fs777 Privacy Policy

fs777 operates as a Philippine-focused online gaming platform and is committed to protecting the privacy and personal data of every player who uses its services. We understand that when you provide personal information to fs777 — whether during account registration, identity verification, or day-to-day gameplay — you are placing trust in us to handle that information responsibly.

This Policy sets out, in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations issued by the National Privacy Commission (NPC), how fs777 acts as a personal information controller in relation to the data of its players and site visitors.

This Policy applies to all personal data collected through the fs777 website at https://fs777.club, any mobile-optimised version of the Platform, customer support communications, and any other interaction you have with fs777 as an organisation. It should be read together with the fs777 Terms and Conditions and the Responsible Gaming Policy.

In this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information, whether recorded in a material form or not, from which the identity of an individual can be reasonably and directly ascertained, or when put together with other information would directly and certainly identify an individual.
• "Sensitive Personal Information" means personal data about an individual's race, ethnic origin, marital status, age, colour, religious, philosophical or political affiliations, health, education, genetic or sexual life, or any proceeding for any offence or alleged offence — as defined under the Data Privacy Act of 2012.
• "Processing" means any operation or any set of operations performed upon personal data, including collection, recording, organisation, storage, updating, modification, retrieval, consultation, use, consolidation, blocking, erasure, or destruction of data.
• "Platform" means the fs777 website, services, games, and all associated digital interfaces.
• "Player" means any registered user of the fs777 Platform.
• "DPA 2012" means the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines.
• "NPC" means the National Privacy Commission of the Philippines.
• "DPO" means the Data Protection Officer designated by fs777 in accordance with the DPA 2012 and NPC regulations.

fs777 collects the following categories of personal data, depending on how you interact with the Platform:

fs777 does not collect Sensitive Personal Information beyond what is strictly required for legal identity verification purposes (i.e., government ID documents containing race or religious details are processed for identity verification only and are not used for any other purpose). fs777 does not collect biometric data beyond the static selfie photograph required for KYC.

fs777 collects personal data through the following means:

• Direct Collection: Information you provide voluntarily during account registration, KYC verification, deposit and withdrawal requests, customer support interactions, and responses to promotional offers.
• Automated Collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser information, session logs, and cookie data. See Section 8 (Cookies & Tracking) for more detail.
• Payment Processors: Transaction reference data shared by GCash, Maya, and other payment service providers in connection with deposit and withdrawal processing. fs777 does not receive your full GCash MPIN or bank account credentials — only the reference data required to process and reconcile transactions.
• Third-Party Identity Verification: Where identity verification is conducted with the assistance of a third-party KYC technology provider, that provider may share verification results (pass/fail status and document authenticity assessment) with fs777.
• Publicly Available Sources: In limited circumstances, fs777 may verify information you provide against publicly available records, such as government databases, as part of anti-fraud or anti-money-laundering compliance procedures.

fs777 processes your personal data only for specific, legitimate purposes. The table below maps each category of personal data to its processing purpose:

fs777 will not process your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or ensuring that a lawful basis exists for the new processing activity.

Under the DPA 2012, fs777 relies on the following lawful bases for processing personal data:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and fs777 — specifically, the Terms and Conditions you agreed to when creating your Account. This covers account management, payment processing, and game provision.
• Legal Obligation: Processing is required for fs777 to comply with applicable law, including KYC/AML obligations, age verification requirements, and regulatory reporting to PAGCOR and other competent authorities.
• Legitimate Interests: Processing is necessary for fs777's legitimate interests in platform security, fraud prevention, and responsible gaming monitoring, where these interests are not overridden by your fundamental rights.
• Consent: Processing is based on your freely given, specific, and informed consent — specifically for marketing communications and for any optional data processing activities disclosed to you at the point of data collection. You may withdraw consent at any time by updating your Account settings or contacting support.

fs777 does not sell, rent, or trade your personal data to any third party. fs777 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment Service Providers: GCash, Maya, GrabPay, BPI, BDO, InstaPay, and other payment processors receive only the data necessary to process your deposit or withdrawal transaction.
• KYC and Identity Verification Providers: Third-party providers that assist with document verification and identity authentication during the KYC process.
• Game Technology Providers: Software providers whose games are hosted on the fs777 Platform receive anonymised or pseudonymised game activity data for the purpose of providing and maintaining their game software.
• IT Infrastructure and Security Providers: Cloud hosting, cybersecurity, and technical infrastructure partners who process data on behalf of fs777 under strict contractual controls.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the NPC, and other competent Philippine authorities, where disclosure is required by law or by a valid legal process.
• Professional Advisers: Legal counsel, accountants, and auditors, subject to obligations of professional confidentiality.

The fs777 Platform uses cookies and similar tracking technologies to enable core Platform functionality, maintain your session, detect fraud, and improve Platform performance. A cookie is a small text file stored on your device when you access a website.

The categories of cookies used on the fs777 Platform are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that detect suspicious activity. These cannot be disabled.
• Functional Cookies: Remember your preferences — such as your preferred language or game category — to personalise your experience across sessions.
• Analytics Cookies: Collect anonymised data about how players navigate and use the Platform, enabling fs777 to identify and fix usability issues and optimise performance. This data cannot be used to identify you personally.
• Security and Fraud Prevention Cookies: Detect and prevent fraudulent activity, including account takeover attempts and multi-accounting.

You may configure your browser to refuse non-essential cookies. Please note that disabling certain cookies may affect the functionality of the fs777 Platform, including the ability to maintain a logged-in session. fs777 does not serve third-party advertising cookies.

fs777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS): All data transmitted between your device and the fs777 Platform is encrypted using TLS. This applies to login sessions, payment transactions, and all other data exchanges.
• Encryption at Rest: Sensitive personal data and financial data stored in fs777 databases are encrypted using industry-standard encryption algorithms.
• Access Controls: Access to personal data systems is restricted to authorised fs777 personnel on a strict need-to-know basis. All access is logged and subject to regular review.
• Two-Factor Authentication (2FA): All administrative access to systems that process player personal data requires 2FA. Players are also encouraged to enable 2FA on their own Accounts.
• Security Monitoring: fs777 employs continuous security monitoring, including intrusion detection and automated anomaly detection, to identify and respond to potential security incidents in real time.
• Employee Training: All fs777 personnel who handle personal data receive regular data privacy and security training in accordance with NPC requirements.
• Penetration Testing: The Platform undergoes regular third-party security assessments to identify and remediate vulnerabilities.

While fs777 maintains robust security practices, no digital system is entirely immune to risk. In the event of a personal data breach that is likely to result in serious harm to affected individuals, fs777 will notify the NPC within 72 hours of becoming aware of the breach, and will notify affected Players without undue delay, in accordance with the DPA 2012 Implementing Rules.

fs777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law — whichever is longer.

• Account and KYC Data: Retained for a minimum of five (5) years from the date of Account closure, in accordance with AML and PAGCOR compliance requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and its implementing guidelines.
• Gaming Activity Logs: Retained for a minimum of three (3) years to support dispute resolution, responsible gaming monitoring, and regulatory reporting.
• Support Communications: Retained for a minimum of two (2) years from the date of the last interaction, to support quality assurance and future complaint handling.
• Marketing Preference Data: Retained until you withdraw consent or update your preferences, plus a reasonable period for record-keeping purposes.
• Technical and Analytics Data: Anonymised or deleted after thirteen (13) months in accordance with standard analytics data retention practices.

Upon expiry of the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

Under the Data Privacy Act of 2012, you — as a Filipino player — have the following rights in relation to your personal data held by fs777:

• Right to Be Informed: You have the right to know what personal data fs777 holds about you, how it is being used, and with whom it has been shared. This Policy is the primary vehicle through which fs777 fulfils this obligation.
• Right of Access: You may request a copy of the personal data fs777 holds about you. Requests will be processed within thirty (30) calendar days.
• Right to Rectification: You may request that inaccurate or outdated personal data be corrected. Account details (name, mobile number, email) may be updated by contacting the fs777 support team.
• Right to Erasure or Blocking: You may request the deletion or blocking of your personal data in circumstances where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful. Please note that certain data must be retained for legal or regulatory compliance purposes and cannot be deleted on request alone.
• Right to Data Portability: You may request that fs777 provide your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Object: You may object to certain types of processing — particularly direct marketing communications. You can opt out of marketing emails and SMS messages at any time through your Account settings.
• Right to File a Complaint: If you believe that fs777 has violated your data privacy rights, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the rights listed above, please contact the fs777 Data Protection Officer using the details in Section 15. fs777 will respond to all data subject rights requests within thirty (30) calendar days, or within such other period as may be required by applicable NPC regulations.

The fs777 Platform is strictly intended for use by persons who are 21 years of age or older, consistent with Philippine law and PAGCOR responsible gaming guidelines. fs777 does not knowingly collect personal data from any person under the age of 21.

If fs777 becomes aware that personal data has been collected from a person under the age of 21 — whether through registration using a false date of birth or any other means — the relevant Account will be immediately suspended, all associated personal data will be deleted, and any funds in the Account wallet will be dealt with in accordance with applicable legal requirements.

If you are a parent or guardian and believe that your child has registered an Account on fs777 or provided personal data to the Platform, please contact the support team immediately at [email protected] so that appropriate action can be taken without delay.

Some of the third-party service providers used by fs777 — including cloud infrastructure providers and KYC technology vendors — may process or store data in jurisdictions outside the Philippines. Where personal data is transferred outside the Philippines, fs777 takes appropriate steps to ensure that the recipient country or organisation provides an adequate level of data protection.

These steps include executing data processing agreements that incorporate standard contractual clauses approved by the NPC, or ensuring that the receiving jurisdiction has been recognised as providing an equivalent level of data protection to that required under the DPA 2012. fs777 does not transfer personal data to third parties in jurisdictions that do not meet these safeguards.

fs777 reserves the right to update or revise this Privacy Policy at any time. Material changes — changes that meaningfully affect how your personal data is used or your rights as a data subject — will be communicated to you via email to your registered address or via a prominent notice on the Platform, at least fourteen (14) days before the revised Policy takes effect.

The effective date at the top of this page will be updated each time the Policy is revised. We encourage you to review this Policy periodically to stay informed about how fs777 handles your personal data. Your continued use of the Platform following the effective date of a revised Policy constitutes your acknowledgment of the updated terms.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data rights, please contact the fs777 Data Protection Officer (DPO):

If you are not satisfied with fs777's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines through official NPC channels. fs777 is registered with the NPC as a personal information controller in compliance with the DPA 2012 registration requirements.