pin777 Privacy Policy

In this Privacy Policy, the following terms have the meanings set out below:

2.1 pin777 acts as the Personal Information Controller for all Personal Data collected through the pin777 Platform at pin777.one. As a PAGCOR-licensed online casino operator incorporated under Philippine law, pin777 is registered with the National Privacy Commission in compliance with NPC Circular 17-01.

2.2 pin777 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173 and this Privacy Policy. The DPO may be contacted in writing at:

2.3 Where pin777 engages third-party service providers to process Personal Data on its behalf (e.g., payment processors, game software providers, cloud hosting), those third parties act as Personal Information Processors under written data processing agreements requiring them to comply with RA 10173 and this Policy.

3.1 pin777 collects only the Personal Data that is necessary and proportionate to the purposes described in Section 6 of this Policy. The categories of Personal Data pin777 collects are set out in the table below:

3.2 pin777 does not collect Special Categories of sensitive personal information beyond what is listed above. In particular, pin777 does not collect biometric data, health information, religious beliefs, or political opinions.

3.3 pin777 does not knowingly collect Personal Data from individuals under 21 years of age. Where pin777 identifies or has reason to believe that a registered account belongs to a person under 21, the account will be suspended, the data securely deleted, and the matter reported to PAGCOR in accordance with regulatory requirements.

pin777 collects your Personal Data through the following channels:

• Direct Registration: Information you provide when creating a pin777 account, including name, date of birth, contact details, and password.
• KYC Verification Submissions: Identity documents and selfies you upload to complete verification before withdrawals are processed.
• Payment Transactions: Financial details processed when you make deposits or request withdrawals via GCash, PayMaya, BPI, BDO, or Metrobank.
• Platform Use: Technical and usage data automatically generated as you navigate and interact with the pin777 Platform, collected through server logs and session tracking.
• Cookies and Tracking Technologies: Data collected through cookies and similar tracking tools as described in Section 11 of this Policy.
• Customer Support Interactions: Information you provide when contacting pin777 support via live chat or email, including descriptions of issues and account-related queries.
• Third-Party Payment Providers: Confirmation data (transaction IDs, status updates) received from GCash, PayMaya, and banking providers when processing your transactions.
• Fraud and AML Screening: Data from third-party identity verification and anti-fraud screening tools used to fulfill PAGCOR and AML compliance obligations.

Under RA 10173 and its Implementing Rules, pin777 relies on the following lawful bases for processing your Personal Data:

pin777 processes your Personal Data only for specified, explicit, and legitimate purposes. The primary purposes are:

• Account Management: Creating and maintaining your pin777 Account, authenticating logins, and managing account settings.
• Service Delivery: Providing access to casino games, sports betting, bingo, and all other pin777 gaming services.
• Payment Processing: Processing deposits and withdrawals through GCash, PayMaya, and Philippine banking channels in Philippine Peso.
• PAGCOR Regulatory Compliance: Meeting all obligations under pin777's PAGCOR license, including player age verification, activity reporting, and responsible gaming requirements.
• KYC and AML Compliance: Verifying your identity and monitoring transactions to meet RA 9160 anti-money laundering obligations and PAGCOR KYC requirements.
• Fraud Prevention and Security: Detecting and preventing unauthorized access, bonus abuse, multi-accounting, money laundering, and other fraudulent or illegal activity on the Platform.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behaviors and to administer deposit limits, self-exclusion, and cooling-off periods as required by PAGCOR standards.
• Customer Support: Responding to your queries, resolving complaints, and investigating disputes.
• Legal Proceedings: Exercising or defending legal claims and cooperating with PAGCOR investigations and requests from competent Philippine authorities.
• Platform Improvement: Analyzing aggregated usage data to improve the pin777 Platform's performance, features, and user experience.
• Marketing Communications (with consent): Sending promotional offers, bonus notifications, and relevant gaming updates to players who have opted in.

6.1 pin777 will not process your Personal Data for any purpose incompatible with those listed above without your prior consent or without a lawful basis under RA 10173.

7.1 pin777 does not sell, rent, or trade your Personal Data to third parties for their own marketing or commercial purposes. Disclosure of your Personal Data is limited to the following categories of recipients and circumstances:

• PAGCOR: As the regulatory authority responsible for pin777's license, PAGCOR may request player data in connection with its oversight, inspection, or investigation functions. pin777 is legally required to comply with such requests.
• Philippine Law Enforcement and Courts: Where required by a valid court order, subpoena, or lawful request from Philippine law enforcement authorities, including the Anti-Money Laundering Council (AMLC).
• Payment Processors: GCash (G-Xchange Inc.), PayMaya, BDO Unibank, Bank of the Philippine Islands (BPI), and Metrobank receive only the transaction data necessary to process your deposits and withdrawals.
• Game Software Providers: Third-party game developers licensed to pin777 may receive anonymized gameplay data for game performance monitoring. Personal identifiers are not shared with game providers.
• Identity Verification Service Providers: Third-party KYC and AML screening providers receive your identity documents and data for verification purposes under written data processing agreements.
• Cloud Infrastructure Providers: pin777's Platform infrastructure is hosted on secure cloud services. These providers process data only on pin777's instruction and under data processing agreements.
• Professional Advisers: Legal counsel, auditors, and compliance consultants acting under professional confidentiality obligations where necessary for pin777's operations.

7.2 All third-party processors are contractually bound to process your data only for authorized purposes, to maintain appropriate security standards, and to comply with RA 10173.

8.1 Some of pin777's service providers — particularly cloud hosting infrastructure and certain game software providers — may process data in jurisdictions outside the Philippines.

8.2 Where Personal Data is transferred outside the Philippines, pin777 ensures that appropriate safeguards are in place in accordance with NPC Circular 16-01 and Section 21 of RA 10173. These safeguards include contractual clauses that require the overseas recipient to provide a comparable level of data protection to that afforded under Philippine law.

8.3 By creating and using a pin777 Account, you consent to the transfer of your Personal Data to overseas processors where such transfer is necessary for the delivery of pin777 services, subject to the safeguards described in this Section.

pin777 retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following retention periods apply:

9.1 Upon expiry of the applicable retention period, pin777 will securely delete or anonymize your Personal Data using industry-standard methods that render the data unrecoverable.

10.1 pin777 implements organizational and technical security measures designed to protect your Personal Data from unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• TLS 1.3 Encryption in Transit: All data transmitted between your device and pin777's servers is encrypted using Transport Layer Security 1.3 with AES-256, the same standard used by Philippine financial institutions.
• Encryption at Rest: Sensitive Personal Data, including KYC documents and financial records, is encrypted in pin777's databases using AES-256 at rest.
• Password Hashing: Account passwords are stored only as salted cryptographic hashes (bcrypt). pin777 cannot read or recover your plain-text password.
• Access Controls: Role-based access control limits staff access to Personal Data strictly to what is necessary for their function. All privileged access is logged and audited.
• Two-Factor Authentication: 2FA is available for all player accounts and is mandatory for staff accessing administrative systems.
• Vulnerability Management: pin777's systems undergo regular penetration testing and security audits by qualified third parties.
• Incident Response Plan: pin777 maintains a documented Personal Data Breach Response Plan aligned with NPC Circular 16-03 requirements.

10.2 While pin777 maintains rigorous security practices, no online system can be guaranteed to be 100% impenetrable. You are responsible for maintaining the security of your own Account credentials. Do not share your password with anyone, including persons claiming to represent pin777 support.

11.1 pin777 uses cookies and similar tracking technologies on the Platform to ensure secure operation, improve performance, and analyze usage patterns. The cookies used by pin777 fall into the following categories:

11.2 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent the Platform from functioning correctly. Disabling analytics cookies will not affect your ability to access games or process transactions.

11.3 pin777 does not deploy third-party advertising cookies or share cookie data with advertising networks. No tracking for cross-site advertising purposes occurs on the pin777 Platform.

Under RA 10173, as a Filipino data subject, you hold the following rights with respect to your Personal Data processed by pin777. These rights may be exercised by contacting pin777's Data Protection Officer at [email protected] (displayed as plain text — not a link):

• Right to Be Informed: You have the right to be informed — through this Policy — of how your Personal Data is collected and processed before or at the time of collection.
• Right of Access: You may request a copy of the Personal Data pin777 holds about you, together with information about the purposes for which it is processed and any third parties it has been shared with.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data held by pin777. Certain information (such as your registered name) may require KYC re-verification before it can be changed.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected. This right is subject to overriding legal obligations — for example, pin777 cannot delete financial records required to be retained under the AML Act.
• Right to Object: You may object at any time to processing of your Personal Data for direct marketing purposes. You may also object to processing based on legitimate interest, subject to pin777's right to demonstrate compelling legitimate grounds that override your interests.
• Right to Data Portability: You may request your Personal Data in a structured, commonly used, machine-readable format where processing is carried out by automated means and based on your consent or contract.
• Right to File a Complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data rights under RA 10173 have been violated. The NPC can be reached through the official NPC website.

13.1 In the event of a Personal Data Breach that is likely to result in serious harm to affected data subjects, pin777 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular 16-03.

13.2 Where a breach is likely to result in a real risk of serious harm to affected players — such as exposure of financial data, KYC documents, or account credentials — pin777 will notify affected players directly via their registered email address as soon as practicable, describing:

• The nature of the breach and categories of data involved
• Approximate number of players potentially affected
• The likely consequences of the breach
• The measures taken or proposed by pin777 to contain the breach
• Steps affected players should take to protect themselves

13.3 pin777 maintains a formal Personal Data Breach Response Plan that is reviewed and tested annually. All staff with access to Personal Data receive data breach awareness training as part of their onboarding and ongoing compliance obligations.

14.1 pin777 reserves the right to update this Privacy Policy from time to time to reflect changes in Philippine law, NPC guidelines, PAGCOR requirements, pin777's data practices, or the services offered on the Platform.

14.2 When material changes are made to this Privacy Policy, pin777 will provide advance notice to all registered players via email to their registered address and will display a notice on the Platform. For changes required immediately by law or regulation, the updated Policy takes effect upon publication.

14.3 The current version number and effective date are displayed at the top of this page. You are encouraged to review this Policy periodically. Your continued use of the pin777 Platform following the effective date of any update constitutes acceptance of the updated Policy.

14.4 If you have questions about this Privacy Policy, or wish to exercise any of your data rights, please contact pin777's Data Protection Officer. Email (plain text, not a link): [email protected]. Our DPO is available on Philippine business days and will respond within the timeframes set out in Section 12.