bup777 Privacy Policy

§01 Introduction & Scope

This Privacy Policy ("Policy") describes how bup777 ("bup777," "the Platform," "we," "us," or "our") collects, processes, stores, shares, and protects the personal data of individuals ("you," "Player," or "User") who access or use the bup777 website at bup777.net and all associated services, applications, games, and features.

This Policy applies to all personal data processing activities carried out by bup777 in connection with the operation of its online casino and sports betting platform in the Philippines. It covers data collected via the website, mobile-optimized browser sessions, customer support interactions, and any other channel through which you communicate with bup777.

By registering for a bup777 account, making a deposit, participating in any game or betting market, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. This Policy should be read alongside the bup777 Terms & Conditions.

§02 Data Controller Identity

bup777 acts as the data controller in respect of all personal data collected from players and website visitors in connection with the bup777 platform. As data controller, bup777 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

bup777 has appointed a Data Privacy Officer (DPO) responsible for overseeing compliance with RA 10173 and this Policy. The DPO can be contacted at the address specified in Section 14 of this Policy. Our DPO is the appropriate point of contact for any data privacy queries, access requests, or complaints.

bup777 operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to regulatory oversight by PAGCOR in respect of its data management practices as they relate to gaming operations and player protection.

§03 Data We Collect

3.1 Registration & Account Data

When you create a bup777 account, we collect the following information:

• Full legal name (as it appears on a government-issued ID)
• Date of birth (to verify the 21+ age requirement)
• Email address and mobile phone number
• Residential address (city, province, country)
• Username and encrypted password
• Preferred language and communication preferences

3.2 Identity Verification (KYC) Data

In compliance with PAGCOR's Know Your Customer requirements and the Philippine Anti-Money Laundering Act (AMLA), bup777 collects:

• Government-issued photo identification (Philippine National ID, passport, SSS ID, UMID, voter's ID, or driver's license)
• Secondary proof of address documentation where required
• Selfie or liveness verification images processed by our identity verification partner
• Source of funds declarations for accounts meeting specified deposit thresholds

3.3 Financial & Transaction Data

When you make deposits or withdrawals via GCash, PayMaya, BPI, BDO, or Metrobank, bup777 records:

• GCash or PayMaya account reference numbers (not full account credentials)
• Bank account name and last four digits where applicable
• Transaction amounts in Philippine Peso (PHP), timestamps, and reference IDs
• Deposit and withdrawal history across all payment methods

bup777 does not store full card numbers, CVV codes, or complete bank account numbers. Payment card processing is handled by PCI-DSS-certified third-party processors.

3.4 Gameplay & Betting Data

bup777 maintains a full record of your gaming activity, including:

• Games played, bet amounts, outcomes, and win/loss records
• Sports bets placed, markets selected, and settlement records
• Session duration, time of play, and frequency metrics
• Bonus credits claimed, wagering progress, and promotional participation history

3.5 Technical & Device Data

When you access bup777, our servers automatically collect:

• IP address and approximate geolocation (region/city level)
• Device type, operating system, and browser version
• Session tokens and authentication logs
• Pages visited, features accessed, and click-path analytics

3.6 Communications Data

When you contact bup777 customer support via live chat or email, we retain records of those communications, including the content of your messages and any attachments you provide, for the purpose of resolving your query and training our support staff.

§04 Legal Basis for Processing

bup777 processes your personal data on the following legal bases as recognized under RA 10173:

Processing Activity	Legal Basis
Creating and managing your player account	Performance of contract
Processing deposits and withdrawals	Performance of contract
Identity verification (KYC)	Legal obligation (PAGCOR / AMLA)
Anti-money laundering transaction monitoring	Legal obligation (RA 9160 / AMLA)
Fraud prevention and account security	Legitimate interest
Responsible gaming monitoring	Legal obligation (PAGCOR regulations)
Sending promotional communications	Consent (opt-in)
Analytics and platform improvement	Legitimate interest
Regulatory reporting to PAGCOR / NPC	Legal obligation

§05 How We Use Your Data

bup777 uses the personal data it collects for the following specific purposes:

• Account operation: Creating, authenticating, and maintaining your player account on bup777.net
• Transaction processing: Facilitating PHP deposits and withdrawals via your chosen payment method
• Identity & age verification: Confirming you meet the 21+ age requirement and verifying your identity in accordance with PAGCOR and AMLA obligations
• Customer support: Responding to queries, resolving disputes, and processing account requests submitted via live chat or email to [email protected]
• Platform personalization: Tailoring game recommendations, promotions, and interface language based on your activity and preferences
• Fraud and security: Detecting and preventing unauthorized account access, bonus abuse, money laundering, and other prohibited conduct
• Responsible gaming: Monitoring play patterns that may indicate problem gambling behavior and applying protective limits or self-exclusion where required
• Marketing communications: Sending promotional emails and SMS messages where you have opted in to receive them; you may withdraw consent at any time
• Regulatory compliance: Filing reports with PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission as legally required
• Platform analytics: Understanding how players use bup777 to improve features, fix bugs, and optimize the user experience across Manila, Cebu, Davao, and Quezon City player bases

§06 Data Sharing & Disclosure

bup777 does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your data is shared only in the following contexts and with the following categories of recipients:

6.1 Service Providers & Sub-Processors

bup777 engages trusted third-party service providers who process personal data on our behalf, under contractual data processing agreements that require them to handle your data only as instructed by bup777 and in compliance with RA 10173. These include:

• Payment processors: Enabling GCash, PayMaya, BPI, BDO, and Metrobank transaction processing
• KYC / Identity verification providers: Validating government-issued ID documents and liveness checks
• Game content providers: Licensed studios providing slots, live casino, and other game titles available on the bup777 platform
• Cloud infrastructure providers: Hosting bup777's platform data in secure, access-controlled environments
• Anti-fraud analytics providers: Detecting and preventing fraudulent account activity and financial crime
• Customer support software providers: Operating the live chat system through which players communicate with our support team

6.2 Regulatory & Law Enforcement Authorities

bup777 is legally required to disclose certain player data to the following Philippine government bodies:

• PAGCOR: Our primary gaming regulator; entitled to request player account and transaction records as part of licensing compliance oversight
• Anti-Money Laundering Council (AMLC): bup777 reports covered transactions and suspicious transaction reports (STRs) as required under RA 9160 (AMLA) and its amendments
• National Privacy Commission (NPC): In the event of a personal data breach or upon regulatory inquiry
• Philippine law enforcement agencies: Where compelled by valid legal process such as a court order, subpoena, or warrant

6.3 Business Transfers

In the event that bup777 undergoes a merger, acquisition, or transfer of material assets, your personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections being maintained. You will be notified of any such change via the email address registered to your account.

§07 Data Retention

bup777 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The following retention periods apply:

Data Category	Retention Period	Basis
Active player account data	Duration of account + 5 years post-closure	AMLA / PAGCOR requirement
KYC identity documents	5 years from account closure	RA 9160 (AMLA)
Financial transaction records	5 years from transaction date	RA 9160 (AMLA)
Customer support communications	3 years from last interaction	Legitimate interest / dispute resolution
Marketing consent records	Until consent is withdrawn + 1 year	Accountability requirement
Technical logs and session data	90 days rolling	Security and fraud detection
Self-exclusion records	Duration of exclusion + 5 years	PAGCOR responsible gaming obligation

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized such that it can no longer be linked to an identifiable individual. Anonymized, aggregated data may be retained indefinitely for statistical and analytical purposes.

§08 Security Measures

bup777 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organizational measures to protect it against unauthorized access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your browser and bup777's servers is encrypted using TLS 1.2 or higher (HTTPS)
• Encryption at rest: Sensitive personal data stored in bup777's databases is encrypted using AES-256
• Access controls: Player account data is accessible only to bup777 staff with a verified business need; access is role-based and logged
• Two-factor authentication: bup777 offers optional two-factor authentication (2FA) for player accounts and mandates it for all internal staff accounts with data access privileges
• Vulnerability management: bup777 conducts regular penetration testing and security audits of its platform infrastructure
• Incident response: bup777 maintains a documented data breach response plan compliant with the NPC's 72-hour breach notification requirement under RA 10173
• Staff training: All bup777 employees handling personal data receive regular data privacy training covering RA 10173 requirements

§09 Cookies & Tracking Technologies

bup777 uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) on the bup777.net website. The following categories of cookies are used:

Cookie Type	Purpose	Can Be Disabled?
Strictly Necessary	Maintain your logged-in session, remember your language preference, enable secure authentication, and prevent cross-site request forgery (CSRF).	No — essential to platform function
Functional	Remember your game settings, lobby filters, and personalization choices between sessions.	Yes — platform may behave differently
Analytics	Understand how players navigate bup777, which features are most used, and where errors occur, so we can improve the platform.	Yes — via browser settings
Security / Fraud Detection	Identify unusual login patterns, detect bot activity, and flag suspicious session behavior for our fraud prevention systems.	No — essential to account security

You may manage or disable non-essential cookies by adjusting your browser settings. Most browsers allow you to refuse all cookies, accept only first-party cookies, or delete cookies when closing the browser. Note that disabling certain cookies may prevent some bup777 features from functioning correctly.

§10 Your Rights Under RA 10173

The Philippine Data Privacy Act of 2012 (Republic Act No. 10173) grants data subjects a set of enforceable rights regarding their personal data. As a bup777 player, you have the following rights:

• Right to be Informed: You have the right to know that bup777 is collecting your personal data, what data is collected, the purpose of collection, and how it will be used — all of which are described in this Policy.
• Right to Access: You may request a copy of the personal data bup777 holds about you at any time, including your account information, transaction history, and KYC records.
• Right to Rectification: If any personal data bup777 holds about you is inaccurate or incomplete, you have the right to have it corrected. You may update most account details directly in your bup777 account settings; for KYC data, contact support.
• Right to Erasure: You may request that bup777 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Note that bup777 is legally required to retain certain data (e.g., KYC and transaction records) for the periods specified in Section 7, and erasure requests cannot override those obligations.
• Right to Object: You have the right to object to bup777 processing your personal data based on legitimate interests, and to withdraw your consent to marketing communications at any time without penalty.
• Right to Data Portability: Where technically feasible, you may request a copy of the personal data you provided to bup777 in a structured, commonly used, machine-readable format.
• Right to File a Complaint: If you believe bup777 has violated your rights under RA 10173, you may file a complaint with the National Privacy Commission (NPC) via the NPC's official website or offices.

To exercise any of the above rights, contact bup777's Data Privacy Officer at [email protected] with the subject line "Data Privacy Request." bup 777 will respond to all verified data subject requests within 15 business days, consistent with the timeframes prescribed by the NPC.

§11 Minors & Age Restriction

bup777 is strictly an adults-only platform. In accordance with Philippine law and PAGCOR regulations, no person under the age of 21 years is permitted to register for or use a bup777 account. bup777 does not knowingly collect personal data from individuals below the age of 21.

If you are a parent or guardian and believe a minor in your care has registered on bup777, please contact us immediately at [email protected]. We will investigate and take appropriate action within 24 hours of receiving your report.

§12 Cross-Border Data Transfers

Some of bup777's service providers and sub-processors, including cloud infrastructure and game content providers, may process personal data outside the Philippines. Where such cross-border transfers occur, bup777 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under RA 10173.

These safeguards may include contractual data processing agreements incorporating the NPC's standard contractual clauses, transfers to jurisdictions recognized by the NPC as providing an adequate level of protection, or other appropriate transfer mechanisms. bup777 does not transfer personal data to jurisdictions that do not provide adequate data protection guarantees.

bup777's primary data storage infrastructure is located within the Asia-Pacific region. Personal data of Philippine players is not routinely transferred to jurisdictions outside ASEAN except where strictly necessary to provide a specific service (such as identity verification processed by a global KYC provider).

§13 Changes to This Policy

bup777 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable laws and regulations (including PAGCOR regulatory updates), new platform features, or guidance issued by the National Privacy Commission.

When we make material changes to this Policy — that is, changes that meaningfully affect how we collect, use, or share your personal data — we will notify you by:

• Posting the updated Policy on bup777.net with a revised "Last Updated" date clearly displayed at the top of the page
• Sending a notification to the email address registered to your bup777 account at least 14 days before the changes take effect
• Displaying a prominent in-platform notice on your next login session

Your continued use of the bup777 platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with a material change to this Policy, you should cease using bup777 and may request closure of your account by contacting customer support.

§14 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or bup777's data processing activities, please contact our Data Privacy Officer using the details below:

If you are not satisfied with bup777's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing RA 10173. The NPC accepts complaints from data subjects whose rights under the Data Privacy Act have been violated.

bup777 is committed to resolving all data privacy concerns promptly, transparently, and in accordance with applicable Philippine law. We take every complaint seriously and aim to address all valid concerns before escalation to the NPC becomes necessary.