tl777 Privacy Policy

1. Introduction

tl777 ("we", "us", "our") operates the online gaming platform accessible at tl777.app (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who interact with the tl777 Platform, including registered Players, prospective Players, and visitors.

This Privacy Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and applicable PAGCOR regulatory requirements governing online gaming operators in the Philippines. It describes how tl777 collects, processes, stores, discloses, and protects personal data in connection with the Platform and our services.

By registering an account on tl777 or continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree, please cease using the Platform and contact our support team to close your account.

2. Data Controller

The data controller responsible for your personal data collected through the tl777 Platform is the tl777 operating entity, operating under PAGCOR authorization within the Republic of the Philippines.

For all privacy-related inquiries, including data access requests and complaints, you may contact our designated Data Protection Officer (DPO) as described in Section 14 of this Policy.

3. Information We Collect

tl777 collects personal data through several channels: account registration, KYC verification, Platform usage, payment transactions, customer support interactions, and technical data collected automatically during your use of the Platform. The categories of data we collect include:

3.1 Account and Identity Information

• Full legal name as it appears on a government-issued Philippine identification document
• Date of birth (to verify the 21-year minimum age requirement under PAGCOR regulations)
• Philippine residential address
• Email address
• Philippine mobile number
• Username and encrypted password

3.2 KYC Verification Documents

• Government-issued Philippine photo identification (e.g., PhilSys National ID, passport, driver's license, UMID, SSS ID, PRC ID)
• Proof of address documents where required for enhanced due diligence
• Selfie or live verification image as required by our KYC provider

3.3 Financial and Transaction Data

• GCash account number or Maya/PayMaya account details used for deposits and withdrawals
• Bank account details (BPI, BDO, Metrobank, or other Philippine bank accounts) where used for transactions
• Complete deposit, withdrawal, and wager transaction history
• Wallet balance history

3.4 Gameplay and Behavioural Data

• Game session history, including game type, stake, result, and duration
• Bonus usage and wagering progression records
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)
• Customer support interaction records

3.5 Technical and Device Data

• IP address and geolocation data (city/region level)
• Device type, operating system, and browser type
• Session timestamps and login event logs
• Cookie identifiers and analytics data (see Section 9)

4. How We Use Your Data

tl777 processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your tl777 Account, including authentication and security verification.
• Age Verification & KYC: Verifying that you meet the minimum age requirement of 21 years and confirming your identity in compliance with PAGCOR and AML regulations.
• Payment Processing: Processing deposits and withdrawals through your nominated Philippine payment method and maintaining accurate transaction records.
• Gameplay Delivery: Enabling access to tl777 games, maintaining game session integrity, and resolving any disputes arising from gameplay outcomes.
• Regulatory Compliance: Fulfilling tl777's obligations under PAGCOR authorization conditions, the Anti-Money Laundering Act (RA 9160), and other applicable Philippine laws.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling indicators and administering responsible gaming tools including deposit limits and self-exclusion.
• Customer Support: Responding to enquiries, complaints, and support requests submitted through our 24/7 live chat or email channels.
• Platform Improvement: Analyzing aggregated usage data to improve Platform performance, game selection, and user experience.
• Promotions and Communications: Notifying you of bonuses, promotions, and platform updates where you have provided consent or where communication is necessary for account administration.
• Security and Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, unauthorized account access, and other prohibited conduct.

5. Legal Basis for Processing

tl777 processes your personal data on the following legal bases as prescribed under the Data Privacy Act of 2012 and its IRR:

• Contractual Necessity: Processing necessary for the performance of the contract between you and tl777 (the Terms & Conditions governing your Account), including account creation, payment processing, and gameplay delivery.
• Legal Obligation: Processing required to comply with tl777's obligations under Philippine law, including PAGCOR regulatory requirements, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable legislation.
• Legitimate Interest: Processing for fraud prevention, Platform security, and aggregate analytics where these interests are not overridden by your data subject rights.
• Consent: Processing for non-essential marketing communications and non-essential cookies, where you have provided explicit, informed consent that you may withdraw at any time.

6. Disclosure to Third Parties

tl777 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of third parties only to the extent necessary for the purposes described in this Policy:

• KYC and Identity Verification Providers: Third-party service providers contracted to perform identity verification, document authentication, and age verification as part of our PAGCOR-mandated KYC process.
• Payment Processors: GCash (GXchange Inc.), Maya (Voyager Innovations), and other Philippine payment service providers necessary to process your deposits and withdrawals.
• Game Content Providers: Licensed game software providers (e.g., JILI, PG Soft, Pragmatic Play) who may receive session identifiers necessary to deliver game content. These providers do not receive your full identity or financial data.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities when disclosure is required by law, court order, or regulatory obligation.
• IT and Security Service Providers: Cloud hosting, cybersecurity, and platform infrastructure providers operating under data processing agreements that restrict their use of your data to the purposes for which it was shared.
• Professional Advisors: Legal, accounting, and auditing firms where disclosure is necessary in connection with their professional services to tl777, under obligations of confidentiality.

All third-party service providers engaged by tl777 that process personal data on our behalf are required to do so only in accordance with our instructions and applicable data protection law.

7. Data Retention

tl777 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention periods:

• Account and KYC Data: Retained for a minimum of five (5) years following Account closure, in compliance with PAGCOR AML record-keeping requirements and Republic Act No. 9160.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by PAGCOR regulations and applicable tax laws.
• Gameplay Logs: Retained for a minimum of three (3) years to support dispute resolution and regulatory audit requirements.
• Customer Support Records: Retained for two (2) years from the date of the last interaction.
• Marketing Consent Records: Retained for the duration of consent plus two (2) years to evidence compliance.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with tl777's data disposal procedures.

8. Data Security

tl777 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and tl777's servers
• Encryption of sensitive data fields (including passwords and payment identifiers) at rest using AES-256 or equivalent standards
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular security audits, penetration testing, and vulnerability assessments
• Incident response procedures for detecting and managing potential data breaches in accordance with NPC notification requirements under Section 20 of the DPA

In the event of a personal data breach that is likely to result in significant harm to affected data subjects, tl777 will notify the National Privacy Commission and affected individuals within the timeframes required under Philippine law.

9. Cookies & Tracking Technologies

tl777 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Required for basic Platform functionality including session management, authentication, and security. These cannot be disabled without impairing Platform operation.
• Performance Cookies: Collect aggregated, anonymized data about how visitors use the Platform to help us improve performance and identify technical issues.
• Analytics Cookies: Used with your consent to analyze gameplay patterns and user journeys in aggregate, informing Platform development and game curation decisions.
• Preference Cookies: Store your Platform preferences (e.g., language, display settings) to improve your experience on return visits.

Non-essential cookies are only deployed with your prior consent. You may withdraw consent and manage cookie preferences through your browser settings at any time. Note that disabling certain cookies may affect Platform functionality.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by tl777:

• Right to Be Informed: You have the right to be notified of the purposes for which your personal data is collected and processed — which this Policy fulfils.
• Right of Access: You may request a copy of the personal data tl777 holds about you, together with information about how it is being used.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data tl777 holds about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to tl777's legal retention obligations under PAGCOR and AML regulations.
• Right to Object: You may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest where your specific circumstances justify it.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format where technically feasible.
• Right to Lodge a Complaint: If you believe tl777 has not handled your personal data in accordance with the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph).

To exercise any of these rights, please contact the tl777 Data Protection Officer as described in Section 14. We will respond to verified requests within the timeframes prescribed by the NPC — generally within 15 business days for straightforward requests.

11. Children's Privacy

21+ The tl777 Platform is strictly intended for individuals aged 21 years and above. tl777 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an individual under 21 without parental or guardian consent, we will take immediate steps to delete such data and close the associated Account.

If you believe a person under 21 has registered an Account on tl777, please contact our support team or DPO immediately so that appropriate action can be taken.

12. Cross-Border Data Transfers

tl777 primarily processes and stores personal data within the Philippines. Where it is necessary to transfer personal data outside the Philippines — for example, to international game content providers or cloud infrastructure services — tl777 ensures that such transfers comply with Section 21 of the Data Privacy Act and NPC guidelines, including:

• Transfers to countries providing an adequate level of data protection as determined by the NPC, or
• Transfers governed by appropriate contractual safeguards, including standard contractual clauses approved by the NPC, binding corporate rules, or other legally recognized transfer mechanisms.

13. Amendments to This Policy

tl777 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered Players via the Platform or by email to the registered address on file. The effective date of the current version is displayed at the top of this page.

Your continued use of the tl777 Platform following the effective date of any amendment constitutes acknowledgment of the updated Policy. If you do not agree to the amended Policy, you should cease using the Platform and may request Account closure in accordance with the Terms & Conditions.

14. Contact & Data Protection Officer

For all privacy-related requests, concerns, or complaints — including data access requests, rectification requests, erasure requests, and objections to processing — please contact tl777's designated Data Protection Officer:

• Email: [email protected] (subject line: "Data Privacy Request")
• Live Chat: 24/7 support via the tl777 Platform (request escalation to DPO)

We will acknowledge your request within 3 business days and provide a full response within the timeframe prescribed by the National Privacy Commission, generally 15 business days for standard requests. Complex or high-volume requests may require additional time, in which case we will notify you of the extended timeline.

If you are not satisfied with tl777's handling of your privacy concern, you may lodge a formal complaint with the National Privacy Commission of the Philippines.