🔒 Effective January 1, 2026 — Governed by RA 10173 (Philippine Data Privacy Act)
This Privacy Policy explains how xy777 collects, uses, stores, shares, and protects your personal information when you register and play on the xy777 Casino platform. We take your privacy seriously — here is exactly what that means in practice.
These six principles define how xy777 approaches data privacy. They summarize — but do not replace — the full Privacy Policy below.
xy777 does not sell, rent, or trade your personal information to any third party for their own commercial or marketing purposes. Your data is used solely to operate your account and deliver the services you signed up for.
All data transmitted between your device and the xy777 platform is protected by 256-bit SSL/TLS encryption. Sensitive stored data — including KYC documents and financial records — is encrypted at rest using industry-standard protocols.
xy777 processes all personal data in compliance with Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, as overseen by the National Privacy Commission (NPC) of the Philippines.
Registered xy777 players have the right to access, correct, object to, and request erasure of their personal data, subject to legal obligations. Requests are processed within 15 business days of receipt in writing to our Data Protection Officer.
xy777 collects only the personal data that is strictly necessary for account registration, identity verification, payment processing, regulatory compliance, and service improvement. We do not collect data for the sake of collecting it.
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, xy777 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and notify affected players without undue delay.
1.1 For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, xy777 is the Data Controller responsible for personal data collected through the xy777 Casino platform, accessible at xy777.one.
1.2 xy777 operates within the regulatory framework of the Philippine Amusement and Gaming Corporation (PAGCOR). Our data processing activities are conducted in compliance with both PAGCOR's anti-money laundering and player protection mandates, and the data privacy requirements established by the National Privacy Commission (NPC) of the Philippines.
1.3 xy777 has appointed a Data Protection Officer (DPO) as required under RA 10173. The DPO is responsible for overseeing xy777's data protection strategy, ensuring compliance with applicable data privacy laws, and serving as the primary point of contact for data subject rights requests. Contact details for the DPO are provided in Section 17.
2.1 This Privacy Policy applies to all personal data processed by xy777 in connection with:
2.2 This Policy does not apply to third-party websites, services, or platforms that may be referenced or linked to from the xy777 platform. xy777 is not responsible for the privacy practices of any third party.
3.1 xy777 collects the following categories of personal data:
4.1 xy777 collects personal data through the following mechanisms:
| Collection Method | Types of Data Collected | When It Occurs |
|---|---|---|
| Account registration form | Name, mobile, email, date of birth | At registration |
| KYC verification upload | Government ID, address, selfie | Before first withdrawal |
| Deposit & withdrawal processing | GCash number, bank details, transaction records | Each financial transaction |
| Platform usage (automatic) | Gaming records, session data, IP address, device info | During all sessions |
| Live chat & email support | Communication content, issue details | When you contact support |
| Cookies & tracking technologies | Browser data, session identifiers, preference settings | On website visit |
| Fraud & compliance monitoring | Device fingerprint, behavioral patterns | Continuously during active account |
5.1 xy777 processes personal data on the following legal bases as recognized under RA 10173 and its Implementing Rules:
6.1 xy777 uses the personal data it collects for the following specific purposes:
To create, operate, and maintain your xy777 account; to verify your identity and age; to process deposits and withdrawals; to apply bonuses and promotions; and to maintain your gameplay and transaction history.
To fulfill xy777's obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and related Philippine laws — including KYC verification, Suspicious Transaction Reporting (STR) to the Anti-Money Laundering Council (AMLC) where required, and record retention for regulatory audit purposes.
To detect and prevent duplicate account registration, bonus abuse, money laundering, unauthorized account access, and any other fraudulent or prohibited activity on the xy777 platform. Device fingerprinting and IP analysis are used for this purpose.
To monitor gaming behavior for indicators of problem gambling; to apply and enforce deposit limits, cooling-off periods, and self-exclusion arrangements; and to comply with PAGCOR's responsible gaming mandates.
To respond to your inquiries, process complaints, resolve disputes, and provide assistance via live chat and email. Support interactions are recorded and retained for quality assurance and dispute resolution purposes.
To analyze aggregated and anonymized usage patterns for the purpose of improving the xy777 platform, optimizing game performance, and developing new features. This analysis uses pseudonymized or anonymized data where possible.
To send you promotional offers, bonus announcements, and new game notifications via SMS to your registered Philippine mobile number or email, where you have provided explicit consent to receive such communications. See Section 15 for opt-out options.
7.1 xy777 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. xy777 shares personal data only in the following defined circumstances:
Transaction data is shared with GCash (G-Xchange, Inc.), Maya (Voyager Innovations, Inc.), BPI, BDO, Metrobank, Coins.ph, and relevant cryptocurrency processing services solely for the purpose of processing your deposits and withdrawals. Each processor is a regulated Philippine financial institution or BSP-licensed e-money issuer, subject to their own privacy policies and data protection obligations.
Identity documents and biometric selfies submitted for KYC verification are processed by xy777's contracted identity verification service provider. This provider operates under a data processing agreement with xy777 and is contractually prohibited from using your data for any purpose other than identity verification on xy777's behalf.
Certain aggregated, non-identifying technical data is shared with game software providers (including JILI, PG Soft, Pragmatic Play, and Habanero) for the purpose of game operation, RNG certification, and technical support. These providers do not receive personally identifiable information about individual players.
xy777 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or any other Philippine government authority where such disclosure is required by law, court order, or regulatory mandate. xy777 will notify affected Players of any such disclosure where legally permissible to do so.
Personal data may be disclosed to the Philippine National Police (PNP), National Bureau of Investigation (NBI), or relevant law enforcement agencies where xy777 is legally compelled to do so, or where xy777 has reasonable grounds to believe that a Player has engaged in criminal activity including fraud, money laundering, or underage gambling.
8.1 The xy777 platform uses cookies and similar tracking technologies (including local storage and session tokens) for the following purposes:
8.2 Non-essential cookies (analytics and preference cookies) are only placed with your consent, which is obtained via the cookie consent banner displayed on your first visit to xy777.one. You may withdraw consent and manage your cookie preferences at any time through your browser settings or the cookie management tool in the platform.
8.3 xy777 does not use third-party advertising or retargeting cookies. No data collected via cookies on the xy777 platform is shared with advertising networks.
9.1 xy777 retains personal data for the minimum period necessary to fulfill the purpose for which it was collected, subject to the following minimum retention requirements imposed by Philippine law:
| Data Category | Retention Period | Legal Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | AMLA, PAGCOR regulations |
| KYC identity documents | Duration of account + 5 years after closure | AMLA (RA 9160 as amended) |
| Financial transaction records | 5 years from date of transaction | AMLA, BIR requirements |
| Gaming session records | 3 years from date of session | PAGCOR audit requirements |
| Customer support records | 3 years from date of interaction | Dispute resolution, PAGCOR |
| Marketing consent records | Until consent is withdrawn + 1 year | RA 10173 (Data Privacy Act) |
| Security & fraud logs | 2 years from date of log | Legitimate interest (security) |
9.2 Following the expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that makes re-identification impossible. Where anonymization is used, the resulting anonymized dataset may be retained indefinitely for statistical and platform improvement purposes.
10.1 xy777 implements appropriate technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:
10.2 While xy777 takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is completely secure. Players are encouraged to use strong, unique passwords for their xy777 accounts and to enable two-factor authentication (2FA) via their Account Settings.
11.1 Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by xy777:
You have the right to request a copy of the personal data xy777 holds about you, along with information about how it is being processed.
You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Certain data (such as your registered name) may require KYC re-verification to update.
You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations under AMLA and PAGCOR regulations.
You have the right to object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where your personal circumstances justify it.
You have the right to receive a copy of personal data you have provided to xy777 in a structured, commonly used, machine-readable format, and to transmit that data to another Data Controller where technically feasible.
If you believe xy777 has processed your personal data in violation of RA 10173, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph.
11.2 To exercise any of the rights listed above, submit a written request to xy777's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." Please include your registered full name, account mobile number, and a description of the right you wish to exercise. xy777 will respond within 15 business days of receiving a complete request.
11.3 xy777 may decline a data subject rights request where fulfilling it would conflict with a mandatory legal obligation (such as AMLA record retention requirements), or where the request is manifestly unfounded or excessive. In such cases, xy777 will provide a written explanation of the reason for refusal.
12.1 Age verification is a mandatory step in the xy777 KYC process. No withdrawal will be processed until identity and age have been confirmed via a government-issued Philippine ID. Any account found to be operated by or on behalf of a person under 21 will be permanently suspended and all funds handled in accordance with PAGCOR regulatory guidance.
13.1 xy777 primarily processes personal data within the Philippines. In limited circumstances, certain service providers contracted by xy777 (including KYC verification technology providers and gaming software infrastructure providers) may process data on servers located outside the Philippines.
13.2 Where personal data is transferred outside the Philippines, xy777 ensures that appropriate safeguards are in place to provide a level of data protection equivalent to that afforded under RA 10173, including contractual data processing agreements that incorporate the NPC's standard data transfer clauses.
13.3 xy777 does not transfer personal data to countries that the NPC has determined do not provide adequate levels of data protection without first obtaining the Data Subject's explicit consent or implementing alternative safeguards as recognized by the NPC.
14.1 The xy777 platform integrates with third-party services for payment processing (GCash, Maya, banks), game delivery (JILI, PG Soft, Pragmatic Play, Habanero), identity verification, and customer support tooling. Each of these third parties operates under their own privacy policies and has their own data controller obligations under applicable law.
14.2 xy777 conducts due diligence on all third-party service providers before engagement, including review of their data privacy and security practices. All data processors contracted by xy777 are bound by Data Processing Agreements (DPAs) that set out their obligations in relation to personal data processing on xy777's behalf.
14.3 xy777 is not responsible for the privacy practices of third-party websites or services to which the xy777 platform may refer. Players who access third-party services do so at their own risk and under those services' privacy terms.
15.1 xy777 may send you promotional communications (bonus offers, new game announcements, VIP tier notifications) via SMS to your registered Philippine mobile number or by email to your registered address, where you have provided explicit consent to receive such communications during registration or subsequently via Account Settings.
15.2 You may withdraw your consent to marketing communications at any time by:
15.3 Withdrawal of marketing consent does not affect the lawfulness of processing that took place prior to withdrawal. Operational communications (account security alerts, withdrawal confirmations, KYC verification updates) are not marketing communications and will continue to be sent regardless of marketing preferences, as they are necessary for the provision of the xy777 service.
16.1 xy777 reserves the right to amend this Privacy Policy at any time. All amendments will be published on this page with a revised effective date. Where an amendment materially changes the way xy777 processes your personal data, xy777 will notify active Players via their registered email address or platform notification at least 7 days before the amendment takes effect.
16.2 Continued use of the xy777 platform following the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy. If you do not agree with any amendment, you should discontinue use of the platform and may request voluntary account closure in accordance with the xy777 Terms & Conditions.
16.3 Previous versions of this Privacy Policy are archived and available upon written request to xy777's Data Protection Officer.
17.1 For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by xy777, please contact the xy777 Data Protection Officer using the following details:
17.2 If your concern is not resolved to your satisfaction following contact with xy777's DPO, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines:
PAGCOR-regulated, RA 10173 compliant, and built for Filipino players. Over 1,000 games, GCash deposits in 30 seconds, and support in Tagalog & English — 24/7. Players 21 and above only.
Create Your xy777 Account Learn About xy777Account rules, bonus wagering requirements, withdrawal policies, prohibited conduct, and governing law for all xy777 players.
View Terms & ConditionsDeposit limits, self-exclusion tools, session alerts, 21+ enforcement, and PAGCOR responsible gaming resources for xy777 players.
View Responsible GamingCommon questions about deposits, withdrawals, KYC verification, bonuses, account security, and how xy777 protects your personal data.
View FAQ