Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how z8777 ("z8777," "we," "us," or "our") collects, uses, stores, discloses, and otherwise processes the personal information of individuals ("Players," "Users," or "you") who access or use the z8777 online gaming platform at z8777.vip and its associated services (collectively, the "Platform").

z8777 is committed to protecting the privacy and personal data of all Filipino players in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission of the Philippines ("NPC").

By registering an account on z8777 or otherwise using the Platform, you acknowledge that you have read, understood, and consent to the data processing practices described in this Policy. If you do not agree to this Policy, you must not use the z8777 Platform.

This Policy should be read together with z8777's Terms and Conditions, which govern the overall contractual relationship between you and z8777.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, z8777 acts as the personal information controller in respect of the personal data of Players collected through the Platform. z8777 determines the purposes and means by which your personal data is processed.

You may contact z8777's designated Data Protection Officer (DPO) for privacy-related inquiries, data subject requests, or complaints at:

[email protected]
Please use the subject line "Data Privacy Request" for all data subject requests to ensure prompt handling.

3. Personal Data We Collect

z8777 collects the following categories of personal data from Players:

z8777 does not collect full payment card numbers, CVV codes, or online banking credentials. Payment transactions are processed through third-party payment service providers (GCash, PayMaya, BPI, BDO, Metrobank, UnionBank) who maintain their own data security and privacy standards.

4. Purpose & Legal Basis for Processing

z8777 processes your personal data for the following purposes, each supported by an identified legal basis under the Data Privacy Act of 2012:

• Account Registration and Management: To create and maintain your z8777 account, verify your identity, and provide access to Platform services. Legal basis: performance of contract; compliance with legal obligation (KYC/AML).
• Identity and Age Verification (KYC): To verify that you are 21 years of age or older and that your identity matches your registered account details, as required by PAGCOR regulations and Philippine AML law. Legal basis: compliance with legal obligation.
• Payment Processing: To process deposits, withdrawals, and refunds via your chosen Philippine payment method. Legal basis: performance of contract.
• Fraud Prevention and AML Compliance: To detect, prevent, and report suspicious transactions, identity fraud, and money laundering activity in accordance with Republic Act 9160 (Anti-Money Laundering Act), as amended. Legal basis: compliance with legal obligation; legitimate interests.
• Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling, apply responsible gaming tools, and comply with PAGCOR responsible gaming requirements. Legal basis: compliance with legal obligation; legitimate interests.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance. Legal basis: performance of contract; legitimate interests.
• Platform Improvement: To analyze usage patterns, identify technical issues, and improve the z8777 gaming experience. Legal basis: legitimate interests.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about z8777 products — subject to your marketing preferences and the right to withdraw consent at any time. Legal basis: consent.
• Regulatory Reporting: To fulfill mandatory reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the NPC, and other Philippine government agencies. Legal basis: compliance with legal obligation.

5. Disclosure and Sharing of Personal Data

z8777 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Service Providers: GCash (Mynt – Globe Fintech Innovations), PayMaya (Maya Philippines), BPI, BDO, Metrobank, and UnionBank — solely to process financial transactions on your account;
• KYC and Identity Verification Providers: Third-party identity verification technology providers used to verify documents submitted during KYC;
• Game Content Providers: Licensed third-party game studios (e.g., JILI, PG Soft, Spadegaming) who may receive technical session data necessary to facilitate gameplay — no personally identifying financial data is shared;
• Regulatory and Law Enforcement Authorities: PAGCOR, AMLC, the NPC, the National Bureau of Investigation (NBI), Philippine National Police (PNP), or other competent Philippine government agencies — where disclosure is required by law, court order, or regulatory direction;
• Professional Advisors: Legal counsel, auditors, and accountants engaged by z8777, under strict confidentiality obligations;
• IT Infrastructure Providers: Cloud hosting and cybersecurity service providers who process data on z8777's behalf under data processing agreements that require compliance with the DPA.

All third parties to whom z8777 discloses personal data are required to handle such data in accordance with applicable Philippine data protection laws and are prohibited from using your data for any purpose beyond that for which it was shared.

6. Data Retention

z8777 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: retained for a minimum of five (5) years following account closure, as required by Philippine AML regulations;
• Transaction and financial records: retained for a minimum of five (5) years following the date of each transaction, in compliance with the Anti-Money Laundering Act;
• KYC documents: retained for a minimum of five (5) years following account closure or last transaction;
• Customer support records: retained for three (3) years following resolution of the relevant inquiry or complaint;
• Marketing preferences and consent records: retained for the duration of the account plus three (3) years to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification. Data subject to ongoing regulatory investigation or legal proceedings may be retained beyond standard periods until such matters are resolved.

7. Data Security

z8777 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, destruction, or accidental loss. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the z8777 Platform;
• Encryption at rest for sensitive personal data stored in z8777 databases;
• Role-based access controls ensuring that only authorized z8777 personnel with a legitimate need can access personal data;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Regular security vulnerability assessments and penetration testing of the Platform;
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

In the event of a personal data breach that is likely to result in harm to you, z8777 will notify the NPC within seventy-two (72) hours of becoming aware of the breach and will notify affected Players without undue delay, as required by the DPA and NPC Circular No. 16-03.

While z8777 takes data security seriously, no system is completely impenetrable. You are responsible for maintaining the confidentiality of your z8777 account credentials and for notifying z8777 immediately if you suspect unauthorized access to your account.

8. Cookies & Tracking Technologies

z8777 uses cookies and similar tracking technologies (collectively, "Cookies") to operate the Platform, enhance your user experience, and support analytics and security functions. The following categories of Cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function — including session authentication, security tokens, and load balancing. Cannot be disabled without impacting Platform functionality;
• Performance / Analytics Cookies: Used to understand how Players navigate the Platform, which pages are most visited, and where technical errors occur. Data collected is aggregated and not individually identified;
• Functional Cookies: Remember your preferences (e.g., language, preferred game lobby view) to personalize your z8777 experience;
• Security Cookies: Detect fraudulent logins, bot activity, and other security threats.

z8777 does not use third-party advertising cookies or cross-site tracking cookies. You may manage Cookie preferences through your browser settings. Disabling strictly necessary Cookies will impair Platform functionality and may prevent successful login.

9. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by z8777. To exercise any of these rights, contact z8777's Data Protection Officer at [email protected] with the subject line "Data Privacy Request".

z8777 will respond to verified data subject requests within thirty (30) calendar days of receipt. Complex requests may require an extension of up to an additional thirty (30) days, in which case you will be notified.

10. Minors and Age Restriction

The z8777 Platform is strictly for individuals aged 21 years or older. z8777 does not knowingly collect or process personal data from individuals under 21 years of age. If z8777 discovers that personal data has been collected from an underage individual, the relevant account will be immediately suspended, all funds will be handled in accordance with applicable regulations, and the personal data will be deleted as soon as legally permissible.

If you are a parent or guardian and believe that your child has accessed the z8777 Platform or provided personal data without your consent, please contact z8777 support immediately at [email protected].

11. Cross-Border Data Transfers

The z8777 Platform is hosted on cloud infrastructure that may process certain data in data centers located outside the Philippines (for example, for redundancy or disaster recovery purposes). Where personal data is transferred outside the Philippines, z8777 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections afforded under the DPA — including contractual clauses that bind overseas processors to DPA-equivalent standards, as required under NPC Advisory Opinion guidance.

z8777 does not transfer personal data to jurisdictions that have not been assessed as providing adequate data protection, without implementing appropriate additional safeguards. Third-party game providers who receive technical session data are also subject to contractual data processing obligations equivalent to Philippine DPA requirements.

12. Changes to This Privacy Policy

z8777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, NPC issuances, or z8777's data processing practices. Where changes are material — meaning they significantly affect your rights or how your data is used — z8777 will notify you via the email address registered on your account or through a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the z8777 Platform following notification of material changes constitutes acceptance of the revised Policy.

13. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or z8777's data processing practices, please contact:

z8777 Data Protection Officer
Email: [email protected]
Subject line: "Data Privacy Request"

If you are not satisfied with z8777's response to your privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.