xz77 Privacy Policy

1. About This Privacy Policy

This Privacy Policy ("Policy") applies to xz77 ("we", "us", "our"), the operator of the online gaming platform accessible at xz77.win (the "Platform"). It governs the collection, use, storage, and disclosure of personal information belonging to registered users ("User", "you", "your") and visitors to the Platform.

By registering an account with xz77 or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should not use the xz77 Platform.

This Policy should be read alongside the xz77 Terms & Conditions. Capitalised terms not defined in this Policy carry the same meaning as in the Terms & Conditions.

2. Data Controller

xz77 is the data controller responsible for your personal information collected via the Platform. As the data controller, xz77 determines the purposes and means of processing your personal data and is accountable for ensuring that processing is conducted lawfully, fairly, and transparently.

For all data privacy matters, you may contact our Data Protection Officer at: [email protected]

3. Personal Data We Collect

xz77 collects the following categories of personal data in connection with your use of the Platform:

xz77 does not collect sensitive personal information (as defined under the DPA) beyond what is strictly necessary for KYC and regulatory compliance purposes.

4. How We Collect Your Data

xz77 collects personal data through the following means:

• Direct Submission: Information you provide when registering an account, completing KYC, contacting support, or participating in promotions.
• Automated Technologies: Data collected automatically when you access the Platform, including through cookies, web beacons, log files, and device fingerprinting.
• Third-Party Sources: Identity verification data from KYC partners, fraud screening data from payment processors, and game activity data from licensed game providers integrated into the Platform.
• Payment Providers: Transaction confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, and InstaPay when you make deposits or receive withdrawals.

5. Legal Basis for Processing

xz77 processes your personal data on the following legal bases as recognised under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions — including account management, game delivery, and payment processing.
• Legal Obligation: Processing necessary to comply with PAGCOR regulations, Anti-Money Laundering Act (AMLA) requirements, and other applicable Philippine laws.
• Legitimate Interest: Processing for fraud prevention, security monitoring, and improving Platform functionality, where these interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time.

6. How xz77 Uses Your Personal Data

xz77 uses your personal data for the following purposes:

• Creating and managing your xz77 account, including identity verification and KYC compliance.
• Verifying that you meet the minimum age requirement of 21 years under applicable Philippine regulations.
• Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels.
• Delivering casino games, live dealer tables, sports betting, bingo, and other Platform services.
• Administering bonuses, promotions, and loyalty programmes.
• Providing customer support and resolving account disputes.
• Conducting responsible gaming assessments and enforcing self-exclusion and account limits where applicable.
• Detecting, investigating, and preventing fraudulent, unauthorised, or illegal activity on the Platform.
• Complying with PAGCOR reporting requirements, AMLA obligations, and other regulatory duties.
• Sending transactional communications such as deposit confirmations, withdrawal notices, and security alerts.
• Sending marketing and promotional communications where you have opted in — you may unsubscribe at any time.

7. Sharing Your Personal Data

xz77 does not sell or rent your personal information to third parties. We share personal data only in the following limited circumstances:

7.1 Service Providers

xz77 engages third-party service providers who process personal data on our behalf, including KYC and identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), game software providers (Evolution Gaming, JILI, Pragmatic Play, PG Soft), IT infrastructure and cloud hosting providers, fraud detection and cybersecurity services, and customer support platform operators. All service providers are bound by data processing agreements that restrict their use of your data to the purposes for which it was shared.

7.2 Regulatory and Legal Disclosure

xz77 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where required by law, court order, or regulatory directive.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of substantially all assets of xz77, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

8. Cookies & Tracking Technologies

xz77 uses cookies and similar technologies to operate the Platform, remember your preferences, and gather analytical data. The following types of cookies are used:

• Strictly Necessary Cookies: Required for Platform functionality, including session management and login state. These cannot be disabled.
• Performance Cookies: Used to understand how users interact with the Platform, including page load times and error logging. Data is aggregated and anonymised.
• Functional Cookies: Store your preferences such as language settings and game lobby layout.
• Marketing Cookies: Used to deliver relevant promotions and measure campaign effectiveness. These are only activated with your consent.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair Platform functionality.

9. Data Retention

xz77 retains your personal data for as long as your account is active and for a period thereafter as required by applicable law. Specific retention periods include:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, as required under Philippine AMLA regulations.
• Financial transaction records: Retained for a minimum of five (5) years in accordance with PAGCOR and AMLC requirements.
• Gaming activity logs: Retained for two (2) years from the date of the relevant session.
• Customer support records: Retained for three (3) years from the date of the interaction.
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter as evidence of consent.

Following the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to you.

10. Security Measures

xz77 implements robust technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and xz77 servers.
• AES-256 encryption for personal and financial data stored at rest.
• Multi-factor authentication options for all user accounts.
• Real-time intrusion detection and automated threat response systems.
• Strict role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular third-party penetration testing and security audits.
• Formal data breach response procedures in compliance with NPC notification requirements.

In the event of a personal data breach affecting your rights and freedoms, xz77 will notify the National Privacy Commission within 72 hours of discovery and will inform affected users without undue delay.

11. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012 and its implementing regulations, you have the following rights with respect to your personal data held by xz77:

• Right to Be Informed: The right to know how xz77 collects, uses, and shares your personal data — as set out in this Policy.
• Right of Access: The right to request a copy of the personal data xz77 holds about you.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected.
• Right to Erasure: The right to request deletion of your personal data where retention is no longer legally required, subject to xz77's regulatory obligations.
• Right to Object: The right to object to processing based on legitimate interest, including direct marketing.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe xz77 has violated your data privacy rights.

To exercise any of the above rights, please submit a written request to: [email protected]. xz77 will respond within fifteen (15) business days of receipt of a verified request.

12. Children and Minors

The xz77 Platform is strictly intended for adults aged 21 years and above, as required by PAGCOR regulations governing online gambling in the Philippines. xz77 does not knowingly collect personal data from persons under the age of 21. If we become aware that a minor has registered on the Platform, the account will be immediately closed and all personal data associated with it will be deleted without delay.

If you believe a minor may have created an account on xz77, please notify us immediately at [email protected].

13. Cross-Border Data Transfers

Some of xz77's service providers — including game software platforms and cloud infrastructure providers — may process personal data outside the Republic of the Philippines. Where such transfers occur, xz77 ensures that adequate safeguards are in place in accordance with the DPA's requirements for cross-border data transfers, including data processing agreements incorporating NPC-approved standard contractual clauses where applicable.

14. Amendments to This Policy

xz77 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered users via email or in-Platform notification at least seven (7) days before the amendments take effect. The "Last Updated" date at the top of this Policy will reflect the most recent revision. Continued use of xz77 following the effective date of any amendment constitutes your acceptance of the revised Policy.

15. Contact & Data Protection Officer

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by xz77, please contact our Data Protection Officer:

• Email: [email protected]
• Response Time: Within 15 business days for formal data subject requests; within 48 hours for general enquiries.
• Support Hours: 24 hours a day, 7 days a week

You also have the right to file a complaint directly with the National Privacy Commission of the Philippines (NPC) if you are unsatisfied with xz77's handling of your personal data.