Privacy Policy – How fb7772 Collects, Uses, and Protects Your Personal Data

1. Identity of the Data Controller

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and all implementing rules issued by the National Privacy Commission ("NPC"), the data controller responsible for the personal data processed through the fb7772 Platform is:

fb7772
Operating under PAGCOR license authority
Platform: fb7772.cam
Data Protection Officer contact: [email protected]

fb7772 is committed to full compliance with RA 10173, its Implementing Rules and Regulations (IRR), and all relevant NPC issuances. Where our PAGCOR licensing obligations impose additional data processing requirements — such as AMLA reporting and KYC record-keeping — those requirements take precedence as required by law.

2. Personal Data We Collect

2.1 Registration and Identity Data

When you create a Player Account with fb7772, we collect:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (for age verification — 21+ requirement)
• Philippine mobile number
• Email address
• Chosen username
• Hashed account password (never stored in plain text)

2.2 Know Your Customer (KYC) Data

Before we process any withdrawal, PAGCOR and AMLA regulations require us to complete identity verification. For this purpose, we may collect:

• Copy of a valid government-issued photo ID (passport, driver's licence, Unified Multi-Purpose ID, PhilSys National ID, or equivalent)
• Proof of address (utility bill, bank statement, or official correspondence dated within 90 days)
• Selfie or liveness-verification image taken at the time of KYC submission
• Source-of-funds documentation for large or unusual transaction volumes, as required under AMLA compliance thresholds

2.3 Financial Transaction Data

We record all financial transactions associated with your account, including:

• Deposit and withdrawal amounts, dates, times, and status
• GCash wallet reference numbers and PayMaya transaction IDs
• Bank transfer references (BPI, BDO, Metrobank, and others)
• Running account Balance history

We do not store full bank account numbers or full GCash wallet credentials. Payment tokenisation is handled by our regulated payment processor partners.

2.4 Gameplay and Betting Data

We log all game sessions, bet placements, game results, bet amounts, and game type (live casino, slots, bingo, sports betting) associated with your Player Account. This data is used for account statement generation, dispute resolution, responsible gaming monitoring, and regulatory reporting to PAGCOR.

2.5 Device and Technical Data

• IP address at login and during session
• Browser type, version, and language settings
• Device type and operating system
• Session start and end timestamps
• In-game event logs for fraud detection and dispute resolution

2.6 Communications Data

If you contact fb7772 customer support via live chat or email, we retain records of those communications, including the content of messages, timestamps, agent notes, and any attachments submitted by you. These records are kept to resolve disputes, improve service quality, and comply with PAGCOR audit requirements.

3. How We Collect Your Data

3.1 Directly From You

The majority of personal data fb7772 holds about you is provided by you directly during registration, KYC verification, Cashier transactions, or when you contact customer support.

3.2 Automatically During Use

When you access the Platform, our servers automatically log technical data including your IP address, device identifiers, and session events. This data is collected via our web application and is used for security monitoring, fraud detection, and compliance logging.

3.3 Cookies and Similar Technologies

We use cookies and similar tracking technologies as described in Section 7 of this Policy. You can manage non-essential cookie preferences through your browser settings, though disabling certain cookies may affect the functionality of the Platform.

3.4 Third-Party Verification Providers

We work with PAGCOR-approved identity verification and fraud detection providers who may supply additional data points (such as device reputation scores and ID document authenticity checks) as part of the KYC process. These providers act as data processors under contract with fb7772 and do not independently control your personal data.

4. How We Use Your Personal Data

5. Legal Basis for Processing

5.1 Contract Performance

Most data processing on fb7772 is necessary to perform the contract between fb7772 and you (as set out in the Terms & Conditions), including registering your account, executing financial transactions, and providing access to games and betting markets.

5.2 Legal Obligation

fb7772 is required by Philippine law to process certain data — including KYC identity documents, AMLA transaction reports, and PAGCOR player records. This processing is non-negotiable; we cannot provide you with the Platform service if you decline to provide legally required information.

5.3 Legitimate Interest

We process some data on the basis of fb7772's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and dispute resolution. We conduct a balancing test before relying on this basis to ensure our interests do not override your privacy rights.

5.4 Consent

Where we process data for purposes not covered above — such as sending promotional SMS or email marketing — we will obtain your separate, explicit, and freely given consent. You may withdraw consent for marketing communications at any time by updating your notification preferences in Account Settings or by contacting our Data Protection Officer.

6. Data Sharing and Disclosure

6.1 Regulatory Authorities

We are legally required to share certain data with PAGCOR as part of our licensing obligations, and with the Anti-Money Laundering Council (AMLC) and other competent Philippine government authorities where required by law.

6.2 Game Providers and Platform Partners

To deliver live dealer games, slots, sports markets, and other content, we share account session tokens and bet transaction data with licensed game providers (such as Evolution Gaming, JILI, Pragmatic Play, and others). These providers act as data processors under contractual data processing agreements that require them to protect your data and use it only for session delivery purposes.

6.3 Payment Processors

Processing GCash, PayMaya, and bank transfer transactions requires sharing transaction amounts, reference numbers, and account identifiers with regulated payment service providers in the Philippines. These entities are independently regulated by the Bangko Sentral ng Pilipinas (BSP) and operate under their own privacy obligations.

6.4 Identity Verification Services

KYC document images and identity data may be processed by PAGCOR-approved third-party eKYC providers for automated document authentication and liveness checking. These providers are contractually prohibited from retaining your data beyond the verification process.

6.5 Fraud Detection Services

Device fingerprints, IP addresses, and behavioural event data may be shared with fraud prevention platforms to identify account compromise attempts, automated bot activity, and multi-accounting patterns. No sensitive personal data (such as ID document images) is shared for this purpose.

6.6 Professional Advisers

In the context of legal proceedings, regulatory investigations, or business transactions, we may disclose personal data to legal counsel, auditors, or other professional advisers under strict confidentiality obligations.

7. Cookies and Tracking Technologies

7.1 What Cookies We Use

fb7772 uses the following categories of cookies on the Platform:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens and security cookies that maintain your logged-in state. They cannot be disabled without preventing Platform use.
• Functional Cookies: Remember your preferences, such as language settings, game lobby layout preferences, and notification settings. Disabling these does not prevent Platform use but may affect your experience.
• Analytics Cookies: Collect anonymised data about how players navigate the Platform (page views, session duration, feature engagement). This helps us improve the Platform. Analytics data is aggregated and does not identify individual users.
• Fraud Prevention Cookies: Support our security systems in detecting suspicious activity, automated access, and multi-accounting. These are classified as strictly necessary given our PAGCOR compliance obligations.

7.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging in to the Platform. For details on managing cookies in popular Philippine browsers such as Chrome for Android and Safari on iOS, refer to the help documentation for your browser of choice.

8. Data Retention

We retain personal data for the periods set out below, after which data is securely deleted or anonymised. Where multiple retention obligations apply, the longer period governs.

9. Security Measures

Our technical security measures include:

• 256-bit TLS encryption for all data in transit between your device and our servers
• AES-256 encryption for personal data stored at rest in our databases
• Bcrypt hashing with salting for all stored passwords — we cannot retrieve your password in plain text
• Two-factor authentication (2FA) via SMS OTP, available to all Players and required for staff system access
• Automated real-time monitoring for unusual access patterns and credential stuffing attempts
• Regular penetration testing by independent cybersecurity firms
• Strict role-based access controls — staff access only the data needed for their specific function

9.1 Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, fb7772 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, in accordance with NPC Circular 16-03. Affected Players will be notified directly within a reasonable period where the breach poses a high risk to their rights.

10. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 and NPC implementing rules, you hold the following rights in relation to your personal data held by fb7772:

1. Right to be Informed: You have the right to know that fb7772 is collecting your personal data, the purposes for which it will be used, and the parties to whom it may be disclosed. This Privacy Policy fulfils that obligation.
2. Right to Access: You may request a copy of the personal data fb7772 holds about you. We will provide this in a structured, commonly used format within 30 calendar days of a verified request.
3. Right to Correction: If any personal data we hold about you is inaccurate, incomplete, or outdated, you may request that we correct it. You can update most profile data directly in Account Settings; for KYC data corrections, please contact our Data Protection Officer.
4. Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis applies. Note that AMLA and PAGCOR retention obligations may prevent full erasure of certain data until the mandatory retention period expires.
5. Right to Object: You may object to processing based on legitimate interest, including profiling for responsible gaming monitoring. fb7772 will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
6. Right to Data Portability: You may request that fb7772 transmit your personal data to another controller in a structured, machine-readable format where technically feasible and where processing is based on consent or contract performance.
7. Right to Lodge a Complaint: If you believe fb7772 has processed your personal data in violation of RA 10173, you may file a complaint directly with the National Privacy Commission (NPC) through the NPC's official complaint channels. fb7772 will cooperate fully with any NPC investigation.

10.1 How to Exercise Your Rights

To exercise any of the rights above, submit a written request to our Data Protection Officer at [email protected]. We may need to verify your identity before processing the request. We will respond within 30 calendar days and will notify you if an extension is required.

11. Minors and Age Restriction

fb7772 does not knowingly collect or process personal data from individuals under the age of 21. If we discover that a Player Account has been created by or on behalf of a person under 21, we will immediately close that account and delete any associated personal data, subject to any mandatory retention obligations imposed by PAGCOR or AMLA.

If you are a parent or guardian and believe that a minor has registered an account on fb7772, please contact our Data Protection Officer at [email protected] immediately. We will investigate and take appropriate action within 72 hours.

12. Cross-Border Data Transfers

Some of fb7772's service providers and game platform partners are located outside the Philippines — primarily in other parts of Southeast Asia, Europe, and the Americas. Where personal data is transferred to recipients in countries without equivalent data protection laws, fb7772 ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by the NPC or equivalent regulatory authority;
• Binding corporate rules (where applicable for group companies);
• Explicit consent, where the transfer is necessary to perform the contract with you and no other safeguard applies.

Primary data hosting for fb7772 is conducted within facilities in the Philippines or in ASEAN jurisdictions with adequate data protection frameworks. You may request information about specific transfer safeguards by contacting our Data Protection Officer.

13. Changes to This Privacy Policy

fb7772 may update this Privacy Policy from time to time to reflect changes in our data processing practices, new regulatory requirements, or improvements to our privacy controls. Material changes — those that affect your rights or the way we use your data in a significant way — will be communicated to registered Players via email at least fourteen (14) days before the updated Policy takes effect.

Minor updates that do not materially affect your rights (such as formatting corrections or clarifications of existing practices) may be made without advance notice. The effective date displayed at the top of this page will always reflect when the current version came into force. We recommend checking this page periodically.

Continued use of the Platform after the effective date of an updated Privacy Policy constitutes your acknowledgment of the updated terms. If you do not accept material changes to this Policy, you must close your account before the effective date.

14. Contact & Data Protection Officer

For any questions, requests, or concerns regarding this Privacy Policy or fb7772's data processing practices, please contact our Data Protection Officer:

• Role: Data Protection Officer, fb7772
• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 via the chat widget on the Platform

We aim to acknowledge all data subject requests within three (3) business days and to provide a substantive response within thirty (30) calendar days. If your request is complex or involves a large volume of data, we will notify you of any extension within the initial 30-day period.

If you remain unsatisfied after fb7772's response, you may escalate your complaint to the National Privacy Commission of the Philippines (NPC) through the NPC's official complaint submission process.