ma777 Privacy
Policy

01 Introduction

ma777 is committed to protecting the privacy and personal data of every player who uses our online casino and gaming platform. We understand that trust is the foundation of a great gaming experience, and that trust begins with being completely transparent about how we handle your information.

This Policy applies to all personal data collected through the ma777 website at ma777.one, our mobile platform, customer support channels, and any other services operated by ma777. It covers data collected from registered players, prospective players who browse the platform, and any other individuals who interact with ma777 in any capacity.

As a platform serving Filipino players, ma777 operates in full compliance with the Data Privacy Act of 2012 (RA 10173) and the regulations issued by the National Privacy Commission (NPC) of the Philippines. We have appointed a Data Protection Officer (DPO) who is responsible for overseeing our data protection practices and ensuring ongoing compliance.

02 Personal Data We Collect

ma777 collects personal data that is necessary to provide our gaming services, verify your identity, process transactions, and comply with our legal obligations. The categories of personal data we collect include:

2.1 Identity & Contact Information

• Full legal name as it appears on your government-issued ID
• Date of birth (to verify you are 21 years of age or older)
• Residential address (including barangay, city, province, and ZIP code)
• Email address
• Mobile number
• Nationality and country of residence

2.2 Identity Verification Documents

• Government-issued photo ID (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's license, UMID)
• Proof of address documents (e.g., utility bill, bank statement)
• Selfie or liveness verification image (for KYC purposes)
• Proof of payment method ownership where required

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records
• Payment method details (e.g., GCash mobile number, PayMaya account reference, bank account name and last digits)
• Account balance history
• Bonus and promotional activity records

2.4 Gaming Activity Data

• Game history, bet records, and wagering activity
• Session duration and login timestamps
• Responsible gaming tool usage (deposit limits, self-exclusion requests, etc.)
• Bonus and promotion participation history

2.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Unique device identifiers
• Cookie identifiers and session tokens
• Platform interaction logs and clickstream data

2.6 Communications Data

• Customer support chat transcripts and email correspondence
• Survey responses and feedback submissions
• Marketing communication preferences

03 How We Collect Your Data

ma777 collects personal data through the following channels:

• Direct Registration: When you create a ma777 account, you provide identity and contact information directly through our registration form.
• KYC Verification: When you submit identity documents to complete our Know Your Customer (KYC) process, we collect and store the information contained in those documents.
• Deposits & Withdrawals: When you make financial transactions on the ma777 platform, we collect transaction and payment method data.
• Platform Usage: As you use the ma777 platform, we automatically collect technical and gaming activity data through cookies, server logs, and similar technologies.
• Customer Support: When you contact our support team via live chat or email, we collect the information you provide in those communications.
• Third-Party Verification Services: We may receive identity verification data from third-party KYC and fraud prevention service providers who assist us in verifying your identity.
• Payment Processors: Our payment processing partners (including GCash and PayMaya integrations) may share transaction confirmation data with us to reconcile your account.

04 How We Use Your Personal Data

ma777 uses your personal data for the following purposes:

05 Legal Basis for Processing

Under the Data Privacy Act of 2012, ma777 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to provide the ma777 gaming platform, process your transactions, and manage your account.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, age verification requirements, and reporting obligations to Philippine regulatory authorities.
• Legitimate Interests: Processing is necessary for ma777's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services — provided these interests are not overridden by your rights and interests.
• Consent: For certain processing activities — such as sending marketing communications or using non-essential cookies — we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

06 Data Sharing & Disclosure

ma777 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to process your deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party identity verification and fraud prevention services that assist us in verifying your identity and detecting fraudulent activity.
• Game Content Providers: Game software providers whose games are available on the ma777 platform may receive limited gaming activity data necessary to operate their games.
• IT & Cloud Service Providers: Technology partners who provide hosting, data storage, and platform infrastructure services to ma777, subject to strict data processing agreements.
• Customer Support Platforms: Third-party customer support software providers who facilitate our live chat and ticketing systems.
• Regulatory Authorities: Philippine government agencies and regulatory bodies (including PAGCOR and the National Privacy Commission) where disclosure is required by law or regulation.
• Law Enforcement: Law enforcement agencies or courts where we are legally required to disclose personal data in connection with a legal proceeding, court order, or investigation.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of ma777's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

07 Cookies & Tracking Technologies

ma777 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the platform. The following table describes the categories of cookies we use:

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may affect the functionality of the ma777 platform. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.

08 Data Retention

ma777 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general data retention periods are as follows:

• Account Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, as required by AML regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming Activity Logs: Retained for a minimum of three (3) years from the date of each gaming session.
• Customer Support Records: Retained for three (3) years from the date of the last interaction.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent.
• Technical Logs: Retained for up to twelve (12) months for security and fraud prevention purposes.

Upon expiry of the applicable retention period, ma777 will securely delete or anonymize your personal data in accordance with our data disposal procedures.

09 Data Security

ma777 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the ma777 platform is encrypted using industry-standard SSL/TLS protocols.
• Encryption at Rest: Sensitive personal data stored in our databases is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized ma777 personnel on a strict need-to-know basis. All staff with access to personal data undergo data privacy training.
• Two-Factor Authentication: ma777 supports two-factor authentication (2FA) for player accounts to provide an additional layer of login security.
• Regular Security Audits: ma777 conducts regular security assessments and penetration testing to identify and remediate vulnerabilities in our systems.
• Incident Response Plan: ma777 maintains a documented data breach response plan. In the event of a breach affecting your personal data, we will notify you and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by NPC regulations.

10 Your Data Privacy Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by ma777:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfils that obligation.
• Right to Access: You have the right to request a copy of the personal data that ma777 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update most of your account information directly through your ma777 account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that ma777 has violated your data privacy rights.

11 Children's Privacy

The ma777 platform is strictly intended for adults aged 21 years and above, in accordance with the minimum legal age for casino-style gambling in the Philippines. ma777 does not knowingly collect personal data from individuals under the age of 21.

If ma777 discovers or is notified that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, void any associated transactions, and delete the personal data of the underage individual from our systems as promptly as possible.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to ma777, please contact us immediately at [email protected] so that we can take appropriate action.

12 International Data Transfers

ma777 primarily stores and processes personal data within secure data centers. In certain circumstances, your personal data may be transferred to, stored in, or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or game content suppliers operating in other jurisdictions.

Where such international transfers occur, ma777 ensures that appropriate safeguards are in place to protect your personal data, including:

• Entering into Data Processing Agreements with recipient organizations that incorporate standard contractual clauses approved by the National Privacy Commission.
• Transferring data only to jurisdictions that provide an adequate level of data protection as recognized by the NPC.
• Implementing additional technical and organizational safeguards where required.

By using the ma777 platform, you acknowledge and consent to the transfer of your personal data as described in this section, subject to the safeguards outlined above.

13 Third-Party Links

The ma777 platform may contain links to third-party websites or services for informational purposes. This Privacy Policy applies solely to the ma777 platform and does not cover the privacy practices of any third-party websites or services. ma777 is not responsible for the content, privacy policies, or data practices of any third-party sites.

We encourage you to review the privacy policies of any third-party websites you visit before providing any personal information to those sites.

14 Updates to This Privacy Policy

ma777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The most current version of this Policy will always be available on the ma777 platform at ma777.one/privacy-policy, with the effective date of the latest revision indicated at the top of the document.

Where changes to this Policy are material, ma777 will notify registered players via the email address associated with their account or through a prominent notice on the platform at least fourteen (14) days before the changes take effect. Your continued use of the ma777 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

15 Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the way ma777 handles your personal data, please contact our Data Protection Officer (DPO):

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC is the government body responsible for administering and implementing the Data Privacy Act of 2012.