1. Data Controller Identity
m7777 ("m7777," "we," "us," or "our") is the personal information controller responsible for the processing of your personal data collected through the m7777 platform, including the website at m7777.lat, any associated mobile applications, and all related services (collectively, the "Platform"). By registering an account or using the m7777 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
This Privacy Policy forms part of the m7777 Terms and Conditions. Capitalized terms not defined herein have the meanings ascribed to them in the m7777 Terms & Conditions.
2. Personal Data We Collect
m7777 collects the following categories of personal data:
- Identity Data: Full legal name, date of birth, nationality, government-issued ID number (e.g., PhilSys number, SSS/GSIS number, driver's license number, or passport number), and a copy of your valid Philippine government-issued ID.
- Contact Data: Email address, Philippine mobile number (Globe, Smart, or DITO), and residential address.
- Financial Data: GCash number, PayMaya account number, bank account name and number (BPI, BDO, Metrobank), transaction history, deposit and withdrawal records, and account balance history.
- Account Data: Username, encrypted password, account creation date, login history, session timestamps, and device identifiers used to access m7777.
- Gaming Data: Game history, bet records, win/loss records, game preferences, bonus usage history, and VIP tier status.
- Technical Data: IP address, browser type and version, device type and operating system, referral URL, pages visited on m7777, and time spent on the Platform.
- Communication Data: Records of your communications with m7777 customer support, including live chat transcripts and support ticket contents.
- KYC & Compliance Data: Selfie photographs, proof of address documents, source of funds declarations, and any additional verification materials submitted during the KYC process.
3. How We Collect Your Data
m7777 collects personal data through the following means:
- Direct Provision: Data you provide when creating an m7777 account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in promotions.
- Automated Collection: Data collected automatically through cookies, web beacons, and similar tracking technologies when you access and interact with the m7777 Platform.
- Payment Processors: Financial transaction data received from GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers in connection with deposits and withdrawals.
- Third-Party KYC Providers: Identity verification data from third-party KYC service providers engaged by m7777 to conduct age and identity verification in compliance with PAGCOR requirements.
- Game Providers: Gaming session data from JILI, Pragmatic Play, PG Soft, and other game providers integrated into the m7777 Platform.
4. Purpose of Processing & Legal Basis
m7777 processes your personal data for the following purposes, each supported by a lawful basis under the Philippine Data Privacy Act:
- Account Management: To create, maintain, and secure your m7777 account. Legal basis: performance of contract.
- Age & Identity Verification: To verify that you are at least 21 years of age and satisfy all eligibility requirements. Legal basis: legal obligation and legitimate interest in regulatory compliance.
- Payment Processing: To process deposits, withdrawals, and refunds through your nominated Philippine payment method. Legal basis: performance of contract.
- Gaming Services: To provide access to games, track game history, calculate winnings, and administer the VIP loyalty program. Legal basis: performance of contract.
- Anti-Money Laundering Compliance: To fulfill obligations under the Anti-Money Laundering Act (RA 9160) and related regulations, including suspicious transaction reporting to the AMLC where required. Legal basis: legal obligation.
- Responsible Gaming: To monitor gaming behavior, apply deposit limits and self-exclusion measures, and identify players who may be exhibiting problematic gambling patterns. Legal basis: legitimate interest and legal obligation under PAGCOR guidelines.
- Customer Support: To respond to your inquiries and resolve disputes. Legal basis: performance of contract and legitimate interest.
- Marketing Communications: To send you promotional offers, bonuses, and platform updates, where you have provided consent. Legal basis: consent. You may withdraw consent at any time through your account settings.
- Platform Improvement: To analyze usage patterns and improve the m7777 Platform's functionality, security, and user experience. Legal basis: legitimate interest.
- Fraud Prevention & Security: To detect and prevent fraud, account compromise, and other malicious activity on the Platform. Legal basis: legitimate interest.
5. Data Sharing & Third-Party Disclosure
m7777 does not sell your personal data. We share personal data only with the following categories of recipients, and only to the extent strictly necessary:
- Payment Service Providers: GCash (Mynt), PayMaya (PayMongo/Voyager), BPI, BDO, and Metrobank — to process your financial transactions.
- KYC & Identity Verification Partners: Third-party identity verification services engaged to conduct age verification and document authentication.
- Game Providers: JILI, Pragmatic Play, PG Soft, and other game software providers — to the extent necessary to deliver and maintain gaming services.
- IT & Hosting Providers: Cloud infrastructure and security service providers operating under data processing agreements that bind them to confidentiality and security obligations equivalent to those of m7777.
- Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine government agencies, where disclosure is required by law.
- Legal & Compliance Advisors: Legal counsel and compliance consultants, subject to professional confidentiality obligations.
Any third party that receives personal data from m7777 is required to process such data solely for the specified purpose and in accordance with applicable Philippine data protection law.
6. Data Retention
m7777 retains your personal data for as long as necessary to fulfill the purposes described in this Policy, subject to the following minimum retention periods:
- Account & Identity Data: Retained for a minimum of five (5) years following account closure, as required for AML compliance under RA 9160.
- Financial Transaction Data: Retained for a minimum of five (5) years from the date of each transaction.
- Gaming History: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
- Support Communications: Retained for two (2) years from the date of the interaction.
- Marketing Consent Records: Retained for the duration of the consent period and for two (2) years following consent withdrawal, as proof of consent management.
Upon expiry of the applicable retention period, m7777 will securely delete or anonymize your personal data.
7. Security Measures
m7777 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and the m7777 Platform is encrypted using industry-standard 256-bit SSL/TLS protocols.
- Encrypted Password Storage: Account passwords are stored as salted cryptographic hashes. m7777 never stores passwords in plain text and cannot retrieve your password — only reset it.
- Two-Factor Authentication: m7777 offers optional two-factor authentication via SMS OTP for all player accounts. We strongly recommend enabling 2FA.
- Access Controls: Access to personal data within m7777's systems is restricted on a strict need-to-know basis. Staff with access to personal data are bound by confidentiality obligations.
- Regular Security Audits: m7777's Platform undergoes periodic security assessments and penetration testing.
- Incident Response: In the event of a personal data breach that is likely to result in serious harm to data subjects, m7777 will notify the National Privacy Commission (NPC) and affected users within the timeframes prescribed under the DPA.
8. Cookies & Tracking Technologies
m7777 uses cookies and similar tracking technologies to operate, secure, and improve the Platform. The following categories of cookies are used:
- Strictly Necessary Cookies: Required for the Platform to function, including session management, authentication state, and security tokens. These cannot be disabled without impairing Platform functionality.
- Performance & Analytics Cookies: Used to collect aggregated, anonymized data about how users interact with m7777, to help us identify performance issues and improve the user experience.
- Functional Cookies: Used to remember your preferences, such as preferred language, display settings, and game filters.
- Marketing Cookies: Used to deliver relevant promotional content within the Platform where you have consented to receive marketing communications from m7777.
You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the m7777 Platform.
9. Minors & Age Verification
The m7777 Platform is strictly prohibited for persons under the age of 21. m7777 does not knowingly collect personal data from persons under 21 years of age. Age verification is conducted at registration and may be repeated at the withdrawal stage.
If m7777 discovers that personal data has been collected from a person under 21, the relevant account will be immediately suspended, all collected personal data will be deleted, and any deposited funds will be returned to the source payment method after completion of applicable verification.
Parents and guardians who believe a minor may have accessed or registered on the m7777 Platform should contact m7777 support immediately at [email protected].
10. Your Rights as a Data Subject
Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by m7777:
- Right to be Informed: The right to be informed of the fact that your personal data is being collected and processed, and the purposes thereof.
- Right of Access: The right to request a copy of the personal data m7777 holds about you and information about how it is being processed.
- Right to Rectification: The right to request correction of inaccurate or incomplete personal data in your m7777 account.
- Right to Erasure: The right to request deletion of your personal data, subject to m7777's legal retention obligations under AML regulations and PAGCOR requirements.
- Right to Object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
- Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
- Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe m7777 has not handled your personal data in accordance with the DPA.
To exercise any of the above rights, contact m7777's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." m7777 will respond within thirty (30) days of receiving a verified request.
11. Cross-Border Data Transfers
Some of m7777's service providers, including certain game software providers and cloud infrastructure partners, may process your personal data outside of the Philippines. Where such cross-border transfers occur, m7777 ensures that adequate safeguards are in place, including contractual clauses that require the recipient to protect your personal data to a standard equivalent to that required under the Philippine Data Privacy Act. m7777 will not transfer your personal data to countries that do not provide an adequate level of data protection without your explicit consent or without appropriate legal safeguards in place.
12. Changes to This Privacy Policy
m7777 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform functionality. Material changes will be communicated to registered players via in-Platform notification or to the email address registered on your m7777 account at least fourteen (14) days before the changes take effect. The current version of this Privacy Policy is always accessible at m7777.lat/privacy-policy. Continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.