Privacy Policy — hh777 Casino

hh777 Casino ("hh777," "we," "us," or "our") operates the online gaming platform accessible at hh777.cam (the "Platform"). hh777 Casino takes the privacy of its players seriously and is committed to protecting the personal information of all individuals — particularly Filipino players across Metro Manila, Cebu, Davao, and the rest of the Philippines — who interact with our Platform.

This Privacy Policy ("Policy") describes how hh777 Casino collects, uses, discloses, stores, and protects personal data in connection with your use of the Platform. It also explains the rights you hold as a data subject under Republic Act 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR").

This Policy should be read together with our Terms & Conditions, which govern your overall use of the hh777 platform. In the event of any conflict between this Policy and the Terms & Conditions specifically relating to the processing of personal data, this Policy shall prevail.

In this Privacy Policy, the following terms shall have the meanings assigned to them:

• "Personal Data" — any information, whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained, or when put together with other information would directly and certainly identify a specific individual.
• "Sensitive Personal Information" — personal data about an individual's race, ethnic origin, marital status, age, color, religious, philosophical or political affiliations, health, education, genetic or sexual life, or any offense committed; information issued by government agencies (e.g., national ID, tax identification number); or specifically established by an executive order or act of Congress to be kept classified.
• "Processing" — any operation or set of operations performed upon personal data, including but not limited to collection, recording, organization, storage, updating, use, disclosure, and destruction.
• "Data Subject" — you, the natural person whose personal data is being processed.
• "Data Controller" — hh777 Casino, as the entity that controls the collection and use of personal data on the Platform.
• "Data Processor" — any natural or juridical person or entity processing personal data on behalf of hh777 Casino pursuant to a written agreement.
• "NPC" — the National Privacy Commission, the government body established under the DPA to administer and implement the provisions of the DPA and to monitor and ensure compliance of the country with international standards set for data protection.

hh777 Casino collects personal data that is necessary to provide you with our gaming services, comply with our regulatory obligations under PAGCOR, and maintain the security and integrity of the Platform. We collect data through the following means:

3.1 Data You Provide Directly

3.2 Data Collected Automatically

When you access the hh777 Platform, we automatically collect certain technical information, including:

• IP address and approximate geographic location (city/region level);
• Device type, operating system, browser type and version;
• Session data including pages visited, games accessed, and time spent on Platform;
• Transaction logs, game round IDs, wager amounts, and game outcomes;
• Cookie identifiers and similar tracking technologies (see Section 7).

3.3 Data from Third Parties

hh777 Casino may receive personal data about you from third parties in limited circumstances, including: identity verification service providers used for KYC; payment processors including GCash and Maya for transaction confirmation; and fraud detection services that help us identify suspicious account activity.

hh777 Casino uses the personal data we collect only for the purposes set out below. We apply the principle of purpose limitation — your data is not used for any purpose incompatible with those stated at the time of collection.

• Account Creation and Management: To register your hh777 account, verify your identity, process your login, and maintain your account settings and preferences.
• Gaming Services Delivery: To provide access to our games, process wagers, credit winnings, and maintain your game history and transaction records.
• Payment Processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, and other supported Philippine payment methods, and to verify that transactions originate from your registered payment accounts.
• Regulatory Compliance: To fulfill our obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act (RA 9160), the Data Privacy Act (RA 10173), and other applicable Philippine laws, including Know Your Customer (KYC) verification and suspicious transaction reporting to the AMLC.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, and other prohibited conduct described in our Terms & Conditions.
• Responsible Gaming: To monitor player behavior for indicators of problem gambling, enforce self-exclusion and deposit limit settings, and ensure compliance with the 21+ age restriction.
• Customer Support: To respond to your inquiries, resolve disputes, and improve our support processes based on interaction data.
• Marketing Communications: To send you promotional offers, bonus notifications, and updates about new games — only where you have provided consent or where a legitimate interest applies. You may opt out of marketing communications at any time.
• Platform Improvement: To analyze usage patterns, troubleshoot technical issues, and improve the performance, design, and features of hh777.cam.

Under the Philippine Data Privacy Act of 2012, hh777 Casino processes your personal data based on one or more of the following lawful criteria:

• Consent: You have given your free, specific, informed, and unambiguous consent to the processing of your personal data for marketing communications and optional platform features. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Contractual Necessity: Processing is necessary for the performance of the contract between you and hh777 Casino — specifically, to deliver gaming services, process payments, and manage your account as described in our Terms & Conditions.
• Legal Obligation: Processing is required for hh777 Casino to comply with its legal obligations, including PAGCOR regulatory requirements, AMLC reporting obligations, and NPC compliance requirements under the DPA.
• Legitimate Interests: Processing is necessary for hh777 Casino's legitimate interests, including preventing fraud, ensuring platform security, and improving our services — provided that such interests are not overridden by your rights and interests as a data subject.

hh777 Casino does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. We share personal data only in the following limited circumstances, and only to the extent necessary:

6.1 Licensed Service Providers

We share personal data with trusted third-party service providers who process data on our behalf under written data processing agreements that require them to protect your information to at least the same standard as hh777. These include: identity verification providers, payment processors (GCash, Maya, BPI, BDO), cloud hosting providers, fraud detection services, and customer support platform providers.

6.2 Regulatory and Government Bodies

We are required to share certain personal data with Philippine regulatory and government bodies, including: PAGCOR (for licensing compliance audits), the Anti-Money Laundering Council (AMLC) where transactions meet reportable thresholds under RA 9160, the National Privacy Commission (NPC) in connection with breach notifications or compliance investigations, and Philippine law enforcement authorities where legally compelled by a valid court order or lawful process.

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or substantially all of hh777 Casino's assets, personal data held by hh777 may be transferred to the acquiring entity, subject to equivalent data protection obligations. Players will be notified of any such transfer via the registered email address prior to the data being transferred and subject to new terms.

6.4 With Your Consent

We may share personal data with additional third parties where you have given explicit informed consent for a specific sharing purpose that is clearly communicated to you at the time of consent.

hh777 Casino uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device by your browser when you visit hh777.cam. We use the following types of cookies:

• Strictly Necessary Cookies: Essential to the operation of the Platform. These include session authentication cookies that keep you logged in to your hh777 account. Without these, the Platform cannot function. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, previously visited game categories, and interface customizations. Disabling these may affect Platform usability but will not prevent access.
• Analytics Cookies: Help us understand how players use the Platform — which game categories are most popular, where users encounter issues, and how navigation flows through the lobby. Analytics data is aggregated and does not identify individual users.
• Security Cookies: Support our fraud detection and bot prevention systems, including session integrity verification and device fingerprinting for account security.

You may manage cookie preferences through your browser settings. Note that disabling non-essential cookies will not affect your ability to log in to your hh777 account or place wagers. First-time visitors will be presented with a cookie consent notice on the Platform.

hh777 Casino retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. Our standard retention periods are as follows:

• Account and Identity Data: Retained for the duration of your active account, plus a minimum of 5 years after account closure, as required by PAGCOR licensing conditions and anti-money laundering regulations.
• Transaction and Gaming Records: Retained for a minimum of 5 years from the date of each transaction, in compliance with RA 9160 and PAGCOR audit requirements.
• KYC and Identity Documents: Retained for a minimum of 5 years from the date of account closure or the completion of the final transaction, whichever is later.
• Customer Support Records: Retained for 3 years from the date of the final interaction, to enable dispute resolution and quality assurance review.
• Marketing Consent Records: Retained for the duration of your marketing consent plus 1 year to evidence that communications were sent with a valid consent basis.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with hh777's data disposal procedures. Anonymized data — where all identifying information has been removed — may be retained indefinitely for statistical and analytical purposes.

As a data subject under the Philippine Data Privacy Act of 2012, you are entitled to exercise the following rights with respect to your personal data held by hh777 Casino:

To exercise any of the above rights, please contact our Data Protection Officer at support@hh777.cam with the subject line "Data Privacy Request." We will respond within 15 business days of receiving a complete request, as required by NPC regulations. In complex cases, we may request additional information to verify your identity before processing a request.

hh777 Casino implements comprehensive organizational, physical, and technical security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Our key security controls include:

• Encryption in Transit: All data transmitted between your device and hh777.cam is protected by TLS 1.2 or higher encryption. HSTS (HTTP Strict Transport Security) is enforced to prevent protocol downgrade attacks.
• Encryption at Rest: Sensitive data including identity documents, payment account details, and KYC records are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within hh777's systems is restricted to authorized personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for all administrative systems.
• Security Monitoring: hh777's security team conducts continuous monitoring of system logs, login activity, and transaction patterns to detect and respond to anomalous behavior.
• Regular Security Audits: Our platform and data handling practices are subject to periodic security audits and penetration testing by independent security professionals.
• Staff Training: All hh777 employees who handle personal data receive regular training on data privacy obligations, security best practices, and their responsibilities under the Philippine Data Privacy Act.

While hh777 Casino takes all reasonable precautions to protect your personal data, no online system is completely immune from risk. We encourage players to use strong, unique passwords for their hh777 accounts and to enable two-step verification for an additional layer of account security.

hh777 Casino is not directed at individuals under the age of 21 years. We implement age verification procedures at registration and during KYC to prevent access by minors. Parents and guardians who believe that a minor has created an account on hh777 Casino should contact our support team immediately at support@hh777.cam. We will investigate and take appropriate action, including account suspension and data deletion, as quickly as possible upon receiving such a report.

The hh777 platform may contain references to or integrations with third-party services, including game providers, payment gateways, and analytics platforms. While hh777 Casino carefully selects service providers and requires them to maintain data protection standards through contractual agreements, we are not responsible for the privacy practices of third-party entities.

When you interact with a third-party payment provider — such as GCash or Maya — your data is also subject to that provider's own privacy policy. hh777 Casino encourages you to review the privacy policies of any third-party services you use in connection with your hh777 account. hh777 is not liable for privacy practices of third parties outside our direct control.

hh777 Casino's primary data infrastructure is located within the Philippines. Where it is necessary to transfer personal data to service providers or game technology providers located outside the Philippines — for example, to internationally based game RNG certification bodies or cloud security providers — hh777 ensures that such transfers are conducted in compliance with Section 21 of the Data Privacy Act and NPC guidelines on cross-border data transfers.

Safeguards applied to international transfers include: binding contractual clauses requiring the recipient to provide a level of protection equivalent to the DPA; transfer only to countries the NPC has recognized as providing adequate data protection; or, where required, obtaining your explicit consent before any international transfer of your personal data.

hh777 Casino reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, regulatory requirements, or operational changes to the Platform. We will notify registered players of material changes to this Policy via their registered email address or through a prominent notice on hh777.cam at least 14 days before the changes take effect.

The date of the most recent revision is prominently displayed at the top of this page. Continued use of the hh777 Platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you may request account closure as described in our Terms & Conditions. We recommend reviewing this Policy periodically to stay informed about how hh777 protects your personal data.

hh777 Casino has designated a Data Protection Officer (DPO) in accordance with Section 21(c) of the Philippine Data Privacy Act. The DPO is responsible for overseeing hh777's compliance with the DPA, serving as the contact point for data subjects exercising their rights, and liaising with the National Privacy Commission.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or want to report a potential privacy concern, please contact our Data Protection Officer through the following channels:

• Email: support@hh777.cam (please use the subject line "Data Privacy – [your request type]")
• Live Chat: Available 24/7 on hh777.cam for general privacy inquiries

We will acknowledge your request within 5 business days and provide a substantive response within 15 business days. For complex requests, we may request an extension of up to 15 additional business days, in which case we will notify you of the extension and the reason for the delay.

If you are not satisfied with hh777's response to your privacy request or complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC). The NPC's contact details and online complaint form are available at the NPC's official government website. You may also refer disputes to PAGCOR through its official player complaint channels.