io777 Privacy Policy

io777 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all users, including registered players and visitors based in the Philippines. This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of personal information in connection with the io777 platform.

This policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). Where applicable, io777 also observes internationally recognized data protection principles.

This Privacy Policy should be read together with the io777 Terms & Conditions, which govern your use of the Platform. Capitalized terms not defined in this policy have the meanings given to them in the Terms & Conditions.

If you have any questions about this Privacy Policy or how io777 handles your personal data, please contact our Data Protection Officer using the details provided in Section 14.

io777 collects the following categories of personal data from players and platform users:

io777 does not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where sensitive data is collected (such as government ID details), it is handled with additional safeguards as required by the Data Privacy Act.

io777 collects personal data through the following means:

• Direct Collection: Information you provide when registering for an io777 account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, log files, and similar tracking technologies.
• Third-Party Sources: Identity verification data from KYC service providers; payment data from GCash, PayMaya, and banking partners; fraud prevention data from security service providers; and publicly available information where relevant to regulatory compliance.

io777 will always inform you at the point of collection what data is being collected and for what purpose, to the extent required by applicable law.

io777 uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your io777 account, including processing your registration, verifying your identity, and managing your account settings.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods, and to maintain accurate financial records.
• Regulatory Compliance: To comply with applicable Philippine gaming regulations, anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and other legal obligations.
• Platform Operation: To provide, maintain, and improve the io777 platform, including game delivery, customer support, and technical infrastructure.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, and other prohibited conduct.
• Responsible Gaming: To monitor gaming patterns and enforce responsible gaming tools, including deposit limits, session reminders, and self-exclusion, in accordance with our Responsible Gaming policy.
• Communications: To send you account-related notifications, transaction confirmations, promotional offers (where you have opted in), and important platform updates.
• Analytics & Improvement: To analyze platform usage patterns and improve the io777 user experience, game library, and overall service quality.

io777 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose, such as receiving marketing communications or promotional offers.
• Contractual Necessity: Where processing is necessary for the performance of the contract between you and io777, including account registration, payment processing, and game delivery.
• Legal Obligation: Where processing is necessary for io777 to comply with a legal obligation, including KYC verification, AML reporting, and regulatory record-keeping requirements.
• Legitimate Interests: Where processing is necessary for the legitimate interests of io777, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights and interests.

Where io777 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

io777 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party identity verification services used to confirm your identity and age in compliance with regulatory requirements.
• Fraud Prevention & Security Providers: Service providers that assist io777 in detecting and preventing fraudulent activity, unauthorized access, and other security threats.
• Game Software Providers: Game developers and content providers whose games are available on the io777 platform, to the extent necessary for game delivery and technical support.
• Regulatory Authorities: Philippine gaming regulators, the National Privacy Commission, law enforcement agencies, and other government authorities, where disclosure is required by law or regulatory obligation.
• Professional Advisors: Legal counsel, auditors, and other professional advisors engaged by io777, subject to professional confidentiality obligations.

All third parties with whom io777 shares personal data are required to handle that data in accordance with applicable data protection laws and io777's data protection standards.

io777 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

As a general guide, io777 applies the following retention periods:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML and regulatory record-keeping requirements.
• Financial Transaction Data: Retained for a minimum of five (5) years from the date of the transaction, in compliance with applicable financial regulations.
• Gaming History: Retained for a minimum of three (3) years from the date of the gaming session, for dispute resolution and regulatory compliance purposes.
• Communications Data: Retained for a minimum of two (2) years from the date of the communication, for quality assurance and dispute resolution purposes.
• Technical and Usage Data: Retained for up to twelve (12) months, unless a longer retention period is required for security or fraud investigation purposes.

When personal data is no longer required for the purposes for which it was collected and no legal obligation requires its continued retention, io777 will securely delete or anonymize that data.

io777 uses cookies and similar tracking technologies to enhance your experience on the Platform, remember your preferences, and analyze how the Platform is used. The following types of cookies may be used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in to your io777 account. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalized experience.
• Analytics Cookies: Used to collect aggregated, anonymized data about how players use the io777 Platform, helping us identify areas for improvement.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access, and other security threats.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the io777 Platform. Continued use of the Platform after being informed of our cookie practices constitutes your consent to the use of cookies as described in this policy.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by io777:

• Right to Be Informed: The right to be informed of how your personal data is collected, used, and processed by io777.
• Right of Access: The right to request a copy of the personal data io777 holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data io777 holds about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to io777's legal and regulatory retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on io777's legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe io777 has not handled your personal data in accordance with the Data Privacy Act.

To exercise any of these rights, please contact io777's Data Protection Officer using the details in Section 14. io777 will respond to all verified data rights requests within thirty (30) days, or such other period as required by applicable law.

io777 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the io777 Platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing of the Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response procedures for detecting, reporting, and responding to personal data breaches in accordance with NPC notification requirements.

While io777 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the security of your io777 login credentials and for notifying io777 immediately if you suspect any unauthorized access to your account.

The io777 Platform is strictly intended for persons aged 21 years and above. io777 does not knowingly collect personal data from individuals under the age of 21. If io777 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and believe that a minor has registered on the io777 Platform or provided personal data to io777, please contact our support team immediately so that appropriate action can be taken.

Some of io777's service providers and technology partners may be located outside the Philippines. Where personal data is transferred to recipients in other countries, io777 ensures that appropriate safeguards are in place to protect that data, including contractual data protection clauses consistent with the requirements of the Philippine Data Privacy Act and NPC guidelines on cross-border data transfers.

io777 will not transfer your personal data to a country that does not provide an adequate level of data protection without first implementing appropriate safeguards and, where required, obtaining your consent.

io777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, io777 will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via email or an in-platform notification.

Your continued use of the io777 Platform after any amendments to this Privacy Policy constitutes your acknowledgment of the updated policy. We encourage you to review this page periodically to stay informed about how io777 protects your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or io777's handling of your personal data, please contact our Data Protection Officer:

• Email: [email protected]
• Support Email: [email protected]
• Live Chat: Available 24/7 via your io777 account dashboard

io777 aims to respond to all data privacy inquiries within ten (10) business days. For formal data rights requests, please allow up to thirty (30) days for a full response.

If you are not satisfied with io777's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.