking promotion effectiveness (xs777 internal only — no third-party ad networks) | 30 days |
Essential cookies cannot be disabled as they are required for the xs777 Platform to function. You may disable functional, analytics, and marketing cookies through your browser settings, though doing so may affect some Platform features. xs777 does not use third-party advertising networks or share cookie data with external marketing platforms.
xs777 does not sell or rent personal data to third parties. We share personal data only in the following limited circumstances:
xs777 engages third-party service providers to support Platform operations — including payment processors (GCash, Maya, BPI, BDO, Metrobank), game software providers, KYC verification services, cloud hosting providers, and customer support technology platforms. All service providers are bound by data processing agreements that require them to protect your personal data to at least the same standard as xs777 and to use your data only for the specific purpose for which it was shared.
xs777 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), Philippine law enforcement agencies, or courts where required to do so by law, court order, or regulatory direction. xs777 will endeavour to notify affected players of such disclosures where legally permitted to do so.
In the event of a merger, acquisition, or sale of xs777's business assets, personal data held about Filipino players may be transferred to the acquiring entity as part of the transaction. xs777 will notify registered players of any such transfer via their registered Philippine mobile number at least 30 days before the transfer, and the acquiring entity will be required to honour the terms of this Privacy Policy.
xs777 does not transfer or disclose Filipino player personal data to overseas marketing organisations, data brokers, or third-party advertisers. Any cross-border data transfers that occur in connection with service provider relationships (e.g., cloud hosting) are governed by contractual safeguards requiring the recipient to apply data protection standards consistent with RA 10173.
xs777 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any applicable legal retention obligations. The standard retention periods applicable to xs777 data categories are as follows:
Upon expiry of the applicable retention period, xs777 will securely destroy or anonymise the personal data in accordance with NPC-approved data disposal procedures.
xs777 implements comprehensive technical and organisational security measures to protect Filipino players' personal data against unauthorised access, disclosure, alteration, destruction, or accidental loss. Key security measures in place at xs777 include:
In the event of a personal data breach affecting xs777 Filipino players, xs777 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, as required by the NPC's Circular on Personal Data Breach Management. Where the breach poses a real risk of serious harm to affected players, xs777 will also notify those players directly via their registered Philippine mobile number without undue delay.
Player responsibility: xs777's security measures are only effective when players also protect their own credentials. Never share your xs777 password, 2FA codes, or GCash PIN with anyone. xs777 staff will never ask for these details via Live Chat, SMS, or email.
Under Republic Act 10173 and its Implementing Rules and Regulations, every Filipino player registered with xs777 has the following enforceable rights over their personal data. xs777 will respond to all valid data subject requests within thirty (30) days of receipt, in accordance with NPC guidelines.
Request a copy of the personal data xs777 holds about you, the purposes for which it is processed, and the recipients with whom it has been shared.
Request correction of any inaccurate, incomplete, or outdated personal data held about you on the xs777 Platform.
Request deletion of your personal data where it is no longer necessary for its original purpose, subject to xs777's legal retention obligations under PAGCOR and AML regulations.
Request your personal data in a structured, machine-readable format for transfer to another service provider, where technically feasible.
Object to the processing of your personal data for marketing purposes or for processing based on legitimate interest. This right does not apply to processing required by law.
Lodge a complaint with the xs777 Data Protection Officer or directly with the National Privacy Commission (NPC) if you believe your data rights have been violated.
To exercise any of these rights, contact the xs777 Data Protection Officer via the details in Section 13. xs777 may request proof of identity before processing a data rights request to prevent unauthorised disclosure of another person's data.
xs777 does not knowingly collect or process personal data of persons under 21 years of age. The minimum age for access to xs777 is strictly 21 years, as required by Philippine law and PAGCOR regulations. Age verification is performed at registration using date of birth information and KYC identity documents.
If xs777 determines that personal data has been collected from a person under 21 years of age, that data will be immediately and securely deleted, the associated Account will be closed, and the matter will be reported to PAGCOR as required by our licence conditions. Any funds deposited by an underage person will be frozen pending investigation.
Parents and guardians are encouraged to use device parental controls and ensure that Philippine mobile numbers registered to minors are not used to access xs777 or any other online gaming platform. If you are aware that a minor has accessed xs777, contact our support team immediately.
xs777's primary data processing infrastructure is located within the Philippines. Some service providers engaged by xs777 — including cloud computing providers and game software suppliers — may process data in data centres located outside the Philippines.
Where personal data is transferred outside the Philippines, xs777 ensures that appropriate safeguards are in place to protect the data to a standard consistent with RA 10173. These safeguards include contractual clauses requiring the overseas recipient to provide a level of protection at least equivalent to that required by Philippine law, and — where available — reliance on NPC-approved data transfer mechanisms.
xs777 maintains a register of all cross-border data transfers and the safeguards applicable to each, which is available for review by the NPC upon request.
xs777 reserves the right to update this Privacy Policy at any time to reflect changes in Philippine law, NPC guidance, PAGCOR regulatory requirements, or xs777's operational practices. The "Last Reviewed" date at the top of this Policy will be updated whenever changes are made.
For material changes — those that significantly affect your rights or how xs777 uses your personal data — xs777 will provide at least fourteen (14) days' advance notice via SMS to your registered Philippine mobile number before the updated Policy takes effect. Continuing to use the xs777 Platform after the effective date of an updated Policy constitutes your acceptance of the changes.
We encourage Filipino players to review this Privacy Policy periodically. The most current version will always be accessible at xs777.one/privacy-policy.
xs777 has appointed a Data Protection Officer (DPO) in accordance with the requirements of RA 10173 and NPC Circular No. 16-01. The xs777 DPO is responsible for overseeing compliance with this Privacy Policy and Philippine data protection law, and is the primary point of contact for Filipino players wishing to exercise their data rights.
If you have a complaint, concern, or query regarding xs777's handling of your personal data, you are encouraged to first contact the xs777 DPO directly. xs777 commits to acknowledging all DPO communications within two (2) business days and providing a substantive response within thirty (30) days.
If you are not satisfied with xs777's response to your data privacy complaint, you have the right to refer the matter to the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing RA 10173.
For any privacy-related questions, data subject requests, or concerns about xs777's data practices, please contact us through the following channels:
xs777's DPO is available to assist Filipino players with data access requests, corrections, deletion requests, and any other matters related to personal data rights under RA 10173. All communications are handled confidentially and in the player's preferred language (English or Filipino).
Play at a PAGCOR-regulated Philippine casino that takes your data as seriously as your winnings. Create your xs777 account today. Must be 21 or older.
21+ PAGCOR Regulated • RA 10173 Compliant • GCash & Maya Accepted • Play Responsibly