yyy7 Privacy Policy

1 Introduction

yyy7 ("yyy7," "the Company," "we," "us," or "our") operates the online gaming and sports betting platform available at yyy7.asia ("the Platform"). The Platform provides Filipino players with access to a comprehensive portfolio of online casino games, sports betting markets, bingo, fishing arcade games, and Plinko, in accordance with applicable PAGCOR licensing requirements.

yyy7 takes the privacy of its players and website visitors seriously. As a platform primarily serving users in the Philippines, we are committed to full compliance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR") issued by the National Privacy Commission ("NPC").

This Privacy Policy describes the types of personal data we collect from players who register accounts on yyy7, visit yyy7.asia, or otherwise interact with our support team; the purposes for which we process that data; the third parties with whom we may share it; how long we keep it; and the rights you hold as a data subject under Philippine law. By registering an account on yyy7 or by continuing to use the Platform after this policy is published, you acknowledge that you have read and understood this Privacy Policy.

If you do not agree with the practices described herein, you must not register an account or submit personal data through the Platform. You may contact our Data Protection Officer (see Section 15) with any questions before deciding whether to proceed.

2 Data Controller Information

Under the Philippine Data Privacy Act, the entity that determines the purposes and means of processing personal data is referred to as the "personal information controller" (PIC). For all personal data collected through yyy7.asia:

yyy7 has appointed a Data Protection Officer (DPO) in accordance with Section 21 of the DPA IRR. The DPO is responsible for ensuring the Platform's processing activities comply with the DPA and for receiving data subject requests and complaints. Contact details for the DPO are provided in Section 15.

3 Personal Data We Collect

yyy7 collects the following categories of personal data, depending on how you interact with the Platform:

• Philippine mobile number (serves as your yyy7 account identifier);
• Date of birth (to verify compliance with the 21+ age requirement);
• Password (stored in hashed, non-reversible format — never in plaintext);
• Username or display name (if applicable);
• Referral code or affiliate identifier (if applicable).

• Full legal name as appearing on a valid Philippine government-issued ID;
• Identification document type and number (PhilSys, UMID, driver's license, or passport);
• Copy of identification document (front and back);
• Selfie photograph with identification document;
• Proof of address (utility bill or bank statement) — required for enhanced verification only;
• Source of funds documentation — required for high-volume accounts or PAGCOR compliance purposes.

• GCash, PayMaya, or other e-wallet account numbers linked to your yyy7 account;
• Philippine bank account details (BPI, BDO, UnionBank) where applicable;
• USDT TRC20 wallet addresses (where used);
• Transaction history: deposits, withdrawals, dates, amounts, and payment method used;
• Bonus credits received, wagering activity, and resulting balances.

• Games played, bet amounts, game outcomes, and session durations;
• Sports markets wagered on (PBA, NBA, UFC, football leagues, etc.);
• Responsible gaming settings activated (deposit limits, self-exclusion status, etc.);
• Customer support interaction transcripts.

• IP address and approximate geolocation derived from IP;
• Device type, operating system, browser type, and version;
• Session identifiers, login timestamps, and yyy7 platform activity logs;
• Cookie and similar tracking technology data (detailed in Section 10).

4 How We Collect Personal Data

yyy7 collects personal data through the following channels and mechanisms:

• Direct provision by the data subject: Data you supply during account registration, KYC document upload, deposit and withdrawal requests, live chat support interactions, and any promotional opt-in forms;
• Automatic collection through platform use: Technical and device data is automatically generated and logged each time you access yyy7.asia — including IP address, session identifiers, activity logs, and game interaction records;
• Cookies and tracking technologies: yyy7 uses first-party cookies, session cookies, and limited analytics tools to maintain session continuity, detect fraud, and improve platform performance (see Section 10);
• Third-party payment processors: When you deposit via GCash, Maya, BPI, BDO, UnionBank, or 7-Eleven Cliqq, those providers transmit transaction confirmation data to yyy7 to verify fund receipt; and
• Game providers: Third-party game studios (such as JILI, Pragmatic Play, Evolution) transmit game session data to yyy7 to calculate outcomes, settle bets, and maintain game integrity records.

5 Purposes of Processing

yyy7 processes personal data for the following specific, legitimate purposes:

• Creating, managing, and maintaining your yyy7 player account;
• Processing deposits and withdrawals through Philippine payment channels (GCash, Maya, BPI, BDO, UnionBank, Coins.ph, USDT TRC20);
• Settling game outcomes, calculating winnings, and maintaining accurate account balances;
• Providing customer support and resolving account-related inquiries and disputes.

• Verifying player identity and age (21+ requirement) under PAGCOR regulations;
• Conducting ongoing Anti-Money Laundering (AML) monitoring in compliance with Republic Act No. 9160 (Anti-Money Laundering Act) as amended;
• Maintaining transaction records for regulatory audit and reporting purposes;
• Responding to lawful requests from PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine authorities.

• Detecting and preventing unauthorized access, account takeover, and identity theft;
• Identifying and blocking collusion, multi-accounting, bonus abuse, and other prohibited conduct;
• Maintaining IP-level and device-level session security controls.

• Administering deposit limits, loss limits, session controls, and self-exclusion tools;
• Monitoring account activity for patterns consistent with problem gambling;
• Contacting players who have activated responsible gaming controls to provide support information.

• Sending promotional SMS notifications about yyy7 bonuses, free spins, and deposit offers — only where you have provided explicit consent;
• Personalizing your yyy7 experience by surfacing game recommendations based on your play history.

You may withdraw consent for marketing communications at any time by contacting yyy7 support. Withdrawal of marketing consent does not affect the lawfulness of processing prior to withdrawal, nor does it affect processing for non-marketing purposes.

6 Legal Basis for Processing

Under Section 12 of the Philippine Data Privacy Act, personal information may be processed lawfully on the following bases. yyy7 relies on the following legal grounds:

7 Data Sharing & Disclosure

yyy7 may disclose your personal data to the following categories of recipients:

yyy7 is legally obligated to disclose player data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and other Philippine government agencies where required by applicable law or pursuant to a valid legal order. Disclosure in these circumstances does not require player consent.

To process deposits and withdrawals, yyy7 shares necessary transaction data with GCash (Globe Fintech Innovations), PayMaya Philippines, BPI, BDO Unibank, UnionBank of the Philippines, ECPay (7-Eleven Cliqq), Coins.ph, and the TRON network (for USDT TRC20 transactions). Each of these processors operates under their own privacy frameworks and applicable Philippine financial regulations.

Third-party game studios — including JILI Games, Pragmatic Play, PG Soft, Evolution Gaming, Ezugi, Spribe, and Hacksaw Gaming — receive player session identifiers and game interaction data necessary to deliver game content, settle outcomes, and detect cheating. These providers operate under data processing agreements with yyy7 that restrict use of player data to the specified purpose.

yyy7 may engage third-party KYC technology providers to assist with automated identity document verification and liveness checks. Any such provider is bound by a data processing agreement aligned with RA 10173 requirements and PAGCOR compliance standards.

yyy7 engages cloud infrastructure, content delivery, DDoS protection, and cybersecurity vendors to maintain platform availability and security. These providers access technical data only to the extent necessary to perform contracted services and are bound by confidentiality and data security obligations.

8 Data Retention

yyy7 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

Upon expiry of the applicable retention period, yyy7 will securely delete or anonymise the data in a manner that renders it permanently unidentifiable. Where deletion is not technically feasible within normal operational systems (e.g., encrypted backup archives), yyy7 will isolate and protect the data until deletion is possible.

9 Security Measures

yyy7 implements technical and organisational security measures proportionate to the risks presented by its processing activities. These measures include:

• Transport Layer Security (TLS 1.3): All data transmitted between players and yyy7.asia is encrypted in transit using TLS 1.3 with a valid SSL certificate. HTTPS is enforced sitewide;
• Password hashing: Player passwords are stored using bcrypt or equivalent one-way hashing algorithms. yyy7 cannot retrieve your plaintext password under any circumstances;
• Data encryption at rest: KYC documents, financial records, and sensitive account data are stored in encrypted form using AES-256 or equivalent;
• Access controls: Internal access to player data is restricted on a strict need-to-know basis, with role-based access controls and multi-factor authentication required for all privileged system access;
• Intrusion detection: Real-time monitoring, DDoS protection, and web application firewall (WAF) controls protect the Platform against external threats;
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their yyy7 accounts via OTP to their registered Philippine mobile number; and
• Security audits: yyy7 conducts periodic internal security reviews and engages third-party penetration testing services consistent with industry best practices.

10 Cookies & Tracking Technologies

yyy7.asia uses cookies and similar technologies to operate the Platform, maintain session security, and understand how players use the site. We do not use third-party advertising cookies or cross-site tracking networks.

You can manage cookie preferences through your browser settings. Blocking essential cookies may impair or prevent your ability to log in to yyy7 and use the Platform. Blocking optional analytics or preference cookies will not affect your ability to play games or conduct transactions.

yyy7 does not use Google Analytics, Meta Pixel, or other advertising network tracking scripts. Any analytics tools in use are self-hosted or operate under data processing agreements that restrict data use to Platform improvement purposes only.

11 Your Data Subject Rights

Under the Philippine Data Privacy Act (RA 10173), all individuals whose personal data is processed by yyy7 have the following rights. These rights can be exercised by contacting the yyy7 Data Protection Officer (see Section 15).

To exercise any of these rights, submit a written request to the yyy7 Data Protection Officer at the contact details in Section 15. yyy7 will respond within thirty (30) calendar days of receipt of a verifiable request. Where the request is complex or numerous, we may extend this period by a further thirty (30) days with notice to you. There is no fee for exercising data subject rights unless requests are manifestly unfounded or repetitive.

If you are not satisfied with yyy7's response to a data subject rights request, or if you believe yyy7 has violated your privacy rights, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines through the NPC's official channels.

12 Minors & Age Policy

During the account registration process, all players are required to confirm that they are at least 21 years old. KYC identity verification — which includes submission of a government-issued ID showing date of birth — is used to confirm age compliance before withdrawal privileges are activated.

If yyy7 discovers that personal data has been collected from an individual under the age of 21, the following steps will be taken without delay: (a) the account will be permanently suspended; (b) all personal data associated with the account will be deleted to the extent not required for PAGCOR compliance reporting; (c) any deposits made will be reversed to the originating payment method; and (d) the matter may be reported to PAGCOR in accordance with licensing obligations.

Parents and guardians who believe a minor has registered on yyy7 are encouraged to contact the Data Protection Officer immediately using the contact details in Section 15.

13 Cross-Border Data Transfers

Some of yyy7's technical service providers — including cloud infrastructure vendors, content delivery networks, and game content providers — may process or store data in data centres located outside the Philippines. Where such cross-border data transfers occur, yyy7 ensures that:

• The recipient country provides an adequate level of data protection as assessed by the National Privacy Commission; or
• Appropriate safeguards are in place, including contractual clauses that impose data protection obligations on the recipient equivalent to those required under RA 10173; and
• The transfer is strictly limited to the data necessary to perform the contracted service.

Game providers such as JILI (Hong Kong), Pragmatic Play (Malta), PG Soft (Singapore), and Evolution Gaming (Latvia) are each subject to data protection frameworks in their respective jurisdictions, and their processing of yyy7 player session data is governed by data processing agreements aligned with RA 10173 requirements.

yyy7 does not transfer KYC identity documents or financial data outside the Philippines except where required to comply with a legal obligation imposed by Philippine or applicable foreign law.

14 Changes to This Privacy Policy

yyy7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our processing practices, applicable law (including NPC issuances), PAGCOR regulatory requirements, or operational changes to the Platform.

Material changes that significantly affect how we process your personal data — particularly changes that expand the categories of data collected, new purposes of processing, or changes to data sharing arrangements — will be communicated to registered players via notice on yyy7.asia or via SMS notification to your registered mobile number at least fourteen (14) days before taking effect.

Non-material amendments (typographical corrections, clarifications that do not alter substantive obligations, mandatory legal updates) may take effect immediately without prior notice. The "Last Updated" date at the top of this page will be revised upon each amendment.

Your continued use of yyy7 following publication of any amendment constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with an amended Privacy Policy, please contact us to close your account before the effective date of the change.

15 Contact & Data Protection Officer

For all questions, concerns, data subject rights requests, privacy complaints, or inquiries related to this Privacy Policy and yyy7's data processing practices, please contact:

When submitting a data subject rights request, please include: (a) your full name as registered on yyy7; (b) your registered Philippine mobile number; (c) a description of the right you are exercising and the specific data concerned; and (d) a copy of a valid government-issued ID for identity verification purposes. This is required to prevent fraudulent access to account data by unauthorised third parties.

If you are unsatisfied with yyy7's response to a privacy-related complaint, you may escalate the matter to the National Privacy Commission (NPC) of the Philippines through their official complaint submission process.